@emilia-protocol/gate 0.11.0 → 0.13.0

package/dist/reports/reperform.js

@@ -0,0 +1,432 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — independent re-performance verifier (EP-GATE-REPERFORMANCE-v1).
+ *
+ * The auditor's "trust nothing, recompute everything" tool. Re-performance is
+ * the highest form of audit evidence: instead of reading the deployer's report
+ * and believing it, the auditor takes the raw evidence entries and REDOES the
+ * work — rebuilds the hash chain link by link and checks it with the evidence
+ * log's own verifier, cryptographically re-verifies every receipt / signoff /
+ * quorum document an entry carries, recomputes the decision counts from
+ * scratch, and diffs those recomputed numbers against what a report pack
+ * claims. Vendor logs assert; this recomputes.
+ *
+ * INDEPENDENCE BY CONSTRUCTION: counts are recomputed here from the raw
+ * entries — this module deliberately does NOT import metering.js or any report
+ * builder, so a bug in a report builder cannot hide from its own cross-check.
+ * The only imports are the primitives being re-driven: the evidence log's real
+ * verify() and the protocol verifiers (verifyEmiliaReceipt /
+ * verifyWebAuthnSignoff / verifyQuorum).
+ *
+ * FAIL CLOSED everywhere:
+ *   - one broken chain link fails the chain from that point — the remainder is
+ *     not vouched for;
+ *   - one failed re-verification is a NAMED failure ({hash, reason}), never
+ *     absorbed into a pass count;
+ *   - an entry that references a receipt but does not carry the verifiable
+ *     material is counted `not_reverifiable` — never silently passed;
+ *   - a reported pack of unknown @version is refused, never fuzzily matched.
+ *
+ * HONESTY BOUNDARY (carried inside the artifact): this SUPPORTS an auditor's
+ * re-performance procedure. It does not conclude, opine, or certify — and it
+ * cannot establish log COMPLETENESS (a chain rewritten in full, or entries
+ * withheld before supply, is invisible from the entries alone; anchor the head
+ * hash externally to close that), nor runtime freshness / one-time consumption
+ * (properties of the moment of decision, not re-performable after the fact).
+ *
+ * Deterministic: pure over (entries, issuerKeys); time enters only through the
+ * injectable `now` (generated_at). No sampling, no randomness.
+ */
+import crypto from 'node:crypto';
+import { createEvidenceLog } from '../evidence.js';
+import { validatePinnedQuorumPolicy, verifyEmiliaReceipt } from '@emilia-protocol/require-receipt';
+import { verifyQuorum, verifyWebAuthnSignoff } from '@emilia-protocol/verify';
+export const REPERFORMANCE_VERSION = 'EP-GATE-REPERFORMANCE-v1';
+// Wire-format identifiers of the packs compareToReported() can cross-check.
+// Restated locally — NOT imported from the builders — so this module remains a
+// standalone auditor tool with zero dependency on the code it checks.
+const USAGE_PACK_VERSION = 'EP-GATE-USAGE-v1';
+const UNDERWRITER_PACK_VERSION = 'EP-GATE-UNDERWRITER-ATTESTATION-v1';
+/** Deterministic key-sorted copy — output is byte-stable regardless of entry order. */
+function sortedCounts(obj) {
+    const out = {};
+    for (const k of Object.keys(obj).sort())
+        out[k] = obj[k];
+    return out;
+}
+/** The checks a verifier reported false, as one stable, named string. */
+function failingChecks(checks) {
+    const bad = Object.keys(checks || {}).filter((k) => checks[k] === false).sort();
+    return bad.length ? bad.join('+') : 'unspecified';
+}
+/**
+ * The verifiable payloads an entry CARRIES (not the verification RESULTS the
+ * gate recorded about them — `tier_evidence` / `rejected` are the gate's own
+ * conclusions and are deliberately ignored: re-performance trusts nothing the
+ * gate concluded, only material it can re-verify itself).
+ *
+ * Recognized carriers:
+ *   - entry.receipt                    full EP-RECEIPT-v1 document
+ *   - entry.signoff / payload.signoff  WebAuthn device-signoff evidence,
+ *     with the approver key at entry.approver_public_key or
+ *     receipt.payload.approver_public_key
+ *   - entry.quorum / payload.quorum    full EP-QUORUM-v1 document
+ */
+function collectMaterial(e) {
+    const out = [];
+    const receipt = e.receipt;
+    const payload = receipt && typeof receipt === 'object' && receipt.payload
+        && typeof receipt.payload === 'object' ? receipt.payload : null;
+    if (receipt !== undefined && receipt !== null)
+        out.push({ type: 'receipt', doc: receipt });
+    const signoff = e.signoff ?? payload?.signoff;
+    if (signoff !== undefined && signoff !== null) {
+        out.push({
+            type: 'signoff',
+            doc: signoff,
+            key: e.approver_public_key ?? payload?.approver_public_key ?? null,
+        });
+    }
+    const quorum = e.quorum ?? payload?.quorum;
+    if (quorum !== undefined && quorum !== null)
+        out.push({ type: 'quorum', doc: quorum });
+    return out;
+}
+/**
+ * Re-verify one carried payload. Returns null on pass, a NAMED reason on fail.
+ * Freshness is intentionally not re-enforced (maxAgeSec: 0): it was a runtime
+ * property of the decision moment and cannot be re-performed at audit time —
+ * what IS re-performed is the cryptography (signature, issuer trust, action
+ * binding, ceremony checks).
+ */
+function spkiFingerprint(value) {
+    try {
+        const key = crypto.createPublicKey({ key: Buffer.from(value, 'base64url'), format: 'der', type: 'spki' });
+        return crypto.createHash('sha256').update(key.export({ type: 'spki', format: 'der' })).digest('hex');
+    }
+    catch {
+        return null;
+    }
+}
+function pinnedApproverEntry(approverKeys, approver, carriedKey = null) {
+    if (!approverKeys || typeof approverKeys !== 'object' || Array.isArray(approverKeys))
+        return null;
+    const candidates = Object.values(approverKeys).filter((entry) => entry && typeof entry === 'object'
+        && entry.approver_id === approver && typeof entry.public_key === 'string');
+    if (carriedKey) {
+        const fingerprint = spkiFingerprint(carriedKey);
+        const matches = candidates.filter((entry) => fingerprint && spkiFingerprint(entry.public_key) === fingerprint);
+        return matches.length === 1 ? matches[0] : null;
+    }
+    return candidates.length === 1 ? candidates[0] : null;
+}
+function reverifyMaterial(m, { issuerKeys, action, rpId, allowedOrigins, approverKeys, quorumPolicy, quorumPolicies, }) {
+    if (m.type === 'receipt') {
+        const r = verifyEmiliaReceipt(m.doc, {
+            trustedKeys: issuerKeys, allowInlineKey: false, action, maxAgeSec: 0,
+        });
+        return r.ok ? null : `receipt:${r.reason}`;
+    }
+    if (m.type === 'signoff') {
+        if (typeof rpId !== 'string' || !rpId || !Array.isArray(allowedOrigins) || allowedOrigins.length === 0) {
+            return 'signoff:relying_party_scope_unpinned';
+        }
+        const approver = m.doc?.context?.approver;
+        const entry = pinnedApproverEntry(approverKeys, approver, m.key);
+        if (!entry)
+            return 'signoff:approver_key_unpinned_or_ambiguous';
+        const r = verifyWebAuthnSignoff(m.doc, entry.public_key, { rpId, allowedOrigins });
+        return r.valid ? null : `signoff:${r.error ? `error:${r.error}` : `checks_failed:${failingChecks(r.checks)}`}`;
+    }
+    if (m.type === 'quorum') {
+        if (typeof rpId !== 'string' || !rpId || !Array.isArray(allowedOrigins) || allowedOrigins.length === 0) {
+            return 'quorum:relying_party_scope_unpinned';
+        }
+        const pinnedPolicy = (quorumPolicies && typeof quorumPolicies === 'object' ? quorumPolicies[action] : null)
+            || quorumPolicy;
+        const policy = validatePinnedQuorumPolicy(pinnedPolicy);
+        if (!policy.ok)
+            return `quorum:${policy.reason}`;
+        const members = Array.isArray(m.doc?.members) ? m.doc.members.map((member) => {
+            const entry = pinnedApproverEntry(approverKeys, member?.signoff?.context?.approver, member?.approver_public_key);
+            return entry ? { ...member, approver_public_key: entry.public_key } : null;
+        }) : [];
+        if (members.length === 0 || members.some((member) => !member))
+            return 'quorum:approver_key_unpinned_or_ambiguous';
+        const r = verifyQuorum({ ...m.doc, policy: policy.policy, members }, { rpId, allowedOrigins });
+        return r.valid ? null : `quorum:checks_failed:${failingChecks(r.checks)}`;
+    }
+    /* c8 ignore next */
+    return `unknown_material:${m.type}`; // unreachable; fail closed regardless
+}
+/**
+ * Re-perform the evidence: rebuild the chain, re-verify carried cryptographic
+ * material, recompute the counts. Async because the chain is rebuilt through
+ * the evidence log's own (async) record().
+ *
+ * The entries MUST be the complete log from genesis (`evidence.all()` or a
+ * full export). A partial slice fails the chain (fail closed) because its
+ * first link cannot chain from 'genesis'.
+ *
+ * Chain method — drives evidence.js's REAL verify(), twice over:
+ *   1. every supplied entry body (its own seq/prev_hash included, its hash
+ *      stripped) is re-recorded into a fresh createEvidenceLog(), which
+ *      recomputes the canonical-JSON sha256 for that exact body; a recomputed
+ *      hash that differs from the SUPPLIED hash is a tampered/forged entry —
+ *      broken from that point;
+ *   2. the rebuilt log's own verify() then walks the whole chain, catching
+ *      link-level attacks the per-entry recompute cannot (a removed entry, or
+ *      an entry rewritten WITH a consistently recomputed hash — its successor's
+ *      prev_hash no longer matches).
+ *
+ * @param {Array<object>} entries  the full evidence log (evidence.all())
+ * @param {object} [o]
+ * @param {string[]} [o.issuerKeys=[]]  pinned base64url SPKI issuer keys, sourced
+ *   by the AUDITOR out of band — never from the entries themselves
+ * @param {number|function} [o.now=Date.now]  clock for generated_at (pin for determinism)
+ * @param {object} [o.approverKeys={}] auditor-pinned identity-bound approver keys
+ * @param {string|null} [o.rpId] bind carried WebAuthn assertions to this relying-party id
+ * @param {string[]} [o.allowedOrigins=[]] exact accepted WebAuthn origins
+ * @param {object} [o.quorumPolicy] auditor-pinned global organizational quorum rule
+ * @param {object} [o.quorumPolicies] action_type -> auditor-pinned quorum rule
+ * @returns {Promise<object>} EP-GATE-REPERFORMANCE-v1 document:
+ *   { chain: {ok, entries, head}, receipts: {reverified, failed, not_reverifiable},
+ *     counts: {allows, denies, replays_blocked, by_action_type}, ... }
+ */
+export async function reperformEvidence(entries = [], { issuerKeys = [], approverKeys = {}, now = Date.now, rpId = null, allowedOrigins = [], quorumPolicy = null, quorumPolicies = {}, } = {}) {
+    if (!Array.isArray(entries)) {
+        throw new Error('reperform: entries must be an array (evidence.all() or a full export)');
+    }
+    if (!Array.isArray(issuerKeys)) {
+        throw new Error('reperform: issuerKeys must be an array of base64url SPKI issuer keys');
+    }
+    /* ------------------------------- chain -------------------------------- */
+    const rebuilt = createEvidenceLog();
+    let broken = null;
+    for (let i = 0; i < entries.length; i++) {
+        const e = entries[i];
+        if (!e || typeof e !== 'object' || Array.isArray(e)) {
+            broken = { at: i, seq: null, reason: 'not_an_object' };
+            break;
+        }
+        const seq = Number.isInteger(e.seq) ? e.seq : null;
+        if (seq === null) {
+            broken = { at: i, seq: null, reason: 'missing_seq' };
+            break;
+        }
+        if (typeof e.prev_hash !== 'string' || e.prev_hash.length === 0) {
+            broken = { at: i, seq, reason: 'missing_prev_hash' };
+            break;
+        }
+        if (typeof e.hash !== 'string' || e.hash.length === 0) {
+            broken = { at: i, seq, reason: 'missing_hash' };
+            break;
+        }
+        // Re-record the EXACT supplied body (own seq/prev_hash override the fresh
+        // log's defaults via the record() spread) so the recomputed hash is over
+        // byte-identical canonical material.
+        const { hash: suppliedHash, ...body } = e;
+        const rec = await rebuilt.record(body);
+        if (rec.hash !== suppliedHash) {
+            broken = { at: i, seq, reason: 'hash_mismatch' };
+            break;
+        }
+    }
+    // Drive the REAL evidence.js verifier over the rebuilt chain — the link walk
+    // (prev_hash continuity from 'genesis') is its judgment, not a reimplementation.
+    const rv = rebuilt.verify();
+    if (!broken && !rv.ok)
+        broken = { at: rv.at ?? null, seq: rv.at ?? null, reason: rv.reason };
+    const chain = {
+        ok: !broken,
+        entries: entries.length,
+        // A broken chain vouches for NO head — even a valid prefix's.
+        head: !broken ? (rv.head ?? null) : null,
+        ...(broken ? { broken_at: broken.at, broken_seq: broken.seq, reason: broken.reason } : {}),
+    };
+    /* ------------------- receipts + counts (from scratch) ------------------ */
+    const receipts = { reverified: 0, failed: [], not_reverifiable: 0, no_receipt_presented: 0 };
+    const warnings = [];
+    const byAction = Object.create(null);
+    let allows = 0;
+    let denies = 0;
+    let replaysBlocked = 0;
+    entries.forEach((e, index) => {
+        if (!e || typeof e !== 'object' || Array.isArray(e)) {
+            warnings.push({ index, reason: 'not_an_object' });
+            return;
+        }
+        if (typeof e.kind !== 'string' || e.kind.length === 0) {
+            warnings.push({ index, reason: 'missing_kind' });
+            return;
+        }
+        // Counts: guarded decisions only ('not_guarded' pass-throughs ran without
+        // the control; execution records are provenance, not enforcement). Fail
+        // closed: only a literal `true` counts as an allow.
+        if (e.kind === 'decision' && e.reason !== 'not_guarded') {
+            if (e.allow === true)
+                allows += 1;
+            else
+                denies += 1;
+            if (e.reason === 'replay_refused')
+                replaysBlocked += 1;
+            const action = typeof e.action === 'string' && e.action ? e.action : 'unknown';
+            byAction[action] = (byAction[action] || 0) + 1;
+        }
+        // Re-verification: any entry that carries material gets it re-verified;
+        // ALL carried payloads must verify for the entry to count as reverified —
+        // each failure is a named {hash, reason}, never absorbed.
+        const hash = typeof e.hash === 'string' && e.hash ? e.hash : null;
+        const material = collectMaterial(e);
+        if (material.length > 0) {
+            let allOk = true;
+            for (const m of material) {
+                const reason = reverifyMaterial(m, {
+                    issuerKeys,
+                    approverKeys,
+                    action: typeof e.action === 'string' && e.action ? e.action : null,
+                    rpId,
+                    allowedOrigins,
+                    quorumPolicy,
+                    quorumPolicies,
+                });
+                if (reason) {
+                    allOk = false;
+                    receipts.failed.push({ hash, reason });
+                }
+            }
+            if (allOk)
+                receipts.reverified += 1;
+            return;
+        }
+        // No material carried. A decision that REFERENCES a receipt (receipt_id
+        // recorded) but does not carry it cannot be re-performed — surfaced as
+        // not_reverifiable, never silently passed. A decision where no receipt was
+        // presented at all (pass-through, receipt_required refusal) has nothing to
+        // re-verify and is reported separately for transparency.
+        if (e.kind === 'decision') {
+            if (e.receipt_id !== null && e.receipt_id !== undefined)
+                receipts.not_reverifiable += 1;
+            else
+                receipts.no_receipt_presented += 1;
+        }
+    });
+    const nowMs = typeof now === 'function' ? now() : now;
+    return {
+        '@version': REPERFORMANCE_VERSION,
+        product: 'EMILIA Gate',
+        generated_at: new Date(nowMs).toISOString(),
+        honesty: {
+            reperforms: 'Independent recomputation from the supplied evidence entries: the hash chain is rebuilt '
+                + 'and checked with the evidence log\'s own verifier, carried receipt/signoff/quorum material '
+                + 'is cryptographically re-verified against auditor-pinned issuer and identity-bound approver keys, '
+                + 'WebAuthn scope, and organizational quorum policy; decision counts '
+                + 'are recomputed from scratch without reference to any report builder.',
+            does_not_establish: [
+                'Completeness of the log: a chain rewritten in full, or entries withheld before they were supplied, is not detectable from the entries alone. Anchor the head hash externally to close this.',
+                'Runtime freshness or one-time consumption: those were properties of the moment of decision and cannot be re-performed after the fact; cryptographic material is re-verified, runtime state is not.',
+                'Issuer and approver key custody, enrollment, or identity proofing, which remain external trust roots the auditor supplies out of band.',
+                'The business correctness or wisdom of any authorized action.',
+            ],
+            status: 'Support for an audit re-performance procedure. This document does not conclude, opine, or certify; any conclusion is the auditor\'s.',
+        },
+        input: {
+            entries_supplied: entries.length,
+            issuer_keys_pinned: issuerKeys.length,
+            approver_keys_pinned: approverKeys && typeof approverKeys === 'object'
+                ? Object.keys(approverKeys).length : 0,
+            relying_party_scope_pinned: typeof rpId === 'string' && rpId.length > 0
+                && Array.isArray(allowedOrigins) && allowedOrigins.length > 0,
+            quorum_policies_pinned: (quorumPolicy ? 1 : 0)
+                + (quorumPolicies && typeof quorumPolicies === 'object' ? Object.keys(quorumPolicies).length : 0),
+            expects: 'the complete evidence log from genesis (evidence.all() or a full export)',
+        },
+        chain,
+        receipts,
+        counts: {
+            allows,
+            denies,
+            replays_blocked: replaysBlocked,
+            by_action_type: sortedCounts(byAction),
+        },
+        integrity_warnings: warnings,
+    };
+}
+/** Extract the recomputed counts, fail closed on anything unrecognized. */
+function countsFrom(recomputed) {
+    if (!recomputed || typeof recomputed !== 'object') {
+        throw new Error('compareToReported: recomputed must be the reperformEvidence result (or its counts)');
+    }
+    const c = recomputed['@version'] === REPERFORMANCE_VERSION ? recomputed.counts : recomputed;
+    if (!c || typeof c !== 'object') {
+        throw new Error('compareToReported: recomputed carries no counts');
+    }
+    for (const k of ['allows', 'denies', 'replays_blocked']) {
+        if (!Number.isFinite(c[k]) || c[k] < 0) {
+            throw new Error(`compareToReported: recomputed.${k} must be a finite number >= 0 — refusing to compare`);
+        }
+    }
+    const by = c.by_action_type;
+    return { ...c, by_action_type: by && typeof by === 'object' && !Array.isArray(by) ? by : {} };
+}
+/**
+ * Diff recomputed counts against a reported pack — the auditor's tie-out.
+ *
+ * Accepts an EP-GATE-USAGE-v1 pack (meterUsage output or the signed-ready
+ * buildUsageStatement body) or an EP-GATE-UNDERWRITER-ATTESTATION-v1 pack.
+ * Only the OVERLAPPING NUMERIC fields are compared; an unknown pack @version
+ * is refused (fail closed), never fuzzily matched. A reported field that is
+ * missing or non-numeric is itself a named drift — a stripped pack can never
+ * silently match.
+ *
+ * The comparison is meaningful only when the recomputation ran over exactly
+ * the entries the reported pack was built from (same slice, same window);
+ * scoping the slice is the auditor's procedure, not this function's.
+ *
+ * @param {object} recomputed  reperformEvidence() result (or its .counts)
+ * @param {object} reportedPack  usage or underwriter pack
+ * @returns {{match: boolean, pack_version: string, drift: Array<{field, reported, recomputed}>}}
+ */
+export function compareToReported(recomputed, reportedPack) {
+    const counts = countsFrom(recomputed);
+    if (!reportedPack || typeof reportedPack !== 'object') {
+        throw new Error('compareToReported: reportedPack must be an object');
+    }
+    const version = reportedPack['@version'];
+    const drift = [];
+    const check = (field, reported, rec) => {
+        if (!Number.isFinite(reported) || reported !== rec) {
+            drift.push({ field, reported: reported === undefined ? null : reported, recomputed: rec });
+        }
+    };
+    if (version === USAGE_PACK_VERSION) {
+        check('allows', reportedPack.allows, counts.allows);
+        check('denies', reportedPack.denies, counts.denies);
+        check('replays_blocked', reportedPack.replays_blocked, counts.replays_blocked);
+        check('protected_actions', reportedPack.protected_actions, counts.allows + counts.denies);
+        const reportedBy = reportedPack.by_action_type;
+        const byOk = reportedBy && typeof reportedBy === 'object' && !Array.isArray(reportedBy);
+        const keys = new Set([
+            ...Object.keys(counts.by_action_type),
+            ...(byOk ? Object.keys(reportedBy) : []),
+        ]);
+        for (const k of [...keys].sort()) {
+            // An absent key in a well-formed histogram means zero occurrences.
+            const rep = byOk && reportedBy[k] !== undefined ? reportedBy[k] : 0;
+            check(`by_action_type.${k}`, rep, counts.by_action_type[k] ?? 0);
+        }
+    }
+    else if (version === UNDERWRITER_PACK_VERSION) {
+        check('volume.guarded_decisions', reportedPack.volume?.guarded_decisions, counts.allows + counts.denies);
+        check('volume.allowed', reportedPack.volume?.allowed, counts.allows);
+        check('volume.denied', reportedPack.volume?.denied, counts.denies);
+        check('denials.total', reportedPack.denials?.total, counts.denies);
+        check('replay.attempts_blocked', reportedPack.replay?.attempts_blocked, counts.replays_blocked);
+    }
+    else {
+        throw new Error(`compareToReported: unknown pack @version ${JSON.stringify(version ?? null)} — refusing to compare (fail closed)`);
+    }
+    return { match: drift.length === 0, pack_version: version, drift };
+}
+export default { REPERFORMANCE_VERSION, reperformEvidence, compareToReported };
+//# sourceMappingURL=reperform.js.map

package/dist/reports/reperform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reperform.js","sourceRoot":"","sources":["../../src/reports/reperform.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,4EAA4E;AAC5E,+EAA+E;AAC/E,sEAAsE;AACtE,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAC9C,MAAM,wBAAwB,GAAG,oCAAoC,CAAC;AAKtE,uFAAuF;AACvF,SAAS,YAAY,CAAC,GAAG;IACvB,MAAM,GAAG,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,SAAS,aAAa,CAAC,MAAM;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAChF,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CAAC,CAAC;IACxB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,MAAM,OAAO,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO;WACpE,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,EAAE,OAAO,CAAC;IAC9C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,CAAC,CAAC,mBAAmB,IAAI,OAAO,EAAE,mBAAmB,IAAI,IAAI;SACnE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,OAAO,EAAE,MAAM,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,KAAK;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1G,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoD,EAAE,QAAa,EAAE,aAAkB,IAAI;IACtH,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAClG,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;WAC9F,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC;IAC7E,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,IAAI,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,WAAW,CAAC,CAAC;QAC/G,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAC,EAAE,EAC3B,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,GACrF;IACC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE;YACnC,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;SACrE,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvG,OAAO,sCAAsC,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK;YAAE,OAAO,4CAA4C,CAAC;QAChE,MAAM,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,iBAAiB,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvG,OAAO,qCAAqC,CAAC;QAC/C,CAAC;QACD,MAAM,YAAY,GAAG,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;eACtG,YAAY,CAAC;QAClB,MAAM,MAAM,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC3E,MAAM,KAAK,GAAG,mBAAmB,CAC/B,YAAY,EACZ,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAClC,MAAM,EAAE,mBAAmB,CAC5B,CAAC;YACF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,mBAAmB,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7E,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACR,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,2CAA2C,CAAC;QAClH,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/F,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,oBAAoB;IACpB,OAAO,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,sCAAsC;AAC7E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAiB,EAAE,EAAE,EAC3D,UAAU,GAAG,EAAE,EACf,YAAY,GAAG,EAAE,EACjB,GAAG,GAAG,IAAI,CAAC,GAAG,EACd,IAAI,GAAG,IAAI,EACX,cAAc,GAAG,EAAE,EACnB,YAAY,GAAG,IAAI,EACnB,cAAc,GAAG,EAAE,MASjB,EAAE;IACJ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IAED,4EAA4E;IAC5E,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,IAAI,MAAM,GAAiF,IAAI,CAAC;IAChG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YAAC,MAAM;QAAC,CAAC;QACvH,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;YAAC,MAAM;QAAC,CAAC;QAClF,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YAAC,MAAM;QAAC,CAAC;QACjI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YAAC,MAAM;QAAC,CAAC;QAClH,0EAA0E;QAC1E,yEAAyE;QACzE,qCAAqC;QACrC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YAAC,MAAM;QAAC,CAAC;IAC7F,CAAC;IACD,6EAA6E;IAC7E,iFAAiF;IACjF,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,MAAM,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,IAAI,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;IAC7F,MAAM,KAAK,GAAG;QACZ,EAAE,EAAE,CAAC,MAAM;QACX,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,8DAA8D;QAC9D,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACxC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC;IAEF,6EAA6E;IAC7E,MAAM,QAAQ,GAKV,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;IAChF,MAAM,QAAQ,GAAwC,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;QAC3B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACnH,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAEpH,0EAA0E;QAC1E,wEAAwE;QACxE,oDAAoD;QACpD,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACxD,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;gBAAE,MAAM,IAAI,CAAC,CAAC;;gBAAM,MAAM,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB;gBAAE,cAAc,IAAI,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,wEAAwE;QACxE,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,EAAE;oBACjC,UAAU;oBACV,YAAY;oBACZ,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;oBAClE,IAAI;oBACJ,cAAc;oBACd,YAAY;oBACZ,cAAc;iBACf,CAAC,CAAC;gBACH,IAAI,MAAM,EAAE,CAAC;oBAAC,KAAK,GAAG,KAAK,CAAC;oBAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBAAC,CAAC;YACxE,CAAC;YACD,IAAI,KAAK;gBAAE,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,2EAA2E;QAC3E,2EAA2E;QAC3E,yDAAyD;QACzD,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;gBAAE,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC;;gBACnF,QAAQ,CAAC,oBAAoB,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAEtD,OAAO;QACL,UAAU,EAAE,qBAAqB;QACjC,OAAO,EAAE,aAAa;QACtB,YAAY,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;QAC3C,OAAO,EAAE;YACP,UAAU,EACR,0FAA0F;kBACxF,6FAA6F;kBAC7F,mGAAmG;kBACnG,oEAAoE;kBACpE,sEAAsE;YAC1E,kBAAkB,EAAE;gBAClB,6LAA6L;gBAC7L,oMAAoM;gBACpM,wIAAwI;gBACxI,8DAA8D;aAC/D;YACD,MAAM,EAAE,sIAAsI;SAC/I;QACD,KAAK,EAAE;YACL,gBAAgB,EAAE,OAAO,CAAC,MAAM;YAChC,kBAAkB,EAAE,UAAU,CAAC,MAAM;YACrC,oBAAoB,EAAE,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;gBACpE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxC,0BAA0B,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;mBAClE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;YAC/D,sBAAsB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;kBAC1C,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACnG,OAAO,EAAE,0EAA0E;SACpF;QACD,KAAK;QACL,QAAQ;QACR,MAAM,EAAE;YACN,MAAM;YACN,MAAM;YACN,eAAe,EAAE,cAAc;YAC/B,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC;SACvC;QACD,kBAAkB,EAAE,QAAQ;KAC7B,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,UAAU,CAAC,UAAU;IAC5B,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5F,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,qDAAqD,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC;IAC5B,OAAO,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAChG,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAU,EAAE,YAAY;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,KAAK,GAAwD,EAAE,CAAC;IACtE,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE;QACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;QACnC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,CAAC,iBAAiB,EAAE,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAC/E,KAAK,CAAC,mBAAmB,EAAE,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1F,MAAM,UAAU,GAAG,YAAY,CAAC,cAAc,CAAC;QAC/C,MAAM,IAAI,GAAG,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC;YACnB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACjC,mEAAmE;YACnE,MAAM,GAAG,GAAG,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,wBAAwB,EAAE,CAAC;QAChD,KAAK,CAAC,0BAA0B,EAAE,YAAY,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACzG,KAAK,CAAC,gBAAgB,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrE,KAAK,CAAC,eAAe,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnE,KAAK,CAAC,eAAe,EAAE,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnE,KAAK,CAAC,yBAAyB,EAAE,YAAY,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAClG,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,sCAAsC,CAClH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACrE,CAAC;AAED,eAAe,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/reports/underwriter.d.ts

@@ -0,0 +1,127 @@
+/**
+ * EMILIA Gate — underwriter control attestation (AI-liability loss-run analogue).
+ *
+ * The artifact an AI-liability underwriter prices premium credit against — the
+ * MFA-for-cyber analogue: evidence that a deny-by-default authorization control
+ * was IN FORCE and OPERATING over the policy period, computed from the gate's
+ * tamper-evident evidence log. Pure function: same entries + same options in,
+ * identical JSON out (pin `now` for a byte-stable artifact).
+ *
+ * HONESTY BOUNDARY (carried inside the artifact): this attests CONTROL
+ * OPERATION only. It does not attest the business correctness of any authorized
+ * action, and it is not an insurance document until adopted by the carrier.
+ * Near-miss / remediation narrative belongs to the broker — the builder emits
+ * those fields as null and NEVER fabricates prose.
+ *
+ * Fail closed: a missing insured or an invalid period is an error, not a guess.
+ * Entries that cannot be verified as log records (unparseable time, missing
+ * hash, unknown kind, decision without an allow verdict) are EXCLUDED from every
+ * attested count and surfaced as integrity_warnings — the attestation never
+ * counts what it cannot account for. A zero-activity period is a valid (boring)
+ * attestation, not an error.
+ */
+export declare const UNDERWRITER_ATTESTATION_VERSION = "EP-GATE-UNDERWRITER-ATTESTATION-v1";
+/**
+ * Build the underwriter attestation over a slice of the evidence log.
+ * @param {Array<object>} entries  evidence.all() (or a durable export of it)
+ * @param {object} [o]
+ * @param {string} [o.insured]           named insured (required)
+ * @param {string|null} [o.policyRef]  carrier policy/submission reference (null until bound)
+ * @param {string|number} [o.periodStart]  inclusive period start (ISO or epoch ms)
+ * @param {string|number} [o.periodEnd]    inclusive period end (ISO or epoch ms)
+ * @param {number|Function} [o.now]    clock for generated_at (pin for determinism)
+ * @returns {object} EP-GATE-UNDERWRITER-ATTESTATION-v1 document
+ */
+export declare function buildUnderwriterAttestation(entries?: any[], { insured, policyRef, periodStart, periodEnd, now, }?: {
+    insured?: string;
+    policyRef?: string | null;
+    periodStart?: string | number;
+    periodEnd?: string | number;
+    now?: number | (() => number);
+}): {
+    '@version': string;
+    product: string;
+    generated_at: string;
+    insured: string;
+    policy_ref: string | null;
+    period: {
+        start: string;
+        end: string;
+    };
+    honesty: {
+        attests: string;
+        does_not_attest: string[];
+        status: string;
+    };
+    control_in_force: {
+        control: string;
+        mode: string;
+        statement: string;
+        guarded_decisions: number;
+        first_decision_at: any;
+        last_decision_at: any;
+    };
+    volume: {
+        guarded_decisions: number;
+        allowed: number;
+        denied: number;
+        by_action_family: Record<string, any>;
+    };
+    denials: {
+        total: number;
+        rate: number | null;
+        reasons: Record<string, any>;
+    };
+    replay: {
+        attempts_blocked: number;
+    };
+    assurance: {
+        required_tier_distribution: Record<string, number>;
+        credited_tier_distribution_on_allow: Record<string, number>;
+    };
+    quorum_usage: {
+        hard_action_decisions: number;
+        allowed: number;
+        denied: number;
+    };
+    exceptions: {
+        uncontrolled_passthroughs: number;
+        uncontrolled_actions: any[];
+        replay_defense_bypassed: number;
+    };
+    executions: {
+        recorded: number;
+        executed: number;
+        failed: number;
+    };
+    narrative: {
+        near_misses: null;
+        remediation: null;
+        completed_by: string;
+    };
+    evidence: {
+        log_entries_supplied: number;
+        in_scope: number;
+        first_hash: any;
+        last_hash: any;
+        integrity_warnings: {
+            index: number;
+            seq: number | null;
+            reason: string;
+        }[];
+    };
+};
+/**
+ * Render the attestation for a submission packet. Refuses any document that is
+ * not an EP-GATE-UNDERWRITER-ATTESTATION-v1 — never renders what it cannot
+ * vouch the shape of. Narrative fields render exactly as present in the pack
+ * (the broker fills them into the JSON); null renders as a placeholder.
+ */
+export declare function renderMarkdown(pack: any): string;
+declare const _default: {
+    UNDERWRITER_ATTESTATION_VERSION: string;
+    buildUnderwriterAttestation: typeof buildUnderwriterAttestation;
+    renderMarkdown: typeof renderMarkdown;
+};
+export default _default;
+//# sourceMappingURL=underwriter.d.ts.map

package/dist/reports/underwriter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"underwriter.d.ts","sourceRoot":"","sources":["../../src/reports/underwriter.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,eAAO,MAAM,+BAA+B,uCAAuC,CAAC;AA6CpF;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,GAAG,EAAO,EAAE,EAC/D,OAAO,EAAE,SAAgB,EAAE,WAAW,EAAE,SAAS,EAAE,GAAc,GAClE,GAAE;IACD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAmBqB,MAAM;iBAAO,MAAM,GAAG,IAAI;oBAAU,MAAM;;;EAuHpE;AAkCD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,KAAA,UAuFlC;;;;;;AAED,wBAAgG"}