@agentplat/trust 0.3.0-alpha.4

package/dist/policy.js

@@ -0,0 +1,598 @@
+import { deepFreeze, digestTrustJsonV1, TrustValidationError, } from "./canonical.js";
+import { assertExactKeys, assertIdentifier, assertNullableTrustDigest, assertSafeInteger, assertToken, assertTrustDigest, } from "./validation.js";
+const compareUnicode = (a, b) => a < b ? -1 : a > b ? 1 : 0;
+const assertOrdered = (values, label) => {
+    if (values.some((value, index) => index > 0 && values[index - 1] >= value))
+        throw new TrustValidationError(`${label} must be canonically ordered and unique`);
+};
+const assertBasisPoints = (value, label, minimum = 0) => {
+    assertSafeInteger(value, label, minimum);
+    if (value > 10_000)
+        throw new TrustValidationError(`${label} must be at most 10000`);
+};
+const ceiling = {
+    maximumPolicies: 16,
+    maximumDimensionsPerPolicy: 16,
+    maximumCriteriaPerPolicy: 64,
+    maximumSourceBindingsPerPolicy: 256,
+    maximumDependencyGroupsPerPolicy: 64,
+    maximumClaims: 4096,
+    maximumAttestations: 16384,
+    maximumChallenges: 4096,
+    maximumChallengesPerSourceScope: 64,
+    maximumPendingChallengesPerSourceScope: 16,
+    maximumRetractions: 4096,
+    maximumContentResolutions: 4096,
+    maximumContentInvalidations: 4096,
+    maximumCausalAuthorizations: 4096,
+    maximumDependencyBindingVersions: 256,
+    maximumPendingRecords: 1024,
+    maximumPendingAgeMs: 86_400_000,
+    maximumBasisReferencesPerRecord: 32,
+    maximumRelationshipDepth: 16,
+    maximumConsideredRecordsPerFusion: 1024,
+    maximumRetainedFusionDecisions: 4096,
+    maximumProfileHeads: 2048,
+    maximumProfileRevisionsPerHead: 32,
+    maximumQuarantineHeads: 2048,
+    maximumQuarantineRevisionsPerHead: 32,
+    maximumRecoveryDecisions: 4096,
+    maximumDiagnostics: 1024,
+    maximumRecordCanonicalBytes: 65_536,
+    maximumContentReferenceBytes: 4096,
+    maximumInlineSummaryBytes: 4096,
+    maximumStateCanonicalBytes: 67_108_864,
+    maximumEvidenceAgeMs: 2_592_000_000,
+    maximumReviewIntervalMs: 604_800_000,
+};
+const limitKeys = Object.keys(ceiling);
+function validateLimits(value, limits) {
+    assertExactKeys(value, limitKeys, "policy limits");
+    const candidate = value;
+    for (const key of limitKeys) {
+        assertSafeInteger(candidate[key], `limits.${key}`, 1);
+        if (candidate[key] > limits[key])
+            throw new TrustValidationError(`limits.${key} exceeds state limit`);
+    }
+    return structuredClone(candidate);
+}
+function validateBasisRules(value, label) {
+    if (!Array.isArray(value))
+        throw new TrustValidationError(`${label} must be an array`);
+    const rules = value.map((entry) => {
+        assertExactKeys(entry, ["kind", "referenceType", "minimumCount", "maximumCount"], label);
+        const rule = entry;
+        if (!["evidence", "mesh_record", "control_record", "external"].includes(rule.kind))
+            throw new TrustValidationError(`${label}.kind is invalid`);
+        assertToken(rule.referenceType, `${label}.referenceType`);
+        assertSafeInteger(rule.minimumCount, `${label}.minimumCount`);
+        assertSafeInteger(rule.maximumCount, `${label}.maximumCount`, 1);
+        if (rule.minimumCount > rule.maximumCount)
+            throw new TrustValidationError(`${label} count range is invalid`);
+        return structuredClone(rule);
+    });
+    assertOrdered(rules.map((rule) => `${rule.kind}\u0000${rule.referenceType}`), label);
+    return rules;
+}
+function validateClaimAuthority(value) {
+    assertExactKeys(value, ["allowedSourceRelations", "allowedBasisReferences"], "claimAuthority");
+    const rule = value;
+    if (!Array.isArray(rule.allowedSourceRelations))
+        throw new TrustValidationError("claimAuthority.allowedSourceRelations is invalid");
+    const relations = rule.allowedSourceRelations.map((entry) => {
+        if (![
+            "subject_self",
+            "work_assignee",
+            "work_owner",
+            "objective_observer",
+            "recovery_witness",
+            "local_system",
+        ].includes(entry))
+            throw new TrustValidationError("claimAuthority relation is invalid");
+        return entry;
+    });
+    assertOrdered(relations, "claimAuthority.allowedSourceRelations");
+    return {
+        allowedSourceRelations: relations,
+        allowedBasisReferences: validateBasisRules(rule.allowedBasisReferences, "claimAuthority.allowedBasisReferences"),
+    };
+}
+function validateChallengeAuthority(value) {
+    assertExactKeys(value, [
+        "allowedSourceRelations",
+        "allowedBasisReferences",
+        "requireResolvedBasis",
+    ], "challengeAuthority");
+    const rule = value;
+    if (rule.requireResolvedBasis !== true ||
+        !Array.isArray(rule.allowedSourceRelations))
+        throw new TrustValidationError("challengeAuthority is invalid");
+    const relations = rule.allowedSourceRelations.map((entry) => {
+        if (![
+            "target_author",
+            "subject_self",
+            "work_assignee",
+            "work_owner",
+            "objective_observer",
+            "recovery_witness",
+            "local_system",
+        ].includes(entry))
+            throw new TrustValidationError("challengeAuthority relation is invalid");
+        return entry;
+    });
+    assertOrdered(relations, "challengeAuthority.allowedSourceRelations");
+    return {
+        allowedSourceRelations: relations,
+        allowedBasisReferences: validateBasisRules(rule.allowedBasisReferences, "challengeAuthority.allowedBasisReferences"),
+        requireResolvedBasis: true,
+    };
+}
+function validateDimension(value, limits) {
+    const keys = [
+        "dimensionId",
+        "priorScoreBasisPoints",
+        "priorWeightBasisPoints",
+        "minimumUncertaintyBasisPoints",
+        "coverageTargetBasisPoints",
+        "decayIntervalMs",
+        "decayBasisPointsPerInterval",
+        "uncertaintyGrowthBasisPointsPerInterval",
+        "minimumRetainedWeightBasisPoints",
+        "contradictionUncertaintyBasisPointsPerClaim",
+        "maximumContradictionUncertaintyBasisPoints",
+        "degradedScoreAtOrBelowBasisPoints",
+        "degradedUncertaintyAtOrAboveBasisPoints",
+    ];
+    assertExactKeys(value, keys, "dimension");
+    const v = value;
+    assertToken(v.dimensionId, "dimensionId");
+    for (const key of keys
+        .slice(1)
+        .filter((candidate) => candidate !== "decayIntervalMs"))
+        assertBasisPoints(v[key], `dimension.${key}`);
+    assertBasisPoints(v.priorWeightBasisPoints, "dimension.priorWeightBasisPoints", 1);
+    assertBasisPoints(v.coverageTargetBasisPoints, "dimension.coverageTargetBasisPoints", 1);
+    assertSafeInteger(v.decayIntervalMs, "dimension.decayIntervalMs", 1);
+    if (v.decayIntervalMs > limits.maximumEvidenceAgeMs)
+        throw new TrustValidationError("dimension decay interval exceeds limit");
+    assertBasisPoints(v.contradictionUncertaintyBasisPointsPerClaim, "dimension.contradictionUncertaintyBasisPointsPerClaim", 1);
+    if (v.minimumRetainedWeightBasisPoints >
+        v.priorWeightBasisPoints ||
+        v.contradictionUncertaintyBasisPointsPerClaim >
+            v.maximumContradictionUncertaintyBasisPoints)
+        throw new TrustValidationError("dimension bounds are invalid");
+    return structuredClone(v);
+}
+function validateCriterion(value, dimensions, limits) {
+    const keys = [
+        "criterionId",
+        "dimensionId",
+        "satisfiedValueBasisPoints",
+        "violatedValueBasisPoints",
+        "inconclusiveValueBasisPoints",
+        "baseWeightBasisPoints",
+        "maximumClaimWeightBasisPoints",
+        "maximumSourceGroupContributionWeightBasisPoints",
+        "minimumSupportGroups",
+        "minimumSupportWeightBasisPoints",
+        "minimumContradictionGroups",
+        "minimumContradictionWeightBasisPoints",
+        "allowClaimSourceAttestation",
+        "contentRequired",
+        "quarantineEligible",
+        "recoveryEligible",
+        "maximumAgeMs",
+        "claimAuthority",
+        "challengeAuthority",
+        "challengeResolution",
+    ];
+    assertExactKeys(value, keys, "criterion");
+    const v = value;
+    assertToken(v.criterionId, "criterionId");
+    assertToken(v.dimensionId, "dimensionId");
+    if (!dimensions.has(v.dimensionId))
+        throw new TrustValidationError("criterion dimension is undeclared");
+    for (const key of [
+        "satisfiedValueBasisPoints",
+        "violatedValueBasisPoints",
+        "baseWeightBasisPoints",
+        "maximumClaimWeightBasisPoints",
+        "maximumSourceGroupContributionWeightBasisPoints",
+        "minimumSupportWeightBasisPoints",
+        "minimumContradictionWeightBasisPoints",
+    ])
+        assertBasisPoints(v[key], `criterion.${key}`);
+    for (const key of [
+        "minimumSupportWeightBasisPoints",
+        "minimumContradictionWeightBasisPoints",
+    ])
+        assertBasisPoints(v[key], `criterion.${key}`, 1);
+    if (v.inconclusiveValueBasisPoints !== null)
+        assertBasisPoints(v.inconclusiveValueBasisPoints, "criterion.inconclusiveValueBasisPoints");
+    for (const key of ["minimumSupportGroups", "minimumContradictionGroups"])
+        assertSafeInteger(v[key], `criterion.${key}`, 1);
+    if (v.baseWeightBasisPoints >
+        v.maximumClaimWeightBasisPoints ||
+        v.maximumSourceGroupContributionWeightBasisPoints >
+            v.maximumClaimWeightBasisPoints)
+        throw new TrustValidationError("criterion weight bounds are invalid");
+    for (const key of [
+        "allowClaimSourceAttestation",
+        "contentRequired",
+        "quarantineEligible",
+        "recoveryEligible",
+    ])
+        if (typeof v[key] !== "boolean")
+            throw new TrustValidationError(`criterion.${key} is invalid`);
+    assertSafeInteger(v.maximumAgeMs, "criterion.maximumAgeMs", 1);
+    if (v.maximumAgeMs > limits.maximumEvidenceAgeMs)
+        throw new TrustValidationError("criterion maximum age exceeds limit");
+    const challenge = v.challengeResolution;
+    assertExactKeys(challenge, [
+        "minimumCorroboratingGroups",
+        "minimumCorroboratingWeightBasisPoints",
+        "minimumOpposingGroups",
+        "minimumOpposingWeightBasisPoints",
+    ], "challengeResolution");
+    const c = challenge;
+    for (const key of ["minimumCorroboratingGroups", "minimumOpposingGroups"])
+        assertSafeInteger(c[key], `challengeResolution.${key}`, 1);
+    for (const key of [
+        "minimumCorroboratingWeightBasisPoints",
+        "minimumOpposingWeightBasisPoints",
+    ])
+        assertBasisPoints(c[key], `challengeResolution.${key}`, 1);
+    return {
+        ...structuredClone(v),
+        claimAuthority: validateClaimAuthority(v.claimAuthority),
+        challengeAuthority: validateChallengeAuthority(v.challengeAuthority),
+        challengeResolution: structuredClone(c),
+    };
+}
+function validateSourceBindings(value, groups) {
+    if (!Array.isArray(value))
+        throw new TrustValidationError("sourceBindings must be an array");
+    const bindings = value.map((entry) => {
+        assertExactKeys(entry, [
+            "sourceId",
+            "sourceKind",
+            "dependencyGroupId",
+            "roles",
+            "maximumWeightBasisPoints",
+            "validFromLogicalMs",
+            "validUntilLogicalMs",
+        ], "source binding");
+        const v = entry;
+        assertIdentifier(v.sourceId, "sourceId");
+        if (v.sourceKind !== "local" && v.sourceKind !== "peer")
+            throw new TrustValidationError("sourceKind is invalid");
+        assertToken(v.dependencyGroupId, "dependencyGroupId");
+        if (!groups.has(v.dependencyGroupId))
+            throw new TrustValidationError("source binding group is undeclared");
+        if (!Array.isArray(v.roles))
+            throw new TrustValidationError("source binding roles are invalid");
+        const roles = v.roles.map((role) => {
+            if (!["claim", "attest", "challenge", "observe"].includes(role))
+                throw new TrustValidationError("source binding role is invalid");
+            return role;
+        });
+        assertOrdered(roles, "source binding roles");
+        if (roles.length === 0)
+            throw new TrustValidationError("source binding roles are empty");
+        assertBasisPoints(v.maximumWeightBasisPoints, "source binding maximumWeightBasisPoints");
+        assertSafeInteger(v.validFromLogicalMs, "source binding validFromLogicalMs");
+        assertSafeInteger(v.validUntilLogicalMs, "source binding validUntilLogicalMs", 1);
+        if (v.validUntilLogicalMs <= v.validFromLogicalMs)
+            throw new TrustValidationError("source binding validity is invalid");
+        return {
+            ...structuredClone(v),
+            roles,
+        };
+    });
+    assertOrdered(bindings.map((b) => `${b.sourceKind}\u0000${b.sourceId}`), "sourceBindings");
+    return bindings;
+}
+function validateEligibility(value, dimensions, limits) {
+    if (!Array.isArray(value))
+        throw new TrustValidationError("eligibilityRules must be an array");
+    const rules = value.map((entry) => {
+        assertExactKeys(entry, ["ruleId", "maximumProfileAgeMs", "requirements"], "eligibility rule");
+        const v = entry;
+        assertToken(v.ruleId, "ruleId");
+        assertSafeInteger(v.maximumProfileAgeMs, "maximumProfileAgeMs", 1);
+        if (v.maximumProfileAgeMs > limits.maximumEvidenceAgeMs)
+            throw new TrustValidationError("maximumProfileAgeMs exceeds limit");
+        if (!Array.isArray(v.requirements) || v.requirements.length === 0)
+            throw new TrustValidationError("eligibility requirements are invalid");
+        const requirements = v.requirements.map((item) => {
+            assertExactKeys(item, [
+                "dimensionId",
+                "minimumScoreBasisPoints",
+                "maximumUncertaintyBasisPoints",
+            ], "eligibility requirement");
+            const q = item;
+            assertToken(q.dimensionId, "dimensionId");
+            if (!dimensions.has(q.dimensionId))
+                throw new TrustValidationError("eligibility dimension is undeclared");
+            assertBasisPoints(q.minimumScoreBasisPoints, "minimumScoreBasisPoints");
+            assertBasisPoints(q.maximumUncertaintyBasisPoints, "maximumUncertaintyBasisPoints");
+            return structuredClone(q);
+        });
+        assertOrdered(requirements.map((q) => q.dimensionId), "eligibility requirements");
+        return {
+            ruleId: v.ruleId,
+            maximumProfileAgeMs: v.maximumProfileAgeMs,
+            requirements,
+        };
+    });
+    assertOrdered(rules.map((rule) => rule.ruleId), "eligibilityRules");
+    return rules;
+}
+function validateQuarantine(value, dimensions, limits) {
+    assertExactKeys(value, ["enabled", "rules", "maximumActiveRecords"], "quarantinePolicy");
+    const v = value;
+    if (typeof v.enabled !== "boolean" || !Array.isArray(v.rules))
+        throw new TrustValidationError("quarantinePolicy is invalid");
+    assertSafeInteger(v.maximumActiveRecords, "maximumActiveRecords", 1);
+    if (v.maximumActiveRecords > limits.maximumQuarantineHeads)
+        throw new TrustValidationError("maximumActiveRecords exceeds limit");
+    const rules = v.rules.map((item) => {
+        assertExactKeys(item, [
+            "dimensionId",
+            "activationScoreAtOrBelowBasisPoints",
+            "minimumNegativeClaimSourceGroups",
+            "minimumNegativeWeightBasisPoints",
+            "reviewIntervalMs",
+        ], "quarantine rule");
+        const q = item;
+        assertToken(q.dimensionId, "dimensionId");
+        if (!dimensions.has(q.dimensionId))
+            throw new TrustValidationError("quarantine dimension is undeclared");
+        assertBasisPoints(q.activationScoreAtOrBelowBasisPoints, "activationScoreAtOrBelowBasisPoints");
+        assertSafeInteger(q.minimumNegativeClaimSourceGroups, "minimumNegativeClaimSourceGroups", 1);
+        assertBasisPoints(q.minimumNegativeWeightBasisPoints, "minimumNegativeWeightBasisPoints", 1);
+        assertSafeInteger(q.reviewIntervalMs, "reviewIntervalMs", 1);
+        if (q.reviewIntervalMs > limits.maximumReviewIntervalMs)
+            throw new TrustValidationError("review interval exceeds limit");
+        return structuredClone(q);
+    });
+    assertOrdered(rules.map((rule) => rule.dimensionId), "quarantine rules");
+    return {
+        enabled: v.enabled,
+        rules,
+        maximumActiveRecords: v.maximumActiveRecords,
+    };
+}
+function validateRecovery(value, dimensions, limits) {
+    assertExactKeys(value, ["rules"], "recoveryPolicy");
+    const v = value;
+    if (!Array.isArray(v.rules))
+        throw new TrustValidationError("recoveryPolicy rules are invalid");
+    const rules = v.rules.map((item) => {
+        assertExactKeys(item, [
+            "dimensionId",
+            "recoveryScoreAtOrAboveBasisPoints",
+            "maximumRecoveryUncertaintyBasisPoints",
+            "minimumRecoveryClaimSourceGroups",
+            "minimumRecoveryWeightBasisPoints",
+            "maximumRecoveryEvidenceAgeMs",
+        ], "recovery rule");
+        const q = item;
+        assertToken(q.dimensionId, "dimensionId");
+        if (!dimensions.has(q.dimensionId))
+            throw new TrustValidationError("recovery dimension is undeclared");
+        assertBasisPoints(q.recoveryScoreAtOrAboveBasisPoints, "recoveryScoreAtOrAboveBasisPoints");
+        assertBasisPoints(q.maximumRecoveryUncertaintyBasisPoints, "maximumRecoveryUncertaintyBasisPoints");
+        assertSafeInteger(q.minimumRecoveryClaimSourceGroups, "minimumRecoveryClaimSourceGroups", 1);
+        assertBasisPoints(q.minimumRecoveryWeightBasisPoints, "minimumRecoveryWeightBasisPoints", 1);
+        assertSafeInteger(q.maximumRecoveryEvidenceAgeMs, "maximumRecoveryEvidenceAgeMs", 1);
+        if (q.maximumRecoveryEvidenceAgeMs > limits.maximumEvidenceAgeMs)
+            throw new TrustValidationError("maximumRecoveryEvidenceAgeMs exceeds limit");
+        return structuredClone(q);
+    });
+    assertOrdered(rules.map((rule) => rule.dimensionId), "recovery rules");
+    return { rules };
+}
+export function validateEvidenceFusionPolicyV1(value, stateLimits = ceiling) {
+    const keys = [
+        "schemaVersion",
+        "policyId",
+        "policyVersion",
+        "parentPolicyDigest",
+        "mode",
+        "dimensions",
+        "criteria",
+        "sourceBindings",
+        "dependencyGroups",
+        "eligibilityRules",
+        "quarantinePolicy",
+        "recoveryPolicy",
+        "limits",
+        "diagnosticsPolicyId",
+        "redactionPolicyId",
+    ];
+    assertExactKeys(value, keys, "fusion policy");
+    const v = value;
+    if (v.schemaVersion !== 1 || (v.mode !== "observe" && v.mode !== "restrict"))
+        throw new TrustValidationError("fusion policy is invalid");
+    assertIdentifier(v.policyId, "policyId");
+    assertSafeInteger(v.policyVersion, "policyVersion", 1);
+    assertNullableTrustDigest(v.parentPolicyDigest, "parentPolicyDigest");
+    assertIdentifier(v.diagnosticsPolicyId, "diagnosticsPolicyId");
+    assertIdentifier(v.redactionPolicyId, "redactionPolicyId");
+    const limits = validateLimits(v.limits, stateLimits);
+    if (!Array.isArray(v.dimensions) ||
+        v.dimensions.length === 0 ||
+        v.dimensions.length > limits.maximumDimensionsPerPolicy)
+        throw new TrustValidationError("policy dimensions exceed limit");
+    const dimensions = v.dimensions.map((dimension) => validateDimension(dimension, limits));
+    assertOrdered(dimensions.map((d) => d.dimensionId), "dimensions");
+    const dimensionIds = new Set(dimensions.map((d) => d.dimensionId));
+    if (!Array.isArray(v.criteria) ||
+        v.criteria.length === 0 ||
+        v.criteria.length > limits.maximumCriteriaPerPolicy)
+        throw new TrustValidationError("policy criteria exceed limit");
+    const criteria = v.criteria.map((q) => validateCriterion(q, dimensionIds, limits));
+    assertOrdered(criteria.map((q) => q.criterionId), "criteria");
+    if (!Array.isArray(v.dependencyGroups) ||
+        v.dependencyGroups.length === 0 ||
+        v.dependencyGroups.length > limits.maximumDependencyGroupsPerPolicy)
+        throw new TrustValidationError("policy dependency groups exceed limit");
+    const groups = v.dependencyGroups.map((entry) => {
+        assertExactKeys(entry, [
+            "dependencyGroupId",
+            "maximumAttestationWeightPerClaimBasisPoints",
+            "maximumProfileWeightPerDimensionCriterionBasisPoints",
+        ], "dependency group");
+        const group = entry;
+        assertToken(group.dependencyGroupId, "dependencyGroupId");
+        assertBasisPoints(group.maximumAttestationWeightPerClaimBasisPoints, "maximumAttestationWeightPerClaimBasisPoints");
+        assertBasisPoints(group.maximumProfileWeightPerDimensionCriterionBasisPoints, "maximumProfileWeightPerDimensionCriterionBasisPoints");
+        return structuredClone(group);
+    });
+    assertOrdered(groups.map((g) => g.dependencyGroupId), "dependencyGroups");
+    if (!Array.isArray(v.sourceBindings) ||
+        v.sourceBindings.length > limits.maximumSourceBindingsPerPolicy)
+        throw new TrustValidationError("policy source bindings exceed limit");
+    const sourceBindings = validateSourceBindings(v.sourceBindings, new Set(groups.map((g) => g.dependencyGroupId)));
+    return deepFreeze({
+        schemaVersion: 1,
+        policyId: v.policyId,
+        policyVersion: v.policyVersion,
+        parentPolicyDigest: v.parentPolicyDigest,
+        mode: v.mode,
+        dimensions,
+        criteria,
+        sourceBindings,
+        dependencyGroups: groups,
+        eligibilityRules: validateEligibility(v.eligibilityRules, dimensionIds, limits),
+        quarantinePolicy: validateQuarantine(v.quarantinePolicy, dimensionIds, limits),
+        recoveryPolicy: validateRecovery(v.recoveryPolicy, dimensionIds, limits),
+        limits,
+        diagnosticsPolicyId: v.diagnosticsPolicyId,
+        redactionPolicyId: v.redactionPolicyId,
+    });
+}
+export const createEvidenceFusionPolicyV1 = validateEvidenceFusionPolicyV1;
+export function digestEvidenceFusionPolicyV1(value) {
+    return digestTrustJsonV1("policy", validateEvidenceFusionPolicyV1(value));
+}
+const policyRequired = new Set([
+    "content_resolver",
+    "causal_authority",
+    "mesh_ingress",
+    "mesh_eligibility",
+    "profile_resolver",
+    "model_boundary",
+    "action_dispatcher",
+    "message_dispatcher",
+]);
+const upstreamRequired = new Set([
+    "causal_authority",
+    "mesh_ingress",
+    "mesh_eligibility",
+    "verified_mesh_origin_verifier",
+    "model_boundary",
+    "action_dispatcher",
+    "message_dispatcher",
+]);
+const bindingKeys = [
+    "schemaVersion",
+    "bindingName",
+    "bindingVersion",
+    "parentBindingDigest",
+    "bindingKind",
+    "implementationId",
+    "implementationDigest",
+    "configurationDigest",
+    "policyDigest",
+    "subjectMappingDigest",
+    "upstreamBindingDigest",
+    "registeredAtLogicalMs",
+    "validFromLogicalMs",
+    "validUntilLogicalMs",
+    "bindingDigest",
+];
+function validateBinding(value, verifyDigest) {
+    assertExactKeys(value, bindingKeys, "dependency binding");
+    const v = value;
+    if (v.schemaVersion !== 1 ||
+        ![
+            "content_resolver",
+            "causal_authority",
+            "mesh_ingress",
+            "mesh_eligibility",
+            "profile_resolver",
+            "snapshot_protector",
+            "verified_mesh_origin_verifier",
+            "model_boundary",
+            "action_dispatcher",
+            "message_dispatcher",
+        ].includes(v.bindingKind))
+        throw new TrustValidationError("dependency binding kind is invalid");
+    assertIdentifier(v.bindingName, "bindingName");
+    assertSafeInteger(v.bindingVersion, "bindingVersion", 1);
+    assertNullableTrustDigest(v.parentBindingDigest, "parentBindingDigest");
+    assertIdentifier(v.implementationId, "implementationId");
+    assertTrustDigest(v.implementationDigest, "implementationDigest");
+    assertTrustDigest(v.configurationDigest, "configurationDigest");
+    assertNullableTrustDigest(v.policyDigest, "policyDigest");
+    assertNullableTrustDigest(v.subjectMappingDigest, "subjectMappingDigest");
+    assertNullableTrustDigest(v.upstreamBindingDigest, "upstreamBindingDigest");
+    assertSafeInteger(v.registeredAtLogicalMs, "registeredAtLogicalMs");
+    assertSafeInteger(v.validFromLogicalMs, "validFromLogicalMs");
+    if (v.validFromLogicalMs < v.registeredAtLogicalMs)
+        throw new TrustValidationError("binding validity predates registration");
+    if (v.validUntilLogicalMs !== null) {
+        assertSafeInteger(v.validUntilLogicalMs, "validUntilLogicalMs", 1);
+        if (v.validUntilLogicalMs <= v.validFromLogicalMs)
+            throw new TrustValidationError("binding validity is invalid");
+    }
+    const kind = v.bindingKind;
+    if (policyRequired.has(kind) !== (v.policyDigest !== null))
+        throw new TrustValidationError("binding policy nullability is invalid");
+    if (upstreamRequired.has(kind) && v.upstreamBindingDigest === null)
+        throw new TrustValidationError("binding upstream is required");
+    const binding = structuredClone(v);
+    if (verifyDigest) {
+        assertTrustDigest(binding.bindingDigest, "bindingDigest");
+        if (binding.bindingDigest !==
+            digestTrustJsonV1("dependency-binding", (() => {
+                const { bindingDigest: _digest, ...body } = binding;
+                return body;
+            })()))
+            throw new TrustValidationError("binding digest is invalid");
+    }
+    return deepFreeze(binding);
+}
+export function validateEvidenceTrustDependencyBindingV1(value) {
+    return validateBinding(value, true);
+}
+export function createEvidenceTrustDependencyBindingV1(input) {
+    const body = structuredClone(input);
+    const bindingDigest = digestTrustJsonV1("dependency-binding", body);
+    return validateBinding({ ...body, bindingDigest }, true);
+}
+export function resolveEvidenceTrustDependencyBindingV1(bindings, bindingDigest, logicalTimeMs) {
+    assertTrustDigest(bindingDigest, "bindingDigest");
+    if (logicalTimeMs !== undefined)
+        assertSafeInteger(logicalTimeMs, "logicalTimeMs");
+    const binding = bindings.find((candidate) => candidate.bindingDigest === bindingDigest) ??
+        null;
+    if (!binding ||
+        (logicalTimeMs !== undefined &&
+            (binding.validFromLogicalMs > logicalTimeMs ||
+                (binding.validUntilLogicalMs !== null &&
+                    logicalTimeMs >= binding.validUntilLogicalMs))))
+        return null;
+    return binding;
+}
+export function dependencyBindingHeadV1(binding) {
+    return {
+        bindingKind: binding.bindingKind,
+        bindingName: binding.bindingName,
+        bindingVersion: binding.bindingVersion,
+        bindingDigest: binding.bindingDigest,
+    };
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAkBxB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EACzB,iBAAiB,EACjB,WAAW,EACX,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,cAAc,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CACtD,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7B,MAAM,aAAa,GAAG,CAAC,MAAyB,EAAE,KAAa,EAAQ,EAAE;IACvE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC;QACxE,MAAM,IAAI,oBAAoB,CAC5B,GAAG,KAAK,yCAAyC,CAClD,CAAC;AACN,CAAC,CAAC;AACF,MAAM,iBAAiB,GAAG,CACxB,KAAc,EACd,KAAa,EACb,OAAO,GAAG,CAAC,EACL,EAAE;IACR,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,IAAK,KAAgB,GAAG,MAAM;QAC5B,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;AACrE,CAAC,CAAC;AACF,MAAM,OAAO,GAA0B;IACrC,eAAe,EAAE,EAAE;IACnB,0BAA0B,EAAE,EAAE;IAC9B,wBAAwB,EAAE,EAAE;IAC5B,8BAA8B,EAAE,GAAG;IACnC,gCAAgC,EAAE,EAAE;IACpC,aAAa,EAAE,IAAI;IACnB,mBAAmB,EAAE,KAAK;IAC1B,iBAAiB,EAAE,IAAI;IACvB,+BAA+B,EAAE,EAAE;IACnC,sCAAsC,EAAE,EAAE;IAC1C,kBAAkB,EAAE,IAAI;IACxB,yBAAyB,EAAE,IAAI;IAC/B,2BAA2B,EAAE,IAAI;IACjC,2BAA2B,EAAE,IAAI;IACjC,gCAAgC,EAAE,GAAG;IACrC,qBAAqB,EAAE,IAAI;IAC3B,mBAAmB,EAAE,UAAU;IAC/B,+BAA+B,EAAE,EAAE;IACnC,wBAAwB,EAAE,EAAE;IAC5B,iCAAiC,EAAE,IAAI;IACvC,8BAA8B,EAAE,IAAI;IACpC,mBAAmB,EAAE,IAAI;IACzB,8BAA8B,EAAE,EAAE;IAClC,sBAAsB,EAAE,IAAI;IAC5B,iCAAiC,EAAE,EAAE;IACrC,wBAAwB,EAAE,IAAI;IAC9B,kBAAkB,EAAE,IAAI;IACxB,2BAA2B,EAAE,MAAM;IACnC,4BAA4B,EAAE,IAAI;IAClC,yBAAyB,EAAE,IAAI;IAC/B,0BAA0B,EAAE,UAAU;IACtC,oBAAoB,EAAE,aAAa;IACnC,uBAAuB,EAAE,WAAW;CACrC,CAAC;AACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAoC,CAAC;AAE1E,SAAS,cAAc,CACrB,KAAc,EACd,MAA6B;IAE7B,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,IAAK,SAAS,CAAC,GAAG,CAAY,GAAG,MAAM,CAAC,GAAG,CAAC;YAC1C,MAAM,IAAI,oBAAoB,CAAC,UAAU,GAAG,sBAAsB,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,eAAe,CAAC,SAAS,CAAqC,CAAC;AACxE,CAAC;AACD,SAAS,kBAAkB,CACzB,KAAc,EACd,KAAa;IAEb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,eAAe,CACb,KAAK,EACL,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC,EACzD,KAAK,CACN,CAAC;QACF,MAAM,IAAI,GAAG,KAAgC,CAAC;QAC9C,IACE,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,QAAQ,CACjE,IAAI,CAAC,IAAc,CACpB;YAED,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;QAC7D,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;QAC1D,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC;QAC9D,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,EAAE,CAAC,CAAC,CAAC;QACjE,IAAK,IAAI,CAAC,YAAuB,GAAI,IAAI,CAAC,YAAuB;YAC/D,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;QACpE,OAAO,eAAe,CAAC,IAAI,CAAmC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,aAAa,CACX,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC,EAC9D,KAAK,CACN,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,sBAAsB,CAAC,KAAc;IAC5C,eAAe,CACb,KAAK,EACL,CAAC,wBAAwB,EAAE,wBAAwB,CAAC,EACpD,gBAAgB,CACjB,CAAC;IACF,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC;QAC7C,MAAM,IAAI,oBAAoB,CAC5B,kDAAkD,CACnD,CAAC;IACJ,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1D,IACE,CAAC;YACC,cAAc;YACd,eAAe;YACf,YAAY;YACZ,oBAAoB;YACpB,kBAAkB;YAClB,cAAc;SACf,CAAC,QAAQ,CAAC,KAAe,CAAC;YAE3B,MAAM,IAAI,oBAAoB,CAAC,oCAAoC,CAAC,CAAC;QACvE,OAAO,KAA+D,CAAC;IACzE,CAAC,CAAC,CAAC;IACH,aAAa,CAAC,SAAS,EAAE,uCAAuC,CAAC,CAAC;IAClE,OAAO;QACL,sBAAsB,EAAE,SAAS;QACjC,sBAAsB,EAAE,kBAAkB,CACxC,IAAI,CAAC,sBAAsB,EAC3B,uCAAuC,CACxC;KACF,CAAC;AACJ,CAAC;AACD,SAAS,0BAA0B,CAAC,KAAc;IAChD,eAAe,CACb,KAAK,EACL;QACE,wBAAwB;QACxB,wBAAwB;QACxB,sBAAsB;KACvB,EACD,oBAAoB,CACrB,CAAC;IACF,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,IACE,IAAI,CAAC,oBAAoB,KAAK,IAAI;QAClC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC;QAE3C,MAAM,IAAI,oBAAoB,CAAC,+BAA+B,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1D,IACE,CAAC;YACC,eAAe;YACf,cAAc;YACd,eAAe;YACf,YAAY;YACZ,oBAAoB;YACpB,kBAAkB;YAClB,cAAc;SACf,CAAC,QAAQ,CAAC,KAAe,CAAC;YAE3B,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,CAAC,CAAC;QAC3E,OAAO,KAAmE,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,aAAa,CAAC,SAAS,EAAE,2CAA2C,CAAC,CAAC;IACtE,OAAO;QACL,sBAAsB,EAAE,SAAS;QACjC,sBAAsB,EAAE,kBAAkB,CACxC,IAAI,CAAC,sBAAsB,EAC3B,2CAA2C,CAC5C;QACD,oBAAoB,EAAE,IAAI;KAC3B,CAAC;AACJ,CAAC;AACD,SAAS,iBAAiB,CACxB,KAAc,EACd,MAA6B;IAE7B,MAAM,IAAI,GAAG;QACX,aAAa;QACb,uBAAuB;QACvB,wBAAwB;QACxB,+BAA+B;QAC/B,2BAA2B;QAC3B,iBAAiB;QACjB,6BAA6B;QAC7B,yCAAyC;QACzC,kCAAkC;QAClC,6CAA6C;QAC7C,4CAA4C;QAC5C,mCAAmC;QACnC,yCAAyC;KAC1C,CAAC;IACF,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI;SACnB,KAAK,CAAC,CAAC,CAAC;SACR,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,iBAAiB,CAAC;QACvD,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;IAChD,iBAAiB,CACf,CAAC,CAAC,sBAAsB,EACxB,kCAAkC,EAClC,CAAC,CACF,CAAC;IACF,iBAAiB,CACf,CAAC,CAAC,yBAAyB,EAC3B,qCAAqC,EACrC,CAAC,CACF,CAAC;IACF,iBAAiB,CAAC,CAAC,CAAC,eAAe,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;IACrE,IAAK,CAAC,CAAC,eAA0B,GAAG,MAAM,CAAC,oBAAoB;QAC7D,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,CAAC,CAAC;IAC3E,iBAAiB,CACf,CAAC,CAAC,2CAA2C,EAC7C,uDAAuD,EACvD,CAAC,CACF,CAAC;IACF,IACG,CAAC,CAAC,gCAA2C;QAC3C,CAAC,CAAC,sBAAiC;QACrC,CAAC,CAAC,2CAAsD;YACtD,CAAC,CAAC,0CAAqD;QAE1D,MAAM,IAAI,oBAAoB,CAAC,8BAA8B,CAAC,CAAC;IACjE,OAAO,eAAe,CAAC,CAAC,CAAsC,CAAC;AACjE,CAAC;AACD,SAAS,iBAAiB,CACxB,KAAc,EACd,UAA+B,EAC/B,MAA6B;IAE7B,MAAM,IAAI,GAAG;QACX,aAAa;QACb,aAAa;QACb,2BAA2B;QAC3B,0BAA0B;QAC1B,8BAA8B;QAC9B,uBAAuB;QACvB,+BAA+B;QAC/B,iDAAiD;QACjD,sBAAsB;QACtB,iCAAiC;QACjC,4BAA4B;QAC5B,uCAAuC;QACvC,6BAA6B;QAC7B,iBAAiB;QACjB,oBAAoB;QACpB,kBAAkB;QAClB,cAAc;QACd,gBAAgB;QAChB,oBAAoB;QACpB,qBAAqB;KACtB,CAAC;IACF,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC1C,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,WAAqB,CAAC;QAC1C,MAAM,IAAI,oBAAoB,CAAC,mCAAmC,CAAC,CAAC;IACtE,KAAK,MAAM,GAAG,IAAI;QAChB,2BAA2B;QAC3B,0BAA0B;QAC1B,uBAAuB;QACvB,+BAA+B;QAC/B,iDAAiD;QACjD,iCAAiC;QACjC,uCAAuC;KACxC;QACC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI;QAChB,iCAAiC;QACjC,uCAAuC;KACxC;QACC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC,4BAA4B,KAAK,IAAI;QACzC,iBAAiB,CACf,CAAC,CAAC,4BAA4B,EAC9B,wCAAwC,CACzC,CAAC;IACJ,KAAK,MAAM,GAAG,IAAI,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;QACtE,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,IACG,CAAC,CAAC,qBAAgC;QAChC,CAAC,CAAC,6BAAwC;QAC5C,CAAC,CAAC,+CAA0D;YAC1D,CAAC,CAAC,6BAAwC;QAE7C,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,KAAK,MAAM,GAAG,IAAI;QAChB,6BAA6B;QAC7B,iBAAiB;QACjB,oBAAoB;QACpB,kBAAkB;KACnB;QACC,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,SAAS;YAC7B,MAAM,IAAI,oBAAoB,CAAC,aAAa,GAAG,aAAa,CAAC,CAAC;IAClE,iBAAiB,CAAC,CAAC,CAAC,YAAY,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAK,CAAC,CAAC,YAAuB,GAAG,MAAM,CAAC,oBAAoB;QAC1D,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,CAAC,CAAC,mBAAmB,CAAC;IACxC,eAAe,CACb,SAAS,EACT;QACE,4BAA4B;QAC5B,uCAAuC;QACvC,uBAAuB;QACvB,kCAAkC;KACnC,EACD,qBAAqB,CACtB,CAAC;IACF,MAAM,CAAC,GAAG,SAAoC,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,CAAC,4BAA4B,EAAE,uBAAuB,CAAC;QACvE,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,uBAAuB,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI;QAChB,uCAAuC;QACvC,kCAAkC;KACnC;QACC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,uBAAuB,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO;QACL,GAAG,eAAe,CAAC,CAAC,CAAC;QACrB,cAAc,EAAE,sBAAsB,CAAC,CAAC,CAAC,cAAc,CAAC;QACxD,kBAAkB,EAAE,0BAA0B,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACpE,mBAAmB,EAAE,eAAe,CAClC,CAAC,CAC6D;KACpC,CAAC;AACjC,CAAC;AACD,SAAS,sBAAsB,CAC7B,KAAc,EACd,MAA2B;IAE3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,MAAM,IAAI,oBAAoB,CAAC,iCAAiC,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACnC,eAAe,CACb,KAAK,EACL;YACE,UAAU;YACV,YAAY;YACZ,mBAAmB;YACnB,OAAO;YACP,0BAA0B;YAC1B,oBAAoB;YACpB,qBAAqB;SACtB,EACD,gBAAgB,CACjB,CAAC;QACF,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,UAAU,KAAK,OAAO,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM;YACrD,MAAM,IAAI,oBAAoB,CAAC,uBAAuB,CAAC,CAAC;QAC1D,WAAW,CAAC,CAAC,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,iBAA2B,CAAC;YAC5C,MAAM,IAAI,oBAAoB,CAAC,oCAAoC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YACzB,MAAM,IAAI,oBAAoB,CAAC,kCAAkC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACjC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAc,CAAC;gBACvE,MAAM,IAAI,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;YACnE,OAAO,IAAgD,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,aAAa,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,IAAI,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;QACnE,iBAAiB,CACf,CAAC,CAAC,wBAAwB,EAC1B,yCAAyC,CAC1C,CAAC;QACF,iBAAiB,CACf,CAAC,CAAC,kBAAkB,EACpB,mCAAmC,CACpC,CAAC;QACF,iBAAiB,CACf,CAAC,CAAC,mBAAmB,EACrB,oCAAoC,EACpC,CAAC,CACF,CAAC;QACF,IAAK,CAAC,CAAC,mBAA8B,IAAK,CAAC,CAAC,kBAA6B;YACvE,MAAM,IAAI,oBAAoB,CAAC,oCAAoC,CAAC,CAAC;QACvE,OAAO;YACL,GAAG,eAAe,CAAC,CAAC,CAAC;YACrB,KAAK;SACgC,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,aAAa,CACX,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,EACzD,gBAAgB,CACjB,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,SAAS,mBAAmB,CAC1B,KAAc,EACd,UAA+B,EAC/B,MAA6B;IAE7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,MAAM,IAAI,oBAAoB,CAAC,mCAAmC,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,eAAe,CACb,KAAK,EACL,CAAC,QAAQ,EAAE,qBAAqB,EAAE,cAAc,CAAC,EACjD,kBAAkB,CACnB,CAAC;QACF,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;QACnE,IAAK,CAAC,CAAC,mBAA8B,GAAG,MAAM,CAAC,oBAAoB;YACjE,MAAM,IAAI,oBAAoB,CAAC,mCAAmC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAC/D,MAAM,IAAI,oBAAoB,CAAC,sCAAsC,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/C,eAAe,CACb,IAAI,EACJ;gBACE,aAAa;gBACb,yBAAyB;gBACzB,+BAA+B;aAChC,EACD,yBAAyB,CAC1B,CAAC;YACF,MAAM,CAAC,GAAG,IAA+B,CAAC;YAC1C,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,WAAqB,CAAC;gBAC1C,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;YACxE,iBAAiB,CAAC,CAAC,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;YACxE,iBAAiB,CACf,CAAC,CAAC,6BAA6B,EAC/B,+BAA+B,CAChC,CAAC;YACF,OAAO,eAAe,CACpB,CAAC,CAC2D,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,aAAa,CACX,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EACtC,0BAA0B,CAC3B,CAAC;QACF,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,MAAgB;YAC1B,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;YACpD,YAAY;SACb,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,aAAa,CACX,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAChC,kBAAkB,CACnB,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,kBAAkB,CACzB,KAAc,EACd,UAA+B,EAC/B,MAA6B;IAE7B,eAAe,CACb,KAAK,EACL,CAAC,SAAS,EAAE,OAAO,EAAE,sBAAsB,CAAC,EAC5C,kBAAkB,CACnB,CAAC;IACF,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3D,MAAM,IAAI,oBAAoB,CAAC,6BAA6B,CAAC,CAAC;IAChE,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;IACrE,IAAK,CAAC,CAAC,oBAA+B,GAAG,MAAM,CAAC,sBAAsB;QACpE,MAAM,IAAI,oBAAoB,CAAC,oCAAoC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,eAAe,CACb,IAAI,EACJ;YACE,aAAa;YACb,qCAAqC;YACrC,kCAAkC;YAClC,kCAAkC;YAClC,kBAAkB;SACnB,EACD,iBAAiB,CAClB,CAAC;QACF,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,WAAqB,CAAC;YAC1C,MAAM,IAAI,oBAAoB,CAAC,oCAAoC,CAAC,CAAC;QACvE,iBAAiB,CACf,CAAC,CAAC,mCAAmC,EACrC,qCAAqC,CACtC,CAAC;QACF,iBAAiB,CACf,CAAC,CAAC,gCAAgC,EAClC,kCAAkC,EAClC,CAAC,CACF,CAAC;QACF,iBAAiB,CACf,CAAC,CAAC,gCAAgC,EAClC,kCAAkC,EAClC,CAAC,CACF,CAAC;QACF,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAC7D,IAAK,CAAC,CAAC,gBAA2B,GAAG,MAAM,CAAC,uBAAuB;YACjE,MAAM,IAAI,oBAAoB,CAAC,+BAA+B,CAAC,CAAC;QAClE,OAAO,eAAe,CAAC,CAAC,CAAmD,CAAC;IAC9E,CAAC,CAAC,CAAC;IACH,aAAa,CACX,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EACrC,kBAAkB,CACnB,CAAC;IACF,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,OAAkB;QAC7B,KAAK;QACL,oBAAoB,EAAE,CAAC,CAAC,oBAA8B;KACvD,CAAC;AACJ,CAAC;AACD,SAAS,gBAAgB,CACvB,KAAc,EACd,UAA+B,EAC/B,MAA6B;IAE7B,eAAe,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QACzB,MAAM,IAAI,oBAAoB,CAAC,kCAAkC,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,eAAe,CACb,IAAI,EACJ;YACE,aAAa;YACb,mCAAmC;YACnC,uCAAuC;YACvC,kCAAkC;YAClC,kCAAkC;YAClC,8BAA8B;SAC/B,EACD,eAAe,CAChB,CAAC;QACF,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,WAAqB,CAAC;YAC1C,MAAM,IAAI,oBAAoB,CAAC,kCAAkC,CAAC,CAAC;QACrE,iBAAiB,CACf,CAAC,CAAC,iCAAiC,EACnC,mCAAmC,CACpC,CAAC;QACF,iBAAiB,CACf,CAAC,CAAC,qCAAqC,EACvC,uCAAuC,CACxC,CAAC;QACF,iBAAiB,CACf,CAAC,CAAC,gCAAgC,EAClC,kCAAkC,EAClC,CAAC,CACF,CAAC;QACF,iBAAiB,CACf,CAAC,CAAC,gCAAgC,EAClC,kCAAkC,EAClC,CAAC,CACF,CAAC;QACF,iBAAiB,CACf,CAAC,CAAC,4BAA4B,EAC9B,8BAA8B,EAC9B,CAAC,CACF,CAAC;QACF,IACG,CAAC,CAAC,4BAAuC,GAAG,MAAM,CAAC,oBAAoB;YAExE,MAAM,IAAI,oBAAoB,CAC5B,4CAA4C,CAC7C,CAAC;QACJ,OAAO,eAAe,CAAC,CAAC,CAAiD,CAAC;IAC5E,CAAC,CAAC,CAAC;IACH,aAAa,CACX,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EACrC,gBAAgB,CACjB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAc,EACd,cAAqC,OAAO;IAE5C,MAAM,IAAI,GAAG;QACX,eAAe;QACf,UAAU;QACV,eAAe;QACf,oBAAoB;QACpB,MAAM;QACN,YAAY;QACZ,UAAU;QACV,gBAAgB;QAChB,kBAAkB;QAClB,kBAAkB;QAClB,kBAAkB;QAClB,gBAAgB;QAChB,QAAQ;QACR,qBAAqB;QACrB,mBAAmB;KACpB,CAAC;IACF,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;QAC1E,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,CAAC,CAAC;IAC7D,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACzC,iBAAiB,CAAC,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;IACvD,yBAAyB,CAAC,CAAC,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IACtE,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IAC/D,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAC5B,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,0BAA0B;QAEvD,MAAM,IAAI,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAChD,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CACrC,CAAC;IACF,aAAa,CACX,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EACpC,YAAY,CACb,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1B,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,wBAAwB;QAEnD,MAAM,IAAI,oBAAoB,CAAC,8BAA8B,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACpC,iBAAiB,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAC3C,CAAC;IACF,aAAa,CACX,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAClC,UAAU,CACX,CAAC;IACF,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAClC,CAAC,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAC/B,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,MAAM,CAAC,gCAAgC;QAEnE,MAAM,IAAI,oBAAoB,CAAC,uCAAuC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9C,eAAe,CACb,KAAK,EACL;YACE,mBAAmB;YACnB,6CAA6C;YAC7C,sDAAsD;SACvD,EACD,kBAAkB,CACnB,CAAC;QACF,MAAM,KAAK,GAAG,KAAgC,CAAC;QAC/C,WAAW,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QAC1D,iBAAiB,CACf,KAAK,CAAC,2CAA2C,EACjD,6CAA6C,CAC9C,CAAC;QACF,iBAAiB,CACf,KAAK,CAAC,oDAAoD,EAC1D,sDAAsD,CACvD,CAAC;QACF,OAAO,eAAe,CAAC,KAAK,CAAuC,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,aAAa,CACX,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,EACtC,kBAAkB,CACnB,CAAC;IACF,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QAChC,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,MAAM,CAAC,8BAA8B;QAE/D,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,sBAAsB,CAC3C,CAAC,CAAC,cAAc,EAChB,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAChD,CAAC;IACF,OAAO,UAAU,CAAC;QAChB,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAkB;QAC9B,aAAa,EAAE,CAAC,CAAC,aAAuB;QACxC,kBAAkB,EAAE,CAAC,CAAC,kBAAmC;QACzD,IAAI,EAAE,CAAC,CAAC,IAA8B;QACtC,UAAU;QACV,QAAQ;QACR,cAAc;QACd,gBAAgB,EAAE,MAAM;QACxB,gBAAgB,EAAE,mBAAmB,CACnC,CAAC,CAAC,gBAAgB,EAClB,YAAY,EACZ,MAAM,CACP;QACD,gBAAgB,EAAE,kBAAkB,CAClC,CAAC,CAAC,gBAAgB,EAClB,YAAY,EACZ,MAAM,CACP;QACD,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC,cAAc,EAAE,YAAY,EAAE,MAAM,CAAC;QACxE,MAAM;QACN,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACpD,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;KACjD,CAAC,CAAC;AACL,CAAC;AACD,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAC3E,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,OAAO,iBAAiB,CACtB,QAAQ,EACR,8BAA8B,CAAC,KAAK,CAAyB,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAuC;IACnE,kBAAkB;IAClB,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAuC;IACrE,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,+BAA+B;IAC/B,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC,CAAC;AACH,MAAM,WAAW,GAAG;IAClB,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,qBAAqB;IACrB,aAAa;IACb,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,cAAc;IACd,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,oBAAoB;IACpB,qBAAqB;IACrB,eAAe;CAChB,CAAC;AACF,SAAS,eAAe,CACtB,KAAc,EACd,YAAqB;IAErB,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IACE,CAAC,CAAC,aAAa,KAAK,CAAC;QACrB,CAAC;YACC,kBAAkB;YAClB,kBAAkB;YAClB,cAAc;YACd,kBAAkB;YAClB,kBAAkB;YAClB,oBAAoB;YACpB,+BAA+B;YAC/B,gBAAgB;YAChB,mBAAmB;YACnB,oBAAoB;SACrB,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAqB,CAAC;QAEnC,MAAM,IAAI,oBAAoB,CAAC,oCAAoC,CAAC,CAAC;IACvE,gBAAgB,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC/C,iBAAiB,CAAC,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACzD,yBAAyB,CAAC,CAAC,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACxE,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACzD,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IAClE,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IAChE,yBAAyB,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC1D,yBAAyB,CAAC,CAAC,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IAC1E,yBAAyB,CAAC,CAAC,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IAC5E,iBAAiB,CAAC,CAAC,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACpE,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IAC9D,IAAK,CAAC,CAAC,kBAA6B,GAAI,CAAC,CAAC,qBAAgC;QACxE,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACnC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;QACnE,IAAK,CAAC,CAAC,mBAA8B,IAAK,CAAC,CAAC,kBAA6B;YACvE,MAAM,IAAI,oBAAoB,CAAC,6BAA6B,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,WAAmD,CAAC;IACnE,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC;QACxD,MAAM,IAAI,oBAAoB,CAAC,uCAAuC,CAAC,CAAC;IAC1E,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,qBAAqB,KAAK,IAAI;QAChE,MAAM,IAAI,oBAAoB,CAAC,8BAA8B,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,eAAe,CAC7B,CAAC,CAC6C,CAAC;IACjD,IAAI,YAAY,EAAE,CAAC;QACjB,iBAAiB,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC1D,IACE,OAAO,CAAC,aAAa;YACrB,iBAAiB,CACf,oBAAoB,EACpB,CAAC,GAAG,EAAE;gBACJ,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;gBACpD,OAAO,IAA4B,CAAC;YACtC,CAAC,CAAC,EAAE,CACL;YAED,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AACD,MAAM,UAAU,wCAAwC,CACtD,KAAc;IAEd,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC;AACD,MAAM,UAAU,sCAAsC,CACpD,KAA8D;IAE9D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAGjC,CAAC;IACF,MAAM,aAAa,GAAG,iBAAiB,CACrC,oBAAoB,EACpB,IAA4B,CAC7B,CAAC;IACF,OAAO,eAAe,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,CAAC;AAC3D,CAAC;AACD,MAAM,UAAU,uCAAuC,CACrD,QAAqD,EACrD,aAAqB,EACrB,aAAsB;IAEtB,iBAAiB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,aAAa,KAAK,SAAS;QAC7B,iBAAiB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACpD,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,KAAK,aAAa,CAAC;QACvE,IAAI,CAAC;IACP,IACE,CAAC,OAAO;QACR,CAAC,aAAa,KAAK,SAAS;YAC1B,CAAC,OAAO,CAAC,kBAAkB,GAAG,aAAa;gBACzC,CAAC,OAAO,CAAC,mBAAmB,KAAK,IAAI;oBACnC,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAErD,OAAO,IAAI,CAAC;IACd,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,UAAU,uBAAuB,CACrC,OAAyC;IAEzC,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC;AACJ,CAAC"}

package/dist/profile.d.ts

@@ -0,0 +1,21 @@
+import type { EvidenceFusionDecisionV1, EvidenceFusionPolicyV1, TrustDimensionStateV1, TrustProfileHeadV1, TrustProfileStatusV1, TrustProfileV1 } from "./types.js";
+export declare function digestTrustProfileKeyV1(value: {
+    readonly tenantId: string;
+    readonly scopeDigest: string;
+    readonly subjectDigest: string;
+    readonly policyDigest: string;
+}): string;
+export declare function digestTrustProfileV1(value: TrustProfileV1): string;
+export declare function deriveTrustProfileStatusV1(dimensions: readonly TrustDimensionStateV1[], policy: EvidenceFusionPolicyV1): TrustProfileStatusV1;
+export declare function validateTrustProfileV1(value: unknown): TrustProfileV1;
+export declare function createTrustProfileV1(input: {
+    readonly fusionDecision: EvidenceFusionDecisionV1;
+    readonly policy: EvidenceFusionPolicyV1;
+    readonly revision: number;
+    readonly previousProfileId: string | null;
+    readonly previousProfileDigest: string | null;
+    readonly updatedAtLogicalMs: number;
+}): TrustProfileV1;
+export declare function trustProfileHeadV1(profile: TrustProfileV1): TrustProfileHeadV1;
+export declare function validateTrustProfileHeadV1(value: unknown): TrustProfileHeadV1;
+//# sourceMappingURL=profile.d.ts.map

package/dist/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACf,MAAM,YAAY,CAAC;AAiIpB,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B,GAAG,MAAM,CAWT;AACD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAKlE;AACD,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,SAAS,qBAAqB,EAAE,EAC5C,MAAM,EAAE,sBAAsB,GAC7B,oBAAoB,CA4BtB;AACD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAoErE;AACD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC,GAAG,cAAc,CAkFjB;AACD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,cAAc,GACtB,kBAAkB,CAapB;AACD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAU7E"}