@harrylabsj/kiwi 0.6.0

package/dist/config/profile.js

@@ -0,0 +1,386 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Agent profile loading and validation.
+ *
+ * Profiles are YAML. Secrets are NEVER stored in the profile: `token_env`
+ * and `api_key_env` name environment variables that must be set. Loading a
+ * profile never resolves or logs secret values; resolution happens lazily
+ * at the point of use via `resolveSecret()`.
+ *
+ * Validation is fail-closed: unknown fields are rejected, numbers must be
+ * finite, runtime limits have hard upper bounds, and cleartext HTTP base
+ * URLs are only accepted for loopback hosts.
+ */
+import { readFileSync, statSync } from "node:fs";
+import { parse as parseYaml } from "yaml";
+import { PROTOCOL_VERSION } from "../negotiation/types.js";
+export const RUNTIME_VERSION = "0.6.0";
+export const THINKING_LEVELS = ["off", "minimal", "low", "medium", "high"];
+/** API ids supported by the pinned pi-ai 0.83.0 (its KnownApi union). */
+export const SUPPORTED_MODEL_APIS = [
+    "openai-completions",
+    "openai-responses",
+    "azure-openai-responses",
+    "openai-codex-responses",
+    "anthropic-messages",
+    "bedrock-converse-stream",
+    "google-generative-ai",
+    "google-vertex",
+    "mistral-conversations",
+    "pi-messages",
+];
+/**
+ * Commerce credential scopes (design §15.4). Credentials are held separately
+ * by scope; the model only ever sees tools, never tokens. When a scope has no
+ * credential configured, the corresponding write tools fail closed.
+ */
+export const COMMERCE_CREDENTIAL_SCOPES = ["negotiation", "catalog", "inventory"];
+export class ProfileError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ProfileError";
+    }
+}
+const REQUIRED_ENV_REF = /^[A-Z][A-Z0-9_]*$/;
+/** Hard upper bounds for runtime limits. */
+export const RUNTIME_LIMITS = {
+    max_model_steps: 20,
+    max_retries: 5,
+    turn_timeout_seconds: 3600,
+    poll_interval_seconds: 3600,
+};
+const TOP_LEVEL_KEYS = [
+    "runtime_version",
+    "protocol_version",
+    "agent_id",
+    "role",
+    "owner_id",
+    "commerce",
+    "model",
+    "runtime",
+    "merchant_policy",
+    "buyer_policy",
+];
+const COMMERCE_KEYS = ["base_url", "token_env", "backend", "credentials"];
+const MODEL_KEYS = [
+    "provider",
+    "model",
+    "api_key_env",
+    "api",
+    "base_url",
+    "thinking_level",
+];
+const RUNTIME_KEYS = [
+    "mode",
+    "poll_interval_seconds",
+    "turn_timeout_seconds",
+    "max_model_steps",
+    "max_retries",
+];
+const MERCHANT_POLICY_KEYS = [
+    "min_unit_price_private",
+    "max_auto_discount_percent",
+    "inventory_source",
+    "quote_ttl_seconds",
+    "auto_negotiate",
+    "human_review_on",
+];
+const BUYER_POLICY_KEYS = [
+    "target_skus",
+    "quantity",
+    "max_total_price_private",
+    "acceptable_eta_latest",
+    "required_after_sales_terms",
+    "auto_negotiate",
+    "human_review_on",
+];
+/** RFC 3339 date-time with an explicit timezone (offset or Z); naive times fail closed. */
+const RFC3339_TZ = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/;
+/** Validate an RFC 3339 timestamp that must carry a timezone. */
+export function isRfc3339WithTimezone(value) {
+    return typeof value === "string" && RFC3339_TZ.test(value) && !Number.isNaN(Date.parse(value));
+}
+/** Hosts allowed to use cleartext HTTP. Everything else requires HTTPS. */
+const LOOPBACK_HOSTNAMES = new Set(["localhost", "127.0.0.1", "[::1]", "::1"]);
+function isObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function req(cond, message) {
+    if (!cond)
+        throw new ProfileError(message);
+}
+function rejectUnknownKeys(obj, allowed, section, source) {
+    for (const key of Object.keys(obj)) {
+        if (!allowed.includes(key)) {
+            throw new ProfileError(`${source}: ${section} has unknown field "${key}"`);
+        }
+    }
+}
+function reqFinite(value, field, source) {
+    req(typeof value === "number" && Number.isFinite(value), `${source}: ${field} must be a finite number (NaN/Infinity are not allowed)`);
+}
+/**
+ * Validate a base URL: http(s) only, no embedded credentials, and cleartext
+ * HTTP only for loopback hosts (localhost / 127.0.0.1 / ::1).
+ */
+export function assertSecureBaseUrl(value, field, source) {
+    req(typeof value === "string" && value.length > 0, `${source}: ${field} is required`);
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new ProfileError(`${source}: ${field} must be a valid URL`);
+    }
+    req(url.protocol === "https:" || url.protocol === "http:", `${source}: ${field} must use http or https (got ${url.protocol})`);
+    req(url.username === "" && url.password === "", `${source}: ${field} must not embed credentials (userinfo)`);
+    if (url.protocol === "http:") {
+        req(LOOPBACK_HOSTNAMES.has(url.hostname.toLowerCase()), `${source}: ${field} uses cleartext HTTP; only loopback hosts (localhost, 127.0.0.1, ::1) may use HTTP — use HTTPS for remote hosts`);
+    }
+    return value;
+}
+/** Load, parse and validate a profile file. Never reads secret env values. */
+export function loadProfile(path) {
+    // 权限检查（评审项 L5）：profile 含私有策略值（max_total_price_private 等）
+    // ——与数据目录 0700/0600 约定对齐，过宽权限告警（不阻断：历史文件常见
+    // 0644，doctor 已做 inline-secret 扫描兜底）。
+    try {
+        const st = statSync(path);
+        if ((st.mode & 0o077) !== 0) {
+            console.warn(`[profile] ${path} is group/world-readable (mode ${(st.mode & 0o777).toString(8)}); ` +
+                "consider chmod 600 (contains private policy values)");
+        }
+    }
+    catch {
+        // stat 失败由下方 readFileSync 的清晰错误兜底。
+    }
+    let raw;
+    try {
+        raw = readFileSync(path, "utf-8");
+    }
+    catch (err) {
+        throw new ProfileError(`Cannot read profile ${path}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    let data;
+    try {
+        data = parseYaml(raw);
+    }
+    catch (err) {
+        throw new ProfileError(`Invalid YAML in ${path}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    return validateProfile(data, path);
+}
+export function validateProfile(data, source) {
+    req(isObject(data), `${source}: profile must be a YAML mapping`);
+    const p = data;
+    // runtime_version 是"生成该 profile 的运行时版本"：只做格式校验，不 gate
+    // 精确相等（版本单源评审项：RUNTIME_VERSION 升级不应让全部既有 profile
+    // 失效——0.5.0 的 profile 在新代码上必须继续可加载）。
+    req(typeof p.runtime_version === "string" && /^\d+\.\d+\.\d+$/.test(p.runtime_version), `${source}: runtime_version must be a semantic version like ${RUNTIME_VERSION}`);
+    req(p.protocol_version === PROTOCOL_VERSION, `${source}: protocol_version must be ${PROTOCOL_VERSION}`);
+    req(typeof p.agent_id === "string" && p.agent_id.length > 0, `${source}: agent_id is required`);
+    req(p.role === "buyer" || p.role === "merchant", `${source}: role must be buyer or merchant`);
+    req(typeof p.owner_id === "string" && p.owner_id.length > 0, `${source}: owner_id is required`);
+    req(isObject(p.commerce), `${source}: commerce section is required`);
+    const commerce = p.commerce;
+    const commerceBaseUrl = assertSecureBaseUrl(commerce.base_url, "commerce.base_url", source);
+    req(typeof commerce.token_env === "string" && REQUIRED_ENV_REF.test(commerce.token_env), `${source}: commerce.token_env must name an environment variable (e.g. SHOPPING_AGENT_TOKEN); secrets must not be written into the profile`);
+    req(commerce.backend === "local_marketplace" || commerce.backend === "external_platform", `${source}: commerce.backend must be local_marketplace or external_platform`);
+    // Optional per-scope credential env refs (§15.4). Fail closed on unknown
+    // scopes, missing token_env, or inline secret values — just like token_env.
+    let credentials;
+    if (commerce.credentials !== undefined) {
+        req(isObject(commerce.credentials), `${source}: commerce.credentials must be a mapping`);
+        for (const scope of Object.keys(commerce.credentials)) {
+            req(COMMERCE_CREDENTIAL_SCOPES.includes(scope), `${source}: commerce.credentials has unknown scope "${scope}" (expected ${COMMERCE_CREDENTIAL_SCOPES.join("/")})`);
+            const entry = commerce.credentials[scope];
+            req(isObject(entry), `${source}: commerce.credentials.${scope} must be a mapping`);
+            req(typeof entry.token_env === "string" && REQUIRED_ENV_REF.test(entry.token_env), `${source}: commerce.credentials.${scope}.token_env must name an environment variable`);
+            req(Object.keys(entry).length === 1, `${source}: commerce.credentials.${scope} only supports token_env`);
+        }
+        credentials = Object.fromEntries(COMMERCE_CREDENTIAL_SCOPES.map((scope) => {
+            const entry = commerce.credentials[scope];
+            return entry === undefined ? [] : [scope, { token_env: entry.token_env }];
+        }).filter((pair) => pair.length > 0));
+    }
+    rejectUnknownKeys(commerce, COMMERCE_KEYS, "commerce", source);
+    req(isObject(p.model), `${source}: model section is required`);
+    const model = p.model;
+    req(typeof model.provider === "string" && model.provider.length > 0, `${source}: model.provider is required`);
+    req(typeof model.model === "string" && model.model.length > 0, `${source}: model.model is required`);
+    if (model.api_key_env !== undefined) {
+        req(typeof model.api_key_env === "string" && REQUIRED_ENV_REF.test(model.api_key_env), `${source}: model.api_key_env must name an environment variable`);
+    }
+    if (model.api !== undefined) {
+        req(typeof model.api === "string" && SUPPORTED_MODEL_APIS.includes(model.api), `${source}: model.api must be one of: ${SUPPORTED_MODEL_APIS.join(", ")}`);
+    }
+    let modelBaseUrl;
+    if (model.base_url !== undefined) {
+        modelBaseUrl = assertSecureBaseUrl(model.base_url, "model.base_url", source);
+    }
+    if (model.thinking_level !== undefined) {
+        req(typeof model.thinking_level === "string" &&
+            THINKING_LEVELS.includes(model.thinking_level), `${source}: model.thinking_level must be one of: ${THINKING_LEVELS.join(", ")}`);
+    }
+    rejectUnknownKeys(model, MODEL_KEYS, "model", source);
+    req(isObject(p.runtime), `${source}: runtime section is required`);
+    const runtime = p.runtime;
+    req(runtime.mode === "once" || runtime.mode === "foreground", `${source}: runtime.mode must be once or foreground`);
+    reqFinite(runtime.poll_interval_seconds, "runtime.poll_interval_seconds", source);
+    req(runtime.poll_interval_seconds > 0 &&
+        runtime.poll_interval_seconds <= RUNTIME_LIMITS.poll_interval_seconds, `${source}: runtime.poll_interval_seconds must be > 0 and <= ${RUNTIME_LIMITS.poll_interval_seconds}`);
+    reqFinite(runtime.turn_timeout_seconds, "runtime.turn_timeout_seconds", source);
+    req(runtime.turn_timeout_seconds > 0 &&
+        runtime.turn_timeout_seconds <= RUNTIME_LIMITS.turn_timeout_seconds, `${source}: runtime.turn_timeout_seconds must be > 0 and <= ${RUNTIME_LIMITS.turn_timeout_seconds}`);
+    req(Number.isInteger(runtime.max_model_steps) && runtime.max_model_steps >= 1, `${source}: runtime.max_model_steps must be an integer >= 1`);
+    req(runtime.max_model_steps <= RUNTIME_LIMITS.max_model_steps, `${source}: runtime.max_model_steps must be <= ${RUNTIME_LIMITS.max_model_steps}`);
+    req(Number.isInteger(runtime.max_retries) && runtime.max_retries >= 0, `${source}: runtime.max_retries must be an integer >= 0`);
+    req(runtime.max_retries <= RUNTIME_LIMITS.max_retries, `${source}: runtime.max_retries must be <= ${RUNTIME_LIMITS.max_retries}`);
+    rejectUnknownKeys(runtime, RUNTIME_KEYS, "runtime", source);
+    let merchantPolicy;
+    if (p.merchant_policy !== undefined) {
+        req(isObject(p.merchant_policy), `${source}: merchant_policy must be a mapping`);
+        const mp = p.merchant_policy;
+        rejectUnknownKeys(mp, MERCHANT_POLICY_KEYS, "merchant_policy", source);
+        if (mp.min_unit_price_private !== undefined) {
+            reqFinite(mp.min_unit_price_private, "merchant_policy.min_unit_price_private", source);
+            req(mp.min_unit_price_private >= 0, `${source}: merchant_policy.min_unit_price_private must be >= 0`);
+        }
+        if (mp.max_auto_discount_percent !== undefined) {
+            reqFinite(mp.max_auto_discount_percent, "merchant_policy.max_auto_discount_percent", source);
+            req(mp.max_auto_discount_percent >= 0 && mp.max_auto_discount_percent <= 100, `${source}: merchant_policy.max_auto_discount_percent must be between 0 and 100`);
+        }
+        if (mp.inventory_source !== undefined) {
+            req(typeof mp.inventory_source === "string" && mp.inventory_source.length > 0, `${source}: merchant_policy.inventory_source must be a non-empty string`);
+        }
+        if (mp.quote_ttl_seconds !== undefined) {
+            reqFinite(mp.quote_ttl_seconds, "merchant_policy.quote_ttl_seconds", source);
+            req(mp.quote_ttl_seconds > 0, `${source}: merchant_policy.quote_ttl_seconds must be > 0`);
+        }
+        if (mp.auto_negotiate !== undefined) {
+            req(typeof mp.auto_negotiate === "boolean", `${source}: merchant_policy.auto_negotiate must be a boolean`);
+        }
+        if (mp.human_review_on !== undefined) {
+            req(Array.isArray(mp.human_review_on) &&
+                mp.human_review_on.every((c) => typeof c === "string" && c.length > 0), `${source}: merchant_policy.human_review_on must be a list of non-empty strings`);
+        }
+        merchantPolicy = { ...mp };
+    }
+    let buyerPolicy;
+    if (p.buyer_policy !== undefined) {
+        req(isObject(p.buyer_policy), `${source}: buyer_policy must be a mapping`);
+        const bp = p.buyer_policy;
+        rejectUnknownKeys(bp, BUYER_POLICY_KEYS, "buyer_policy", source);
+        // All buyer_policy fields are required: the local private gate must not
+        // silently run with a half-specified policy.
+        for (const key of BUYER_POLICY_KEYS) {
+            req(bp[key] !== undefined, `${source}: buyer_policy.${key} is required`);
+        }
+        req(Array.isArray(bp.target_skus) &&
+            bp.target_skus.every((s) => typeof s === "string" && s.length > 0), `${source}: buyer_policy.target_skus must be a list of non-empty strings`);
+        req(Number.isInteger(bp.quantity) && bp.quantity >= 1, `${source}: buyer_policy.quantity must be a positive integer`);
+        reqFinite(bp.max_total_price_private, "buyer_policy.max_total_price_private", source);
+        req(bp.max_total_price_private >= 0, `${source}: buyer_policy.max_total_price_private must be >= 0`);
+        req(isRfc3339WithTimezone(bp.acceptable_eta_latest), `${source}: buyer_policy.acceptable_eta_latest must be an RFC 3339 date-time with an explicit timezone (e.g. 2026-08-05T18:00:00+08:00)`);
+        req(Array.isArray(bp.required_after_sales_terms) &&
+            bp.required_after_sales_terms.every((s) => typeof s === "string" && s.length > 0), `${source}: buyer_policy.required_after_sales_terms must be a list of non-empty strings`);
+        req(typeof bp.auto_negotiate === "boolean", `${source}: buyer_policy.auto_negotiate must be a boolean`);
+        req(Array.isArray(bp.human_review_on) &&
+            bp.human_review_on.every((c) => typeof c === "string" && c.length > 0), `${source}: buyer_policy.human_review_on must be a list of non-empty strings`);
+        buyerPolicy = { ...bp };
+    }
+    // Role <-> private policy binding: exactly one, matching the role.
+    if (p.role === "buyer") {
+        req(buyerPolicy !== undefined, `${source}: role=buyer requires a buyer_policy section`);
+        req(merchantPolicy === undefined, `${source}: role=buyer must not define merchant_policy (policies are role-exclusive)`);
+    }
+    else {
+        req(merchantPolicy !== undefined, `${source}: role=merchant requires a merchant_policy section`);
+        req(buyerPolicy === undefined, `${source}: role=merchant must not define buyer_policy (policies are role-exclusive)`);
+    }
+    rejectUnknownKeys(p, TOP_LEVEL_KEYS, "profile", source);
+    const profile = {
+        runtime_version: p.runtime_version,
+        protocol_version: p.protocol_version,
+        agent_id: p.agent_id,
+        role: p.role,
+        owner_id: p.owner_id,
+        commerce: {
+            base_url: commerceBaseUrl,
+            token_env: commerce.token_env,
+            backend: commerce.backend,
+            ...(credentials !== undefined ? { credentials } : {}),
+        },
+        model: {
+            provider: model.provider,
+            model: model.model,
+            ...(model.api_key_env !== undefined ? { api_key_env: model.api_key_env } : {}),
+            ...(model.api !== undefined ? { api: model.api } : {}),
+            ...(modelBaseUrl !== undefined ? { base_url: modelBaseUrl } : {}),
+            ...(model.thinking_level !== undefined
+                ? { thinking_level: model.thinking_level }
+                : {}),
+        },
+        runtime: {
+            mode: runtime.mode,
+            poll_interval_seconds: runtime.poll_interval_seconds,
+            turn_timeout_seconds: runtime.turn_timeout_seconds,
+            max_model_steps: runtime.max_model_steps,
+            max_retries: runtime.max_retries,
+        },
+        ...(merchantPolicy !== undefined ? { merchant_policy: merchantPolicy } : {}),
+        ...(buyerPolicy !== undefined ? { buyer_policy: buyerPolicy } : {}),
+    };
+    return profile;
+}
+/**
+ * Resolve a secret from an environment variable reference. Throws
+ * ProfileError when unset — callers map this to the config exit code.
+ */
+export function resolveSecret(envName, what) {
+    const value = process.env[envName];
+    if (value === undefined || value === "") {
+        throw new ProfileError(`${what}: environment variable ${envName} is not set`);
+    }
+    return value;
+}
+/** Scan loaded profile data for accidentally inlined secrets. */
+export function findInlineSecrets(data) {
+    const suspicious = ["api_key", "token", "secret", "password"];
+    const hits = [];
+    const walk = (node, path) => {
+        if (Array.isArray(node)) {
+            node.forEach((v, i) => walk(v, `${path}[${i}]`));
+            return;
+        }
+        if (isObject(node)) {
+            for (const [k, v] of Object.entries(node)) {
+                const keyPath = path ? `${path}.${k}` : k;
+                if (typeof v === "string" &&
+                    suspicious.some((s) => k.toLowerCase().includes(s)) &&
+                    !k.endsWith("_env") &&
+                    v.length > 0) {
+                    hits.push(keyPath);
+                }
+                walk(v, keyPath);
+            }
+        }
+    };
+    walk(data, "");
+    return hits;
+}
+//# sourceMappingURL=profile.js.map

package/dist/config/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/config/profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAa,MAAM,yBAAyB,CAAC;AAEtE,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AA8BvC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAGpF,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,oBAAoB;IACpB,kBAAkB;IAClB,wBAAwB;IACxB,wBAAwB;IACxB,oBAAoB;IACpB,yBAAyB;IACzB,sBAAsB;IACtB,eAAe;IACf,uBAAuB;IACvB,aAAa;CACd,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;AA2C3F,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C,4CAA4C;AAC5C,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,eAAe,EAAE,EAAE;IACnB,WAAW,EAAE,CAAC;IACd,oBAAoB,EAAE,IAAI;IAC1B,qBAAqB,EAAE,IAAI;CACnB,CAAC;AAEX,MAAM,cAAc,GAAG;IACrB,iBAAiB;IACjB,kBAAkB;IAClB,UAAU;IACV,MAAM;IACN,UAAU;IACV,UAAU;IACV,OAAO;IACP,SAAS;IACT,iBAAiB;IACjB,cAAc;CACN,CAAC;AACX,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,CAAU,CAAC;AACnF,MAAM,UAAU,GAAG;IACjB,UAAU;IACV,OAAO;IACP,aAAa;IACb,KAAK;IACL,UAAU;IACV,gBAAgB;CACR,CAAC;AACX,MAAM,YAAY,GAAG;IACnB,MAAM;IACN,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,aAAa;CACL,CAAC;AACX,MAAM,oBAAoB,GAAG;IAC3B,wBAAwB;IACxB,2BAA2B;IAC3B,kBAAkB;IAClB,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;CACT,CAAC;AACX,MAAM,iBAAiB,GAAG;IACxB,aAAa;IACb,UAAU;IACV,yBAAyB;IACzB,uBAAuB;IACvB,4BAA4B;IAC5B,gBAAgB;IAChB,iBAAiB;CACT,CAAC;AAEX,2FAA2F;AAC3F,MAAM,UAAU,GAAG,sEAAsE,CAAC;AAE1F,iEAAiE;AACjE,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,2EAA2E;AAC3E,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpG,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,GAAG,CAAC,IAAa,EAAE,OAAe;IACzC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CACxB,GAA4B,EAC5B,OAA0B,EAC1B,OAAe,EACf,MAAc;IAEd,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,YAAY,CAAC,GAAG,MAAM,KAAK,OAAO,uBAAuB,GAAG,GAAG,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa,EAAE,MAAc;IAC9D,GAAG,CACD,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EACnD,GAAG,MAAM,KAAK,KAAK,yDAAyD,CAC7E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,KAAa,EAAE,MAAc;IAC/E,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,KAAK,KAAK,cAAc,CAAC,CAAC;IACtF,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,GAAG,MAAM,KAAK,KAAK,sBAAsB,CAAC,CAAC;IACpE,CAAC;IACD,GAAG,CACD,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EACrD,GAAG,MAAM,KAAK,KAAK,gCAAgC,GAAG,CAAC,QAAQ,GAAG,CACnE,CAAC;IACF,GAAG,CACD,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAC1C,GAAG,MAAM,KAAK,KAAK,wCAAwC,CAC5D,CAAC;IACF,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC7B,GAAG,CACD,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAClD,GAAG,MAAM,KAAK,KAAK,iHAAiH,CACrI,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,yDAAyD;IACzD,2CAA2C;IAC3C,sCAAsC;IACtC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CACV,aAAa,IAAI,kCAAkC,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;gBACnF,qDAAqD,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CACpB,uBAAuB,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CACpB,mBAAmB,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,MAAc;IAC3D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,kCAAkC,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,IAAI,CAAC;IAEf,sDAAsD;IACtD,iDAAiD;IACjD,qCAAqC;IACrC,GAAG,CACD,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,EAClF,GAAG,MAAM,qDAAqD,eAAe,EAAE,CAChF,CAAC;IACF,GAAG,CACD,CAAC,CAAC,gBAAgB,KAAK,gBAAgB,EACvC,GAAG,MAAM,8BAA8B,gBAAgB,EAAE,CAC1D,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,wBAAwB,CAAC,CAAC;IAChG,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,GAAG,MAAM,kCAAkC,CAAC,CAAC;IAC9F,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,wBAAwB,CAAC,CAAC;IAEhG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,gCAAgC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC5B,MAAM,eAAe,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC5F,GAAG,CACD,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EACnF,GAAG,MAAM,kIAAkI,CAC5I,CAAC;IACF,GAAG,CACD,QAAQ,CAAC,OAAO,KAAK,mBAAmB,IAAI,QAAQ,CAAC,OAAO,KAAK,mBAAmB,EACpF,GAAG,MAAM,mEAAmE,CAC7E,CAAC;IACF,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,WAAoD,CAAC;IACzD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,GAAG,MAAM,0CAA0C,CAAC,CAAC;QACzF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtD,GAAG,CACA,0BAAgD,CAAC,QAAQ,CAAC,KAAK,CAAC,EACjE,GAAG,MAAM,6CAA6C,KAAK,eAAe,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAClH,CAAC;YACF,MAAM,KAAK,GAAI,QAAQ,CAAC,WAAuC,CAAC,KAAK,CAA4B,CAAC;YAClG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,0BAA0B,KAAK,oBAAoB,CAAC,CAAC;YACnF,GAAG,CACD,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAC7E,GAAG,MAAM,0BAA0B,KAAK,8CAA8C,CACvF,CAAC;YACF,GAAG,CACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAC/B,GAAG,MAAM,0BAA0B,KAAK,0BAA0B,CACnE,CAAC;QACJ,CAAC;QACD,WAAW,GAAG,MAAM,CAAC,WAAW,CAC9B,0BAA0B,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACvC,MAAM,KAAK,GAAI,QAAQ,CAAC,WAAuC,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,SAAS,EAAG,KAA+B,CAAC,SAAS,EAAE,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CACM,CAAC;IAC/C,CAAC;IACD,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/D,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,6BAA6B,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACtB,GAAG,CACD,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAC/D,GAAG,MAAM,8BAA8B,CACxC,CAAC;IACF,GAAG,CACD,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACzD,GAAG,MAAM,2BAA2B,CACrC,CAAC;IACF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,GAAG,CACD,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EACjF,GAAG,MAAM,uDAAuD,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,GAAG,CACD,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EACzE,GAAG,MAAM,+BAA+B,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,YAAgC,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,GAAG,CACD,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;YACrC,eAAqC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,EACvE,GAAG,MAAM,0CAA0C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAEtD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,+BAA+B,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,GAAG,CACD,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EACxD,GAAG,MAAM,2CAA2C,CACrD,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,MAAM,CAAC,CAAC;IAClF,GAAG,CACD,OAAO,CAAC,qBAAqB,GAAG,CAAC;QAC/B,OAAO,CAAC,qBAAqB,IAAI,cAAc,CAAC,qBAAqB,EACvE,GAAG,MAAM,sDAAsD,cAAc,CAAC,qBAAqB,EAAE,CACtG,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,CAAC,CAAC;IAChF,GAAG,CACD,OAAO,CAAC,oBAAoB,GAAG,CAAC;QAC9B,OAAO,CAAC,oBAAoB,IAAI,cAAc,CAAC,oBAAoB,EACrE,GAAG,MAAM,qDAAqD,cAAc,CAAC,oBAAoB,EAAE,CACpG,CAAC;IACF,GAAG,CACD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,IAAK,OAAO,CAAC,eAA0B,IAAI,CAAC,EACrF,GAAG,MAAM,mDAAmD,CAC7D,CAAC;IACF,GAAG,CACA,OAAO,CAAC,eAA0B,IAAI,cAAc,CAAC,eAAe,EACrE,GAAG,MAAM,wCAAwC,cAAc,CAAC,eAAe,EAAE,CAClF,CAAC;IACF,GAAG,CACD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,IAAK,OAAO,CAAC,WAAsB,IAAI,CAAC,EAC7E,GAAG,MAAM,+CAA+C,CACzD,CAAC;IACF,GAAG,CACA,OAAO,CAAC,WAAsB,IAAI,cAAc,CAAC,WAAW,EAC7D,GAAG,MAAM,oCAAoC,cAAc,CAAC,WAAW,EAAE,CAC1E,CAAC;IACF,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAE5D,IAAI,cAA0C,CAAC;IAC/C,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACpC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,GAAG,MAAM,qCAAqC,CAAC,CAAC;QACjF,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC;QAC7B,iBAAiB,CAAC,EAAE,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,EAAE,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YAC5C,SAAS,CAAC,EAAE,CAAC,sBAAsB,EAAE,wCAAwC,EAAE,MAAM,CAAC,CAAC;YACvF,GAAG,CACD,EAAE,CAAC,sBAAsB,IAAI,CAAC,EAC9B,GAAG,MAAM,uDAAuD,CACjE,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,yBAAyB,KAAK,SAAS,EAAE,CAAC;YAC/C,SAAS,CAAC,EAAE,CAAC,yBAAyB,EAAE,2CAA2C,EAAE,MAAM,CAAC,CAAC;YAC7F,GAAG,CACD,EAAE,CAAC,yBAAyB,IAAI,CAAC,IAAI,EAAE,CAAC,yBAAyB,IAAI,GAAG,EACxE,GAAG,MAAM,uEAAuE,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACtC,GAAG,CACD,OAAO,EAAE,CAAC,gBAAgB,KAAK,QAAQ,IAAI,EAAE,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EACzE,GAAG,MAAM,+DAA+D,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACvC,SAAS,CAAC,EAAE,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,MAAM,CAAC,CAAC;YAC7E,GAAG,CAAC,EAAE,CAAC,iBAAiB,GAAG,CAAC,EAAE,GAAG,MAAM,iDAAiD,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,EAAE,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACpC,GAAG,CACD,OAAO,EAAE,CAAC,cAAc,KAAK,SAAS,EACtC,GAAG,MAAM,oDAAoD,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACrC,GAAG,CACD,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC;gBAC/B,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACxE,GAAG,MAAM,uEAAuE,CACjF,CAAC;QACJ,CAAC;QACD,cAAc,GAAG,EAAE,GAAG,EAAE,EAAoB,CAAC;IAC/C,CAAC;IAED,IAAI,WAAoC,CAAC;IACzC,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACjC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,MAAM,kCAAkC,CAAC,CAAC;QAC3E,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;QAC1B,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACjE,wEAAwE;QACxE,6CAA6C;QAC7C,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;YACpC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,GAAG,MAAM,kBAAkB,GAAG,cAAc,CAAC,CAAC;QAC3E,CAAC;QACD,GAAG,CACD,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC;YAC3B,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACpE,GAAG,MAAM,gEAAgE,CAC1E,CAAC;QACF,GAAG,CACD,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAK,EAAE,CAAC,QAAmB,IAAI,CAAC,EAC7D,GAAG,MAAM,oDAAoD,CAC9D,CAAC;QACF,SAAS,CAAC,EAAE,CAAC,uBAAuB,EAAE,sCAAsC,EAAE,MAAM,CAAC,CAAC;QACtF,GAAG,CACD,EAAE,CAAC,uBAAuB,IAAI,CAAC,EAC/B,GAAG,MAAM,qDAAqD,CAC/D,CAAC;QACF,GAAG,CACD,qBAAqB,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAC/C,GAAG,MAAM,+HAA+H,CACzI,CAAC;QACF,GAAG,CACD,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,0BAA0B,CAAC;YAC1C,EAAE,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACnF,GAAG,MAAM,+EAA+E,CACzF,CAAC;QACF,GAAG,CACD,OAAO,EAAE,CAAC,cAAc,KAAK,SAAS,EACtC,GAAG,MAAM,iDAAiD,CAC3D,CAAC;QACF,GAAG,CACD,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC;YAC/B,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACxE,GAAG,MAAM,oEAAoE,CAC9E,CAAC;QACF,WAAW,GAAG,EAAE,GAAG,EAAE,EAA4B,CAAC;IACpD,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvB,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,GAAG,MAAM,8CAA8C,CAAC,CAAC;QACxF,GAAG,CACD,cAAc,KAAK,SAAS,EAC5B,GAAG,MAAM,4EAA4E,CACtF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,GAAG,CACD,cAAc,KAAK,SAAS,EAC5B,GAAG,MAAM,oDAAoD,CAC9D,CAAC;QACF,GAAG,CACD,WAAW,KAAK,SAAS,EACzB,GAAG,MAAM,4EAA4E,CACtF,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAExD,MAAM,OAAO,GAAiB;QAC5B,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE;YACR,QAAQ,EAAE,eAAe;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD;QACD,KAAK,EAAE;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAsC,EAAE;gBAClE,CAAC,CAAC,EAAE,CAAC;SACR;QACD,OAAO,EAAE;YACP,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,qBAAqB,EAAE,OAAO,CAAC,qBAA+B;YAC9D,oBAAoB,EAAE,OAAO,CAAC,oBAA8B;YAC5D,eAAe,EAAE,OAAO,CAAC,eAAyB;YAClD,WAAW,EAAE,OAAO,CAAC,WAAqB;SAC3C;QACD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,IAAY;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,0BAA0B,OAAO,aAAa,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,IAAa;IAC7C,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,IAAY,EAAQ,EAAE;QACjD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1C,IACE,OAAO,CAAC,KAAK,QAAQ;oBACrB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACnD,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACnB,CAAC,CAAC,MAAM,GAAG,CAAC,EACZ,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,CAAC;gBACD,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACf,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/contracts/negotiation-schema.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export type NegotiationObjectName = "inquiry" | "rfq" | "offer" | "counter_offer" | "conditional_offer" | "clarification" | "clarification_response" | "accept_nonbinding" | "withdraw" | "decline" | "cancel" | "accepted_nonbinding_agreement";
+/** Resolve the repository/package root from this module's location. */
+export declare function packageRoot(): string;
+export declare function loadNegotiationSchema(): Record<string, unknown>;
+/** 校验完整 Envelope 是否满足 KNP/1.0 schema（含 action↔payload 一致性）。返回错误列表（空 = 合法）。 */
+export declare function validateEnvelopeAgainstSchema(envelope: unknown): string[];
+/**
+ * 校验单个 Negotiation Object（§9–§17 各 payload，或 AcceptedNonbindingAgreement
+ * artifact）是否满足对应 $defs。返回错误列表（空 = 合法）。
+ */
+export declare function validateNegotiationObject(name: NegotiationObjectName, value: unknown): string[];
+/** 断言合法；非法时抛错。 */
+export declare function assertNegotiationEnvelopeValid(envelope: unknown, what: string): void;

package/dist/contracts/negotiation-schema.js

@@ -0,0 +1,101 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * KNP/1.0 冻结 schema 加载与校验（基线 §41 #7 九类核心对象）。
+ *
+ * JSON 文件 contracts/negotiation/1.0/schema.json 是唯一权威源（与发布到
+ * https://kiwi.harrylabsj.com/schemas/negotiation/1.0/schema.json 的内容一致）。
+ * 校验使用 ajv 2020 + ajv-formats：Envelope 整体经 validateEnvelopeAgainstSchema；
+ * 单个对象（如 AcceptedNonbindingAgreement artifact）经 validateNegotiationObject
+ * 直接对 $defs 校验，不依赖 Envelope 包装。
+ */
+import { readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+// ajv is CommonJS; under NodeNext + verbatimModuleSyntax load it explicitly
+// (same pattern as src/contracts/schemas.ts).
+const require = createRequire(import.meta.url);
+const Ajv2020 = require("ajv/dist/2020.js");
+const addFormats = require("ajv-formats");
+const SCHEMA_REL = ["contracts", "negotiation", "1.0", "schema.json"];
+/** Resolve the repository/package root from this module's location. */
+export function packageRoot() {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    // dist/contracts/negotiation-schema.js -> <root>; src/... -> <root>
+    return path.resolve(here, "..", "..");
+}
+let schema;
+export function loadNegotiationSchema() {
+    if (schema === undefined) {
+        const file = path.join(packageRoot(), ...SCHEMA_REL);
+        schema = JSON.parse(readFileSync(file, "utf-8"));
+    }
+    return schema;
+}
+let ajv;
+const envelopeValidatorCache = new Map();
+const objectValidatorCache = new Map();
+function getAjv() {
+    if (!ajv) {
+        ajv = new Ajv2020({ allErrors: true, strict: true });
+        addFormats(ajv);
+    }
+    return ajv;
+}
+function formatErrors(validate) {
+    return (validate.errors ?? []).map((e) => `${e.instancePath || "/"} ${e.message ?? "invalid"}`.trim());
+}
+/** 校验完整 Envelope 是否满足 KNP/1.0 schema（含 action↔payload 一致性）。返回错误列表（空 = 合法）。 */
+export function validateEnvelopeAgainstSchema(envelope) {
+    let validate = envelopeValidatorCache.get("envelope");
+    if (validate === undefined) {
+        validate = getAjv().compile(loadNegotiationSchema());
+        envelopeValidatorCache.set("envelope", validate);
+    }
+    if (validate(envelope))
+        return [];
+    return formatErrors(validate);
+}
+/**
+ * 校验单个 Negotiation Object（§9–§17 各 payload，或 AcceptedNonbindingAgreement
+ * artifact）是否满足对应 $defs。返回错误列表（空 = 合法）。
+ */
+export function validateNegotiationObject(name, value) {
+    let validate = objectValidatorCache.get(name);
+    if (validate === undefined) {
+        const full = loadNegotiationSchema();
+        // 2020-12：$ref 可与 $defs 并列，直接对单个 $def 编译。不给 $id，避免与
+        // 已注册的完整 schema 发生 $id 冲突。
+        const sub = {
+            $ref: `#/$defs/${name}`,
+            $defs: full.$defs,
+        };
+        validate = getAjv().compile(sub);
+        objectValidatorCache.set(name, validate);
+    }
+    if (validate(value))
+        return [];
+    return formatErrors(validate);
+}
+/** 断言合法；非法时抛错。 */
+export function assertNegotiationEnvelopeValid(envelope, what) {
+    const errors = validateEnvelopeAgainstSchema(envelope);
+    if (errors.length > 0) {
+        throw new Error(`${what} failed KNP/1.0 schema validation: ${errors.join("; ")}`);
+    }
+}
+//# sourceMappingURL=negotiation-schema.js.map

package/dist/contracts/negotiation-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"negotiation-schema.js","sourceRoot":"","sources":["../../src/contracts/negotiation-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,4EAA4E;AAC5E,8CAA8C;AAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAGzB,CAAC;AAClB,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAkC,CAAC;AAE3E,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,CAAU,CAAC;AAgB/E,uEAAuE;AACvE,MAAM,UAAU,WAAW;IACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,oEAAoE;IACpE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,IAAI,MAA2C,CAAC;AAEhD,MAAM,UAAU,qBAAqB;IACnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,UAAU,CAAC,CAAC;QACrD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA4B,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,IAAI,GAA4B,CAAC;AACjC,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAA4B,CAAC;AACnE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA4B,CAAC;AAEjE,SAAS,MAAM;IACb,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,UAAU,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,QAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,GAAG,CAAC,CAAC,YAAY,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,IAAI,EAAE,CAC5D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,6BAA6B,CAAC,QAAiB;IAC7D,IAAI,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACrD,sBAAsB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA2B,EAC3B,KAAc;IAEd,IAAI,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;QACrC,oDAAoD;QACpD,2BAA2B;QAC3B,MAAM,GAAG,GAAG;YACV,IAAI,EAAE,WAAW,IAAI,EAAE;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;QACF,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAa,CAAC,CAAC;QAC3C,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,kBAAkB;AAClB,MAAM,UAAU,8BAA8B,CAAC,QAAiB,EAAE,IAAY;IAC5E,MAAM,MAAM,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sCAAsC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC"}

package/dist/contracts/schemas.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { ValidateFunction } from "ajv";
+export type SchemaName = "decision" | "snapshot" | "policy-result" | "capabilities";
+/** Resolve the repository/package root from this module's location. */
+export declare function packageRoot(): string;
+export declare function contractDir(): string;
+export declare function loadSchema(name: SchemaName): Record<string, unknown>;
+/**
+ * Inline local "#/$defs/..." references. Pi validates tool arguments with
+ * TypeBox, which does not resolve $ref; the frozen schema files stay
+ * untouched and we hand Pi a self-contained equivalent.
+ */
+export declare function dereferenceSchema(schema: Record<string, unknown>): Record<string, unknown>;
+export declare function getValidator(name: SchemaName): ValidateFunction;
+/** Validate data against a frozen schema; returns a list of human-readable errors (empty = valid). */
+export declare function validateAgainst(name: SchemaName, data: unknown): string[];
+export declare function assertValid<T>(name: SchemaName, data: unknown, what: string): T;