@dcyfr/ai 2.1.3 → 3.0.0

package/dist/ai/src/plugins/certification/certification-manager.js

@@ -0,0 +1,321 @@
+/**
+ * Plugin Certification Manager
+ *
+ * Orchestrates the full certification lifecycle:
+ * - Accept audit request (Bronze is free and auto-approved)
+ * - Confirm payment for paid tiers (Silver / Gold)
+ * - Assign auditor and run checklist
+ * - Issue certification badge with expiration
+ * - Support marketplace listings query
+ * - Revoke or expire badges
+ *
+ * @module plugins/certification/certification-manager
+ */
+import { randomUUID } from 'node:crypto';
+import { CERTIFICATION_AUDIT_CHECKLIST, CERTIFICATION_PRICING_USD_CENTS, CERTIFICATION_VALIDITY_DAYS, } from './types.js';
+// ---------------------------------------------------------------------------
+// Errors
+// ---------------------------------------------------------------------------
+export class CertificationError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'CertificationError';
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+// ---------------------------------------------------------------------------
+// CertificationManager
+// ---------------------------------------------------------------------------
+/**
+ * Manages the full plugin certification lifecycle.
+ *
+ * State is kept in-memory for testing; production implementations should
+ * back this with a database (see CERTIFICATION_SCHEMA_SQL in types.ts).
+ */
+export class CertificationManager {
+    requests = new Map();
+    badges = new Map();
+    verificationBaseUrl;
+    issuingAuthority;
+    computeBundleHash;
+    constructor(config = {}) {
+        this.verificationBaseUrl =
+            config.verificationBaseUrl ?? 'https://www.dcyfr.ai/plugins/certification';
+        this.issuingAuthority = config.issuingAuthority ?? 'DCYFR Security Team';
+        this.computeBundleHash =
+            config.computeBundleHash ??
+                (async (pluginId, version) => `sha256-placeholder-${pluginId}-${version}`);
+    }
+    // -------------------------------------------------------------------------
+    // 17.1 / 17.3 — Submit audit request (free Bronze auto-approved; paid tiers await payment)
+    // -------------------------------------------------------------------------
+    /**
+     * Submit a certification request for a plugin.
+     *
+     * Bronze: Immediately moves to `PAYMENT_RECEIVED` (free, no payment needed).
+     * Silver/Gold: Moves to `PENDING_PAYMENT`; caller must supply payment_reference_id
+     *              then call `confirmPayment()`.
+     */
+    submitAuditRequest(pluginId, version, tier, submittedBy) {
+        const requestId = randomUUID();
+        const priceCents = CERTIFICATION_PRICING_USD_CENTS[tier];
+        const now = new Date().toISOString();
+        // Build checklist stubs for items required at this tier
+        const checklistResults = CERTIFICATION_AUDIT_CHECKLIST.filter((item) => item.required_for_tiers.includes(tier)).map((item) => ({
+            item_id: item.item_id,
+            passed: null,
+            notes: null,
+            evaluated_at: null,
+            evaluated_by: null,
+        }));
+        const request = {
+            request_id: requestId,
+            plugin_id: pluginId,
+            plugin_version: version,
+            tier,
+            submitted_by: submittedBy,
+            submitted_at: now,
+            // Bronze is free → skip payment step
+            status: priceCents === 0 ? 'PAYMENT_RECEIVED' : 'PENDING_PAYMENT',
+            price_usd_cents: priceCents,
+            payment_reference_id: null,
+            payment_confirmed_at: priceCents === 0 ? now : null,
+            auditor: null,
+            audit_started_at: null,
+            audit_completed_at: null,
+            checklist_results: checklistResults,
+            auditor_notes: null,
+            badge: null,
+            failure_reason: null,
+        };
+        this.requests.set(requestId, request);
+        return request;
+    }
+    // -------------------------------------------------------------------------
+    // 17.3 — Confirm payment for paid tiers
+    // -------------------------------------------------------------------------
+    /**
+     * Record payment confirmation.
+     * Moves request from `PENDING_PAYMENT` → `PAYMENT_RECEIVED`.
+     *
+     * @param requestId  The audit request ID.
+     * @param paymentRefId  Payment provider reference (e.g. Stripe PaymentIntent ID).
+     */
+    confirmPayment(requestId, paymentRefId) {
+        const request = this.getRequestOrThrow(requestId);
+        if (request.status !== 'PENDING_PAYMENT') {
+            throw new CertificationError(`Request ${requestId} is not awaiting payment (status: ${request.status})`, 'INVALID_STATUS');
+        }
+        request.payment_reference_id = paymentRefId;
+        request.payment_confirmed_at = new Date().toISOString();
+        request.status = 'PAYMENT_RECEIVED';
+        return request;
+    }
+    // -------------------------------------------------------------------------
+    // 17.4 — Assign auditor and start audit
+    // -------------------------------------------------------------------------
+    /**
+     * Assign an auditor and begin the audit.
+     * Moves request from `PAYMENT_RECEIVED` → `IN_AUDIT`.
+     */
+    startAudit(requestId, auditor) {
+        const request = this.getRequestOrThrow(requestId);
+        if (request.status !== 'PAYMENT_RECEIVED') {
+            throw new CertificationError(`Request ${requestId} is not ready to start audit (status: ${request.status})`, 'INVALID_STATUS');
+        }
+        request.auditor = auditor;
+        request.audit_started_at = new Date().toISOString();
+        request.status = 'IN_AUDIT';
+        return request;
+    }
+    // -------------------------------------------------------------------------
+    // 17.4 — Record individual checklist item results
+    // -------------------------------------------------------------------------
+    /**
+     * Record the result for a single audit checklist item.
+     */
+    recordChecklistResult(requestId, itemId, passed, evaluatedBy, notes) {
+        const request = this.getRequestOrThrow(requestId);
+        if (request.status !== 'IN_AUDIT') {
+            throw new CertificationError(`Request ${requestId} is not IN_AUDIT (status: ${request.status})`, 'INVALID_STATUS');
+        }
+        const item = request.checklist_results.find((r) => r.item_id === itemId);
+        if (!item) {
+            throw new CertificationError(`Checklist item ${itemId} not found in request ${requestId}`, 'CHECKLIST_ITEM_NOT_FOUND');
+        }
+        item.passed = passed;
+        item.notes = notes ?? null;
+        item.evaluated_at = new Date().toISOString();
+        item.evaluated_by = evaluatedBy;
+        return request;
+    }
+    // -------------------------------------------------------------------------
+    // 17.2 / 17.5 — Complete audit and issue badge (or fail)
+    // -------------------------------------------------------------------------
+    /**
+     * Complete the audit.
+     * - If all required checklist items passed → issue badge and move to `CERTIFIED`.
+     * - If any required item failed → move to `FAILED`.
+     */
+    async completeAudit(requestId, auditorNotes) {
+        const request = this.getRequestOrThrow(requestId);
+        if (request.status !== 'IN_AUDIT') {
+            throw new CertificationError(`Request ${requestId} is not IN_AUDIT (status: ${request.status})`, 'INVALID_STATUS');
+        }
+        // Verify all checklist items have been evaluated
+        const unevaluated = request.checklist_results.filter((r) => r.passed === null);
+        if (unevaluated.length > 0) {
+            throw new CertificationError(`Audit incomplete: ${unevaluated.length} checklist items not yet evaluated (${unevaluated.map((r) => r.item_id).join(', ')})`, 'AUDIT_INCOMPLETE');
+        }
+        const failedItems = request.checklist_results.filter((r) => r.passed === false);
+        request.audit_completed_at = new Date().toISOString();
+        request.auditor_notes = auditorNotes ?? null;
+        if (failedItems.length > 0) {
+            request.status = 'FAILED';
+            request.failure_reason = `Failed ${failedItems.length} checklist item(s): ${failedItems.map((r) => r.item_id).join(', ')}`;
+            return request;
+        }
+        // All passed → issue badge
+        const badge = await this.issueBadge(request);
+        request.badge = badge;
+        request.status = 'CERTIFIED';
+        this.badges.set(badge.badge_id, badge);
+        return request;
+    }
+    // -------------------------------------------------------------------------
+    // 17.2 — Badge system (internal)
+    // -------------------------------------------------------------------------
+    async issueBadge(request) {
+        const badgeId = randomUUID();
+        const issuedAt = new Date();
+        const validityDays = CERTIFICATION_VALIDITY_DAYS[request.tier];
+        const expiresAt = new Date(issuedAt.getTime() + validityDays * 24 * 60 * 60 * 1000);
+        const bundleHash = await this.computeBundleHash(request.plugin_id, request.plugin_version);
+        return {
+            badge_id: badgeId,
+            plugin_id: request.plugin_id,
+            plugin_version: request.plugin_version,
+            tier: request.tier,
+            issued_at: issuedAt.toISOString(),
+            expires_at: expiresAt.toISOString(),
+            issued_by: this.issuingAuthority,
+            verification_url: `${this.verificationBaseUrl}/${badgeId}`,
+            bundle_hash: bundleHash,
+        };
+    }
+    // -------------------------------------------------------------------------
+    // Badge expiration / revocation
+    // -------------------------------------------------------------------------
+    /**
+     * Check whether a badge is currently valid (not expired, not revoked).
+     */
+    isBadgeValid(badgeId) {
+        const badge = this.badges.get(badgeId);
+        if (!badge)
+            return false;
+        return new Date(badge.expires_at) > new Date();
+    }
+    /**
+     * Revoke a certification badge by cancelling the associated request.
+     * Moves the request to `REVOKED`.
+     */
+    revokeCertification(requestId, reason) {
+        const request = this.getRequestOrThrow(requestId);
+        if (request.status !== 'CERTIFIED') {
+            throw new CertificationError(`Request ${requestId} is not CERTIFIED (status: ${request.status})`, 'INVALID_STATUS');
+        }
+        request.status = 'REVOKED';
+        request.failure_reason = reason;
+        // Remove badge from active index
+        if (request.badge) {
+            this.badges.delete(request.badge.badge_id);
+        }
+        return request;
+    }
+    // -------------------------------------------------------------------------
+    // 17.5 — Marketplace listing: certification summary
+    // -------------------------------------------------------------------------
+    /**
+     * Returns the current certification summary for a plugin (for marketplace display).
+     * Returns the most recently certified, non-revoked request if one exists.
+     */
+    getPluginCertificationSummary(pluginId) {
+        // Find all CERTIFIED requests for this plugin, sorted newest first
+        const certified = Array.from(this.requests.values())
+            .filter((r) => r.plugin_id === pluginId && r.status === 'CERTIFIED' && r.badge)
+            .sort((a, b) => new Date(b.audit_completed_at ?? 0).getTime() -
+            new Date(a.audit_completed_at ?? 0).getTime());
+        if (certified.length === 0) {
+            return {
+                plugin_id: pluginId,
+                is_certified: false,
+                highest_tier: null,
+                expires_at: null,
+                badge_id: null,
+                is_expired: false,
+            };
+        }
+        // Pick the highest tier among active (non-expired) certifications
+        const tierOrder = ['GOLD', 'SILVER', 'BRONZE'];
+        let bestTier = null;
+        let bestBadgeId = null;
+        let bestExpiresAt = null;
+        let isExpired = true;
+        for (const tier of tierOrder) {
+            const req = certified.find((r) => r.tier === tier);
+            if (req?.badge) {
+                const expired = new Date(req.badge.expires_at) <= new Date();
+                if (!expired) {
+                    bestTier = tier;
+                    bestBadgeId = req.badge.badge_id;
+                    bestExpiresAt = req.badge.expires_at;
+                    isExpired = false;
+                    break;
+                }
+                else if (!bestTier) {
+                    // All expired — still show the most recent
+                    bestTier = tier;
+                    bestBadgeId = req.badge.badge_id;
+                    bestExpiresAt = req.badge.expires_at;
+                    isExpired = true;
+                }
+            }
+        }
+        return {
+            plugin_id: pluginId,
+            is_certified: !isExpired,
+            highest_tier: bestTier,
+            expires_at: bestExpiresAt,
+            badge_id: bestBadgeId,
+            is_expired: isExpired,
+        };
+    }
+    // -------------------------------------------------------------------------
+    // Queries
+    // -------------------------------------------------------------------------
+    getRequest(requestId) {
+        return this.requests.get(requestId) ?? null;
+    }
+    getRequestsByPlugin(pluginId) {
+        return Array.from(this.requests.values()).filter((r) => r.plugin_id === pluginId);
+    }
+    getRequestsByStatus(status) {
+        return Array.from(this.requests.values()).filter((r) => r.status === status);
+    }
+    getBadge(badgeId) {
+        return this.badges.get(badgeId) ?? null;
+    }
+    // -------------------------------------------------------------------------
+    // Internal helpers
+    // -------------------------------------------------------------------------
+    getRequestOrThrow(requestId) {
+        const request = this.requests.get(requestId);
+        if (!request) {
+            throw new CertificationError(`Audit request ${requestId} not found`, 'REQUEST_NOT_FOUND');
+        }
+        return request;
+    }
+}
+//# sourceMappingURL=certification-manager.js.map

package/dist/ai/src/plugins/certification/certification-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certification-manager.js","sourceRoot":"","sources":["../../../../../packages/ai/src/plugins/certification/certification-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,2BAA2B,GAO5B,MAAM,YAAY,CAAC;AAyBpB,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB;IAFlB,YACE,OAAe,EACC,IAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACd,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE/C,mBAAmB,CAAS;IAC5B,gBAAgB,CAAS;IACzB,iBAAiB,CAAyD;IAE3F,YAAY,SAAqC,EAAE;QACjD,IAAI,CAAC,mBAAmB;YACtB,MAAM,CAAC,mBAAmB,IAAI,4CAA4C,CAAC;QAC7E,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,qBAAqB,CAAC;QACzE,IAAI,CAAC,iBAAiB;YACpB,MAAM,CAAC,iBAAiB;gBACxB,CAAC,KAAK,EAAE,QAAgB,EAAE,OAAe,EAAE,EAAE,CAC3C,sBAAsB,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,4EAA4E;IAC5E,2FAA2F;IAC3F,4EAA4E;IAE5E;;;;;;OAMG;IACH,kBAAkB,CAChB,QAAgB,EAChB,OAAe,EACf,IAAuB,EACvB,WAAmB;QAEnB,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,wDAAwD;QACxD,MAAM,gBAAgB,GAA2B,6BAA6B,CAAC,MAAM,CACnF,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjD,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,IAAI;YACX,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC,CAAC;QAEJ,MAAM,OAAO,GAAiB;YAC5B,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,QAAQ;YACnB,cAAc,EAAE,OAAO;YACvB,IAAI;YACJ,YAAY,EAAE,WAAW;YACzB,YAAY,EAAE,GAAG;YACjB,qCAAqC;YACrC,MAAM,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,iBAAiB;YACjE,eAAe,EAAE,UAAU;YAC3B,oBAAoB,EAAE,IAAI;YAC1B,oBAAoB,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;YACnD,OAAO,EAAE,IAAI;YACb,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,IAAI;YACxB,iBAAiB,EAAE,gBAAgB;YACnC,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,IAAI;YACX,cAAc,EAAE,IAAI;SACrB,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAE5E;;;;;;OAMG;IACH,cAAc,CAAC,SAAiB,EAAE,YAAoB;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAElD,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACzC,MAAM,IAAI,kBAAkB,CAC1B,WAAW,SAAS,qCAAqC,OAAO,CAAC,MAAM,GAAG,EAC1E,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,oBAAoB,GAAG,YAAY,CAAC;QAC5C,OAAO,CAAC,oBAAoB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxD,OAAO,CAAC,MAAM,GAAG,kBAAkB,CAAC;QACpC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAE5E;;;OAGG;IACH,UAAU,CAAC,SAAiB,EAAE,OAAe;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAElD,IAAI,OAAO,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAC1C,MAAM,IAAI,kBAAkB,CAC1B,WAAW,SAAS,yCAAyC,OAAO,CAAC,MAAM,GAAG,EAC9E,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,OAAO,CAAC,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,kDAAkD;IAClD,4EAA4E;IAE5E;;OAEG;IACH,qBAAqB,CACnB,SAAiB,EACjB,MAAc,EACd,MAAe,EACf,WAAmB,EACnB,KAAc;QAEd,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAElD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAkB,CAC1B,WAAW,SAAS,6BAA6B,OAAO,CAAC,MAAM,GAAG,EAClE,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,MAAM,yBAAyB,SAAS,EAAE,EAC5D,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,yDAAyD;IACzD,4EAA4E;IAE5E;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,YAAqB;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAElD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAkB,CAC1B,WAAW,SAAS,6BAA6B,OAAO,CAAC,MAAM,GAAG,EAClE,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;QAC/E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,WAAW,CAAC,MAAM,uCAAuC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC7H,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;QAChF,OAAO,CAAC,kBAAkB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtD,OAAO,CAAC,aAAa,GAAG,YAAY,IAAI,IAAI,CAAC;QAE7C,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC1B,OAAO,CAAC,cAAc,GAAG,UAAU,WAAW,CAAC,MAAM,uBAAuB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3H,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,2BAA2B;QAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,iCAAiC;IACjC,4EAA4E;IAEpE,KAAK,CAAC,UAAU,CAAC,OAAqB;QAC5C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEpF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC7C,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,cAAc,CACvB,CAAC;QAEF,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE;YACjC,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,IAAI,CAAC,gBAAgB;YAChC,gBAAgB,EAAE,GAAG,IAAI,CAAC,mBAAmB,IAAI,OAAO,EAAE;YAC1D,WAAW,EAAE,UAAU;SACxB,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,gCAAgC;IAChC,4EAA4E;IAE5E;;OAEG;IACH,YAAY,CAAC,OAAe;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACjD,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,SAAiB,EAAE,MAAc;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAElD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,kBAAkB,CAC1B,WAAW,SAAS,8BAA8B,OAAO,CAAC,MAAM,GAAG,EACnE,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;QAC3B,OAAO,CAAC,cAAc,GAAG,MAAM,CAAC;QAEhC,iCAAiC;QACjC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,oDAAoD;IACpD,4EAA4E;IAE5E;;;OAGG;IACH,6BAA6B,CAAC,QAAgB;QAC5C,mEAAmE;QACnE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC;aAC9E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACb,IAAI,IAAI,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE;YAC7C,IAAI,IAAI,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAC9C,CAAC;QAEJ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,SAAS,EAAE,QAAQ;gBACnB,YAAY,EAAE,KAAK;gBACnB,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,MAAM,SAAS,GAAwB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,QAAQ,GAA6B,IAAI,CAAC;QAC9C,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC,IAAI,SAAS,GAAG,IAAI,CAAC;QAErB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACnD,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;gBAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,QAAQ,GAAG,IAAI,CAAC;oBAChB,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;oBACjC,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;oBACrC,SAAS,GAAG,KAAK,CAAC;oBAClB,MAAM;gBACR,CAAC;qBAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACrB,2CAA2C;oBAC3C,QAAQ,GAAG,IAAI,CAAC;oBAChB,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;oBACjC,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;oBACrC,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,CAAC,SAAS;YACxB,YAAY,EAAE,QAAQ;YACtB,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,SAAS;SACtB,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,UAAU;IACV,4EAA4E;IAE5E,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED,mBAAmB,CAAC,QAAgB;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IACpF,CAAC;IAED,mBAAmB,CAAC,MAA2B;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,4EAA4E;IAC5E,mBAAmB;IACnB,4EAA4E;IAEpE,iBAAiB,CAAC,SAAiB;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,SAAS,YAAY,EACtC,mBAAmB,CACpB,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/ai/src/plugins/certification/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Plugin Certification Program
+ *
+ * 3-tier certification system for the DCYFR plugin marketplace.
+ *
+ * @module plugins/certification
+ */
+export { CertificationManager, CertificationError } from './certification-manager.js';
+export type { CertificationManagerConfig } from './certification-manager.js';
+export { CERTIFICATION_AUDIT_CHECKLIST, CERTIFICATION_PRICING_USD_CENTS, CERTIFICATION_TIER_LABELS, CERTIFICATION_VALIDITY_DAYS, CERTIFICATION_SCHEMA_SQL, } from './types.js';
+export type { CertificationTier, CertificationStatus, CertificationBadge, AuditChecklistCategory, AuditChecklistItem, AuditRequest, AuditChecklistResult, PluginCertificationSummary, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ai/src/plugins/certification/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../packages/ai/src/plugins/certification/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACtF,YAAY,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,kBAAkB,EAClB,YAAY,EACZ,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,YAAY,CAAC"}

package/dist/ai/src/plugins/certification/index.js

@@ -0,0 +1,10 @@
+/**
+ * Plugin Certification Program
+ *
+ * 3-tier certification system for the DCYFR plugin marketplace.
+ *
+ * @module plugins/certification
+ */
+export { CertificationManager, CertificationError } from './certification-manager.js';
+export { CERTIFICATION_AUDIT_CHECKLIST, CERTIFICATION_PRICING_USD_CENTS, CERTIFICATION_TIER_LABELS, CERTIFICATION_VALIDITY_DAYS, CERTIFICATION_SCHEMA_SQL, } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/ai/src/plugins/certification/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/ai/src/plugins/certification/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEtF,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,YAAY,CAAC"}

package/dist/ai/src/plugins/certification/types.d.ts

@@ -0,0 +1,128 @@
+/**
+ * Plugin Certification Program — Type Definitions
+ *
+ * Defines the 3-tier certification program (Bronze / Silver / Gold),
+ * badge system, audit checklist, and paid audit workflow.
+ *
+ * @module plugins/certification/types
+ */
+/**
+ * Bronze: Automated security scan pass (no critical/high CVEs, no secrets).
+ * Silver: Bronze + human security audit by DCYFR team.
+ * Gold:   Silver + third-party penetration test.
+ */
+export type CertificationTier = 'BRONZE' | 'SILVER' | 'GOLD';
+/** Pricing for each tier in USD cents. */
+export declare const CERTIFICATION_PRICING_USD_CENTS: Readonly<Record<CertificationTier, number>>;
+/** Human-readable tier names. */
+export declare const CERTIFICATION_TIER_LABELS: Readonly<Record<CertificationTier, string>>;
+/** Validity period in days for each tier. */
+export declare const CERTIFICATION_VALIDITY_DAYS: Readonly<Record<CertificationTier, number>>;
+export type CertificationStatus = 'PENDING_PAYMENT' | 'PAYMENT_RECEIVED' | 'IN_AUDIT' | 'CERTIFIED' | 'EXPIRED' | 'REVOKED' | 'FAILED';
+/** A verifiable certification badge with expiration and metadata. */
+export interface CertificationBadge {
+    /** UUID for this badge issuance. */
+    badge_id: string;
+    /** Plugin identifier. */
+    plugin_id: string;
+    /** Plugin version at time of certification. */
+    plugin_version: string;
+    /** Certification tier achieved. */
+    tier: CertificationTier;
+    /** When the certification was issued (ISO 8601). */
+    issued_at: string;
+    /** When the certification expires (ISO 8601). */
+    expires_at: string;
+    /** Certifying authority (e.g. 'DCYFR Security Team'). */
+    issued_by: string;
+    /** Short verification URL for marketplace display. */
+    verification_url: string;
+    /** SHA-256 hash of the plugin bundle at certification time. */
+    bundle_hash: string;
+}
+/** Category grouping for audit checklist items. */
+export type AuditChecklistCategory = 'AUTOMATED_SCAN' | 'PERMISSION_REVIEW' | 'CODE_QUALITY' | 'SECURITY_MANUAL' | 'PENETRATION_TEST';
+/** Single checklist item in a certification audit. */
+export interface AuditChecklistItem {
+    /** Unique item ID within the checklist (e.g. 'AUTO-001'). */
+    item_id: string;
+    /** Category for grouping in audit reports. */
+    category: AuditChecklistCategory;
+    /** Human-readable description of the check. */
+    description: string;
+    /** Which tiers require this item to pass. */
+    required_for_tiers: CertificationTier[];
+    /**
+     * Whether this item is automated (run by scanner) or manual (requires auditor).
+     */
+    automated: boolean;
+}
+/**
+ * Complete audit checklist defining all required checks per tier.
+ */
+export declare const CERTIFICATION_AUDIT_CHECKLIST: readonly AuditChecklistItem[];
+/**
+ * An audit request submitted by a plugin author, initiating the certification workflow.
+ * Payment is modeled as a structured intent — the caller is responsible for
+ * integrating with a payment provider (e.g. Stripe) and confirming payment before
+ * calling `confirmPayment()`.
+ */
+export interface AuditRequest {
+    /** UUID for this audit request. */
+    request_id: string;
+    /** Plugin being audited. */
+    plugin_id: string;
+    /** Plugin version at submission. */
+    plugin_version: string;
+    /** Tier being requested. */
+    tier: CertificationTier;
+    /** Plugin author / organization submitting the request. */
+    submitted_by: string;
+    /** When the request was submitted (ISO 8601). */
+    submitted_at: string;
+    /** Current status of this audit request. */
+    status: CertificationStatus;
+    /** Price in USD cents for this tier (0 for Bronze). */
+    price_usd_cents: number;
+    /** Payment provider reference ID (e.g. Stripe PaymentIntent ID). Null until payment initiated. */
+    payment_reference_id: string | null;
+    /** When payment was confirmed (ISO 8601). Null until confirmed. */
+    payment_confirmed_at: string | null;
+    /** Auditor assigned to this request. Null until assigned. */
+    auditor: string | null;
+    /** When the audit started (ISO 8601). Null until in-progress. */
+    audit_started_at: string | null;
+    /** When the audit completed (ISO 8601). Null until complete. */
+    audit_completed_at: string | null;
+    /** Array of checklist item IDs and their pass/fail outcome. */
+    checklist_results: AuditChecklistResult[];
+    /** Overall notes from the auditor. */
+    auditor_notes: string | null;
+    /** Badge issued upon successful certification. Null until CERTIFIED. */
+    badge: CertificationBadge | null;
+    /** Reason for failure or revocation, if applicable. */
+    failure_reason: string | null;
+}
+/** Result for a single checklist item within an audit. */
+export interface AuditChecklistResult {
+    item_id: string;
+    passed: boolean | null;
+    notes: string | null;
+    evaluated_at: string | null;
+    evaluated_by: string | null;
+}
+/** Certification status summary for marketplace plugin listings. */
+export interface PluginCertificationSummary {
+    plugin_id: string;
+    is_certified: boolean;
+    /** Highest achieved tier, or null if not certified. */
+    highest_tier: CertificationTier | null;
+    /** When certification expires, or null. */
+    expires_at: string | null;
+    /** Badge ID, or null if not certified. */
+    badge_id: string | null;
+    /** Whether certification is currently expired. */
+    is_expired: boolean;
+}
+export declare const CERTIFICATION_SCHEMA_SQL: string;
+//# sourceMappingURL=types.d.ts.map

package/dist/ai/src/plugins/certification/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../packages/ai/src/plugins/certification/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE7D,0CAA0C;AAC1C,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAI9E,CAAC;AAEX,iCAAiC;AACjC,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAIxE,CAAC;AAEX,6CAA6C;AAC7C,eAAO,MAAM,2BAA2B,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAI1E,CAAC;AAMX,MAAM,MAAM,mBAAmB,GAC3B,iBAAiB,GACjB,kBAAkB,GAClB,UAAU,GACV,WAAW,GACX,SAAS,GACT,SAAS,GACT,QAAQ,CAAC;AAMb,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,IAAI,EAAE,iBAAiB,CAAC;IACxB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,gBAAgB,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD,mDAAmD;AACnD,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,mBAAmB,GACnB,cAAc,GACd,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,QAAQ,EAAE,sBAAsB,CAAC;IACjC,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;IACxC;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAAS,kBAAkB,EAsH7D,CAAC;AAMX;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,uDAAuD;IACvD,eAAe,EAAE,MAAM,CAAC;IACxB,kGAAkG;IAClG,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,mEAAmE;IACnE,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iEAAiE;IACjE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gEAAgE;IAChE,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,+DAA+D;IAC/D,iBAAiB,EAAE,oBAAoB,EAAE,CAAC;IAC1C,sCAAsC;IACtC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wEAAwE;IACxE,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACjC,uDAAuD;IACvD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,0DAA0D;AAC1D,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAMD,oEAAoE;AACpE,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,uDAAuD;IACvD,YAAY,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACvC,2CAA2C;IAC3C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,kDAAkD;IAClD,UAAU,EAAE,OAAO,CAAC;CACrB;AAMD,eAAO,MAAM,wBAAwB,QAgD7B,CAAC"}