@emilia-protocol/gate 0.18.1 → 0.18.2

package/dist/referee-runner.js

@@ -0,0 +1,294 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Bounded subprocess transport for EMILIA protocol Referee runners.
+ *
+ * The caller pins an absolute executable, its SHA-256 byte digest, and the
+ * complete argument vector.  The child receives only a closed JSON request on
+ * stdin and must return one closed JSON output on stdout.  This is a bounded,
+ * no-shell subprocess self-test harness; it is not an OS sandbox and does not
+ * claim to confine a hostile executable's filesystem or network access.
+ */
+import { spawn } from 'node:child_process';
+import crypto from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import path from 'node:path';
+import { TextDecoder } from 'node:util';
+import { REFEREE_EVALUATION_VERSION, RefereeValidationError, createIndeterminateRefereeResult, evaluateReferee, parseRefereeRunnerOutput, parseRefereeRunnerPin, parseRefereeRunnerRequest, } from './referee.js';
+import { strictJsonGate } from './strict-json.js';
+export const REFEREE_RUNNER_MAX_INPUT_BYTES = 8 * 1024 * 1024;
+export const REFEREE_RUNNER_MAX_OUTPUT_BYTES = 8 * 1024 * 1024;
+export const REFEREE_RUNNER_MAX_TIMEOUT_MS = 300_000;
+const FORCE_KILL_AFTER_MS = 100;
+const INVOCATION_KEYS = Object.freeze([
+    'runner_pin', 'request', 'timeout_ms',
+]);
+const OPTION_KEYS = new Set(['signal']);
+function fail(code) {
+    throw new RefereeValidationError(code);
+}
+function plain(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        return false;
+    }
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function exactInvocation(value) {
+    if (!plain(value))
+        fail('invalid_schema');
+    const ownKeys = Reflect.ownKeys(value);
+    if (ownKeys.some((key) => typeof key !== 'string'))
+        fail('unknown_key');
+    const expected = new Set(INVOCATION_KEYS);
+    for (const key of ownKeys) {
+        if (!expected.has(key))
+            fail('unknown_key');
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (!descriptor?.enumerable || !('value' in descriptor))
+            fail('invalid_schema');
+    }
+    for (const key of INVOCATION_KEYS) {
+        if (!Object.prototype.hasOwnProperty.call(value, key))
+            fail('missing_key');
+    }
+    return value;
+}
+function parseOptions(value) {
+    if (value === undefined)
+        return Object.freeze({});
+    if (!plain(value))
+        fail('invalid_options');
+    const keys = Reflect.ownKeys(value);
+    if (keys.some((key) => typeof key !== 'string' || !OPTION_KEYS.has(key))) {
+        fail('unknown_key');
+    }
+    let signal;
+    for (const key of keys) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (!descriptor?.enumerable || !('value' in descriptor)) {
+            fail('invalid_options');
+        }
+        if (key === 'signal')
+            signal = descriptor.value;
+    }
+    if (signal !== undefined && !(signal instanceof AbortSignal)) {
+        fail('invalid_signal');
+    }
+    return Object.freeze(signal === undefined ? {} : { signal });
+}
+export function parseRefereeRunnerInvocation(value) {
+    const object = exactInvocation(value);
+    if (!Number.isSafeInteger(object.timeout_ms)
+        || object.timeout_ms < 1
+        || object.timeout_ms > REFEREE_RUNNER_MAX_TIMEOUT_MS) {
+        fail('invalid_timeout');
+    }
+    return Object.freeze({
+        runner_pin: parseRefereeRunnerPin(object.runner_pin),
+        request: parseRefereeRunnerRequest(object.request),
+        timeout_ms: object.timeout_ms,
+    });
+}
+function frozenFailure(code) {
+    return Object.freeze({ ok: false, code });
+}
+function frozenSuccess(output) {
+    return Object.freeze({ ok: true, output });
+}
+function decodeRunnerOutput(bytes) {
+    let raw;
+    try {
+        raw = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+    }
+    catch {
+        return frozenFailure('MALFORMED_OUTPUT');
+    }
+    const gate = strictJsonGate(raw);
+    if (!gate.ok)
+        return frozenFailure('MALFORMED_OUTPUT');
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return frozenFailure('MALFORMED_OUTPUT');
+    }
+    try {
+        return frozenSuccess(parseRefereeRunnerOutput(parsed));
+    }
+    catch (error) {
+        if (error instanceof RefereeValidationError) {
+            return frozenFailure('INVALID_OUTPUT_SCHEMA');
+        }
+        return frozenFailure('INVALID_OUTPUT_SCHEMA');
+    }
+}
+function serializeRequest(request) {
+    // parseRefereeRunnerRequest has already established an exact JSON tree, so
+    // JSON.stringify cannot silently drop or coerce any member here.
+    return JSON.stringify(request);
+}
+async function digestExecutable(executable, signal) {
+    return new Promise((resolve) => {
+        const hash = crypto.createHash('sha256');
+        const stream = createReadStream(executable, { signal });
+        let complete = false;
+        const finish = (value) => {
+            if (complete)
+                return;
+            complete = true;
+            resolve(value);
+        };
+        stream.on('data', (chunk) => hash.update(chunk));
+        stream.once('error', () => finish(null));
+        stream.once('end', () => finish(`sha256:${hash.digest('hex')}`));
+    });
+}
+async function executeParsed(invocation, options) {
+    const serialized = serializeRequest(invocation.request);
+    if (Buffer.byteLength(serialized, 'utf8') > REFEREE_RUNNER_MAX_INPUT_BYTES) {
+        return frozenFailure('INPUT_TOO_LARGE');
+    }
+    if (options.signal?.aborted)
+        return frozenFailure('ABORTED');
+    // This is intentionally the last asynchronous operation before spawn.  It
+    // establishes byte equality with the relying party's pin; it does not turn
+    // this portable harness into a complete OS-level execution sandbox.
+    const observedExecutableDigest = await digestExecutable(invocation.runner_pin.executable, options.signal);
+    if (options.signal?.aborted)
+        return frozenFailure('ABORTED');
+    if (observedExecutableDigest === null)
+        return frozenFailure('SPAWN_FAILED');
+    if (observedExecutableDigest !== invocation.runner_pin.executable_sha256) {
+        return frozenFailure('EXECUTABLE_DIGEST_MISMATCH');
+    }
+    return new Promise((resolve) => {
+        const detached = process.platform !== 'win32';
+        let child;
+        try {
+            child = spawn(invocation.runner_pin.executable, [...invocation.runner_pin.args], {
+                cwd: path.parse(invocation.runner_pin.executable).root,
+                detached,
+                env: {},
+                shell: false,
+                stdio: ['pipe', 'pipe', 'pipe'],
+                windowsHide: true,
+            });
+        }
+        catch {
+            resolve(frozenFailure('SPAWN_FAILED'));
+            return;
+        }
+        let settled = false;
+        let selectedFailure = null;
+        let totalOutputBytes = 0;
+        let stdoutBytes = 0;
+        const stdoutChunks = [];
+        let forceKillTimer = null;
+        const sendSignal = (signal) => {
+            if (child.pid !== undefined && detached) {
+                try {
+                    process.kill(-child.pid, signal);
+                    return;
+                }
+                catch {
+                    // The process may have exited between the event and this signal.
+                }
+            }
+            try {
+                child.kill(signal);
+            }
+            catch {
+                // close/error remains the authoritative completion event.
+            }
+        };
+        const timeout = setTimeout(() => {
+            terminate('TIMEOUT');
+        }, invocation.timeout_ms);
+        timeout.unref?.();
+        const abort = () => terminate('ABORTED');
+        options.signal?.addEventListener('abort', abort, { once: true });
+        const cleanup = () => {
+            clearTimeout(timeout);
+            if (forceKillTimer !== null)
+                clearTimeout(forceKillTimer);
+            options.signal?.removeEventListener('abort', abort);
+        };
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            resolve(result);
+        };
+        function terminate(code) {
+            if (settled || selectedFailure !== null)
+                return;
+            selectedFailure = code;
+            sendSignal('SIGTERM');
+            forceKillTimer = setTimeout(() => sendSignal('SIGKILL'), FORCE_KILL_AFTER_MS);
+            forceKillTimer.unref?.();
+        }
+        const accountOutput = (chunk, capture) => {
+            if (settled || selectedFailure !== null)
+                return;
+            const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            totalOutputBytes += bytes.byteLength;
+            if (totalOutputBytes > REFEREE_RUNNER_MAX_OUTPUT_BYTES) {
+                terminate('OUTPUT_TOO_LARGE');
+                return;
+            }
+            if (capture) {
+                stdoutBytes += bytes.byteLength;
+                stdoutChunks.push(bytes);
+            }
+        };
+        child.stdout.on('data', (chunk) => accountOutput(chunk, true));
+        child.stderr.on('data', (chunk) => accountOutput(chunk, false));
+        child.stdin.on('error', () => {
+            // EPIPE is resolved by the child's close/error result, never by ambient
+            // error text or timing.
+        });
+        child.once('error', () => finish(frozenFailure(selectedFailure ?? 'SPAWN_FAILED')));
+        child.once('close', (code) => {
+            if (selectedFailure !== null) {
+                finish(frozenFailure(selectedFailure));
+                return;
+            }
+            if (code !== 0) {
+                finish(frozenFailure('NONZERO_EXIT'));
+                return;
+            }
+            finish(decodeRunnerOutput(Buffer.concat(stdoutChunks, stdoutBytes)));
+        });
+        child.stdin.end(serialized, 'utf8');
+    });
+}
+/** Execute a caller-pinned protocol runner without shell or ambient config. */
+export async function runPinnedProtocolRunner(value, rawOptions) {
+    const invocation = parseRefereeRunnerInvocation(value);
+    const options = parseOptions(rawOptions);
+    return executeParsed(invocation, options);
+}
+/** Execute and evaluate one self-test, mapping every runner failure to no-claim. */
+export async function runReferee(value, rawOptions) {
+    // Snapshot every caller-controlled field before the first asynchronous edge.
+    const invocation = parseRefereeRunnerInvocation(value);
+    const options = parseOptions(rawOptions);
+    const execution = await executeParsed(invocation, options);
+    if (!execution.ok) {
+        return createIndeterminateRefereeResult({
+            runner_pin: invocation.runner_pin,
+            request: invocation.request,
+            reason_code: `runner_${execution.code.toLowerCase()}`,
+        });
+    }
+    return evaluateReferee({
+        version: REFEREE_EVALUATION_VERSION,
+        runner_pin: invocation.runner_pin,
+        request: invocation.request,
+        output: execution.output,
+    });
+}
+//# sourceMappingURL=referee-runner.js.map

package/dist/referee-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"referee-runner.js","sourceRoot":"","sources":["../src/referee-runner.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,gCAAgC,EAChC,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,GAK1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9D,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAC;AAErD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,YAAY,EAAE,SAAS,EAAE,YAAY;CAC7B,CAAC,CAAC;AACZ,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAiCxC,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;QAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,eAAe,CAAC,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,OAAmB,EAAE,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAA0D,CAAC;AACpE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,aAAa,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ;YAAE,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC;WACtC,MAAM,CAAC,UAAqB,GAAG,CAAC;WAChC,MAAM,CAAC,UAAqB,GAAG,6BAA6B,EAAE,CAAC;QACnE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC;QACpD,OAAO,EAAE,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC;QAClD,UAAU,EAAE,MAAM,CAAC,UAAoB;KACxC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,IAA8B;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CACpB,MAAuC;IAEvC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAa,EAAE,MAAM,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAEvD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,OAAO,aAAa,CAAC,uBAAuB,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,aAAa,CAAC,uBAAuB,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAyC;IAEzC,2EAA2E;IAC3E,iEAAiE;IACjE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,UAAkB,EAClB,MAAoB;IAEpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACxD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAE,EAAE;YACtC,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,UAA+C,EAC/C,OAAuC;IAEvC,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,8BAA8B,EAAE,CAAC;QAC3E,OAAO,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;IAE7D,0EAA0E;IAC1E,2EAA2E;IAC3E,oEAAoE;IACpE,MAAM,wBAAwB,GAAG,MAAM,gBAAgB,CACrD,UAAU,CAAC,UAAU,CAAC,UAAU,EAChC,OAAO,CAAC,MAAM,CACf,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,wBAAwB,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC,cAAc,CAAC,CAAC;IAC5E,IAAI,wBAAwB,KAAK,UAAU,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;QACzE,OAAO,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,IAAI,OAAO,CAA+B,CAAC,OAAO,EAAE,EAAE;QAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC9C,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;gBAC/E,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI;gBACtD,QAAQ;gBACR,GAAG,EAAE,EAAE;gBACP,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,eAAe,GAAoC,IAAI,CAAC;QAC5D,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,cAAc,GAAyC,IAAI,CAAC;QAEhE,MAAM,UAAU,GAAG,CAAC,MAAsB,EAAE,EAAE;YAC5C,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBACjC,OAAO;gBACT,CAAC;gBAAC,MAAM,CAAC;oBACP,iEAAiE;gBACnE,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,0DAA0D;YAC5D,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,SAAS,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QAC1B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAElB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,cAAc,KAAK,IAAI;gBAAE,YAAY,CAAC,cAAc,CAAC,CAAC;YAC1D,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,MAAoC,EAAE,EAAE;YACtD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,SAAS,SAAS,CAAC,IAA8B;YAC/C,IAAI,OAAO,IAAI,eAAe,KAAK,IAAI;gBAAE,OAAO;YAChD,eAAe,GAAG,IAAI,CAAC;YACvB,UAAU,CAAC,SAAS,CAAC,CAAC;YACtB,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC9E,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,KAAsB,EAAE,OAAgB,EAAE,EAAE;YACjE,IAAI,OAAO,IAAI,eAAe,KAAK,IAAI;gBAAE,OAAO;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClE,gBAAgB,IAAI,KAAK,CAAC,UAAU,CAAC;YACrC,IAAI,gBAAgB,GAAG,+BAA+B,EAAE,CAAC;gBACvD,SAAS,CAAC,kBAAkB,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC;gBAChC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACvE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC3B,wEAAwE;YACxE,wBAAwB;QAC1B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAC5C,eAAe,IAAI,cAAc,CAClC,CAAC,CAAC,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAc,EACd,UAAoB;IAEpB,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAc,EACd,UAAoB;IAEpB,6EAA6E;IAC7E,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,gCAAgC,CAAC;YACtC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,WAAW,EAAE,UAAU,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE;SACtD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,eAAe,CAAC;QACrB,OAAO,EAAE,0BAA0B;QACnC,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,CAAC,CAAC;AACL,CAAC"}

package/dist/referee.d.ts

@@ -0,0 +1,124 @@
+/**
+ * Deterministic, offline EMILIA Referee core.
+ *
+ * The referee does not discover trust roots, executables, protocols, policy,
+ * or network state.  It evaluates one caller-pinned runner output as a
+ * non-authorizing self-test claim and keeps native verification, relying-party
+ * acceptance, binding, evidence composition, provider outcome, and observed
+ * effect as independent facts.
+ */
+export declare const REFEREE_EVALUATION_VERSION = "EP-REFEREE-EVALUATION-v1";
+export declare const REFEREE_RUNNER_REQUEST_VERSION = "EP-REFEREE-RUNNER-REQUEST-v1";
+export declare const REFEREE_RUNNER_OUTPUT_VERSION = "EP-REFEREE-RUNNER-OUTPUT-v1";
+export declare const REFEREE_RESULT_VERSION = "EP-REFEREE-RESULT-v1";
+export declare const EP_REFEREE_EVALUATION_VERSION = "EP-REFEREE-EVALUATION-v1";
+export declare const EP_REFEREE_RUNNER_REQUEST_VERSION = "EP-REFEREE-RUNNER-REQUEST-v1";
+export declare const EP_REFEREE_RUNNER_OUTPUT_VERSION = "EP-REFEREE-RUNNER-OUTPUT-v1";
+export declare const EP_REFEREE_RESULT_VERSION = "EP-REFEREE-RESULT-v1";
+export type RefereeJson = null | boolean | number | string | RefereeJson[] | {
+    [key: string]: RefereeJson;
+};
+export type RefereeStatus = 'CONFORMANT' | 'NON_CONFORMANT' | 'INDETERMINATE';
+export type RefereeExecutionScope = 'local_atomic' | 'federated';
+export type RefereeNativeVerification = 'VERIFIED' | 'REJECTED' | 'INDETERMINATE';
+export type RefereeRpAcceptance = 'ACCEPTED' | 'REJECTED' | 'INDETERMINATE';
+export type RefereeCaidActionMatch = 'MATCH' | 'MISMATCH' | 'INDETERMINATE';
+export type RefereeAecSatisfaction = 'SATISFIED' | 'NOT_SATISFIED' | 'INDETERMINATE' | 'NOT_ASSESSED';
+export type RefereeProviderOutcome = 'COMMITTED' | 'PROVEN_NOT_COMMITTED' | 'INDETERMINATE' | 'NOT_ASSESSED';
+export type RefereeEffectRelation = 'OBSERVED_AS_REQUESTED' | 'DIVERGED' | 'INDETERMINATE' | 'NOT_ASSESSED';
+export interface RefereeRunnerPinV1 {
+    readonly executable: string;
+    readonly executable_sha256: `sha256:${string}`;
+    readonly args: readonly string[];
+}
+/** The only JSON document written to a protocol runner's stdin. */
+export interface RefereeRunnerRequestV1 {
+    readonly version: typeof REFEREE_RUNNER_REQUEST_VERSION;
+    readonly case_id: string;
+    readonly protocol_id: string;
+    readonly expected_caid: string;
+    readonly expected_action_digest: string;
+    readonly aec_required: boolean;
+    readonly execution_scope: RefereeExecutionScope;
+    readonly input: RefereeJson;
+}
+/** The only accepted JSON document on a protocol runner's stdout. */
+export interface RefereeRunnerOutputV1 {
+    readonly version: typeof REFEREE_RUNNER_OUTPUT_VERSION;
+    readonly case_id: string;
+    readonly protocol_id: string;
+    readonly native_verification: RefereeNativeVerification;
+    readonly rp_acceptance: RefereeRpAcceptance;
+    readonly caid: string | null;
+    readonly action_digest: string | null;
+    readonly aec_satisfaction: RefereeAecSatisfaction;
+    readonly provider_outcome: RefereeProviderOutcome;
+    readonly effect_relation: RefereeEffectRelation;
+    readonly execution_scope: RefereeExecutionScope;
+}
+export interface RefereeEvaluationInputV1 {
+    readonly version: typeof REFEREE_EVALUATION_VERSION;
+    readonly runner_pin: RefereeRunnerPinV1;
+    readonly request: RefereeRunnerRequestV1;
+    readonly output: RefereeRunnerOutputV1;
+}
+export interface RefereeResultDimensionsV1 {
+    readonly native_verification: Readonly<{
+        value: RefereeNativeVerification;
+    }>;
+    readonly rp_acceptance: Readonly<{
+        value: RefereeRpAcceptance;
+    }>;
+    readonly caid_action_match: Readonly<{
+        value: RefereeCaidActionMatch;
+        expected_caid: string;
+        observed_caid: string | null;
+        expected_action_digest: string;
+        observed_action_digest: string | null;
+    }>;
+    readonly aec_satisfaction: Readonly<{
+        required: boolean;
+        value: RefereeAecSatisfaction;
+    }>;
+    readonly provider_outcome: Readonly<{
+        value: RefereeProviderOutcome;
+    }>;
+    readonly effect_relation: Readonly<{
+        value: RefereeEffectRelation;
+    }>;
+}
+/**
+ * A Referee result is evidence about one self-test only.  Its fixed false
+ * execution_authorizing value is a semantic boundary, not configuration.
+ */
+export interface RefereeResultV1 {
+    readonly version: typeof REFEREE_RESULT_VERSION;
+    readonly status: RefereeStatus;
+    readonly claim_scope: 'SELF_TEST';
+    readonly execution_authorizing: false;
+    readonly case_id: string;
+    readonly protocol_id: string;
+    readonly runner_pin: Readonly<RefereeRunnerPinV1>;
+    readonly execution_scope: RefereeExecutionScope;
+    readonly remote_atomicity_claimed: false;
+    readonly dimensions: Readonly<RefereeResultDimensionsV1>;
+    readonly reason_codes: readonly string[];
+}
+export interface RefereeIndeterminateInputV1 {
+    readonly runner_pin: RefereeRunnerPinV1;
+    readonly request: RefereeRunnerRequestV1;
+    readonly reason_code: string;
+}
+export declare class RefereeValidationError extends TypeError {
+    readonly code: string;
+    constructor(code: string);
+}
+export declare function parseRefereeRunnerPin(value: unknown): Readonly<RefereeRunnerPinV1>;
+export declare function parseRefereeRunnerRequest(value: unknown): Readonly<RefereeRunnerRequestV1>;
+export declare function parseRefereeRunnerOutput(value: unknown): Readonly<RefereeRunnerOutputV1>;
+export declare function parseRefereeEvaluationInput(value: unknown): Readonly<RefereeEvaluationInputV1>;
+/** Evaluate one already-produced, caller-pinned protocol-runner output. */
+export declare function evaluateReferee(value: unknown): Readonly<RefereeResultV1>;
+/** Convert a bounded runner failure into an explicit no-claim result. */
+export declare function createIndeterminateRefereeResult(value: RefereeIndeterminateInputV1): Readonly<RefereeResultV1>;
+//# sourceMappingURL=referee.d.ts.map

package/dist/referee.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"referee.d.ts","sourceRoot":"","sources":["../src/referee.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAIH,eAAO,MAAM,0BAA0B,6BAA6B,CAAC;AACrE,eAAO,MAAM,8BAA8B,iCAAiC,CAAC;AAC7E,eAAO,MAAM,6BAA6B,gCAAgC,CAAC;AAC3E,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAI7D,eAAO,MAAM,6BAA6B,6BAA6B,CAAC;AACxE,eAAO,MAAM,iCAAiC,iCAAiC,CAAC;AAChF,eAAO,MAAM,gCAAgC,gCAAgC,CAAC;AAC9E,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAiDhE,MAAM,MAAM,WAAW,GACnB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,WAAW,EAAE,GACb;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,CAAC;AAEnC,MAAM,MAAM,aAAa,GACrB,YAAY,GACZ,gBAAgB,GAChB,eAAe,CAAC;AACpB,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG,WAAW,CAAC;AACjE,MAAM,MAAM,yBAAyB,GACjC,UAAU,GACV,UAAU,GACV,eAAe,CAAC;AACpB,MAAM,MAAM,mBAAmB,GAC3B,UAAU,GACV,UAAU,GACV,eAAe,CAAC;AACpB,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,UAAU,GAAG,eAAe,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAC9B,WAAW,GACX,eAAe,GACf,eAAe,GACf,cAAc,CAAC;AACnB,MAAM,MAAM,sBAAsB,GAC9B,WAAW,GACX,sBAAsB,GACtB,eAAe,GACf,cAAc,CAAC;AACnB,MAAM,MAAM,qBAAqB,GAC7B,uBAAuB,GACvB,UAAU,GACV,eAAe,GACf,cAAc,CAAC;AAEnB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,UAAU,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,mEAAmE;AACnE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,8BAA8B,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;CAC7B;AAED,qEAAqE;AACrE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,6BAA6B,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;IACxD,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;CACjD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,0BAA0B,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC;QACrC,KAAK,EAAE,yBAAyB,CAAC;KAClC,CAAC,CAAC;IACH,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;QAC/B,KAAK,EAAE,mBAAmB,CAAC;KAC5B,CAAC,CAAC;IACH,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC;QACnC,KAAK,EAAE,sBAAsB,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;KACvC,CAAC,CAAC;IACH,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC;QAClC,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,EAAE,sBAAsB,CAAC;KAC/B,CAAC,CAAC;IACH,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC;QAClC,KAAK,EAAE,sBAAsB,CAAC;KAC/B,CAAC,CAAC;IACH,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC;QACjC,KAAK,EAAE,qBAAqB,CAAC;KAC9B,CAAC,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,sBAAsB,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAClD,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,wBAAwB,EAAE,KAAK,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAC;IACzD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,qBAAa,sBAAuB,SAAQ,SAAS;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM;CAKzB;AAwHD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAmClF;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,GACb,QAAQ,CAAC,sBAAsB,CAAC,CA2BlC;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,GACb,QAAQ,CAAC,qBAAqB,CAAC,CAiDjC;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,GACb,QAAQ,CAAC,wBAAwB,CAAC,CASpC;AA8DD,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,eAAe,CAAC,CAiEzE;AAED,yEAAyE;AACzE,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,2BAA2B,GACjC,QAAQ,CAAC,eAAe,CAAC,CA+B3B"}