@emilia-protocol/gate 0.11.0 → 0.14.0

package/dist/control-plane.js

@@ -0,0 +1,349 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Vendor-neutral orchestration for Gate coverage, evidence completeness, and
+ * usage metering. Enforcement still happens at each executor-side Gate. This
+ * module cannot turn an observation or dashboard decision into authorization.
+ */
+import { canonicalize, hashCanonical } from './execution-binding.js';
+import { coverageInventoryDigest, evaluateGateCoverage } from './coverage.js';
+import { evaluateSettlementEligibility } from './settlement.js';
+import { meterUsage, buildUsageStatement } from './metering.js';
+import { acceptNetworkWitnessStatement, networkWitnessDigest } from './network-witness.js';
+export const CONTROL_PLANE_REPORT_VERSION = 'EP-GATE-CONTROL-PLANE-REPORT-v1';
+export const CONTROL_PLANE_MAX_SETTLEMENTS = 10_000;
+const MAX_COVERAGE_EVIDENCE_ITEMS = 50_000;
+function isPlainObject(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function digest(value) {
+    return `sha256:${hashCanonical(value)}`;
+}
+function witnessArtifactKey(statement) {
+    try {
+        return digest(statement);
+    }
+    catch {
+        return null;
+    }
+}
+function immutableCanonicalSnapshot(value) {
+    const snapshot = JSON.parse(canonicalize(value));
+    const stack = [snapshot];
+    while (stack.length) {
+        const current = stack.pop();
+        if (current && typeof current === 'object') {
+            for (const child of Object.values(current))
+                stack.push(child);
+            Object.freeze(current);
+        }
+    }
+    return snapshot;
+}
+function snapshotExpectedProbeNonces(value, inventory) {
+    if (value === undefined || value === null)
+        return null;
+    if (value instanceof Map) {
+        const selected = Object.create(null);
+        for (const surface of Array.isArray(inventory?.surfaces) ? inventory.surfaces : []) {
+            if (value.has(surface.surface_id))
+                selected[surface.surface_id] = value.get(surface.surface_id);
+        }
+        return immutableCanonicalSnapshot(selected);
+    }
+    return immutableCanonicalSnapshot(value);
+}
+function snapshotSettlementItems(items) {
+    const ownKeys = Reflect.ownKeys(items);
+    if (ownKeys.length !== items.length + 1 || !ownKeys.includes('length')) {
+        throw new TypeError('settlement collection must be a dense data array');
+    }
+    const snapshots = [];
+    for (let i = 0; i < items.length; i++) {
+        const descriptor = Object.getOwnPropertyDescriptor(items, String(i));
+        if (!descriptor || descriptor.enumerable !== true || !Object.hasOwn(descriptor, 'value')) {
+            throw new TypeError('settlement collection contains an accessor');
+        }
+        snapshots.push(immutableCanonicalSnapshot(descriptor.value));
+    }
+    return Object.freeze(snapshots);
+}
+/**
+ * Produce one reproducible control-plane view. The signed/verified subartifacts
+ * remain independently portable; this report joins only their digests and
+ * closed verdicts.
+ */
+export async function evaluateGateControlPlane(input = {}, options = {}) {
+    const now = options.now === undefined ? Date.now() : Number(options.now);
+    if (!Number.isFinite(now))
+        throw new TypeError('control-plane now must be finite');
+    let coverageInventory;
+    let settlementProfile;
+    let pinnedProbes;
+    let pinnedWitnesses;
+    let expectedProbeNonces;
+    let probeMaxAgeSec;
+    let witnessMaxAgeSec;
+    let maxFutureSkewSec;
+    let allowEphemeralWitnessStore;
+    let configuredTrustedAcceptances;
+    let configurationError = null;
+    try {
+        coverageInventory = options.coverageInventory === undefined
+            ? undefined
+            : immutableCanonicalSnapshot(options.coverageInventory);
+        settlementProfile = options.settlementProfile === undefined
+            ? undefined
+            : immutableCanonicalSnapshot(options.settlementProfile);
+        pinnedProbes = options.pinnedProbes === undefined
+            ? undefined
+            : immutableCanonicalSnapshot(options.pinnedProbes);
+        pinnedWitnesses = options.pinnedWitnesses === undefined
+            ? undefined
+            : immutableCanonicalSnapshot(options.pinnedWitnesses);
+        expectedProbeNonces = snapshotExpectedProbeNonces(options.expectedProbeNonces, coverageInventory);
+        probeMaxAgeSec = options.probeMaxAgeSec;
+        witnessMaxAgeSec = options.witnessMaxAgeSec;
+        maxFutureSkewSec = options.maxFutureSkewSec;
+        allowEphemeralWitnessStore = options.allowEphemeralWitnessStore === true;
+        const trustedInput = options.trustedWitnessAcceptances;
+        if (trustedInput !== undefined
+            && (!Array.isArray(trustedInput) || trustedInput.length > MAX_COVERAGE_EVIDENCE_ITEMS)) {
+            throw new TypeError('trusted witness acceptance collection is invalid');
+        }
+        configuredTrustedAcceptances = [];
+        for (const acceptance of Array.isArray(trustedInput) ? trustedInput : []) {
+            configuredTrustedAcceptances.push(immutableCanonicalSnapshot(acceptance));
+        }
+        Object.freeze(configuredTrustedAcceptances);
+    }
+    catch {
+        configurationError = 'rp_configuration_invalid';
+        coverageInventory = null;
+        settlementProfile = null;
+        pinnedProbes = [];
+        pinnedWitnesses = [];
+        expectedProbeNonces = null;
+        configuredTrustedAcceptances = Object.freeze([]);
+        allowEphemeralWitnessStore = false;
+    }
+    let attestationVerifiers;
+    let witnessSequenceStore;
+    let verifyAuthorization;
+    let verifyExecution;
+    let verifyOutcome;
+    try {
+        attestationVerifiers = options.attestationVerifiers;
+        witnessSequenceStore = options.witnessSequenceStore;
+        verifyAuthorization = options.verifyAuthorization;
+        verifyExecution = options.verifyExecution;
+        verifyOutcome = options.verifyOutcome;
+    }
+    catch {
+        configurationError = 'rp_configuration_invalid';
+    }
+    let settlementItems = [];
+    let settlementError = null;
+    try {
+        const presentedSettlements = input.settlements;
+        if (presentedSettlements !== undefined) {
+            if (!Array.isArray(presentedSettlements)) {
+                settlementError = 'settlements_invalid';
+            }
+            else if (presentedSettlements.length > CONTROL_PLANE_MAX_SETTLEMENTS) {
+                settlementError = 'settlements_limit_exceeded';
+            }
+            else {
+                settlementItems = snapshotSettlementItems(presentedSettlements);
+            }
+        }
+    }
+    catch {
+        settlementItems = [];
+        settlementError = 'settlements_hostile_input';
+    }
+    let coverageInput = {};
+    try {
+        const presentedCoverage = input.coverage;
+        if (isPlainObject(presentedCoverage))
+            coverageInput = presentedCoverage;
+    }
+    catch { /* coverage will remain closed with no evidence */ }
+    let usageInput;
+    let usageError = null;
+    try {
+        const presentedUsage = input.usage;
+        usageInput = presentedUsage === undefined
+            ? undefined
+            : immutableCanonicalSnapshot(presentedUsage);
+    }
+    catch {
+        usageError = 'usage_statement_refused';
+    }
+    // Evidence is presenter-controlled; policy and pins above are immutable RP
+    // snapshots. No bundle can select a weaker configuration while work awaits.
+    const trustedByStatementDigest = new Map();
+    for (const acceptance of configuredTrustedAcceptances) {
+        if (typeof acceptance.statement_digest === 'string') {
+            trustedByStatementDigest.set(acceptance.statement_digest, acceptance);
+        }
+    }
+    const coverageAcceptanceByArtifact = new Map();
+    const acceptanceForStatement = (statement) => {
+        const artifactKey = witnessArtifactKey(statement);
+        if (artifactKey && coverageAcceptanceByArtifact.has(artifactKey)) {
+            return { found: true, acceptance: coverageAcceptanceByArtifact.get(artifactKey), artifactKey };
+        }
+        try {
+            const statementDigest = networkWitnessDigest(statement);
+            if (trustedByStatementDigest.has(statementDigest)) {
+                return { found: true, acceptance: trustedByStatementDigest.get(statementDigest), artifactKey };
+            }
+        }
+        catch { /* raw ingestion will refuse malformed statements */ }
+        return { found: false, acceptance: null, artifactKey };
+    };
+    // Coverage and settlement may reference the same witness statement. Consume
+    // each coverage statement once, then reuse only this RP-side ingestion result.
+    let coverageWitnesses = null;
+    try {
+        coverageInventoryDigest(coverageInventory);
+        const evidenceListsValid = ['deployments', 'probes', 'witnesses'].every((field) => {
+            const value = coverageInput[field];
+            return value === undefined || (Array.isArray(value) && value.length <= MAX_COVERAGE_EVIDENCE_ITEMS);
+        });
+        if (evidenceListsValid) {
+            const presentedWitnesses = Array.isArray(coverageInput.witnesses) ? coverageInput.witnesses : [];
+            if (presentedWitnesses.length + configuredTrustedAcceptances.length <= MAX_COVERAGE_EVIDENCE_ITEMS) {
+                coverageWitnesses = presentedWitnesses.map((statement) => immutableCanonicalSnapshot(statement));
+            }
+        }
+    }
+    catch { /* coverage owns the closed invalid-input report */ }
+    const coverageIngestionResults = [];
+    if (coverageWitnesses) {
+        for (const statement of coverageWitnesses) {
+            const existing = acceptanceForStatement(statement);
+            const acceptance = existing.found
+                ? existing.acceptance
+                : await acceptNetworkWitnessStatement(statement, {
+                    pinnedWitnesses,
+                    maxAgeSec: witnessMaxAgeSec,
+                    maxFutureSkewSec,
+                    now,
+                    sequenceStore: witnessSequenceStore,
+                    allowEphemeralStore: allowEphemeralWitnessStore,
+                });
+            if (existing.artifactKey)
+                coverageAcceptanceByArtifact.set(existing.artifactKey, acceptance);
+            coverageIngestionResults.push(acceptance);
+        }
+    }
+    const coverageEvidence = coverageWitnesses
+        ? { ...coverageInput, witnesses: [] }
+        : coverageInput;
+    const coverage = await evaluateGateCoverage({
+        ...coverageEvidence,
+        inventory: coverageInventory,
+    }, {
+        now,
+        attestationVerifiers,
+        pinnedProbes,
+        pinnedWitnesses,
+        expectedProbeNonces,
+        probeMaxAgeSec,
+        witnessMaxAgeSec,
+        maxFutureSkewSec,
+        witnessSequenceStore,
+        allowEphemeralWitnessStore,
+        trustedWitnessAcceptances: [
+            ...configuredTrustedAcceptances,
+            ...coverageIngestionResults,
+        ],
+    });
+    const settlements = [];
+    for (const item of settlementItems) {
+        const bundle = isPlainObject(item?.bundle) ? item.bundle : {};
+        const surfaceId = bundle?.coverage?.surface_id;
+        const verifyCoverage = async () => {
+            const row = Array.isArray(coverage.surfaces)
+                ? coverage.surfaces.find((candidate) => candidate.surface_id === surfaceId)
+                : null;
+            if (!row)
+                return { accepted: false, reason: 'surface_not_in_pinned_inventory' };
+            return {
+                accepted: row.complete === true,
+                state: row.state,
+                surface_id: row.surface_id,
+                report_hash: coverage.report_hash,
+                reason: row.complete ? null : row.reason,
+            };
+        };
+        const settlementOptions = {
+            profile: settlementProfile,
+            now,
+            pinnedWitnesses,
+            witnessMaxAgeSec,
+            maxFutureSkewSec,
+            witnessSequenceStore,
+            allowEphemeralWitnessStore,
+            verifyAuthorization,
+            verifyExecution,
+            verifyOutcome,
+            verifyCoverage,
+        };
+        if (settlementProfile?.require_witness === true) {
+            const trusted = acceptanceForStatement(bundle.witness);
+            if (trusted.found)
+                settlementOptions.trustedWitnessAcceptance = trusted.acceptance;
+        }
+        settlements.push(await evaluateSettlementEligibility(bundle, settlementOptions));
+    }
+    let usage = null;
+    if (usageInput !== undefined && !usageError) {
+        try {
+            const metered = meterUsage(usageInput?.entries ?? [], usageInput?.period ?? {});
+            usage = buildUsageStatement(metered, { org: usageInput?.org });
+        }
+        catch {
+            usageError = 'usage_statement_refused';
+        }
+    }
+    const summary = {
+        '@version': CONTROL_PLANE_REPORT_VERSION,
+        generated_at: new Date(now).toISOString(),
+        coverage_report_hash: coverage.report_hash ?? null,
+        coverage_complete: coverage.complete === true,
+        settlement_input_complete: settlementError === null,
+        settlement_results: settlements.map((result) => ({
+            action_digest: result.action_digest,
+            verdict: result.verdict,
+            eligible: result.eligible === true,
+            result_hash: result.result_hash,
+        })),
+        usage_statement_hash: usage?.content_hash ? `sha256:${usage.content_hash}` : null,
+        usage_complete: usage?.complete === true,
+        ...(configurationError ? { configuration_error: configurationError } : {}),
+        ...(settlementError ? { settlement_error: settlementError } : {}),
+        ...(usageError ? { usage_error: usageError } : {}),
+        limitations: [
+            'The control plane coordinates policy, evidence, coverage, metering, and settlement eligibility; executor-side Gates remain the only enforcement points.',
+            'Coverage is bounded by the relying-party-declared inventory, and a passive witness never upgrades a surface to gated.',
+            'Witness-dependent decisions require durable sequence ingestion or an explicitly relying-party-trusted acceptance result.',
+        ],
+    };
+    return Object.freeze({
+        ...summary,
+        control_plane_digest: digest(summary),
+        artifacts: Object.freeze({ coverage, settlements, usage }),
+    });
+}
+export default {
+    CONTROL_PLANE_REPORT_VERSION,
+    CONTROL_PLANE_MAX_SETTLEMENTS,
+    evaluateGateControlPlane,
+};
+//# sourceMappingURL=control-plane.js.map

package/dist/control-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane.js","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE3F,MAAM,CAAC,MAAM,4BAA4B,GAAG,iCAAiC,CAAC;AAC9E,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AACpD,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAE3C,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,MAAM,CAAC,KAAK;IACnB,OAAO,UAAU,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAS;IACnC,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1D,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAK;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAK,EAAE,SAAS;IACnD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACnF,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;gBAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAK;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,SAAS,GAAU,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACpE,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAA8E,EAAE,EAChF,UAiBI,EAAE;IAEN,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAEnF,IAAI,iBAAiB,CAAC;IACtB,IAAI,iBAAiB,CAAC;IACtB,IAAI,YAAY,CAAC;IACjB,IAAI,eAAe,CAAC;IACpB,IAAI,mBAAmB,CAAC;IACxB,IAAI,cAAc,CAAC;IACnB,IAAI,gBAAgB,CAAC;IACrB,IAAI,gBAAgB,CAAC;IACrB,IAAI,0BAA0B,CAAC;IAC/B,IAAI,4BAA4B,CAAC;IACjC,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACzD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1D,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACzD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1D,YAAY,GAAG,OAAO,CAAC,YAAY,KAAK,SAAS;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACrD,eAAe,GAAG,OAAO,CAAC,eAAe,KAAK,SAAS;YACrD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACxD,mBAAmB,GAAG,2BAA2B,CAAC,OAAO,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;QAClG,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QACxC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAC5C,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAC5C,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,KAAK,IAAI,CAAC;QACzE,MAAM,YAAY,GAAG,OAAO,CAAC,yBAAyB,CAAC;QACvD,IAAI,YAAY,KAAK,SAAS;eACvB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,2BAA2B,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC1E,CAAC;QACD,4BAA4B,GAAG,EAAE,CAAC;QAClC,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACzE,4BAA4B,CAAC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB,GAAG,0BAA0B,CAAC;QAChD,iBAAiB,GAAG,IAAI,CAAC;QACzB,iBAAiB,GAAG,IAAI,CAAC;QACzB,YAAY,GAAG,EAAE,CAAC;QAClB,eAAe,GAAG,EAAE,CAAC;QACrB,mBAAmB,GAAG,IAAI,CAAC;QAC3B,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjD,0BAA0B,GAAG,KAAK,CAAC;IACrC,CAAC;IAED,IAAI,oBAAoB,CAAC;IACzB,IAAI,oBAAoB,CAAC;IACzB,IAAI,mBAAmB,CAAC;IACxB,IAAI,eAAe,CAAC;IACpB,IAAI,aAAa,CAAC;IAClB,IAAI,CAAC;QACH,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACpD,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACpD,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAClD,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC1C,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB,GAAG,0BAA0B,CAAC;IAClD,CAAC;IAED,IAAI,eAAe,GAAmB,EAAE,CAAC;IACzC,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,oBAAoB,GAAG,KAAK,CAAC,WAAW,CAAC;QAC/C,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACzC,eAAe,GAAG,qBAAqB,CAAC;YAC1C,CAAC;iBAAM,IAAI,oBAAoB,CAAC,MAAM,GAAG,6BAA6B,EAAE,CAAC;gBACvE,eAAe,GAAG,4BAA4B,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,eAAe,GAAG,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe,GAAG,EAAE,CAAC;QACrB,eAAe,GAAG,2BAA2B,CAAC;IAChD,CAAC;IAED,IAAI,aAAa,GAAwB,EAAE,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,KAAK,CAAC,QAAQ,CAAC;QACzC,IAAI,aAAa,CAAC,iBAAiB,CAAC;YAAE,aAAa,GAAG,iBAAiB,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;IAE9D,IAAI,UAAU,CAAC;IACf,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC;QACnC,UAAU,GAAG,cAAc,KAAK,SAAS;YACvC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,0BAA0B,CAAC,cAAc,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QAAC,UAAU,GAAG,yBAAyB,CAAC;IAAC,CAAC;IAEnD,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAE,CAAC;IAC3C,KAAK,MAAM,UAAU,IAAI,4BAA4B,EAAE,CAAC;QACtD,IAAI,OAAO,UAAU,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;YACpD,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,MAAM,4BAA4B,GAAG,IAAI,GAAG,EAAE,CAAC;IAC/C,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,EAAE;QAC3C,MAAM,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,WAAW,IAAI,4BAA4B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,4BAA4B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,wBAAwB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;gBAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,wBAAwB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,CAAC;YACjG,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,oDAAoD,CAAC,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzD,CAAC,CAAC;IAEF,4EAA4E;IAC5E,+EAA+E;IAC/E,IAAI,iBAAiB,GAAiB,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,kBAAkB,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAChF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,2BAA2B,CAAC,CAAC;QACtG,CAAC,CAAC,CAAC;QACH,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,IAAI,kBAAkB,CAAC,MAAM,GAAG,4BAA4B,CAAC,MAAM,IAAI,2BAA2B,EAAE,CAAC;gBACnG,iBAAiB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;IAE/D,MAAM,wBAAwB,GAAU,EAAE,CAAC;IAC3C,IAAI,iBAAiB,EAAE,CAAC;QACtB,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK;gBAC/B,CAAC,CAAC,QAAQ,CAAC,UAAU;gBACrB,CAAC,CAAC,MAAM,6BAA6B,CAAC,SAAS,EAAE;oBAC/C,eAAe;oBACf,SAAS,EAAE,gBAAgB;oBAC3B,gBAAgB;oBAChB,GAAG;oBACH,aAAa,EAAE,oBAAoB;oBACnC,mBAAmB,EAAE,0BAA0B;iBAChD,CAAC,CAAC;YACL,IAAI,QAAQ,CAAC,WAAW;gBAAE,4BAA4B,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC7F,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,GAAG,iBAAiB;QACxC,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE;QACrC,CAAC,CAAC,aAAa,CAAC;IAClB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC;QAC1C,GAAG,gBAAgB;QACnB,SAAS,EAAE,iBAAiB;KAC7B,EAAE;QACD,GAAG;QACH,oBAAoB;QACpB,YAAY;QACZ,eAAe;QACf,mBAAmB;QACnB,cAAc;QACd,gBAAgB;QAChB,gBAAgB;QAChB,oBAAoB;QACpB,0BAA0B;QAC1B,yBAAyB,EAAE;YACzB,GAAG,4BAA4B;YAC/B,GAAG,wBAAwB;SAC5B;KACF,CAAC,CAAC;IAEH,MAAM,WAAW,GAAU,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;QAC/C,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;YAChC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1C,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC;gBAC3E,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;YAChF,OAAO;gBACL,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI;gBAC/B,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM;aACzC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,iBAAiB,GAanB;YACF,OAAO,EAAE,iBAAiB;YAC1B,GAAG;YACH,eAAe;YACf,gBAAgB;YAChB,gBAAgB;YAChB,oBAAoB;YACpB,0BAA0B;YAC1B,mBAAmB;YACnB,eAAe;YACf,aAAa;YACb,cAAc;SACf,CAAC;QACF,IAAI,iBAAiB,EAAE,eAAe,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,KAAK;gBAAE,iBAAiB,CAAC,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC;QACrF,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,MAAM,6BAA6B,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,KAAK,GAAkD,IAAI,CAAC;IAChE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YAChF,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,yBAAyB,CAAC;QACzC,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,4BAA4B;QACxC,YAAY,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACzC,oBAAoB,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;QAClD,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,KAAK,IAAI;QAC7C,yBAAyB,EAAE,eAAe,KAAK,IAAI;QACnD,kBAAkB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC/C,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI;YAClC,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;QACH,oBAAoB,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI;QACjF,cAAc,EAAE,KAAK,EAAE,QAAQ,KAAK,IAAI;QACxC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,WAAW,EAAE;YACX,yJAAyJ;YACzJ,uHAAuH;YACvH,0HAA0H;SAC3H;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,OAAO;QACV,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,eAAe;IACb,4BAA4B;IAC5B,6BAA6B;IAC7B,wBAAwB;CACzB,CAAC"}

package/dist/coverage.d.ts

@@ -0,0 +1,156 @@
+export declare const COVERAGE_INVENTORY_VERSION = "EP-GATE-COVERAGE-INVENTORY-v1";
+export declare const COVERAGE_REPORT_VERSION = "EP-GATE-COVERAGE-REPORT-v1";
+export declare const ENFORCEMENT_PROBE_VERSION = "EP-GATE-ENFORCEMENT-PROBE-v1";
+export declare const COVERAGE_STATES: readonly string[];
+export declare const PROBE_RESULTS: readonly string[];
+export declare function coverageInventoryDigest(inventory: any): string;
+export declare function signEnforcementProbe(input: any, privateKey: any): Readonly<{
+    signature: Readonly<{
+        algorithm: "Ed25519";
+        key_id: any;
+        statement_digest: string;
+        signature_b64u: string;
+    }>;
+    '@version': string;
+    probe: {
+        id: any;
+        key_id: any;
+    };
+    test: {
+        surface_id: any;
+        gate_id: any;
+        environment_id: any;
+        action_family: any;
+        action_digest: any;
+        tested_at: any;
+        nonce: any;
+        result: any;
+        response_status: any;
+    };
+}>;
+/** Duplicate-key-safe parser for an untrusted serialized probe artifact. */
+export declare function parseEnforcementProbeStatement(raw: any, { maxBytes }?: {
+    maxBytes?: number | undefined;
+}): any;
+type ProbeRefusal = {
+    accepted: false;
+    verified: false;
+    reason: string;
+    statement_digest?: undefined;
+    tested_at?: undefined;
+    result?: undefined;
+    response_status?: undefined;
+    nonce?: undefined;
+    surface_id?: undefined;
+    action_digest?: undefined;
+    gate_id?: undefined;
+    environment_id?: undefined;
+    action_family?: undefined;
+    probe_id?: undefined;
+};
+type ProbeAcceptance = {
+    accepted: true;
+    verified: true;
+    reason: null;
+    statement_digest: string;
+    tested_at: any;
+    result: any;
+    response_status: any;
+    nonce: any;
+    surface_id: any;
+    action_digest: any;
+    gate_id: any;
+    environment_id: any;
+    action_family: any;
+    probe_id: any;
+};
+type ProbeVerificationResult = ProbeAcceptance | ProbeRefusal;
+export declare function verifyEnforcementProbe(statement: any, options?: {
+    pinnedProbes?: any;
+    expectedSurface?: any;
+    now?: number;
+    maxAgeSec?: number;
+    maxFutureSkewSec?: number;
+}): ProbeVerificationResult;
+type CoverageSurfaceRow = {
+    surface_id: any;
+    action_family: any;
+    required: any;
+    state: string;
+    reason: string;
+    deployment_attested: boolean;
+    refusal_probe_verified: boolean;
+    bypass_probe_verified: boolean;
+    probe_nonce_verified: boolean;
+    witness_required: boolean;
+    witness_verified: boolean;
+    witness_acceptance_reason: any;
+    complete: boolean;
+};
+type CoverageFailureReport = {
+    '@version': string;
+    complete: boolean;
+    reason: string;
+    inventory_hash: string | null;
+    surfaces: CoverageSurfaceRow[];
+    counts: Record<string, number>;
+    report_hash?: undefined;
+    generated_at?: undefined;
+    inventory_id?: undefined;
+    declared_required_surfaces?: undefined;
+    complete_required_surfaces?: undefined;
+    declared_coverage_bps?: undefined;
+    limitations?: undefined;
+};
+type CoverageSuccessReport = {
+    '@version': string;
+    generated_at: string;
+    inventory_id: any;
+    inventory_hash: string;
+    complete: boolean;
+    declared_required_surfaces: number;
+    complete_required_surfaces: number;
+    declared_coverage_bps: number;
+    counts: Record<string, number>;
+    surfaces: CoverageSurfaceRow[];
+    limitations: string[];
+    report_hash: string;
+    reason?: undefined;
+};
+type CoverageReport = CoverageFailureReport | CoverageSuccessReport;
+/**
+ * Evaluate coverage of a relying-party-declared inventory. Inventory
+ * completeness remains an explicit external assumption and is never inferred.
+ */
+export declare function evaluateGateCoverage(input?: {
+    inventory?: any;
+    deployments?: any[];
+    probes?: any[];
+    witnesses?: any[];
+}, options?: {
+    now?: number;
+    attestationVerifiers?: any;
+    pinnedProbes?: any;
+    pinnedWitnesses?: any;
+    expectedProbeNonces?: any;
+    probeMaxAgeSec?: number;
+    witnessMaxAgeSec?: number;
+    maxFutureSkewSec?: number;
+    witnessSequenceStore?: any;
+    allowEphemeralWitnessStore?: boolean;
+    trustedWitnessAcceptances?: any[];
+}): Promise<CoverageReport>;
+declare const _default: {
+    COVERAGE_INVENTORY_VERSION: string;
+    COVERAGE_REPORT_VERSION: string;
+    ENFORCEMENT_PROBE_VERSION: string;
+    COVERAGE_STATES: readonly string[];
+    PROBE_RESULTS: readonly string[];
+    coverageInventoryDigest: typeof coverageInventoryDigest;
+    parseEnforcementProbeStatement: typeof parseEnforcementProbeStatement;
+    signEnforcementProbe: typeof signEnforcementProbe;
+    verifyEnforcementProbe: typeof verifyEnforcementProbe;
+    evaluateGateCoverage: typeof evaluateGateCoverage;
+};
+export default _default;
+//# sourceMappingURL=coverage.d.ts.map

package/dist/coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../src/coverage.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,0BAA0B,kCAAkC,CAAC;AAC1E,eAAO,MAAM,uBAAuB,+BAA+B,CAAC;AACpE,eAAO,MAAM,yBAAyB,iCAAiC,CAAC;AACxE,eAAO,MAAM,eAAe,mBAA0E,CAAC;AACvG,eAAO,MAAM,aAAa,mBAA0F,CAAC;AA0GrH,wBAAgB,uBAAuB,CAAC,SAAS,KAAA,UAIhD;AA2BD,wBAAgB,oBAAoB,CAAC,KAAK,KAAA,EAAE,UAAU,KAAA;;;;;;;;;;;;;;;;;;;;;;;GA8BrD;AAED,4EAA4E;AAC5E,wBAAgB,8BAA8B,CAAC,GAAG,KAAA,EAAE,EAAE,QAAoB,EAAE;;CAAK,OAQhF;AAOD,KAAK,YAAY,GAAG;IAClB,QAAQ,EAAE,KAAK,CAAC;IAChB,QAAQ,EAAE,KAAK,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,eAAe,CAAC,EAAE,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,aAAa,CAAC,EAAE,SAAS,CAAC;IAC1B,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,cAAc,CAAC,EAAE,SAAS,CAAC;IAC3B,aAAa,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,EAAE,IAAI,CAAC;IACf,MAAM,EAAE,IAAI,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,GAAG,CAAC;IACf,MAAM,EAAE,GAAG,CAAC;IACZ,eAAe,EAAE,GAAG,CAAC;IACrB,KAAK,EAAE,GAAG,CAAC;IACX,UAAU,EAAE,GAAG,CAAC;IAChB,aAAa,EAAE,GAAG,CAAC;IACnB,OAAO,EAAE,GAAG,CAAC;IACb,cAAc,EAAE,GAAG,CAAC;IACpB,aAAa,EAAE,GAAG,CAAC;IACnB,QAAQ,EAAE,GAAG,CAAC;CACf,CAAC;AAEF,KAAK,uBAAuB,GAAG,eAAe,GAAG,YAAY,CAAC;AAE9D,wBAAgB,sBAAsB,CACpC,SAAS,KAAA,EACT,OAAO,GAAE;IACP,YAAY,CAAC,EAAE,GAAG,CAAC;IACnB,eAAe,CAAC,EAAE,GAAG,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACtB,GACL,uBAAuB,CAiEzB;AA2ED,KAAK,kBAAkB,GAAG;IACxB,UAAU,EAAE,GAAG,CAAC;IAChB,aAAa,EAAE,GAAG,CAAC;IACnB,QAAQ,EAAE,GAAG,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,OAAO,CAAC;IAC7B,sBAAsB,EAAE,OAAO,CAAC;IAChC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,yBAAyB,EAAE,GAAG,CAAC;IAC/B,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,0BAA0B,CAAC,EAAE,SAAS,CAAC;IACvC,0BAA0B,CAAC,EAAE,SAAS,CAAC;IACvC,qBAAqB,CAAC,EAAE,SAAS,CAAC;IAClC,WAAW,CAAC,EAAE,SAAS,CAAC;CACzB,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,GAAG,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB,CAAC;AAEF,KAAK,cAAc,GAAG,qBAAqB,GAAG,qBAAqB,CAAC;AAEpE;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,GAAE;IAAE,SAAS,CAAC,EAAE,GAAG,CAAC;IAAC,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAA;CAAO,EACvF,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB,CAAC,EAAE,GAAG,CAAC;IAC3B,YAAY,CAAC,EAAE,GAAG,CAAC;IACnB,eAAe,CAAC,EAAE,GAAG,CAAC;IACtB,mBAAmB,CAAC,EAAE,GAAG,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,GAAG,CAAC;IAC3B,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,yBAAyB,CAAC,EAAE,GAAG,EAAE,CAAC;CAC9B,GACL,OAAO,CAAC,cAAc,CAAC,CAmWzB;;;;;;;;;;;;;AAED,wBAWE"}