@gate-forge/pack-playwright 0.1.0

package/dist/witness/browser.js

@@ -0,0 +1,580 @@
+/**
+ * The engine-owned browser (plan Phase 1 item 4): Chromium contexts the
+ * WITNESS process creates and drives itself — one isolated context per
+ * supervisor-opened test session, closed when the session seals.
+ *
+ * Test code NEVER touches these pages: the worker holds no handle, no
+ * URL, and no capability over them. The engine executes the constrained
+ * surface operations (create/read/update/archive) with the
+ * consumer-declared locators, and observes each step itself:
+ * - the rendered control it clicked and the values it typed;
+ * - the actual application request the action caused (captured from the
+ *   engine page's own network, app-origin only);
+ * - the resulting navigation and the rendered row/form it read back.
+ *
+ * Forgery resistance (why this channel is proof):
+ * - fabricated DOM (`page.evaluate` in the worker page) is irrelevant:
+ *   the engine reads its OWN page;
+ * - mocked responses (`page.route` in the worker) are irrelevant: the
+ *   worker cannot route the engine's traffic;
+ * - direct API/Node mutations bypass the engine page entirely: no
+ *   engine action runs, so no engine-observed action/visible records
+ *   exist for them — invented suite-submitted records never satisfy;
+ * - HTTP-200-while-error: the engine asserts the rendered status
+ *   itself (created/archived values) AND captures the app response
+ *   status — a displayed error fails the action fail-closed.
+ *
+ * Surface selectors are LOCATORS, never proof: a lying descriptor only
+ * makes the engine fail to find elements (fail closed).
+ */
+import { chromium } from 'playwright';
+import { declaredSurfaceFields, renderSurfaceTemplate, } from '../surface.js';
+/** Fail-closed engine browser error (surfaced as 409/503 downstream). */
+export class EngineBrowserError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'EngineBrowserError';
+    }
+}
+/** Bounded wait for a rendered selector (fail closed, never indefinite). */
+const ENGINE_STEP_TIMEOUT_MS = 15_000;
+/**
+ * Owns the engine Chromium instance and its per-session contexts.
+ *
+ * Args:
+ *   launcher: browser launcher (default: the pinned Chromium). Tests
+ *     inject a failing launcher to prove the fail-closed path; the
+ *     driving and observation below stay engine code regardless of
+ *     which executable launches.
+ */
+export class EngineBrowserManager {
+    launcher;
+    browser = null;
+    launching = null;
+    sessions = new Map();
+    /**
+     * Pinned `--host-resolver-rules` value binding every attested hostname
+     * to its startup-approved loopback IPs. Set once at witness startup
+     * (before any launch); the browser is then incapable of resolving
+     * those names anywhere but loopback, regardless of later DNS changes.
+     */
+    dnsPinRules = null;
+    constructor(launcher = chromium) {
+        this.launcher = launcher;
+    }
+    /**
+     * Installs the DNS pin rules for the next (first) launch.
+     *
+     * Args:
+     *   rules: the `--host-resolver-rules` value, or null when nothing is
+     *     pinned (plain launch, previous behavior).
+     *
+     * Throws:
+     *   EngineBrowserError: when the browser already launched — pins must
+     *   precede every navigation (fail closed, never silently unbound).
+     */
+    setDnsPinRules(rules) {
+        if (this.browser !== null || this.launching !== null) {
+            throw new EngineBrowserError('DNS pin rules arrive after browser launch: pins must precede every navigation');
+        }
+        this.dnsPinRules = rules;
+    }
+    /**
+     * Returns the engine page for one session, creating the isolated
+     * context on first use.
+     *
+     * Args:
+     *   sessionId: the supervisor-opened session the context belongs to.
+     *
+     * Returns:
+     *   Promise<Page>: the session's engine-owned page.
+     *
+     * Throws:
+     *   EngineBrowserError: when Chromium cannot launch (fail closed —
+     *     the capability is honestly unavailable at runtime).
+     */
+    async pageFor(sessionId) {
+        const existing = this.sessions.get(sessionId);
+        if (existing !== undefined)
+            return existing.page;
+        const browser = await this.ensureBrowser();
+        const context = await browser.newContext();
+        const page = await context.newPage();
+        this.sessions.set(sessionId, { context, page });
+        return page;
+    }
+    /**
+     * Closes and forgets one session's engine context (session seal).
+     * Late engine calls for the session then recreate nothing — callers
+     * must refuse sealed sessions before driving (they do: every browser
+     * endpoint requires an OPEN session first).
+     *
+     * Args:
+     *   sessionId: the sealed session.
+     */
+    async closeSession(sessionId) {
+        const entry = this.sessions.get(sessionId);
+        if (entry === undefined)
+            return;
+        this.sessions.delete(sessionId);
+        await entry.context.close().catch(() => undefined);
+    }
+    /** Closes every engine context and the browser (witness stop). */
+    async closeAll() {
+        const entries = [...this.sessions.values()];
+        this.sessions.clear();
+        await Promise.all(entries.map((entry) => entry.context.close().catch(() => undefined)));
+        const browser = this.browser;
+        this.browser = null;
+        this.launching = null;
+        if (browser !== null)
+            await browser.close().catch(() => undefined);
+    }
+    /** Lazy Chromium launch (single flight; fail closed with the cause). */
+    async ensureBrowser() {
+        if (this.browser !== null)
+            return this.browser;
+        this.launching ??= this.launcher
+            .launch({
+            headless: true,
+            // DNS binding (loopback-pins): attested hostnames resolve ONLY
+            // to their startup-approved loopback IPs inside this browser —
+            // a mid-run DNS change cannot move its traffic off loopback.
+            ...(this.dnsPinRules !== null ? { args: [`--host-resolver-rules=${this.dnsPinRules}`] } : {}),
+        })
+            .then((browser) => {
+            this.browser = browser;
+            return browser;
+        })
+            .catch((error) => {
+            this.launching = null;
+            throw new EngineBrowserError(`the engine-owned browser cannot launch: ${error.message} — browser ` +
+                'contracts stay blocking until a working Chromium is available to the witness process');
+        });
+        return this.launching;
+    }
+}
+/** Captures app-origin responses on one page for the action window. */
+async function captureExchanges(page, appOrigin, action) {
+    const captured = [];
+    // Replacement-origin enforcement (fake-frontend fix 2026-09-14): every
+    // URL the engine page touches during the window — main-frame
+    // navigations AND every hop of every redirect chain — must stay on the
+    // trusted origin. A form submit, link, or redirect landing elsewhere
+    // fails the action closed instead of observing a foreign frontend.
+    const violations = [];
+    const checkUrl = (url, where) => {
+        let origin;
+        try {
+            origin = new URL(url).origin;
+        }
+        catch {
+            return; // non-URL (about:blank, data:) — the final page.url check covers landing
+        }
+        if (origin !== appOrigin)
+            violations.push(`${where}: ${url}`);
+    };
+    // Main-frame navigation guard: page.url() is the main frame's URL,
+    // so asserting it on every frame event covers navigations while
+    // subresource loads (same URL, no-op) cannot false-positive.
+    const mainFrameListener = () => {
+        const current = page.url();
+        if (current.startsWith('about:') || current.startsWith('data:'))
+            return;
+        checkUrl(current, 'navigation to foreign origin');
+    };
+    page.on('framenavigated', mainFrameListener);
+    const listener = (response) => {
+        // Walk the full redirect chain: the final URL AND every hop must be
+        // same-origin — a 303 to a foreign frontend is rejected even though
+        // the 303 itself came from the app. Scoped to redirects and document
+        // navigations: plain cross-origin SUBRESOURCES (fonts, icons) are
+        // not navigations, never become evidence, and must not false-positive.
+        const request = response.request();
+        const chain = [request.url()];
+        let previous = request.redirectedFrom();
+        while (previous !== null && typeof previous === 'object' && 'url' in previous) {
+            const hop = previous;
+            chain.push(hop.url());
+            previous = hop.redirectedFrom();
+        }
+        const involvedRedirect = chain.length > 1;
+        let resourceType = '';
+        try {
+            resourceType = request.resourceType();
+        }
+        catch {
+            resourceType = '';
+        }
+        if (involvedRedirect || resourceType === 'document') {
+            for (const url of chain)
+                checkUrl(url, 'redirect chain left the trusted origin');
+        }
+        let url;
+        try {
+            url = new URL(response.url());
+        }
+        catch {
+            return;
+        }
+        if (url.origin !== appOrigin)
+            return;
+        const chunks = [];
+        void response
+            .body()
+            .then((body) => chunks.push(body))
+            .catch(() => undefined)
+            .finally(() => {
+            captured.push({
+                method: response.request().method().toUpperCase(),
+                path: canonicalExchangePath(url.pathname),
+                status: response.status(),
+                body: Buffer.concat(chunks).slice(0, 16384),
+            });
+        });
+    };
+    page.on('response', listener);
+    // The drive's own error (status mismatch, missing row) is recorded
+    // but yields to origin violations: a redirect escape is the stronger
+    // security signal and must name itself even when the foreign page
+    // ALSO fails a rendered check.
+    let driveError = null;
+    try {
+        await action();
+        // Let in-flight response bodies settle (bounded): the mutation's own
+        // exchange must be captured before the window closes.
+        await page.waitForTimeout(250);
+    }
+    catch (error) {
+        driveError = error;
+    }
+    finally {
+        page.off('response', listener);
+        page.off('framenavigated', mainFrameListener);
+    }
+    // Await the pending body reads (bounded by the step timeout overall).
+    await page.waitForTimeout(250);
+    // The landing itself must be the trusted origin (backstop for
+    // navigations that produced no response event).
+    checkUrl(page.url(), 'engine page landed on a foreign origin');
+    if (violations.length > 0) {
+        throw new EngineBrowserError(`browser action left the trusted application origin '${appOrigin}': ` +
+            `${violations.slice(0, 3).join('; ')} — replacement origins and redirects are rejected; ` +
+            'no action record is issued for a foreign frontend');
+    }
+    if (driveError !== null)
+        throw driveError;
+    return captured;
+}
+/** Canonicalizes an engine-observed path (lockstep with the witness). */
+function canonicalExchangePath(pathname) {
+    let path = pathname.split('?')[0]?.split('#')[0] ?? '/';
+    if (!path.startsWith('/'))
+        path = `/${path}`;
+    if (path.length > 1)
+        path = path.replace(/\/+$/, '');
+    return path;
+}
+/** Reads one row's cells (trimmed text, DOM order). */
+async function rowCells(row) {
+    const cells = row.locator('td');
+    const count = await cells.count();
+    const out = [];
+    for (let i = 0; i < count; i++) {
+        out.push(((await cells.nth(i).textContent()) ?? '').trim());
+    }
+    return out;
+}
+/** Every entity id rendered in the list right now. */
+async function collectIds(page, surface) {
+    const rows = page.locator(surface.list.rowSelector);
+    const count = await rows.count();
+    const ids = new Set();
+    for (let i = 0; i < count; i++) {
+        const cells = await rowCells(rows.nth(i));
+        const id = (cells[surface.list.idCellIndex] ?? '').trim();
+        if (id !== '')
+            ids.add(id);
+    }
+    return ids;
+}
+/** The rendered row for one entity (null when the UI exposes none). */
+async function findRow(page, surface, entityId) {
+    const rows = page.locator(surface.list.rowSelector);
+    const count = await rows.count();
+    for (let i = 0; i < count; i++) {
+        const row = rows.nth(i);
+        const cells = await rowCells(row);
+        if ((cells[surface.list.idCellIndex] ?? '').trim() === entityId)
+            return row;
+    }
+    return null;
+}
+/** The rendered field values of one row. */
+async function readRowFields(page, surface, row) {
+    void page;
+    const cells = await rowCells(row);
+    const fields = {};
+    for (const [name, index] of Object.entries(surface.list.fieldCellIndexes)) {
+        fields[name] = (cells[index] ?? '').trim();
+    }
+    return fields;
+}
+/** Fills exactly the declared inputs on the current form. */
+async function fillFormFields(page, selectors, fields) {
+    for (const [name, selector] of Object.entries(selectors)) {
+        const value = fields[name];
+        if (value === undefined)
+            continue;
+        await page.locator(selector).fill(value, { timeout: ENGINE_STEP_TIMEOUT_MS });
+    }
+}
+/** Reads the current form's input values back. */
+async function readFormFields(page, selectors) {
+    const fields = {};
+    for (const [name, selector] of Object.entries(selectors)) {
+        fields[name] = await page.locator(selector).inputValue({ timeout: ENGINE_STEP_TIMEOUT_MS });
+    }
+    return fields;
+}
+/** Navigates to the list and proves it rendered. */
+async function gotoList(page, appBase, surface) {
+    await page.goto(`${appBase}${surface.list.path}`, { timeout: ENGINE_STEP_TIMEOUT_MS });
+    await page.waitForSelector(surface.list.readySelector, { timeout: ENGINE_STEP_TIMEOUT_MS });
+}
+/** Waits for the post-action landing and proves it rendered. */
+async function waitAfterAction(page, surface) {
+    await page.waitForURL((url) => url.pathname === surface.afterAction.path, {
+        timeout: ENGINE_STEP_TIMEOUT_MS,
+    });
+    await page.waitForSelector(surface.list.readySelector, { timeout: ENGINE_STEP_TIMEOUT_MS });
+}
+/**
+ * Drives one constrained surface operation on the engine page and
+ * observes every step itself.
+ *
+ * Args:
+ *   page: the session's engine-owned page.
+ *   appBase: loopback app base the engine navigates (validated upstream).
+ *   surface: the validated consumer descriptor (locators only).
+ *   operation: the constrained operation to perform.
+ *   input: entered fields (create/update) and/or the target entity id.
+ *
+ * Returns:
+ *   Promise<EngineActionObservation>: the engine's own observation —
+ *   observed entity id, entered + rendered fields, captured exchanges.
+ *
+ * Throws:
+ *   EngineBrowserError: fail-closed on every untrusted outcome —
+ *   missing rows, ambiguous creation, wrong rendered status, no
+ *   application request, or an application error status.
+ */
+export async function driveEngineAction(page, appBase, surface, operation, input) {
+    const appOrigin = new URL(appBase).origin;
+    try {
+        return await driveEngineActionInner(page, appBase, appOrigin, surface, operation, input);
+    }
+    catch (error) {
+        // Every Playwright failure (timeout, navigation, detached frame) is
+        // an engine-observed unsuccessful action — never a 500: the test
+        // fails and the gate blocks with the precise cause.
+        if (error instanceof EngineBrowserError)
+            throw error;
+        throw new EngineBrowserError(`browser.${operation} failed: ${error.message}`);
+    }
+}
+/** The operation dispatch (wrapped by {@link driveEngineAction}). */
+async function driveEngineActionInner(page, appBase, appOrigin, surface, operation, input) {
+    switch (operation) {
+        case 'create': {
+            const fields = declaredSurfaceFields('browser.create', input.fields ?? {}, surface.create.fields);
+            let entityId = '';
+            let rendered = {};
+            const exchanges = await captureExchanges(page, appOrigin, async () => {
+                await gotoList(page, appBase, surface);
+                const before = await collectIds(page, surface);
+                await page.goto(`${appBase}${surface.create.formPath}`, { timeout: ENGINE_STEP_TIMEOUT_MS });
+                await page.waitForSelector(surface.create.formReadySelector, { timeout: ENGINE_STEP_TIMEOUT_MS });
+                await fillFormFields(page, surface.create.fields, fields);
+                await page.locator(surface.create.submitSelector).click({ timeout: ENGINE_STEP_TIMEOUT_MS });
+                await waitAfterAction(page, surface);
+                const created = [...(await collectIds(page, surface))].filter((id) => !before.has(id));
+                if (created.length !== 1) {
+                    throw new EngineBrowserError(`browser.create observed ${String(created.length)} new entities, expected exactly one — ` +
+                        'the rendered outcome is ambiguous, so no action record is issued');
+                }
+                entityId = created[0];
+                const row = await findRow(page, surface, entityId);
+                if (row === null) {
+                    throw new EngineBrowserError(`browser.create: the rendered list exposes no row for the created entity ${entityId}`);
+                }
+                rendered = await readRowFields(page, surface, row);
+                if (surface.status.createdValue !== undefined) {
+                    const shown = rendered[surface.status.field] ?? '';
+                    if (shown !== surface.status.createdValue) {
+                        throw new EngineBrowserError(`browser.create: entity ${entityId} rendered ${surface.status.field} '${shown}', ` +
+                            `expected '${surface.status.createdValue}' — the application displays an error state, ` +
+                            'so the action fails instead of earning proof');
+                    }
+                }
+            });
+            requireAppRequest(exchanges, 'create');
+            return { entityId, enteredFields: fields, renderedFields: rendered, exchanges };
+        }
+        case 'read': {
+            const entityId = input.entityId ?? '';
+            if (entityId === '')
+                throw new EngineBrowserError('browser.read requires { entityId }');
+            let rendered = {};
+            const exchanges = await captureExchanges(page, appOrigin, async () => {
+                await gotoList(page, appBase, surface);
+                const row = await findRow(page, surface, entityId);
+                if (row === null) {
+                    throw new EngineBrowserError(`browser.read: the rendered UI exposes no row for ${entityId}`);
+                }
+                const edit = row.locator(surface.edit.linkSelector);
+                if ((await edit.count()) === 0) {
+                    throw new EngineBrowserError(`browser.read: the rendered UI exposes no navigation control for ${entityId}`);
+                }
+                await edit.click({ timeout: ENGINE_STEP_TIMEOUT_MS });
+                await page.waitForSelector(renderSurfaceTemplate(surface.edit.formReadySelectorTemplate, entityId), {
+                    timeout: ENGINE_STEP_TIMEOUT_MS,
+                });
+                rendered = await readFormFields(page, surface.edit.fields);
+            });
+            return { entityId, enteredFields: {}, renderedFields: rendered, exchanges };
+        }
+        case 'update': {
+            const entityId = input.entityId ?? '';
+            if (entityId === '')
+                throw new EngineBrowserError('browser.update requires { entityId }');
+            const fields = declaredSurfaceFields('browser.update', input.fields ?? {}, surface.edit.fields);
+            let rendered = {};
+            const exchanges = await captureExchanges(page, appOrigin, async () => {
+                await gotoList(page, appBase, surface);
+                const row = await findRow(page, surface, entityId);
+                if (row === null) {
+                    throw new EngineBrowserError(`browser.update: the rendered UI exposes no row for ${entityId}`);
+                }
+                await row.locator(surface.edit.linkSelector).click({ timeout: ENGINE_STEP_TIMEOUT_MS });
+                await page.waitForSelector(renderSurfaceTemplate(surface.edit.formReadySelectorTemplate, entityId), {
+                    timeout: ENGINE_STEP_TIMEOUT_MS,
+                });
+                await fillFormFields(page, surface.edit.fields, fields);
+                await page
+                    .locator(renderSurfaceTemplate(surface.edit.saveSelectorTemplate, entityId))
+                    .first()
+                    .click({ timeout: ENGINE_STEP_TIMEOUT_MS });
+                await waitAfterAction(page, surface);
+                const updatedRow = await findRow(page, surface, entityId);
+                if (updatedRow === null) {
+                    throw new EngineBrowserError(`browser.update: entity ${entityId} vanished after update`);
+                }
+                rendered = await readRowFields(page, surface, updatedRow);
+            });
+            requireAppRequest(exchanges, 'update');
+            return { entityId, enteredFields: fields, renderedFields: rendered, exchanges };
+        }
+        case 'delete': {
+            const entityId = input.entityId ?? '';
+            if (entityId === '')
+                throw new EngineBrowserError('browser.archive requires { entityId }');
+            const deleteFields = { ...surface.deleteFields };
+            let rendered = {};
+            const exchanges = await captureExchanges(page, appOrigin, async () => {
+                await gotoList(page, appBase, surface);
+                const row = await findRow(page, surface, entityId);
+                if (row === null) {
+                    throw new EngineBrowserError(`browser.archive: the rendered UI exposes no row for ${entityId}`);
+                }
+                const control = row.locator(renderSurfaceTemplate(surface.archive.controlSelectorTemplate, entityId));
+                if ((await control.count()) === 0) {
+                    throw new EngineBrowserError(`browser.archive: entity ${entityId} exposes no archive control (already archived?)`);
+                }
+                await control.click({ timeout: ENGINE_STEP_TIMEOUT_MS });
+                await waitAfterAction(page, surface);
+                const archivedRow = await findRow(page, surface, entityId);
+                if (archivedRow === null) {
+                    throw new EngineBrowserError(`browser.archive: entity ${entityId} vanished after archive`);
+                }
+                rendered = await readRowFields(page, surface, archivedRow);
+                if (surface.status.archivedValue !== undefined) {
+                    const shown = rendered[surface.status.field] ?? '';
+                    if (shown !== surface.status.archivedValue) {
+                        throw new EngineBrowserError(`browser.archive: entity ${entityId} rendered ${surface.status.field} '${shown}', ` +
+                            `expected '${surface.status.archivedValue}' — the application displays an error ` +
+                            'state, so the action fails instead of earning proof');
+                    }
+                }
+            });
+            requireAppRequest(exchanges, 'delete');
+            return { entityId, enteredFields: deleteFields, renderedFields: rendered, exchanges };
+        }
+    }
+}
+/**
+ * Requires that the action window captured at least one application
+ * request that the app did not reject: a rendered click that caused no
+ * request (or only error statuses) proves no application behavior.
+ *
+ * Args:
+ *   exchanges: the engine-captured app-origin exchanges.
+ *   operation: the performed operation (diagnostic only).
+ *
+ * Throws:
+ *   EngineBrowserError: when no acceptable application request exists.
+ */
+function requireAppRequest(exchanges, operation) {
+    const mutation = exchanges.filter((entry) => entry.method !== 'GET' && entry.method !== 'HEAD');
+    if (mutation.length === 0) {
+        throw new EngineBrowserError(`browser.${operation}: the engine captured no application request for the action — ` +
+            'a rendered click that caused no request proves no application behavior');
+    }
+    const accepted = mutation.find((entry) => entry.status < 400);
+    if (accepted === undefined) {
+        throw new EngineBrowserError(`browser.${operation}: every captured application request was rejected ` +
+            `(${mutation.map((entry) => `${entry.method} ${entry.path} → ${String(entry.status)}`).join(', ')}) — ` +
+            'the application refused the action, so it fails instead of earning proof');
+    }
+}
+/**
+ * Re-reads the rendered result for one entity on the engine page
+ * (the `visible.confirm` counterpart): row read for mutations, form
+ * read for reads.
+ *
+ * Args:
+ *   page: the session's engine-owned page.
+ *   appBase: loopback app base.
+ *   surface: the validated consumer descriptor.
+ *   operation: the original action (decides row vs form readback).
+ *   entityId: the engine-observed entity id.
+ *
+ * Returns:
+ *   Promise<Record<string, string>>: the rendered fields.
+ *
+ * Throws:
+ *   EngineBrowserError: when the UI no longer exposes the entity.
+ */
+export async function readEngineVisible(page, appBase, surface, operation, entityId) {
+    try {
+        await gotoList(page, appBase, surface);
+        const row = await findRow(page, surface, entityId);
+        if (row === null) {
+            throw new EngineBrowserError(`browser.visible: the rendered UI exposes no row for ${entityId}`);
+        }
+        if (operation === 'read') {
+            await row.locator(surface.edit.linkSelector).click({ timeout: ENGINE_STEP_TIMEOUT_MS });
+            await page.waitForSelector(renderSurfaceTemplate(surface.edit.formReadySelectorTemplate, entityId), {
+                timeout: ENGINE_STEP_TIMEOUT_MS,
+            });
+            return readFormFields(page, surface.edit.fields);
+        }
+        return readRowFields(page, surface, row);
+    }
+    catch (error) {
+        if (error instanceof EngineBrowserError)
+            throw error;
+        throw new EngineBrowserError(`browser.visible failed: ${error.message}`);
+    }
+}
+//# sourceMappingURL=browser.js.map

package/dist/witness/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/witness/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,QAAQ,EAA6E,MAAM,YAAY,CAAC;AACjH,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GAEtB,MAAM,eAAe,CAAC;AA+BvB,yEAAyE;AACzE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAOD,4EAA4E;AAC5E,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAoB;IAYF;IAXrB,OAAO,GAAmB,IAAI,CAAC;IAC/B,SAAS,GAA4B,IAAI,CAAC;IACjC,QAAQ,GAAG,IAAI,GAAG,EAAmD,CAAC;IACvF;;;;;OAKG;IACK,WAAW,GAAkB,IAAI,CAAC;IAE1C,YAA6B,WAAkC,QAAQ;QAA1C,aAAQ,GAAR,QAAQ,CAAkC;IAAG,CAAC;IAE3E;;;;;;;;;;OAUG;IACH,cAAc,CAAC,KAAoB;QACjC,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACrD,MAAM,IAAI,kBAAkB,CAC1B,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,QAAQ;QACZ,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;IAED,wEAAwE;IAChE,KAAK,CAAC,aAAa;QACzB,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QAC/C,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,QAAQ;aAC7B,MAAM,CAAC;YACN,QAAQ,EAAE,IAAI;YACd,+DAA+D;YAC/D,+DAA+D;YAC/D,6DAA6D;YAC7D,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,yBAAyB,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9F,CAAC;aACD,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACvB,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAC1B,2CAA4C,KAAe,CAAC,OAAO,aAAa;gBAC9E,sFAAsF,CACzF,CAAC;QACJ,CAAC,CAAC,CAAC;QACL,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AAED,uEAAuE;AACvE,KAAK,UAAU,gBAAgB,CAC7B,IAAU,EACV,SAAiB,EACjB,MAA2B;IAE3B,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,uEAAuE;IACvE,6DAA6D;IAC7D,uEAAuE;IACvE,qEAAqE;IACrE,mEAAmE;IACnE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QAAM,IAAI,MAAc,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,yEAAyE;QACnF,CAAC;QACD,IAAI,MAAM,KAAK,SAAS;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC;IACF,mEAAmE;IACnE,gEAAgE;IAChE,6DAA6D;IAC7D,MAAM,iBAAiB,GAAG,GAAS,EAAE;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO;QACxE,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,CAAC,QAAkB,EAAQ,EAAE;QAC5C,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,kEAAkE;QAClE,uEAAuE;QACvE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,KAAK,GAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACxC,IAAI,QAAQ,GAAY,OAAO,CAAC,cAAc,EAAE,CAAC;QACjD,OAAO,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,IAAK,QAAoC,EAAE,CAAC;YAC3G,MAAM,GAAG,GAAG,QAAwD,CAAC;YACrE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,QAAQ,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1C,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,gBAAgB,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YACpD,KAAK,MAAM,GAAG,IAAI,KAAK;gBAAE,QAAQ,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,QAAQ;aACV,IAAI,EAAE;aACN,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACjC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;aACtB,OAAO,CAAC,GAAG,EAAE;YACZ,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;gBACjD,IAAI,EAAE,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACzB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9B,mEAAmE;IACnE,qEAAqE;IACrE,kEAAkE;IAClE,+BAA+B;IAC/B,IAAI,UAAU,GAAY,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,EAAE,CAAC;QACf,qEAAqE;QACrE,sDAAsD;QACtD,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IAChD,CAAC;IACD,sEAAsE;IACtE,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IAC/B,8DAA8D;IAC9D,gDAAgD;IAChD,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,wCAAwC,CAAC,CAAC;IAC/D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAC1B,uDAAuD,SAAS,KAAK;YACnE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD;YACzF,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,IAAI;QAAE,MAAM,UAAU,CAAC;IAC1C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,IAAI,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uDAAuD;AACvD,KAAK,UAAU,QAAQ,CAAC,GAAY;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sDAAsD;AACtD,KAAK,UAAU,UAAU,CAAC,IAAU,EAAE,OAA0B;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,EAAE,KAAK,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,OAAO,CAAC,IAAU,EAAE,OAA0B,EAAE,QAAgB;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4CAA4C;AAC5C,KAAK,UAAU,aAAa,CAC1B,IAAU,EACV,OAA0B,EAC1B,GAAY;IAEZ,KAAK,IAAI,CAAC;IACV,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6DAA6D;AAC7D,KAAK,UAAU,cAAc,CAC3B,IAAU,EACV,SAAiC,EACjC,MAA8B;IAE9B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,KAAK,UAAU,cAAc,CAC3B,IAAU,EACV,SAAiC;IAEjC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oDAAoD;AACpD,KAAK,UAAU,QAAQ,CAAC,IAAU,EAAE,OAAe,EAAE,OAA0B;IAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACvF,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,gEAAgE;AAChE,KAAK,UAAU,eAAe,CAAC,IAAU,EAAE,OAA0B;IACnE,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;QACxE,OAAO,EAAE,sBAAsB;KAChC,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,OAAe,EACf,OAA0B,EAC1B,SAA0B,EAC1B,KAA6D;IAE7D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,oEAAoE;QACpE,iEAAiE;QACjE,oDAAoD;QACpD,IAAI,KAAK,YAAY,kBAAkB;YAAE,MAAM,KAAK,CAAC;QACrD,MAAM,IAAI,kBAAkB,CAAC,WAAW,SAAS,YAAa,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,KAAK,UAAU,sBAAsB,CACnC,IAAU,EACV,OAAe,EACf,SAAiB,EACjB,OAA0B,EAC1B,SAA0B,EAC1B,KAA6D;IAE7D,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClG,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,QAAQ,GAA2B,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;gBACnE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC/C,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC7F,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAClG,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC1D,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC7F,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACrC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,kBAAkB,CAC1B,2BAA2B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,wCAAwC;wBACvF,kEAAkE,CACrE,CAAC;gBACJ,CAAC;gBACD,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAW,CAAC;gBAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACnD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,MAAM,IAAI,kBAAkB,CAC1B,2EAA2E,QAAQ,EAAE,CACtF,CAAC;gBACJ,CAAC;gBACD,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACnD,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBACnD,IAAI,KAAK,KAAK,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;wBAC1C,MAAM,IAAI,kBAAkB,CAC1B,0BAA0B,QAAQ,aAAa,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,KAAK;4BAChF,aAAa,OAAO,CAAC,MAAM,CAAC,YAAY,+CAA+C;4BACvF,8CAA8C,CACjD,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YACH,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAClF,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;YACtC,IAAI,QAAQ,KAAK,EAAE;gBAAE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;YACxF,IAAI,QAAQ,GAA2B,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;gBACnE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBACvC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACnD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,MAAM,IAAI,kBAAkB,CAAC,oDAAoD,QAAQ,EAAE,CAAC,CAAC;gBAC/F,CAAC;gBACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACpD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC/B,MAAM,IAAI,kBAAkB,CAC1B,mEAAmE,QAAQ,EAAE,CAC9E,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACtD,MAAM,IAAI,CAAC,eAAe,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,EAAE;oBAClG,OAAO,EAAE,sBAAsB;iBAChC,CAAC,CAAC;gBACH,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7D,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAC9E,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;YACtC,IAAI,QAAQ,KAAK,EAAE;gBAAE,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChG,IAAI,QAAQ,GAA2B,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;gBACnE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBACvC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACnD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,MAAM,IAAI,kBAAkB,CAAC,sDAAsD,QAAQ,EAAE,CAAC,CAAC;gBACjG,CAAC;gBACD,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACxF,MAAM,IAAI,CAAC,eAAe,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,EAAE;oBAClG,OAAO,EAAE,sBAAsB;iBAChC,CAAC,CAAC;gBACH,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACxD,MAAM,IAAI;qBACP,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;qBAC3E,KAAK,EAAE;qBACP,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC9C,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACrC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;oBACxB,MAAM,IAAI,kBAAkB,CAAC,0BAA0B,QAAQ,wBAAwB,CAAC,CAAC;gBAC3F,CAAC;gBACD,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;YACH,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAClF,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;YACtC,IAAI,QAAQ,KAAK,EAAE;gBAAE,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,CAAC,CAAC;YAC3F,MAAM,YAAY,GAAG,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;YACjD,IAAI,QAAQ,GAA2B,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;gBACnE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBACvC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACnD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,MAAM,IAAI,kBAAkB,CAAC,uDAAuD,QAAQ,EAAE,CAAC,CAAC;gBAClG,CAAC;gBACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACtG,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,kBAAkB,CAC1B,2BAA2B,QAAQ,iDAAiD,CACrF,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACzD,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACrC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC3D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;oBACzB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,QAAQ,yBAAyB,CAAC,CAAC;gBAC7F,CAAC;gBACD,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;gBAC3D,IAAI,OAAO,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBACnD,IAAI,KAAK,KAAK,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;wBAC3C,MAAM,IAAI,kBAAkB,CAC1B,2BAA2B,QAAQ,aAAa,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,KAAK;4BACjF,aAAa,OAAO,CAAC,MAAM,CAAC,aAAa,wCAAwC;4BACjF,qDAAqD,CACxD,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YACH,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QACxF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB,CAAC,SAAmC,EAAE,SAAiB;IAC/E,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAChG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAC1B,WAAW,SAAS,gEAAgE;YAClF,wEAAwE,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,kBAAkB,CAC1B,WAAW,SAAS,oDAAoD;YACtE,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YACvG,0EAA0E,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,OAAe,EACf,OAA0B,EAC1B,SAA0B,EAC1B,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CAAC,uDAAuD,QAAQ,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxF,MAAM,IAAI,CAAC,eAAe,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,EAAE;gBAClG,OAAO,EAAE,sBAAsB;aAChC,CAAC,CAAC;YACH,OAAO,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB;YAAE,MAAM,KAAK,CAAC;QACrD,MAAM,IAAI,kBAAkB,CAAC,2BAA4B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC"}

package/dist/witness/classifications.d.ts

@@ -0,0 +1,42 @@
+import { type Classification } from '@gate-forge/core';
+/** The reporter-visible projection of one resource's classification. */
+export interface ClassificationView {
+    primaryKey: string[];
+    exposure: string;
+    plane: string;
+    evidenceAdapter?: string;
+    /**
+     * Which evidence lane proves user-facing reachability (`'claims'` =
+     * the http.endpoint lane; adapter-free). MUST ride along: without it a
+     * claims-lane entry (user-facing, no adapter) re-validates downstream
+     * as "user-facing resources require an 'evidenceAdapter'" and the
+     * reporter grades the claim unclassified.
+     */
+    evidenceLane?: 'adapter' | 'claims';
+    lifecycle: {
+        create: boolean;
+        read: boolean;
+        update: boolean;
+        delete: boolean;
+        deleteSemantics?: 'hard' | 'archive';
+        archiveFields?: Record<string, string | number | boolean>;
+        updateableFields?: string[];
+    };
+}
+/**
+ * Loads the classifications document.
+ *
+ * Args:
+ *   path: absolute path to the classifications YAML (or null/'' = none).
+ *
+ * Returns:
+ *   Record<string, Classification>: validated per-resource map (empty
+ *   when no document is configured).
+ *
+ * Throws:
+ *   AdapterRegistryError: fail-closed load/validation problems.
+ */
+export declare function loadClassifications(path: string | null | undefined): Record<string, Classification>;
+/** Projects a classification for the reporter surface. */
+export declare function toClassificationView(entry: Classification): ClassificationView;
+//# sourceMappingURL=classifications.d.ts.map

package/dist/witness/classifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifications.d.ts","sourceRoot":"","sources":["../../src/witness/classifications.ts"],"names":[],"mappings":"AAcA,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAG1B,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IACpC,SAAS,EAAE;QACT,MAAM,EAAE,OAAO,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC;QACd,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;QAC1D,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;CACH;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAkCnG;AAED,0DAA0D;AAC1D,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,GAAG,kBAAkB,CAuB9E"}