@emilia-protocol/gate 0.11.0 → 0.13.0

package/dist/action-control-manifest.js

@@ -0,0 +1,422 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+//
+// EP Action Control Manifest: the missing control-plane waist between agent
+// runtimes, receipt formats, transparency logs, and system-of-record adapters.
+//
+// A receipt proves an authorization event. This manifest tells an executor
+// when a receipt is required, what assurance tier is required, which material
+// fields must be observed from the system of record, and what evidence must be
+// emitted after the effect boundary.
+import { HIGH_RISK_ACTION_PACKS, DEFAULT_PASS_THROUGH_ACTIONS } from './action-packs.js';
+export const ACTION_CONTROL_MANIFEST_VERSION = 'EP-ACTION-CONTROL-MANIFEST-v0.2';
+export const ACTION_CONTROL_SCHEMA_URL = 'https://www.emiliaprotocol.ai/docs/schemas/agent-action-control-manifest-v0.2.schema.json';
+export const ACTION_CONTROL_CONFORMANCE_LEVEL = 'EG-1';
+export const ACTION_CONTROL_AUTHORIZATION = Object.freeze({
+    authorization_endpoint: 'https://www.emiliaprotocol.ai/api/v1/approvals',
+    flow: 'EP-APPROVAL-v1',
+});
+// Acquisition is advertised only when the reference server has a closed,
+// independently verifiable ceremony for the action type. Receipt-required
+// actions outside this registry remain enforceable, but challenge-only.
+export const ACTION_CONTROL_ACQUISITION_ACTION_TYPES = Object.freeze([
+    'payment.release',
+]);
+const RISK_LEVELS = new Set(['low', 'medium', 'high', 'critical']);
+const ASSURANCE_CLASSES = new Set(['software', 'class_a', 'quorum']);
+const ENFORCEMENT_POINTS = new Set(['pre_execution', 'pre_effect_commit']);
+export const ACTION_CONTROL_DEFAULTS = Object.freeze({
+    decision_point: 'pre_effect_commit',
+    missing_receipt: 'refuse',
+    invalid_receipt: 'refuse',
+    stale_receipt: 'refuse',
+    replay: 'one_time_consumption',
+    evidence_log: 'strict',
+});
+export const ACTION_CONTROL_EVIDENCE_PROFILES = Object.freeze({
+    authorization_receipt: 'EP-RECEIPT-v1',
+    execution_attestation: 'EP-EXECUTION-ATTESTATION-v1',
+    reliance_packet: 'EP-RELIANCE-PACKET-v1',
+    transparency: 'SCITT-compatible Signed Statement',
+});
+export const ACTION_CONTROL_CONFORMANCE_CHECKS = Object.freeze([
+    'missing_receipt_refused',
+    'software_on_classA_refused',
+    'execution_drift_refused',
+    'valid_classA_runs',
+    'replay_refused',
+    'tampered_refused',
+    'execution_proof_binds',
+    'reliance_packet_rely',
+]);
+function cloneJson(value) {
+    return value == null ? value : JSON.parse(JSON.stringify(value));
+}
+function normalizeRisk(risk) {
+    return RISK_LEVELS.has(risk) ? risk : 'high';
+}
+function normalizeAssurance(value) {
+    return ASSURANCE_CLASSES.has(value) ? value : 'software';
+}
+function supportsReferenceAcquisition(actionType) {
+    return typeof actionType === 'string'
+        && ACTION_CONTROL_ACQUISITION_ACTION_TYPES.includes(actionType);
+}
+function defaultControlForAction(action) {
+    const requiredFields = action.execution_binding?.required_fields || [];
+    const caidSelector = action.execution_binding?.caid_selector;
+    if (!action.receipt_required) {
+        return {
+            enforcement_point: 'none',
+            authorization_receipt: { required: false },
+            evidence_output: { audit_event: true },
+        };
+    }
+    const control = {
+        enforcement_point: 'pre_effect_commit',
+        status: 428,
+        challenge_header: 'Receipt-Required',
+        proof_header: 'X-EMILIA-Receipt',
+        authorization_receipt: {
+            required: true,
+            profile: 'EP-RECEIPT-v1',
+            signature: 'Ed25519 over RFC 8785 canonical JSON',
+            verifier: 'offline',
+        },
+        replay: {
+            mode: 'one_time_consumption',
+            receipt_id_required: true,
+        },
+        execution_binding: {
+            required: true,
+            source: 'system_of_record',
+            required_fields: [...requiredFields],
+            ...(caidSelector ? { caid_selector: cloneJson(caidSelector) } : {}),
+        },
+        transparency: {
+            mode: 'registerable',
+            profile: 'SCITT Signed Statement',
+            required: false,
+        },
+        evidence_output: {
+            audit_event: true,
+            execution_attestation: true,
+            reliance_packet: true,
+            blocked_attempts: true,
+        },
+    };
+    if (supportsReferenceAcquisition(action.action_type)) {
+        control.authorization = { ...ACTION_CONTROL_AUTHORIZATION };
+    }
+    return control;
+}
+export function toActionControl(action) {
+    const out = {
+        id: action.id,
+        label: action.label || action.description || action.id,
+        action_type: action.action_type,
+        risk: normalizeRisk(action.risk || (action.receipt_required ? 'high' : 'low')),
+        receipt_required: !!action.receipt_required,
+        assurance_class: normalizeAssurance(action.assurance_class),
+        max_age_sec: action.max_age_sec || 900,
+        match: cloneJson(action.match || {}),
+        why: action.why || action.description || null,
+        control: cloneJson(action.control || defaultControlForAction(action)),
+        conformance: {
+            level: ACTION_CONTROL_CONFORMANCE_LEVEL,
+            checks: [...ACTION_CONTROL_CONFORMANCE_CHECKS],
+            ...(action.conformance || {}),
+        },
+    };
+    if (action.quorum)
+        out.quorum = cloneJson(action.quorum);
+    if (action.business_authorization || action.businessAuthorization) {
+        out.business_authorization = cloneJson(action.business_authorization || action.businessAuthorization);
+    }
+    return out;
+}
+/**
+ * @param {object} [o]
+ * @param {{ name?: string, issuer?: string, manifest_url?: string }} [o.service]
+ * @param {boolean} [o.includePassThrough]
+ * @param {Array<object>} [o.extraActions]
+ */
+export function createDefaultActionControlManifest({ service = {}, includePassThrough = true, extraActions = [], } = {}) {
+    const actions = [
+        ...HIGH_RISK_ACTION_PACKS.map(toActionControl),
+        ...(includePassThrough ? DEFAULT_PASS_THROUGH_ACTIONS.map(toActionControl) : []),
+    ];
+    // `extraActions` is also the supported customization mechanism. An exact id
+    // or exact transport-selector match replaces the built-in entry; leaving
+    // both would create an ambiguous manifest that the validator correctly
+    // rejects. Broader/partial overlaps are not silently normalized and remain
+    // validation errors.
+    for (const candidate of extraActions.map(toActionControl)) {
+        const index = actions.findIndex((current) => current.id === candidate.id
+            || selectorsEqual(current, candidate));
+        if (index >= 0)
+            actions.splice(index, 1, candidate);
+        else
+            actions.push(candidate);
+    }
+    return {
+        '@version': ACTION_CONTROL_MANIFEST_VERSION,
+        '$schema': ACTION_CONTROL_SCHEMA_URL,
+        profile: 'agent-action-control',
+        service: {
+            name: service.name || 'EMILIA Gate default action controls',
+            issuer: service.issuer || 'https://www.emiliaprotocol.ai',
+            manifest_url: service.manifest_url || 'https://www.emiliaprotocol.ai/.well-known/agent-action-control.json',
+            ...service,
+        },
+        defaults: { ...ACTION_CONTROL_DEFAULTS },
+        evidence_profiles: { ...ACTION_CONTROL_EVIDENCE_PROFILES },
+        actions,
+    };
+}
+function selectorMatches(action, selector = {}) {
+    if (!action || typeof action !== 'object' || Array.isArray(action)
+        || !selector || typeof selector !== 'object' || Array.isArray(selector))
+        return false;
+    const match = action.match;
+    if (!match || typeof match !== 'object' || Array.isArray(match))
+        return false;
+    const matchEntries = Object.entries(match);
+    if (matchEntries.length === 0)
+        return false;
+    // action_type is an additional constraint; it may never bypass a conflicting
+    // transport selector. Other selector metadata (for example manifestUrl) is
+    // not part of the action's transport identity.
+    if (Object.prototype.hasOwnProperty.call(selector, 'action_type')
+        && selector.action_type !== action.action_type)
+        return false;
+    return matchEntries.every(([key, value]) => (Object.prototype.hasOwnProperty.call(selector, key) && selector[key] === value));
+}
+export function findActionControl(manifest, selector = {}) {
+    const resolved = resolveActionControl(manifest, selector);
+    return resolved.status === 'one' ? resolved.action : null;
+}
+export function resolveActionControl(manifest, selector = {}) {
+    if (!manifest || !Array.isArray(manifest.actions))
+        return { status: 'none', action: null };
+    const matches = manifest.actions.filter((action) => selectorMatches(action, selector));
+    if (matches.length === 0)
+        return { status: 'none', action: null };
+    if (matches.length === 1)
+        return { status: 'one', action: matches[0] };
+    return {
+        status: 'ambiguous',
+        action: null,
+        action_ids: matches.map((action) => String(action.id || '')).sort(),
+    };
+}
+function selectorsOverlap(left, right) {
+    const a = left?.match;
+    const b = right?.match;
+    if (!a || !b || typeof a !== 'object' || typeof b !== 'object'
+        || Array.isArray(a) || Array.isArray(b))
+        return false;
+    const shared = Object.keys(a).filter((key) => Object.prototype.hasOwnProperty.call(b, key));
+    return shared.every((key) => a[key] === b[key]);
+}
+function selectorsEqual(left, right) {
+    const a = left?.match;
+    const b = right?.match;
+    if (!a || !b || typeof a !== 'object' || typeof b !== 'object'
+        || Array.isArray(a) || Array.isArray(b))
+        return false;
+    const aKeys = Object.keys(a).sort();
+    const bKeys = Object.keys(b).sort();
+    return aKeys.length > 0
+        && aKeys.length === bKeys.length
+        && aKeys.every((key, index) => key === bKeys[index] && a[key] === b[key]);
+}
+function validateAuthorizationDescriptor(authorization, prefix, errors) {
+    if (!authorization || typeof authorization !== 'object' || Array.isArray(authorization)) {
+        errors.push(`${prefix}.control.authorization must be an object`);
+        return;
+    }
+    const prototype = Object.getPrototypeOf(authorization);
+    const keys = Object.keys(authorization).sort();
+    if ((prototype !== Object.prototype && prototype !== null)
+        || keys.length !== 2
+        || keys[0] !== 'authorization_endpoint'
+        || keys[1] !== 'flow') {
+        errors.push(`${prefix}.control.authorization must contain only authorization_endpoint and flow`);
+    }
+    if (authorization.flow !== 'EP-APPROVAL-v1') {
+        errors.push(`${prefix}.control.authorization.flow must be EP-APPROVAL-v1`);
+    }
+    let endpoint = null;
+    try {
+        endpoint = new URL(authorization.authorization_endpoint);
+    }
+    catch {
+        // The common error below intentionally covers both malformed and relative URLs.
+    }
+    if (!endpoint
+        || endpoint.protocol !== 'https:'
+        || !endpoint.hostname
+        || endpoint.username
+        || endpoint.password
+        || endpoint.search
+        || endpoint.hash) {
+        errors.push(`${prefix}.control.authorization.authorization_endpoint must be an absolute HTTPS URL without credentials, query, or fragment`);
+    }
+}
+export function validateActionControlManifest(manifest, { requireAcquisition = false } = {}) {
+    const errors = [];
+    if (!manifest || typeof manifest !== 'object' || Array.isArray(manifest)) {
+        return { ok: false, errors: ['manifest must be an object'] };
+    }
+    if (manifest['@version'] !== ACTION_CONTROL_MANIFEST_VERSION) {
+        errors.push(`@version must be ${ACTION_CONTROL_MANIFEST_VERSION}`);
+    }
+    if (manifest.profile !== 'agent-action-control' && manifest.profile !== 'emilia.action-control') {
+        errors.push('profile must be agent-action-control (or the deployed alias emilia.action-control)');
+    }
+    if (!manifest.service || typeof manifest.service !== 'object') {
+        errors.push('service object is required');
+    }
+    if (!manifest.defaults || typeof manifest.defaults !== 'object') {
+        errors.push('defaults object is required');
+    }
+    if (!Array.isArray(manifest.actions) || manifest.actions.length === 0) {
+        errors.push('actions must be a non-empty array');
+    }
+    const ids = new Map();
+    for (const [idx, action] of (manifest.actions || []).entries()) {
+        const prefix = `actions[${idx}]`;
+        if (!action || typeof action !== 'object') {
+            errors.push(`${prefix} must be an object`);
+            continue;
+        }
+        if (!action.id || typeof action.id !== 'string')
+            errors.push(`${prefix}.id is required`);
+        else if (ids.has(action.id))
+            errors.push(`${prefix}.id duplicates actions[${ids.get(action.id)}].id`);
+        else
+            ids.set(action.id, idx);
+        if (!action.action_type || typeof action.action_type !== 'string')
+            errors.push(`${prefix}.action_type is required`);
+        if (!action.match || typeof action.match !== 'object')
+            errors.push(`${prefix}.match is required`);
+        if (typeof action.receipt_required !== 'boolean')
+            errors.push(`${prefix}.receipt_required must be boolean`);
+        if (!RISK_LEVELS.has(action.risk))
+            errors.push(`${prefix}.risk must be low|medium|high|critical`);
+        if (!ASSURANCE_CLASSES.has(action.assurance_class))
+            errors.push(`${prefix}.assurance_class must be software|class_a|quorum`);
+        // Key-class floor: a critical action must be bound to a human key. normalizeAssurance()
+        // defaults a missing or unrecognized tier to the weakest 'software', so this also fails
+        // closed on a critical action whose tier was omitted rather than silently downgrading it.
+        if (action.receipt_required && action.risk === 'critical' && action.assurance_class === 'software') {
+            errors.push(`${prefix}.assurance_class must be class_a or quorum when risk is critical`);
+        }
+        const authorization = action.control?.authorization;
+        if (authorization !== undefined) {
+            validateAuthorizationDescriptor(authorization, prefix, errors);
+            if (!supportsReferenceAcquisition(action.action_type)) {
+                errors.push(`${prefix}.control.authorization is advertised for an unsupported acquisition action_type`);
+            }
+        }
+        if (action.receipt_required) {
+            if (!Number.isFinite(action.max_age_sec) || action.max_age_sec <= 0)
+                errors.push(`${prefix}.max_age_sec must be positive`);
+            const control = action.control;
+            if (!control || typeof control !== 'object') {
+                errors.push(`${prefix}.control is required when receipt_required=true`);
+                continue;
+            }
+            if (requireAcquisition
+                && supportsReferenceAcquisition(action.action_type)
+                && authorization === undefined) {
+                errors.push(`${prefix}.control.authorization is required for acquisition conformance`);
+            }
+            if (!ENFORCEMENT_POINTS.has(control.enforcement_point)) {
+                errors.push(`${prefix}.control.enforcement_point must be pre_execution or pre_effect_commit`);
+            }
+            if (control.status !== 428)
+                errors.push(`${prefix}.control.status must be 428`);
+            if (control.authorization_receipt?.required !== true)
+                errors.push(`${prefix}.control.authorization_receipt.required must be true`);
+            if (control.authorization_receipt?.profile !== 'EP-RECEIPT-v1')
+                errors.push(`${prefix}.control.authorization_receipt.profile must be EP-RECEIPT-v1`);
+            if (control.authorization_receipt?.verifier !== 'offline')
+                errors.push(`${prefix}.control.authorization_receipt.verifier must be offline`);
+            if (control.replay?.mode !== 'one_time_consumption')
+                errors.push(`${prefix}.control.replay.mode must be one_time_consumption`);
+            if (control.replay?.receipt_id_required !== true)
+                errors.push(`${prefix}.control.replay.receipt_id_required must be true`);
+            const fields = control.execution_binding?.required_fields;
+            if (control.execution_binding?.required !== true)
+                errors.push(`${prefix}.control.execution_binding.required must be true`);
+            if (control.execution_binding?.source !== 'system_of_record')
+                errors.push(`${prefix}.control.execution_binding.source must be system_of_record`);
+            if (!Array.isArray(fields) || fields.length === 0 || fields.some((f) => typeof f !== 'string' || !f)) {
+                errors.push(`${prefix}.control.execution_binding.required_fields must be a non-empty string array`);
+            }
+            const caidSelector = control.execution_binding?.caid_selector;
+            if (caidSelector !== undefined
+                && (!caidSelector || typeof caidSelector !== 'object' || Array.isArray(caidSelector)
+                    || Object.keys(caidSelector).length !== 1
+                    || typeof caidSelector.field !== 'string'
+                    || !/^[A-Za-z][A-Za-z0-9_]{0,127}$/.test(caidSelector.field))) {
+                errors.push(`${prefix}.control.execution_binding.caid_selector must select one safe action field`);
+            }
+            if (control.evidence_output?.execution_attestation !== true)
+                errors.push(`${prefix}.control.evidence_output.execution_attestation must be true`);
+            if (control.evidence_output?.reliance_packet !== true)
+                errors.push(`${prefix}.control.evidence_output.reliance_packet must be true`);
+            if (action.conformance?.level !== ACTION_CONTROL_CONFORMANCE_LEVEL)
+                errors.push(`${prefix}.conformance.level must be ${ACTION_CONTROL_CONFORMANCE_LEVEL}`);
+            if (action.business_authorization !== undefined) {
+                const business = action.business_authorization;
+                const policy = business?.policy;
+                const approvers = business?.allowed_approvers;
+                if (!business || typeof business !== 'object' || Array.isArray(business)) {
+                    errors.push(`${prefix}.business_authorization must be an object`);
+                }
+                else {
+                    if (!policy || typeof policy !== 'object' || Array.isArray(policy)
+                        || typeof policy.id !== 'string' || !policy.id
+                        || typeof policy.hash !== 'string' || !policy.hash) {
+                        errors.push(`${prefix}.business_authorization.policy must pin non-empty id and hash`);
+                    }
+                    if (typeof business.tenant_id !== 'string' || !business.tenant_id) {
+                        errors.push(`${prefix}.business_authorization.tenant_id must be a non-empty string`);
+                    }
+                    if (!Array.isArray(approvers) || approvers.length === 0
+                        || approvers.some((entry) => !entry || typeof entry !== 'object'
+                            || typeof entry.subject !== 'string' || !entry.subject
+                            || typeof entry.role !== 'string' || !entry.role)) {
+                        errors.push(`${prefix}.business_authorization.allowed_approvers must name subject and role`);
+                    }
+                }
+            }
+        }
+    }
+    for (let left = 0; left < (manifest.actions || []).length; left += 1) {
+        for (let right = left + 1; right < manifest.actions.length; right += 1) {
+            if (selectorsOverlap(manifest.actions[left], manifest.actions[right])) {
+                errors.push(`actions[${left}].match overlaps actions[${right}].match`);
+            }
+        }
+    }
+    return { ok: errors.length === 0, errors };
+}
+export default {
+    ACTION_CONTROL_MANIFEST_VERSION,
+    ACTION_CONTROL_SCHEMA_URL,
+    ACTION_CONTROL_CONFORMANCE_LEVEL,
+    ACTION_CONTROL_AUTHORIZATION,
+    ACTION_CONTROL_DEFAULTS,
+    ACTION_CONTROL_EVIDENCE_PROFILES,
+    ACTION_CONTROL_CONFORMANCE_CHECKS,
+    toActionControl,
+    createDefaultActionControlManifest,
+    findActionControl,
+    resolveActionControl,
+    validateActionControlManifest,
+};
+//# sourceMappingURL=action-control-manifest.js.map

package/dist/action-control-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-control-manifest.js","sourceRoot":"","sources":["../src/action-control-manifest.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,qCAAqC;AAErC,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAIzF,MAAM,CAAC,MAAM,+BAA+B,GAAG,iCAAiC,CAAC;AACjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,2FAA2F,CAAC;AACrI,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC;IACxD,sBAAsB,EAAE,gDAAgD;IACxE,IAAI,EAAE,gBAAgB;CACvB,CAAC,CAAC;AACH,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,MAAM,CAAC,MAAM,uCAAuC,GAAG,MAAM,CAAC,MAAM,CAAC;IACnE,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AACnE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IACnD,cAAc,EAAE,mBAAmB;IACnC,eAAe,EAAE,QAAQ;IACzB,eAAe,EAAE,QAAQ;IACzB,aAAa,EAAE,QAAQ;IACvB,MAAM,EAAE,sBAAsB;IAC9B,YAAY,EAAE,QAAQ;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5D,qBAAqB,EAAE,eAAe;IACtC,qBAAqB,EAAE,6BAA6B;IACpD,eAAe,EAAE,uBAAuB;IACxC,YAAY,EAAE,mCAAmC;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,yBAAyB;IACzB,4BAA4B;IAC5B,yBAAyB;IACzB,mBAAmB;IACnB,gBAAgB;IAChB,kBAAkB;IAClB,uBAAuB;IACvB,sBAAsB;CACvB,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,KAAU;IAC3B,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,IAAS;IAC9B,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAU;IACpC,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AAC3D,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAmB;IACvD,OAAO,OAAO,UAAU,KAAK,QAAQ;WAChC,uCAAuC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAW;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,EAAE,eAAe,IAAI,EAAE,CAAC;IACvE,MAAM,YAAY,GAAG,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO;YACL,iBAAiB,EAAE,MAAM;YACzB,qBAAqB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC1C,eAAe,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;SACvC,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAQ;QACnB,iBAAiB,EAAE,mBAAmB;QACtC,MAAM,EAAE,GAAG;QACX,gBAAgB,EAAE,kBAAkB;QACpC,YAAY,EAAE,kBAAkB;QAChC,qBAAqB,EAAE;YACrB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,eAAe;YACxB,SAAS,EAAE,sCAAsC;YACjD,QAAQ,EAAE,SAAS;SACpB;QACD,MAAM,EAAE;YACN,IAAI,EAAE,sBAAsB;YAC5B,mBAAmB,EAAE,IAAI;SAC1B;QACD,iBAAiB,EAAE;YACjB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,kBAAkB;YAC1B,eAAe,EAAE,CAAC,GAAG,cAAc,CAAC;YACpC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE;QACD,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,KAAK;SAChB;QACD,eAAe,EAAE;YACf,WAAW,EAAE,IAAI;YACjB,qBAAqB,EAAE,IAAI;YAC3B,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;SACvB;KACF,CAAC;IACF,IAAI,4BAA4B,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,aAAa,GAAG,EAAE,GAAG,4BAA4B,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAW;IACzC,MAAM,GAAG,GAAQ;QACf,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,EAAE;QACtD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9E,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB;QAC3C,eAAe,EAAE,kBAAkB,CAAC,MAAM,CAAC,eAAe,CAAC;QAC3D,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,GAAG;QACtC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACpC,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI;QAC7C,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACrE,WAAW,EAAE;YACX,KAAK,EAAE,gCAAgC;YACvC,MAAM,EAAE,CAAC,GAAG,iCAAiC,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;SAC9B;KACF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,sBAAsB,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAClE,GAAG,CAAC,sBAAsB,GAAG,SAAS,CAAC,MAAM,CAAC,sBAAsB,IAAI,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAAC,EACjD,OAAO,GAAG,EAAE,EACZ,kBAAkB,GAAG,IAAI,EACzB,YAAY,GAAG,EAAE,MACyD,EAAE;IAC5E,MAAM,OAAO,GAAG;QACd,GAAG,sBAAsB,CAAC,GAAG,CAAC,eAAe,CAAC;QAC9C,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACjF,CAAC;IACF,4EAA4E;IAC5E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,qBAAqB;IACrB,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE;eACnE,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QACzC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;;YAC/C,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO;QACL,UAAU,EAAE,+BAA+B;QAC3C,SAAS,EAAE,yBAAyB;QACpC,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE;YACP,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,qCAAqC;YAC3D,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,+BAA+B;YACzD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,qEAAqE;YAC3G,GAAG,OAAO;SACX;QACD,QAAQ,EAAE,EAAE,GAAG,uBAAuB,EAAE;QACxC,iBAAiB,EAAE,EAAE,GAAG,gCAAgC,EAAE;QAC1D,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAW,EAAE,WAAgB,EAAE;IACtD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;WAC3D,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,6EAA6E;IAC7E,2EAA2E;IAC3E,+CAA+C;IAC/C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC;WAC1D,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAC1C,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,CAC/E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAa,EAAE,WAAgB,EAAE;IACjE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,OAAO,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAa,EAAE,WAAgB,EAAE;IAIpE,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3F,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAS,EAAE,KAAU;IAC7C,MAAM,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;IACtB,MAAM,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;IACvB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;WACvD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,IAAS,EAAE,KAAU;IAC3C,MAAM,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;IACtB,MAAM,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;IACvB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;WACvD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;WAClB,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;WAC7B,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,+BAA+B,CAAC,aAAkB,EAAE,MAAc,EAAE,MAAgB;IAC3F,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACxF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,0CAA0C,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;WACnD,IAAI,CAAC,MAAM,KAAK,CAAC;WACjB,IAAI,CAAC,CAAC,CAAC,KAAK,wBAAwB;WACpC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,0EAA0E,CAAC,CAAC;IACnG,CAAC;IAED,IAAI,aAAa,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,oDAAoD,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,QAAQ,GAAe,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;IACD,IAAI,CAAC,QAAQ;WACN,QAAQ,CAAC,QAAQ,KAAK,QAAQ;WAC9B,CAAC,QAAQ,CAAC,QAAQ;WAClB,QAAQ,CAAC,QAAQ;WACjB,QAAQ,CAAC,QAAQ;WACjB,QAAQ,CAAC,MAAM;WACf,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,qHAAqH,CAAC,CAAC;IAC9I,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,QAAa,EACb,EAAE,kBAAkB,GAAG,KAAK,KAAuC,EAAE;IAErE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,+BAA+B,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,oBAAoB,+BAA+B,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,sBAAsB,IAAI,QAAQ,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;QAChG,MAAM,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,WAAW,GAAG,GAAG,CAAC;QACjC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,oBAAoB,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;aACpF,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,0BAA0B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;;YACjG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,0BAA0B,CAAC,CAAC;QACpH,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,oBAAoB,CAAC,CAAC;QAClG,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,mCAAmC,CAAC,CAAC;QAC5G,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,wCAAwC,CAAC,CAAC;QAClG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,kDAAkD,CAAC,CAAC;QAC7H,wFAAwF;QACxF,wFAAwF;QACxF,0FAA0F;QAC1F,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;YACnG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,kEAAkE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC;QACpD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,+BAA+B,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/D,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,iFAAiF,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,+BAA+B,CAAC,CAAC;YAC3H,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,iDAAiD,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,IAAI,kBAAkB;mBACf,4BAA4B,CAAC,MAAM,CAAC,WAAW,CAAC;mBAChD,aAAa,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,gEAAgE,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,uEAAuE,CAAC,CAAC;YAChG,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,6BAA6B,CAAC,CAAC;YAChF,IAAI,OAAO,CAAC,qBAAqB,EAAE,QAAQ,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,sDAAsD,CAAC,CAAC;YACnI,IAAI,OAAO,CAAC,qBAAqB,EAAE,OAAO,KAAK,eAAe;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,8DAA8D,CAAC,CAAC;YACrJ,IAAI,OAAO,CAAC,qBAAqB,EAAE,QAAQ,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,yDAAyD,CAAC,CAAC;YAC3I,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,sBAAsB;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,mDAAmD,CAAC,CAAC;YAC/H,IAAI,OAAO,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,kDAAkD,CAAC,CAAC;YAC3H,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,eAAe,CAAC;YAC1D,IAAI,OAAO,CAAC,iBAAiB,EAAE,QAAQ,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,kDAAkD,CAAC,CAAC;YAC3H,IAAI,OAAO,CAAC,iBAAiB,EAAE,MAAM,KAAK,kBAAkB;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,4DAA4D,CAAC,CAAC;YACjJ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1G,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,6EAA6E,CAAC,CAAC;YACtG,CAAC;YACD,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,EAAE,aAAa,CAAC;YAC9D,IAAI,YAAY,KAAK,SAAS;mBACvB,CAAC,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;uBAC/E,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC;uBACtC,OAAO,YAAY,CAAC,KAAK,KAAK,QAAQ;uBACtC,CAAC,+BAA+B,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,4EAA4E,CAAC,CAAC;YACrG,CAAC;YACD,IAAI,OAAO,CAAC,eAAe,EAAE,qBAAqB,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,6DAA6D,CAAC,CAAC;YACjJ,IAAI,OAAO,CAAC,eAAe,EAAE,eAAe,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,uDAAuD,CAAC,CAAC;YACrI,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,gCAAgC;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,8BAA8B,gCAAgC,EAAE,CAAC,CAAC;YAC3J,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;gBAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,sBAAsB,CAAC;gBAC/C,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;gBAChC,MAAM,SAAS,GAAG,QAAQ,EAAE,iBAAiB,CAAC;gBAC9C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,2CAA2C,CAAC,CAAC;gBACpE,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;2BAC3D,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE;2BAC3C,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;wBACvD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,+DAA+D,CAAC,CAAC;oBACxF,CAAC;oBACD,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;wBAClE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,8DAA8D,CAAC,CAAC;oBACvF,CAAC;oBACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;2BAChD,SAAS,CAAC,IAAI,CAAC,CAAC,KAAU,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;+BAChE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO;+BACnD,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACxD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,sEAAsE,CAAC,CAAC;oBAC/F,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACrE,KAAK,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACvE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,4BAA4B,KAAK,SAAS,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,eAAe;IACb,+BAA+B;IAC/B,yBAAyB;IACzB,gCAAgC;IAChC,4BAA4B;IAC5B,uBAAuB;IACvB,gCAAgC;IAChC,iCAAiC;IACjC,eAAe;IACf,kCAAkC;IAClC,iBAAiB;IACjB,oBAAoB;IACpB,6BAA6B;CAC9B,CAAC"}

package/dist/action-escrow-custodian.d.ts

@@ -0,0 +1,74 @@
+export declare const ACTION_ESCROW_CUSTODIAN_OBSERVATION_VERSION = "EP-ACTION-ESCROW-CUSTODIAN-OBSERVATION-v1";
+/**
+ * The bridge implements the kernel's release/getRelease contract. It never
+ * claims that EMILIA holds funds or that the external provider is licensed.
+ */
+export declare function createActionEscrowCustodianBridge({ adapter, observationSigner, now, }?: {
+    adapter?: Record<string, any>;
+    observationSigner?: Record<string, any>;
+    now?: () => string;
+}): Readonly<{
+    provider: any;
+    environment: any;
+    release(untrustedRequest: any): Promise<{
+        accepted: boolean;
+    }>;
+    getRelease(untrustedRequest: any): Promise<{
+        authenticated: boolean;
+        statement: any;
+    }>;
+}>;
+export declare function createActionEscrowCustodianStatementVerifier({ operatorKeys, providerId, environment, }?: {
+    operatorKeys?: Record<string, any>;
+    providerId?: string;
+    environment?: string;
+}): (statement: any, expected: any) => Promise<{
+    valid: boolean;
+    reason: string;
+    authenticated?: undefined;
+    statement_type?: undefined;
+    status?: undefined;
+    statement_digest?: undefined;
+    provider_id?: undefined;
+    agreement_digest?: undefined;
+    document_action_binding_digest?: undefined;
+    milestone_id?: undefined;
+    release_action_digest?: undefined;
+    parties_digest?: undefined;
+    profile_digest?: undefined;
+    provider_idempotency_key?: undefined;
+    provider_request_digest?: undefined;
+    provider_transaction_id?: undefined;
+    provider_milestone_id?: undefined;
+    amount?: undefined;
+    currency?: undefined;
+    destination_id?: undefined;
+} | {
+    valid: boolean;
+    authenticated: boolean;
+    statement_type: any;
+    status: any;
+    statement_digest: string;
+    provider_id: any;
+    agreement_digest: any;
+    document_action_binding_digest: any;
+    milestone_id: any;
+    release_action_digest: any;
+    parties_digest: any;
+    profile_digest: any;
+    provider_idempotency_key: any;
+    provider_request_digest: any;
+    provider_transaction_id: any;
+    provider_milestone_id: any;
+    amount: any;
+    currency: any;
+    destination_id: any;
+    reason?: undefined;
+}>;
+declare const _default: Readonly<{
+    ACTION_ESCROW_CUSTODIAN_OBSERVATION_VERSION: "EP-ACTION-ESCROW-CUSTODIAN-OBSERVATION-v1";
+    createActionEscrowCustodianBridge: typeof createActionEscrowCustodianBridge;
+    createActionEscrowCustodianStatementVerifier: typeof createActionEscrowCustodianStatementVerifier;
+}>;
+export default _default;
+//# sourceMappingURL=action-escrow-custodian.d.ts.map

package/dist/action-escrow-custodian.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-escrow-custodian.d.ts","sourceRoot":"","sources":["../src/action-escrow-custodian.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,2CAA2C,8CACX,CAAC;AAuK9C;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,EAChD,OAAO,EACP,iBAAiB,EACjB,GAAoC,GACrC,GAAE;IACD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACf;;;;;;;;;;GAqIL;AAED,wBAAgB,4CAA4C,CAAC,EAC3D,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,GAAE;IACD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACjB,IAOkC,cAAS,EAAE,aAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6E1D;;;;;;AAED,wBAIG"}