@emilia-protocol/gate 0.10.0 → 0.13.0

package/dist/runtime-monitor.js

@@ -0,0 +1,197 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Runtime bridge for the Gate lifecycle.
+ *
+ * This is deliberately an explicit, reviewable monitor rather than a claim
+ * that TLA+ can be mechanically compiled into JavaScript. Its transition
+ * table mirrors the load-bearing lifecycle invariants in
+ * formal/ep_handshake.tla: an effect follows authorization, consumption is
+ * one-way, and execution evidence follows the effect attempt. A divergence
+ * enters fail-closed safe mode; recovery requires an operator-supplied
+ * authorizer and never re-authorizes an old receipt.
+ */
+export const RUNTIME_MONITOR_VERSION = 'EP-GATE-RUNTIME-MONITOR-v1';
+export const RUNTIME_MONITOR_MODES = Object.freeze({
+    NORMAL: 'normal',
+    DEGRADED: 'degraded',
+    LOCKDOWN: 'lockdown',
+});
+export const RUNTIME_INVARIANTS = Object.freeze({
+    CONSUME_ONCE: 'ConsumeOnceSafety',
+    WRITE_BYPASS: 'WriteBypassSafety',
+    SIGNOFF_BINDING: 'SignoffBindingMatch',
+});
+const TIER_RANK = Object.freeze({ software: 0, class_a: 1, quorum: 2 });
+const SAFE_MODE_TIER = 'class_a';
+const MAX_EVENTS = 256;
+const MAX_CYCLES = 1024;
+function isPromiseLike(value) {
+    return value !== null
+        && (typeof value === 'object' || typeof value === 'function')
+        && typeof value.then === 'function';
+}
+function publicContext(context = {}) {
+    return {
+        cycle_id: context.cycle_id ?? null,
+        action: typeof context.action === 'string' ? context.action : null,
+        receipt_id: typeof context.receipt_id === 'string' ? context.receipt_id : null,
+        phase: context.phase ?? null,
+    };
+}
+function copyEvent(event) {
+    return Object.freeze({ ...event, context: Object.freeze({ ...event.context }) });
+}
+/**
+ * Create a process-local monitor. Operators should export divergence events to
+ * durable SIEM/evidence storage through onDivergence; the monitor itself keeps
+ * only a bounded diagnostic buffer.
+ *
+ * @param {{ now?: (() => number) | number, onDivergence?: ((event: object) => any) | null, authorizeRecovery?: ((input: object) => boolean) | null }} [options]
+ */
+export function createRuntimeMonitor({ now = Date.now, onDivergence = null, authorizeRecovery = null, } = {}) {
+    let mode = RUNTIME_MONITOR_MODES.NORMAL;
+    let sequence = 0;
+    const cycles = new Map();
+    const events = [];
+    function timestamp() {
+        const value = typeof now === 'function' ? now() : now;
+        return new Date(Number(value)).toISOString();
+    }
+    function clockValue() {
+        return typeof now === 'function' ? now() : now;
+    }
+    function emitDivergence(cycle, theorem, expected, actual, severity = 'critical') {
+        const event = copyEvent({
+            version: RUNTIME_MONITOR_VERSION,
+            type: 'SPEC_DIVERGENCE',
+            at: timestamp(),
+            theorem,
+            expected,
+            actual,
+            severity,
+            context: publicContext({ ...cycle, phase: cycle?.phase }),
+        });
+        events.push(event);
+        if (events.length > MAX_EVENTS)
+            events.shift();
+        mode = severity === 'critical' ? RUNTIME_MONITOR_MODES.LOCKDOWN : RUNTIME_MONITOR_MODES.DEGRADED;
+        if (typeof onDivergence === 'function') {
+            try {
+                const result = onDivergence(event);
+                if (isPromiseLike(result))
+                    result.catch(() => { });
+            }
+            catch { /* monitoring must not weaken the fail-closed transition */ }
+        }
+        return { ok: false, reason: `runtime_divergence:${theorem}`, event };
+    }
+    function fail(cycle, theorem, expected, actual, severity = 'critical') {
+        return emitDivergence(cycle, theorem, expected, actual, severity);
+    }
+    function transition(cycleId, event, details = {}) {
+        const cycle = cycles.get(cycleId);
+        if (!cycle) {
+            return fail({ cycle_id: cycleId, ...details }, RUNTIME_INVARIANTS.WRITE_BYPASS, 'known runtime cycle', 'unknown runtime cycle');
+        }
+        if (event === 'decision') {
+            if (cycle.phase !== 'checking') {
+                return fail(cycle, RUNTIME_INVARIANTS.WRITE_BYPASS, 'checking → decision', `${cycle.phase} → decision`);
+            }
+            if (details.allow === true && details.status !== 200) {
+                return fail(cycle, RUNTIME_INVARIANTS.WRITE_BYPASS, 'allow requires HTTP 200', `allow with ${details.status}`);
+            }
+            if (details.allow === true && details.guarded === true && !details.receipt_id) {
+                return fail(cycle, RUNTIME_INVARIANTS.SIGNOFF_BINDING, 'guarded allow has receipt_id', 'guarded allow without receipt_id');
+            }
+            cycle.phase = details.allow === true ? 'authorized' : 'refused';
+            cycle.allow = details.allow === true;
+            cycle.reason = details.reason ?? null;
+            return { ok: true };
+        }
+        const expected = {
+            effect_attempted: ['authorized'],
+            effect_returned: ['effect_attempted'],
+            effect_failed: ['effect_attempted', 'effect_returned'],
+            capability_refused: ['authorized'],
+            consumed: ['effect_returned', 'effect_failed'],
+            execution_recorded: ['consumed'],
+        }[event];
+        if (!expected || !expected.includes(cycle.phase)) {
+            const theorem = event === 'consumed'
+                ? RUNTIME_INVARIANTS.CONSUME_ONCE
+                : RUNTIME_INVARIANTS.WRITE_BYPASS;
+            return fail(cycle, theorem, `${expected?.join(' or ') || 'known event'} → ${event}`, `${cycle.phase} → ${event}`);
+        }
+        if (event === 'consumed' && cycle.consumed === true) {
+            return fail(cycle, RUNTIME_INVARIANTS.CONSUME_ONCE, 'consumed at most once', 'second consumption transition');
+        }
+        cycle.phase = event;
+        if (event === 'consumed')
+            cycle.consumed = true;
+        if (event === 'execution_recorded')
+            cycle.complete = true;
+        return { ok: true };
+    }
+    return {
+        version: RUNTIME_MONITOR_VERSION,
+        beginCheck({ action = null, receipt_id = null } = {}) {
+            const cycle_id = `rt_${Number(clockValue()).toString(36)}_${(++sequence).toString(36)}`;
+            cycles.set(cycle_id, { cycle_id, action, receipt_id, phase: 'checking', consumed: false });
+            while (cycles.size > MAX_CYCLES)
+                cycles.delete(cycles.keys().next().value);
+            return cycle_id;
+        },
+        preflight({ hasReceipt } = {}) {
+            if (mode === RUNTIME_MONITOR_MODES.NORMAL || hasReceipt === true)
+                return { ok: true };
+            return { ok: false, reason: 'runtime_safe_mode_signoff_required', mode };
+        },
+        minimumAssuranceTier(declaredTier) {
+            if (mode === RUNTIME_MONITOR_MODES.NORMAL || declaredTier === undefined || declaredTier === null)
+                return declaredTier;
+            return (TIER_RANK[declaredTier] ?? 0) < TIER_RANK[SAFE_MODE_TIER] ? SAFE_MODE_TIER : declaredTier;
+        },
+        recordDecision(cycleId, details) {
+            return transition(cycleId, 'decision', details);
+        },
+        beginExecution(cycleId, authorization) {
+            if (!authorization || authorization.allow !== true || isPromiseLike(authorization)) {
+                const cycle = cycles.get(cycleId) || { cycle_id: cycleId };
+                return fail(cycle, RUNTIME_INVARIANTS.WRITE_BYPASS, 'resolved allow authorization', 'missing or promise authorization');
+            }
+            return transition(cycleId, 'effect_attempted');
+        },
+        effectReturned(cycleId) { return transition(cycleId, 'effect_returned'); },
+        effectFailed(cycleId) { return transition(cycleId, 'effect_failed'); },
+        capabilityRefused(cycleId) { return transition(cycleId, 'capability_refused'); },
+        consumptionCommitted(cycleId) { return transition(cycleId, 'consumed'); },
+        executionRecorded(cycleId) { return transition(cycleId, 'execution_recorded'); },
+        executionSkipped(cycleId) {
+            const cycle = cycles.get(cycleId);
+            if (!cycle || cycle.phase !== 'consumed') {
+                return fail(cycle || { cycle_id: cycleId }, RUNTIME_INVARIANTS.WRITE_BYPASS, 'consumed → execution skipped', `${cycle?.phase || 'unknown'} → execution skipped`);
+            }
+            cycle.phase = 'complete';
+            cycle.complete = true;
+            return { ok: true };
+        },
+        getMode() { return mode; },
+        getEvents() { return events.map(copyEvent); },
+        getState(cycleId) {
+            const cycle = cycles.get(cycleId);
+            return cycle ? Object.freeze({ ...cycle }) : null;
+        },
+        recover(input = {}) {
+            if (mode === RUNTIME_MONITOR_MODES.NORMAL)
+                return { ok: true, mode };
+            if (typeof authorizeRecovery !== 'function' || authorizeRecovery(input) !== true) {
+                return { ok: false, reason: 'runtime_recovery_authorization_required', mode };
+            }
+            mode = RUNTIME_MONITOR_MODES.NORMAL;
+            return { ok: true, mode };
+        },
+    };
+}
+export default { createRuntimeMonitor, RUNTIME_MONITOR_VERSION, RUNTIME_MONITOR_MODES, RUNTIME_INVARIANTS };
+//# sourceMappingURL=runtime-monitor.js.map

package/dist/runtime-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-monitor.js","sourceRoot":"","sources":["../src/runtime-monitor.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,YAAY,EAAE,mBAAmB;IACjC,YAAY,EAAE,mBAAmB;IACjC,eAAe,EAAE,qBAAqB;CACvC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AACxE,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB,SAAS,aAAa,CAAC,KAAK;IAC1B,OAAO,KAAK,KAAK,IAAI;WAChB,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC;WAC1D,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,UAA2E,EAAE;IAClG,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;QAClC,MAAM,EAAE,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAClE,UAAU,EAAE,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAC9E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAK;IACtB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,GAAG,GAAG,IAAI,CAAC,GAAG,EACd,YAAY,GAAG,IAAI,EACnB,iBAAiB,GAAG,IAAI,MAKtB,EAAE;IACJ,IAAI,IAAI,GAAqE,qBAAqB,CAAC,MAAM,CAAC;IAC1G,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAU,EAAE,CAAC;IAEzB,SAAS,SAAS;QAChB,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACtD,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IAED,SAAS,UAAU;QACjB,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,CAAC;IAED,SAAS,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAG,UAAU;QAC7E,MAAM,KAAK,GAAG,SAAS,CAAC;YACtB,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,iBAAiB;YACvB,EAAE,EAAE,SAAS,EAAE;YACf,OAAO;YACP,QAAQ;YACR,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC/C,IAAI,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC;QACjG,IAAI,OAAO,YAAY,KAAK,UAAU,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,aAAa,CAAC,MAAM,CAAC;oBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC;IACvE,CAAC;IAED,SAAS,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAG,UAAU;QACnE,OAAO,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IAED,SAAS,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,UAMhC,EAAE;QACJ,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,EAAE,kBAAkB,CAAC,YAAY,EAC5E,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,YAAY,EAAE,qBAAqB,EAAE,GAAG,KAAK,CAAC,KAAK,aAAa,CAAC,CAAC;YAC1G,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrD,OAAO,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,YAAY,EAAE,yBAAyB,EAAE,cAAc,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACjH,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC9E,OAAO,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,eAAe,EAAE,8BAA8B,EAAE,kCAAkC,CAAC,CAAC;YAC7H,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC;YACrC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,QAAQ,GAAG;YACf,gBAAgB,EAAE,CAAC,YAAY,CAAC;YAChC,eAAe,EAAE,CAAC,kBAAkB,CAAC;YACrC,aAAa,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;YACtD,kBAAkB,EAAE,CAAC,YAAY,CAAC;YAClC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;YAC9C,kBAAkB,EAAE,CAAC,UAAU,CAAC;SACjC,CAAC,KAAK,CAAC,CAAC;QACT,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,KAAK,KAAK,UAAU;gBAClC,CAAC,CAAC,kBAAkB,CAAC,YAAY;gBACjC,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC;YACpC,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,MAAM,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,MAAM,KAAK,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,YAAY,EAAE,uBAAuB,EAAE,+BAA+B,CAAC,CAAC;QAChH,CAAC;QACD,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;QACpB,IAAI,KAAK,KAAK,UAAU;YAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QAChD,IAAI,KAAK,KAAK,oBAAoB;YAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,uBAAuB;QAChC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,GAAG,IAAI,EAAE,GAAG,EAAE;YAClD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACxF,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3F,OAAO,MAAM,CAAC,IAAI,GAAG,UAAU;gBAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;YAC3E,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,SAAS,CAAC,EAAE,UAAU,KAA+B,EAAE;YACrD,IAAI,IAAI,KAAK,qBAAqB,CAAC,MAAM,IAAI,UAAU,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,IAAI,EAAE,CAAC;QAC3E,CAAC;QACD,oBAAoB,CAAC,YAAY;YAC/B,IAAI,IAAI,KAAK,qBAAqB,CAAC,MAAM,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI;gBAAE,OAAO,YAAY,CAAC;YACtH,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC;QACpG,CAAC;QACD,cAAc,CAAC,OAAO,EAAE,OAAO;YAC7B,OAAO,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,cAAc,CAAC,OAAO,EAAE,aAAa;YACnC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,KAAK,KAAK,IAAI,IAAI,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;gBACnF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;gBAC3D,OAAO,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,YAAY,EAAE,8BAA8B,EAAE,kCAAkC,CAAC,CAAC;YAC1H,CAAC;YACD,OAAO,UAAU,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACjD,CAAC;QACD,cAAc,CAAC,OAAO,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1E,YAAY,CAAC,OAAO,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;QACtE,iBAAiB,CAAC,OAAO,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAChF,oBAAoB,CAAC,OAAO,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QACzE,iBAAiB,CAAC,OAAO,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAChF,gBAAgB,CAAC,OAAO;YACtB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,kBAAkB,CAAC,YAAY,EACzE,8BAA8B,EAAE,GAAG,KAAK,EAAE,KAAK,IAAI,SAAS,sBAAsB,CAAC,CAAC;YACxF,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC;YACzB,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC;QAC1B,SAAS,KAAK,OAAO,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7C,QAAQ,CAAC,OAAO;YACd,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,KAAK,GAAG,EAAE;YAChB,IAAI,IAAI,KAAK,qBAAqB,CAAC,MAAM;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACrE,IAAI,OAAO,iBAAiB,KAAK,UAAU,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,IAAI,EAAE,CAAC;YAChF,CAAC;YACD,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,eAAe,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/settlement.d.ts

@@ -0,0 +1,68 @@
+export declare const SETTLEMENT_PROFILE_VERSION = "EP-GATE-SETTLEMENT-PROFILE-v1";
+export declare const SETTLEMENT_RESULT_VERSION = "EP-GATE-SETTLEMENT-RESULT-v1";
+export declare const SETTLEMENT_VERDICTS: readonly string[];
+export declare function settlementProfileDigest(profile: any): string;
+/**
+ * Evaluate a raw evidence bundle. Authorization, execution, outcome, and
+ * coverage are interpreted only by verifier functions pinned in code by the
+ * relying party; no artifact may select its own verifier.
+ */
+export declare function evaluateSettlementEligibility(bundle?: {}, options?: {
+    profile?: Record<string, any>;
+    verifyAuthorization?: (...args: any[]) => any;
+    verifyExecution?: (...args: any[]) => any;
+    verifyOutcome?: (...args: any[]) => any;
+    verifyCoverage?: (...args: any[]) => any;
+    pinnedWitnesses?: any[];
+    trustedWitnessAcceptance?: Record<string, any>;
+    witnessSequenceStore?: Record<string, any>;
+    allowEphemeralWitnessStore?: boolean;
+    now?: number | (() => number);
+    witnessMaxAgeSec?: number;
+    maxFutureSkewSec?: number;
+}): Promise<Readonly<{
+    result_hash: `sha256:${string}`;
+    '@version': string;
+    verdict: any;
+    eligible: boolean;
+    reason: any;
+    profile_hash: any;
+    action_digest: null;
+    checks: any;
+    limitations: string[];
+}> | Readonly<{
+    result_hash: `sha256:${string}`;
+    '@version': string;
+    verdict: string;
+    eligible: boolean;
+    reason: null;
+    profile_hash: string;
+    action_digest: any;
+    evidence: {
+        coverage_report_hash?: any;
+        surface_id?: any;
+        outcome_digest?: any;
+        witness_digest?: any;
+        authorization_digest: any;
+        execution_digest: any;
+    };
+    checks: {
+        profile: boolean;
+        authorization: boolean;
+        execution: boolean;
+        witness: boolean;
+        outcome: boolean;
+        coverage: boolean;
+        digest_join: boolean;
+    };
+    limitations: string[];
+}>>;
+declare const _default: {
+    SETTLEMENT_PROFILE_VERSION: string;
+    SETTLEMENT_RESULT_VERSION: string;
+    SETTLEMENT_VERDICTS: readonly string[];
+    settlementProfileDigest: typeof settlementProfileDigest;
+    evaluateSettlementEligibility: typeof evaluateSettlementEligibility;
+};
+export default _default;
+//# sourceMappingURL=settlement.d.ts.map

package/dist/settlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settlement.d.ts","sourceRoot":"","sources":["../src/settlement.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,0BAA0B,kCAAkC,CAAC;AAC1E,eAAO,MAAM,yBAAyB,iCAAiC,CAAC;AACxE,eAAO,MAAM,mBAAmB,mBAS9B,CAAC;AAqDH,wBAAgB,uBAAuB,CAAC,OAAO,KAAA,UAI9C;AA8BD;;;;GAIG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,KAAK,EAAE,OAAO,GAAE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,mBAAmB,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC;IAC9C,eAAe,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC;IAC1C,aAAa,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC;IACxC,cAAc,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC;IACzC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC;IACxB,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA4KL;;;;;;;;AAED,wBAME"}

package/dist/settlement.js

@@ -0,0 +1,306 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Deterministic evidence-completeness decision for settlement workflows.
+ *
+ * This is not a payment rail and does not decide legal liability. It answers a
+ * narrower question: does a relying-party-pinned profile have every verified,
+ * digest-joined artifact it required before its own settlement system acts?
+ */
+import { canonicalize, hashCanonical } from './execution-binding.js';
+import { NETWORK_WITNESS_EVENTS, acceptNetworkWitnessStatement, networkWitnessDigest, validateTrustedNetworkWitnessAcceptance, } from './network-witness.js';
+export const SETTLEMENT_PROFILE_VERSION = 'EP-GATE-SETTLEMENT-PROFILE-v1';
+export const SETTLEMENT_RESULT_VERSION = 'EP-GATE-SETTLEMENT-RESULT-v1';
+export const SETTLEMENT_VERDICTS = Object.freeze([
+    'eligible',
+    'refuse_profile_invalid',
+    'refuse_authorization',
+    'refuse_execution',
+    'refuse_witness',
+    'refuse_outcome',
+    'refuse_coverage',
+    'refuse_binding',
+]);
+const DIGEST_RE = /^sha256:[0-9a-f]{64}$/;
+function isPlainObject(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function exactKeys(value, allowed) {
+    return isPlainObject(value) && Object.keys(value).every((key) => allowed.has(key));
+}
+function string(value, max = 512) {
+    return typeof value === 'string' && value.length > 0 && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
+}
+function digest(value) {
+    return typeof value === 'string' && DIGEST_RE.test(value);
+}
+function canonicalSnapshot(value) {
+    return JSON.parse(canonicalize(value));
+}
+function validateProfile(profile) {
+    if (!exactKeys(profile, new Set([
+        '@version', 'profile_id', 'require_witness', 'require_outcome', 'require_coverage',
+        'required_witness_event', 'required_witness_id', 'required_capture_point_id',
+        'required_coverage_state', 'required_surface_id',
+    ])))
+        return 'profile_shape_invalid';
+    if (profile['@version'] !== SETTLEMENT_PROFILE_VERSION || !string(profile.profile_id))
+        return 'profile_identity_invalid';
+    for (const field of ['require_witness', 'require_outcome', 'require_coverage']) {
+        if (profile[field] !== true && profile[field] !== false)
+            return `profile_${field}_invalid`;
+    }
+    if (profile.require_witness && (!string(profile.required_witness_event)
+        || !NETWORK_WITNESS_EVENTS.includes(profile.required_witness_event)
+        || !string(profile.required_witness_id) || !string(profile.required_capture_point_id))) {
+        return 'profile_witness_binding_invalid';
+    }
+    if (!profile.require_witness && (profile.required_witness_event !== undefined
+        || profile.required_witness_id !== undefined || profile.required_capture_point_id !== undefined)) {
+        return 'profile_witness_fields_forbidden';
+    }
+    if (profile.require_coverage && (profile.required_coverage_state !== 'gated'
+        || !string(profile.required_surface_id)))
+        return 'profile_coverage_binding_invalid';
+    if (!profile.require_coverage && (profile.required_coverage_state !== undefined
+        || profile.required_surface_id !== undefined))
+        return 'profile_coverage_fields_forbidden';
+    try {
+        canonicalize(profile);
+    }
+    catch {
+        return 'profile_canonicalization_invalid';
+    }
+    return null;
+}
+export function settlementProfileDigest(profile) {
+    const invalid = validateProfile(profile);
+    if (invalid)
+        throw new TypeError(invalid);
+    return `sha256:${hashCanonical(profile)}`;
+}
+function refused(verdict, reason, profileHash, checks, actionDigest = null) {
+    const body = {
+        '@version': SETTLEMENT_RESULT_VERSION,
+        verdict,
+        eligible: false,
+        reason,
+        profile_hash: profileHash,
+        action_digest: actionDigest,
+        checks,
+        limitations: [
+            'This result is evidence-completeness input to a relying party; it is not a legal settlement instruction or warranty.',
+            'A valid evidence bundle does not establish physical truth beyond the separately verified outcome source.',
+        ],
+    };
+    return Object.freeze({ ...body, result_hash: `sha256:${hashCanonical(body)}` });
+}
+async function invokeVerifier(verifier, artifact, context) {
+    if (typeof verifier !== 'function')
+        return { accepted: false, reason: 'pinned_verifier_missing' };
+    try {
+        const result = await verifier(artifact, Object.freeze({ ...context }));
+        if (!isPlainObject(result))
+            return { accepted: false, reason: 'verifier_result_invalid' };
+        return canonicalSnapshot(result);
+    }
+    catch {
+        return { accepted: false, reason: 'pinned_verifier_error' };
+    }
+}
+/**
+ * Evaluate a raw evidence bundle. Authorization, execution, outcome, and
+ * coverage are interpreted only by verifier functions pinned in code by the
+ * relying party; no artifact may select its own verifier.
+ */
+export async function evaluateSettlementEligibility(bundle = {}, options = {}) {
+    let profileInput;
+    let profileInputInvalid = false;
+    try {
+        profileInput = canonicalSnapshot(options.profile);
+    }
+    catch {
+        profileInputInvalid = true;
+    }
+    let verifyAuthorization;
+    let verifyExecution;
+    let verifyOutcome;
+    let verifyCoverage;
+    let pinnedWitnesses;
+    let trustedWitnessAcceptance = null;
+    let hasTrustedWitnessAcceptance = false;
+    let witnessSequenceStore;
+    let allowEphemeralWitnessStore = false;
+    let witnessNow;
+    let witnessMaxAgeSec;
+    let maxFutureSkewSec;
+    try {
+        verifyAuthorization = options.verifyAuthorization;
+        verifyExecution = options.verifyExecution;
+        verifyOutcome = options.verifyOutcome;
+        verifyCoverage = options.verifyCoverage;
+        pinnedWitnesses = options.pinnedWitnesses === undefined
+            ? undefined
+            : canonicalSnapshot(options.pinnedWitnesses);
+        hasTrustedWitnessAcceptance = Object.hasOwn(options, 'trustedWitnessAcceptance');
+        if (hasTrustedWitnessAcceptance) {
+            trustedWitnessAcceptance = canonicalSnapshot(options.trustedWitnessAcceptance);
+        }
+        witnessSequenceStore = options.witnessSequenceStore;
+        allowEphemeralWitnessStore = options.allowEphemeralWitnessStore === true;
+        witnessNow = options.now;
+        witnessMaxAgeSec = options.witnessMaxAgeSec;
+        maxFutureSkewSec = options.maxFutureSkewSec;
+    }
+    catch {
+        pinnedWitnesses = [];
+        hasTrustedWitnessAcceptance = true;
+        trustedWitnessAcceptance = null;
+    }
+    let profile;
+    let invalid;
+    if (profileInputInvalid) {
+        invalid = 'profile_hostile_input';
+        profile = null;
+    }
+    else {
+        invalid = validateProfile(profileInput);
+        profile = profileInput;
+    }
+    const baseChecks = {
+        profile: !invalid,
+        authorization: false,
+        execution: false,
+        witness: profile?.require_witness === false,
+        outcome: profile?.require_outcome === false,
+        coverage: profile?.require_coverage === false,
+        digest_join: false,
+    };
+    if (invalid)
+        return refused('refuse_profile_invalid', invalid, null, baseChecks);
+    const profileHash = settlementProfileDigest(profile);
+    let evidence;
+    try {
+        evidence = JSON.parse(canonicalize(bundle));
+    }
+    catch {
+        return refused('refuse_binding', 'evidence_bundle_not_canonical_json', profileHash, baseChecks);
+    }
+    const actionDigest = evidence.action_digest;
+    if (!digest(actionDigest)) {
+        return refused('refuse_binding', 'action_digest_invalid', profileHash, baseChecks);
+    }
+    const context = { action_digest: actionDigest, profile_hash: profileHash };
+    const authorization = await invokeVerifier(verifyAuthorization, evidence.authorization, context);
+    if (authorization.accepted !== true || authorization.action_digest !== actionDigest
+        || !digest(authorization.decision_digest)) {
+        return refused('refuse_authorization', authorization.reason ?? 'authorization_not_verified', profileHash, baseChecks, actionDigest);
+    }
+    baseChecks.authorization = true;
+    const execution = await invokeVerifier(verifyExecution, evidence.execution, {
+        ...context,
+        authorization_digest: authorization.decision_digest,
+    });
+    if (execution.accepted !== true || execution.outcome !== 'executed'
+        || execution.action_digest !== actionDigest || !digest(execution.execution_digest)) {
+        return refused('refuse_execution', execution.reason ?? 'execution_not_verified', profileHash, baseChecks, actionDigest);
+    }
+    baseChecks.execution = true;
+    if (execution.authorization_digest !== authorization.decision_digest) {
+        return refused('refuse_binding', 'execution_authorization_digest_mismatch', profileHash, baseChecks, actionDigest);
+    }
+    let witness = null;
+    if (profile.require_witness) {
+        const witnessOptions = {
+            expectedActionDigest: actionDigest,
+            expectedEvent: profile.required_witness_event,
+            maxAgeSec: witnessMaxAgeSec,
+            maxFutureSkewSec,
+            now: witnessNow,
+            allowEphemeralStore: allowEphemeralWitnessStore,
+        };
+        if (hasTrustedWitnessAcceptance) {
+            let expectedStatementDigest;
+            try {
+                expectedStatementDigest = networkWitnessDigest(evidence.witness);
+            }
+            catch {
+                return refused('refuse_witness', 'witness_statement_digest_invalid', profileHash, baseChecks, actionDigest);
+            }
+            witness = validateTrustedNetworkWitnessAcceptance(trustedWitnessAcceptance, {
+                ...witnessOptions,
+                expectedStatementDigest,
+            });
+        }
+        else {
+            witness = await acceptNetworkWitnessStatement(evidence.witness, {
+                ...witnessOptions,
+                pinnedWitnesses,
+                sequenceStore: witnessSequenceStore,
+            });
+        }
+        if (!witness || !witness.accepted) {
+            return refused('refuse_witness', witness?.reason ?? 'witness_not_verified', profileHash, baseChecks, actionDigest);
+        }
+        if (witness.witness_id !== profile.required_witness_id
+            || witness.capture_point_id !== profile.required_capture_point_id) {
+            return refused('refuse_binding', 'witness_capture_point_mismatch', profileHash, baseChecks, actionDigest);
+        }
+        baseChecks.witness = true;
+    }
+    let outcome = null;
+    if (profile.require_outcome) {
+        outcome = await invokeVerifier(verifyOutcome, evidence.outcome, {
+            ...context,
+            execution_digest: execution.execution_digest,
+        });
+        if (!outcome || outcome.accepted !== true || outcome.within_tolerance !== true
+            || outcome.action_digest !== actionDigest || !digest(outcome.outcome_digest)
+            || outcome.execution_digest !== execution.execution_digest) {
+            return refused('refuse_outcome', outcome?.reason ?? 'outcome_not_verified', profileHash, baseChecks, actionDigest);
+        }
+        baseChecks.outcome = true;
+    }
+    let coverage = null;
+    if (profile.require_coverage) {
+        coverage = await invokeVerifier(verifyCoverage, evidence.coverage, context);
+        if (!coverage || coverage.accepted !== true || coverage.state !== profile.required_coverage_state
+            || coverage.surface_id !== profile.required_surface_id || !digest(coverage.report_hash)) {
+            return refused('refuse_coverage', coverage?.reason ?? 'coverage_not_verified', profileHash, baseChecks, actionDigest);
+        }
+        baseChecks.coverage = true;
+    }
+    baseChecks.digest_join = true;
+    const body = {
+        '@version': SETTLEMENT_RESULT_VERSION,
+        verdict: 'eligible',
+        eligible: true,
+        reason: null,
+        profile_hash: profileHash,
+        action_digest: actionDigest,
+        evidence: {
+            authorization_digest: authorization.decision_digest,
+            execution_digest: execution.execution_digest,
+            ...(witness ? { witness_digest: witness.statement_digest } : {}),
+            ...(outcome ? { outcome_digest: outcome.outcome_digest } : {}),
+            ...(coverage ? { coverage_report_hash: coverage.report_hash, surface_id: coverage.surface_id } : {}),
+        },
+        checks: baseChecks,
+        limitations: [
+            'Eligible means the relying party\'s pinned evidence profile was satisfied; the relying party still owns pricing, legal effect, and payment execution.',
+            'The witness proves observation, not authorization or physical outcome; those are separate verified rows.',
+        ],
+    };
+    return Object.freeze({ ...body, result_hash: `sha256:${hashCanonical(body)}` });
+}
+export default {
+    SETTLEMENT_PROFILE_VERSION,
+    SETTLEMENT_RESULT_VERSION,
+    SETTLEMENT_VERDICTS,
+    settlementProfileDigest,
+    evaluateSettlementEligibility,
+};
+//# sourceMappingURL=settlement.js.map

package/dist/settlement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settlement.js","sourceRoot":"","sources":["../src/settlement.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,oBAAoB,EACpB,uCAAuC,GACxC,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,0BAA0B,GAAG,+BAA+B,CAAC;AAC1E,MAAM,CAAC,MAAM,yBAAyB,GAAG,8BAA8B,CAAC;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,UAAU;IACV,wBAAwB;IACxB,sBAAsB;IACtB,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,SAAS,aAAa,CAAC,KAAK;IAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,KAAK,EAAE,OAAO;IAC/B,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,MAAM,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,MAAM,CAAC,KAAK;IACnB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAK;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,OAAO;IAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC;QAC9B,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB;QAClF,wBAAwB,EAAE,qBAAqB,EAAE,2BAA2B;QAC5E,yBAAyB,EAAE,qBAAqB;KACjD,CAAC,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACpC,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,0BAA0B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,0BAA0B,CAAC;IACzH,KAAK,MAAM,KAAK,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC/E,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK;YAAE,OAAO,WAAW,KAAK,UAAU,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC;WAChE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC;WAChE,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC;QAC3F,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,sBAAsB,KAAK,SAAS;WACtE,OAAO,CAAC,mBAAmB,KAAK,SAAS,IAAI,OAAO,CAAC,yBAAyB,KAAK,SAAS,CAAC,EAAE,CAAC;QACrG,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,uBAAuB,KAAK,OAAO;WACrE,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAAE,OAAO,kCAAkC,CAAC;IACxF,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,uBAAuB,KAAK,SAAS;WACxE,OAAO,CAAC,mBAAmB,KAAK,SAAS,CAAC;QAAE,OAAO,mCAAmC,CAAC;IAC9F,IAAI,CAAC;QAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,kCAAkC,CAAC;IAAC,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAO;IAC7C,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,UAAU,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI;IACxE,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,yBAAyB;QACrC,OAAO;QACP,QAAQ,EAAE,KAAK;QACf,MAAM;QACN,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,YAAY;QAC3B,MAAM;QACN,WAAW,EAAE;YACX,sHAAsH;YACtH,0GAA0G;SAC3G;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,UAAU,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO;IACvD,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAClG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAC1F,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,MAAM,GAAG,EAAE,EAAE,UAa7D,EAAE;IACJ,IAAI,YAAY,CAAC;IACjB,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,CAAC;QAAC,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,mBAAmB,GAAG,IAAI,CAAC;IAAC,CAAC;IAChG,IAAI,mBAAmB,CAAC;IACxB,IAAI,eAAe,CAAC;IACpB,IAAI,aAAa,CAAC;IAClB,IAAI,cAAc,CAAC;IACnB,IAAI,eAAe,CAAC;IACpB,IAAI,wBAAwB,GAAG,IAAI,CAAC;IACpC,IAAI,2BAA2B,GAAG,KAAK,CAAC;IACxC,IAAI,oBAAoB,CAAC;IACzB,IAAI,0BAA0B,GAAG,KAAK,CAAC;IACvC,IAAI,UAAU,CAAC;IACf,IAAI,gBAAgB,CAAC;IACrB,IAAI,gBAAgB,CAAC;IACrB,IAAI,CAAC;QACH,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAClD,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC1C,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QACtC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QACxC,eAAe,GAAG,OAAO,CAAC,eAAe,KAAK,SAAS;YACrD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC/C,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QACjF,IAAI,2BAA2B,EAAE,CAAC;YAChC,wBAAwB,GAAG,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACjF,CAAC;QACD,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACpD,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,KAAK,IAAI,CAAC;QACzE,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;QACzB,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAC5C,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,eAAe,GAAG,EAAE,CAAC;QACrB,2BAA2B,GAAG,IAAI,CAAC;QACnC,wBAAwB,GAAG,IAAI,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,CAAC;IACZ,IAAI,OAAO,CAAC;IACZ,IAAI,mBAAmB,EAAE,CAAC;QACxB,OAAO,GAAG,uBAAuB,CAAC;QAClC,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QACxC,OAAO,GAAG,YAAY,CAAC;IACzB,CAAC;IACD,MAAM,UAAU,GAAG;QACjB,OAAO,EAAE,CAAC,OAAO;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,OAAO,EAAE,eAAe,KAAK,KAAK;QAC3C,OAAO,EAAE,OAAO,EAAE,eAAe,KAAK,KAAK;QAC3C,QAAQ,EAAE,OAAO,EAAE,gBAAgB,KAAK,KAAK;QAC7C,WAAW,EAAE,KAAK;KACnB,CAAC;IACF,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,gBAAgB,EAAE,oCAAoC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;IAE3E,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,mBAAmB,EAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACjG,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,IAAI,aAAa,CAAC,aAAa,KAAK,YAAY;WAC5E,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,sBAAsB,EAAE,aAAa,CAAC,MAAM,IAAI,4BAA4B,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IACtI,CAAC;IACD,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC;IAEhC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,eAAe,EAAE,QAAQ,CAAC,SAAS,EAAE;QAC1E,GAAG,OAAO;QACV,oBAAoB,EAAE,aAAa,CAAC,eAAe;KACpD,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,QAAQ,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,KAAK,UAAU;WAC5D,SAAS,CAAC,aAAa,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvF,OAAO,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,IAAI,wBAAwB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IAC1H,CAAC;IACD,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC;IAC5B,IAAI,SAAS,CAAC,oBAAoB,KAAK,aAAa,CAAC,eAAe,EAAE,CAAC;QACrE,OAAO,OAAO,CAAC,gBAAgB,EAAE,yCAAyC,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,OAAO,GAA+B,IAAI,CAAC;IAC/C,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG;YACrB,oBAAoB,EAAE,YAAY;YAClC,aAAa,EAAE,OAAO,CAAC,sBAAsB;YAC7C,SAAS,EAAE,gBAAgB;YAC3B,gBAAgB;YAChB,GAAG,EAAE,UAAU;YACf,mBAAmB,EAAE,0BAA0B;SAChD,CAAC;QACF,IAAI,2BAA2B,EAAE,CAAC;YAChC,IAAI,uBAAuB,CAAC;YAC5B,IAAI,CAAC;gBAAC,uBAAuB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAC/E,OAAO,OAAO,CAAC,gBAAgB,EAAE,kCAAkC,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YAC9G,CAAC;YACD,OAAO,GAAG,uCAAuC,CAAC,wBAAwB,EAAE;gBAC1E,GAAG,cAAc;gBACjB,uBAAuB;aACxB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,6BAA6B,CAAC,QAAQ,CAAC,OAAO,EAAE;gBAC9D,GAAG,cAAc;gBACjB,eAAe;gBACf,aAAa,EAAE,oBAAoB;aACpC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,gBAAgB,EAAE,OAAO,EAAE,MAAM,IAAI,sBAAsB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,mBAAmB;eAC/C,OAAO,CAAC,gBAAgB,KAAK,OAAO,CAAC,yBAAyB,EAAE,CAAC;YACtE,OAAO,OAAO,CAAC,gBAAgB,EAAE,gCAAgC,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC5G,CAAC;QACD,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,OAAO,GAA+B,IAAI,CAAC;IAC/C,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,GAAG,MAAM,cAAc,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,EAAE;YAC9D,GAAG,OAAO;YACV,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;SAC7C,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI;eACvE,OAAO,CAAC,aAAa,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;eACzE,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,gBAAgB,EAAE,CAAC;YAC/D,OAAO,OAAO,CAAC,gBAAgB,EAAE,OAAO,EAAE,MAAM,IAAI,sBAAsB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACrH,CAAC;QACD,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,QAAQ,GAA+B,IAAI,CAAC;IAChD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,QAAQ,GAAG,MAAM,cAAc,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,uBAAuB;eAC1F,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5F,OAAO,OAAO,CAAC,iBAAiB,EAAE,QAAQ,EAAE,MAAM,IAAI,uBAAuB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACxH,CAAC;QACD,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,yBAAyB;QACrC,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,YAAY;QAC3B,QAAQ,EAAE;YACR,oBAAoB,EAAE,aAAa,CAAC,eAAe;YACnD,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrG;QACD,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE;YACX,uJAAuJ;YACvJ,0GAA0G;SAC3G;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,UAAU,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,eAAe;IACb,0BAA0B;IAC1B,yBAAyB;IACzB,mBAAmB;IACnB,uBAAuB;IACvB,6BAA6B;CAC9B,CAAC"}