@emilia-protocol/gate 0.11.0 → 0.14.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +80 -0
- package/README.md +310 -0
- package/action-control-manifest.js +3 -268
- package/action-escrow-custodian.js +3 -394
- package/action-escrow-evidence.js +3 -858
- package/action-escrow-package.js +3 -1668
- package/action-escrow-postgres.js +3 -337
- package/action-escrow-state.js +3 -396
- package/action-escrow-verifiers.js +3 -331
- package/action-escrow.js +3 -2447
- package/action-packs.js +3 -140
- package/adapters/_kit.js +3 -104
- package/adapters/aws.js +3 -108
- package/adapters/cloudflare.js +3 -54
- package/adapters/gcp.js +3 -70
- package/adapters/github.js +3 -109
- package/adapters/jira.js +3 -55
- package/adapters/k8s.js +3 -70
- package/adapters/linear.js +3 -55
- package/adapters/salesforce.js +3 -55
- package/adapters/stripe.js +3 -81
- package/adapters/supabase.js +3 -121
- package/adapters/terraform.js +3 -59
- package/adapters/vercel.js +3 -84
- package/aec-execution.js +3 -312
- package/breakglass.js +3 -582
- package/capability-receipt.js +4 -0
- package/cf1-conformance.js +3 -106
- package/challenge-store.js +3 -69
- package/control-plane.js +3 -340
- package/coverage.js +3 -721
- package/demo.mjs +1 -1
- package/deployment-attestation.js +3 -247
- package/dist/action-control-manifest.d.ts +82 -0
- package/dist/action-control-manifest.d.ts.map +1 -0
- package/dist/action-control-manifest.js +422 -0
- package/dist/action-control-manifest.js.map +1 -0
- package/dist/action-escrow-custodian.d.ts +74 -0
- package/dist/action-escrow-custodian.d.ts.map +1 -0
- package/dist/action-escrow-custodian.js +363 -0
- package/dist/action-escrow-custodian.js.map +1 -0
- package/dist/action-escrow-evidence.d.ts +130 -0
- package/dist/action-escrow-evidence.d.ts.map +1 -0
- package/dist/action-escrow-evidence.js +1012 -0
- package/dist/action-escrow-evidence.js.map +1 -0
- package/dist/action-escrow-package.d.ts +10 -0
- package/dist/action-escrow-package.d.ts.map +1 -0
- package/dist/action-escrow-package.js +1583 -0
- package/dist/action-escrow-package.js.map +1 -0
- package/dist/action-escrow-postgres.d.ts +62 -0
- package/dist/action-escrow-postgres.d.ts.map +1 -0
- package/dist/action-escrow-postgres.js +339 -0
- package/dist/action-escrow-postgres.js.map +1 -0
- package/dist/action-escrow-state.d.ts +141 -0
- package/dist/action-escrow-state.d.ts.map +1 -0
- package/dist/action-escrow-state.js +413 -0
- package/dist/action-escrow-state.js.map +1 -0
- package/dist/action-escrow-verifiers.d.ts +65 -0
- package/dist/action-escrow-verifiers.d.ts.map +1 -0
- package/dist/action-escrow-verifiers.js +421 -0
- package/dist/action-escrow-verifiers.js.map +1 -0
- package/dist/action-escrow.d.ts +112 -0
- package/dist/action-escrow.d.ts.map +1 -0
- package/dist/action-escrow.js +2661 -0
- package/dist/action-escrow.js.map +1 -0
- package/dist/action-packs.d.ts +54 -0
- package/dist/action-packs.d.ts.map +1 -0
- package/dist/action-packs.js +143 -0
- package/dist/action-packs.js.map +1 -0
- package/dist/adapters/_kit.d.ts +50 -0
- package/dist/adapters/_kit.d.ts.map +1 -0
- package/dist/adapters/_kit.js +98 -0
- package/dist/adapters/_kit.js.map +1 -0
- package/dist/adapters/aws.d.ts +158 -0
- package/dist/adapters/aws.d.ts.map +1 -0
- package/dist/adapters/aws.js +136 -0
- package/dist/adapters/aws.js.map +1 -0
- package/dist/adapters/cloudflare.d.ts +116 -0
- package/dist/adapters/cloudflare.d.ts.map +1 -0
- package/dist/adapters/cloudflare.js +75 -0
- package/dist/adapters/cloudflare.js.map +1 -0
- package/dist/adapters/gcp.d.ts +139 -0
- package/dist/adapters/gcp.d.ts.map +1 -0
- package/dist/adapters/gcp.js +69 -0
- package/dist/adapters/gcp.js.map +1 -0
- package/dist/adapters/github.d.ts +123 -0
- package/dist/adapters/github.d.ts.map +1 -0
- package/dist/adapters/github.js +105 -0
- package/dist/adapters/github.js.map +1 -0
- package/dist/adapters/jira.d.ts +109 -0
- package/dist/adapters/jira.d.ts.map +1 -0
- package/dist/adapters/jira.js +54 -0
- package/dist/adapters/jira.js.map +1 -0
- package/dist/adapters/k8s.d.ts +139 -0
- package/dist/adapters/k8s.d.ts.map +1 -0
- package/dist/adapters/k8s.js +69 -0
- package/dist/adapters/k8s.js.map +1 -0
- package/dist/adapters/linear.d.ts +109 -0
- package/dist/adapters/linear.d.ts.map +1 -0
- package/dist/adapters/linear.js +54 -0
- package/dist/adapters/linear.js.map +1 -0
- package/dist/adapters/salesforce.d.ts +109 -0
- package/dist/adapters/salesforce.d.ts.map +1 -0
- package/dist/adapters/salesforce.js +54 -0
- package/dist/adapters/salesforce.js.map +1 -0
- package/dist/adapters/stripe.d.ts +116 -0
- package/dist/adapters/stripe.d.ts.map +1 -0
- package/dist/adapters/stripe.js +77 -0
- package/dist/adapters/stripe.js.map +1 -0
- package/dist/adapters/supabase.d.ts +127 -0
- package/dist/adapters/supabase.d.ts.map +1 -0
- package/dist/adapters/supabase.js +112 -0
- package/dist/adapters/supabase.js.map +1 -0
- package/dist/adapters/terraform.d.ts +109 -0
- package/dist/adapters/terraform.d.ts.map +1 -0
- package/dist/adapters/terraform.js +58 -0
- package/dist/adapters/terraform.js.map +1 -0
- package/dist/adapters/vercel.d.ts +114 -0
- package/dist/adapters/vercel.d.ts.map +1 -0
- package/dist/adapters/vercel.js +81 -0
- package/dist/adapters/vercel.js.map +1 -0
- package/dist/aec-execution.d.ts +107 -0
- package/dist/aec-execution.d.ts.map +1 -0
- package/dist/aec-execution.js +334 -0
- package/dist/aec-execution.js.map +1 -0
- package/dist/breakglass.d.ts +205 -0
- package/dist/breakglass.d.ts.map +1 -0
- package/dist/breakglass.js +627 -0
- package/dist/breakglass.js.map +1 -0
- package/dist/capability-receipt.d.ts +601 -0
- package/dist/capability-receipt.d.ts.map +1 -0
- package/dist/capability-receipt.js +1177 -0
- package/dist/capability-receipt.js.map +1 -0
- package/dist/cf1-conformance.d.ts +83 -0
- package/dist/cf1-conformance.d.ts.map +1 -0
- package/dist/cf1-conformance.js +94 -0
- package/dist/cf1-conformance.js.map +1 -0
- package/dist/challenge-store.d.ts +20 -0
- package/dist/challenge-store.d.ts.map +1 -0
- package/dist/challenge-store.js +62 -0
- package/dist/challenge-store.js.map +1 -0
- package/dist/control-plane.d.ts +136 -0
- package/dist/control-plane.d.ts.map +1 -0
- package/dist/control-plane.js +349 -0
- package/dist/control-plane.js.map +1 -0
- package/dist/coverage.d.ts +156 -0
- package/dist/coverage.d.ts.map +1 -0
- package/dist/coverage.js +768 -0
- package/dist/coverage.js.map +1 -0
- package/dist/deployment-attestation.d.ts +93 -0
- package/dist/deployment-attestation.d.ts.map +1 -0
- package/dist/deployment-attestation.js +262 -0
- package/dist/deployment-attestation.js.map +1 -0
- package/dist/eg1-conformance.d.ts +286 -0
- package/dist/eg1-conformance.d.ts.map +1 -0
- package/dist/eg1-conformance.js +379 -0
- package/dist/eg1-conformance.js.map +1 -0
- package/dist/enterprise.d.ts +88 -0
- package/dist/enterprise.d.ts.map +1 -0
- package/dist/enterprise.js +194 -0
- package/dist/enterprise.js.map +1 -0
- package/dist/evidence-postgres.d.ts +123 -0
- package/dist/evidence-postgres.d.ts.map +1 -0
- package/dist/evidence-postgres.js +343 -0
- package/dist/evidence-postgres.js.map +1 -0
- package/dist/evidence.d.ts +113 -0
- package/dist/evidence.d.ts.map +1 -0
- package/dist/evidence.js +369 -0
- package/dist/evidence.js.map +1 -0
- package/dist/execution-binding.d.ts +49 -0
- package/dist/execution-binding.d.ts.map +1 -0
- package/dist/execution-binding.js +243 -0
- package/dist/execution-binding.js.map +1 -0
- package/dist/formal-runtime-map.d.ts +42 -0
- package/dist/formal-runtime-map.d.ts.map +1 -0
- package/dist/formal-runtime-map.js +23 -0
- package/dist/formal-runtime-map.js.map +1 -0
- package/dist/index.d.ts +1003 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +1737 -0
- package/dist/index.js.map +1 -0
- package/dist/key-registry.d.ts +60 -0
- package/dist/key-registry.d.ts.map +1 -0
- package/dist/key-registry.js +144 -0
- package/dist/key-registry.js.map +1 -0
- package/dist/mcp.d.ts +53 -0
- package/dist/mcp.d.ts.map +1 -0
- package/dist/mcp.js +112 -0
- package/dist/mcp.js.map +1 -0
- package/dist/metering.d.ts +80 -0
- package/dist/metering.d.ts.map +1 -0
- package/dist/metering.js +227 -0
- package/dist/metering.js.map +1 -0
- package/dist/metrics.d.ts +68 -0
- package/dist/metrics.d.ts.map +1 -0
- package/dist/metrics.js +242 -0
- package/dist/metrics.js.map +1 -0
- package/dist/network-witness.d.ts +167 -0
- package/dist/network-witness.d.ts.map +1 -0
- package/dist/network-witness.js +520 -0
- package/dist/network-witness.js.map +1 -0
- package/dist/proposal-to-effect.d.ts +146 -0
- package/dist/proposal-to-effect.d.ts.map +1 -0
- package/dist/proposal-to-effect.js +427 -0
- package/dist/proposal-to-effect.js.map +1 -0
- package/dist/protocol-state.d.ts +141 -0
- package/dist/protocol-state.d.ts.map +1 -0
- package/dist/protocol-state.js +106 -0
- package/dist/protocol-state.js.map +1 -0
- package/dist/receipt-program.d.ts +59 -0
- package/dist/receipt-program.d.ts.map +1 -0
- package/dist/receipt-program.js +1053 -0
- package/dist/receipt-program.js.map +1 -0
- package/dist/reliance-kernel.d.ts +66 -0
- package/dist/reliance-kernel.d.ts.map +1 -0
- package/dist/reliance-kernel.js +103 -0
- package/dist/reliance-kernel.js.map +1 -0
- package/dist/reliance-packet.d.ts +67 -0
- package/dist/reliance-packet.d.ts.map +1 -0
- package/dist/reliance-packet.js +176 -0
- package/dist/reliance-packet.js.map +1 -0
- package/dist/remedy-program-postgres.d.ts +37 -0
- package/dist/remedy-program-postgres.d.ts.map +1 -0
- package/dist/remedy-program-postgres.js +291 -0
- package/dist/remedy-program-postgres.js.map +1 -0
- package/dist/remedy-program-receipt.d.ts +97 -0
- package/dist/remedy-program-receipt.d.ts.map +1 -0
- package/dist/remedy-program-receipt.js +817 -0
- package/dist/remedy-program-receipt.js.map +1 -0
- package/dist/remedy-program.d.ts +76 -0
- package/dist/remedy-program.d.ts.map +1 -0
- package/dist/remedy-program.js +1346 -0
- package/dist/remedy-program.js.map +1 -0
- package/dist/reports/art14.d.ts +101 -0
- package/dist/reports/art14.d.ts.map +1 -0
- package/dist/reports/art14.js +340 -0
- package/dist/reports/art14.js.map +1 -0
- package/dist/reports/assurance-package.d.ts +197 -0
- package/dist/reports/assurance-package.d.ts.map +1 -0
- package/dist/reports/assurance-package.js +313 -0
- package/dist/reports/assurance-package.js.map +1 -0
- package/dist/reports/auditor-workpaper.d.ts +194 -0
- package/dist/reports/auditor-workpaper.d.ts.map +1 -0
- package/dist/reports/auditor-workpaper.js +545 -0
- package/dist/reports/auditor-workpaper.js.map +1 -0
- package/dist/reports/external-verification.d.ts +76 -0
- package/dist/reports/external-verification.d.ts.map +1 -0
- package/dist/reports/external-verification.js +209 -0
- package/dist/reports/external-verification.js.map +1 -0
- package/dist/reports/reperform.d.ts +122 -0
- package/dist/reports/reperform.d.ts.map +1 -0
- package/dist/reports/reperform.js +432 -0
- package/dist/reports/reperform.js.map +1 -0
- package/dist/reports/underwriter.d.ts +127 -0
- package/dist/reports/underwriter.d.ts.map +1 -0
- package/dist/reports/underwriter.js +348 -0
- package/dist/reports/underwriter.js.map +1 -0
- package/dist/retention.d.ts +88 -0
- package/dist/retention.d.ts.map +1 -0
- package/dist/retention.js +90 -0
- package/dist/retention.js.map +1 -0
- package/dist/roster.d.ts +113 -0
- package/dist/roster.d.ts.map +1 -0
- package/dist/roster.js +261 -0
- package/dist/roster.js.map +1 -0
- package/dist/runtime-monitor.d.ts +132 -0
- package/dist/runtime-monitor.d.ts.map +1 -0
- package/dist/runtime-monitor.js +197 -0
- package/dist/runtime-monitor.js.map +1 -0
- package/dist/settlement.d.ts +68 -0
- package/dist/settlement.d.ts.map +1 -0
- package/dist/settlement.js +306 -0
- package/dist/settlement.js.map +1 -0
- package/dist/siem.d.ts +261 -0
- package/dist/siem.d.ts.map +1 -0
- package/dist/siem.js +247 -0
- package/dist/siem.js.map +1 -0
- package/dist/store-postgres.d.ts +107 -0
- package/dist/store-postgres.d.ts.map +1 -0
- package/dist/store-postgres.js +152 -0
- package/dist/store-postgres.js.map +1 -0
- package/dist/store.d.ts +95 -0
- package/dist/store.d.ts.map +1 -0
- package/dist/store.js +202 -0
- package/dist/store.js.map +1 -0
- package/dist/strict-json.d.ts +14 -0
- package/dist/strict-json.d.ts.map +1 -0
- package/dist/strict-json.js +132 -0
- package/dist/strict-json.js.map +1 -0
- package/dist/trust-program-adapters.d.ts +122 -0
- package/dist/trust-program-adapters.d.ts.map +1 -0
- package/dist/trust-program-adapters.js +802 -0
- package/dist/trust-program-adapters.js.map +1 -0
- package/dist/trust-program-postgres.d.ts +41 -0
- package/dist/trust-program-postgres.d.ts.map +1 -0
- package/dist/trust-program-postgres.js +346 -0
- package/dist/trust-program-postgres.js.map +1 -0
- package/dist/trust-program-revocation.d.ts +206 -0
- package/dist/trust-program-revocation.d.ts.map +1 -0
- package/dist/trust-program-revocation.js +600 -0
- package/dist/trust-program-revocation.js.map +1 -0
- package/dist/trust-program.d.ts +197 -0
- package/dist/trust-program.d.ts.map +1 -0
- package/dist/trust-program.js +1351 -0
- package/dist/trust-program.js.map +1 -0
- package/dist/witness-postgres.d.ts +43 -0
- package/dist/witness-postgres.d.ts.map +1 -0
- package/dist/witness-postgres.js +92 -0
- package/dist/witness-postgres.js.map +1 -0
- package/dist/zk-range-proof.d.ts +78 -0
- package/dist/zk-range-proof.d.ts.map +1 -0
- package/dist/zk-range-proof.js +228 -0
- package/dist/zk-range-proof.js.map +1 -0
- package/eg1-conformance.js +3 -404
- package/enterprise.js +3 -180
- package/ep-assure.mjs +1 -0
- package/evidence-postgres.js +3 -356
- package/evidence.js +4 -360
- package/execution-binding.js +3 -212
- package/formal-runtime-map.js +4 -0
- package/index.js +4 -1249
- package/key-registry.js +3 -134
- package/mcp.js +3 -109
- package/metering.js +3 -226
- package/metrics.js +3 -231
- package/network-witness.js +3 -499
- package/package.json +35 -4
- package/proposal-to-effect.js +4 -0
- package/receipt-program.js +4 -0
- package/reliance-kernel.js +3 -112
- package/reliance-packet.js +3 -175
- package/remedy-program-postgres.js +4 -0
- package/remedy-program-receipt.js +4 -0
- package/remedy-program.js +4 -0
- package/reports/art14.js +0 -0
- package/reports/assurance-package.js +2 -312
- package/reports/auditor-workpaper.js +3 -537
- package/reports/external-verification.js +3 -222
- package/reports/reperform.js +3 -424
- package/reports/underwriter.js +3 -339
- package/retention.js +3 -84
- package/roster.js +3 -264
- package/runtime-monitor.js +4 -0
- package/settlement.js +3 -299
- package/siem.js +3 -235
- package/src/action-control-manifest.ts +424 -0
- package/src/action-escrow-custodian.ts +427 -0
- package/src/action-escrow-evidence.ts +1178 -0
- package/src/action-escrow-package.ts +1821 -0
- package/src/action-escrow-postgres.ts +366 -0
- package/src/action-escrow-state.ts +498 -0
- package/src/action-escrow-verifiers.ts +484 -0
- package/src/action-escrow.ts +3039 -0
- package/src/action-packs.ts +170 -0
- package/src/adapters/_kit.ts +117 -0
- package/src/adapters/aws.ts +142 -0
- package/src/adapters/cloudflare.ts +78 -0
- package/src/adapters/gcp.ts +71 -0
- package/src/adapters/github.ts +110 -0
- package/src/adapters/jira.ts +56 -0
- package/src/adapters/k8s.ts +71 -0
- package/src/adapters/linear.ts +56 -0
- package/src/adapters/salesforce.ts +56 -0
- package/src/adapters/stripe.ts +82 -0
- package/src/adapters/supabase.ts +122 -0
- package/src/adapters/terraform.ts +60 -0
- package/src/adapters/vercel.ts +85 -0
- package/src/aec-execution.ts +354 -0
- package/src/breakglass.ts +647 -0
- package/src/capability-receipt.ts +1258 -0
- package/src/cf1-conformance.ts +120 -0
- package/src/challenge-store.ts +70 -0
- package/src/control-plane.ts +374 -0
- package/src/coverage.ts +832 -0
- package/src/deployment-attestation.ts +259 -0
- package/src/eg1-conformance.ts +471 -0
- package/src/enterprise.ts +195 -0
- package/src/evidence-postgres.ts +374 -0
- package/src/evidence.ts +367 -0
- package/src/execution-binding.ts +236 -0
- package/src/formal-runtime-map.ts +24 -0
- package/src/index.ts +2127 -0
- package/src/key-registry.ts +150 -0
- package/src/mcp.ts +120 -0
- package/src/metering.ts +237 -0
- package/src/metrics.ts +232 -0
- package/src/network-witness.ts +585 -0
- package/src/proposal-to-effect.ts +571 -0
- package/src/protocol-state.ts +143 -0
- package/src/protocol-state.typecheck.ts +94 -0
- package/src/receipt-program.ts +1105 -0
- package/src/reliance-kernel.ts +119 -0
- package/src/reliance-packet.ts +206 -0
- package/src/remedy-program-postgres.ts +367 -0
- package/src/remedy-program-receipt.ts +891 -0
- package/src/remedy-program.ts +1388 -0
- package/src/reports/art14.ts +361 -0
- package/src/reports/assurance-package.ts +330 -0
- package/src/reports/auditor-workpaper.ts +558 -0
- package/src/reports/external-verification.ts +232 -0
- package/src/reports/reperform.ts +441 -0
- package/src/reports/underwriter.ts +356 -0
- package/src/retention.ts +100 -0
- package/src/roster.ts +273 -0
- package/src/runtime-monitor.ts +217 -0
- package/src/settlement.ts +313 -0
- package/src/siem.ts +247 -0
- package/src/store-postgres.ts +167 -0
- package/src/store.ts +214 -0
- package/src/strict-json.ts +115 -0
- package/src/trust-program-adapters.ts +847 -0
- package/src/trust-program-postgres.ts +429 -0
- package/src/trust-program-revocation.ts +751 -0
- package/src/trust-program.ts +1460 -0
- package/src/witness-postgres.ts +106 -0
- package/src/zk-range-proof.ts +250 -0
- package/store-postgres.js +3 -161
- package/store.js +4 -198
- package/strict-json.js +3 -102
- package/trust-program-adapters.js +4 -0
- package/trust-program-postgres.js +4 -0
- package/trust-program-revocation.js +4 -0
- package/trust-program.js +4 -0
- package/witness-postgres.js +3 -96
- package/zk-range-proof.js +4 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"network-witness.js","sourceRoot":"","sources":["../src/network-witness.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;GAQG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,CAAC,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AACpE,MAAM,CAAC,MAAM,kCAAkC,GAAG,uCAAuC,CAAC;AAC1F,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,uBAAuB,IAAI,CAAC;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,kBAAkB;IAClB,mBAAmB;IACnB,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAC9D,MAAM,OAAO,GAAG,oEAAoE,CAAC;AA8ErF,SAAS,eAAe,CAAC,KAAK;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IACzD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,IAAI,IAAI,MAAM,IAAI,MAAM,EAAE;QAAE,OAAO,GAAG,CAAC;IAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,KAAK;IAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,KAAK,EAAE,OAAO;IAC/B,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,cAAc,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,MAAM,CAAC,KAAK;IACnB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,MAAM,CAAC,KAAK;IACnB,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,KAAK,EAAE,QAAQ;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpG,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACxG,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,SAAS,QAAQ,CAAC,GAAG;IACnB,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,OAAO,yBAAyB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,YAAY,CAAC,IAAI;IACxB,OAAO,MAAM,CAAC,IAAI,CAAC,sBAAsB,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,QAAQ,CAAC,SAAS;IACzB,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IAClG,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAS;IAC5C,OAAO,UAAU,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,4BAA4B,CAAC,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE;IAC7E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;WACvE,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,SAAS,YAAY,CAAC,IAAI;IACxB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,uBAAuB;QAAE,OAAO,iBAAiB,CAAC;IAC3E,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC5G,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;WACrE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAAE,OAAO,0BAA0B,CAAC;IACzF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC;QACvC,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY;KAC9F,CAAC,CAAC;QAAE,OAAO,2BAA2B,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,GAAG,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACjH,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAClG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IACrF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC5E,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACtH,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,KAAK,SAAS;WACtC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,GAAG,CAAC,CAAC;QAAE,OAAO,oBAAoB,CAAC;IAC5H,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAClH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC3E,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC9F,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC5F,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,KAAK,KAAK;QAAE,OAAO,2BAA2B,CAAC;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;WAC3F,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACjG,IAAI,CAAC;QAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,wBAAwB,CAAC;IAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,2BAA2B,CAAC,KAAK,EAAE,UAAU;IAC3D,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAK,EAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,uBAAuB;QACnC,OAAO,EAAE;YACP,EAAE,EAAE,KAAK,EAAE,UAAU;YACrB,MAAM,EAAE,KAAK;YACb,gBAAgB,EAAE,KAAK,EAAE,gBAAgB;SAC1C;QACD,WAAW,EAAE;YACX,QAAQ,EAAE,KAAK,EAAE,QAAQ;YACzB,WAAW,EAAE,KAAK,EAAE,WAAW;YAC/B,KAAK,EAAE,KAAK,EAAE,KAAK;YACnB,SAAS,EAAE,KAAK,EAAE,SAAS;YAC3B,aAAa,EAAE,KAAK,EAAE,aAAa;YACnC,GAAG,CAAC,KAAK,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E;QACD,UAAU,EAAE;YACV,aAAa,EAAE,KAAK,EAAE,aAAa;YACnC,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F;QACD,OAAO,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE;QACpC,WAAW,EAAE;YACX,qGAAqG;YACrG,2GAA2G;YAC3G,8GAA8G;YAC9G,yIAAyI;SAC1I;KACF,CAAC;IACF,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,eAAe,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,IAAI;QACP,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,KAAK;YACb,gBAAgB,EAAE,eAAe;YACjC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SACxF,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,IAAI,EAAE,OAAO;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC;WACvC,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC,EAAE;WAC7B,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;WAC7B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;WACpC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,IAAI,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAc,EACd,UAAuC,EAAE;IAEzC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,SAAwC,EAAE,EAA+B,EAAE,CAAC,CAAC;QACzG,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,KAAK;QACf,MAAM;QACN,MAAM,EAAE;YACN,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,KAAK;YACV,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,KAAK;YACrB,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,KAAK;YACrB,GAAG,MAAM;SACV;KACF,CAAC,CAAC;IACH,IAAI,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;eACtB,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YACnI,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5G,OAAO,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS;eACxC,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;eAClD,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,gBAAgB,CAAC;eAC7C,CAAC,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;eAClE,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS;eACvC,IAAI,CAAC,WAAW,CAAC,aAAa,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5F,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5E,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAChG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;eACvE,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,UAAU,GAAG,GAAG,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACjH,CAAC;QACD,IAAI,GAAG,GAAG,UAAU,GAAG,SAAS,GAAG,IAAI,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,cAAc,KAAK,SAAS,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,2BAA2B,EAAE;gBACvC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;aACpF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;YAC5D,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;gBACjC,GAAG,EAAE,QAAQ;gBACb,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,IAAI,SAAS,CAAC,iBAAiB,KAAK,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACpG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,oBAAoB,EAAE;gBAChC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;aACpF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,mBAAmB,EAAE;gBAC/B,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;aACpF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC,mBAAmB,EAAE;gBAC/B,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;aACpF,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,gBAAgB,EAAE,cAAc;YAChC,SAAS,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE;YACjE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ;YACnC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa;YAC7C,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,WAAW;YACzC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YAC3B,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAC/C,MAAM,EAAE;gBACN,KAAK,EAAE,IAAI;gBACX,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;gBACpB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;aACrB;YACD,UAAU,EAAE,8EAA8E;SAC3F,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1B,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe;YAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;oBAClC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;gBAC9D,CAAC;gBACD,IAAI,QAAQ,GAAG,QAAQ,CAAC,QAAQ;oBAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;gBAC1F,IAAI,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;oBACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;wBACxC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;oBACzD,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;gBAC9D,CAAC;YACH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YACjF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,QAAQ,KAAK,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KACrG,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAQ,EAAE,EAClC,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,oBAAoB,GACrB;IACC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,QAAQ;QACX,kBAAkB,EAAE,kCAAkC;QACtD,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,sBAAsB,EAAE,oBAAoB,KAAK,IAAI;QACrD,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uCAAuC,CACrD,MAAW,EACX,UAA2C,EAAE;IAE7C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,SAA8B,EAAE,EAAE,iBAAiB,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7F,QAAQ,EAAE,iBAAiB,KAAK,IAAI;QACpC,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,KAAK;QACf,MAAM;QACN,GAAG,MAAM;KACV,CAAC,CAAC;IACH,IAAI,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;eACnB,MAAM,CAAC,kBAAkB,KAAK,kCAAkC,EAAE,CAAC;YACxE,OAAO,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,MAAM,GAAG;YACb,kBAAkB,EAAE,kCAAkC;YACtD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,KAAK,IAAI;SAC/D,CAAC;QACF,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI;eAC7C,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;eAC/D,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC;eAC7D,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC;eAC5E,MAAM,CAAC,SAAS,KAAK,GAAG,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,gBAAgB,EAAE;eACvE,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;eAC7C,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACzD,OAAO,IAAI,CACT,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,qCAAqC,EACrF,MAAM,EACN,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,OAAO,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC;gBAAE,OAAO,IAAI,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;YAClG,IAAI,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,uBAAuB,EAAE,CAAC;gBAChE,OAAO,IAAI,CAAC,oCAAoC,EAAE,MAAM,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS;eACvC,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5E,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAChG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;eACvE,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,UAAU,GAAG,GAAG,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;QACjG,IAAI,GAAG,GAAG,UAAU,GAAG,SAAS,GAAG,IAAI;YAAE,OAAO,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAClF,OAAO;YACL,GAAG,MAAM;YACT,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,SAAc,EACd,UAAuC,EAAE;IAEzC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,gBAAgB,CAAC,QAAQ,EAAE;YAChC,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC;IACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU;WAC1C,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,mBAAmB,KAAK,IAAI,CAAC,EAAE,CAAC;QACxE,OAAO,gBAAgB,CAAC,QAAQ,EAAE;YAChC,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,iCAAiC;YACzC,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACvG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACvF,OAAO,gBAAgB,CAAC,QAAQ,EAAE;gBAChC,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB;gBACrF,oBAAoB,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,gBAAgB,CAAC,QAAQ,EAAE;YAChC,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,oBAAoB,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;SAC7C,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gBAAgB,CAAC,QAAQ,EAAE;YAChC,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,4BAA4B;YACpC,oBAAoB,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;SAC7C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,eAAe;IACb,uBAAuB;IACvB,kCAAkC;IAClC,sBAAsB;IACtB,4BAA4B;IAC5B,oBAAoB;IACpB,2BAA2B;IAC3B,6BAA6B;IAC7B,6BAA6B;IAC7B,uCAAuC;IACvC,gCAAgC;CACjC,CAAC"}
|
|
@@ -0,0 +1,146 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Proposal-to-Effect is a product orchestration profile over existing EMILIA
|
|
3
|
+
* artifacts. A proposal is deliberately NOT a bearer authorization object.
|
|
4
|
+
* Authority remains in EP-RECEIPT-v1 and the relying party's pinned AEB
|
|
5
|
+
* requirement; consequence custody remains in Gate and its durable stores.
|
|
6
|
+
*/
|
|
7
|
+
import { EP_APPROVAL_FLOW } from '@emilia-protocol/require-receipt/acquisition';
|
|
8
|
+
import { type AebAdapter, type AebDigest, type AebDurableConsumptionStore, type AebEvaluationRecord, type AebPinnedConfig } from '@emilia-protocol/verify/aeb-adapter-contract';
|
|
9
|
+
export declare const PROPOSAL_TO_EFFECT_VERSION = "EMILIA-PROPOSAL-TO-EFFECT-v1";
|
|
10
|
+
type JsonObject = Record<string, any>;
|
|
11
|
+
type FetchLike = typeof fetch;
|
|
12
|
+
export interface ProposalToEffectProfile {
|
|
13
|
+
id: string;
|
|
14
|
+
action_type: string;
|
|
15
|
+
selector: JsonObject;
|
|
16
|
+
required_fields: readonly string[];
|
|
17
|
+
authorization: {
|
|
18
|
+
authorization_endpoint: string;
|
|
19
|
+
flow: typeof EP_APPROVAL_FLOW;
|
|
20
|
+
};
|
|
21
|
+
aeb_requirement_ref: string;
|
|
22
|
+
ttl_sec: number;
|
|
23
|
+
/**
|
|
24
|
+
* Relying-party-controlled canonicalization and CAID derivation. It runs on
|
|
25
|
+
* both proposal creation and execution. Never select it from presented data.
|
|
26
|
+
*/
|
|
27
|
+
canonicalize_action(input: unknown): {
|
|
28
|
+
action: JsonObject;
|
|
29
|
+
caid: string;
|
|
30
|
+
};
|
|
31
|
+
caid_selector?: {
|
|
32
|
+
field: string;
|
|
33
|
+
};
|
|
34
|
+
}
|
|
35
|
+
export interface ProposalToEffectProposal {
|
|
36
|
+
'@version': typeof PROPOSAL_TO_EFFECT_VERSION;
|
|
37
|
+
proposal_id: string;
|
|
38
|
+
operation_id: string;
|
|
39
|
+
initiator_id: string;
|
|
40
|
+
profile_id: string;
|
|
41
|
+
action: JsonObject;
|
|
42
|
+
action_digest: string;
|
|
43
|
+
aeb_action_digest: AebDigest;
|
|
44
|
+
caid: string;
|
|
45
|
+
created_at: string;
|
|
46
|
+
expires_at: string;
|
|
47
|
+
challenge: {
|
|
48
|
+
action: string;
|
|
49
|
+
action_hash: string;
|
|
50
|
+
required_fields: string[];
|
|
51
|
+
caid_selector?: {
|
|
52
|
+
field: string;
|
|
53
|
+
};
|
|
54
|
+
};
|
|
55
|
+
authorization: {
|
|
56
|
+
authorization_endpoint: string;
|
|
57
|
+
flow: typeof EP_APPROVAL_FLOW;
|
|
58
|
+
};
|
|
59
|
+
aeb: {
|
|
60
|
+
requirement_ref: string;
|
|
61
|
+
pinned_config_digest: AebDigest;
|
|
62
|
+
consumption_nonce: AebDigest;
|
|
63
|
+
};
|
|
64
|
+
}
|
|
65
|
+
export interface ProposalToEffectGate {
|
|
66
|
+
check(input: JsonObject): Promise<JsonObject>;
|
|
67
|
+
run(input: JsonObject, effect: (authorization: JsonObject) => unknown | Promise<unknown>): Promise<JsonObject>;
|
|
68
|
+
}
|
|
69
|
+
export interface ProposalToEffectProviderVerification {
|
|
70
|
+
valid: boolean;
|
|
71
|
+
outcome?: 'COMMITTED' | 'NOT_COMMITTED';
|
|
72
|
+
evidence_digest?: AebDigest | null;
|
|
73
|
+
reason?: string;
|
|
74
|
+
}
|
|
75
|
+
export interface ProposalToEffectOptions {
|
|
76
|
+
gate: ProposalToEffectGate;
|
|
77
|
+
profiles: Record<string, ProposalToEffectProfile>;
|
|
78
|
+
aeb: {
|
|
79
|
+
config: AebPinnedConfig;
|
|
80
|
+
adapters: Record<string, AebAdapter>;
|
|
81
|
+
store: AebDurableConsumptionStore;
|
|
82
|
+
resolve_artifacts(input: {
|
|
83
|
+
proposal: ProposalToEffectProposal;
|
|
84
|
+
evaluation: AebEvaluationRecord;
|
|
85
|
+
}): Promise<Record<string, unknown>> | Record<string, unknown>;
|
|
86
|
+
verify_provider_evidence(input: {
|
|
87
|
+
evidence: unknown;
|
|
88
|
+
expected: {
|
|
89
|
+
operation_id: string;
|
|
90
|
+
caid: string;
|
|
91
|
+
action_digest: AebDigest;
|
|
92
|
+
};
|
|
93
|
+
}): Promise<ProposalToEffectProviderVerification> | ProposalToEffectProviderVerification;
|
|
94
|
+
};
|
|
95
|
+
now?: () => number;
|
|
96
|
+
}
|
|
97
|
+
export declare function proposalToEffectConsumptionNonce(operationId: string, pinnedConfigDigest: AebDigest): AebDigest;
|
|
98
|
+
export declare function createProposalToEffect(options: ProposalToEffectOptions): Readonly<{
|
|
99
|
+
prepare: (input: {
|
|
100
|
+
proposal_id: string;
|
|
101
|
+
profile_id: string;
|
|
102
|
+
operation_id: string;
|
|
103
|
+
initiator_id: string;
|
|
104
|
+
action: unknown;
|
|
105
|
+
}) => ProposalToEffectProposal;
|
|
106
|
+
verifyProposal: (input: unknown, { allowExpired }?: {
|
|
107
|
+
allowExpired?: boolean;
|
|
108
|
+
}) => {
|
|
109
|
+
proposal: ProposalToEffectProposal;
|
|
110
|
+
profile: ProposalToEffectProfile;
|
|
111
|
+
};
|
|
112
|
+
beginApproval: (input: {
|
|
113
|
+
proposal: unknown;
|
|
114
|
+
approver_id: string;
|
|
115
|
+
idempotency_key: string;
|
|
116
|
+
requester_authorization: string | (() => string | Promise<string>);
|
|
117
|
+
fetch_impl?: FetchLike;
|
|
118
|
+
}) => Promise<JsonObject>;
|
|
119
|
+
pollApproval: (input: {
|
|
120
|
+
proposal: unknown;
|
|
121
|
+
request_id: string;
|
|
122
|
+
poll_token: string;
|
|
123
|
+
fetch_impl?: FetchLike;
|
|
124
|
+
}) => Promise<JsonObject>;
|
|
125
|
+
execute: (input: {
|
|
126
|
+
proposal: unknown;
|
|
127
|
+
receipt: unknown;
|
|
128
|
+
evaluation: unknown;
|
|
129
|
+
}, effect: (input: {
|
|
130
|
+
action: JsonObject;
|
|
131
|
+
proposal: ProposalToEffectProposal;
|
|
132
|
+
authorization: JsonObject;
|
|
133
|
+
}) => unknown | Promise<unknown>) => Promise<JsonObject>;
|
|
134
|
+
reconcile: (input: {
|
|
135
|
+
proposal: unknown;
|
|
136
|
+
evaluation: unknown;
|
|
137
|
+
provider_evidence: unknown;
|
|
138
|
+
}) => Promise<JsonObject>;
|
|
139
|
+
}>;
|
|
140
|
+
declare const _default: {
|
|
141
|
+
PROPOSAL_TO_EFFECT_VERSION: string;
|
|
142
|
+
proposalToEffectConsumptionNonce: typeof proposalToEffectConsumptionNonce;
|
|
143
|
+
createProposalToEffect: typeof createProposalToEffect;
|
|
144
|
+
};
|
|
145
|
+
export default _default;
|
|
146
|
+
//# sourceMappingURL=proposal-to-effect.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"proposal-to-effect.d.ts","sourceRoot":"","sources":["../src/proposal-to-effect.ts"],"names":[],"mappings":"AACA;;;;;GAKG;AAEH,OAAO,EAIL,gBAAgB,EAIjB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAOL,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACrB,MAAM,8CAA8C,CAAC;AAGtD,eAAO,MAAM,0BAA0B,iCAAiC,CAAC;AAEzE,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACtC,KAAK,SAAS,GAAG,OAAO,KAAK,CAAC;AAK9B,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,CAAC;IACrB,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,aAAa,EAAE;QACb,sBAAsB,EAAE,MAAM,CAAC;QAC/B,IAAI,EAAE,OAAO,gBAAgB,CAAC;KAC/B,CAAC;IACF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E,aAAa,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,OAAO,0BAA0B,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,SAAS,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE;QACT,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,aAAa,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;KACnC,CAAC;IACF,aAAa,EAAE;QACb,sBAAsB,EAAE,MAAM,CAAC;QAC/B,IAAI,EAAE,OAAO,gBAAgB,CAAC;KAC/B,CAAC;IACF,GAAG,EAAE;QACH,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,SAAS,CAAC;QAChC,iBAAiB,EAAE,SAAS,CAAC;KAC9B,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9C,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,aAAa,EAAE,UAAU,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAChH;AAED,MAAM,WAAW,oCAAoC;IACnD,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,WAAW,GAAG,eAAe,CAAC;IACxC,eAAe,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAClD,GAAG,EAAE;QACH,MAAM,EAAE,eAAe,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,KAAK,EAAE,0BAA0B,CAAC;QAClC,iBAAiB,CAAC,KAAK,EAAE;YACvB,QAAQ,EAAE,wBAAwB,CAAC;YACnC,UAAU,EAAE,mBAAmB,CAAC;SACjC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/D,wBAAwB,CAAC,KAAK,EAAE;YAC9B,QAAQ,EAAE,OAAO,CAAC;YAClB,QAAQ,EAAE;gBACR,YAAY,EAAE,MAAM,CAAC;gBACrB,IAAI,EAAE,MAAM,CAAC;gBACb,aAAa,EAAE,SAAS,CAAC;aAC1B,CAAC;SACH,GAAG,OAAO,CAAC,oCAAoC,CAAC,GAAG,oCAAoC,CAAC;KAC1F,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAiGD,wBAAgB,gCAAgC,CAC9C,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,SAAS,GAC5B,SAAS,CAUX;AASD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB;qBAwB7C;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;KACjB,KAAG,wBAAwB;4BAoCG,OAAO,qBAA4B;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAQ;QAClG,QAAQ,EAAE,wBAAwB,CAAC;QACnC,OAAO,EAAE,uBAAuB,CAAC;KAClC;2BAmNmC;QAClC,QAAQ,EAAE,OAAO,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,uBAAuB,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,UAAU,CAAC,EAAE,SAAS,CAAC;KACxB,KAAG,OAAO,CAAC,UAAU,CAAC;0BAcY;QACjC,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,SAAS,CAAC;KACxB,KAAG,OAAO,CAAC,UAAU,CAAC;qBAjJd;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,UAC3D,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,wBAAwB,CAAC;QAAC,aAAa,EAAE,UAAU,CAAA;KAAE,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KACnI,OAAO,CAAC,UAAU,CAAC;uBA0DU;QAC9B,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,OAAO,CAAC;QACpB,iBAAiB,EAAE,OAAO,CAAC;KAC5B,KAAG,OAAO,CAAC,UAAU,CAAC;GAoGxB;;;;;;AAED,wBAIE"}
|
|
@@ -0,0 +1,427 @@
|
|
|
1
|
+
// @ts-nocheck
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
3
|
+
/**
|
|
4
|
+
* Proposal-to-Effect is a product orchestration profile over existing EMILIA
|
|
5
|
+
* artifacts. A proposal is deliberately NOT a bearer authorization object.
|
|
6
|
+
* Authority remains in EP-RECEIPT-v1 and the relying party's pinned AEB
|
|
7
|
+
* requirement; consequence custody remains in Gate and its durable stores.
|
|
8
|
+
*/
|
|
9
|
+
import { beginReceiptApproval, pollReceiptApproval, approvalActionHash, validateApprovalAuthorization, validateCaidSelector, validateRequiredFields, } from '@emilia-protocol/require-receipt/acquisition';
|
|
10
|
+
import { aebReservationKey, authorizeAebExecutionDurable, digestAeb, pinnedConfigDigest, reconcileAebExecutionDurable, verifyAebEvaluation, } from '@emilia-protocol/verify/aeb-adapter-contract';
|
|
11
|
+
import { actionDigest as aecActionDigest } from '@emilia-protocol/verify/evidence-chain';
|
|
12
|
+
export const PROPOSAL_TO_EFFECT_VERSION = 'EMILIA-PROPOSAL-TO-EFFECT-v1';
|
|
13
|
+
const CAID_PATTERN = /^caid:1:[a-z][a-z0-9-]*(?:\.[a-z][a-z0-9-]*)*\.[1-9][0-9]*:[a-z0-9]+(?:-[a-z0-9]+)*:[A-Za-z0-9_-]{43}$/;
|
|
14
|
+
const IDENTIFIER_PATTERN = /^[A-Za-z0-9][A-Za-z0-9:_.@/-]{2,255}$/;
|
|
15
|
+
function isPlainObject(value) {
|
|
16
|
+
if (!value || typeof value !== 'object' || Array.isArray(value))
|
|
17
|
+
return false;
|
|
18
|
+
const prototype = Object.getPrototypeOf(value);
|
|
19
|
+
return prototype === Object.prototype || prototype === null;
|
|
20
|
+
}
|
|
21
|
+
function clone(value) {
|
|
22
|
+
return structuredClone(value);
|
|
23
|
+
}
|
|
24
|
+
function assertIdentifier(value, name) {
|
|
25
|
+
if (typeof value !== 'string' || !IDENTIFIER_PATTERN.test(value)) {
|
|
26
|
+
throw new Error(`${name}_invalid`);
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
function assertProfile(profile) {
|
|
30
|
+
if (!isPlainObject(profile))
|
|
31
|
+
throw new Error('proposal_profile_invalid');
|
|
32
|
+
assertIdentifier(profile.id, 'proposal_profile_id');
|
|
33
|
+
assertIdentifier(profile.action_type, 'proposal_action_type');
|
|
34
|
+
assertIdentifier(profile.aeb_requirement_ref, 'proposal_aeb_requirement_ref');
|
|
35
|
+
if (!isPlainObject(profile.selector) || Object.keys(profile.selector).length === 0) {
|
|
36
|
+
throw new Error('proposal_selector_invalid');
|
|
37
|
+
}
|
|
38
|
+
const requiredFields = validateRequiredFields(profile.required_fields);
|
|
39
|
+
if (!requiredFields.ok)
|
|
40
|
+
throw new Error(requiredFields.reason);
|
|
41
|
+
if (!Number.isSafeInteger(profile.ttl_sec) || profile.ttl_sec <= 0 || profile.ttl_sec > 86_400) {
|
|
42
|
+
throw new Error('proposal_ttl_invalid');
|
|
43
|
+
}
|
|
44
|
+
if (typeof profile.canonicalize_action !== 'function') {
|
|
45
|
+
throw new Error('proposal_canonicalizer_required');
|
|
46
|
+
}
|
|
47
|
+
const authorization = validateApprovalAuthorization(profile.authorization);
|
|
48
|
+
if (!authorization.ok)
|
|
49
|
+
throw new Error(authorization.reason);
|
|
50
|
+
if (profile.caid_selector) {
|
|
51
|
+
const caidSelector = validateCaidSelector(profile.caid_selector);
|
|
52
|
+
if (!caidSelector.ok)
|
|
53
|
+
throw new Error(caidSelector.reason);
|
|
54
|
+
}
|
|
55
|
+
}
|
|
56
|
+
function canonicalizeForProfile(profile, input) {
|
|
57
|
+
const normalized = profile.canonicalize_action(clone(input));
|
|
58
|
+
if (!isPlainObject(normalized) || !isPlainObject(normalized.action)
|
|
59
|
+
|| typeof normalized.caid !== 'string' || !CAID_PATTERN.test(normalized.caid)) {
|
|
60
|
+
throw new Error('proposal_canonicalization_invalid');
|
|
61
|
+
}
|
|
62
|
+
if (normalized.action.action_type !== profile.action_type) {
|
|
63
|
+
throw new Error('proposal_action_type_mismatch');
|
|
64
|
+
}
|
|
65
|
+
for (const field of profile.required_fields) {
|
|
66
|
+
if (!Object.hasOwn(normalized.action, field) || normalized.action[field] === undefined) {
|
|
67
|
+
throw new Error(`proposal_required_field_missing:${field}`);
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
if (profile.caid_selector) {
|
|
71
|
+
const field = profile.caid_selector.field;
|
|
72
|
+
if (typeof field !== 'string' || normalized.action[field] !== normalized.caid) {
|
|
73
|
+
throw new Error(`proposal_caid_binding_invalid:${field}`);
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
// Both digest functions reject unsupported/non-canonical JSON values.
|
|
77
|
+
approvalActionHash(normalized.action);
|
|
78
|
+
digestAeb(normalized.action);
|
|
79
|
+
return { action: clone(normalized.action), caid: normalized.caid };
|
|
80
|
+
}
|
|
81
|
+
function assertSameObject(left, right, reason) {
|
|
82
|
+
if (digestAeb(left) !== digestAeb(right))
|
|
83
|
+
throw new Error(reason);
|
|
84
|
+
}
|
|
85
|
+
function exactProposalKeys(proposal) {
|
|
86
|
+
const expected = [
|
|
87
|
+
'@version', 'action', 'action_digest', 'aeb', 'aeb_action_digest', 'authorization',
|
|
88
|
+
'caid', 'challenge', 'created_at', 'expires_at', 'initiator_id', 'operation_id',
|
|
89
|
+
'profile_id', 'proposal_id',
|
|
90
|
+
].sort();
|
|
91
|
+
const actual = Object.keys(proposal).sort();
|
|
92
|
+
return expected.length === actual.length && expected.every((key, index) => key === actual[index]);
|
|
93
|
+
}
|
|
94
|
+
function proposalAdmissibility(proposal, record) {
|
|
95
|
+
return {
|
|
96
|
+
admissibility_profile: { id: `aeb:${proposal.aeb.requirement_ref}`, version: '1' },
|
|
97
|
+
profile_hash: proposal.aeb.pinned_config_digest,
|
|
98
|
+
verdict: 'admissible',
|
|
99
|
+
replay_digest: record.evidence_digest,
|
|
100
|
+
challenge_id: proposal.proposal_id,
|
|
101
|
+
aeb_evaluation_digest: digestAeb(record),
|
|
102
|
+
};
|
|
103
|
+
}
|
|
104
|
+
function refusal(reason, extra = {}) {
|
|
105
|
+
return { ok: false, reason, ...extra };
|
|
106
|
+
}
|
|
107
|
+
export function proposalToEffectConsumptionNonce(operationId, pinnedConfigDigest) {
|
|
108
|
+
assertIdentifier(operationId, 'proposal_operation_id');
|
|
109
|
+
if (typeof pinnedConfigDigest !== 'string' || !/^sha256:[a-f0-9]{64}$/.test(pinnedConfigDigest)) {
|
|
110
|
+
throw new Error('proposal_aeb_pin_invalid');
|
|
111
|
+
}
|
|
112
|
+
return digestAeb({
|
|
113
|
+
domain: PROPOSAL_TO_EFFECT_VERSION,
|
|
114
|
+
operation_id: operationId,
|
|
115
|
+
pinned_config_digest: pinnedConfigDigest,
|
|
116
|
+
});
|
|
117
|
+
}
|
|
118
|
+
function expectedAebCompositionDigest(proposal) {
|
|
119
|
+
return `sha256:${aecActionDigest({
|
|
120
|
+
caid: proposal.caid,
|
|
121
|
+
normalized_action_digest: proposal.aeb_action_digest,
|
|
122
|
+
})}`;
|
|
123
|
+
}
|
|
124
|
+
export function createProposalToEffect(options) {
|
|
125
|
+
if (!options?.gate || typeof options.gate.check !== 'function' || typeof options.gate.run !== 'function') {
|
|
126
|
+
throw new Error('proposal_gate_required');
|
|
127
|
+
}
|
|
128
|
+
if (!isPlainObject(options.profiles) || Object.keys(options.profiles).length === 0) {
|
|
129
|
+
throw new Error('proposal_profiles_required');
|
|
130
|
+
}
|
|
131
|
+
for (const [id, profile] of Object.entries(options.profiles)) {
|
|
132
|
+
assertProfile(profile);
|
|
133
|
+
if (id !== profile.id)
|
|
134
|
+
throw new Error('proposal_profile_registry_mismatch');
|
|
135
|
+
}
|
|
136
|
+
if (!options.aeb?.config || !options.aeb.adapters || !options.aeb.store
|
|
137
|
+
|| typeof options.aeb.resolve_artifacts !== 'function'
|
|
138
|
+
|| typeof options.aeb.verify_provider_evidence !== 'function') {
|
|
139
|
+
throw new Error('proposal_aeb_configuration_required');
|
|
140
|
+
}
|
|
141
|
+
const now = options.now ?? Date.now;
|
|
142
|
+
const configDigest = pinnedConfigDigest(options.aeb.config);
|
|
143
|
+
function profileFor(id) {
|
|
144
|
+
if (typeof id !== 'string' || !options.profiles[id])
|
|
145
|
+
throw new Error('proposal_profile_not_pinned');
|
|
146
|
+
return options.profiles[id];
|
|
147
|
+
}
|
|
148
|
+
function prepare(input) {
|
|
149
|
+
assertIdentifier(input?.proposal_id, 'proposal_id');
|
|
150
|
+
assertIdentifier(input?.operation_id, 'proposal_operation_id');
|
|
151
|
+
assertIdentifier(input?.initiator_id, 'proposal_initiator_id');
|
|
152
|
+
const profile = profileFor(input?.profile_id);
|
|
153
|
+
const normalized = canonicalizeForProfile(profile, input.action);
|
|
154
|
+
const createdAtMs = now();
|
|
155
|
+
if (!Number.isFinite(createdAtMs))
|
|
156
|
+
throw new Error('proposal_time_invalid');
|
|
157
|
+
const actionDigest = approvalActionHash(normalized.action);
|
|
158
|
+
return clone({
|
|
159
|
+
'@version': PROPOSAL_TO_EFFECT_VERSION,
|
|
160
|
+
proposal_id: input.proposal_id,
|
|
161
|
+
operation_id: input.operation_id,
|
|
162
|
+
initiator_id: input.initiator_id,
|
|
163
|
+
profile_id: profile.id,
|
|
164
|
+
action: normalized.action,
|
|
165
|
+
action_digest: actionDigest,
|
|
166
|
+
aeb_action_digest: digestAeb(normalized.action),
|
|
167
|
+
caid: normalized.caid,
|
|
168
|
+
created_at: new Date(createdAtMs).toISOString(),
|
|
169
|
+
expires_at: new Date(createdAtMs + profile.ttl_sec * 1000).toISOString(),
|
|
170
|
+
challenge: {
|
|
171
|
+
action: profile.action_type,
|
|
172
|
+
action_hash: actionDigest,
|
|
173
|
+
required_fields: [...profile.required_fields],
|
|
174
|
+
...(profile.caid_selector ? { caid_selector: clone(profile.caid_selector) } : {}),
|
|
175
|
+
},
|
|
176
|
+
authorization: clone(profile.authorization),
|
|
177
|
+
aeb: {
|
|
178
|
+
requirement_ref: profile.aeb_requirement_ref,
|
|
179
|
+
pinned_config_digest: configDigest,
|
|
180
|
+
consumption_nonce: proposalToEffectConsumptionNonce(input.operation_id, configDigest),
|
|
181
|
+
},
|
|
182
|
+
});
|
|
183
|
+
}
|
|
184
|
+
function verifyProposal(input, { allowExpired = false } = {}) {
|
|
185
|
+
if (!isPlainObject(input) || !exactProposalKeys(input)
|
|
186
|
+
|| input['@version'] !== PROPOSAL_TO_EFFECT_VERSION) {
|
|
187
|
+
throw new Error('proposal_shape_invalid');
|
|
188
|
+
}
|
|
189
|
+
const proposal = input;
|
|
190
|
+
assertIdentifier(proposal.proposal_id, 'proposal_id');
|
|
191
|
+
assertIdentifier(proposal.operation_id, 'proposal_operation_id');
|
|
192
|
+
assertIdentifier(proposal.initiator_id, 'proposal_initiator_id');
|
|
193
|
+
const profile = profileFor(proposal.profile_id);
|
|
194
|
+
const normalized = canonicalizeForProfile(profile, proposal.action);
|
|
195
|
+
if (normalized.caid !== proposal.caid)
|
|
196
|
+
throw new Error('proposal_caid_mismatch');
|
|
197
|
+
assertSameObject(normalized.action, proposal.action, 'proposal_action_not_canonical');
|
|
198
|
+
if (approvalActionHash(normalized.action) !== proposal.action_digest) {
|
|
199
|
+
throw new Error('proposal_action_digest_mismatch');
|
|
200
|
+
}
|
|
201
|
+
if (digestAeb(normalized.action) !== proposal.aeb_action_digest) {
|
|
202
|
+
throw new Error('proposal_aeb_action_digest_mismatch');
|
|
203
|
+
}
|
|
204
|
+
if (!Number.isFinite(Date.parse(proposal.created_at)) || !Number.isFinite(Date.parse(proposal.expires_at))
|
|
205
|
+
|| Date.parse(proposal.expires_at) <= Date.parse(proposal.created_at)) {
|
|
206
|
+
throw new Error('proposal_time_invalid');
|
|
207
|
+
}
|
|
208
|
+
if (!allowExpired && now() >= Date.parse(proposal.expires_at))
|
|
209
|
+
throw new Error('proposal_expired');
|
|
210
|
+
assertSameObject(proposal.authorization, profile.authorization, 'proposal_authorization_mismatch');
|
|
211
|
+
if (!isPlainObject(proposal.aeb)
|
|
212
|
+
|| Object.keys(proposal.aeb).sort().join(',') !== 'consumption_nonce,pinned_config_digest,requirement_ref'
|
|
213
|
+
|| proposal.aeb?.requirement_ref !== profile.aeb_requirement_ref
|
|
214
|
+
|| proposal.aeb?.pinned_config_digest !== configDigest) {
|
|
215
|
+
throw new Error('proposal_aeb_pin_mismatch');
|
|
216
|
+
}
|
|
217
|
+
if (proposal.aeb.consumption_nonce !== proposalToEffectConsumptionNonce(proposal.operation_id, configDigest)) {
|
|
218
|
+
throw new Error('proposal_aeb_nonce_mismatch');
|
|
219
|
+
}
|
|
220
|
+
const expectedChallenge = {
|
|
221
|
+
action: profile.action_type,
|
|
222
|
+
action_hash: proposal.action_digest,
|
|
223
|
+
required_fields: [...profile.required_fields],
|
|
224
|
+
...(profile.caid_selector ? { caid_selector: clone(profile.caid_selector) } : {}),
|
|
225
|
+
};
|
|
226
|
+
assertSameObject(proposal.challenge, expectedChallenge, 'proposal_challenge_mismatch');
|
|
227
|
+
return { proposal: clone(proposal), profile };
|
|
228
|
+
}
|
|
229
|
+
async function verifyEvaluation(proposal, evaluation) {
|
|
230
|
+
if (!isPlainObject(evaluation))
|
|
231
|
+
return { valid: false, reason: 'aeb_evaluation_missing', record: null };
|
|
232
|
+
const record = evaluation;
|
|
233
|
+
if (record.operation_id !== proposal.operation_id
|
|
234
|
+
|| record.consumption_nonce !== proposal.aeb.consumption_nonce
|
|
235
|
+
|| record.initiator_id !== proposal.initiator_id
|
|
236
|
+
|| record.requirement_ref !== proposal.aeb.requirement_ref
|
|
237
|
+
|| record.caid !== proposal.caid) {
|
|
238
|
+
return { valid: false, reason: 'aeb_evaluation_binding_mismatch', record };
|
|
239
|
+
}
|
|
240
|
+
let artifacts;
|
|
241
|
+
try {
|
|
242
|
+
artifacts = await options.aeb.resolve_artifacts({ proposal: clone(proposal), evaluation: clone(record) });
|
|
243
|
+
}
|
|
244
|
+
catch {
|
|
245
|
+
return { valid: false, reason: 'aeb_artifact_resolution_failed', record };
|
|
246
|
+
}
|
|
247
|
+
const checked = verifyAebEvaluation(record, {
|
|
248
|
+
config: options.aeb.config,
|
|
249
|
+
adapters: options.aeb.adapters,
|
|
250
|
+
artifacts,
|
|
251
|
+
now: new Date(now()).toISOString(),
|
|
252
|
+
});
|
|
253
|
+
if (!checked.valid || record.verdict !== 'SATISFIED'
|
|
254
|
+
|| record.authority_constraints?.one_time_consumption !== true) {
|
|
255
|
+
return { valid: false, reason: 'aeb_evaluation_refused', record, checked };
|
|
256
|
+
}
|
|
257
|
+
if (record.composition?.action_digest !== expectedAebCompositionDigest(proposal)) {
|
|
258
|
+
return { valid: false, reason: 'aeb_evaluation_binding_mismatch', record, checked };
|
|
259
|
+
}
|
|
260
|
+
return { valid: true, reason: null, record, checked };
|
|
261
|
+
}
|
|
262
|
+
function gateInput(proposal, profile, receipt, record) {
|
|
263
|
+
return {
|
|
264
|
+
selector: {
|
|
265
|
+
...clone(profile.selector),
|
|
266
|
+
operation_id: proposal.operation_id,
|
|
267
|
+
initiator_id: proposal.initiator_id,
|
|
268
|
+
aeb_requirement_ref: proposal.aeb.requirement_ref,
|
|
269
|
+
},
|
|
270
|
+
receipt,
|
|
271
|
+
observedAction: clone(proposal.action),
|
|
272
|
+
admissibility: proposalAdmissibility(proposal, record),
|
|
273
|
+
};
|
|
274
|
+
}
|
|
275
|
+
async function execute(input, effect) {
|
|
276
|
+
if (typeof effect !== 'function')
|
|
277
|
+
throw new Error('proposal_effect_required');
|
|
278
|
+
const { proposal, profile } = verifyProposal(input?.proposal);
|
|
279
|
+
const evaluation = await verifyEvaluation(proposal, input?.evaluation);
|
|
280
|
+
if (!evaluation.valid || !evaluation.record) {
|
|
281
|
+
return refusal(evaluation.reason || 'aeb_evaluation_refused', { aeb: evaluation.checked ?? null });
|
|
282
|
+
}
|
|
283
|
+
const preparedGateInput = gateInput(proposal, profile, input.receipt, evaluation.record);
|
|
284
|
+
const preflight = await options.gate.check({ ...preparedGateInput, consumptionMode: 'none' });
|
|
285
|
+
if (preflight.allow !== true) {
|
|
286
|
+
return refusal(preflight.reason || 'gate_refused', { authorization: preflight });
|
|
287
|
+
}
|
|
288
|
+
if (preflight.reason === 'not_guarded' || preflight.requirement?.receipt_required !== true) {
|
|
289
|
+
return refusal('gate_profile_not_receipt_guarded', { authorization: preflight });
|
|
290
|
+
}
|
|
291
|
+
const reservation = await authorizeAebExecutionDurable(evaluation.record, {
|
|
292
|
+
verified: true,
|
|
293
|
+
local_authorization: true,
|
|
294
|
+
store: options.aeb.store,
|
|
295
|
+
});
|
|
296
|
+
if (!reservation.invoke_allowed || !reservation.reservation_key) {
|
|
297
|
+
return refusal(reservation.reason === 'consumption_conflict' ? 'aeb_consumption_conflict' : reservation.reason, { aeb: reservation });
|
|
298
|
+
}
|
|
299
|
+
const key = reservation.reservation_key;
|
|
300
|
+
try {
|
|
301
|
+
const result = await options.gate.run(preparedGateInput, async (authorization) => effect({
|
|
302
|
+
action: clone(proposal.action),
|
|
303
|
+
proposal: clone(proposal),
|
|
304
|
+
authorization: clone(authorization),
|
|
305
|
+
}));
|
|
306
|
+
if (result?.ok !== true) {
|
|
307
|
+
await options.aeb.store.release(key);
|
|
308
|
+
return refusal(result?.authorization?.reason || result?.reason || 'gate_refused', {
|
|
309
|
+
authorization: result?.authorization ?? null,
|
|
310
|
+
});
|
|
311
|
+
}
|
|
312
|
+
const committed = await reconcileAebExecutionDurable(options.aeb.store, key, 'COMMITTED');
|
|
313
|
+
if (committed.state !== 'CONSUMED') {
|
|
314
|
+
const error = new Error('aeb_consumption_commit_failed');
|
|
315
|
+
error.code = 'EMILIA_PROPOSAL_TO_EFFECT_COMMIT_FAILED';
|
|
316
|
+
error.proposalToEffect = { outcome: 'executed', reservation_key: key };
|
|
317
|
+
throw error;
|
|
318
|
+
}
|
|
319
|
+
return { ...result, proposal: clone(proposal), aeb: committed };
|
|
320
|
+
}
|
|
321
|
+
catch (error) {
|
|
322
|
+
const outcome = error?.proposalToEffect?.outcome ?? error?.emiliaGateOutcome?.outcome;
|
|
323
|
+
if (outcome === 'executed') {
|
|
324
|
+
await reconcileAebExecutionDurable(options.aeb.store, key, 'COMMITTED');
|
|
325
|
+
}
|
|
326
|
+
else if (outcome !== 'indeterminate') {
|
|
327
|
+
await options.aeb.store.release(key);
|
|
328
|
+
}
|
|
329
|
+
throw error;
|
|
330
|
+
}
|
|
331
|
+
}
|
|
332
|
+
async function reconcile(input) {
|
|
333
|
+
const { proposal } = verifyProposal(input?.proposal, { allowExpired: true });
|
|
334
|
+
if (!isPlainObject(input?.evaluation))
|
|
335
|
+
return refusal('aeb_evaluation_missing');
|
|
336
|
+
const record = input.evaluation;
|
|
337
|
+
if (record.operation_id !== proposal.operation_id
|
|
338
|
+
|| record.consumption_nonce !== proposal.aeb.consumption_nonce
|
|
339
|
+
|| record.initiator_id !== proposal.initiator_id
|
|
340
|
+
|| record.requirement_ref !== proposal.aeb.requirement_ref
|
|
341
|
+
|| record.caid !== proposal.caid) {
|
|
342
|
+
return refusal('aeb_evaluation_binding_mismatch');
|
|
343
|
+
}
|
|
344
|
+
const artifacts = await options.aeb.resolve_artifacts({ proposal: clone(proposal), evaluation: clone(record) });
|
|
345
|
+
const historical = verifyAebEvaluation(record, {
|
|
346
|
+
config: options.aeb.config,
|
|
347
|
+
adapters: options.aeb.adapters,
|
|
348
|
+
artifacts,
|
|
349
|
+
now: record.evaluated_at,
|
|
350
|
+
});
|
|
351
|
+
if (!historical.valid)
|
|
352
|
+
return refusal('aeb_evaluation_refused', { aeb: historical });
|
|
353
|
+
if (record.verdict !== 'SATISFIED'
|
|
354
|
+
|| record.authority_constraints?.one_time_consumption !== true) {
|
|
355
|
+
return refusal('aeb_evaluation_refused', { aeb: historical });
|
|
356
|
+
}
|
|
357
|
+
if (record.composition?.action_digest !== expectedAebCompositionDigest(proposal)) {
|
|
358
|
+
return refusal('aeb_evaluation_binding_mismatch');
|
|
359
|
+
}
|
|
360
|
+
let provider;
|
|
361
|
+
try {
|
|
362
|
+
provider = await options.aeb.verify_provider_evidence({
|
|
363
|
+
evidence: clone(input.provider_evidence),
|
|
364
|
+
expected: {
|
|
365
|
+
operation_id: proposal.operation_id,
|
|
366
|
+
caid: proposal.caid,
|
|
367
|
+
action_digest: proposal.aeb_action_digest,
|
|
368
|
+
},
|
|
369
|
+
});
|
|
370
|
+
}
|
|
371
|
+
catch {
|
|
372
|
+
return refusal('provider_evidence_unverified');
|
|
373
|
+
}
|
|
374
|
+
if (!provider?.valid || (provider.outcome !== 'COMMITTED' && provider.outcome !== 'NOT_COMMITTED')) {
|
|
375
|
+
return refusal(provider?.reason || 'provider_evidence_unverified');
|
|
376
|
+
}
|
|
377
|
+
const key = aebReservationKey(record);
|
|
378
|
+
const reconciled = await reconcileAebExecutionDurable(options.aeb.store, key, provider.outcome);
|
|
379
|
+
if (reconciled.state === 'RECONCILIATION_REQUIRED') {
|
|
380
|
+
return refusal(reconciled.reason, { state: reconciled.state });
|
|
381
|
+
}
|
|
382
|
+
return {
|
|
383
|
+
ok: true,
|
|
384
|
+
state: reconciled.state,
|
|
385
|
+
outcome: provider.outcome,
|
|
386
|
+
evidence_digest: provider.evidence_digest ?? null,
|
|
387
|
+
reservation_key: key,
|
|
388
|
+
};
|
|
389
|
+
}
|
|
390
|
+
async function beginApproval(input) {
|
|
391
|
+
const { proposal, profile } = verifyProposal(input?.proposal);
|
|
392
|
+
return beginReceiptApproval({
|
|
393
|
+
authorization: proposal.authorization,
|
|
394
|
+
trustedAuthorization: profile.authorization,
|
|
395
|
+
challenge: proposal.challenge,
|
|
396
|
+
action: proposal.action,
|
|
397
|
+
approver_id: input.approver_id,
|
|
398
|
+
idempotency_key: input.idempotency_key,
|
|
399
|
+
requesterAuthorization: input.requester_authorization,
|
|
400
|
+
fetchImpl: input.fetch_impl,
|
|
401
|
+
});
|
|
402
|
+
}
|
|
403
|
+
async function pollApproval(input) {
|
|
404
|
+
const { proposal, profile } = verifyProposal(input?.proposal, { allowExpired: true });
|
|
405
|
+
return pollReceiptApproval({
|
|
406
|
+
authorization: proposal.authorization,
|
|
407
|
+
trustedAuthorization: profile.authorization,
|
|
408
|
+
request_id: input.request_id,
|
|
409
|
+
poll_token: input.poll_token,
|
|
410
|
+
fetchImpl: input.fetch_impl,
|
|
411
|
+
});
|
|
412
|
+
}
|
|
413
|
+
return Object.freeze({
|
|
414
|
+
prepare,
|
|
415
|
+
verifyProposal,
|
|
416
|
+
beginApproval,
|
|
417
|
+
pollApproval,
|
|
418
|
+
execute,
|
|
419
|
+
reconcile,
|
|
420
|
+
});
|
|
421
|
+
}
|
|
422
|
+
export default {
|
|
423
|
+
PROPOSAL_TO_EFFECT_VERSION,
|
|
424
|
+
proposalToEffectConsumptionNonce,
|
|
425
|
+
createProposalToEffect,
|
|
426
|
+
};
|
|
427
|
+
//# sourceMappingURL=proposal-to-effect.js.map
|