@crowdsource.you/core 1.2.0

package/dist/outbox/enforcement/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../src/outbox/enforcement/executor.ts"],"names":[],"mappings":";;AAqFA,8DA0MC;AA9RD,6CAA+C;AAiB/C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;;;;;;;;GAQG;AACH,SAAS,UAAU,CACjB,IAA+B,EAC/B,MAAe,EACf,MAA4C;IAE5C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,KAAK,WAAW;YACd,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAkBD,SAAgB,yBAAyB,CAAyB,KAMjE;IACC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAE9C,MAAM,KAAK,GAAG,CACZ,MAAe,EACf,IAA+B,EAC/B,MAAc,EACR,EAAE;QACR,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,+BAA+B,EAAE,CAAC,EAAE;YAClE,MAAM;YACN,IAAI;YACJ,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC;IAEF;;;;;;;;OAQG;IACH,MAAM,gBAAgB,GAAG,KAAK,EAC5B,MAAe,EACf,OAA2B,EAG3B,EAAE;QACF,MAAM,QAAQ,GAA6C,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QACrF,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7C;;;;WAIG;QACH,MAAM,UAAU,GACd,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC;YAC1C,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,OAAO,EAAE,UAAU;SACpB,CAAC,CAAC;QACH,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACnC;;;;WAIG;QACH,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;QAChF,IAAI,cAAc,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACnD,OAAO;YACL,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;YAChF,cAAc;SACf,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EACpB,OAA0C,EAC1C,OAA4E,EAC5E,IAA+B,EACO,EAAE;QACxC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAE9C;;;;;;WAMG;QACH,MAAM,GAAG,GAA6B;YACpC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC;YACtC,GAAG,GAAG;YACN,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACrD,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACpC,IAAI;YACJ,GAAG,EAAE,IAAI,IAAI,EAAE;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACzC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACzD,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9C,MAAM,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE;gBACjC,aAAa,EACX,IAAI,KAAK,SAAS;oBAChB,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,GAAG,IAAI,yBAAyB,OAAO,CAAC,MAAM,iBAAiB;gBACrE,GAAG,EAAE,IAAI,IAAI,EAAE;aAChB,CAAC,CAAC;YACH,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACxC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACxD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACjE;;;;;;eAMG;YACH,MAAM,WAAW,GAA+B;gBAC9C,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,8DAA8D;aACvE,CAAC;YACF,MAAM,MAAM,GAA+B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC/D,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO;gBACP,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACnB,QAAQ;aACT,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;YAEpC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB;;;;;mBAKG;gBACH,MAAM,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE;oBACjC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC1C,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC7E,GAAG,EAAE,IAAI,IAAI,EAAE;iBAChB,CAAC,CAAC;gBACH,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;gBACxC,OAAO;oBACL,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,UAAU;oBAClB,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;iBAC9E,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE;gBACjC,SAAS;gBACT,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC5C,GAAG,EAAE,SAAS;aACf,CAAC,CAAC;YACH,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YACvC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB;;;;eAIG;YACH,MAAM,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,yDAAyD,EAAE;gBACtE,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,UAAU;YACpB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC;YAClD,MAAM,IAAI,GAAG,IAAA,4BAAe,EAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAkC,EAAE,CAAC;YACnD,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CACX,MAAM,QAAQ,CACZ,OAAO,EACP;oBACE,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,OAAO,EAAE,UAAU,CAAC,OAAO;iBAC5B,EACD,IAAI,CACL,CACF,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/outbox/enforcement/planner.d.ts

@@ -0,0 +1,50 @@
+import type { Decision } from '@crowdsource.you/contracts';
+import type { ModerationEnforcementConfig, PlannedEnforcementAction } from '../types.js';
+/**
+ * What the application will do about this decision.
+ *
+ * Never empty: a decision that produces no action produces an explicit
+ * `noneAction`, because a row saying "we decided to do nothing, and why" is
+ * evidence and an absent row is a question.
+ */
+/**
+ * Raised when `restoreAction` names actions that are being UNDONE rather than
+ * actions that DO the undoing.
+ *
+ * A doc line is not enough for this one. An inverted `restoreAction` type-checks
+ * — both directions are `TAction[]` — and it does not fail at runtime either: it
+ * plans, it claims, and it applies a restriction and a label on an accepted
+ * appeal. It succeeds at the opposite thing, on the one path whose whole purpose
+ * is to give something back.
+ *
+ * The signal is unambiguous when it exists. `reverses` maps each undoing action
+ * to what it undoes, so its VALUES are targets and its KEYS are actors. An
+ * action that appears only as a target has been declared as a restore by
+ * someone reading the targets, which is exactly the mistake this catches.
+ *
+ * Deliberately narrow: an action absent from `reverses` entirely is fine (it may
+ * undo something needing no previous state), and one that is both a key and a
+ * value is fine (it undoes and is undone). Only "a target, and never an actor"
+ * is reported, so a correct configuration cannot trip it.
+ */
+export declare class ModerationRestoreDirectionError extends Error {
+    constructor(inverted: readonly string[]);
+}
+/**
+ * Refuse an inverted `restoreAction` at construction rather than at the first
+ * correction, which may be weeks later and reads as a moderation decision
+ * rather than a configuration error.
+ */
+export declare function assertRestoreDirection<TAction extends string>(config: ModerationEnforcementConfig<TAction>): void;
+export declare function planEnforcement<TAction extends string>(decision: Decision, config: ModerationEnforcementConfig<TAction>): PlannedEnforcementAction<TAction>[];
+/**
+ * The one action worth recording on the report.
+ *
+ * One field, several planned actions, so it has to be the one that answers "what
+ * happened to this object". The application's `precedence` decides, strongest
+ * first — and `reviewAction` should sit near the end but ABOVE `noneAction`,
+ * because a reporter told "nothing happened" when a human is about to look is
+ * being told something untrue.
+ */
+export declare function primaryAction<TAction extends string>(actions: readonly TAction[], precedence: readonly TAction[]): TAction | undefined;
+//# sourceMappingURL=planner.d.ts.map

package/dist/outbox/enforcement/planner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.d.ts","sourceRoot":"","sources":["../../../src/outbox/enforcement/planner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AACxF,OAAO,KAAK,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAiLzF;;;;;;GAMG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,+BAAgC,SAAQ,KAAK;gBAC5C,QAAQ,EAAE,SAAS,MAAM,EAAE;CAUxC;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,SAAS,MAAM,EAC3D,MAAM,EAAE,2BAA2B,CAAC,OAAO,CAAC,GAC3C,IAAI,CAmBN;AAED,wBAAgB,eAAe,CAAC,OAAO,SAAS,MAAM,EACpD,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,2BAA2B,CAAC,OAAO,CAAC,GAC3C,wBAAwB,CAAC,OAAO,CAAC,EAAE,CA4GrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,OAAO,SAAS,MAAM,EAClD,OAAO,EAAE,SAAS,OAAO,EAAE,EAC3B,UAAU,EAAE,SAAS,OAAO,EAAE,GAC7B,OAAO,GAAG,SAAS,CAKrB"}

package/dist/outbox/enforcement/planner.js

@@ -0,0 +1,333 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ModerationRestoreDirectionError = void 0;
+exports.assertRestoreDirection = assertRestoreDirection;
+exports.planEnforcement = planEnforcement;
+exports.primaryAction = primaryAction;
+/**
+ * Deciding what an application will do about a decision — and nothing else.
+ *
+ * Pure: no database, no clock, no configuration. A decision in, a plan out. That
+ * is what makes the mapping testable as a table rather than as an integration
+ * scenario, and it is why `observe` mode is a real audit rather than a comment —
+ * the plan is computed identically in every mode and only its EXECUTION is
+ * gated.
+ *
+ * ## The application maps recommendations, not findings
+ *
+ * `decision.recommendedActions` is what this reads, falling back to severity
+ * only when a violation arrives with no recommendation at all.
+ *
+ * The reason is a division of labour: the jury classified the material and the
+ * consensus engine turned that into a recommendation under a versioned policy.
+ * An application that re-derived its action from raw severity would be quietly
+ * re-deciding the case with a second, unversioned policy of its own — and the
+ * two would diverge the first time CrowdSource's policy was updated. The
+ * fallback exists because a `violation` the application did nothing about would
+ * be worse than a mapped one.
+ *
+ * ## Why this ALGORITHM is shared and only the TABLES are per-application
+ *
+ * Every application has different actions, so the tables have to be its own. The
+ * algorithm must not be, because it carries a correctness property that is
+ * invisible by construction — see {@link withRestoreForNoViolation}. An
+ * application writing its own planner is a chance to ship that bug silently, and
+ * no test written against the application's own mapping would catch it.
+ */
+const SEVERITY_ORDER = ['low', 'medium', 'high', 'critical'];
+/**
+ * Recommendations that ask for NO effect.
+ *
+ * An unmapped recommendation goes to `reviewAction`, because a recommendation
+ * this application has no action for is a decision a human should see. These
+ * three are the exception, and the distinction is not cosmetic: they are
+ * CrowdSource saying "take no action", so routing them to review would put a
+ * human in front of every cleared case and bury the ones that need looking at.
+ *
+ * An application's own table still wins — it may genuinely want `allow` to mean
+ * something — but the default for an application that maps nothing has to be
+ * "do nothing" rather than "wake somebody".
+ */
+const NO_EFFECT_RECOMMENDATIONS = new Set([
+    'allow',
+    'no_action',
+    'no_global_effect',
+]);
+function actionForRecommendation(recommended, config) {
+    const mapped = config.recommendationToAction?.[recommended];
+    if (mapped !== undefined)
+        return mapped;
+    return NO_EFFECT_RECOMMENDATIONS.has(recommended)
+        ? config.noneAction
+        : config.reviewAction;
+}
+function highestSeverity(decision) {
+    let highest;
+    for (const finding of decision.findings) {
+        if (highest === undefined ||
+            SEVERITY_ORDER.indexOf(finding.severity) > SEVERITY_ORDER.indexOf(highest)) {
+            highest = finding.severity;
+        }
+    }
+    return highest;
+}
+/**
+ * `no_violation` always carries a restore, whatever it recommended.
+ *
+ * This exists because of a failure that is very easy to ship and very hard to
+ * see. A correction is a new revision whose outcome is `no_violation`, and its
+ * recommendation is frequently `no_action` — which is CrowdSource saying "take
+ * no NEW action", not "leave what you already did in place". Mapping that
+ * straight through plans nothing, and the object an earlier revision removed
+ * stays removed forever: the appeal succeeded, the case says the content was
+ * fine, and nothing in the application ever puts it back. No error, no log line,
+ * no failing test anywhere else.
+ *
+ * `allow`, `restore` and `no_action` are listed together as an application's
+ * options for `no_violation` precisely because choosing between them needs
+ * knowledge only the application has — whether it did something earlier. So the
+ * plan always includes the restore, and the executor records "there was nothing
+ * restricted" when that is the case, which is evidence rather than a silent
+ * no-op.
+ */
+function restoreActions(declared) {
+    if (declared === null)
+        return [];
+    return typeof declared === 'string' ? [declared] : declared;
+}
+function withRestoreForNoViolation(decision, planned, declared) {
+    /**
+     * `null` is a decision the application made, not an omission — the type
+     * requires it to be written down. An application with no sanction primitive
+     * has nothing an earlier revision could have removed, so there is nothing for
+     * a correction to put back.
+     */
+    if (decision.outcome !== 'no_violation')
+        return planned;
+    /**
+     * EVERY declared restore, not just the first. An application whose levers are
+     * "hide it" and "label it" has two things a correction must undo, and planning
+     * one leaves the other stuck forever — the object is un-hidden and stays
+     * labelled, with no error and nothing failing. That is the same failure this
+     * function exists to prevent, applied to the second reversible action instead
+     * of the first.
+     *
+     * A restore with nothing to undo is not waste: the executor records
+     * `changed: false` with its reason, which is evidence that it was checked.
+     */
+    const missing = restoreActions(declared).filter((action) => !planned.some((entry) => entry.action === action));
+    if (missing.length === 0)
+        return planned;
+    return [
+        ...planned,
+        ...missing.map((action) => ({
+            action,
+            reason: 'No violation: undo any earlier restriction',
+        })),
+    ];
+}
+/**
+ * Collapse a plan to the actions that can coexist.
+ *
+ * A decision may recommend both removal and a label; a removed object does not
+ * need one, and recording both would claim two effects where one happened. So an
+ * action absorbs whatever the application declared it absorbs, and the explicit
+ * "nothing" never survives alongside anything else.
+ *
+ * `reviewAction` always survives — it is a note for a human, and dropping it
+ * because something else was also done is how a `suspend_user` recommendation
+ * gets lost.
+ */
+function collapse(actions, config) {
+    const byAction = new Map();
+    for (const planned of actions) {
+        if (!byAction.has(planned.action))
+            byAction.set(planned.action, planned);
+    }
+    for (const [action, absorbed] of Object.entries(config.absorb ?? {})) {
+        if (!byAction.has(action))
+            continue;
+        for (const loser of absorbed ?? []) {
+            if (loser === config.reviewAction)
+                continue;
+            byAction.delete(loser);
+        }
+    }
+    if (byAction.size > 1)
+        byAction.delete(config.noneAction);
+    return Array.from(byAction.values());
+}
+/**
+ * What the application will do about this decision.
+ *
+ * Never empty: a decision that produces no action produces an explicit
+ * `noneAction`, because a row saying "we decided to do nothing, and why" is
+ * evidence and an absent row is a question.
+ */
+/**
+ * Raised when `restoreAction` names actions that are being UNDONE rather than
+ * actions that DO the undoing.
+ *
+ * A doc line is not enough for this one. An inverted `restoreAction` type-checks
+ * — both directions are `TAction[]` — and it does not fail at runtime either: it
+ * plans, it claims, and it applies a restriction and a label on an accepted
+ * appeal. It succeeds at the opposite thing, on the one path whose whole purpose
+ * is to give something back.
+ *
+ * The signal is unambiguous when it exists. `reverses` maps each undoing action
+ * to what it undoes, so its VALUES are targets and its KEYS are actors. An
+ * action that appears only as a target has been declared as a restore by
+ * someone reading the targets, which is exactly the mistake this catches.
+ *
+ * Deliberately narrow: an action absent from `reverses` entirely is fine (it may
+ * undo something needing no previous state), and one that is both a key and a
+ * value is fine (it undoes and is undone). Only "a target, and never an actor"
+ * is reported, so a correct configuration cannot trip it.
+ */
+class ModerationRestoreDirectionError extends Error {
+    constructor(inverted) {
+        super(`restoreAction names [${inverted.join(', ')}], which 'reverses' lists as actions ` +
+            'being UNDONE rather than actions that do the undoing. restoreAction holds what ' +
+            "the planner emits on 'no_violation' — the restoring actions, e.g. " +
+            "['restore', 'unlabel_sensitive'] — not the restrictions being lifted. As written, " +
+            'an accepted appeal would apply the punishment it was correcting.');
+        this.name = 'ModerationRestoreDirectionError';
+    }
+}
+exports.ModerationRestoreDirectionError = ModerationRestoreDirectionError;
+/**
+ * Refuse an inverted `restoreAction` at construction rather than at the first
+ * correction, which may be weeks later and reads as a moderation decision
+ * rather than a configuration error.
+ */
+function assertRestoreDirection(config) {
+    const reverses = config.reverses ?? {};
+    const entries = Object.entries(reverses);
+    const actors = new Set(entries.map(([actor]) => actor));
+    const targets = new Set();
+    for (const [, undone] of entries) {
+        if (undone === undefined)
+            continue;
+        for (const action of typeof undone === 'string' ? [undone] : undone) {
+            targets.add(action);
+        }
+    }
+    const inverted = restoreActions(config.restoreAction).filter((action) => targets.has(action) && !actors.has(action));
+    if (inverted.length > 0)
+        throw new ModerationRestoreDirectionError(inverted);
+}
+function planEnforcement(decision, config) {
+    const fromRecommendations = decision.recommendedActions.map((recommended) => ({
+        action: actionForRecommendation(recommended.action, config),
+        reason: `CrowdSource recommended ${recommended.action}`,
+        recommendedAction: recommended.action,
+    }));
+    if (fromRecommendations.length > 0) {
+        const collapsed = collapse(withRestoreForNoViolation(decision, fromRecommendations, config.restoreAction), config);
+        return collapsed.length > 0
+            ? collapsed
+            : [
+                {
+                    action: config.noneAction,
+                    reason: 'No recommended action maps to an effect this application has',
+                },
+            ];
+    }
+    switch (decision.outcome) {
+        case 'violation': {
+            const severity = highestSeverity(decision);
+            /**
+             * A `violation` with no findings cannot happen — the contract refuses it —
+             * so an absent severity here means a newer CrowdSource sent something this
+             * code has not seen. A human looks at it rather than a default removing an
+             * object.
+             */
+            if (severity === undefined) {
+                return [
+                    {
+                        action: config.reviewAction,
+                        reason: 'Violation carried no finding severity this version understands',
+                    },
+                ];
+            }
+            return [
+                {
+                    action: config.severityFallback?.[severity] ?? config.reviewAction,
+                    reason: `Violation with no recommended action, highest severity ${severity}`,
+                },
+            ];
+        }
+        case 'no_violation':
+            /**
+             * A restore, always planned — even when nothing was restricted. The
+             * executor records it as not applied with the reason, which is how "we
+             * checked and there was nothing to undo" is distinguishable from "we never
+             * looked".
+             */
+            {
+                const declared = restoreActions(config.restoreAction);
+                return declared.length === 0
+                    ? [
+                        {
+                            action: config.noneAction,
+                            reason: 'No violation, and this application has nothing to restore',
+                        },
+                    ]
+                    : declared.map((action) => ({
+                        action,
+                        reason: 'No violation: undo any earlier restriction',
+                    }));
+            }
+        case 'insufficient_context':
+        case 'inconclusive':
+        case 'escalated':
+            /**
+             * None of these is "remove", and none is "it was fine": absence of
+             * consensus is neither guilt nor innocence, so the application changes
+             * nothing on its own and asks a human.
+             */
+            return [
+                {
+                    action: config.reviewAction,
+                    reason: `Outcome ${decision.outcome}: no automatic action, internal review`,
+                },
+            ];
+        case 'content_unavailable':
+        case 'duplicate':
+            return [
+                {
+                    action: config.noneAction,
+                    reason: `Outcome ${decision.outcome}: nothing to enforce`,
+                },
+            ];
+        default:
+            /**
+             * An outcome the contract does not currently define. A newer server must
+             * not break an older client, and the safe reading of an unknown outcome is
+             * a human, never a default effect.
+             */
+            return [
+                {
+                    action: config.reviewAction,
+                    reason: 'Decision outcome not recognised by this version of the application',
+                },
+            ];
+    }
+}
+/**
+ * The one action worth recording on the report.
+ *
+ * One field, several planned actions, so it has to be the one that answers "what
+ * happened to this object". The application's `precedence` decides, strongest
+ * first — and `reviewAction` should sit near the end but ABOVE `noneAction`,
+ * because a reporter told "nothing happened" when a human is about to look is
+ * being told something untrue.
+ */
+function primaryAction(actions, precedence) {
+    for (const candidate of precedence) {
+        if (actions.includes(candidate))
+            return candidate;
+    }
+    return actions[0];
+}
+//# sourceMappingURL=planner.js.map

package/dist/outbox/enforcement/planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.js","sourceRoot":"","sources":["../../../src/outbox/enforcement/planner.ts"],"names":[],"mappings":";;;AA+NA,wDAqBC;AAED,0CA+GC;AAWD,sCAQC;AArXD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,MAAM,cAAc,GAAwB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAElF;;;;;;;;;;;;GAYG;AACH,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,OAAO;IACP,WAAW;IACX,kBAAkB;CACnB,CAAC,CAAC;AAEH,SAAS,uBAAuB,CAC9B,WAA8B,EAC9B,MAA4C;IAE5C,MAAM,MAAM,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,OAAO,yBAAyB,CAAC,GAAG,CAAC,WAAW,CAAC;QAC/C,CAAC,CAAC,MAAM,CAAC,UAAU;QACnB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,QAAkB;IACzC,IAAI,OAA6B,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,IACE,OAAO,KAAK,SAAS;YACrB,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAC1E,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,cAAc,CACrB,QAA6C;IAE7C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9D,CAAC;AAED,SAAS,yBAAyB,CAChC,QAAkB,EAClB,OAAqD,EACrD,QAA6C;IAE7C;;;;;OAKG;IACH,IAAI,QAAQ,CAAC,OAAO,KAAK,cAAc;QAAE,OAAO,OAAO,CAAC;IACxD;;;;;;;;;;OAUG;IACH,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7C,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAC9D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,OAAO;QACL,GAAG,OAAO;QACV,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1B,MAAM;YACN,MAAM,EAAE,4CAA4C;SACrD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,QAAQ,CACf,OAAqD,EACrD,MAA4C;IAE5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8C,CAAC;IACvE,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAGhE,EAAE,CAAC;QACJ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QACpC,KAAK,MAAM,KAAK,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,KAAK,KAAK,MAAM,CAAC,YAAY;gBAAE,SAAS;YAC5C,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC;QAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE1D,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,+BAAgC,SAAQ,KAAK;IACxD,YAAY,QAA2B;QACrC,KAAK,CACH,wBAAwB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC;YAChF,iFAAiF;YACjF,oEAAoE;YACpE,oFAAoF;YACpF,kEAAkE,CACrE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAXD,0EAWC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB,CACpC,MAA4C;IAE5C,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAGpC,CAAC;IACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,KAAK,MAAM,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAC1D,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACvD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,+BAA+B,CAAC,QAAQ,CAAC,CAAC;AAC/E,CAAC;AAED,SAAgB,eAAe,CAC7B,QAAkB,EAClB,MAA4C;IAE5C,MAAM,mBAAmB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CACzD,CAAC,WAAW,EAAqC,EAAE,CAAC,CAAC;QACnD,MAAM,EAAE,uBAAuB,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;QAC3D,MAAM,EAAE,2BAA2B,WAAW,CAAC,MAAM,EAAE;QACvD,iBAAiB,EAAE,WAAW,CAAC,MAAM;KACtC,CAAC,CACH,CAAC;IAEF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,QAAQ,CACxB,yBAAyB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,CAAC,aAAa,CAAC,EAC9E,MAAM,CACP,CAAC;QACF,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAM,CAAC,UAAU;oBACzB,MAAM,EAAE,8DAA8D;iBACvE;aACF,CAAC;IACR,CAAC;IAED,QAAQ,QAAQ,CAAC,OAAO,EAAE,CAAC;QACzB,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3C;;;;;eAKG;YACH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO;oBACL;wBACE,MAAM,EAAE,MAAM,CAAC,YAAY;wBAC3B,MAAM,EAAE,gEAAgE;qBACzE;iBACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL;oBACE,MAAM,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,YAAY;oBAClE,MAAM,EAAE,0DAA0D,QAAQ,EAAE;iBAC7E;aACF,CAAC;QACJ,CAAC;QAED,KAAK,cAAc;YACjB;;;;;eAKG;YACH,CAAC;gBACC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACtD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAC1B,CAAC,CAAC;wBACE;4BACE,MAAM,EAAE,MAAM,CAAC,UAAU;4BACzB,MAAM,EAAE,2DAA2D;yBACpE;qBACF;oBACH,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;wBACxB,MAAM;wBACN,MAAM,EAAE,4CAA4C;qBACrD,CAAC,CAAC,CAAC;YACV,CAAC;QAEH,KAAK,sBAAsB,CAAC;QAC5B,KAAK,cAAc,CAAC;QACpB,KAAK,WAAW;YACd;;;;eAIG;YACH,OAAO;gBACL;oBACE,MAAM,EAAE,MAAM,CAAC,YAAY;oBAC3B,MAAM,EAAE,WAAW,QAAQ,CAAC,OAAO,wCAAwC;iBAC5E;aACF,CAAC;QAEJ,KAAK,qBAAqB,CAAC;QAC3B,KAAK,WAAW;YACd,OAAO;gBACL;oBACE,MAAM,EAAE,MAAM,CAAC,UAAU;oBACzB,MAAM,EAAE,WAAW,QAAQ,CAAC,OAAO,sBAAsB;iBAC1D;aACF,CAAC;QAEJ;YACE;;;;eAIG;YACH,OAAO;gBACL;oBACE,MAAM,EAAE,MAAM,CAAC,YAAY;oBAC3B,MAAM,EAAE,oEAAoE;iBAC7E;aACF,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,aAAa,CAC3B,OAA2B,EAC3B,UAA8B;IAE9B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACpD,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/outbox/evidence.d.ts

@@ -0,0 +1,114 @@
+import type { ReportInput } from '../index.js';
+import type { ModerationReportFields, ModerationSubjectProvider, ModerationSubjectSnapshot, ModerationTaxonomy } from './types.js';
+/**
+ * Turning a stored report into the thing the SDK delivers.
+ *
+ * This is NOT a case-envelope builder, and the difference matters enough to
+ * name: `@crowdsource.you/core` builds the Case Envelope, and it deliberately does
+ * not export the function that does it. What this module produces is the SDK's
+ * `ReportInput` — a description of the material — and the SDK derives the
+ * envelope from it: resource ids, relations, digests, pseudonymous principal
+ * refs, the identity binding proof, the pinned policy version, the privacy terms
+ * and the idempotency key.
+ *
+ * That is not a technicality. Those derived values are exactly what the case
+ * dedup key is computed over, so an application that composed its own envelope
+ * would be the reason two reporters about one object opened two cases — and "one
+ * penalty per incident" would fail in production with nothing failing in a test.
+ * Building the description and letting the SDK build the document is what keeps
+ * that property true for every application at once.
+ *
+ * So this module does three things and no more: ask the registry for a snapshot
+ * of the reported object, translate the reporter's categories into allegations,
+ * and assemble both with the report's own identity.
+ */
+/**
+ * The material could not be described, because nothing can describe it.
+ *
+ * This is a DEFECT, not a state, and it should be unreachable. A report whose
+ * type has no subject provider never gets a delivery event in the first place —
+ * intake decides that from the same registry this module reads — so an event
+ * that arrives here has been created by something that bypassed intake, or by a
+ * deployment where a provider was removed while its reports were still in
+ * flight.
+ *
+ * `retryable: false` therefore dead-letters the outbox event, so the
+ * reconciliation sweep counts it and a human looks. The alternative — writing a
+ * local state — would file a genuine defect in the one place that looks
+ * identical to the deliberate local-only reports, and nothing would ever alert
+ * on it.
+ *
+ * Separate from "the object is gone": a deleted object is a fact about the world
+ * and closes the report normally.
+ */
+export declare class ModerationSubjectUnsupportedError extends Error {
+    readonly retryable = false;
+    constructor(reportedType: string);
+}
+/**
+ * The application's taxonomy produced no allegation for a report.
+ *
+ * Not retryable and never silently defaulted. A report with no allegation is not
+ * a report, and substituting `other.unclassifiable` here would put a claim in
+ * front of a jury that no reporter made and that no version of the mapping
+ * records — the taxonomy is the application's to fix, and dead-lettering is what
+ * makes somebody fix it.
+ */
+export declare class ModerationTaxonomyError extends Error {
+    readonly retryable = false;
+    constructor(categories: readonly string[]);
+}
+/**
+ * SHA-256 of the snapshot, stored on the report.
+ *
+ * Taken over the described MATERIAL, not over the whole `ReportInput`: the
+ * report id, the reporter and the allegations are properties of the report, and
+ * including them would mean two people reporting identical content produced
+ * different hashes — which is the opposite of what this hash is for. Key order
+ * is fixed by the literal below rather than by `Object.keys`, so the digest is
+ * stable across Node versions and across a refactor that reorders a field.
+ */
+export declare function snapshotHash(snapshot: ModerationSubjectSnapshot): string;
+/** The subject providers, indexed by the application's own reported type. */
+export interface SubjectRegistry {
+    /**
+     * The provider for a reported type, or `undefined` when it is not deliverable.
+     *
+     * The single authority on whether a report leaves this deployment. Intake asks
+     * before queueing a delivery, and this module asks again when it builds one; a
+     * type this returns `undefined` for is stored and never enqueued.
+     */
+    providerFor(reportedType: string): ModerationSubjectProvider | undefined;
+    /**
+     * The reported types wired to CrowdSource, as the registry itself sees them.
+     *
+     * Exists so an application can pin the set in a test. That is not ceremony:
+     * the difference between a delivered type and a local-only one is invisible in
+     * a 201, so registering a provider — or forgetting to — is a change no
+     * response body would reveal.
+     */
+    deliverableTypes(): string[];
+}
+export declare function createSubjectRegistry(providers: readonly ModerationSubjectProvider[]): SubjectRegistry;
+export interface ModerationReportInput {
+    /** What the SDK delivers. */
+    readonly reportInput: ReportInput;
+    /** The digest to store on the local report. */
+    readonly snapshotHash: string;
+}
+/**
+ * Describe a stored report for delivery, or report why it cannot be described.
+ *
+ * Returns `null` when the reported object no longer exists. That is not an error
+ * either: content deleted between the report and its delivery is ordinary, and
+ * evidence stays available through retention on CrowdSource's side — but an
+ * object the application never got to snapshot has no evidence to keep.
+ */
+export declare function buildModerationReportInput(input: {
+    report: Pick<ModerationReportFields, 'reportedType' | 'reportedId' | 'reporter' | 'categories' | 'details' | 'createdAt'> & {
+        id: string;
+    };
+    registry: SubjectRegistry;
+    taxonomy: ModerationTaxonomy;
+}): Promise<ModerationReportInput | null>;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/outbox/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/outbox/evidence.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;IAC1D,QAAQ,CAAC,SAAS,SAAS;gBAEf,YAAY,EAAE,MAAM;CAIjC;AAED;;;;;;;;GAQG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,SAAS,SAAS;gBAEf,UAAU,EAAE,SAAS,MAAM,EAAE;CAO1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,yBAAyB,GAAG,MAAM,CAYxE;AAED,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS,CAAC;IACzE;;;;;;;OAOG;IACH,gBAAgB,IAAI,MAAM,EAAE,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,SAAS,yBAAyB,EAAE,GAC9C,eAAe,CAsBjB;AAED,MAAM,WAAW,qBAAqB;IACpC,6BAA6B;IAC7B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,MAAM,EAAE,IAAI,CACV,sBAAsB,EACtB,cAAc,GAAG,YAAY,GAAG,UAAU,GAAG,YAAY,GAAG,SAAS,GAAG,WAAW,CACpF,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,kBAAkB,CAAC;CAC9B,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAwDxC"}