@emilia-protocol/gate 0.18.1 → 0.19.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +51 -0
- package/README.md +42 -0
- package/dist/gate-qualification-v2.d.ts +4 -0
- package/dist/gate-qualification-v2.d.ts.map +1 -1
- package/dist/gate-qualification-v2.js +39 -47
- package/dist/gate-qualification-v2.js.map +1 -1
- package/dist/index.d.ts +2 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +2 -0
- package/dist/index.js.map +1 -1
- package/dist/referee-runner.d.ts +35 -0
- package/dist/referee-runner.d.ts.map +1 -0
- package/dist/referee-runner.js +294 -0
- package/dist/referee-runner.js.map +1 -0
- package/dist/referee.d.ts +124 -0
- package/dist/referee.d.ts.map +1 -0
- package/dist/referee.js +434 -0
- package/dist/referee.js.map +1 -0
- package/dist/reliance-program.d.ts +88 -0
- package/dist/reliance-program.d.ts.map +1 -0
- package/dist/reliance-program.js +437 -0
- package/dist/reliance-program.js.map +1 -0
- package/dist/remedy-program.d.ts.map +1 -1
- package/dist/remedy-program.js +28 -18
- package/dist/remedy-program.js.map +1 -1
- package/package.json +17 -2
- package/referee-runner.js +3 -0
- package/referee.js +3 -0
- package/reliance-program.js +3 -0
- package/src/gate-qualification-v2.ts +56 -46
- package/src/index.ts +2 -0
- package/src/referee-runner.ts +365 -0
- package/src/referee.ts +625 -0
- package/src/reliance-program.ts +499 -0
- package/src/remedy-program.ts +28 -17
|
@@ -0,0 +1,88 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Customer-owned Reliance Program source and deterministic compiler.
|
|
3
|
+
*
|
|
4
|
+
* The signed source is the relying party's policy artifact. Compilation emits
|
|
5
|
+
* the existing Gate Trust Program wire format; it does not create another
|
|
6
|
+
* authorization engine or let a presenter select the acceptance bar.
|
|
7
|
+
*/
|
|
8
|
+
import crypto from 'node:crypto';
|
|
9
|
+
export declare const RELIANCE_PROGRAM_SOURCE_VERSION = "EP-RELIANCE-PROGRAM-SOURCE-v1";
|
|
10
|
+
export declare const RELIANCE_PROGRAM_VERSION = "EP-RELIANCE-PROGRAM-v1";
|
|
11
|
+
export declare const RELIANCE_PROGRAM_SIGNATURE_ALGORITHM = "Ed25519";
|
|
12
|
+
export declare const RELIANCE_PROGRAM_ADMISSIBILITY_EVIDENCE = "ep-admissibility-evaluation";
|
|
13
|
+
export declare const RELIANCE_PROGRAM_ADMISSIBILITY_VERIFIER = "ep-admissibility-profile:v1";
|
|
14
|
+
type JsonRecord = Record<string, any>;
|
|
15
|
+
export interface CompiledRelianceProgram {
|
|
16
|
+
version: typeof RELIANCE_PROGRAM_VERSION;
|
|
17
|
+
source_digest: string;
|
|
18
|
+
relying_party_id: string;
|
|
19
|
+
program: JsonRecord;
|
|
20
|
+
program_digest: string;
|
|
21
|
+
trace: Array<{
|
|
22
|
+
stage_id: string;
|
|
23
|
+
requirement_id: string;
|
|
24
|
+
profile_id: string;
|
|
25
|
+
profile_hash: string;
|
|
26
|
+
}>;
|
|
27
|
+
claim_boundary: string;
|
|
28
|
+
}
|
|
29
|
+
export interface AdmissibilityProfileTrustAdapterOptions {
|
|
30
|
+
profile: JsonRecord;
|
|
31
|
+
evaluate: (profile: JsonRecord, bundle: unknown, context: {
|
|
32
|
+
now?: string | number;
|
|
33
|
+
expectedProfileHash: string;
|
|
34
|
+
}) => any | Promise<any>;
|
|
35
|
+
project: (input: {
|
|
36
|
+
evaluation: Readonly<JsonRecord>;
|
|
37
|
+
bundle: unknown;
|
|
38
|
+
}) => {
|
|
39
|
+
subjects: string[];
|
|
40
|
+
key_fingerprints: string[];
|
|
41
|
+
issued_at: string;
|
|
42
|
+
expires_at: string;
|
|
43
|
+
revocation_checked_at?: string | null;
|
|
44
|
+
} | Promise<{
|
|
45
|
+
subjects: string[];
|
|
46
|
+
key_fingerprints: string[];
|
|
47
|
+
issued_at: string;
|
|
48
|
+
expires_at: string;
|
|
49
|
+
revocation_checked_at?: string | null;
|
|
50
|
+
}>;
|
|
51
|
+
now?: string | number | (() => string | number);
|
|
52
|
+
}
|
|
53
|
+
export declare class RelianceProgramValidationError extends TypeError {
|
|
54
|
+
readonly code: string;
|
|
55
|
+
constructor(code: string, message: string);
|
|
56
|
+
}
|
|
57
|
+
export declare function relianceProgramSourceDigest(source: unknown): string;
|
|
58
|
+
export declare function signRelianceProgram(source: unknown, privateKey: crypto.KeyLike): JsonRecord;
|
|
59
|
+
export declare function verifyRelianceProgram(envelope: unknown, { trustedKeys }?: {
|
|
60
|
+
trustedKeys?: Record<string, unknown>;
|
|
61
|
+
}): JsonRecord;
|
|
62
|
+
/**
|
|
63
|
+
* Adapt the existing Admissibility Profile evaluator into one constructor-
|
|
64
|
+
* pinned Trust Program verifier. The runtime artifact supplies evidence only;
|
|
65
|
+
* the profile, evaluator, projection, and clock are all relying-party owned.
|
|
66
|
+
*/
|
|
67
|
+
export declare function createAdmissibilityProfileTrustAdapter({ profile, evaluate, project, now, }: AdmissibilityProfileTrustAdapterOptions): ({ artifact, requirement, program }: {
|
|
68
|
+
[x: string]: any;
|
|
69
|
+
}) => Promise<Readonly<{
|
|
70
|
+
valid: false;
|
|
71
|
+
reason: string;
|
|
72
|
+
}> | Readonly<{
|
|
73
|
+
valid: true;
|
|
74
|
+
reason: null;
|
|
75
|
+
binding_digest: any;
|
|
76
|
+
policy_digest: any;
|
|
77
|
+
subjects: string[];
|
|
78
|
+
key_fingerprints: string[];
|
|
79
|
+
issued_at: string;
|
|
80
|
+
expires_at: string;
|
|
81
|
+
revocation_checked_at: string | null;
|
|
82
|
+
}>>;
|
|
83
|
+
export declare function compileRelianceProgram(envelope: unknown, { trustedKeys, profiles }?: {
|
|
84
|
+
trustedKeys?: Record<string, unknown>;
|
|
85
|
+
profiles?: unknown[];
|
|
86
|
+
}): CompiledRelianceProgram;
|
|
87
|
+
export {};
|
|
88
|
+
//# sourceMappingURL=reliance-program.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reliance-program.d.ts","sourceRoot":"","sources":["../src/reliance-program.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AASjC,eAAO,MAAM,+BAA+B,kCAAkC,CAAC;AAC/E,eAAO,MAAM,wBAAwB,2BAA2B,CAAC;AACjE,eAAO,MAAM,oCAAoC,YAAY,CAAC;AAC9D,eAAO,MAAM,uCAAuC,gCAAgC,CAAC;AACrF,eAAO,MAAM,uCAAuC,gCAAgC,CAAC;AA2BrF,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEtC,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,wBAAwB,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,UAAU,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,KAAK,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uCAAuC;IACtD,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;QACxD,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACtB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC,KAAK,EAAE;QACf,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,EAAE,OAAO,CAAC;KACjB,KAAK;QACJ,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvC,GAAG,OAAO,CAAC;QACV,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC;CACjD;AAED,qBAAa,8BAA+B,SAAQ,SAAS;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAsJD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAGnE;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,GAAG,UAAU,CAmB3F;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,EACjB,EAAE,WAAgB,EAAE,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAO,GACnE,UAAU,CAiDZ;AAsCD;;;;GAIG;AACH,wBAAgB,sCAAsC,CAAC,EACrD,OAAO,EACP,QAAQ,EACR,OAAO,EACP,GAAG,GACJ,EAAE,uCAAuC;;;;;;;;;;;;;;;IA0DzC;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,OAAO,EACjB,EAAE,WAAgB,EAAE,QAAa,EAAE,GAAE;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;CACjB,GACL,uBAAuB,CA2DzB"}
|
|
@@ -0,0 +1,437 @@
|
|
|
1
|
+
// @ts-nocheck
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
3
|
+
/**
|
|
4
|
+
* Customer-owned Reliance Program source and deterministic compiler.
|
|
5
|
+
*
|
|
6
|
+
* The signed source is the relying party's policy artifact. Compilation emits
|
|
7
|
+
* the existing Gate Trust Program wire format; it does not create another
|
|
8
|
+
* authorization engine or let a presenter select the acceptance bar.
|
|
9
|
+
*/
|
|
10
|
+
import crypto from 'node:crypto';
|
|
11
|
+
import { canonicalize, hashCanonical } from './execution-binding.js';
|
|
12
|
+
import { TRUST_PROGRAM_VERSION, trustProgramDigest, validateTrustProgram, } from './trust-program.js';
|
|
13
|
+
import { createPinnedEvidenceAdapter } from './trust-program-adapters.js';
|
|
14
|
+
export const RELIANCE_PROGRAM_SOURCE_VERSION = 'EP-RELIANCE-PROGRAM-SOURCE-v1';
|
|
15
|
+
export const RELIANCE_PROGRAM_VERSION = 'EP-RELIANCE-PROGRAM-v1';
|
|
16
|
+
export const RELIANCE_PROGRAM_SIGNATURE_ALGORITHM = 'Ed25519';
|
|
17
|
+
export const RELIANCE_PROGRAM_ADMISSIBILITY_EVIDENCE = 'ep-admissibility-evaluation';
|
|
18
|
+
export const RELIANCE_PROGRAM_ADMISSIBILITY_VERIFIER = 'ep-admissibility-profile:v1';
|
|
19
|
+
const DOMAIN = `${RELIANCE_PROGRAM_VERSION}\0`;
|
|
20
|
+
const DIGEST = /^sha256:[0-9a-f]{64}$/;
|
|
21
|
+
const ID = /^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,255}$/;
|
|
22
|
+
const TRUST_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
|
|
23
|
+
const CAID = /^caid:1:[a-z][a-z0-9.-]*\.[1-9][0-9]*:jcs-sha256:[A-Za-z0-9_-]{43}$/;
|
|
24
|
+
const SOURCE_KEYS = new Set([
|
|
25
|
+
'@version', 'program_id', 'version', 'relying_party', 'root_caid',
|
|
26
|
+
'action_digest', 'valid_from', 'expires_at', 'stages', 'execution',
|
|
27
|
+
]);
|
|
28
|
+
const RELYING_PARTY_KEYS = new Set(['id', 'key_id']);
|
|
29
|
+
const STAGE_KEYS = new Set(['stage_id', 'depends_on', 'rule', 'profiles']);
|
|
30
|
+
const PROFILE_REF_KEYS = new Set([
|
|
31
|
+
'profile_id', 'profile_hash', 'evaluation_max_age_sec', 'revocation_required',
|
|
32
|
+
]);
|
|
33
|
+
const EXECUTION_KEYS = new Set([
|
|
34
|
+
'depends_on', 'consequence_mode', 'capability_template_digest', 'escrow_profile_digest',
|
|
35
|
+
]);
|
|
36
|
+
const ENVELOPE_KEYS = new Set(['@version', 'source', 'source_digest', 'signature']);
|
|
37
|
+
const SIGNATURE_KEYS = new Set(['algorithm', 'key_id', 'value']);
|
|
38
|
+
const TRUSTED_SIGNER_KEYS = new Set(['relying_party_id', 'public_key']);
|
|
39
|
+
const MAX_STAGES = 64;
|
|
40
|
+
const MAX_PROFILES_PER_STAGE = 64;
|
|
41
|
+
const MAX_PROFILE_CATALOG = 1024;
|
|
42
|
+
const MAX_PROFILE_BYTES = 262_144;
|
|
43
|
+
export class RelianceProgramValidationError extends TypeError {
|
|
44
|
+
code;
|
|
45
|
+
constructor(code, message) {
|
|
46
|
+
super(message);
|
|
47
|
+
this.name = 'RelianceProgramValidationError';
|
|
48
|
+
this.code = code;
|
|
49
|
+
}
|
|
50
|
+
}
|
|
51
|
+
function refuse(code, message) {
|
|
52
|
+
throw new RelianceProgramValidationError(code, message);
|
|
53
|
+
}
|
|
54
|
+
function isRecord(value) {
|
|
55
|
+
if (value === null || typeof value !== 'object' || Array.isArray(value))
|
|
56
|
+
return false;
|
|
57
|
+
const prototype = Object.getPrototypeOf(value);
|
|
58
|
+
return prototype === Object.prototype || prototype === null;
|
|
59
|
+
}
|
|
60
|
+
function isDataRecord(value) {
|
|
61
|
+
return isRecord(value) && Reflect.ownKeys(value).every((key) => {
|
|
62
|
+
if (typeof key !== 'string')
|
|
63
|
+
return false;
|
|
64
|
+
const descriptor = Object.getOwnPropertyDescriptor(value, key);
|
|
65
|
+
return descriptor?.enumerable === true && Object.hasOwn(descriptor, 'value');
|
|
66
|
+
});
|
|
67
|
+
}
|
|
68
|
+
function exact(value, keys) {
|
|
69
|
+
return isDataRecord(value)
|
|
70
|
+
&& Reflect.ownKeys(value).length === keys.size
|
|
71
|
+
&& Object.keys(value).every((key) => keys.has(key));
|
|
72
|
+
}
|
|
73
|
+
function canonicalCopy(value) {
|
|
74
|
+
return JSON.parse(canonicalize(value));
|
|
75
|
+
}
|
|
76
|
+
function deepFreeze(value) {
|
|
77
|
+
if (!value || typeof value !== 'object' || Object.isFrozen(value))
|
|
78
|
+
return value;
|
|
79
|
+
Object.freeze(value);
|
|
80
|
+
for (const child of Object.values(value))
|
|
81
|
+
deepFreeze(child);
|
|
82
|
+
return value;
|
|
83
|
+
}
|
|
84
|
+
function digest(value) {
|
|
85
|
+
return `sha256:${hashCanonical(value)}`;
|
|
86
|
+
}
|
|
87
|
+
function strictInstant(value) {
|
|
88
|
+
if (typeof value !== 'string'
|
|
89
|
+
|| !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?Z$/.test(value))
|
|
90
|
+
return NaN;
|
|
91
|
+
const parsed = Date.parse(value);
|
|
92
|
+
return Number.isFinite(parsed) ? parsed : NaN;
|
|
93
|
+
}
|
|
94
|
+
function exactIdentifiers(value, maximum = MAX_STAGES) {
|
|
95
|
+
return Array.isArray(value) && value.length <= maximum
|
|
96
|
+
&& value.every((entry) => typeof entry === 'string' && TRUST_ID.test(entry))
|
|
97
|
+
&& new Set(value).size === value.length;
|
|
98
|
+
}
|
|
99
|
+
function validateRule(rule, profileCount) {
|
|
100
|
+
if (!isDataRecord(rule) || !['all', 'any', 'threshold'].includes(rule.mode))
|
|
101
|
+
return false;
|
|
102
|
+
const keys = rule.mode === 'threshold'
|
|
103
|
+
? new Set(['mode', 'required', 'distinct_subjects', 'distinct_keys'])
|
|
104
|
+
: new Set(['mode', 'distinct_subjects', 'distinct_keys']);
|
|
105
|
+
if (!exact(rule, keys)
|
|
106
|
+
|| typeof rule.distinct_subjects !== 'boolean'
|
|
107
|
+
|| typeof rule.distinct_keys !== 'boolean')
|
|
108
|
+
return false;
|
|
109
|
+
if (rule.mode !== 'threshold')
|
|
110
|
+
return true;
|
|
111
|
+
return Number.isSafeInteger(rule.required) && rule.required >= 1 && rule.required <= profileCount;
|
|
112
|
+
}
|
|
113
|
+
function validateSource(value) {
|
|
114
|
+
try {
|
|
115
|
+
canonicalize(value);
|
|
116
|
+
}
|
|
117
|
+
catch {
|
|
118
|
+
refuse('source_not_canonical', 'reliance program source is not canonicalizable JSON');
|
|
119
|
+
}
|
|
120
|
+
if (!exact(value, SOURCE_KEYS) || value['@version'] !== RELIANCE_PROGRAM_SOURCE_VERSION
|
|
121
|
+
|| !exact(value.relying_party, RELYING_PARTY_KEYS)) {
|
|
122
|
+
refuse('source_schema_invalid', 'reliance program source is not a closed v1 object');
|
|
123
|
+
}
|
|
124
|
+
if (typeof value.program_id !== 'string' || !TRUST_ID.test(value.program_id)
|
|
125
|
+
|| !Number.isSafeInteger(value.version) || value.version < 1
|
|
126
|
+
|| typeof value.relying_party.id !== 'string' || !ID.test(value.relying_party.id)
|
|
127
|
+
|| typeof value.relying_party.key_id !== 'string' || !TRUST_ID.test(value.relying_party.key_id)
|
|
128
|
+
|| typeof value.root_caid !== 'string' || !CAID.test(value.root_caid)
|
|
129
|
+
|| typeof value.action_digest !== 'string' || !DIGEST.test(value.action_digest)) {
|
|
130
|
+
refuse('source_binding_invalid', 'relying party, CAID, or action binding is invalid');
|
|
131
|
+
}
|
|
132
|
+
const validFrom = strictInstant(value.valid_from);
|
|
133
|
+
const expiresAt = strictInstant(value.expires_at);
|
|
134
|
+
if (!Number.isFinite(validFrom) || !Number.isFinite(expiresAt) || expiresAt <= validFrom) {
|
|
135
|
+
refuse('source_time_window_invalid', 'reliance program validity window is invalid');
|
|
136
|
+
}
|
|
137
|
+
if (!Array.isArray(value.stages) || value.stages.length < 1 || value.stages.length > MAX_STAGES) {
|
|
138
|
+
refuse('source_stage_count_invalid', 'reliance program stage count is invalid');
|
|
139
|
+
}
|
|
140
|
+
const stageIds = new Set();
|
|
141
|
+
for (const stage of value.stages) {
|
|
142
|
+
if (!exact(stage, STAGE_KEYS) || typeof stage.stage_id !== 'string'
|
|
143
|
+
|| !TRUST_ID.test(stage.stage_id) || stageIds.has(stage.stage_id)
|
|
144
|
+
|| !exactIdentifiers(stage.depends_on)
|
|
145
|
+
|| !Array.isArray(stage.profiles) || stage.profiles.length < 1
|
|
146
|
+
|| stage.profiles.length > MAX_PROFILES_PER_STAGE
|
|
147
|
+
|| !validateRule(stage.rule, stage.profiles.length)) {
|
|
148
|
+
refuse('source_stage_invalid', 'reliance program stage is invalid');
|
|
149
|
+
}
|
|
150
|
+
stageIds.add(stage.stage_id);
|
|
151
|
+
const profileIds = new Set();
|
|
152
|
+
for (const reference of stage.profiles) {
|
|
153
|
+
if (!exact(reference, PROFILE_REF_KEYS)
|
|
154
|
+
|| typeof reference.profile_id !== 'string' || !ID.test(reference.profile_id)
|
|
155
|
+
|| profileIds.has(reference.profile_id)
|
|
156
|
+
|| typeof reference.profile_hash !== 'string' || !DIGEST.test(reference.profile_hash)
|
|
157
|
+
|| !Number.isSafeInteger(reference.evaluation_max_age_sec)
|
|
158
|
+
|| reference.evaluation_max_age_sec < 1 || reference.evaluation_max_age_sec > 31_536_000
|
|
159
|
+
|| typeof reference.revocation_required !== 'boolean') {
|
|
160
|
+
refuse('source_profile_reference_invalid', 'admissibility profile reference is invalid');
|
|
161
|
+
}
|
|
162
|
+
profileIds.add(reference.profile_id);
|
|
163
|
+
}
|
|
164
|
+
}
|
|
165
|
+
if (!exact(value.execution, EXECUTION_KEYS)
|
|
166
|
+
|| !exactIdentifiers(value.execution.depends_on)
|
|
167
|
+
|| value.execution.depends_on.length < 1
|
|
168
|
+
|| !['receipt-program', 'action-escrow'].includes(value.execution.consequence_mode)
|
|
169
|
+
|| (value.execution.consequence_mode === 'receipt-program'
|
|
170
|
+
&& (!DIGEST.test(value.execution.capability_template_digest)
|
|
171
|
+
|| value.execution.escrow_profile_digest !== null))
|
|
172
|
+
|| (value.execution.consequence_mode === 'action-escrow'
|
|
173
|
+
&& (!DIGEST.test(value.execution.escrow_profile_digest)
|
|
174
|
+
|| value.execution.capability_template_digest !== null))) {
|
|
175
|
+
refuse('source_execution_invalid', 'reliance program consequence owner is invalid');
|
|
176
|
+
}
|
|
177
|
+
}
|
|
178
|
+
function signingBytes(source) {
|
|
179
|
+
return Buffer.concat([
|
|
180
|
+
Buffer.from(DOMAIN, 'utf8'),
|
|
181
|
+
Buffer.from(canonicalize(source), 'utf8'),
|
|
182
|
+
]);
|
|
183
|
+
}
|
|
184
|
+
function publicKey(value) {
|
|
185
|
+
try {
|
|
186
|
+
if (value instanceof crypto.KeyObject) {
|
|
187
|
+
const key = value.type === 'public' ? value : crypto.createPublicKey(value);
|
|
188
|
+
return key.asymmetricKeyType === 'ed25519' ? key : null;
|
|
189
|
+
}
|
|
190
|
+
if (typeof value !== 'string' || !/^[A-Za-z0-9_-]+$/.test(value))
|
|
191
|
+
return null;
|
|
192
|
+
const bytes = Buffer.from(value, 'base64url');
|
|
193
|
+
if (bytes.toString('base64url') !== value)
|
|
194
|
+
return null;
|
|
195
|
+
const key = crypto.createPublicKey({ key: bytes, type: 'spki', format: 'der' });
|
|
196
|
+
return key.asymmetricKeyType === 'ed25519' ? key : null;
|
|
197
|
+
}
|
|
198
|
+
catch {
|
|
199
|
+
return null;
|
|
200
|
+
}
|
|
201
|
+
}
|
|
202
|
+
export function relianceProgramSourceDigest(source) {
|
|
203
|
+
validateSource(source);
|
|
204
|
+
return digest(source);
|
|
205
|
+
}
|
|
206
|
+
export function signRelianceProgram(source, privateKey) {
|
|
207
|
+
validateSource(source);
|
|
208
|
+
const key = privateKey instanceof crypto.KeyObject
|
|
209
|
+
? privateKey : crypto.createPrivateKey(privateKey);
|
|
210
|
+
if (key.asymmetricKeyType !== 'ed25519') {
|
|
211
|
+
refuse('signing_key_invalid', 'reliance program signing key must be Ed25519');
|
|
212
|
+
}
|
|
213
|
+
const frozenSource = canonicalCopy(source);
|
|
214
|
+
const signature = crypto.sign(null, signingBytes(frozenSource), key).toString('base64url');
|
|
215
|
+
return deepFreeze({
|
|
216
|
+
'@version': RELIANCE_PROGRAM_VERSION,
|
|
217
|
+
source: frozenSource,
|
|
218
|
+
source_digest: digest(frozenSource),
|
|
219
|
+
signature: {
|
|
220
|
+
algorithm: RELIANCE_PROGRAM_SIGNATURE_ALGORITHM,
|
|
221
|
+
key_id: frozenSource.relying_party.key_id,
|
|
222
|
+
value: signature,
|
|
223
|
+
},
|
|
224
|
+
});
|
|
225
|
+
}
|
|
226
|
+
export function verifyRelianceProgram(envelope, { trustedKeys = {} } = {}) {
|
|
227
|
+
if (!exact(envelope, ENVELOPE_KEYS) || envelope['@version'] !== RELIANCE_PROGRAM_VERSION
|
|
228
|
+
|| !exact(envelope.signature, SIGNATURE_KEYS)
|
|
229
|
+
|| envelope.signature.algorithm !== RELIANCE_PROGRAM_SIGNATURE_ALGORITHM
|
|
230
|
+
|| typeof envelope.source_digest !== 'string' || !DIGEST.test(envelope.source_digest)
|
|
231
|
+
|| typeof envelope.signature.key_id !== 'string'
|
|
232
|
+
|| typeof envelope.signature.value !== 'string'
|
|
233
|
+
|| !/^[A-Za-z0-9_-]+$/.test(envelope.signature.value)
|
|
234
|
+
|| Buffer.from(envelope.signature.value, 'base64url').length !== 64
|
|
235
|
+
|| Buffer.from(envelope.signature.value, 'base64url').toString('base64url') !== envelope.signature.value) {
|
|
236
|
+
return { valid: false, reason: 'envelope_schema_invalid', source_digest: null };
|
|
237
|
+
}
|
|
238
|
+
try {
|
|
239
|
+
validateSource(envelope.source);
|
|
240
|
+
}
|
|
241
|
+
catch (error) {
|
|
242
|
+
return { valid: false, reason: error instanceof RelianceProgramValidationError
|
|
243
|
+
? error.code : 'source_schema_invalid', source_digest: null };
|
|
244
|
+
}
|
|
245
|
+
if (envelope.signature.key_id !== envelope.source.relying_party.key_id) {
|
|
246
|
+
return { valid: false, reason: 'signature_key_mismatch', source_digest: envelope.source_digest };
|
|
247
|
+
}
|
|
248
|
+
const computed = digest(envelope.source);
|
|
249
|
+
if (computed !== envelope.source_digest) {
|
|
250
|
+
return { valid: false, reason: 'source_digest_mismatch', source_digest: computed };
|
|
251
|
+
}
|
|
252
|
+
if (!isRecord(trustedKeys) || !Object.hasOwn(trustedKeys, envelope.signature.key_id)) {
|
|
253
|
+
return { valid: false, reason: 'relying_party_key_untrusted', source_digest: computed };
|
|
254
|
+
}
|
|
255
|
+
const signer = trustedKeys[envelope.signature.key_id];
|
|
256
|
+
if (!exact(signer, TRUSTED_SIGNER_KEYS)
|
|
257
|
+
|| signer.relying_party_id !== envelope.source.relying_party.id) {
|
|
258
|
+
return { valid: false, reason: 'relying_party_identity_mismatch', source_digest: computed };
|
|
259
|
+
}
|
|
260
|
+
const key = publicKey(signer.public_key);
|
|
261
|
+
if (!key) {
|
|
262
|
+
return { valid: false, reason: 'relying_party_key_untrusted', source_digest: computed };
|
|
263
|
+
}
|
|
264
|
+
const valid = crypto.verify(null, signingBytes(envelope.source), key, Buffer.from(envelope.signature.value, 'base64url'));
|
|
265
|
+
if (!valid)
|
|
266
|
+
return { valid: false, reason: 'signature_invalid', source_digest: computed };
|
|
267
|
+
return {
|
|
268
|
+
valid: true,
|
|
269
|
+
reason: null,
|
|
270
|
+
source_digest: computed,
|
|
271
|
+
relying_party_id: envelope.source.relying_party.id,
|
|
272
|
+
key_id: envelope.signature.key_id,
|
|
273
|
+
};
|
|
274
|
+
}
|
|
275
|
+
function profileMap(profiles) {
|
|
276
|
+
if (!Array.isArray(profiles) || profiles.length > MAX_PROFILE_CATALOG) {
|
|
277
|
+
refuse('profile_catalog_invalid', 'profile catalog must be a bounded array');
|
|
278
|
+
}
|
|
279
|
+
const result = new Map();
|
|
280
|
+
for (const profile of profiles) {
|
|
281
|
+
if (!isDataRecord(profile) || typeof profile.id !== 'string' || !ID.test(profile.id)
|
|
282
|
+
|| typeof profile.profile_hash !== 'string' || !DIGEST.test(profile.profile_hash)
|
|
283
|
+
|| result.has(profile.id)) {
|
|
284
|
+
refuse('profile_catalog_invalid', 'profile catalog contains an invalid or duplicate entry');
|
|
285
|
+
}
|
|
286
|
+
const { profile_hash: profileHash, ...profileBody } = profile;
|
|
287
|
+
let computed;
|
|
288
|
+
try {
|
|
289
|
+
const canonical = canonicalize(profileBody);
|
|
290
|
+
if (Buffer.byteLength(canonical, 'utf8') > MAX_PROFILE_BYTES) {
|
|
291
|
+
refuse('profile_catalog_invalid', `profile ${profile.id} exceeds the size limit`);
|
|
292
|
+
}
|
|
293
|
+
computed = `sha256:${crypto.createHash('sha256').update(canonical, 'utf8').digest('hex')}`;
|
|
294
|
+
}
|
|
295
|
+
catch (error) {
|
|
296
|
+
if (error instanceof RelianceProgramValidationError)
|
|
297
|
+
throw error;
|
|
298
|
+
refuse('profile_integrity_invalid', `profile ${profile.id} is not canonicalizable`);
|
|
299
|
+
}
|
|
300
|
+
if (computed !== profileHash) {
|
|
301
|
+
refuse('profile_integrity_invalid', `profile ${profile.id} self-hash does not match its content`);
|
|
302
|
+
}
|
|
303
|
+
result.set(profile.id, profile);
|
|
304
|
+
}
|
|
305
|
+
return result;
|
|
306
|
+
}
|
|
307
|
+
function verifiedProfile(profile) {
|
|
308
|
+
const catalog = profileMap([profile]);
|
|
309
|
+
return catalog.values().next().value;
|
|
310
|
+
}
|
|
311
|
+
/**
|
|
312
|
+
* Adapt the existing Admissibility Profile evaluator into one constructor-
|
|
313
|
+
* pinned Trust Program verifier. The runtime artifact supplies evidence only;
|
|
314
|
+
* the profile, evaluator, projection, and clock are all relying-party owned.
|
|
315
|
+
*/
|
|
316
|
+
export function createAdmissibilityProfileTrustAdapter({ profile, evaluate, project, now, }) {
|
|
317
|
+
const pinnedProfile = canonicalCopy(verifiedProfile(profile));
|
|
318
|
+
if (typeof evaluate !== 'function' || typeof project !== 'function') {
|
|
319
|
+
refuse('admissibility_adapter_invalid', 'admissibility evaluator and projection are required');
|
|
320
|
+
}
|
|
321
|
+
const profileHash = pinnedProfile.profile_hash;
|
|
322
|
+
return createPinnedEvidenceAdapter({
|
|
323
|
+
policyDigest: profileHash,
|
|
324
|
+
trustedConfiguration: {
|
|
325
|
+
profile_id: pinnedProfile.id,
|
|
326
|
+
profile_hash: profileHash,
|
|
327
|
+
},
|
|
328
|
+
verify: async (evidence, context) => {
|
|
329
|
+
if (!exact(evidence, new Set(['bundle']))) {
|
|
330
|
+
return { valid: false, reason: 'admissibility_evidence_schema_invalid' };
|
|
331
|
+
}
|
|
332
|
+
const evaluationTime = typeof now === 'function' ? now() : now;
|
|
333
|
+
let evaluation;
|
|
334
|
+
try {
|
|
335
|
+
evaluation = await evaluate(pinnedProfile, evidence.bundle, {
|
|
336
|
+
...(evaluationTime === undefined ? {} : { now: evaluationTime }),
|
|
337
|
+
expectedProfileHash: profileHash,
|
|
338
|
+
});
|
|
339
|
+
}
|
|
340
|
+
catch {
|
|
341
|
+
return { valid: false, reason: 'admissibility_evaluation_failed' };
|
|
342
|
+
}
|
|
343
|
+
if (!isDataRecord(evaluation)
|
|
344
|
+
|| evaluation.profile_hash !== profileHash
|
|
345
|
+
|| evaluation.verdict !== 'admissible') {
|
|
346
|
+
const verdict = typeof evaluation?.verdict === 'string'
|
|
347
|
+
&& /^[a-z_]{1,64}$/.test(evaluation.verdict)
|
|
348
|
+
? evaluation.verdict : 'unverifiable';
|
|
349
|
+
return { valid: false, reason: `admissibility_${verdict}` };
|
|
350
|
+
}
|
|
351
|
+
let projection;
|
|
352
|
+
try {
|
|
353
|
+
projection = await project({
|
|
354
|
+
evaluation: Object.freeze(canonicalCopy(evaluation)),
|
|
355
|
+
bundle: evidence.bundle,
|
|
356
|
+
});
|
|
357
|
+
}
|
|
358
|
+
catch {
|
|
359
|
+
return { valid: false, reason: 'admissibility_projection_failed' };
|
|
360
|
+
}
|
|
361
|
+
if (!isDataRecord(projection)) {
|
|
362
|
+
return { valid: false, reason: 'admissibility_projection_invalid' };
|
|
363
|
+
}
|
|
364
|
+
return {
|
|
365
|
+
valid: true,
|
|
366
|
+
binding_digest: context.expectedBindingDigest,
|
|
367
|
+
policy_digest: profileHash,
|
|
368
|
+
subjects: projection.subjects,
|
|
369
|
+
key_fingerprints: projection.key_fingerprints,
|
|
370
|
+
issued_at: projection.issued_at,
|
|
371
|
+
expires_at: projection.expires_at,
|
|
372
|
+
revocation_checked_at: projection.revocation_checked_at ?? null,
|
|
373
|
+
};
|
|
374
|
+
},
|
|
375
|
+
});
|
|
376
|
+
}
|
|
377
|
+
export function compileRelianceProgram(envelope, { trustedKeys = {}, profiles = [] } = {}) {
|
|
378
|
+
const verified = verifyRelianceProgram(envelope, { trustedKeys });
|
|
379
|
+
if (verified.valid !== true) {
|
|
380
|
+
refuse(verified.reason ?? 'source_unverified', 'reliance program source did not verify');
|
|
381
|
+
}
|
|
382
|
+
const signed = envelope;
|
|
383
|
+
const source = canonicalCopy(signed.source);
|
|
384
|
+
const catalog = profileMap(profiles);
|
|
385
|
+
const trace = [];
|
|
386
|
+
const stages = source.stages.map((stage) => ({
|
|
387
|
+
stage_id: stage.stage_id,
|
|
388
|
+
depends_on: [...stage.depends_on],
|
|
389
|
+
rule: canonicalCopy(stage.rule),
|
|
390
|
+
requirements: stage.profiles.map((reference, index) => {
|
|
391
|
+
const profile = catalog.get(reference.profile_id);
|
|
392
|
+
if (!profile || profile.profile_hash !== reference.profile_hash) {
|
|
393
|
+
refuse('profile_pin_mismatch', `profile ${reference.profile_id} does not match the relying-party pin`);
|
|
394
|
+
}
|
|
395
|
+
const requirementId = `admissibility-${String(index + 1).padStart(2, '0')}`;
|
|
396
|
+
trace.push({
|
|
397
|
+
stage_id: stage.stage_id,
|
|
398
|
+
requirement_id: requirementId,
|
|
399
|
+
profile_id: reference.profile_id,
|
|
400
|
+
profile_hash: reference.profile_hash,
|
|
401
|
+
});
|
|
402
|
+
return {
|
|
403
|
+
requirement_id: requirementId,
|
|
404
|
+
evidence_type: RELIANCE_PROGRAM_ADMISSIBILITY_EVIDENCE,
|
|
405
|
+
verifier_profile: RELIANCE_PROGRAM_ADMISSIBILITY_VERIFIER,
|
|
406
|
+
policy_digest: reference.profile_hash,
|
|
407
|
+
max_age_sec: reference.evaluation_max_age_sec,
|
|
408
|
+
revocation_required: reference.revocation_required,
|
|
409
|
+
};
|
|
410
|
+
}),
|
|
411
|
+
}));
|
|
412
|
+
const program = {
|
|
413
|
+
'@version': TRUST_PROGRAM_VERSION,
|
|
414
|
+
program_id: source.program_id,
|
|
415
|
+
version: source.version,
|
|
416
|
+
root_caid: source.root_caid,
|
|
417
|
+
action_digest: source.action_digest,
|
|
418
|
+
valid_from: source.valid_from,
|
|
419
|
+
expires_at: source.expires_at,
|
|
420
|
+
stages,
|
|
421
|
+
execution: canonicalCopy(source.execution),
|
|
422
|
+
};
|
|
423
|
+
const checked = validateTrustProgram(program);
|
|
424
|
+
if (!checked.valid) {
|
|
425
|
+
refuse('compiled_program_invalid', `compiled Trust Program is invalid: ${checked.reason}`);
|
|
426
|
+
}
|
|
427
|
+
return deepFreeze({
|
|
428
|
+
version: RELIANCE_PROGRAM_VERSION,
|
|
429
|
+
source_digest: verified.source_digest,
|
|
430
|
+
relying_party_id: verified.relying_party_id,
|
|
431
|
+
program,
|
|
432
|
+
program_digest: trustProgramDigest(program),
|
|
433
|
+
trace,
|
|
434
|
+
claim_boundary: 'Compilation proves a pinned RP program maps to the existing Trust Program; it does not prove evidence sufficiency, authorization, or execution.',
|
|
435
|
+
});
|
|
436
|
+
}
|
|
437
|
+
//# sourceMappingURL=reliance-program.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reliance-program.js","sourceRoot":"","sources":["../src/reliance-program.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE1E,MAAM,CAAC,MAAM,+BAA+B,GAAG,+BAA+B,CAAC;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AACjE,MAAM,CAAC,MAAM,oCAAoC,GAAG,SAAS,CAAC;AAC9D,MAAM,CAAC,MAAM,uCAAuC,GAAG,6BAA6B,CAAC;AACrF,MAAM,CAAC,MAAM,uCAAuC,GAAG,6BAA6B,CAAC;AAErF,MAAM,MAAM,GAAG,GAAG,wBAAwB,IAAI,CAAC;AAC/C,MAAM,MAAM,GAAG,uBAAuB,CAAC;AACvC,MAAM,EAAE,GAAG,uCAAuC,CAAC;AACnD,MAAM,QAAQ,GAAG,qCAAqC,CAAC;AACvD,MAAM,IAAI,GAAG,qEAAqE,CAAC;AACnF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW;IACjE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW;CACnE,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAC3E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,YAAY,EAAE,cAAc,EAAE,wBAAwB,EAAE,qBAAqB;CAC9E,CAAC,CAAC;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,YAAY,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,uBAAuB;CACxF,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;AACpF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACjE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAC;AACxE,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AA4ClC,MAAM,OAAO,8BAA+B,SAAQ,SAAS;IAClD,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,OAAe;IAC3C,MAAM,IAAI,8BAA8B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7D,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,UAAU,EAAE,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,IAAiB;IAC9C,OAAO,YAAY,CAAC,KAAK,CAAC;WACrB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;WAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAI,KAAQ;IAChC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAmB,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,UAAU,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;WACtB,CAAC,sDAAsD,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACvF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,OAAO,GAAG,UAAU;IAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO;WACjD,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;WACzE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,YAAoB;IACvD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,WAAW;QACpC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC;QACrE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;WACf,OAAO,IAAI,CAAC,iBAAiB,KAAK,SAAS;WAC3C,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC;AACpG,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAClC,MAAM,CAAC,sBAAsB,EAAE,qDAAqD,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,+BAA+B;WAChF,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,uBAAuB,EAAE,mDAAmD,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACrE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;WACzD,OAAO,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;WAC9E,OAAO,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC;WAC5F,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;WAClE,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,wBAAwB,EAAE,mDAAmD,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QACzF,MAAM,CAAC,4BAA4B,EAAE,6CAA6C,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAChG,MAAM,CAAC,4BAA4B,EAAE,yCAAyC,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;eAC5D,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;eAC9D,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;eACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;eAC3D,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,sBAAsB;eAC9C,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,sBAAsB,EAAE,mCAAmC,CAAC,CAAC;QACtE,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC;mBAChC,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;mBAC1E,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC;mBACpC,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;mBAClF,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,sBAAsB,CAAC;mBACvD,SAAS,CAAC,sBAAsB,GAAG,CAAC,IAAI,SAAS,CAAC,sBAAsB,GAAG,UAAU;mBACrF,OAAO,SAAS,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBAC1D,MAAM,CAAC,kCAAkC,EAAE,4CAA4C,CAAC,CAAC;YAC3F,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC;WACpC,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC;WAC7C,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;WACrC,CAAC,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC;WAChF,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,KAAK,iBAAiB;eACrD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,0BAA0B,CAAC;mBACvD,KAAK,CAAC,SAAS,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC;WACpD,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,KAAK,eAAe;eACnD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,qBAAqB,CAAC;mBAClD,KAAK,CAAC,SAAS,CAAC,0BAA0B,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,0BAA0B,EAAE,+CAA+C,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC;QACH,IAAI,KAAK,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,KAAY,CAAC,CAAC;YACnF,OAAO,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAe;IACzD,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAe,EAAE,UAA0B;IAC7E,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,UAAU,YAAY,MAAM,CAAC,SAAS;QAChD,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAiB,CAAC,CAAC;IAC5D,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3F,OAAO,UAAU,CAAC;QAChB,UAAU,EAAE,wBAAwB;QACpC,MAAM,EAAE,YAAY;QACpB,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC;QACnC,SAAS,EAAE;YACT,SAAS,EAAE,oCAAoC;YAC/C,MAAM,EAAE,YAAY,CAAC,aAAa,CAAC,MAAM;YACzC,KAAK,EAAE,SAAS;SACjB;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAiB,EACjB,EAAE,WAAW,GAAG,EAAE,KAAgD,EAAE;IAEpE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,wBAAwB;WACjF,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;WAC1C,QAAQ,CAAC,SAAS,CAAC,SAAS,KAAK,oCAAoC;WACrE,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;WAClF,OAAO,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ;WAC7C,OAAO,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,QAAQ;WAC5C,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;WAClD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,MAAM,KAAK,EAAE;WAChE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC7G,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC;QAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,8BAA8B;gBAC5E,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QACvE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC;WAChC,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CACzB,IAAI,EACJ,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC7B,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CACnD,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IAC1F,OAAO;QACL,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,QAAQ;QACvB,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;QAClD,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAiB;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACtE,MAAM,CAAC,yBAAyB,EAAE,yCAAyC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;eAC7E,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;eAC9E,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,yBAAyB,EAAE,wDAAwD,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;QAC9D,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,iBAAiB,EAAE,CAAC;gBAC7D,MAAM,CAAC,yBAAyB,EAAE,WAAW,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC;YACpF,CAAC;YACD,QAAQ,GAAG,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAA8B;gBAAE,MAAM,KAAK,CAAC;YACjE,MAAM,CAAC,2BAA2B,EAAE,WAAW,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,CAAC,2BAA2B,EAAE,WAAW,OAAO,CAAC,EAAE,uCAAuC,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAmB,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sCAAsC,CAAC,EACrD,OAAO,EACP,QAAQ,EACR,OAAO,EACP,GAAG,GACqC;IACxC,MAAM,aAAa,GAAG,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,IAAI,OAAO,QAAQ,KAAK,UAAU,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QACpE,MAAM,CAAC,+BAA+B,EAAE,qDAAqD,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,CAAC;IAC/C,OAAO,2BAA2B,CAAC;QACjC,YAAY,EAAE,WAAW;QACzB,oBAAoB,EAAE;YACpB,UAAU,EAAE,aAAa,CAAC,EAAE;YAC5B,YAAY,EAAE,WAAW;SAC1B;QACD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;YAC3E,CAAC;YACD,MAAM,cAAc,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC/D,IAAI,UAAe,CAAC;YACpB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE;oBAC1D,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;oBAChE,mBAAmB,EAAE,WAAW;iBACjC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;mBACtB,UAAU,CAAC,YAAY,KAAK,WAAW;mBACvC,UAAU,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,OAAO,UAAU,EAAE,OAAO,KAAK,QAAQ;uBAClD,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC5C,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,OAAO,EAAE,EAAE,CAAC;YAC9D,CAAC;YACD,IAAI,UAAe,CAAC;YACpB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,OAAO,CAAC;oBACzB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;oBACpD,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;YACtE,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,cAAc,EAAE,OAAO,CAAC,qBAAqB;gBAC7C,aAAa,EAAE,WAAW;gBAC1B,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,qBAAqB,EAAE,UAAU,CAAC,qBAAqB,IAAI,IAAI;aAChE,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAiB,EACjB,EAAE,WAAW,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,KAG7B,EAAE;IAEN,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,mBAAmB,EAAE,wCAAwC,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,QAAsB,CAAC;IACtC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,KAAK,GAAqC,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAiB,EAAE,EAAE,CAAC,CAAC;QACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QACjC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/B,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAqB,EAAE,KAAa,EAAE,EAAE;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;gBAChE,MAAM,CAAC,sBAAsB,EAAE,WAAW,SAAS,CAAC,UAAU,uCAAuC,CAAC,CAAC;YACzG,CAAC;YACD,MAAM,aAAa,GAAG,iBAAiB,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,cAAc,EAAE,aAAa;gBAC7B,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,YAAY,EAAE,SAAS,CAAC,YAAY;aACrC,CAAC,CAAC;YACH,OAAO;gBACL,cAAc,EAAE,aAAa;gBAC7B,aAAa,EAAE,uCAAuC;gBACtD,gBAAgB,EAAE,uCAAuC;gBACzD,aAAa,EAAE,SAAS,CAAC,YAAY;gBACrC,WAAW,EAAE,SAAS,CAAC,sBAAsB;gBAC7C,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;aACnD,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CAAC,CAAC;IACJ,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,qBAAqB;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM;QACN,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;KAC3C,CAAC;IACF,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,CAAC,0BAA0B,EAAE,sCAAsC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,wBAAwB;QACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,OAAO;QACP,cAAc,EAAE,kBAAkB,CAAC,OAAO,CAAC;QAC3C,KAAK;QACL,cAAc,EAAE,iJAAiJ;KAClK,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"remedy-program.d.ts","sourceRoot":"","sources":["../src/remedy-program.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAKH,eAAO,MAAM,sBAAsB,sCAAsC,CAAC;AAmH1E,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAGtC,MAAM,WAAW,kBAAmB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAoB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAClE,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChE,GAAG,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACnF,cAAc,CAAC,KAAK,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,kBAAkB,CAAC;KAC3B,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,yBAA0B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxE,KAAK,EAAE,kBAAkB,CAAC;IAC1B,oBAAoB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,gBAAgB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,yBAAyB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,mBAAmB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjF,4BAA4B,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1F,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AA2TD;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,kBAAkB,CA4F5D;AAUD,+EAA+E;AAC/E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,yBAAyB;oBA8J7C,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"remedy-program.d.ts","sourceRoot":"","sources":["../src/remedy-program.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAKH,eAAO,MAAM,sBAAsB,sCAAsC,CAAC;AAmH1E,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAGtC,MAAM,WAAW,kBAAmB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAoB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAClE,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChE,GAAG,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACnF,cAAc,CAAC,KAAK,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,kBAAkB,CAAC;KAC3B,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,yBAA0B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxE,KAAK,EAAE,kBAAkB,CAAC;IAC1B,oBAAoB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,gBAAgB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,yBAAyB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,mBAAmB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjF,4BAA4B,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1F,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AA2TD;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,kBAAkB,CA4F5D;AAUD,+EAA+E;AAC/E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,yBAAyB;oBA8J7C,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;oBAsnBtC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;8BAxd5B,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;qCAnE/B,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;yBAsHlD,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;6BA0DlC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;yBA0G1C,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;4BAqEnC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;6BAuErC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;4BAkEvC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;GA8D5E;;;;;;AAED,wBAIE"}
|