@emilia-protocol/gate 0.10.0 → 0.13.0

package/dist/metering.js

@@ -0,0 +1,227 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — usage metering (the value metric, EP-GATE-USAGE-v1).
+ *
+ * Pricing scales with what the gate actually protects: PROTECTED IRREVERSIBLE
+ * ACTIONS (guarded decisions — allows AND denies both consume enforcement) plus
+ * RECEIPT-YEARS under retention (one receipt kept one year = one receipt-year;
+ * horizons follow retention.js, default 6y = 2190 days). NEVER seats.
+ *
+ * Pure functions over evidence-log entries (`evidence.all()`); no clock, no
+ * network. The billing period is an explicit [periodStart, periodEnd) window —
+ * INCLUSIVE start, EXCLUSIVE end — so adjacent periods never double-count an
+ * entry sitting exactly on a boundary.
+ *
+ * Fail-closed posture for billing: an unbounded or reversed period is refused
+ * (thrown); malformed entries are surfaced in `integrity_warnings` rather than
+ * silently dropped; an entry whose allow flag is not literally `true` is
+ * counted as a deny; a statement over foreign or malformed usage is refused.
+ * `buildUsageStatement` output is deterministic (sorted keys + content hash)
+ * and UNSIGNED — the deployer signs it; the content hash binds that signature
+ * to exactly these numbers for billing reconciliation.
+ */
+import crypto from 'node:crypto';
+export const USAGE_VERSION = 'EP-GATE-USAGE-v1';
+const DAYS_PER_YEAR = 365;
+// Mirrors retention.js's cold-horizon default (coldDays = 2190 = 6y): a receipt
+// is presumed retained for the full audit horizon unless the entry states its own.
+const DEFAULT_RETENTION_YEARS = 2190 / DAYS_PER_YEAR;
+function sha256hex(s) {
+    return crypto.createHash('sha256').update(s).digest('hex');
+}
+/** Canonical JSON (recursive sorted keys) — matches evidence.js / @emilia-protocol/verify. */
+function canonical(v) {
+    if (v === null || v === undefined)
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return `[${v.map(canonical).join(',')}]`;
+    if (typeof v === 'object') {
+        return `{${Object.keys(v).sort().map((k) => JSON.stringify(k) + ':' + canonical(v[k])).join(',')}}`;
+    }
+    return JSON.stringify(v);
+}
+function toMs(t) {
+    if (t == null)
+        return null;
+    const ms = typeof t === 'number' ? t : Date.parse(t);
+    return Number.isFinite(ms) ? ms : null;
+}
+/** Key-sorted copy so output is byte-stable regardless of entry order. */
+function sortedCounts(map) {
+    const out = {};
+    for (const k of Object.keys(map).sort())
+        out[k] = map[k];
+    return out;
+}
+/** Entry-level day resolution (1/365y ≈ 0.00274) without float noise. */
+function round6(x) {
+    return Math.round(x * 1e6) / 1e6;
+}
+/**
+ * The retention this entry STATES for itself, in years.
+ * @returns {number|null|NaN} years, `null` when unstated (default applies),
+ *   `NaN` when stated but invalid (default applies + integrity warning — a
+ *   malformed stated value must never silently shrink the metered total).
+ */
+function statedRetentionYears(e) {
+    if (e.retention_years != null) {
+        const y = Number(e.retention_years);
+        return Number.isFinite(y) && y >= 0 ? y : NaN;
+    }
+    if (e.retention_days != null) {
+        const d = Number(e.retention_days);
+        return Number.isFinite(d) && d >= 0 ? d / DAYS_PER_YEAR : NaN;
+    }
+    return null;
+}
+/**
+ * Meter a billing period over evidence entries.
+ *
+ * Billable = `kind: 'decision'` entries on GUARDED actions (`not_guarded`
+ * pass-throughs are free; execution records are provenance, not enforcement).
+ * Window is [periodStart, periodEnd): inclusive start, exclusive end.
+ *
+ * @param {Array<object>} entries  evidence.all()
+ * @param {object} [o]
+ * @param {string|number} [o.periodStart]  ISO or ms — required
+ * @param {string|number} [o.periodEnd]    ISO or ms — required, >= periodStart
+ * @param {number} [o.retentionYearsDefault=6]  applied when an entry states no retention
+ * @returns {{'@version':string, protected_actions:number, allows:number, denies:number,
+ *   replays_blocked:number, by_action_type:object, by_tier:object,
+ *   receipt_years:number, retention_years_default:number, period:object, integrity_warnings:object[]}}
+ */
+export function meterUsage(entries = [], { periodStart, periodEnd, retentionYearsDefault = DEFAULT_RETENTION_YEARS, } = {}) {
+    const startMs = toMs(periodStart);
+    const endMs = toMs(periodEnd);
+    // An unbounded or reversed period is not meterable — refuse rather than emit
+    // a statement whose window cannot be reconciled.
+    if (startMs == null || endMs == null) {
+        throw new Error('meterUsage: periodStart and periodEnd are required (ISO string or ms)');
+    }
+    if (endMs < startMs)
+        throw new Error('meterUsage: periodEnd must be >= periodStart');
+    if (!Number.isFinite(retentionYearsDefault) || retentionYearsDefault < 0) {
+        throw new Error('meterUsage: retentionYearsDefault must be a finite number >= 0');
+    }
+    const warnings = [];
+    const byAction = Object.create(null);
+    const byTier = Object.create(null);
+    let protectedActions = 0;
+    let allows = 0;
+    let denies = 0;
+    let replaysBlocked = 0;
+    let receiptYears = 0;
+    entries.forEach((e, index) => {
+        if (!e || typeof e !== 'object' || Array.isArray(e)) {
+            warnings.push({ index, reason: 'not_an_object' });
+            return;
+        }
+        const t = toMs(e.at);
+        if (t == null) {
+            // Unplaceable in ANY period — surfaced, never silently dropped.
+            warnings.push({ index, reason: 'unparseable_at' });
+            return;
+        }
+        if (t < startMs || t >= endMs)
+            return; // outside [start, end)
+        if (typeof e.kind !== 'string' || e.kind.length === 0) {
+            warnings.push({ index, reason: 'missing_kind' });
+            return;
+        }
+        if (e.kind !== 'decision')
+            return; // execution/other records are not billable
+        if (e.reason === 'not_guarded')
+            return; // pass-throughs are free by design
+        protectedActions += 1;
+        // Fail closed: only a literal `true` counts as an allow.
+        if (e.allow === true)
+            allows += 1;
+        else
+            denies += 1;
+        if (e.reason === 'replay_refused')
+            replaysBlocked += 1;
+        const action = typeof e.action === 'string' && e.action ? e.action : 'unknown';
+        byAction[action] = (byAction[action] || 0) + 1;
+        const tier = typeof e.required_tier === 'string' && e.required_tier ? e.required_tier : 'unknown';
+        byTier[tier] = (byTier[tier] || 0) + 1;
+        const stated = statedRetentionYears(e);
+        if (Number.isNaN(stated)) {
+            warnings.push({ index, reason: 'invalid_stated_retention' });
+            receiptYears += retentionYearsDefault;
+        }
+        else {
+            receiptYears += stated ?? retentionYearsDefault;
+        }
+    });
+    return {
+        '@version': USAGE_VERSION,
+        period: {
+            start: new Date(startMs).toISOString(),
+            end: new Date(endMs).toISOString(),
+            bounds: 'inclusive_start_exclusive_end',
+        },
+        protected_actions: protectedActions,
+        allows,
+        denies,
+        replays_blocked: replaysBlocked,
+        by_action_type: sortedCounts(byAction),
+        by_tier: sortedCounts(byTier),
+        receipt_years: round6(receiptYears),
+        retention_years_default: retentionYearsDefault,
+        integrity_warnings: warnings,
+    };
+}
+/**
+ * Build the signed-ready usage statement handed to billing reconciliation.
+ * UNSIGNED — the deployer signs it; `content_hash` (sha256 over the canonical
+ * JSON of everything else) binds that signature to exactly these numbers.
+ * Deterministic: same usage + org → byte-identical statement, regardless of
+ * the entry order the usage was metered from.
+ * @param {object} usage  a USAGE_VERSION object from meterUsage
+ * @param {{ org?: string }} [o]
+ */
+export function buildUsageStatement(usage, { org } = {}) {
+    // Never emit a statement over an artifact of a different or unknown format,
+    // and never one that fails to name who it bills.
+    if (!usage || usage['@version'] !== USAGE_VERSION) {
+        throw new Error(`buildUsageStatement: usage must be a ${USAGE_VERSION} object from meterUsage`);
+    }
+    if (!org || typeof org !== 'string') {
+        throw new Error('buildUsageStatement: org is required — a statement must name the billed party');
+    }
+    if (!usage.period || !usage.period.start || !usage.period.end) {
+        throw new Error('buildUsageStatement: usage.period is missing');
+    }
+    for (const k of ['protected_actions', 'allows', 'denies', 'replays_blocked', 'receipt_years']) {
+        if (!Number.isFinite(usage[k]) || usage[k] < 0) {
+            throw new Error(`buildUsageStatement: usage.${k} must be a finite number >= 0`);
+        }
+    }
+    const warningCount = Array.isArray(usage.integrity_warnings) ? usage.integrity_warnings.length : 0;
+    const body = {
+        '@version': USAGE_VERSION,
+        kind: 'usage_statement',
+        org,
+        period: {
+            start: usage.period.start,
+            end: usage.period.end,
+            bounds: 'inclusive_start_exclusive_end',
+        },
+        protected_actions: usage.protected_actions,
+        allows: usage.allows,
+        denies: usage.denies,
+        replays_blocked: usage.replays_blocked,
+        by_action_type: sortedCounts(usage.by_action_type || {}),
+        by_tier: sortedCounts(usage.by_tier || {}),
+        receipt_years: usage.receipt_years,
+        retention_years_default: usage.retention_years_default ?? DEFAULT_RETENTION_YEARS,
+        // Data-quality signal for the reconciler: a statement metered over a log
+        // with integrity warnings is flagged incomplete, never silently clean.
+        integrity_warning_count: warningCount,
+        complete: warningCount === 0,
+    };
+    return { ...body, content_hash: sha256hex(canonical(body)) };
+}
+export default { meterUsage, buildUsageStatement, USAGE_VERSION };
+//# sourceMappingURL=metering.js.map

package/dist/metering.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metering.js","sourceRoot":"","sources":["../src/metering.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEhD,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,gFAAgF;AAChF,mFAAmF;AACnF,MAAM,uBAAuB,GAAG,IAAI,GAAG,aAAa,CAAC;AAErD,SAAS,SAAS,CAAC,CAAC;IAClB,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,8FAA8F;AAC9F,SAAS,SAAS,CAAC,CAAC;IAClB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/D,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtG,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,IAAI,CAAC,CAAC;IACb,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,GAAG;IACvB,MAAM,GAAG,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,SAAS,MAAM,CAAC,CAAC;IACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,UAAU,CAAC,UAAiB,EAAE,EAAE,EAC9C,WAAW,EACX,SAAS,EACT,qBAAqB,GAAG,uBAAuB,MAK7C,EAAE;IACJ,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,6EAA6E;IAC7E,iDAAiD;IACjD,IAAI,OAAO,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,KAAK,GAAG,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,qBAAqB,GAAG,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,QAAQ,GAAwC,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;QAC3B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YACd,gEAAgE;YAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK;YAAE,OAAO,CAAC,uBAAuB;QAC9D,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,CAAC,2CAA2C;QAC9E,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa;YAAE,OAAO,CAAC,mCAAmC;QAE3E,gBAAgB,IAAI,CAAC,CAAC;QACtB,yDAAyD;QACzD,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,CAAC;;YAAM,MAAM,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB;YAAE,cAAc,IAAI,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/E,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC7D,YAAY,IAAI,qBAAqB,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,YAAY,IAAI,MAAM,IAAI,qBAAqB,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,UAAU,EAAE,aAAa;QACzB,MAAM,EAAE;YACN,KAAK,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;YACtC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;YAClC,MAAM,EAAE,+BAA+B;SACxC;QACD,iBAAiB,EAAE,gBAAgB;QACnC,MAAM;QACN,MAAM;QACN,eAAe,EAAE,cAAc;QAC/B,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC;QACtC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;QAC7B,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC;QACnC,uBAAuB,EAAE,qBAAqB;QAC9C,kBAAkB,EAAE,QAAQ;KAC7B,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAK,EAAE,EAAE,GAAG,KAAuB,EAAE;IACvE,4EAA4E;IAC5E,iDAAiD;IACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,aAAa,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wCAAwC,aAAa,yBAAyB,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,eAAe,CAAC,EAAE,CAAC;QAC9F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,+BAA+B,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,aAAa;QACzB,IAAI,EAAE,iBAAiB;QACvB,GAAG;QACH,MAAM,EAAE;YACN,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;YACzB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG;YACrB,MAAM,EAAE,+BAA+B;SACxC;QACD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;QACxD,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,IAAI,uBAAuB;QACjF,yEAAyE;QACzE,uEAAuE;QACvE,uBAAuB,EAAE,YAAY;QACrC,QAAQ,EAAE,YAAY,KAAK,CAAC;KAC7B,CAAC;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,eAAe,EAAE,UAAU,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC"}

package/dist/metrics.d.ts

@@ -0,0 +1,68 @@
+/**
+ * EMILIA Gate — Prometheus metrics exposition (EP-GATE-METRICS-v1).
+ *
+ * Zero-dependency operational metrics over gate decisions, rendered in the
+ * Prometheus text exposition format 0.0.4 (HELP/TYPE lines, escaped label
+ * values, stable sorted output). Feed it the gate's decision entries — either
+ * the evidence-log entry ({ allow, action, reason, have_tier/required_tier,
+ * at }) or the `check()` output — via `onDecision`; scrape via `render()` or
+ * mount `handler()` on any framework.
+ *
+ * CONSTRAINT (enforced): metrics must NEVER throw into the enforcement path.
+ * `onDecision` sits on the gate's decision hot path; observability is never
+ * allowed to break enforcement. Any entry it cannot interpret — wrong type,
+ * underivable outcome, even a poisoned object whose property getters throw —
+ * increments ep_gate_metrics_malformed_total and returns. No exception
+ * escapes `onDecision`, ever.
+ *
+ * CARDINALITY GUARD: the action_type label is capped to a bounded set via the
+ * `maxSeries` option (default 64 distinct values). Once the cap is reached,
+ * new action types bucket to action_type="_other" so a hostile or buggy
+ * caller cannot blow up the time-series database. All label values are also
+ * length-capped. outcome and reason_class are bounded by construction.
+ *
+ * Deterministic and pure: time is injected (`now`), used only when an entry
+ * carries no usable timestamp. Same entries in, same exposition text out.
+ */
+export declare const METRICS_VERSION = "EP-GATE-METRICS-v1";
+/** Prometheus text exposition format 0.0.4 content type. */
+export declare const METRICS_CONTENT_TYPE = "text/plain; version=0.0.4; charset=utf-8";
+/** Bounded denial reason classes — every gate refusal maps into exactly one. */
+export declare const REASON_CLASSES: string[];
+/**
+ * Classify a gate denial reason string into one of REASON_CLASSES. Bounded by
+ * construction: unknown reasons land in 'other', never in a fresh label value.
+ * @param {string} reason e.g. 'replay_refused', 'receipt_rejected:bad_signature'
+ * @returns {string} one of REASON_CLASSES
+ */
+export declare function classifyDenialReason(reason: any): "replay" | "receipt_missing" | "receipt_invalid" | "assurance" | "execution_binding" | "infrastructure" | "other";
+/**
+ * Create a metrics registry for one gate.
+ * @param {object} [o]
+ * @param {number} [o.maxSeries=64] cap on distinct action_type label values; overflow buckets to "_other"
+ * @param {number|function} [o.now=Date.now] injected clock (ms or () => ms) — used only when an entry has no usable timestamp
+ * @returns {{ onDecision: (entry: object) => void, render: () => string, handler: () => { status: number, headers: object, body: string } }}
+ */
+export declare function createMetrics({ maxSeries, now }?: {
+    maxSeries?: number | undefined;
+    now?: (() => number) | undefined;
+}): {
+    onDecision: (entry: any) => void;
+    render: () => string;
+    handler: () => {
+        status: number;
+        headers: {
+            'content-type': string;
+        };
+        body: string;
+    };
+};
+declare const _default: {
+    createMetrics: typeof createMetrics;
+    classifyDenialReason: typeof classifyDenialReason;
+    METRICS_VERSION: string;
+    METRICS_CONTENT_TYPE: string;
+    REASON_CLASSES: string[];
+};
+export default _default;
+//# sourceMappingURL=metrics.d.ts.map

package/dist/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,eAAO,MAAM,eAAe,uBAAuB,CAAC;AAEpD,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB,6CAA6C,CAAC;AAE/E,gFAAgF;AAChF,eAAO,MAAM,cAAc,UAQ1B,CAAC;AAQF;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,KAAA,qHAS1C;AAoCD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,EAAE,SAAc,EAAE,GAAc,EAAE;;;CAAK;;;;;;;;;;EAyHpE;;;;;;;;AAED,wBAA8G"}

package/dist/metrics.js

@@ -0,0 +1,242 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Prometheus metrics exposition (EP-GATE-METRICS-v1).
+ *
+ * Zero-dependency operational metrics over gate decisions, rendered in the
+ * Prometheus text exposition format 0.0.4 (HELP/TYPE lines, escaped label
+ * values, stable sorted output). Feed it the gate's decision entries — either
+ * the evidence-log entry ({ allow, action, reason, have_tier/required_tier,
+ * at }) or the `check()` output — via `onDecision`; scrape via `render()` or
+ * mount `handler()` on any framework.
+ *
+ * CONSTRAINT (enforced): metrics must NEVER throw into the enforcement path.
+ * `onDecision` sits on the gate's decision hot path; observability is never
+ * allowed to break enforcement. Any entry it cannot interpret — wrong type,
+ * underivable outcome, even a poisoned object whose property getters throw —
+ * increments ep_gate_metrics_malformed_total and returns. No exception
+ * escapes `onDecision`, ever.
+ *
+ * CARDINALITY GUARD: the action_type label is capped to a bounded set via the
+ * `maxSeries` option (default 64 distinct values). Once the cap is reached,
+ * new action types bucket to action_type="_other" so a hostile or buggy
+ * caller cannot blow up the time-series database. All label values are also
+ * length-capped. outcome and reason_class are bounded by construction.
+ *
+ * Deterministic and pure: time is injected (`now`), used only when an entry
+ * carries no usable timestamp. Same entries in, same exposition text out.
+ */
+export const METRICS_VERSION = 'EP-GATE-METRICS-v1';
+/** Prometheus text exposition format 0.0.4 content type. */
+export const METRICS_CONTENT_TYPE = 'text/plain; version=0.0.4; charset=utf-8';
+/** Bounded denial reason classes — every gate refusal maps into exactly one. */
+export const REASON_CLASSES = [
+    'replay', // replay_refused — one-time consumption caught a reuse
+    'receipt_missing', // receipt_required — guarded action arrived with no receipt
+    'receipt_invalid', // receipt_rejected:* — signature/freshness/scope/id failures
+    'assurance', // assurance_too_low | unknown_required_tier
+    'execution_binding', // execution_binding_failed — claim != observed mutation
+    'infrastructure', // evidence_log_failed | consumption_store_lacks_reserve
+    'other', // anything this version does not model
+];
+/** Longest label value we will expose; longer values are truncated (bounded exposition size). */
+const MAX_LABEL_VALUE_LEN = 128;
+/** Overflow bucket for the action_type cardinality guard. */
+const OTHER_BUCKET = '_other';
+/**
+ * Classify a gate denial reason string into one of REASON_CLASSES. Bounded by
+ * construction: unknown reasons land in 'other', never in a fresh label value.
+ * @param {string} reason e.g. 'replay_refused', 'receipt_rejected:bad_signature'
+ * @returns {string} one of REASON_CLASSES
+ */
+export function classifyDenialReason(reason) {
+    if (typeof reason !== 'string')
+        return 'other';
+    if (reason === 'replay_refused' || reason.includes('replay'))
+        return 'replay';
+    if (reason === 'receipt_required')
+        return 'receipt_missing';
+    if (reason.startsWith('receipt_rejected'))
+        return 'receipt_invalid';
+    if (reason === 'assurance_too_low' || reason === 'unknown_required_tier')
+        return 'assurance';
+    if (reason === 'execution_binding_failed')
+        return 'execution_binding';
+    if (reason === 'evidence_log_failed' || reason === 'consumption_store_lacks_reserve')
+        return 'infrastructure';
+    return 'other';
+}
+/** Escape a label value per the exposition format: backslash, quote, newline. */
+function escapeLabelValue(v) {
+    return String(v)
+        .replace(/\\/g, '\\\\')
+        .replace(/"/g, '\\"')
+        .replace(/\n/g, '\\n');
+}
+/** Escape HELP text per the exposition format: backslash and newline only. */
+function escapeHelp(v) {
+    return String(v).replace(/\\/g, '\\\\').replace(/\n/g, '\\n');
+}
+/** Normalize a raw value into a safe, length-capped label value. */
+function normLabel(raw, fallback) {
+    if (typeof raw !== 'string' || raw.length === 0)
+        return fallback;
+    return raw.length > MAX_LABEL_VALUE_LEN ? raw.slice(0, MAX_LABEL_VALUE_LEN) : raw;
+}
+/** Render a sorted, escaped label set: {a="x",b="y"} — stable key order. */
+function renderLabels(obj) {
+    const keys = Object.keys(obj).sort();
+    return `{${keys.map((k) => `${k}="${escapeLabelValue(obj[k])}"`).join(',')}}`;
+}
+const METRICS = [
+    { name: 'ep_gate_decisions_total', type: 'counter', help: 'Gate decisions by outcome, action type, and credited assurance tier.' },
+    { name: 'ep_gate_denials_total', type: 'counter', help: 'Denied gate decisions by bounded denial reason class.' },
+    { name: 'ep_gate_evidence_entries_total', type: 'counter', help: 'Evidence-log entries recorded for gate decisions.' },
+    { name: 'ep_gate_last_decision_timestamp_seconds', type: 'gauge', help: 'Unix timestamp (seconds) of the most recent gate decision.' },
+    { name: 'ep_gate_metrics_malformed_total', type: 'counter', help: 'Decision entries the metrics layer could not interpret (dropped, never thrown).' },
+    { name: 'ep_gate_replays_blocked_total', type: 'counter', help: 'Receipt replays refused by one-time consumption.' },
+];
+/**
+ * Create a metrics registry for one gate.
+ * @param {object} [o]
+ * @param {number} [o.maxSeries=64] cap on distinct action_type label values; overflow buckets to "_other"
+ * @param {number|function} [o.now=Date.now] injected clock (ms or () => ms) — used only when an entry has no usable timestamp
+ * @returns {{ onDecision: (entry: object) => void, render: () => string, handler: () => { status: number, headers: object, body: string } }}
+ */
+export function createMetrics({ maxSeries = 64, now = Date.now } = {}) {
+    // Config is clamped, not thrown: a bad option must not brick metrics either.
+    const cap = (Number.isInteger(maxSeries) && maxSeries > 0) ? maxSeries : 64;
+    const decisions = new Map(); // rendered label set -> count
+    const denials = new Map(); // rendered label set -> count
+    let replaysBlocked = 0;
+    let evidenceEntries = 0;
+    let malformed = 0;
+    let lastDecisionSeconds = null; // gauge; no sample until the first decision
+    const actionTypes = new Set(); // cardinality guard for action_type
+    function boundedActionType(raw) {
+        const v = normLabel(raw, 'unknown');
+        if (actionTypes.has(v))
+            return v;
+        if (actionTypes.size < cap) {
+            actionTypes.add(v);
+            return v;
+        }
+        return OTHER_BUCKET;
+    }
+    function inc(map, key) {
+        map.set(key, (map.get(key) || 0) + 1);
+    }
+    /**
+     * Observe one gate decision. NEVER throws — see the module constraint. A
+     * malformed entry (non-object, underivable outcome, throwing getters, ...)
+     * increments ep_gate_metrics_malformed_total and returns.
+     */
+    function onDecision(entry) {
+        try {
+            if (!entry || typeof entry !== 'object') {
+                malformed += 1;
+                return;
+            }
+            // Outcome: the authoritative field is the boolean `allow` (evidence
+            // entry and check() output both carry it). A string outcome is accepted
+            // only if it is exactly 'allow'/'deny'. Anything else is malformed.
+            let outcome;
+            if (entry.allow === true)
+                outcome = 'allow';
+            else if (entry.allow === false)
+                outcome = 'deny';
+            else if (entry.outcome === 'allow' || entry.outcome === 'deny')
+                outcome = entry.outcome;
+            else {
+                malformed += 1;
+                return;
+            }
+            const actionType = boundedActionType(entry.action_type ?? entry.action);
+            const tier = normLabel(entry.tier ?? entry.have_tier ?? entry.required_tier, 'unknown');
+            inc(decisions, renderLabels({ outcome, action_type: actionType, tier }));
+            if (outcome === 'deny') {
+                const reasonClass = classifyDenialReason(entry.reason);
+                inc(denials, renderLabels({ reason_class: reasonClass }));
+                if (reasonClass === 'replay')
+                    replaysBlocked += 1;
+            }
+            // Each decision appends one evidence record — unless the entry says the
+            // write failed outright (check() output carries evidence: null then).
+            if (entry.evidence !== null)
+                evidenceEntries += 1;
+            // Gauge: prefer the entry's own timestamp (`at` ISO/ms), else the
+            // injected clock. An unusable clock skips the gauge — never throws.
+            const at = entry.at ?? entry.created_at ?? null;
+            let ms = null;
+            if (typeof at === 'number' && Number.isFinite(at))
+                ms = at;
+            else if (typeof at === 'string') {
+                const p = Date.parse(at);
+                if (Number.isFinite(p))
+                    ms = p;
+            }
+            if (ms == null) {
+                try {
+                    const n = typeof now === 'function' ? now() : now;
+                    if (typeof n === 'number' && Number.isFinite(n))
+                        ms = n;
+                }
+                catch { /* unusable injected clock: skip the gauge update */ }
+            }
+            if (ms != null)
+                lastDecisionSeconds = ms / 1000;
+        }
+        catch {
+            // The never-throw guarantee: a poisoned entry (throwing getter, hostile
+            // proxy) lands here. Count it, drop it, return. Enforcement continues.
+            malformed += 1;
+        }
+    }
+    /** Render Prometheus text format 0.0.4. Deterministic: metrics in fixed order, series sorted. */
+    function render() {
+        const lines = [];
+        for (const m of METRICS) {
+            lines.push(`# HELP ${m.name} ${escapeHelp(m.help)}`);
+            lines.push(`# TYPE ${m.name} ${m.type}`);
+            switch (m.name) {
+                case 'ep_gate_decisions_total':
+                    for (const k of [...decisions.keys()].sort())
+                        lines.push(`${m.name}${k} ${decisions.get(k)}`);
+                    break;
+                case 'ep_gate_denials_total':
+                    for (const k of [...denials.keys()].sort())
+                        lines.push(`${m.name}${k} ${denials.get(k)}`);
+                    break;
+                case 'ep_gate_evidence_entries_total':
+                    lines.push(`${m.name} ${evidenceEntries}`);
+                    break;
+                case 'ep_gate_last_decision_timestamp_seconds':
+                    // No sample until the first decision — a fabricated 0 would read as 1970.
+                    if (lastDecisionSeconds != null)
+                        lines.push(`${m.name} ${lastDecisionSeconds}`);
+                    break;
+                case 'ep_gate_metrics_malformed_total':
+                    lines.push(`${m.name} ${malformed}`);
+                    break;
+                case 'ep_gate_replays_blocked_total':
+                    lines.push(`${m.name} ${replaysBlocked}`);
+                    break;
+                /* c8 ignore next 2 -- METRICS is a module constant; no other names exist */
+                default:
+                    break;
+            }
+        }
+        return lines.join('\n') + '\n';
+    }
+    /** Framework-agnostic scrape response: mount on any router/handler. */
+    function handler() {
+        return {
+            status: 200,
+            headers: { 'content-type': METRICS_CONTENT_TYPE },
+            body: render(),
+        };
+    }
+    return { onDecision, render, handler };
+}
+export default { createMetrics, classifyDenialReason, METRICS_VERSION, METRICS_CONTENT_TYPE, REASON_CLASSES };
+//# sourceMappingURL=metrics.js.map

package/dist/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAEpD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AAE/E,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,QAAQ,EAAa,uDAAuD;IAC5E,iBAAiB,EAAI,4DAA4D;IACjF,iBAAiB,EAAI,6DAA6D;IAClF,WAAW,EAAU,4CAA4C;IACjE,mBAAmB,EAAE,wDAAwD;IAC7E,gBAAgB,EAAK,wDAAwD;IAC7E,OAAO,EAAc,uCAAuC;CAC7D,CAAC;AAEF,iGAAiG;AACjG,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,6DAA6D;AAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAM;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC/C,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9E,IAAI,MAAM,KAAK,kBAAkB;QAAE,OAAO,iBAAiB,CAAC;IAC5D,IAAI,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACpE,IAAI,MAAM,KAAK,mBAAmB,IAAI,MAAM,KAAK,uBAAuB;QAAE,OAAO,WAAW,CAAC;IAC7F,IAAI,MAAM,KAAK,0BAA0B;QAAE,OAAO,mBAAmB,CAAC;IACtE,IAAI,MAAM,KAAK,qBAAqB,IAAI,MAAM,KAAK,iCAAiC;QAAE,OAAO,gBAAgB,CAAC;IAC9G,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,CAAC,CAAC;SACb,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,SAAS,UAAU,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,oEAAoE;AACpE,SAAS,SAAS,CAAC,GAAG,EAAE,QAAQ;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjE,OAAO,GAAG,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACpF,CAAC;AAED,4EAA4E;AAC5E,SAAS,YAAY,CAAC,GAAG;IACvB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAChF,CAAC;AAED,MAAM,OAAO,GAAG;IACd,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,sEAAsE,EAAE;IAClI,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,uDAAuD,EAAE;IACjH,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,mDAAmD,EAAE;IACtH,EAAE,IAAI,EAAE,yCAAyC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,4DAA4D,EAAE;IACtI,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iFAAiF,EAAE;IACrJ,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kDAAkD,EAAE;CACrH,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;IACnE,6EAA6E;IAC7E,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5E,MAAM,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,8BAA8B;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC,CAAG,8BAA8B;IAC3D,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,mBAAmB,GAAkB,IAAI,CAAC,CAAC,4CAA4C;IAE3F,MAAM,WAAW,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,oCAAoC;IAEnE,SAAS,iBAAiB,CAAC,GAAG;QAC5B,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACjC,IAAI,WAAW,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;YAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAC7D,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG;QACnB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,SAAS,UAAU,CAAC,KAAK;QACvB,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAAC,SAAS,IAAI,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAEpE,oEAAoE;YACpE,wEAAwE;YACxE,oEAAoE;YACpE,IAAI,OAAO,CAAC;YACZ,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;gBAAE,OAAO,GAAG,OAAO,CAAC;iBACvC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,GAAG,MAAM,CAAC;iBAC5C,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;gBAAE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;iBACnF,CAAC;gBAAC,SAAS,IAAI,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAEhC,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;YAExF,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAEzE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACvD,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBAC1D,IAAI,WAAW,KAAK,QAAQ;oBAAE,cAAc,IAAI,CAAC,CAAC;YACpD,CAAC;YAED,wEAAwE;YACxE,sEAAsE;YACtE,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;gBAAE,eAAe,IAAI,CAAC,CAAC;YAElD,kEAAkE;YAClE,oEAAoE;YACpE,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC;YAChD,IAAI,EAAE,GAAkB,IAAI,CAAC;YAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,EAAE,GAAG,EAAE,CAAC;iBACtD,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAAE,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAC9F,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;oBAClD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;wBAAE,EAAE,GAAG,CAAC,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC,CAAC,oDAAoD,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,EAAE,IAAI,IAAI;gBAAE,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,uEAAuE;YACvE,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,iGAAiG;IACjG,SAAS,MAAM;QACb,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,yBAAyB;oBAC5B,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;wBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC9F,MAAM;gBACR,KAAK,uBAAuB;oBAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;wBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC1F,MAAM;gBACR,KAAK,gCAAgC;oBACnC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC,CAAC;oBAC3C,MAAM;gBACR,KAAK,yCAAyC;oBAC5C,0EAA0E;oBAC1E,IAAI,mBAAmB,IAAI,IAAI;wBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,mBAAmB,EAAE,CAAC,CAAC;oBAChF,MAAM;gBACR,KAAK,iCAAiC;oBACpC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;oBACrC,MAAM;gBACR,KAAK,+BAA+B;oBAClC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC,CAAC;oBAC1C,MAAM;gBACR,4EAA4E;gBAC5E;oBACE,MAAM;YACV,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACjC,CAAC;IAED,uEAAuE;IACvE,SAAS,OAAO;QACd,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,oBAAoB,EAAE;YACjD,IAAI,EAAE,MAAM,EAAE;SACf,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,eAAe,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,oBAAoB,EAAE,cAAc,EAAE,CAAC"}