@kya-os/mcp 1.16.2 → 1.18.0

package/dist/audit/recorder-service.js

@@ -15,6 +15,14 @@ function sameHead(left, right) {
         return left === right;
     return left.entryDigest === right.entryDigest && left.sequence === right.sequence;
 }
+/** The later of two heads; at an equal sequence the first one is kept. */
+function higherHead(current, candidate) {
+    if (candidate === null)
+        return current;
+    if (current === null)
+        return candidate;
+    return BigInt(candidate.sequence) > BigInt(current.sequence) ? candidate : current;
+}
 function sameSigner(left, right) {
     return left.did === right.did && left.kid === right.kid && left.alg === right.alg;
 }
@@ -31,6 +39,12 @@ export class AuditRecorderService {
     config;
     maxAppendConflicts;
     initialization;
+    /** Highest head this recorder has itself appended in its epoch. */
+    committedHead = null;
+    /** Highest head the journal has reported in a compare-and-append result. */
+    reportedHead = null;
+    /** Write-ahead evidence objects held by submissions in flight, by object ID. */
+    heldEvidence = new Map();
     constructor(config) {
         this.config = config;
         if ((config.previousEpochId === undefined) !==
@@ -62,29 +76,66 @@ export class AuditRecorderService {
             throw new AuditProtocolError(AUDIT_ERROR_CODES.EPOCH_MISMATCH, 'Wrong audit ledger epoch');
         }
         await this.ensureInitialized();
-        await this.persistSubmittedEvidence(submission.encryptedEvidence, producerEvent);
+        const held = this.holdEvidence(submission.encryptedEvidence);
         try {
-            return await this.appendEvent(producerEvent, context, false, identity);
+            const stored = await this.persistSubmittedEvidence(submission.encryptedEvidence, producerEvent);
+            try {
+                return await this.appendEvent(producerEvent, context, false, identity);
+            }
+            catch (error) {
+                await this.disposeUncommittedEvidence(stored, identity);
+                throw error;
+            }
         }
-        catch (error) {
-            await this.disposeUncommittedEvidence(submission.encryptedEvidence, identity);
-            throw error;
+        finally {
+            this.releaseEvidence(held);
         }
     }
     /**
-     * Best-effort compensation for write-ahead evidence whose append failed: the
-     * ciphertext is disposed only after re-confirming that no committed entry
-     * claims this event identity, so a raced idempotent commit is never stripped
-     * of its evidence. Failures here leave orphans for operator retention tooling.
+     * Registers this submission as a holder of each evidence object it carries.
+     * An object two submissions hold at once is marked shared for as long as
+     * either still holds it: both may have seen it as new, and the other may
+     * already have committed a reference to it.
      */
-    async disposeUncommittedEvidence(evidence, identity) {
-        if (evidence.length === 0 || this.config.evidence === undefined)
+    holdEvidence(evidence) {
+        const objectIds = [...new Set(evidence.map((item) => item.ref.objectId))];
+        for (const objectId of objectIds) {
+            const hold = this.heldEvidence.get(objectId);
+            if (hold === undefined)
+                this.heldEvidence.set(objectId, { holders: 1, shared: false });
+            else
+                this.heldEvidence.set(objectId, { holders: hold.holders + 1, shared: true });
+        }
+        return objectIds;
+    }
+    releaseEvidence(objectIds) {
+        for (const objectId of objectIds) {
+            const hold = this.heldEvidence.get(objectId);
+            if (hold.holders === 1)
+                this.heldEvidence.delete(objectId);
+            else
+                this.heldEvidence.set(objectId, { ...hold, holders: hold.holders - 1 });
+        }
+    }
+    /**
+     * Best-effort compensation for write-ahead evidence whose append failed. Only
+     * objects this submission newly stored are disposed: an object that already
+     * existed may be referenced by another committed entry, and so may one that
+     * a concurrent submission held at the same time. They are disposed only
+     * after re-confirming that no committed entry claims this event identity, so
+     * a raced idempotent commit is never stripped of its evidence. Failures here
+     * leave orphans for operator retention tooling.
+     */
+    async disposeUncommittedEvidence(stored, identity) {
+        if (stored.length === 0 || this.config.evidence === undefined)
             return;
         try {
             const committed = await this.config.journal.getByIdempotencyKey(this.config.ledgerId, identity.idempotencyKey);
             if (committed !== null)
                 return;
-            for (const item of evidence) {
+            for (const item of stored) {
+                if (this.heldEvidence.get(item.ref.objectId)?.shared === true)
+                    continue;
                 await this.config.evidence.applyRetention({
                     kind: 'dispose',
                     ref: item.ref,
@@ -114,15 +165,17 @@ export class AuditRecorderService {
             throw new AuditProtocolError(AUDIT_ERROR_CODES.UNAUTHORIZED_SUBMISSION, 'Event tenant does not match the authenticated tenant authority');
         }
     }
+    /** Persists write-ahead evidence and returns the objects that did not exist before. */
     async persistSubmittedEvidence(evidence, event) {
         if (evidence.length === 0)
-            return;
+            return [];
         if (this.config.evidence === undefined) {
             throw new AuditProtocolError(AUDIT_ERROR_CODES.EVIDENCE_FAILURE, 'Encrypted evidence was submitted but no evidence provider is configured');
         }
         try {
             const refs = new Map(collectAuditEvidenceRefs(event).map((ref) => [ref.objectId, ref]));
             const submitted = new Set();
+            const stored = [];
             for (const item of evidence) {
                 const referenced = refs.get(item.ref.objectId);
                 if (submitted.has(item.ref.objectId) || referenced === undefined ||
@@ -130,8 +183,12 @@ export class AuditRecorderService {
                     throw new AuditProtocolError(AUDIT_ERROR_CODES.EVIDENCE_FAILURE, 'Submitted evidence does not exactly match a unique frozen event reference', { objectId: item.ref.objectId });
                 }
                 submitted.add(item.ref.objectId);
+                const existed = await this.config.evidence.has(item.ref);
                 await this.config.evidence.putIfAbsent(item);
+                if (!existed)
+                    stored.push(item);
             }
+            return stored;
         }
         catch (error) {
             if (error instanceof AuditProtocolError &&
@@ -242,7 +299,14 @@ export class AuditRecorderService {
         }
         const ledger = this.ledgerRef();
         for (let attempt = 0; attempt <= this.maxAppendConflicts; attempt += 1) {
-            const head = await this.config.journal.getHead(ledger);
+            // A read behind this recorder's own commits (a lagging replica) is not
+            // an append position: compare-and-append against the committed head, so
+            // a stale read costs one retry and a journal that really moved backwards
+            // answers with a conflict that proves it instead of accepting a second
+            // entry at a receipted sequence.
+            const committed = this.committedHead;
+            const reported = this.reportedHead;
+            const head = higherHead(committed, await this.config.journal.getHead(ledger));
             if (genesis && head !== null) {
                 const raced = await this.config.journal.getByIdempotencyKey(this.config.ledgerId, idempotencyKey);
                 if (raced !== null)
@@ -261,20 +325,52 @@ export class AuditRecorderService {
             catch (error) {
                 throw new AuditProtocolError(AUDIT_ERROR_CODES.JOURNAL_FAILURE, 'Audit journal append failed', undefined, { cause: error });
             }
-            if (result.kind === 'appended' || result.kind === 'duplicate') {
-                return result.kind === 'duplicate'
-                    ? this.resolveDuplicate(result.entry, eventDigest)
-                    : result.entry;
+            if (result.kind === 'appended') {
+                const appended = {
+                    ...ledger,
+                    sequence: result.entry.core.sequence,
+                    entryDigest: result.entry.entryDigest,
+                };
+                this.committedHead = higherHead(this.committedHead, appended);
+                this.reportedHead = higherHead(this.reportedHead, appended);
+                return result.entry;
             }
-            if (result.kind === 'idempotency_conflict') {
-                return this.resolveDuplicate(result.existing, eventDigest);
+            if (result.kind === 'duplicate' || result.kind === 'idempotency_conflict') {
+                const existing = result.kind === 'duplicate' ? result.entry : result.existing;
+                // A replica that lost the cold-start genesis race finds a genesis that
+                // differs only in recorder-authored timing; it is accepted on epoch
+                // configuration, never as an event-identity conflict.
+                return genesis
+                    ? this.validateExistingGenesis(existing)
+                    : this.resolveDuplicate(existing, eventDigest);
             }
+            this.assertNoRegression(result.actualHead, committed, reported);
+            this.reportedHead = higherHead(this.reportedHead, result.actualHead);
             if (sameHead(head, result.actualHead)) {
                 throw new AuditProtocolError(AUDIT_ERROR_CODES.JOURNAL_FAILURE, 'Audit journal reported a head conflict without advancing its head');
             }
         }
         throw new AuditProtocolError(AUDIT_ERROR_CODES.APPEND_CONFLICT_EXHAUSTED, 'Audit append conflict retry budget exhausted');
     }
+    /**
+     * The compare-and-append result is the journal's authoritative head. One
+     * below a head this recorder had committed before issuing the append, or a
+     * different digest at a sequence the journal already reported, means a
+     * failover to a lagging primary or a restore. Retrying there would sign a
+     * second entry at a receipted sequence, so the recorder fails closed. The
+     * heads compared are the ones known when the append was issued, so a
+     * concurrent submission's later commit never makes a correct answer look
+     * stale.
+     */
+    assertNoRegression(actual, committed, reported) {
+        const forks = (known) => known !== null && actual !== null &&
+            known.sequence === actual.sequence && known.entryDigest !== actual.entryDigest;
+        if ((committed !== null &&
+            (actual === null || BigInt(actual.sequence) < BigInt(committed.sequence))) ||
+            forks(committed) || forks(reported)) {
+            throw new AuditProtocolError(AUDIT_ERROR_CODES.JOURNAL_FAILURE, 'Audit journal head moved behind a head this recorder already committed or saw', { committedSequence: committed?.sequence, reportedSequence: actual?.sequence });
+        }
+    }
     async identifyEvent(event, context) {
         const eventDigest = await digestAuditEvent(this.config.hasher, event);
         const idempotencyKey = await hashAuditValue(this.config.hasher, AUDIT_DIGEST_DOMAINS.idempotency, {

package/dist/audit/recorder-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"recorder-service.js","sourceRoot":"","sources":["../../src/audit/recorder-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,cAAc,EAAsC,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AA+DtB,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAsB,EAAE,KAAuB;IAC/D,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,KAAK,KAAK,CAAC;IAC3D,OAAO,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;AACpF,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB,EAAE,KAAyB;IACrE,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AACpF,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,KAAe;IAChD,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAAiB,EACjB,QAA8B,EAC9B,UAAoB;IAEpB,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnE,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,CAAC;QAC7E,UAAU,CAAC,GAAG,KAAK,SAAS,CAAC;AACjC,CAAC;AAED,MAAM,OAAO,oBAAoB;IAIF;IAHZ,kBAAkB,CAAS;IACpC,cAAc,CAA+B;IAErD,YAA6B,MAAkC;QAAlC,WAAM,GAAN,MAAM,CAA4B;QAC7D,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC;YACxC,CAAC,MAAM,CAAC,gCAAgC,KAAK,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,qBAAqB,EACvC,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACtF,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,qBAAqB,EACvC,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,GAAG,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,UAAmC,EACnC,OAA4C;QAE5C,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,uBAAuB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,CAAC,sBAAsB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACtC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,uBAAuB,EACzC,kDAAkD,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,QAAQ,CAAC,cAAc,CACxB,CAAC;QACF,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEtF,6EAA6E;QAC7E,6EAA6E;QAC7E,yEAAyE;QACzE,IAAI,UAAU,CAAC,qBAAqB,KAAK,SAAS;YAChD,UAAU,CAAC,qBAAqB,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACjE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YAC9E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,0BAA0B,CACtC,QAA2C,EAC3C,QAAoC;QAEpC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO;QACxE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,QAAQ,CAAC,cAAc,CACxB,CAAC;YACF,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO;YAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;oBACxC,IAAI,EAAE,SAAS;oBACf,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,YAAY,EAAE,gBAAgB;oBAC9B,MAAM,EAAE,2BAA2B;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IAEO,0BAA0B,CAChC,UAAmC,EACnC,OAA4C;QAE5C,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC3D,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,uBAAuB,EACzC,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAEO,sBAAsB,CAC5B,KAA+B,EAC/B,OAA4C;QAE5C,IAAI,CAAC,qBAAqB,CACxB,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,WAAW,EACnB,KAAK,CAAC,MAAM,CAAC,QAAQ,CACtB,EAAE,CAAC;YACF,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,uBAAuB,EACzC,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YACpD,CAAC,qBAAqB,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,uBAAuB,EACzC,gEAAgE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,QAA2C,EAC3C,KAA+B;QAE/B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAClC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,gBAAgB,EAClC,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC/C,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,UAAU,KAAK,SAAS;oBAC9D,gBAAgB,CAAC,UAAU,CAAC,KAAK,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9D,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,gBAAgB,EAClC,2EAA2E,EAC3E,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAChC,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACjC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB;gBACrC,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,gBAAgB;gBAAE,MAAM,KAAK,CAAC;YACjE,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,gBAAgB,EAClC,0CAA0C,EAC1C,SAAS,EACT,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACrE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK;gBAAE,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,eAAe,EAAE,oCAAoC,CAAC,CAAC;QACxG,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAqB,CAAC,aAAa,CAAC;gBAC9E,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;gBAC5C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACtC,gCAAgC,EAAE,IAAI,CAAC,MAAM,CAAC,gCAAiC;aAChF,CAAC,CAAC;YACH,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,qBAAqB,EACvC,yDAAyD,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,WAAW,CACtC,IAAI,CAAC,YAAY,EAAE,EACnB;YACE,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;YAC7C,eAAe,EAAE,gBAAgB;YACjC,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;YACpE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SACjC,EACD,IAAI,CACL,CAAC,OAAO,CAAC,GAAG,EAAE;YACb,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,uBAAuB,CAAC,SAA6B;QAC3D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YACzC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG;gBACvC,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,IAAI;gBACvC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC5C,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa;gBACtD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;gBACvD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,sBAAsB;gBACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO;gBAChD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ;gBACzD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;gBACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;gBACnE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBAC5D,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAC3B,OAAO,CAAC,KAAK,KAAK,eAAe;gBACjC,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,MAAM,CAAC,eAAe;gBACvD,OAAO,CAAC,gCAAgC;oBACtC,IAAI,CAAC,MAAM,CAAC,gCAAgC,CAAC;YACjD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACnF,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,iFAAiF,EACjF,SAAS,EACT,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,OAAO,uBAAuB,CAAC;YAC7B,MAAM,EAAE,qBAAqB;YAC7B,OAAO,EAAE,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YACvE,SAAS,EAAE,sBAAsB;YACjC,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YACnC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,MAAM,EAAE;gBACN,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACjE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,cAAc,EAAE,GAAG;aACpB;YACD,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;YACjE,MAAM,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;YACpC,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,eAAe;gBACtB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe;oBAC7B,CAAC,CAAC;wBACE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;wBAC5C,gCAAgC,EAC9B,IAAI,CAAC,MAAM,CAAC,gCAAgC;qBAC/C;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;YACD,OAAO,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAA+B,EAC/B,OAA4C,EAC5C,OAAO,GAAG,KAAK,EACf,aAA+D;QAE/D,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,aAAa;YACnD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE3C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,cAAc,CACf,CAAC;QACF,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,0EAA0E;YAC1E,yEAAyE;YACzE,OAAO,OAAO;gBACZ,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC;gBACzC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,kBAAkB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,OAAO,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,cAAc,CACf,CAAC;gBACF,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/E,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;oBAClD,MAAM;oBACN,YAAY,EAAE,IAAI;oBAClB,KAAK,EAAE,SAAS;oBAChB,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,6BAA6B,EAC7B,SAAS,EACT,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9D,OAAO,MAAM,CAAC,IAAI,KAAK,WAAW;oBAChC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC;oBAClD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACnB,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC3C,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,mEAAmE,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,yBAAyB,EAC3C,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,KAA+B,EAC/B,OAA4C;QAE5C,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,MAAM,cAAc,CACzC,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB,oBAAoB,CAAC,WAAW,EAChC;YACE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CACF,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACzC,CAAC;IAEO,gBAAgB,CAAC,QAA4B,EAAE,MAAc;QACnE,IAAI,QAAQ,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,iBAAiB,EACnC,yEAAyE,EACzE,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CACzC,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,KAA+B,EAC/B,WAAmB,EACnB,IAAsB,EACtB,OAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/E,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,uCAAuC,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,sBAAsB,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,mBAAmB,CAAC;YAC/B,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,QAAQ;YACR,mBAAmB,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI;YAC9C,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;YAChC,WAAW;YACX,KAAK;YACL,sBAAsB;YACtB,cAAc,EAAE,qBAAqB;SACtC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,6BAA6B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9E,OAAO,UAAU,CAAC;YAChB,IAAI;YACJ,WAAW;YACX,WAAW;YACX,eAAe,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;SACf,CAAC,CAAC;IAClC,CAAC;IAEO,SAAS;QACf,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;SAChC,CAAC;IACb,CAAC;CACF"}
+{"version":3,"file":"recorder-service.js","sourceRoot":"","sources":["../../src/audit/recorder-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,cAAc,EAAsC,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AA+DtB,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAsB,EAAE,KAAuB;IAC/D,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,KAAK,KAAK,CAAC;IAC3D,OAAO,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;AACpF,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU,CAAC,OAAyB,EAAE,SAA2B;IACxE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AACrF,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB,EAAE,KAAyB;IACrE,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AACpF,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,KAAe;IAChD,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAAiB,EACjB,QAA8B,EAC9B,UAAoB;IAEpB,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnE,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,CAAC;QAC7E,UAAU,CAAC,GAAG,KAAK,SAAS,CAAC;AACjC,CAAC;AAED,MAAM,OAAO,oBAAoB;IAUF;IATZ,kBAAkB,CAAS;IACpC,cAAc,CAA+B;IACrD,mEAAmE;IAC3D,aAAa,GAAqB,IAAI,CAAC;IAC/C,4EAA4E;IACpE,YAAY,GAAqB,IAAI,CAAC;IAC9C,gFAAgF;IAC/D,YAAY,GAAG,IAAI,GAAG,EAAgD,CAAC;IAExF,YAA6B,MAAkC;QAAlC,WAAM,GAAN,MAAM,CAA4B;QAC7D,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC;YACxC,CAAC,MAAM,CAAC,gCAAgC,KAAK,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,qBAAqB,EACvC,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACtF,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,qBAAqB,EACvC,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,GAAG,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,UAAmC,EACnC,OAA4C;QAE5C,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,uBAAuB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,CAAC,sBAAsB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACtC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,uBAAuB,EACzC,kDAAkD,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,QAAQ,CAAC,cAAc,CACxB,CAAC;QACF,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEtF,6EAA6E;QAC7E,6EAA6E;QAC7E,yEAAyE;QACzE,IAAI,UAAU,CAAC,qBAAqB,KAAK,SAAS;YAChD,UAAU,CAAC,qBAAqB,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACjE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAChD,UAAU,CAAC,iBAAiB,EAC5B,aAAa,CACd,CAAC;YACF,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACxD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,YAAY,CAAC,QAA2C;QAC9D,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1E,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;;gBAClF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,eAAe,CAAC,SAA4B;QAClD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;;gBACtD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,0BAA0B,CACtC,MAAyC,EACzC,QAAoC;QAEpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO;QACtE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,QAAQ,CAAC,cAAc,CACxB,CAAC;YACF,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO;YAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI;oBAAE,SAAS;gBACxE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;oBACxC,IAAI,EAAE,SAAS;oBACf,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,YAAY,EAAE,gBAAgB;oBAC9B,MAAM,EAAE,2BAA2B;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IAEO,0BAA0B,CAChC,UAAmC,EACnC,OAA4C;QAE5C,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC3D,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,uBAAuB,EACzC,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAEO,sBAAsB,CAC5B,KAA+B,EAC/B,OAA4C;QAE5C,IAAI,CAAC,qBAAqB,CACxB,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,WAAW,EACnB,KAAK,CAAC,MAAM,CAAC,QAAQ,CACtB,EAAE,CAAC;YACF,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,uBAAuB,EACzC,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YACpD,CAAC,qBAAqB,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,uBAAuB,EACzC,gEAAgE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uFAAuF;IAC/E,KAAK,CAAC,wBAAwB,CACpC,QAA2C,EAC3C,KAA+B;QAE/B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,gBAAgB,EAClC,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;YACpC,MAAM,MAAM,GAA6B,EAAE,CAAC;YAC5C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC/C,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,UAAU,KAAK,SAAS;oBAC9D,gBAAgB,CAAC,UAAU,CAAC,KAAK,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9D,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,gBAAgB,EAClC,2EAA2E,EAC3E,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAChC,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBAC7C,IAAI,CAAC,OAAO;oBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB;gBACrC,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,gBAAgB;gBAAE,MAAM,KAAK,CAAC;YACjE,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,gBAAgB,EAClC,0CAA0C,EAC1C,SAAS,EACT,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACrE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK;gBAAE,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,eAAe,EAAE,oCAAoC,CAAC,CAAC;QACxG,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAqB,CAAC,aAAa,CAAC;gBAC9E,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;gBAC5C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACtC,gCAAgC,EAAE,IAAI,CAAC,MAAM,CAAC,gCAAiC;aAChF,CAAC,CAAC;YACH,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,qBAAqB,EACvC,yDAAyD,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,WAAW,CACtC,IAAI,CAAC,YAAY,EAAE,EACnB;YACE,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;YAC7C,eAAe,EAAE,gBAAgB;YACjC,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;YACpE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SACjC,EACD,IAAI,CACL,CAAC,OAAO,CAAC,GAAG,EAAE;YACb,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,uBAAuB,CAAC,SAA6B;QAC3D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YACzC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG;gBACvC,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,IAAI;gBACvC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC5C,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa;gBACtD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;gBACvD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,sBAAsB;gBACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO;gBAChD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ;gBACzD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;gBACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;gBACnE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBAC5D,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAC3B,OAAO,CAAC,KAAK,KAAK,eAAe;gBACjC,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,MAAM,CAAC,eAAe;gBACvD,OAAO,CAAC,gCAAgC;oBACtC,IAAI,CAAC,MAAM,CAAC,gCAAgC,CAAC;YACjD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACnF,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,iFAAiF,EACjF,SAAS,EACT,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,OAAO,uBAAuB,CAAC;YAC7B,MAAM,EAAE,qBAAqB;YAC7B,OAAO,EAAE,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YACvE,SAAS,EAAE,sBAAsB;YACjC,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YACnC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,MAAM,EAAE;gBACN,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACjE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,cAAc,EAAE,GAAG;aACpB;YACD,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;YACjE,MAAM,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;YACpC,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,eAAe;gBACtB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe;oBAC7B,CAAC,CAAC;wBACE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;wBAC5C,gCAAgC,EAC9B,IAAI,CAAC,MAAM,CAAC,gCAAgC;qBAC/C;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;YACD,OAAO,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAA+B,EAC/B,OAA4C,EAC5C,OAAO,GAAG,KAAK,EACf,aAA+D;QAE/D,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,aAAa;YACnD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE3C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,cAAc,CACf,CAAC;QACF,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,0EAA0E;YAC1E,yEAAyE;YACzE,OAAO,OAAO;gBACZ,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC;gBACzC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,kBAAkB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,iCAAiC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;YACnC,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9E,IAAI,OAAO,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,cAAc,CACf,CAAC;gBACF,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/E,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;oBAClD,MAAM;oBACN,YAAY,EAAE,IAAI;oBAClB,KAAK,EAAE,SAAS;oBAChB,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,6BAA6B,EAC7B,SAAS,EACT,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG;oBACf,GAAG,MAAM;oBACT,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ;oBACpC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;iBACtC,CAAC;gBACF,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;gBAC9D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;gBAC5D,OAAO,MAAM,CAAC,KAAK,CAAC;YACtB,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAC9E,uEAAuE;gBACvE,oEAAoE;gBACpE,sDAAsD;gBACtD,OAAO,OAAO;oBACZ,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;oBACxC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACrE,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,mEAAmE,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,yBAAyB,EAC3C,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,kBAAkB,CACxB,MAAwB,EACxB,SAA2B,EAC3B,QAA0B;QAE1B,MAAM,KAAK,GAAG,CAAC,KAAuB,EAAW,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;YACnF,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;QACjF,IAAI,CAAC,SAAS,KAAK,IAAI;YACrB,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1E,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,+EAA+E,EAC/E,EAAE,iBAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,KAA+B,EAC/B,OAA4C;QAE5C,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,MAAM,cAAc,CACzC,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB,oBAAoB,CAAC,WAAW,EAChC;YACE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CACF,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IACzC,CAAC;IAEO,gBAAgB,CAAC,QAA4B,EAAE,MAAc;QACnE,IAAI,QAAQ,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,iBAAiB,EACnC,yEAAyE,EACzE,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CACzC,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,KAA+B,EAC/B,WAAmB,EACnB,IAAsB,EACtB,OAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/E,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,kBAAkB,CAC1B,iBAAiB,CAAC,eAAe,EACjC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,uCAAuC,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,sBAAsB,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,mBAAmB,CAAC;YAC/B,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,QAAQ;YACR,mBAAmB,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI;YAC9C,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;YAChC,WAAW;YACX,KAAK;YACL,sBAAsB;YACtB,cAAc,EAAE,qBAAqB;SACtC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,6BAA6B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9E,OAAO,UAAU,CAAC;YAChB,IAAI;YACJ,WAAW;YACX,WAAW;YACX,eAAe,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;SACf,CAAC,CAAC;IAClC,CAAC;IAEO,SAAS;QACf,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;SAChC,CAAC;IACb,CAAC;CACF"}

package/dist/audit/reference-recorder.d.ts

@@ -40,4 +40,3 @@ export interface ReferenceRecorderOptions {
 export declare function sampleAuditEvent(sequence: number, overrides?: Partial<AuditProducerEventCoreV1>): AuditProducerEventCoreV1;
 /** Compose an in-memory reference recorder with a freshly generated Ed25519 signing key. */
 export declare function createInMemoryReferenceRecorder(options?: ReferenceRecorderOptions): Promise<ReferenceRecorder>;
-//# sourceMappingURL=reference-recorder.d.ts.map

package/dist/audit/replay-bundle.d.ts

@@ -49,4 +49,3 @@ export interface VerifyAuditBundleDependencies {
 }
 /** Offline bundle verification. Trust is supplied only through the policy argument. */
 export declare function verifyAuditBundle(bundle: AuditReplayBundleV1 | unknown, policy: AuditVerificationPolicyV1, dependencies: VerifyAuditBundleDependencies): Promise<AuditVerificationReportV1>;
-//# sourceMappingURL=replay-bundle.d.ts.map

package/dist/audit/replay-bundle.js

@@ -3,7 +3,7 @@ import { hashAuditValue } from './crypto.js';
 import { AUDIT_DIGEST_DOMAINS } from './integrity.js';
 import { Rfc9162MerkleTree } from './merkle.js';
 import { auditObservationReceiptSchema, auditAnchorReceiptSchema, auditBundleConsistencyProofSchema, auditBundleInclusionProofSchema, auditReplayBundleSchema, auditVerificationPolicySchema, parseAuditBundleManifestCore, signedAuditCheckpointSchema, signedAuditEntrySchema, } from './schemas.js';
-import { AUDIT_REASON_CODES, AuditArtifactVerifier, mergeAuditDimensions, } from './verifier.js';
+import { AUDIT_REASON_CODES, AuditArtifactVerifier, applyRequiredAuditProfile, mergeAuditDimensions, } from './verifier.js';
 const BUNDLE_SCHEMA = 'https://schema.kya-os.org/v1/protocol/audit/bundle-manifest/v1.0.0';
 const BUNDLE_SUITE = 'KYA-AUDIT-BUNDLE-JCS-SHA256-JWS-2026';
 export const AUDIT_BUNDLE_MEDIA_TYPES = Object.freeze({
@@ -123,10 +123,27 @@ export class AuditReplayBundleExporter {
         });
     }
 }
-function exporterAuthorized(core, policy) {
-    return policy.authorizedExporters.some((authorization) => authorization.allowedPurposes.includes(core.purpose) &&
-        core.selections.every((selection) => authorization.allowedLedgerIds.includes(selection.ledgerId)) &&
-        authorization.signerKeys.some((key) => sameSigner(key.signer, core.exporter) && atTime(key, core.exportedAt)));
+/**
+ * An export has no ledger position, so an exporter key bounded by
+ * `validFromCheckpoint` or `validUntilCheckpoint` can neither be confirmed nor
+ * refuted here: such a key leaves the exporter `unresolved`, never authorized.
+ */
+function exporterAuthorization(core, policy) {
+    let result = 'unauthorized';
+    for (const authorization of policy.authorizedExporters) {
+        if (!authorization.allowedPurposes.includes(core.purpose) ||
+            !core.selections.every((selection) => authorization.allowedLedgerIds.includes(selection.ledgerId)))
+            continue;
+        for (const key of authorization.signerKeys) {
+            if (!sameSigner(key.signer, core.exporter) || !atTime(key, core.exportedAt))
+                continue;
+            if (key.validFromCheckpoint === undefined && key.validUntilCheckpoint === undefined) {
+                return 'authorized';
+            }
+            result = 'unresolved';
+        }
+    }
+    return result;
 }
 function componentMetadata(component) {
     return {
@@ -151,12 +168,26 @@ function includedArrays(bundle, mediaType) {
 function ledgerEpochKey(value) {
     return `${value.ledgerId}\0${value.ledgerEpochId}`;
 }
+function sameLedgerEpoch(left, right) {
+    return left.ledgerId === right.ledgerId && left.ledgerEpochId === right.ledgerEpochId;
+}
 function compareDecimal(left, right) {
     const a = BigInt(left);
     const b = BigInt(right);
     return a < b ? -1 : a > b ? 1 : 0;
 }
-async function verifyEntryGroups(entries, policy, artifacts) {
+function inclusionKey(checkpointDigest, entryDigest, sequence) {
+    return `${checkpointDigest}\0${entryDigest}\0${sequence}`;
+}
+function consistencyKey(oldCheckpointDigest, newCheckpointDigest) {
+    return `${oldCheckpointDigest}\0${newCheckpointDigest}`;
+}
+/** True when the entries are exactly the leaves 0..treeSize-1, in order. */
+function isCompletePrefix(entries, treeSize) {
+    return BigInt(entries.length) === BigInt(treeSize) &&
+        entries.every((entry, index) => entry.core.sequence === String(index));
+}
+async function verifyEntryGroups(entries, policy, artifacts, context) {
     const groups = new Map();
     const malformed = [];
     for (const candidate of entries) {
@@ -171,11 +202,11 @@ async function verifyEntryGroups(entries, policy, artifacts) {
         groups.set(key, group);
     }
     const reports = await Promise.all([
-        ...[...groups.values()].map((group) => artifacts.verifyEntries(group, policy)),
-        ...(malformed.length === 0 ? [] : [artifacts.verifyEntries(malformed, policy)]),
+        ...[...groups.values()].map((group) => artifacts.verifyEntries(group, policy, context)),
+        ...(malformed.length === 0 ? [] : [artifacts.verifyEntries(malformed, policy, context)]),
     ]);
     if (reports.length === 0)
-        return artifacts.verifyEntries([], policy);
+        return artifacts.verifyEntries([], policy, context);
     const first = reports[0];
     return {
         ...first,
@@ -188,7 +219,7 @@ async function verifyEntryGroups(entries, policy, artifacts) {
         currentAuthorization: mergeAuditDimensions(...reports.map((report) => report.currentAuthorization)),
     };
 }
-function verifyCheckpointHistory(checkpoints, entries, selections) {
+function verifyCheckpointHistory(checkpoints, entries, selections, verifiedConsistency) {
     const reasons = new Set();
     const groups = new Map();
     for (const checkpoint of checkpoints) {
@@ -198,18 +229,26 @@ function verifyCheckpointHistory(checkpoints, entries, selections) {
         groups.set(key, group);
     }
     for (const group of groups.values()) {
-        group.sort((left, right) => {
-            const a = BigInt(left.core.treeSize);
-            const b = BigInt(right.core.treeSize);
-            return a < b ? -1 : a > b ? 1 : 0;
-        });
+        group.sort((left, right) => compareDecimal(left.core.treeSize, right.core.treeSize));
+        const included = new Set(group.map((checkpoint) => checkpoint.checkpointDigest));
         for (let index = 1; index < group.length; index += 1) {
             const previous = group[index - 1];
             const current = group[index];
             if (current.core.treeSize === previous.core.treeSize) {
                 reasons.add(AUDIT_REASON_CODES.CHECKPOINT_FORK_DETECTED);
+                continue;
             }
-            else if (current.core.previousCheckpointDigest !== previous.checkpointDigest) {
+            const claimed = current.core.previousCheckpointDigest;
+            if (claimed === previous.checkpointDigest)
+                continue;
+            // A subset export may omit intermediate checkpoints. An unlinked pair is
+            // accepted only when an omitted checkpoint could sit between the two and
+            // a verified consistency proof binds them: the proof, not the chain link,
+            // is the split-view guarantee. Naming another included checkpoint, or
+            // none, is a forked checkpoint chain.
+            const omittable = claimed !== null && !included.has(claimed) &&
+                BigInt(current.core.treeSize) - BigInt(previous.core.treeSize) > 1n;
+            if (!omittable || !verifiedConsistency.has(consistencyKey(previous.checkpointDigest, current.checkpointDigest))) {
                 reasons.add(AUDIT_REASON_CODES.CHECKPOINT_CHAIN_MISMATCH);
             }
         }
@@ -232,18 +271,34 @@ function verifyCheckpointHistory(checkpoints, entries, selections) {
         if (details.previousEpochId === undefined ||
             details.previousTerminalCheckpointDigest === undefined)
             continue;
-        const predecessorSelected = selections.some((selection) => selection.ledgerId === entry.core.ledgerId &&
-            selection.ledgerEpochId === details.previousEpochId);
-        if (predecessorSelected && !checkpoints.some((checkpoint) => checkpoint.core.ledgerId === entry.core.ledgerId &&
-            checkpoint.core.ledgerEpochId === details.previousEpochId &&
-            checkpoint.checkpointDigest === details.previousTerminalCheckpointDigest)) {
+        const predecessor = {
+            ledgerId: entry.core.ledgerId,
+            ledgerEpochId: details.previousEpochId,
+        };
+        if (!selections.some((selection) => sameLedgerEpoch(selection, predecessor)))
+            continue;
+        const terminal = checkpoints.find((checkpoint) => sameLedgerEpoch(checkpoint.core, predecessor) &&
+            checkpoint.checkpointDigest === details.previousTerminalCheckpointDigest);
+        if (terminal === undefined) {
             reasons.add(AUDIT_REASON_CODES.CHECKPOINT_CHAIN_MISMATCH);
+            continue;
+        }
+        // The successor genesis commits where the predecessor epoch ends, so a
+        // predecessor checkpoint signed over a larger tree is a second authority
+        // still checkpointing after rollover. Entries past the terminal are not:
+        // the terminal checkpoint's own lifecycle event lands there legitimately.
+        const terminalSize = BigInt(terminal.core.treeSize);
+        if (checkpoints.some((checkpoint) => sameLedgerEpoch(checkpoint.core, predecessor) &&
+            BigInt(checkpoint.core.treeSize) > terminalSize)) {
+            reasons.add(AUDIT_REASON_CODES.CHECKPOINT_FORK_DETECTED);
         }
     }
     return dim(reasons.size === 0 ? 'valid' : 'invalid', reasons);
 }
 async function verifyMerkleProofComponents(bundle, entries, checkpoints, hasher) {
     const reasons = new Set();
+    const inclusions = new Set();
+    const consistencies = new Set();
     const tree = new Rfc9162MerkleTree(hasher);
     const inclusionCandidates = includedArrays(bundle, AUDIT_BUNDLE_MEDIA_TYPES.inclusionProofs);
     for (const candidate of inclusionCandidates) {
@@ -273,6 +328,9 @@ async function verifyMerkleProofComponents(bundle, entries, checkpoints, hasher)
             }))) {
             reasons.add(AUDIT_REASON_CODES.MERKLE_PROOF_INVALID);
         }
+        else {
+            inclusions.add(inclusionKey(item.checkpointDigest, item.entryDigest, item.sequence));
+        }
     }
     const consistencyCandidates = includedArrays(bundle, AUDIT_BUNDLE_MEDIA_TYPES.consistencyProofs);
     for (const candidate of consistencyCandidates) {
@@ -299,6 +357,32 @@ async function verifyMerkleProofComponents(bundle, entries, checkpoints, hasher)
             }))) {
             reasons.add(AUDIT_REASON_CODES.MERKLE_PROOF_INVALID);
         }
+        else {
+            consistencies.add(consistencyKey(item.oldCheckpointDigest, item.newCheckpointDigest));
+        }
+    }
+    return {
+        dimension: dim(reasons.size === 0 ? 'valid' : 'invalid', reasons),
+        inclusions,
+        consistencies,
+    };
+}
+/**
+ * Without the complete leaf prefix a checkpoint's root cannot be recomputed,
+ * so every entry it covers must instead carry a verified inclusion proof
+ * against it, and a covered head entry must be the one the checkpoint signed.
+ */
+function verifyInclusionBinding(checkpoint, covered, verifiedInclusions) {
+    const reasons = new Set();
+    const headSequence = String(BigInt(checkpoint.core.treeSize) - 1n);
+    for (const entry of covered) {
+        if (!verifiedInclusions.has(inclusionKey(checkpoint.checkpointDigest, entry.entryDigest, entry.core.sequence))) {
+            reasons.add(AUDIT_REASON_CODES.MERKLE_PROOF_MISSING);
+        }
+        if (entry.core.sequence === headSequence &&
+            entry.entryDigest !== checkpoint.core.headEntryDigest) {
+            reasons.add(AUDIT_REASON_CODES.CHECKPOINT_RANGE_MISMATCH);
+        }
     }
     return dim(reasons.size === 0 ? 'valid' : 'invalid', reasons);
 }
@@ -425,7 +509,7 @@ export async function verifyAuditBundle(bundle, policy, dependencies) {
         };
     }
     if (!auditReplayBundleSchema.safeParse(bundle).success) {
-        return malformedBundleReport(policy);
+        return applyRequiredAuditProfile(malformedBundleReport(policy), policy);
     }
     const replayBundle = bundle;
     const reasons = new Set();
@@ -439,9 +523,11 @@ export async function verifyAuditBundle(bundle, policy, dependencies) {
     if (core === undefined || !policy.acceptedAlgorithms.includes(core.exporter.alg)) {
         reasons.add(AUDIT_REASON_CODES.UNSUPPORTED_ALGORITHM);
     }
-    if (core === undefined || !exporterAuthorized(core, policy)) {
+    const exporter = core === undefined ? 'unauthorized' : exporterAuthorization(core, policy);
+    if (exporter === 'unauthorized')
         reasons.add(AUDIT_REASON_CODES.BUNDLE_EXPORTER_UNAUTHORIZED);
-    }
+    if (exporter === 'unresolved')
+        reasons.add(AUDIT_REASON_CODES.KEY_BOUNDARY_UNRESOLVED);
     if (core !== undefined) {
         const [manifestDigest, policyDigest] = await Promise.all([
             hashAuditValue(dependencies.hasher, AUDIT_DIGEST_DOMAINS.bundleManifest, core),
@@ -496,12 +582,16 @@ export async function verifyAuditBundle(bundle, policy, dependencies) {
     const checkpointCandidates = includedArrays(replayBundle, AUDIT_BUNDLE_MEDIA_TYPES.checkpoints);
     const observationCandidates = includedArrays(replayBundle, AUDIT_BUNDLE_MEDIA_TYPES.observations);
     const anchorCandidates = includedArrays(replayBundle, AUDIT_BUNDLE_MEDIA_TYPES.anchors);
-    const artifacts = dependencies.artifacts ?? new AuditArtifactVerifier(dependencies);
-    const artifactReport = await verifyEntryGroups(entryCandidates, policy, artifacts);
     const entries = entryCandidates.filter((candidate) => signedAuditEntrySchema.safeParse(candidate).success);
     const checkpoints = checkpointCandidates.filter((candidate) => signedAuditCheckpointSchema.safeParse(candidate).success);
+    const observations = observationCandidates.filter((candidate) => auditObservationReceiptSchema.safeParse(candidate).success);
+    // The bundle's own checkpoints are what checkpoint-bounded key policies name.
+    const context = { checkpoints };
+    const artifacts = dependencies.artifacts ?? new AuditArtifactVerifier(dependencies);
+    const artifactReport = await verifyEntryGroups(entryCandidates, policy, artifacts, context);
     let checkpointDimension = artifactReport.checkpointIntegrity;
     if (checkpointCandidates.length > 0) {
+        const proofs = await verifyMerkleProofComponents(replayBundle, entries, checkpoints, dependencies.hasher);
         const checkpointResults = [];
         for (const candidate of checkpointCandidates) {
             if (!signedAuditCheckpointSchema.safeParse(candidate).success) {
@@ -509,12 +599,15 @@ export async function verifyAuditBundle(bundle, policy, dependencies) {
                 continue;
             }
             const checkpoint = candidate;
-            const checkpointEntries = entries.filter((entry) => entry.core.ledgerId === checkpoint.core.ledgerId &&
-                entry.core.ledgerEpochId === checkpoint.core.ledgerEpochId &&
+            const covered = entries.filter((entry) => sameLedgerEpoch(entry.core, checkpoint.core) &&
                 BigInt(entry.core.sequence) < BigInt(checkpoint.core.treeSize));
-            checkpointResults.push(await artifacts.verifyCheckpoint(checkpoint, checkpointEntries, policy));
+            // A subset export (a sequence range, or no entries at all) cannot
+            // recompute the root, so its entries are bound by inclusion proofs.
+            checkpointResults.push(isCompletePrefix(covered, checkpoint.core.treeSize)
+                ? await artifacts.verifyCheckpoint(checkpoint, covered, policy, context)
+                : mergeAuditDimensions(await artifacts.verifySignedCheckpoint(checkpoint, policy, context), verifyInclusionBinding(checkpoint, covered, proofs.inclusions)));
         }
-        checkpointDimension = mergeAuditDimensions(...checkpointResults, verifyCheckpointHistory(checkpoints, entries, core.selections), await verifyMerkleProofComponents(replayBundle, entries, checkpoints, dependencies.hasher));
+        checkpointDimension = mergeAuditDimensions(...checkpointResults, verifyCheckpointHistory(checkpoints, entries, core.selections, proofs.consistencies), proofs.dimension);
     }
     else if (core.selections.some((selection) => selection.checkpointTreeSizes.length > 0)) {
         checkpointDimension = dim('invalid', [AUDIT_REASON_CODES.CHECKPOINT_MISSING]);
@@ -531,21 +624,35 @@ export async function verifyAuditBundle(bundle, policy, dependencies) {
             const checkpoint = checkpoints.find((candidate) => candidate.checkpointDigest === receipt.core.checkpointDigest);
             observationResults.push(checkpoint === undefined
                 ? dim('invalid', [AUDIT_REASON_CODES.OBSERVATION_SCOPE_MISMATCH])
-                : await artifacts.verifyObservation(checkpoint, receipt, policy));
+                : await artifacts.verifyObservation(checkpoint, receipt, policy, context));
         }
-        const validObservations = observationCandidates.filter((candidate) => auditObservationReceiptSchema.safeParse(candidate).success);
-        anchorDimension = mergeAuditDimensions(...observationResults, verifyObservationHistory(validObservations));
+        anchorDimension = mergeAuditDimensions(...observationResults, verifyObservationHistory(observations));
     }
     if (anchorCandidates.length > 0) {
         anchorDimension = mergeAuditDimensions(anchorDimension, await verifySupportingAnchors(anchorCandidates, checkpoints, policy, dependencies.verifySupportingAnchor));
     }
-    const manifestDimension = dim(reasons.size === 0 ? 'valid' : 'invalid', reasons);
-    return {
+    // An exporter key bound that cannot be placed leaves the manifest
+    // undecided, never valid; any other manifest reason is a failure.
+    const manifestDimension = dim(reasons.size === 0
+        ? 'valid'
+        : [...reasons].every((reason) => reason === AUDIT_REASON_CODES.KEY_BOUNDARY_UNRESOLVED)
+            ? 'indeterminate'
+            : 'invalid', reasons);
+    // Entry recorder keys were already evaluated per ledger epoch group.
+    const currentKeys = artifacts.verifyCurrentKeys(policy, {
+        checkpoints,
+        observations,
+        exporter: core.exporter,
+    });
+    return applyRequiredAuditProfile({
         ...artifactReport,
         cryptographicIntegrity: mergeAuditDimensions(manifestDimension, artifactReport.cryptographicIntegrity),
         checkpointIntegrity: checkpointDimension,
         anchorIntegrity: anchorDimension,
         scopeEvidenceCompleteness: selectionCompleteness(core?.selections ?? [], entries, replayBundle.components.filter((component) => component.disposition !== 'included')),
-    };
+        currentAuthorization: currentKeys === undefined
+            ? artifactReport.currentAuthorization
+            : mergeAuditDimensions(artifactReport.currentAuthorization, currentKeys),
+    }, policy, { supportingAnchors: anchorCandidates.length > 0 });
 }
 //# sourceMappingURL=replay-bundle.js.map