@emilia-protocol/gate 0.18.2 → 0.20.0

package/dist/reliance-program.js

@@ -0,0 +1,437 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Customer-owned Reliance Program source and deterministic compiler.
+ *
+ * The signed source is the relying party's policy artifact. Compilation emits
+ * the existing Gate Trust Program wire format; it does not create another
+ * authorization engine or let a presenter select the acceptance bar.
+ */
+import crypto from 'node:crypto';
+import { canonicalize, hashCanonical } from './execution-binding.js';
+import { TRUST_PROGRAM_VERSION, trustProgramDigest, validateTrustProgram, } from './trust-program.js';
+import { createPinnedEvidenceAdapter } from './trust-program-adapters.js';
+export const RELIANCE_PROGRAM_SOURCE_VERSION = 'EP-RELIANCE-PROGRAM-SOURCE-v1';
+export const RELIANCE_PROGRAM_VERSION = 'EP-RELIANCE-PROGRAM-v1';
+export const RELIANCE_PROGRAM_SIGNATURE_ALGORITHM = 'Ed25519';
+export const RELIANCE_PROGRAM_ADMISSIBILITY_EVIDENCE = 'ep-admissibility-evaluation';
+export const RELIANCE_PROGRAM_ADMISSIBILITY_VERIFIER = 'ep-admissibility-profile:v1';
+const DOMAIN = `${RELIANCE_PROGRAM_VERSION}\0`;
+const DIGEST = /^sha256:[0-9a-f]{64}$/;
+const ID = /^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,255}$/;
+const TRUST_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+const CAID = /^caid:1:[a-z][a-z0-9.-]*\.[1-9][0-9]*:jcs-sha256:[A-Za-z0-9_-]{43}$/;
+const SOURCE_KEYS = new Set([
+    '@version', 'program_id', 'version', 'relying_party', 'root_caid',
+    'action_digest', 'valid_from', 'expires_at', 'stages', 'execution',
+]);
+const RELYING_PARTY_KEYS = new Set(['id', 'key_id']);
+const STAGE_KEYS = new Set(['stage_id', 'depends_on', 'rule', 'profiles']);
+const PROFILE_REF_KEYS = new Set([
+    'profile_id', 'profile_hash', 'evaluation_max_age_sec', 'revocation_required',
+]);
+const EXECUTION_KEYS = new Set([
+    'depends_on', 'consequence_mode', 'capability_template_digest', 'escrow_profile_digest',
+]);
+const ENVELOPE_KEYS = new Set(['@version', 'source', 'source_digest', 'signature']);
+const SIGNATURE_KEYS = new Set(['algorithm', 'key_id', 'value']);
+const TRUSTED_SIGNER_KEYS = new Set(['relying_party_id', 'public_key']);
+const MAX_STAGES = 64;
+const MAX_PROFILES_PER_STAGE = 64;
+const MAX_PROFILE_CATALOG = 1024;
+const MAX_PROFILE_BYTES = 262_144;
+export class RelianceProgramValidationError extends TypeError {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = 'RelianceProgramValidationError';
+        this.code = code;
+    }
+}
+function refuse(code, message) {
+    throw new RelianceProgramValidationError(code, message);
+}
+function isRecord(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function isDataRecord(value) {
+    return isRecord(value) && Reflect.ownKeys(value).every((key) => {
+        if (typeof key !== 'string')
+            return false;
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        return descriptor?.enumerable === true && Object.hasOwn(descriptor, 'value');
+    });
+}
+function exact(value, keys) {
+    return isDataRecord(value)
+        && Reflect.ownKeys(value).length === keys.size
+        && Object.keys(value).every((key) => keys.has(key));
+}
+function canonicalCopy(value) {
+    return JSON.parse(canonicalize(value));
+}
+function deepFreeze(value) {
+    if (!value || typeof value !== 'object' || Object.isFrozen(value))
+        return value;
+    Object.freeze(value);
+    for (const child of Object.values(value))
+        deepFreeze(child);
+    return value;
+}
+function digest(value) {
+    return `sha256:${hashCanonical(value)}`;
+}
+function strictInstant(value) {
+    if (typeof value !== 'string'
+        || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?Z$/.test(value))
+        return NaN;
+    const parsed = Date.parse(value);
+    return Number.isFinite(parsed) ? parsed : NaN;
+}
+function exactIdentifiers(value, maximum = MAX_STAGES) {
+    return Array.isArray(value) && value.length <= maximum
+        && value.every((entry) => typeof entry === 'string' && TRUST_ID.test(entry))
+        && new Set(value).size === value.length;
+}
+function validateRule(rule, profileCount) {
+    if (!isDataRecord(rule) || !['all', 'any', 'threshold'].includes(rule.mode))
+        return false;
+    const keys = rule.mode === 'threshold'
+        ? new Set(['mode', 'required', 'distinct_subjects', 'distinct_keys'])
+        : new Set(['mode', 'distinct_subjects', 'distinct_keys']);
+    if (!exact(rule, keys)
+        || typeof rule.distinct_subjects !== 'boolean'
+        || typeof rule.distinct_keys !== 'boolean')
+        return false;
+    if (rule.mode !== 'threshold')
+        return true;
+    return Number.isSafeInteger(rule.required) && rule.required >= 1 && rule.required <= profileCount;
+}
+function validateSource(value) {
+    try {
+        canonicalize(value);
+    }
+    catch {
+        refuse('source_not_canonical', 'reliance program source is not canonicalizable JSON');
+    }
+    if (!exact(value, SOURCE_KEYS) || value['@version'] !== RELIANCE_PROGRAM_SOURCE_VERSION
+        || !exact(value.relying_party, RELYING_PARTY_KEYS)) {
+        refuse('source_schema_invalid', 'reliance program source is not a closed v1 object');
+    }
+    if (typeof value.program_id !== 'string' || !TRUST_ID.test(value.program_id)
+        || !Number.isSafeInteger(value.version) || value.version < 1
+        || typeof value.relying_party.id !== 'string' || !ID.test(value.relying_party.id)
+        || typeof value.relying_party.key_id !== 'string' || !TRUST_ID.test(value.relying_party.key_id)
+        || typeof value.root_caid !== 'string' || !CAID.test(value.root_caid)
+        || typeof value.action_digest !== 'string' || !DIGEST.test(value.action_digest)) {
+        refuse('source_binding_invalid', 'relying party, CAID, or action binding is invalid');
+    }
+    const validFrom = strictInstant(value.valid_from);
+    const expiresAt = strictInstant(value.expires_at);
+    if (!Number.isFinite(validFrom) || !Number.isFinite(expiresAt) || expiresAt <= validFrom) {
+        refuse('source_time_window_invalid', 'reliance program validity window is invalid');
+    }
+    if (!Array.isArray(value.stages) || value.stages.length < 1 || value.stages.length > MAX_STAGES) {
+        refuse('source_stage_count_invalid', 'reliance program stage count is invalid');
+    }
+    const stageIds = new Set();
+    for (const stage of value.stages) {
+        if (!exact(stage, STAGE_KEYS) || typeof stage.stage_id !== 'string'
+            || !TRUST_ID.test(stage.stage_id) || stageIds.has(stage.stage_id)
+            || !exactIdentifiers(stage.depends_on)
+            || !Array.isArray(stage.profiles) || stage.profiles.length < 1
+            || stage.profiles.length > MAX_PROFILES_PER_STAGE
+            || !validateRule(stage.rule, stage.profiles.length)) {
+            refuse('source_stage_invalid', 'reliance program stage is invalid');
+        }
+        stageIds.add(stage.stage_id);
+        const profileIds = new Set();
+        for (const reference of stage.profiles) {
+            if (!exact(reference, PROFILE_REF_KEYS)
+                || typeof reference.profile_id !== 'string' || !ID.test(reference.profile_id)
+                || profileIds.has(reference.profile_id)
+                || typeof reference.profile_hash !== 'string' || !DIGEST.test(reference.profile_hash)
+                || !Number.isSafeInteger(reference.evaluation_max_age_sec)
+                || reference.evaluation_max_age_sec < 1 || reference.evaluation_max_age_sec > 31_536_000
+                || typeof reference.revocation_required !== 'boolean') {
+                refuse('source_profile_reference_invalid', 'admissibility profile reference is invalid');
+            }
+            profileIds.add(reference.profile_id);
+        }
+    }
+    if (!exact(value.execution, EXECUTION_KEYS)
+        || !exactIdentifiers(value.execution.depends_on)
+        || value.execution.depends_on.length < 1
+        || !['receipt-program', 'action-escrow'].includes(value.execution.consequence_mode)
+        || (value.execution.consequence_mode === 'receipt-program'
+            && (!DIGEST.test(value.execution.capability_template_digest)
+                || value.execution.escrow_profile_digest !== null))
+        || (value.execution.consequence_mode === 'action-escrow'
+            && (!DIGEST.test(value.execution.escrow_profile_digest)
+                || value.execution.capability_template_digest !== null))) {
+        refuse('source_execution_invalid', 'reliance program consequence owner is invalid');
+    }
+}
+function signingBytes(source) {
+    return Buffer.concat([
+        Buffer.from(DOMAIN, 'utf8'),
+        Buffer.from(canonicalize(source), 'utf8'),
+    ]);
+}
+function publicKey(value) {
+    try {
+        if (value instanceof crypto.KeyObject) {
+            const key = value.type === 'public' ? value : crypto.createPublicKey(value);
+            return key.asymmetricKeyType === 'ed25519' ? key : null;
+        }
+        if (typeof value !== 'string' || !/^[A-Za-z0-9_-]+$/.test(value))
+            return null;
+        const bytes = Buffer.from(value, 'base64url');
+        if (bytes.toString('base64url') !== value)
+            return null;
+        const key = crypto.createPublicKey({ key: bytes, type: 'spki', format: 'der' });
+        return key.asymmetricKeyType === 'ed25519' ? key : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function relianceProgramSourceDigest(source) {
+    validateSource(source);
+    return digest(source);
+}
+export function signRelianceProgram(source, privateKey) {
+    validateSource(source);
+    const key = privateKey instanceof crypto.KeyObject
+        ? privateKey : crypto.createPrivateKey(privateKey);
+    if (key.asymmetricKeyType !== 'ed25519') {
+        refuse('signing_key_invalid', 'reliance program signing key must be Ed25519');
+    }
+    const frozenSource = canonicalCopy(source);
+    const signature = crypto.sign(null, signingBytes(frozenSource), key).toString('base64url');
+    return deepFreeze({
+        '@version': RELIANCE_PROGRAM_VERSION,
+        source: frozenSource,
+        source_digest: digest(frozenSource),
+        signature: {
+            algorithm: RELIANCE_PROGRAM_SIGNATURE_ALGORITHM,
+            key_id: frozenSource.relying_party.key_id,
+            value: signature,
+        },
+    });
+}
+export function verifyRelianceProgram(envelope, { trustedKeys = {} } = {}) {
+    if (!exact(envelope, ENVELOPE_KEYS) || envelope['@version'] !== RELIANCE_PROGRAM_VERSION
+        || !exact(envelope.signature, SIGNATURE_KEYS)
+        || envelope.signature.algorithm !== RELIANCE_PROGRAM_SIGNATURE_ALGORITHM
+        || typeof envelope.source_digest !== 'string' || !DIGEST.test(envelope.source_digest)
+        || typeof envelope.signature.key_id !== 'string'
+        || typeof envelope.signature.value !== 'string'
+        || !/^[A-Za-z0-9_-]+$/.test(envelope.signature.value)
+        || Buffer.from(envelope.signature.value, 'base64url').length !== 64
+        || Buffer.from(envelope.signature.value, 'base64url').toString('base64url') !== envelope.signature.value) {
+        return { valid: false, reason: 'envelope_schema_invalid', source_digest: null };
+    }
+    try {
+        validateSource(envelope.source);
+    }
+    catch (error) {
+        return { valid: false, reason: error instanceof RelianceProgramValidationError
+                ? error.code : 'source_schema_invalid', source_digest: null };
+    }
+    if (envelope.signature.key_id !== envelope.source.relying_party.key_id) {
+        return { valid: false, reason: 'signature_key_mismatch', source_digest: envelope.source_digest };
+    }
+    const computed = digest(envelope.source);
+    if (computed !== envelope.source_digest) {
+        return { valid: false, reason: 'source_digest_mismatch', source_digest: computed };
+    }
+    if (!isRecord(trustedKeys) || !Object.hasOwn(trustedKeys, envelope.signature.key_id)) {
+        return { valid: false, reason: 'relying_party_key_untrusted', source_digest: computed };
+    }
+    const signer = trustedKeys[envelope.signature.key_id];
+    if (!exact(signer, TRUSTED_SIGNER_KEYS)
+        || signer.relying_party_id !== envelope.source.relying_party.id) {
+        return { valid: false, reason: 'relying_party_identity_mismatch', source_digest: computed };
+    }
+    const key = publicKey(signer.public_key);
+    if (!key) {
+        return { valid: false, reason: 'relying_party_key_untrusted', source_digest: computed };
+    }
+    const valid = crypto.verify(null, signingBytes(envelope.source), key, Buffer.from(envelope.signature.value, 'base64url'));
+    if (!valid)
+        return { valid: false, reason: 'signature_invalid', source_digest: computed };
+    return {
+        valid: true,
+        reason: null,
+        source_digest: computed,
+        relying_party_id: envelope.source.relying_party.id,
+        key_id: envelope.signature.key_id,
+    };
+}
+function profileMap(profiles) {
+    if (!Array.isArray(profiles) || profiles.length > MAX_PROFILE_CATALOG) {
+        refuse('profile_catalog_invalid', 'profile catalog must be a bounded array');
+    }
+    const result = new Map();
+    for (const profile of profiles) {
+        if (!isDataRecord(profile) || typeof profile.id !== 'string' || !ID.test(profile.id)
+            || typeof profile.profile_hash !== 'string' || !DIGEST.test(profile.profile_hash)
+            || result.has(profile.id)) {
+            refuse('profile_catalog_invalid', 'profile catalog contains an invalid or duplicate entry');
+        }
+        const { profile_hash: profileHash, ...profileBody } = profile;
+        let computed;
+        try {
+            const canonical = canonicalize(profileBody);
+            if (Buffer.byteLength(canonical, 'utf8') > MAX_PROFILE_BYTES) {
+                refuse('profile_catalog_invalid', `profile ${profile.id} exceeds the size limit`);
+            }
+            computed = `sha256:${crypto.createHash('sha256').update(canonical, 'utf8').digest('hex')}`;
+        }
+        catch (error) {
+            if (error instanceof RelianceProgramValidationError)
+                throw error;
+            refuse('profile_integrity_invalid', `profile ${profile.id} is not canonicalizable`);
+        }
+        if (computed !== profileHash) {
+            refuse('profile_integrity_invalid', `profile ${profile.id} self-hash does not match its content`);
+        }
+        result.set(profile.id, profile);
+    }
+    return result;
+}
+function verifiedProfile(profile) {
+    const catalog = profileMap([profile]);
+    return catalog.values().next().value;
+}
+/**
+ * Adapt the existing Admissibility Profile evaluator into one constructor-
+ * pinned Trust Program verifier. The runtime artifact supplies evidence only;
+ * the profile, evaluator, projection, and clock are all relying-party owned.
+ */
+export function createAdmissibilityProfileTrustAdapter({ profile, evaluate, project, now, }) {
+    const pinnedProfile = canonicalCopy(verifiedProfile(profile));
+    if (typeof evaluate !== 'function' || typeof project !== 'function') {
+        refuse('admissibility_adapter_invalid', 'admissibility evaluator and projection are required');
+    }
+    const profileHash = pinnedProfile.profile_hash;
+    return createPinnedEvidenceAdapter({
+        policyDigest: profileHash,
+        trustedConfiguration: {
+            profile_id: pinnedProfile.id,
+            profile_hash: profileHash,
+        },
+        verify: async (evidence, context) => {
+            if (!exact(evidence, new Set(['bundle']))) {
+                return { valid: false, reason: 'admissibility_evidence_schema_invalid' };
+            }
+            const evaluationTime = typeof now === 'function' ? now() : now;
+            let evaluation;
+            try {
+                evaluation = await evaluate(pinnedProfile, evidence.bundle, {
+                    ...(evaluationTime === undefined ? {} : { now: evaluationTime }),
+                    expectedProfileHash: profileHash,
+                });
+            }
+            catch {
+                return { valid: false, reason: 'admissibility_evaluation_failed' };
+            }
+            if (!isDataRecord(evaluation)
+                || evaluation.profile_hash !== profileHash
+                || evaluation.verdict !== 'admissible') {
+                const verdict = typeof evaluation?.verdict === 'string'
+                    && /^[a-z_]{1,64}$/.test(evaluation.verdict)
+                    ? evaluation.verdict : 'unverifiable';
+                return { valid: false, reason: `admissibility_${verdict}` };
+            }
+            let projection;
+            try {
+                projection = await project({
+                    evaluation: Object.freeze(canonicalCopy(evaluation)),
+                    bundle: evidence.bundle,
+                });
+            }
+            catch {
+                return { valid: false, reason: 'admissibility_projection_failed' };
+            }
+            if (!isDataRecord(projection)) {
+                return { valid: false, reason: 'admissibility_projection_invalid' };
+            }
+            return {
+                valid: true,
+                binding_digest: context.expectedBindingDigest,
+                policy_digest: profileHash,
+                subjects: projection.subjects,
+                key_fingerprints: projection.key_fingerprints,
+                issued_at: projection.issued_at,
+                expires_at: projection.expires_at,
+                revocation_checked_at: projection.revocation_checked_at ?? null,
+            };
+        },
+    });
+}
+export function compileRelianceProgram(envelope, { trustedKeys = {}, profiles = [] } = {}) {
+    const verified = verifyRelianceProgram(envelope, { trustedKeys });
+    if (verified.valid !== true) {
+        refuse(verified.reason ?? 'source_unverified', 'reliance program source did not verify');
+    }
+    const signed = envelope;
+    const source = canonicalCopy(signed.source);
+    const catalog = profileMap(profiles);
+    const trace = [];
+    const stages = source.stages.map((stage) => ({
+        stage_id: stage.stage_id,
+        depends_on: [...stage.depends_on],
+        rule: canonicalCopy(stage.rule),
+        requirements: stage.profiles.map((reference, index) => {
+            const profile = catalog.get(reference.profile_id);
+            if (!profile || profile.profile_hash !== reference.profile_hash) {
+                refuse('profile_pin_mismatch', `profile ${reference.profile_id} does not match the relying-party pin`);
+            }
+            const requirementId = `admissibility-${String(index + 1).padStart(2, '0')}`;
+            trace.push({
+                stage_id: stage.stage_id,
+                requirement_id: requirementId,
+                profile_id: reference.profile_id,
+                profile_hash: reference.profile_hash,
+            });
+            return {
+                requirement_id: requirementId,
+                evidence_type: RELIANCE_PROGRAM_ADMISSIBILITY_EVIDENCE,
+                verifier_profile: RELIANCE_PROGRAM_ADMISSIBILITY_VERIFIER,
+                policy_digest: reference.profile_hash,
+                max_age_sec: reference.evaluation_max_age_sec,
+                revocation_required: reference.revocation_required,
+            };
+        }),
+    }));
+    const program = {
+        '@version': TRUST_PROGRAM_VERSION,
+        program_id: source.program_id,
+        version: source.version,
+        root_caid: source.root_caid,
+        action_digest: source.action_digest,
+        valid_from: source.valid_from,
+        expires_at: source.expires_at,
+        stages,
+        execution: canonicalCopy(source.execution),
+    };
+    const checked = validateTrustProgram(program);
+    if (!checked.valid) {
+        refuse('compiled_program_invalid', `compiled Trust Program is invalid: ${checked.reason}`);
+    }
+    return deepFreeze({
+        version: RELIANCE_PROGRAM_VERSION,
+        source_digest: verified.source_digest,
+        relying_party_id: verified.relying_party_id,
+        program,
+        program_digest: trustProgramDigest(program),
+        trace,
+        claim_boundary: 'Compilation proves a pinned RP program maps to the existing Trust Program; it does not prove evidence sufficiency, authorization, or execution.',
+    });
+}
+//# sourceMappingURL=reliance-program.js.map

package/dist/reliance-program.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reliance-program.js","sourceRoot":"","sources":["../src/reliance-program.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE1E,MAAM,CAAC,MAAM,+BAA+B,GAAG,+BAA+B,CAAC;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AACjE,MAAM,CAAC,MAAM,oCAAoC,GAAG,SAAS,CAAC;AAC9D,MAAM,CAAC,MAAM,uCAAuC,GAAG,6BAA6B,CAAC;AACrF,MAAM,CAAC,MAAM,uCAAuC,GAAG,6BAA6B,CAAC;AAErF,MAAM,MAAM,GAAG,GAAG,wBAAwB,IAAI,CAAC;AAC/C,MAAM,MAAM,GAAG,uBAAuB,CAAC;AACvC,MAAM,EAAE,GAAG,uCAAuC,CAAC;AACnD,MAAM,QAAQ,GAAG,qCAAqC,CAAC;AACvD,MAAM,IAAI,GAAG,qEAAqE,CAAC;AACnF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW;IACjE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW;CACnE,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAC3E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,YAAY,EAAE,cAAc,EAAE,wBAAwB,EAAE,qBAAqB;CAC9E,CAAC,CAAC;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,YAAY,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,uBAAuB;CACxF,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;AACpF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACjE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAC;AACxE,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AA4ClC,MAAM,OAAO,8BAA+B,SAAQ,SAAS;IAClD,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,OAAe;IAC3C,MAAM,IAAI,8BAA8B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7D,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,UAAU,EAAE,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,IAAiB;IAC9C,OAAO,YAAY,CAAC,KAAK,CAAC;WACrB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;WAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAI,KAAQ;IAChC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAmB,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,UAAU,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;WACtB,CAAC,sDAAsD,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACvF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,OAAO,GAAG,UAAU;IAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO;WACjD,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;WACzE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,YAAoB;IACvD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,WAAW;QACpC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC;QACrE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;WACf,OAAO,IAAI,CAAC,iBAAiB,KAAK,SAAS;WAC3C,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC;AACpG,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAClC,MAAM,CAAC,sBAAsB,EAAE,qDAAqD,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,+BAA+B;WAChF,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,uBAAuB,EAAE,mDAAmD,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACrE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;WACzD,OAAO,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;WAC9E,OAAO,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC;WAC5F,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;WAClE,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,wBAAwB,EAAE,mDAAmD,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QACzF,MAAM,CAAC,4BAA4B,EAAE,6CAA6C,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAChG,MAAM,CAAC,4BAA4B,EAAE,yCAAyC,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;eAC5D,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;eAC9D,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;eACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;eAC3D,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,sBAAsB;eAC9C,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,sBAAsB,EAAE,mCAAmC,CAAC,CAAC;QACtE,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC;mBAChC,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;mBAC1E,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC;mBACpC,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;mBAClF,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,sBAAsB,CAAC;mBACvD,SAAS,CAAC,sBAAsB,GAAG,CAAC,IAAI,SAAS,CAAC,sBAAsB,GAAG,UAAU;mBACrF,OAAO,SAAS,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBAC1D,MAAM,CAAC,kCAAkC,EAAE,4CAA4C,CAAC,CAAC;YAC3F,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC;WACpC,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC;WAC7C,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;WACrC,CAAC,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC;WAChF,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,KAAK,iBAAiB;eACrD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,0BAA0B,CAAC;mBACvD,KAAK,CAAC,SAAS,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC;WACpD,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,KAAK,eAAe;eACnD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,qBAAqB,CAAC;mBAClD,KAAK,CAAC,SAAS,CAAC,0BAA0B,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,0BAA0B,EAAE,+CAA+C,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC;QACH,IAAI,KAAK,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,KAAY,CAAC,CAAC;YACnF,OAAO,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAe;IACzD,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAe,EAAE,UAA0B;IAC7E,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,UAAU,YAAY,MAAM,CAAC,SAAS;QAChD,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAiB,CAAC,CAAC;IAC5D,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3F,OAAO,UAAU,CAAC;QAChB,UAAU,EAAE,wBAAwB;QACpC,MAAM,EAAE,YAAY;QACpB,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC;QACnC,SAAS,EAAE;YACT,SAAS,EAAE,oCAAoC;YAC/C,MAAM,EAAE,YAAY,CAAC,aAAa,CAAC,MAAM;YACzC,KAAK,EAAE,SAAS;SACjB;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAiB,EACjB,EAAE,WAAW,GAAG,EAAE,KAAgD,EAAE;IAEpE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,wBAAwB;WACjF,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;WAC1C,QAAQ,CAAC,SAAS,CAAC,SAAS,KAAK,oCAAoC;WACrE,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;WAClF,OAAO,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ;WAC7C,OAAO,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,QAAQ;WAC5C,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;WAClD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,MAAM,KAAK,EAAE;WAChE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC7G,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC;QAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,8BAA8B;gBAC5E,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QACvE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC;WAChC,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CACzB,IAAI,EACJ,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC7B,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CACnD,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IAC1F,OAAO;QACL,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,QAAQ;QACvB,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;QAClD,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAiB;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACtE,MAAM,CAAC,yBAAyB,EAAE,yCAAyC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;eAC7E,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;eAC9E,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,yBAAyB,EAAE,wDAAwD,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;QAC9D,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,iBAAiB,EAAE,CAAC;gBAC7D,MAAM,CAAC,yBAAyB,EAAE,WAAW,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC;YACpF,CAAC;YACD,QAAQ,GAAG,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAA8B;gBAAE,MAAM,KAAK,CAAC;YACjE,MAAM,CAAC,2BAA2B,EAAE,WAAW,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,CAAC,2BAA2B,EAAE,WAAW,OAAO,CAAC,EAAE,uCAAuC,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAmB,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sCAAsC,CAAC,EACrD,OAAO,EACP,QAAQ,EACR,OAAO,EACP,GAAG,GACqC;IACxC,MAAM,aAAa,GAAG,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,IAAI,OAAO,QAAQ,KAAK,UAAU,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QACpE,MAAM,CAAC,+BAA+B,EAAE,qDAAqD,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,CAAC;IAC/C,OAAO,2BAA2B,CAAC;QACjC,YAAY,EAAE,WAAW;QACzB,oBAAoB,EAAE;YACpB,UAAU,EAAE,aAAa,CAAC,EAAE;YAC5B,YAAY,EAAE,WAAW;SAC1B;QACD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;YAC3E,CAAC;YACD,MAAM,cAAc,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC/D,IAAI,UAAe,CAAC;YACpB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE;oBAC1D,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;oBAChE,mBAAmB,EAAE,WAAW;iBACjC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;mBACtB,UAAU,CAAC,YAAY,KAAK,WAAW;mBACvC,UAAU,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,OAAO,UAAU,EAAE,OAAO,KAAK,QAAQ;uBAClD,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC5C,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,OAAO,EAAE,EAAE,CAAC;YAC9D,CAAC;YACD,IAAI,UAAe,CAAC;YACpB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,OAAO,CAAC;oBACzB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;oBACpD,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;YACtE,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,cAAc,EAAE,OAAO,CAAC,qBAAqB;gBAC7C,aAAa,EAAE,WAAW;gBAC1B,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,qBAAqB,EAAE,UAAU,CAAC,qBAAqB,IAAI,IAAI;aAChE,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAiB,EACjB,EAAE,WAAW,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,KAG7B,EAAE;IAEN,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,mBAAmB,EAAE,wCAAwC,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,QAAsB,CAAC;IACtC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,KAAK,GAAqC,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAiB,EAAE,EAAE,CAAC,CAAC;QACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QACjC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/B,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAqB,EAAE,KAAa,EAAE,EAAE;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;gBAChE,MAAM,CAAC,sBAAsB,EAAE,WAAW,SAAS,CAAC,UAAU,uCAAuC,CAAC,CAAC;YACzG,CAAC;YACD,MAAM,aAAa,GAAG,iBAAiB,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,cAAc,EAAE,aAAa;gBAC7B,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,YAAY,EAAE,SAAS,CAAC,YAAY;aACrC,CAAC,CAAC;YACH,OAAO;gBACL,cAAc,EAAE,aAAa;gBAC7B,aAAa,EAAE,uCAAuC;gBACtD,gBAAgB,EAAE,uCAAuC;gBACzD,aAAa,EAAE,SAAS,CAAC,YAAY;gBACrC,WAAW,EAAE,SAAS,CAAC,sBAAsB;gBAC7C,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;aACnD,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CAAC,CAAC;IACJ,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,qBAAqB;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM;QACN,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;KAC3C,CAAC;IACF,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,CAAC,0BAA0B,EAAE,sCAAsC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,wBAAwB;QACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,OAAO;QACP,cAAc,EAAE,kBAAkB,CAAC,OAAO,CAAC;QAC3C,KAAK;QACL,cAAc,EAAE,iJAAiJ;KAClK,CAAC,CAAC;AACL,CAAC"}

package/dist/reliance-risk-crypto.d.ts

@@ -0,0 +1,28 @@
+import crypto from 'node:crypto';
+export type RiskRecord = Record<string, any>;
+export type TrustedRiskKeys = Record<string, {
+    issuer_id: string;
+    public_key: string;
+}>;
+export declare const RISK_DIGEST: RegExp;
+export declare const RISK_CAID: RegExp;
+export declare const RISK_ID: RegExp;
+export declare function riskRecord(value: unknown): value is RiskRecord;
+export declare function riskExact(value: unknown, keys: readonly string[]): value is RiskRecord;
+export declare function riskIdentifier(value: unknown): value is string;
+export declare function riskInstant(value: unknown): number;
+export declare function riskDigest(value: unknown): string;
+export declare function riskClone<T>(value: T): T;
+export declare function riskFreeze<T>(value: T): T;
+export declare function signRiskBody(version: string, bodyInput: RiskRecord, signer: {
+    issuer_id: string;
+    key_id: string;
+    private_key: crypto.KeyLike;
+}): RiskRecord;
+export declare function verifyRiskBody(artifact: unknown, version: string, trustedKeys: TrustedRiskKeys | undefined): {
+    valid: boolean;
+    reason: string | null;
+    body: RiskRecord | null;
+    artifact_digest: string | null;
+};
+//# sourceMappingURL=reliance-risk-crypto.d.ts.map

package/dist/reliance-risk-crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reliance-risk-crypto.d.ts","sourceRoot":"","sources":["../src/reliance-risk-crypto.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7C,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAExF,eAAO,MAAM,WAAW,QAA0B,CAAC;AACnD,eAAO,MAAM,SAAS,QAA6F,CAAC;AACpH,eAAO,MAAM,OAAO,QAA4C,CAAC;AAGjE,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAS9D;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,KAAK,IAAI,UAAU,CAGtF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE9D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOlD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAExC;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAKzC;AAMD,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,UAAU,EACrB,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAA;CAAE,GACzE,UAAU,CAcZ;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,eAAe,GAAG,SAAS,GACvC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CA4BpG"}

package/dist/reliance-risk-crypto.js

@@ -0,0 +1,110 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+import crypto from 'node:crypto';
+import { canonicalize, hashCanonical } from './execution-binding.js';
+export const RISK_DIGEST = /^sha256:[0-9a-f]{64}$/;
+export const RISK_CAID = /^caid:1:[a-z][a-z0-9-]*(?:\.[a-z][a-z0-9-]*)*\.[1-9][0-9]*:jcs-sha256:[A-Za-z0-9_-]{43}$/;
+export const RISK_ID = /^[A-Za-z0-9][A-Za-z0-9:_.@/+\-]{0,511}$/;
+const RFC3339 = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,9}))?Z$/;
+export function riskRecord(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null)
+        return false;
+    return Reflect.ownKeys(value).every((key) => {
+        if (typeof key !== 'string')
+            return false;
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        return descriptor?.enumerable === true && Object.hasOwn(descriptor, 'value');
+    });
+}
+export function riskExact(value, keys) {
+    return riskRecord(value) && Reflect.ownKeys(value).length === keys.length
+        && keys.every((key) => Object.hasOwn(value, key));
+}
+export function riskIdentifier(value) {
+    return typeof value === 'string' && RISK_ID.test(value);
+}
+export function riskInstant(value) {
+    if (typeof value !== 'string')
+        return NaN;
+    const match = value.match(RFC3339);
+    if (!match)
+        return NaN;
+    const parsed = Date.parse(value);
+    if (!Number.isFinite(parsed))
+        return NaN;
+    return new Date(parsed).toISOString().slice(0, 19) === value.slice(0, 19) ? parsed : NaN;
+}
+export function riskDigest(value) {
+    return `sha256:${hashCanonical(value)}`;
+}
+export function riskClone(value) {
+    return JSON.parse(canonicalize(value));
+}
+export function riskFreeze(value) {
+    if (!value || typeof value !== 'object' || Object.isFrozen(value))
+        return value;
+    Object.freeze(value);
+    for (const child of Object.values(value))
+        riskFreeze(child);
+    return value;
+}
+function signingBytes(version, body) {
+    return Buffer.from(`${version}\0${canonicalize(body)}`, 'utf8');
+}
+export function signRiskBody(version, bodyInput, signer) {
+    const key = signer.private_key instanceof crypto.KeyObject
+        ? signer.private_key : crypto.createPrivateKey(signer.private_key);
+    if (key.asymmetricKeyType !== 'ed25519')
+        throw new TypeError('risk artifact signing key must be Ed25519');
+    if (!riskIdentifier(signer.issuer_id) || !riskIdentifier(signer.key_id))
+        throw new TypeError('risk artifact issuer is invalid');
+    const body = riskClone({ ...bodyInput, issuer: { id: signer.issuer_id, key_id: signer.key_id } });
+    const bodyDigest = riskDigest(body);
+    const proof = {
+        algorithm: 'Ed25519',
+        key_id: signer.key_id,
+        body_digest: bodyDigest,
+        signature_b64u: crypto.sign(null, signingBytes(version, body), key).toString('base64url'),
+    };
+    return riskFreeze({ ...body, proof });
+}
+export function verifyRiskBody(artifact, version, trustedKeys) {
+    const refuse = (reason) => ({ valid: false, reason, body: null, artifact_digest: null });
+    try {
+        if (!riskRecord(artifact) || !riskRecord(artifact.proof) || !riskRecord(artifact.issuer))
+            return refuse('artifact_shape_invalid');
+        const proof = artifact.proof;
+        const { proof: _proof, ...body } = artifact;
+        if (artifact['@version'] !== version || !riskExact(artifact.issuer, ['id', 'key_id'])
+            || !riskIdentifier(artifact.issuer.id) || !riskIdentifier(artifact.issuer.key_id)
+            || !riskExact(proof, ['algorithm', 'key_id', 'body_digest', 'signature_b64u'])
+            || proof.algorithm !== 'Ed25519' || proof.key_id !== artifact.issuer.key_id
+            || typeof proof.body_digest !== 'string' || !RISK_DIGEST.test(proof.body_digest)
+            || typeof proof.signature_b64u !== 'string' || !/^[A-Za-z0-9_-]+$/.test(proof.signature_b64u)) {
+            return refuse('artifact_signature_envelope_invalid');
+        }
+        if (riskDigest(body) !== proof.body_digest)
+            return refuse('digest_mismatch');
+        const pin = trustedKeys?.[artifact.issuer.key_id];
+        if (!pin || pin.issuer_id !== artifact.issuer.id)
+            return refuse('issuer_untrusted');
+        const keyBytes = Buffer.from(pin.public_key, 'base64url');
+        if (keyBytes.toString('base64url') !== pin.public_key)
+            return refuse('pinned_key_invalid');
+        const key = crypto.createPublicKey({ key: keyBytes, type: 'spki', format: 'der' });
+        if (key.asymmetricKeyType !== 'ed25519')
+            return refuse('pinned_key_invalid');
+        const signature = Buffer.from(proof.signature_b64u, 'base64url');
+        if (signature.length !== 64 || signature.toString('base64url') !== proof.signature_b64u
+            || !crypto.verify(null, signingBytes(version, body), key, signature))
+            return refuse('signature_invalid');
+        return { valid: true, reason: null, body, artifact_digest: riskDigest(artifact) };
+    }
+    catch {
+        return refuse('artifact_invalid');
+    }
+}
+//# sourceMappingURL=reliance-risk-crypto.js.map

package/dist/reliance-risk-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reliance-risk-crypto.js","sourceRoot":"","sources":["../src/reliance-risk-crypto.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAKrE,MAAM,CAAC,MAAM,WAAW,GAAG,uBAAuB,CAAC;AACnD,MAAM,CAAC,MAAM,SAAS,GAAG,0FAA0F,CAAC;AACpH,MAAM,CAAC,MAAM,OAAO,GAAG,yCAAyC,CAAC;AACjE,MAAM,OAAO,GAAG,oEAAoE,CAAC;AAErF,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,UAAU,EAAE,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,IAAuB;IAC/D,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;WACpE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC;IACzC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,UAAU,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,SAAS,CAAI,KAAQ;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,UAAU,CAAI,KAAQ;IACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAmB,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,IAAgB;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,KAAK,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,SAAqB,EACrB,MAA0E;IAE1E,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,YAAY,MAAM,CAAC,SAAS;QACxD,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IAC1G,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAChI,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG;QACZ,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,UAAU;QACvB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC1F,CAAC;IACF,OAAO,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAiB,EACjB,OAAe,EACf,WAAwC;IAExC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClI,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;QAC5C,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;eAC9E,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;eAC9E,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;eAC3E,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM;eACxE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;eAC7E,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAClG,OAAO,MAAM,CAAC,qCAAqC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,WAAW;YAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC1D,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACjE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,cAAc;eAChF,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC7G,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}

package/dist/remedy-program.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remedy-program.d.ts","sourceRoot":"","sources":["../src/remedy-program.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAKH,eAAO,MAAM,sBAAsB,sCAAsC,CAAC;AAmH1E,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAGtC,MAAM,WAAW,kBAAmB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAoB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAClE,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChE,GAAG,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACnF,cAAc,CAAC,KAAK,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,kBAAkB,CAAC;KAC3B,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,yBAA0B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxE,KAAK,EAAE,kBAAkB,CAAC;IAC1B,oBAAoB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,gBAAgB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,yBAAyB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,mBAAmB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjF,4BAA4B,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1F,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AA2TD;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,kBAAkB,CA4F5D;AAUD,+EAA+E;AAC/E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,yBAAyB;oBA8J7C,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;oBA2mBtC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;8BA7c5B,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;qCAnE/B,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;yBAsHlD,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;6BA0DlC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;yBA+F1C,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;4BAqEnC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;6BAuErC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;4BAkEvC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;GA8D5E;;;;;;AAED,wBAIE"}
+{"version":3,"file":"remedy-program.d.ts","sourceRoot":"","sources":["../src/remedy-program.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAKH,eAAO,MAAM,sBAAsB,sCAAsC,CAAC;AAmH1E,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAGtC,MAAM,WAAW,kBAAmB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAoB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAClE,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChE,GAAG,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACnF,cAAc,CAAC,KAAK,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,kBAAkB,CAAC;KAC3B,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,yBAA0B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxE,KAAK,EAAE,kBAAkB,CAAC;IAC1B,oBAAoB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,gBAAgB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,yBAAyB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,mBAAmB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjF,4BAA4B,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1F,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AA2TD;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,kBAAkB,CA4F5D;AAUD,+EAA+E;AAC/E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,yBAAyB;oBA8J7C,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;oBAsnBtC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;8BAxd5B,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;qCAnE/B,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;yBAsHlD,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;6BA0DlC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;yBA0G1C,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;4BAqEnC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;6BAuErC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;4BAkEvC,OAAO,KAAG,OAAO,CAAC,mBAAmB,CAAC;GA8D5E;;;;;;AAED,wBAIE"}