@kya-os/mcp 1.10.0 → 1.11.0

package/dist/audit/types.d.ts

@@ -0,0 +1,356 @@
+/** Wire-level types for the KYA-OS Auditability Protocol v1. */
+export type Digest = `sha256:${string}`;
+export type DecimalString = string;
+export type ProtocolBindingId = `urn:kya-os:audit-binding:${string}`;
+export type PartyRef = {
+    kind: 'public_did';
+    did: string;
+} | {
+    kind: 'pairwise_did';
+    did: string;
+} | {
+    kind: 'keyed_commitment';
+    value: Digest;
+    keyId: string;
+} | {
+    kind: 'evidence_ref';
+    ref: EvidenceRef;
+};
+/** A cryptographically resolvable signer; never substitute a privacy PartyRef. */
+export interface SignerRef {
+    did: string;
+    kid: string;
+    alg: 'EdDSA' | 'ES256';
+}
+export interface EvidenceEncryptionMetadata {
+    suite: 'A256GCM';
+    keyId: string;
+    nonce: string;
+    aadDigest: Digest;
+}
+export interface EvidenceRef {
+    objectId: string;
+    ciphertextDigest: Digest;
+    plaintextCommitment?: Digest;
+    mediaType: string;
+    size: DecimalString;
+    encryption: EvidenceEncryptionMetadata;
+}
+export declare const AUDIT_EVENT_TYPES: readonly ["session.established", "session.rejected", "session.expired", "session.replay_rejected", "tool.call.started", "tool.call.completed", "tool.call.failed", "tool.call.denied", "tool.call.challenged", "proof.generated", "proof.verified", "proof.rejected", "delegation.issued", "delegation.verified", "delegation.rejected", "delegation.revoked", "delegation.cascade_revoked", "delegation.outbound_attached", "authorization.evaluated", "authorization.approved", "authorization.denied", "authorization.step_up_required", "grant.used", "consent.requested", "consent.approved", "consent.denied", "credential.required", "credential.verified", "credential.failed", "key.rotated", "policy.changed", "configuration.changed", "integrity_suite.transitioned", "ledger.epoch.started", "ledger.epoch.transitioned", "checkpoint.created", "checkpoint.anchored", "checkpoint.anchor_failed", "evidence.disposed", "projection.reconciled", "audit.source_high_water", "audit.accessed", "audit.exported", "legal_hold.applied", "retention.executed"];
+export type AuditEventType = (typeof AUDIT_EVENT_TYPES)[number];
+export type AuditEventFamily = 'session' | 'tool' | 'proof' | 'delegation' | 'authorization' | 'consent' | 'key' | 'ledger' | 'administration';
+export type AuditEventDetails = {
+    family: 'session';
+    phase: 'established' | 'rejected' | 'expired' | 'replay_rejected';
+    reasonCode?: string;
+} | {
+    family: 'tool';
+    phase: 'started' | 'completed' | 'failed' | 'denied' | 'challenged';
+    attempt: DecimalString;
+    idempotencyRef?: string;
+} | {
+    family: 'proof';
+    phase: 'generated' | 'verified' | 'rejected';
+    proofDigest?: Digest;
+    verificationCode?: string;
+} | {
+    family: 'delegation';
+    phase: 'issued' | 'verified' | 'rejected' | 'revoked' | 'cascade_revoked' | 'outbound_attached';
+    delegationRef: string;
+    parentRef?: string;
+    statusEvidence?: EvidenceRef[];
+} | {
+    family: 'authorization';
+    phase: 'evaluated' | 'approved' | 'denied' | 'step_up_required' | 'grant_used';
+    policyDigest?: Digest;
+    grantRef?: string;
+} | {
+    family: 'consent';
+    phase: 'requested' | 'approved' | 'denied' | 'credential_required' | 'credential_verified' | 'credential_failed';
+    consentRef?: string;
+} | {
+    family: 'key';
+    phase: 'rotated' | 'policy_changed' | 'configuration_changed' | 'integrity_suite_transitioned';
+    previousSigner?: SignerRef;
+    nextSigner?: SignerRef;
+    configurationDigest?: Digest;
+} | {
+    family: 'ledger';
+    phase: 'epoch_started' | 'epoch_transitioned' | 'checkpoint_created' | 'checkpoint_anchored' | 'checkpoint_anchor_failed' | 'evidence_disposed' | 'projection_reconciled';
+    checkpointDigest?: Digest;
+    previousEpochId?: string;
+    previousTerminalCheckpointDigest?: Digest;
+    successorEpochIds?: string[];
+    targetEvidenceRef?: EvidenceRef;
+} | {
+    family: 'administration';
+    phase: 'source_high_water' | 'accessed' | 'exported' | 'legal_hold_applied' | 'retention_executed';
+    purpose?: string;
+    sourceSequence?: DecimalString;
+    selectionDigest?: Digest;
+};
+export interface AuthorizationEvidence {
+    source: 'delegation' | 'grant' | 'anonymous' | 'policy';
+    decision: 'allowed' | 'denied' | 'step_up_required' | 'needs_authorization';
+    scopeId?: string;
+    delegationRef?: string;
+    delegationCredentialDigest?: Digest;
+    delegationChainDigests?: Digest[];
+    statusEvidence?: EvidenceRef[];
+    grantRef?: string;
+    policyId?: string;
+    policyVersion?: string;
+    policyDigest?: Digest;
+    verificationCode?: string;
+}
+export interface AuditProducerEventCoreV1 {
+    schema: 'https://schema.kya-os.org/v1/protocol/audit/event/v1.0.0';
+    eventId: string;
+    eventType: AuditEventType;
+    eventVersion: '1.0.0';
+    binding: ProtocolBindingId;
+    occurredAt: number;
+    tenantRef: PartyRef;
+    source: {
+        producer: PartyRef;
+        sourceId: string;
+        sourceSequence?: DecimalString;
+        previousSourceEventDigest?: Digest;
+    };
+    correlationId?: string;
+    causationId?: string;
+    trace?: {
+        traceId?: string;
+        spanId?: string;
+    };
+    session?: {
+        ref: PartyRef;
+        handshakeNonceCommitment?: Digest;
+    };
+    actor?: PartyRef;
+    responsibleParty?: PartyRef;
+    resource?: PartyRef;
+    action: {
+        category: string;
+        name?: string;
+        detailRef?: EvidenceRef;
+    };
+    outcome: 'succeeded' | 'failed' | 'denied' | 'challenged' | 'unknown';
+    reason?: {
+        code: string;
+        detailRef?: EvidenceRef;
+    };
+    authorization?: AuthorizationEvidence;
+    proof?: EvidenceRef;
+    evidence: EvidenceRef[];
+    details: AuditEventDetails;
+    privacy: {
+        classification: 'public' | 'internal' | 'confidential' | 'restricted';
+        retentionClass: string;
+        legalHold?: string;
+    };
+}
+export interface AuditEntryCoreV1 {
+    schema: 'https://schema.kya-os.org/v1/protocol/audit/entry/v1.0.0';
+    ledgerId: string;
+    ledgerEpochId: string;
+    sequence: DecimalString;
+    previousEntryDigest: Digest | null;
+    recordedAt: number;
+    recorder: SignerRef;
+    eventDigest: Digest;
+    event: AuditProducerEventCoreV1;
+    evidenceManifestDigest: Digest;
+    integritySuite: 'KYA-AUDIT-JCS-SHA256-JWS-2026';
+}
+export interface AuditRecorderReceiptCoreV1 {
+    schema: 'https://schema.kya-os.org/v1/protocol/audit/receipt/v1.0.0';
+    ledgerId: string;
+    ledgerEpochId: string;
+    sequence: DecimalString;
+    eventId: string;
+    entryDigest: Digest;
+    previousEntryDigest: Digest | null;
+    recordedAt: number;
+    recorder: SignerRef;
+    integritySuite: 'KYA-AUDIT-JCS-SHA256-JWS-2026';
+}
+export interface SignedAuditEntryV1 {
+    core: AuditEntryCoreV1;
+    eventDigest: Digest;
+    entryDigest: Digest;
+    recorderReceipt: {
+        core: AuditRecorderReceiptCoreV1;
+        jws: string;
+    };
+}
+export interface AuditHead {
+    ledgerId: string;
+    ledgerEpochId: string;
+    sequence: DecimalString;
+    entryDigest: Digest;
+}
+export interface AuditLedgerRef {
+    ledgerId: string;
+    ledgerEpochId: string;
+}
+export type AuditVerdict = 'valid' | 'invalid' | 'indeterminate';
+export interface AuditVerificationDimension {
+    verdict: AuditVerdict;
+    reasonCodes: string[];
+}
+export interface HistoricalAuditKeyPolicy {
+    signer: SignerRef;
+    validFrom?: number;
+    validUntil?: number;
+    validFromCheckpoint?: Digest;
+    validUntilCheckpoint?: Digest;
+}
+export interface AuditVerificationPolicyV1 {
+    policyId: string;
+    trustedLedgerEpochs: Array<{
+        ledgerId: string;
+        ledgerEpochId: string;
+        recorderKeys: HistoricalAuditKeyPolicy[];
+        validFromCheckpoint?: Digest;
+        validUntilCheckpoint?: Digest;
+    }>;
+    trustedObservers: HistoricalAuditKeyPolicy[];
+    trustedSupportingAnchors?: Array<{
+        kind: AuditAnchorReceipt['kind'];
+        providerId: string;
+        validFrom?: number;
+        validUntil?: number;
+    }>;
+    authorizedExporters: Array<{
+        signerKeys: HistoricalAuditKeyPolicy[];
+        allowedLedgerIds: string[];
+        allowedPurposes: string[];
+    }>;
+    acceptedIntegritySuites: string[];
+    acceptedAlgorithms: Array<'EdDSA' | 'ES256'>;
+    keyRevocationMode: 'as_observed' | 'current' | 'both';
+    requiredCheckpointFreshnessMs?: number;
+    requiredAuditProfile?: 'AAP-0' | 'AAP-1' | 'AAP-2' | 'AAP-3' | 'AAP-4';
+}
+export interface AuditVerificationReportV1 {
+    schema: 'https://schema.kya-os.org/v1/protocol/audit/verification-report/v1.0.0';
+    policyId: string;
+    verifiedAt?: number;
+    cryptographicIntegrity: AuditVerificationDimension;
+    chainIntegrity: AuditVerificationDimension;
+    checkpointIntegrity: AuditVerificationDimension;
+    anchorIntegrity: AuditVerificationDimension;
+    scopeEvidenceCompleteness: AuditVerificationDimension;
+    authorizedAsObserved: AuditVerificationDimension;
+    currentAuthorization: AuditVerificationDimension;
+}
+export interface AuditCheckpointCoreV1 {
+    schema: 'https://schema.kya-os.org/v1/protocol/audit/checkpoint/v1.0.0';
+    checkpointId: string;
+    ledgerId: string;
+    ledgerEpochId: string;
+    treeSize: DecimalString;
+    firstSequence: DecimalString;
+    lastSequence: DecimalString;
+    rootDigest: Digest;
+    headEntryDigest: Digest;
+    previousCheckpointDigest: Digest | null;
+    createdAt: number;
+    issuer: SignerRef;
+    integritySuite: 'KYA-AUDIT-RFC9162-SHA256-JWS-2026';
+}
+export interface SignedAuditCheckpointV1 {
+    core: AuditCheckpointCoreV1;
+    checkpointDigest: Digest;
+    jws: string;
+}
+export interface AuditMerkleInclusionProofV1 {
+    leafIndex: DecimalString;
+    treeSize: DecimalString;
+    auditPath: Digest[];
+}
+export interface AuditMerkleConsistencyProofV1 {
+    oldTreeSize: DecimalString;
+    newTreeSize: DecimalString;
+    auditPath: Digest[];
+}
+export interface AuditBundleInclusionProofV1 extends AuditLedgerRef {
+    sequence: DecimalString;
+    entryDigest: Digest;
+    checkpointDigest: Digest;
+    proof: AuditMerkleInclusionProofV1;
+}
+export interface AuditBundleConsistencyProofV1 extends AuditLedgerRef {
+    oldCheckpointDigest: Digest;
+    newCheckpointDigest: Digest;
+    proof: AuditMerkleConsistencyProofV1;
+}
+export interface AuditObservationReceiptCoreV1 {
+    schema: 'https://schema.kya-os.org/v1/protocol/audit/observation/v1.0.0';
+    observerId: string;
+    observer: SignerRef;
+    ledgerId: string;
+    ledgerEpochId: string;
+    checkpointDigest: Digest;
+    treeSize: DecimalString;
+    observedAt: number;
+    previousObservationDigest: Digest | null;
+}
+export interface AuditObservationReceiptV1 {
+    core: AuditObservationReceiptCoreV1;
+    observationDigest: Digest;
+    jws: string;
+}
+export interface ObservedAuditCheckpoint {
+    checkpoint: SignedAuditCheckpointV1;
+    receipt: AuditObservationReceiptV1;
+}
+export interface AuditAnchorReceipt {
+    schema: 'https://schema.kya-os.org/v1/protocol/audit/anchor-receipt/v1.0.0';
+    kind: 'worm' | 'rfc3161' | 'scitt';
+    providerId: string;
+    checkpointDigest: Digest;
+    issuedAt: number;
+    receiptData?: string;
+}
+export type AuditBundleDisposition = 'included' | 'redacted' | 'disposed' | 'unavailable' | 'policy_excluded';
+export interface AuditBundleSelectionV1 extends AuditLedgerRef {
+    firstSequence: DecimalString;
+    lastSequence: DecimalString;
+    expectedHeadDigest: Digest;
+    checkpointTreeSizes: DecimalString[];
+}
+export interface AuditBundleInventoryItemV1 {
+    path: string;
+    mediaType: string;
+    disposition: AuditBundleDisposition;
+    digest?: Digest;
+    size?: DecimalString;
+    reasonCode?: string;
+}
+export interface AuditBundleManifestCoreV1 {
+    schema: 'https://schema.kya-os.org/v1/protocol/audit/bundle-manifest/v1.0.0';
+    bundleId: string;
+    formatVersion: '1.0.0';
+    selections: AuditBundleSelectionV1[];
+    exporter: SignerRef;
+    purpose: string;
+    exportedAt: number;
+    verificationPolicyDigest: Digest;
+    inventory: AuditBundleInventoryItemV1[];
+    integritySuite: 'KYA-AUDIT-BUNDLE-JCS-SHA256-JWS-2026';
+}
+export interface SignedAuditBundleManifestV1 {
+    core: AuditBundleManifestCoreV1;
+    manifestDigest: Digest;
+    jws: string;
+}
+export interface AuditBundleComponentV1 extends AuditBundleInventoryItemV1 {
+    content?: unknown;
+}
+export interface AuditReplayBundleV1 {
+    manifest: SignedAuditBundleManifestV1;
+    components: AuditBundleComponentV1[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/audit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE,MAAM,MAAM,MAAM,GAAG,UAAU,MAAM,EAAE,CAAC;AACxC,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AACnC,MAAM,MAAM,iBAAiB,GAAG,4BAA4B,MAAM,EAAE,CAAC;AAErE,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,WAAW,CAAA;CAAE,CAAC;AAE/C,kFAAkF;AAClF,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,0BAA0B,CAAC;CACxC;AAED,eAAO,MAAM,iBAAiB,0gCA8CpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,MAAM,GACN,OAAO,GACP,YAAY,GACZ,eAAe,GACf,SAAS,GACT,KAAK,GACL,QAAQ,GACR,gBAAgB,CAAC;AAErB,MAAM,MAAM,iBAAiB,GACzB;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,aAAa,GAAG,UAAU,GAAG,SAAS,GAAG,iBAAiB,CAAC;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACD;IACE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;IACpE,OAAO,EAAE,aAAa,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACD;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACD;IACE,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,iBAAiB,GAAG,mBAAmB,CAAC;IAChG,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC;CAChC,GACD;IACE,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,kBAAkB,GAAG,YAAY,CAAC;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACD;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,qBAAqB,GAAG,qBAAqB,GAAG,mBAAmB,CAAC;IACjH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACD;IACE,MAAM,EAAE,KAAK,CAAC;IACd,KAAK,EAAE,SAAS,GAAG,gBAAgB,GAAG,uBAAuB,GAAG,8BAA8B,CAAC;IAC/F,cAAc,CAAC,EAAE,SAAS,CAAC;IAC3B,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,GACD;IACE,MAAM,EAAE,QAAQ,CAAC;IACjB,KAAK,EAAE,eAAe,GAAG,oBAAoB,GAAG,oBAAoB,GAAG,qBAAqB,GAAG,0BAA0B,GAAG,mBAAmB,GAAG,uBAAuB,CAAC;IAC1K,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gCAAgC,CAAC,EAAE,MAAM,CAAC;IAC1C,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,WAAW,CAAC;CACjC,GACD;IACE,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,mBAAmB,GAAG,UAAU,GAAG,UAAU,GAAG,oBAAoB,GAAG,oBAAoB,CAAC;IACnG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,YAAY,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,CAAC;IACxD,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,kBAAkB,GAAG,qBAAqB,CAAC;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,0DAA0D,CAAC;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,cAAc,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,QAAQ,CAAC;IACpB,MAAM,EAAE;QACN,QAAQ,EAAE,QAAQ,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,aAAa,CAAC;QAC/B,yBAAyB,CAAC,EAAE,MAAM,CAAC;KACpC,CAAC;IACF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,QAAQ,CAAC;QAAC,wBAAwB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,gBAAgB,CAAC,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,WAAW,CAAA;KAAE,CAAC;IACrE,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAC;IACtE,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,WAAW,CAAA;KAAE,CAAC;IACnD,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE;QACP,cAAc,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;QACtE,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,0DAA0D,CAAC;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,aAAa,CAAC;IACxB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,wBAAwB,CAAC;IAChC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,4DAA4D,CAAC;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;IACpB,cAAc,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE;QAAE,IAAI,EAAE,0BAA0B,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACpE;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,eAAe,CAAC;AAEjE,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,KAAK,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,wBAAwB,EAAE,CAAC;QACzC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC,CAAC;IACH,gBAAgB,EAAE,wBAAwB,EAAE,CAAC;IAC7C,wBAAwB,CAAC,EAAE,KAAK,CAAC;QAC/B,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACjC,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,mBAAmB,EAAE,KAAK,CAAC;QACzB,UAAU,EAAE,wBAAwB,EAAE,CAAC;QACvC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC,CAAC;IACH,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,kBAAkB,EAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;IAC7C,iBAAiB,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,CAAC;IACtD,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,oBAAoB,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;CACxE;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,wEAAwE,CAAC;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sBAAsB,EAAE,0BAA0B,CAAC;IACnD,cAAc,EAAE,0BAA0B,CAAC;IAC3C,mBAAmB,EAAE,0BAA0B,CAAC;IAChD,eAAe,EAAE,0BAA0B,CAAC;IAC5C,yBAAyB,EAAE,0BAA0B,CAAC;IACtD,oBAAoB,EAAE,0BAA0B,CAAC;IACjD,oBAAoB,EAAE,0BAA0B,CAAC;CAClD;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,+DAA+D,CAAC;IACxE,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,aAAa,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,aAAa,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,CAAC;IAClB,cAAc,EAAE,mCAAmC,CAAC;CACrD;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,aAAa,CAAC;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,6BAA6B;IAC5C,WAAW,EAAE,aAAa,CAAC;IAC3B,WAAW,EAAE,aAAa,CAAC;IAC3B,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,2BAA4B,SAAQ,cAAc;IACjE,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,2BAA2B,CAAC;CACpC;AAED,MAAM,WAAW,6BAA8B,SAAQ,cAAc;IACnE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,6BAA6B,CAAC;CACtC;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,gEAAgE,CAAC;IACzE,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,6BAA6B,CAAC;IACpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,uBAAuB,CAAC;IACpC,OAAO,EAAE,yBAAyB,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,mEAAmE,CAAC;IAC5E,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,sBAAsB,GAC9B,UAAU,GACV,UAAU,GACV,UAAU,GACV,aAAa,GACb,iBAAiB,CAAC;AAEtB,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,aAAa,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,aAAa,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,sBAAsB,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,oEAAoE,CAAC;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,QAAQ,EAAE,SAAS,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB,EAAE,MAAM,CAAC;IACjC,SAAS,EAAE,0BAA0B,EAAE,CAAC;IACxC,cAAc,EAAE,sCAAsC,CAAC;CACxD;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,yBAAyB,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,sBAAuB,SAAQ,0BAA0B;IACxE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,2BAA2B,CAAC;IACtC,UAAU,EAAE,sBAAsB,EAAE,CAAC;CACtC"}

package/dist/audit/types.js

@@ -0,0 +1,49 @@
+/** Wire-level types for the KYA-OS Auditability Protocol v1. */
+export const AUDIT_EVENT_TYPES = [
+    'session.established',
+    'session.rejected',
+    'session.expired',
+    'session.replay_rejected',
+    'tool.call.started',
+    'tool.call.completed',
+    'tool.call.failed',
+    'tool.call.denied',
+    'tool.call.challenged',
+    'proof.generated',
+    'proof.verified',
+    'proof.rejected',
+    'delegation.issued',
+    'delegation.verified',
+    'delegation.rejected',
+    'delegation.revoked',
+    'delegation.cascade_revoked',
+    'delegation.outbound_attached',
+    'authorization.evaluated',
+    'authorization.approved',
+    'authorization.denied',
+    'authorization.step_up_required',
+    'grant.used',
+    'consent.requested',
+    'consent.approved',
+    'consent.denied',
+    'credential.required',
+    'credential.verified',
+    'credential.failed',
+    'key.rotated',
+    'policy.changed',
+    'configuration.changed',
+    'integrity_suite.transitioned',
+    'ledger.epoch.started',
+    'ledger.epoch.transitioned',
+    'checkpoint.created',
+    'checkpoint.anchored',
+    'checkpoint.anchor_failed',
+    'evidence.disposed',
+    'projection.reconciled',
+    'audit.source_high_water',
+    'audit.accessed',
+    'audit.exported',
+    'legal_hold.applied',
+    'retention.executed',
+];
+//# sourceMappingURL=types.js.map

package/dist/audit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAmChE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,qBAAqB;IACrB,kBAAkB;IAClB,iBAAiB;IACjB,yBAAyB;IACzB,mBAAmB;IACnB,qBAAqB;IACrB,kBAAkB;IAClB,kBAAkB;IAClB,sBAAsB;IACtB,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,oBAAoB;IACpB,4BAA4B;IAC5B,8BAA8B;IAC9B,yBAAyB;IACzB,wBAAwB;IACxB,sBAAsB;IACtB,gCAAgC;IAChC,YAAY;IACZ,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,aAAa;IACb,gBAAgB;IAChB,uBAAuB;IACvB,8BAA8B;IAC9B,sBAAsB;IACtB,2BAA2B;IAC3B,oBAAoB;IACpB,qBAAqB;IACrB,0BAA0B;IAC1B,mBAAmB;IACnB,uBAAuB;IACvB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,oBAAoB;CACZ,CAAC"}

package/dist/audit/verifier.d.ts

@@ -0,0 +1,73 @@
+import { type AuditHasher, type AuditSignatureVerifier } from './crypto.js';
+import type { AuditVerificationDimension, AuditObservationReceiptV1, AuditVerificationPolicyV1, AuditVerificationReportV1, SignedAuditCheckpointV1, SignedAuditEntryV1 } from './types.js';
+export declare const AUDIT_REASON_CODES: Readonly<{
+    readonly NOT_EVALUATED: "AUDIT_NOT_EVALUATED";
+    readonly SCHEMA_INVALID: "AUDIT_SCHEMA_INVALID";
+    readonly UNSUPPORTED_SUITE: "AUDIT_UNSUPPORTED_SUITE";
+    readonly UNSUPPORTED_ALGORITHM: "AUDIT_UNSUPPORTED_ALGORITHM";
+    readonly UNTRUSTED_RECORDER: "AUDIT_UNTRUSTED_RECORDER";
+    readonly SIGNATURE_INVALID: "AUDIT_SIGNATURE_INVALID";
+    readonly EVENT_DIGEST_MISMATCH: "AUDIT_EVENT_DIGEST_MISMATCH";
+    readonly EVIDENCE_MANIFEST_DIGEST_MISMATCH: "AUDIT_EVIDENCE_MANIFEST_DIGEST_MISMATCH";
+    readonly ENTRY_DIGEST_MISMATCH: "AUDIT_ENTRY_DIGEST_MISMATCH";
+    readonly RECEIPT_MISMATCH: "AUDIT_RECEIPT_MISMATCH";
+    readonly LEDGER_SCOPE_MISMATCH: "AUDIT_LEDGER_SCOPE_MISMATCH";
+    readonly SEQUENCE_GAP: "AUDIT_SEQUENCE_GAP";
+    readonly PREDECESSOR_MISMATCH: "AUDIT_PREDECESSOR_MISMATCH";
+    readonly GENESIS_INVALID: "AUDIT_GENESIS_INVALID";
+    readonly CHECKPOINT_MISSING: "AUDIT_CHECKPOINT_MISSING";
+    readonly CHECKPOINT_DIGEST_MISMATCH: "AUDIT_CHECKPOINT_DIGEST_MISMATCH";
+    readonly CHECKPOINT_SIGNATURE_INVALID: "AUDIT_CHECKPOINT_SIGNATURE_INVALID";
+    readonly CHECKPOINT_ROOT_MISMATCH: "AUDIT_CHECKPOINT_ROOT_MISMATCH";
+    readonly CHECKPOINT_RANGE_MISMATCH: "AUDIT_CHECKPOINT_RANGE_MISMATCH";
+    readonly CHECKPOINT_CHAIN_MISMATCH: "AUDIT_CHECKPOINT_CHAIN_MISMATCH";
+    readonly CHECKPOINT_FORK_DETECTED: "AUDIT_CHECKPOINT_FORK_DETECTED";
+    readonly MERKLE_PROOF_INVALID: "AUDIT_MERKLE_PROOF_INVALID";
+    readonly OBSERVER_EVIDENCE_MISSING: "AUDIT_OBSERVER_EVIDENCE_MISSING";
+    readonly OBSERVATION_DIGEST_MISMATCH: "AUDIT_OBSERVATION_DIGEST_MISMATCH";
+    readonly OBSERVATION_SIGNATURE_INVALID: "AUDIT_OBSERVATION_SIGNATURE_INVALID";
+    readonly OBSERVATION_SCOPE_MISMATCH: "AUDIT_OBSERVATION_SCOPE_MISMATCH";
+    readonly UNTRUSTED_OBSERVER: "AUDIT_UNTRUSTED_OBSERVER";
+    readonly OBSERVATION_STALE: "AUDIT_OBSERVATION_STALE";
+    readonly OBSERVATION_CHAIN_MISMATCH: "AUDIT_OBSERVATION_CHAIN_MISMATCH";
+    readonly UNTRUSTED_SUPPORTING_ANCHOR: "AUDIT_UNTRUSTED_SUPPORTING_ANCHOR";
+    readonly SUPPORTING_ANCHOR_INVALID: "AUDIT_SUPPORTING_ANCHOR_INVALID";
+    readonly AUTHORIZATION_EVIDENCE_MISSING: "AUDIT_AUTHORIZATION_EVIDENCE_MISSING";
+    readonly AUTHORIZATION_COLLATERAL_NOT_VERIFIED: "AUDIT_AUTHORIZATION_COLLATERAL_NOT_VERIFIED";
+    readonly CURRENT_AUTHORIZATION_NOT_EVALUATED: "AUDIT_CURRENT_AUTHORIZATION_NOT_EVALUATED";
+    readonly BUNDLE_SCHEMA_INVALID: "AUDIT_BUNDLE_SCHEMA_INVALID";
+    readonly BUNDLE_MANIFEST_DIGEST_MISMATCH: "AUDIT_BUNDLE_MANIFEST_DIGEST_MISMATCH";
+    readonly BUNDLE_SIGNATURE_INVALID: "AUDIT_BUNDLE_SIGNATURE_INVALID";
+    readonly BUNDLE_EXPORTER_UNAUTHORIZED: "AUDIT_BUNDLE_EXPORTER_UNAUTHORIZED";
+    readonly BUNDLE_INVENTORY_MISMATCH: "AUDIT_BUNDLE_INVENTORY_MISMATCH";
+    readonly BUNDLE_COMPONENT_DIGEST_MISMATCH: "AUDIT_BUNDLE_COMPONENT_DIGEST_MISMATCH";
+    readonly BUNDLE_SELECTION_INCOMPLETE: "AUDIT_BUNDLE_SELECTION_INCOMPLETE";
+    readonly VERIFICATION_POLICY_MISMATCH: "AUDIT_VERIFICATION_POLICY_MISMATCH";
+    readonly VERIFICATION_POLICY_INVALID: "AUDIT_VERIFICATION_POLICY_INVALID";
+    readonly EXPLICITLY_REDACTED: "AUDIT_EXPLICITLY_REDACTED";
+    readonly EXPLICITLY_DISPOSED: "AUDIT_EXPLICITLY_DISPOSED";
+    readonly EXPLICITLY_UNAVAILABLE: "AUDIT_EXPLICITLY_UNAVAILABLE";
+}>;
+export interface AuditArtifactVerifierOptions {
+    hasher: AuditHasher;
+    signatures: AuditSignatureVerifier;
+    verifiedAt?: () => number;
+    authorization?: AuditAuthorizationVerifier;
+}
+/** Optional collateral verifier kept separate from structural/cryptographic verification. */
+export interface AuditAuthorizationVerifier {
+    verifyAsObserved(entries: readonly SignedAuditEntryV1[], policy: AuditVerificationPolicyV1): Promise<AuditVerificationDimension>;
+    verifyCurrent(entries: readonly SignedAuditEntryV1[], policy: AuditVerificationPolicyV1): Promise<AuditVerificationDimension>;
+}
+/** Pure historical verifier. It never reads live nonce state or applies current freshness. */
+export declare class AuditArtifactVerifier {
+    private readonly options;
+    constructor(options: AuditArtifactVerifierOptions);
+    verifyEntries(entries: readonly unknown[], policy: AuditVerificationPolicyV1 | unknown): Promise<AuditVerificationReportV1>;
+    verifyCheckpoint(checkpoint: SignedAuditCheckpointV1, entries: readonly SignedAuditEntryV1[], policy: AuditVerificationPolicyV1): Promise<AuditVerificationDimension>;
+    verifyObservation(checkpoint: SignedAuditCheckpointV1, receipt: AuditObservationReceiptV1, policy: AuditVerificationPolicyV1): Promise<AuditVerificationDimension>;
+    private verifyEntry;
+    private verifyChainPosition;
+}
+export declare function mergeAuditDimensions(...values: readonly AuditVerificationDimension[]): AuditVerificationDimension;
+//# sourceMappingURL=verifier.d.ts.map

package/dist/audit/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../src/audit/verifier.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAe5F,OAAO,KAAK,EACV,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EAEzB,uBAAuB,EACvB,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+CpB,CAAC;AA6CZ,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,sBAAsB,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,0BAA0B,CAAC;CAC5C;AAED,6FAA6F;AAC7F,MAAM,WAAW,0BAA0B;IACzC,gBAAgB,CACd,OAAO,EAAE,SAAS,kBAAkB,EAAE,EACtC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACvC,aAAa,CACX,OAAO,EAAE,SAAS,kBAAkB,EAAE,EACtC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACxC;AAED,8FAA8F;AAC9F,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,4BAA4B;IAE5D,aAAa,CACjB,OAAO,EAAE,SAAS,OAAO,EAAE,EAC3B,MAAM,EAAE,yBAAyB,GAAG,OAAO,GAC1C,OAAO,CAAC,yBAAyB,CAAC;IAqE/B,gBAAgB,CACpB,UAAU,EAAE,uBAAuB,EACnC,OAAO,EAAE,SAAS,kBAAkB,EAAE,EACtC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,0BAA0B,CAAC;IA4DhC,iBAAiB,CACrB,UAAU,EAAE,uBAAuB,EACnC,OAAO,EAAE,yBAAyB,EAClC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,0BAA0B,CAAC;YA6DxB,WAAW;IA+CzB,OAAO,CAAC,mBAAmB;CAgC5B;AAED,wBAAgB,oBAAoB,CAClC,GAAG,MAAM,EAAE,SAAS,0BAA0B,EAAE,GAC/C,0BAA0B,CAS5B"}