@mnemom/mnemom 0.17.36 → 0.17.38-next.0

package/node_modules/@mnemom/aip-verifier/dist/render-lines.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/claim-table.ts","../src/claim-lint.ts","../src/render-estimate.ts","../src/canonical.ts","../src/crypto.ts","../src/sharecard.ts","../src/statements.ts","../src/verify-record.ts","../src/render-lines.ts"],"names":["isObject","hexToBytes","fail","verifyAsync","utf8ToBytes","bytesToHex","sha256","reasons","flags","statements","isObj","STATEMENT_KEYS"],"mappings":";;;;;;;AAoBO,IAAM,gBAAgB,CAAC,UAAA,EAAY,SAAA,EAAW,UAAA,EAAY,aAAa,SAAS,CAAA;AAShF,IAAM,WAAW,CAAC,aAAA,EAAe,eAAA,EAAiB,YAAA,EAAc,cAAc,aAAa,CAAA;AAG3F,IAAM,aAAA,GAAoC,CAAC,YAAA,EAAc,aAAa,CAAA;AAGtE,IAAM,2BAAA,GAAkD,CAAC,YAAA,EAAc,YAAA,EAAc,aAAa,CAAA;AAGlG,IAAM,KAAA,GAAQ,CAAC,KAAA,EAAO,SAAA,EAAW,SAAS,SAAS,CAAA;AAQnD,IAAM,UAAA,GAAmC;AAAA,EAC9C,GAAA,EAAK,aAAA;AAAA,EACL,OAAA,EAAS,SAAA;AAAA,EACT,KAAA,EAAO,uBAAA;AAAA,EACP,OAAA,EAAS;AACX,CAAA;AAGO,IAAM,sBAAsB,CAAC,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,cAAc,OAAO,CAAA;AAU3E,SAAS,cAAA,CAAe,MAAY,OAAA,EAA2C;AACpF,EAAA,IAAI,IAAA,KAAS,KAAA,IAAS,OAAA,KAAY,MAAA,EAAQ,OAAO,IAAA;AACjD,EAAA,IAAI,IAAA,KAAS,SAAA,EAAW,OAAO,UAAA,CAAW,OAAA;AAC1C,EAAA,IAAI,SAAS,OAAA,EAAS,OAAO,YAAY,OAAA,GAAU,UAAA,CAAW,QAAQ,UAAA,CAAW,OAAA;AACjF,EAAA,OAAO,YAAY,OAAA,IAAW,OAAA,KAAY,YAAA,GAAe,UAAA,CAAW,UAAU,UAAA,CAAW,OAAA;AAC3F;AAgBO,IAAM,WAAA,GAAc;AAAA,EACzB,kBAAkB,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EACjF,sBAAsB,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EACrF,aAAa,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EAC5E,yBAAyB,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EACxF,cAAc,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EAC7E,YAAY,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,IAAA,EAAK;AAAA,EAC1E,SAAS,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,IAAA,EAAK;AAAA,EACvE,UAAU,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA;AAAA,EAEzE,WAAW,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EAC1E,MAAM,EAAE,KAAA,EAAO,WAAW,YAAA,EAAc,IAAA,EAAM,eAAe,KAAA,EAAM;AAAA;AAAA,EAEnE,iBAAiB,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EAChF,YAAY,EAAE,KAAA,EAAO,WAAW,YAAA,EAAc,IAAA,EAAM,eAAe,KAAA,EAAM;AAAA,EACzE,UAAU,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EACzE,gBAAA,EAAkB;AAAA,IAChB,KAAA,EAAO,UAAA;AAAA,IACP,YAAA,EAAc,KAAA;AAAA,IACd,aAAA,EAAe,IAAA;AAAA,IACf,QAAA,EAAU,CAAC,aAAA,EAAe,eAAe;AAAA,GAC3C;AAAA,EACA,WAAW,EAAE,KAAA,EAAO,aAAa,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EAC3E,SAAS,EAAE,KAAA,EAAO,WAAW,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA;AACnE,CAAA;AAIO,SAAS,aAAa,KAAA,EAAqC;AAChE,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,MAAA,CAAO,UAAU,cAAA,CAAe,IAAA,CAAK,aAAa,KAAK,CAAA;AAC7F;AAOO,IAAM,eAAA,GAAwD;AAAA,EACnE,YAAA,EAAc,YAAA;AAAA,EACd,SAAA,EAAW,SAAA;AAAA,EACX,WAAA,EAAa,WAAA;AAAA,EACb,cAAA,EAAgB,MAAA;AAAA,EAChB,iBAAA,EAAmB,iBAAA;AAAA,EACnB,iBAAA,EAAmB,sBAAA;AAAA,EACnB,qBAAA,EAAuB;AACzB,CAAA;AAEA,IAAM,kBAAA,GAAqB,wBAAA;AAGpB,SAAS,gBAAgB,GAAA,EAAsC;AACpE,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,OAAO,MAAA;AACpC,EAAA,IAAI,kBAAA,CAAmB,IAAA,CAAK,GAAG,CAAA,EAAG,OAAO,YAAA;AACzC,EAAA,OAAO,MAAA,CAAO,UAAU,cAAA,CAAe,IAAA,CAAK,iBAAiB,GAAG,CAAA,GAAI,eAAA,CAAgB,GAAG,CAAA,GAAI,MAAA;AAC7F;;;ACzCO,IAAM,UAAA,GAAa;AAAA,EACxB,kBAAA,EAAoB,oBAAA;AAAA,EACpB,cAAA,EAAgB,gBAAA;AAAA,EAChB,2BAAA,EAA6B,6BAAA;AAAA,EAC7B,oBAAA,EAAsB,sBAAA;AAAA,EACtB,oBAAA,EAAsB,sBAAA;AAAA,EACtB,6BAAA,EAA+B,+BAAA;AAAA,EAC/B,aAAA,EAAe,eAAA;AAAA,EACf,yBAAA,EAA2B,2BAAA;AAAA,EAC3B,iBAAA,EAAmB,mBAAA;AAAA,EACnB,oBAAA,EAAsB,sBAAA;AAAA,EACtB,WAAA,EAAa,aAAA;AAAA,EACb,kBAAA,EAAoB,oBAAA;AAAA,EACpB,uBAAA,EAAyB,yBAAA;AAAA,EACzB,wBAAA,EAA0B,0BAAA;AAAA,EAC1B,sBAAA,EAAwB,wBAAA;AAAA,EACxB,0BAAA,EAA4B,4BAAA;AAAA,EAC5B,oBAAA,EAAsB,sBAAA;AAAA,EACtB,sBAAA,EAAwB,wBAAA;AAAA,EACxB,4BAAA,EAA8B,8BAAA;AAAA,EAC9B,eAAA,EAAiB;AACnB,CAAA;AAiCA,SAAS,SAAA,CAAU,MAAc,IAAA,EAA2B;AAC1D,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA,EAAG;AAC1C,IAAA,MAAM,OAAO,MAAA,CAAO,OAAA,CAAQ,CAAA,CAAE,MAAA,IAAU,EAAE,CAAA,CAAE,IAAA,CAAK,CAAC,GAAG,CAAC,MAAM,CAAA,KAAM,MAAS,IAAI,CAAC,CAAA;AAChF,IAAA,IAAI,SAAS,MAAA,EAAW;AACxB,IAAA,IAAI,SAAS,KAAA,EAAO;AAClB,MAAA,IAAA,CAAK,KAAA,EAAM;AACX,MAAA;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,KAAA,EAAO,QAAA,CAAS,IAAI,GAAG,OAAO,IAAA;AACvC,IAAA,IAAI,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,CAAC,CAAC,KAAA,EAAO,IAAI,CAAA,KAAM,IAAA,KAAS,QAAQ,IAAA,CAAK,GAAA,CAAI,KAAK,CAAC,GAAG,OAAO,IAAA;AACjF,IAAA,IAAA,CAAK,IAAI,IAAI,CAAA;AAAA,EACf;AACA,EAAA,OAAO,KAAA;AACT;AAEA,IAAM,cAAA,GAAiB,wGAAA;AAKvB,IAAM,KAAA,GAAQ,sFAAA;AACd,IAAM,MAAA,GAAS,aAAA;AACf,IAAM,cAAA,GAAiB,qFAAA;AACvB,IAAM,WAAA,GACJ,0QAAA;AAEF,IAAM,kBAAA,GAAiC;AAAA,EACrC,MAAA,EACE,+HAAA;AAAA,EACF,KAAA,EAAO;AAAA,IACL,CAAC,WAAW,QAAQ,CAAA;AAAA,IACpB,CAAC,WAAW,MAAM,CAAA;AAAA,IAClB,CAAC,UAAU,SAAS;AAAA;AAExB,CAAA;AACA,IAAM,MAAA,GAAS,oBAAA;AAQf,IAAM,cAAA,GAA6B;AAAA,EACjC,MAAA,EACE,8LAAA;AAAA,EACF,KAAA,EAAO,CAAC,QAAQ,CAAA;AAAA,EAChB,KAAA,EAAO;AAAA,IACL,CAAC,UAAU,SAAS,CAAA;AAAA,IACpB,CAAC,WAAW,QAAQ;AAAA;AAExB,CAAA;AACA,IAAM,WAAA,GAAc,gBAAA;AAEpB,IAAM,gBAAA,GAAmB,0CAAA;AAGzB,IAAM,eAAA,GAAwC;AAAA,EAC5C,GAAA,EAAK,WAAA;AAAA,EACL,OAAA,EAAS,cAAA;AAAA,EACT,KAAA,EAAO,4BAAA;AAAA,EACP,OAAA,EAAS;AACX,CAAA;AAGA,IAAM,gBAAA,GAA2C;AAAA,EAC/C,GAAA,EAAK,CAAC,cAAA,EAAgB,aAAA,EAAe,cAAc,CAAA;AAAA,EACnD,OAAA,EAAS,CAAC,aAAA,EAAe,cAAc,CAAA;AAAA,EACvC,KAAA,EAAO,CAAC,cAAc,CAAA;AAAA,EACtB,OAAA,EAAS,CAAC,cAAA,EAAgB,aAAa;AACzC,CAAA;AAEA,SAAS,SAAS,CAAA,EAA0C;AAC1D,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAGA,SAAS,oBAAoB,GAAA,EAAuB;AAClD,EAAA,OACE,SAAS,GAAG,CAAA,IACZ,OAAO,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA,IAC3B,MAAA,CAAO,SAAA,CAAU,GAAA,CAAI,KAAK,CAAA,IACzB,GAAA,CAAI,UAAqB,CAAA,IACzB,GAAA,CAAI,SAAqB,GAAA,CAAI,MAAA;AAElC;AAGA,SAAS,cAAc,IAAA,EAA6B;AAClD,EAAA,MAAM,MAAM,IAAA,CAAK,QAAA;AACjB,EAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,OAAO,mBAAA,CAAoB,GAAG,CAAA;AACrD,EAAA,MAAM,CAAA,GAAI,gBAAA,CAAiB,IAAA,CAAK,IAAA,CAAK,IAAI,CAAA;AACzC,EAAA,OAAO,CAAA,KAAM,IAAA,IAAQ,MAAA,CAAO,CAAA,CAAE,CAAC,CAAC,CAAA,IAAK,MAAA,CAAO,CAAA,CAAE,CAAC,CAAC,CAAA;AAClD;AAOA,SAAS,YAAA,CAAa,MAAY,OAAA,EAAoC;AACpE,EAAA,IAAI,IAAA,KAAS,OAAO,OAAO,KAAA;AAC3B,EAAA,IAAI,OAAA,KAAY,MAAA,EAAW,OAAO,IAAA,KAAS,YAAY,SAAA,GAAY,MAAA;AACnE,EAAA,IAAI,CAAE,mBAAA,CAA2C,QAAA,CAAS,OAAO,GAAG,OAAO,MAAA;AAC3E,EAAA,MAAM,IAAA,GAAO,cAAA,CAAe,IAAA,EAAM,OAA4B,CAAA;AAC9D,EAAA,OAAO,MAAM,IAAA,CAAK,CAAC,MAAM,UAAA,CAAW,CAAC,MAAM,IAAI,CAAA;AACjD;AAEA,SAAS,aAAa,CAAA,EAAmB;AACvC,EAAA,OAAO,CAAA,CAAE,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AAChD;AAEA,SAAS,eAAA,CAAgB,MAAc,IAAA,EAAwB;AAC7D,EAAA,IAAI,IAAA,KAAS,MAAA,IAAa,IAAA,KAAS,IAAA,EAAM,OAAO,KAAA;AAChD,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,IAAA,GAAO,CAAC,CAAA,KAAqB;AACjC,IAAA,IAAI,OAAO,MAAM,QAAA,EAAU;AACzB,MAAA,IAAI,CAAA,CAAE,MAAA,IAAU,CAAA,EAAG,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IACnC,WAAW,OAAO,CAAA,KAAM,QAAA,IAAY,OAAO,MAAM,SAAA,EAAW;AAC1D,MAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACxB,CAAA,MAAA,IAAW,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG;AAC3B,MAAA,CAAA,CAAE,QAAQ,IAAI,CAAA;AAAA,IAChB,CAAA,MAAA,IAAW,QAAA,CAAS,CAAC,CAAA,EAAG;AACtB,MAAA,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA,CAAE,OAAA,CAAQ,IAAI,CAAA;AAAA,IAC/B;AAAA,EACF,CAAA;AACA,EAAA,IAAA,CAAK,IAAI,CAAA;AACT,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AACjC,EAAA,IAAI;AACF,IAAA,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,EACnC,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,CAAC,CAAC,CAAA;AAC7D;AAEA,SAAS,QAAA,CAAS,OAAA,EAAkB,IAAA,EAAoB,KAAA,EAAe,GAAA,EAA4B;AACjG,EAAA,MAAM,IAAA,GAAO,CAAC,IAAA,KAAyB;AACrC,IAAA,GAAA,CAAI,KAAK,EAAE,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,MAAM,QAAA,CAAS,IAAI,CAAA,IAAK,OAAO,KAAK,IAAA,KAAS,QAAA,GAAW,IAAA,CAAK,IAAA,GAAO,IAAI,CAAA;AAAA,EACxG,CAAA;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,IAAI,CAAA,IAAK,OAAO,IAAA,CAAK,IAAA,KAAS,QAAA,IAAY,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU;AACtF,IAAA,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAClC,IAAA;AAAA,EACF;AACA,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA;AAClB,EAAA,MAAM,MAAA,GAAS,aAAA,CAAc,QAAA,CAAS,OAAO,CAAA;AAE7C,EAAA,MAAM,KAAA,GAAQ,KAAK,KAAA,KAAU,MAAA,GAAY,KAAK,KAAA,GAAQ,eAAA,CAAgB,KAAK,GAAG,CAAA;AAG9E,EAAA,MAAM,MAAM,IAAA,CAAK,KAAA;AACjB,EAAA,IAAI,CAAE,aAAA,CAAoC,QAAA,CAAS,GAAG,CAAA,EAAG;AACvD,IAAA,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAAA,EACpC,CAAA,MAAA,IAAW,UAAU,MAAA,EAAW;AAC9B,IAAA,IAAI,CAAC,YAAA,CAAa,KAAK,CAAA,EAAG;AACxB,MAAA,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAAA,IACpC,CAAA,MAAO;AACL,MAAA,MAAM,KAAA,GAAyB,YAAY,KAAK,CAAA;AAChD,MAAA,IAAI,KAAA,CAAM,KAAA,KAAU,GAAA,EAAK,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAC3D,MAAA,IAAI,MAAM,QAAA,IAAY,CAAE,MAAM,QAAA,CAAgC,QAAA,CAAS,OAAO,CAAA,EAAG;AAC/E,QAAA,IAAA,CAAK,WAAW,oBAAoB,CAAA;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,GAAA,KAAQ,cAAc,cAAA,CAAe,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAEvF,EAAA,IAAI,eAAe,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,WAAW,cAAc,CAAA;AAE7D,EAAA,MAAM,MAAA,GAAS,KAAA,KAAU,MAAA,IAAU,KAAA,KAAU,WAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,KAAA,KAAU,YAAA,IAAgB,KAAA,KAAU,iBAAA;AACzD,EAAA,IAAA,CAAK,MAAA,IAAU,iBAAiB,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,WAAW,2BAA2B,CAAA;AAC7F,EAAA,IAAI,KAAA,KAAU,UAAa,YAAA,CAAa,KAAK,KAAK,CAAC,WAAA,CAAY,KAAK,CAAA,CAAE,aAAA,EAAe;AACnF,IAAA,IAAI,CAAC,MAAA,IAAU,CAAC,YAAA,IAAgB,KAAA,CAAM,KAAK,IAAI,CAAA,EAAG,IAAA,CAAK,UAAA,CAAW,kBAAkB,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,IAAI,IAAA,CAAK,cAAc,UAAA,IAAc,MAAA,CAAO,KAAK,IAAI,CAAA,EAAG,IAAA,CAAK,UAAA,CAAW,oBAAoB,CAAA;AAC5F,IAAA,IAAI,IAAA,CAAK,SAAA,KAAc,KAAA,IAAS,CAAC,WAAA,CAAY,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,UAAA,CAAW,oBAAoB,CAAA;AAAA,EACtG;AAEA,EAAA,IAAI,GAAA,KAAQ,UAAA,IAAc,cAAA,CAAe,IAAA,CAAK,IAAI,CAAA,EAAG;AACnD,IAAA,IAAI,4BAA4B,QAAA,CAAS,OAAO,CAAA,EAAG,IAAA,CAAK,WAAW,6BAA6B,CAAA;AAAA,EAClG;AAEA,EAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAW;AAC3B,IAAA,MAAM,IAAA,GAAQ,KAAA,CAA4B,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA,GAAI,YAAA,CAAa,IAAA,CAAK,IAAA,EAAM,IAAA,CAAK,OAAO,CAAA,GAAI,MAAA;AACxG,IAAA,MAAM,IAAA,GAAO,OAAO,IAAA,CAAK,SAAA,KAAc,WAAW,IAAA,CAAK,SAAA,CAAU,MAAK,GAAI,EAAA;AAC1E,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,IAAI,MAAA,CAAO,CAAA,iBAAA,EAAoB,YAAA,CAAa,IAAI,CAAC,CAAA,iBAAA,CAAmB,CAAA,CAAE,KAAK,IAAI,CAAA;AACpH,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,IAAA,CAAK,WAAW,aAAa,CAAA;AAAA,IAC/B,CAAA,MAAA,IAAW,CAAC,eAAA,CAAgB,IAAI,CAAA,CAAE,IAAA,CAAK,IAAA,KAAS,KAAA,GAAQ,IAAA,CAAK,IAAA,EAAK,GAAI,IAAI,CAAA,EAAG;AAC3E,MAAA,IAAA,CAAK,WAAW,aAAa,CAAA;AAAA,IAC/B,CAAA,MAAA,IAAW,gBAAA,CAAiB,IAAI,CAAA,CAAE,IAAA,CAAK,CAAC,EAAA,KAAO,EAAA,CAAG,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG;AAC7D,MAAA,IAAA,CAAK,WAAW,aAAa,CAAA;AAAA,IAC/B,CAAA,MAAA,IAAW,IAAA,KAAS,SAAA,IAAa,SAAA,IAAa,CAAC,MAAA,EAAQ;AAErD,MAAA,IAAA,CAAK,WAAW,aAAa,CAAA;AAAA,IAC/B;AACA,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,SAAA,EAAW,IAAA,CAAK,UAAA,CAAW,iBAAiB,CAAA;AAAA,IAClD,CAAA,MAAA,IAAW,IAAA,KAAS,SAAA,IAAa,CAAC,SAAA,EAAW;AAC3C,MAAA,IAAA,CAAK,WAAW,yBAAyB,CAAA;AAAA,IAC3C;AAAA,EACF;AACA,EAAA,IAAI,gBAAgB,IAAA,EAAM,IAAA,CAAK,cAAc,CAAA,EAAG,IAAA,CAAK,WAAW,oBAAoB,CAAA;AAGpF,EAAA,IAAI,SAAA,CAAU,IAAA,EAAM,cAAc,CAAA,EAAG;AACnC,IAAA,IAAI,MAAA,EAAQ,IAAA,CAAK,UAAA,CAAW,sBAAsB,CAAA;AAClD,IAAA,IAAI,KAAA,KAAU,SAAA,EAAW,IAAA,CAAK,UAAA,CAAW,4BAA4B,CAAA;AAAA,EACvE;AAEA,EAAA,IAAI,YAAY,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,WAAW,WAAW,CAAA;AACvD,EAAA,IAAI,UAAU,IAAA,EAAM,kBAAkB,CAAA,EAAG,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAC3E,EAAA,IAAI,GAAA,KAAQ,WAAA,EAAa,IAAA,CAAK,UAAA,CAAW,uBAAuB,CAAA;AAChE,EAAA,IAAI,QAAQ,SAAA,EAAW;AAGrB,IAAA,MAAM,OAAA,GAAU,SAAS,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,GAAI,KAAA,KAAU,YAAA,IAAgB,aAAA,CAAc,IAAI,CAAA;AAC1G,IAAA,IAAI,CAAC,OAAA,EAAS,IAAA,CAAK,UAAA,CAAW,wBAAwB,CAAA;AAAA,EACxD;AACA,EAAA,IAAI,MAAA,IAAU,QAAQ,UAAA,IAAc,GAAA,KAAQ,aAAa,GAAA,KAAQ,SAAA,EAAW,IAAA,CAAK,UAAA,CAAW,sBAAsB,CAAA;AACpH;AAGO,SAAS,cAAc,SAAA,EAAgC;AAC5D,EAAA,MAAM,aAA8B,EAAC;AACrC,EAAA,IAAI,CAAC,SAAS,SAAS,CAAA,IAAK,CAAC,KAAA,CAAM,OAAA,CAAQ,SAAA,CAAU,KAAK,CAAA,EAAG;AAC3D,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,UAAA,CAAW,eAAA,EAAiB,IAAA,EAAM,EAAA,EAAI,IAAA,EAAM,EAAA,EAAI,CAAA,EAAE;AAAA,EAC7F;AACA,EAAA,MAAM,UAAU,SAAA,CAAU,OAAA;AAC1B,EAAA,IAAI,CAAE,QAAA,CAAgC,QAAA,CAAS,OAAO,CAAA,EAAG;AACvD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,UAAA,CAAW,eAAA,EAAiB,IAAA,EAAM,IAAI,IAAA,EAAM,MAAA,CAAO,OAAO,CAAA,EAAG,CAAA,EAAE;AAAA,EAC1G;AACA,EAAA,MAAM,QAAQ,SAAA,CAAU,KAAA;AACxB,EAAA,KAAA,CAAM,OAAA,CAAQ,CAAC,IAAA,EAAM,CAAA,KAAM,SAAS,OAAA,EAAoB,IAAA,EAAM,CAAA,EAAG,UAAU,CAAC,CAAA;AAE5E,EAAA,IAAI,YAAY,aAAA,EAAe;AAC7B,IAAA,MAAM,YAAY,KAAA,CAAM,IAAA;AAAA,MACtB,CAAC,CAAA,KAAM,QAAA,CAAS,CAAC,KAAK,CAAA,CAAE,KAAA,KAAU,SAAA,IAAa,OAAO,EAAE,IAAA,KAAS,QAAA,IAAY,MAAA,CAAO,IAAA,CAAK,EAAE,IAAI;AAAA,KACjG;AACA,IAAA,IAAI,CAAC,SAAA,EAAW,UAAA,CAAW,IAAA,CAAK,EAAE,IAAA,EAAM,UAAA,CAAW,0BAAA,EAA4B,IAAA,EAAM,EAAA,EAAI,IAAA,EAAM,EAAA,EAAI,CAAA;AAAA,EACrG;AAEA,EAAA,OAAO,EAAE,EAAA,EAAI,UAAA,CAAW,MAAA,KAAW,GAAG,UAAA,EAAW;AACnD;;;AChYO,IAAM,8BAAA,GAAiC,GAAA;AAgBvC,IAAM,sBAAA,GAAyB;AAAA,EACpC,aAAA,EAAe,eAAA;AAAA,EACf,sBAAA,EAAwB,wBAAA;AAAA,EACxB,yBAAA,EAA2B,2BAAA;AAAA,EAC3B,aAAA,EAAe,eAAA;AAAA,EACf,gBAAA,EAAkB,kBAAA;AAAA,EAClB,gBAAA,EAAkB;AACpB,CAAA;AASA,SAASA,UAAS,CAAA,EAA0C;AAC1D,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAGO,SAAS,kBAAkB,QAAA,EAA0C;AAC1E,EAAA,IAAI,CAACA,SAAAA,CAAS,QAAQ,CAAA,EAAG,OAAO,EAAE,SAAA,EAAW,KAAA,EAAO,OAAA,EAAS,CAAC,sBAAA,CAAuB,aAAa,CAAA,EAAE;AACpG,EAAA,MAAM,UAAkC,EAAC;AACzC,EAAA,IAAI,SAAS,MAAA,KAAW,aAAA,EAAe,OAAA,CAAQ,IAAA,CAAK,uBAAuB,sBAAsB,CAAA;AACjG,EAAA,MAAM,QAAQ,QAAA,CAAS,qBAAA;AACvB,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,CAAC,OAAO,QAAA,CAAS,KAAK,CAAA,IAAK,KAAA,GAAQ,8BAAA,EAAgC;AAClG,IAAA,OAAA,CAAQ,IAAA,CAAK,uBAAuB,yBAAyB,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,SAAS,SAAA,KAAc,IAAA,EAAM,OAAA,CAAQ,IAAA,CAAK,uBAAuB,aAAa,CAAA;AAClF,EAAA,IAAI,SAAS,YAAA,KAAiB,IAAA,EAAM,OAAA,CAAQ,IAAA,CAAK,uBAAuB,gBAAgB,CAAA;AACxF,EAAA,IAAI,OAAO,SAAS,eAAA,KAAoB,QAAA,IAAY,CAAC,MAAA,CAAO,QAAA,CAAS,QAAA,CAAS,eAAe,CAAA,EAAG;AAC9F,IAAA,OAAA,CAAQ,IAAA,CAAK,uBAAuB,gBAAgB,CAAA;AAAA,EACtD;AACA,EAAA,OAAO,EAAE,SAAA,EAAW,OAAA,CAAQ,MAAA,KAAW,GAAG,OAAA,EAAQ;AACpD;AAEO,IAAM,uBAAA,GAA0B;AAAA,EACrC,eAAA,EAAiB,iBAAA;AAAA,EACjB,4BAAA,EAA8B,8BAAA;AAAA,EAC9B,yBAAA,EAA2B;AAC7B,CAAA;AAYO,SAAS,oBAAA,CAAqB,UAAmB,OAAA,EAA0C;AAChG,EAAA,IAAI,CAAE,QAAA,CAAgC,QAAA,CAAS,OAAO,CAAA,EAAG;AACvD,IAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,SAAS,CAAC,uBAAA,CAAwB,eAAe,CAAA,EAAE;AAAA,EAC7E;AACA,EAAA,IAAI,2BAAA,CAA4B,QAAA,CAAS,OAAkB,CAAA,EAAG;AAC5D,IAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,SAAS,CAAC,uBAAA,CAAwB,4BAA4B,CAAA,EAAE;AAAA,EAC1F;AACA,EAAA,MAAM,CAAA,GAAI,kBAAkB,QAAQ,CAAA;AACpC,EAAA,IAAI,CAAC,EAAE,SAAA,EAAW;AAChB,IAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,OAAA,EAAS,CAAC,wBAAwB,yBAAA,EAA2B,GAAG,CAAA,CAAE,OAAO,CAAA,EAAE;AAAA,EACrG;AACA,EAAA,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,EAAC,EAAE;AACrC;;;ACtFO,SAAS,cAAc,KAAA,EAAwB;AACpD,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,EAAU;AAC/C,IAAA,OAAO,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,EAC7B;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,OAAO,IAAI,KAAA,CAAM,GAAA,CAAI,aAAa,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,MAAA,GAAS,KAAA;AACf,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,MAAM,EAC/B,IAAA,EAAK,CACL,IAAI,CAAC,CAAA,KAAM,GAAG,IAAA,CAAK,SAAA,CAAU,CAAC,CAAC,CAAA,CAAA,EAAI,cAAc,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA,CAAE,CAAA;AAChE,EAAA,OAAO,CAAA,CAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAC9B;AAGO,SAAS,iBAAiB,KAAA,EAA2B;AAC1D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,wBAAA,CAAyB,IAAA,CAAK,KAAK,CAAA,EAAG;AACtE,IAAA,MAAM,IAAI,MAAM,eAAe,CAAA;AAAA,EACjC;AACA,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACzE,EAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA,GAAK,GAAA,CAAI,MAAA,GAAS,CAAA,IAAM,CAAC,CAAA;AAC9D,EAAA,MAAM,MAAA,GAAS,KAAK,MAAM,CAAA;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AACxC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AACpE,EAAA,OAAO,GAAA;AACT;ACHO,SAAS,WAAW,GAAA,EAAyB;AAClD,EAAA,OAAOC,oBAAW,GAAG,CAAA;AACvB;;;ACfO,IAAM,cAAA,GAAiB,kBAAA;AAqC9B,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,MAAA;AAAA,EAAQ,YAAA;AAAA,EAAc,WAAA;AAAA,EAAa,QAAA;AAAA,EAAU,aAAA;AAAA,EAAe,KAAA;AAAA,EAC5D,IAAA;AAAA,EAAM,UAAA;AAAA,EAAY,cAAA;AAAA,EAAgB,OAAA;AAAA,EAAS,QAAA;AAAA,EAAU,gBAAA;AAAA,EACrD,YAAA;AAAA,EAAc,SAAA;AAAA,EAAW,QAAA;AAAA,EAAU,OAAA;AAAA,EAAS,KAAA;AAAA,EAAO;AACrD,CAAC,CAAA;AAED,IAAM,SAAA,GAAY,CAAC,KAAA,EAAO,SAAA,EAAW,UAAU,WAAA,EAAa,gBAAA,EAAkB,YAAA,EAAc,OAAA,EAAS,WAAW,CAAA;AAChH,IAAM,WAAA,GAAc,CAAC,OAAA,EAAS,KAAK,CAAA;AACnC,IAAM,cAAA,GAAiB,CAAC,KAAA,EAAO,MAAM,CAAA;AACrC,IAAM,YAAY,CAAC,IAAA,EAAM,MAAA,EAAQ,OAAA,EAAS,SAAS,gBAAgB,CAAA;AACnE,IAAM,KAAA,GAAQ,gBAAA;AACd,IAAM,IAAA,GAAO,qBAAA;AAEb,IAAM,SAAA,GAAY,oBAAA;AAMlB,IAAM,KAAA,GAAQ,4BAAA;AACd,IAAM,SAAA,GAAY,EAAA;AAMX,IAAM,0BAAA,GAAgD;AAAA,EAC3D,sBAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF,CAAA;AACA,IAAM,aAAA,GAAgB,EAAA;AACtB,IAAM,OAAA,GAAU,wFAAA;AAEhB,SAAS,cAAA,CAAe,CAAA,EAAW,CAAA,EAAW,CAAA,EAAoB;AAChE,EAAA,IAAI,IAAI,CAAA,IAAK,CAAA,GAAI,EAAA,IAAM,CAAA,GAAI,GAAG,OAAO,KAAA;AACrC,EAAA,MAAM,GAAA,GAAM,CAAC,EAAA,EAAI,CAAA,GAAI,CAAA,KAAM,CAAA,KAAM,CAAA,GAAI,GAAA,KAAQ,CAAA,IAAK,CAAA,GAAI,GAAA,KAAQ,CAAA,CAAA,GAAK,EAAA,GAAK,IAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAE,CAAA,CAAE,CAAA,GAAI,CAAC,CAAA;AACzH,EAAA,OAAO,CAAA,IAAK,GAAA;AACd;AAEA,SAAS,UAAU,CAAA,EAAoB;AACrC,EAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA;AACxB,EAAA,IAAI,CAAC,GAAG,OAAO,KAAA;AACf,EAAA,MAAM,CAAC,CAAA,EAAG,EAAA,EAAI,CAAA,EAAG,GAAG,EAAA,EAAI,EAAE,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAI,MAAM,CAAA;AACtD,EAAA,IAAI,CAAC,cAAA,CAAe,CAAA,EAAG,EAAA,EAAI,CAAC,CAAA,IAAK,CAAA,GAAI,EAAA,IAAM,EAAA,GAAK,EAAA,IAAM,EAAA,GAAK,EAAA,EAAI,OAAO,KAAA;AACtE,EAAA,IAAI,EAAE,CAAC,CAAA,KAAM,MAAA,KAAc,MAAA,CAAO,EAAE,CAAC,CAAC,CAAA,GAAI,EAAA,IAAM,OAAO,CAAA,CAAE,CAAC,CAAC,CAAA,GAAI,KAAK,OAAO,KAAA;AAC3E,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,sBAAsB,IAAA,EAAuC;AAC3E,EAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAY,GAAG,MAAK,GAAI,IAAA;AAC3C,EAAA,OAAO,cAAc,IAAI,CAAA;AAC3B;AAEA,SAAS,iBAAiB,CAAA,EAAuB;AAC/C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,CAAA,IAAK,CAAA,EAAG,GAAA,IAAO,MAAA,CAAO,aAAa,CAAC,CAAA;AAC/C,EAAA,OAAO,IAAA,CAAK,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC5E;AAGA,SAAS,iBAAiB,CAAA,EAAuB;AAC/C,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,aAAA,IAAiB,CAAC,kBAAA,CAAmB,IAAA,CAAK,CAAC,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,eAAe,CAAA;AAC9F,EAAA,MAAM,SAAS,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,EAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,GAAI,MAAM,KAAA,CAAM,CAAA,EAAA,CAAI,IAAK,CAAA,CAAE,MAAA,GAAS,KAAM,CAAC,CAAA;AAChG,EAAA,MAAM,GAAA,GAAM,KAAK,MAAM,CAAA;AACvB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,EAAA,IAAM,gBAAA,CAAiB,GAAG,MAAM,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,yBAAyB,CAAA;AAC/F,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,MAAM,CAAA,EAA0C;AACvD,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAEA,SAAS,SAAA,CAAU,GAAA,EAA8B,OAAA,EAAmB,KAAA,EAAe,MAAA,EAAwB;AACzG,EAAA,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG;AAChC,IAAA,IAAI,gBAAA,CAAiB,GAAA,CAAI,CAAA,CAAE,WAAA,EAAa,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,CAAA,qBAAA,EAAwB,CAAC,CAAA,gBAAA,CAAkB,CAAA;AAAA,SAAA,IACjG,CAAC,OAAA,CAAQ,QAAA,CAAS,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,CAAA,iBAAA,EAAoB,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,EAC7E;AACA,EAAA,KAAA,MAAW,CAAA,IAAK,OAAA,EAAS,IAAI,EAAE,CAAA,IAAK,GAAA,CAAA,EAAM,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,CAAA,iBAAA,EAAoB,CAAC,CAAA,CAAA,CAAG,CAAA;AACxF;AAGO,SAAS,uBAAuB,IAAA,EAAyB;AAC9D,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,IAAI,CAAC,KAAA,CAAM,IAAI,CAAA,EAAG,OAAO,CAAC,qBAAqB,CAAA;AAC/C,EAAA,SAAA,CAAU,IAAA,EAAM,SAAA,EAAW,MAAA,EAAQ,MAAM,CAAA;AACzC,EAAA,IAAI,KAAK,GAAA,KAAQ,cAAA,SAAuB,IAAA,CAAK,CAAA,kBAAA,EAAqB,cAAc,CAAA,CAAE,CAAA;AAClF,EAAA,IAAI,OAAO,IAAA,CAAK,OAAA,KAAY,QAAA,IAAY,CAAC,SAAA,CAAU,IAAA,CAAK,IAAA,CAAK,OAAO,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,gEAAgE,CAAA;AACnJ,EAAA,IAAI,OAAO,IAAA,CAAK,SAAA,KAAc,QAAA,IAAY,CAAC,SAAA,CAAU,IAAA,CAAK,SAAS,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,+CAA+C,CAAA;AACjI,EAAA,IAAI,OAAO,KAAK,cAAA,KAAmB,QAAA,IAAY,CAAC,IAAA,CAAK,cAAA,EAAgB,MAAA,CAAO,IAAA,CAAK,iDAAiD,CAAA;AAClI,EAAA,IAAI,OAAO,IAAA,CAAK,SAAA,KAAc,QAAA,EAAU,MAAA,CAAO,KAAK,kCAAkC,CAAA;AAAA,OACjF;AACH,IAAA,IAAI;AACF,MAAA,gBAAA,CAAiB,KAAK,SAAS,CAAA;AAAA,IACjC,CAAA,CAAA,MAAQ;AACN,MAAA,MAAA,CAAO,KAAK,kFAAkF,CAAA;AAAA,IAChG;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,KAAA,CAAM,IAAA,CAAK,MAAM,CAAA,EAAG,MAAA,CAAO,KAAK,uBAAuB,CAAA;AAAA,OACvD;AACH,IAAA,SAAA,CAAU,IAAA,CAAK,MAAA,EAAQ,WAAA,EAAa,QAAA,EAAU,MAAM,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,WAAA,EAAa;AAC3B,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA;AACvB,MAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAC,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,IAAK,CAAC,cAAA,CAAe,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA,EAAG,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAC,CAAA,EAAG;AACnI,QAAA,MAAA,CAAO,IAAA,CAAK,CAAA,OAAA,EAAU,CAAC,CAAA,yCAAA,CAA2C,CAAA;AAAA,MACpE;AAAA,IACF;AACA,IAAA,MAAM,EAAE,KAAA,EAAO,GAAA,EAAI,GAAI,IAAA,CAAK,MAAA;AAC5B,IAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,QAAQ,QAAA,IAAY,IAAA,CAAK,IAAA,CAAK,KAAK,KAAK,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA,IAAK,QAAQ,GAAA,EAAK;AAC7G,MAAA,MAAA,CAAO,KAAK,8BAA8B,CAAA;AAAA,IAC5C;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAY;AAC/B,EAAA,MAAM,UAAA,uBAAiB,GAAA,EAAY;AACnC,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAY;AAChC,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA,IAAK,IAAA,CAAK,UAAA,CAAW,MAAA,KAAW,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,uCAAuC,CAAA;AAAA;AAEtH,IAAA,IAAA,CAAK,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,KAAM;AAChC,MAAA,IAAI,CAAC,KAAA,CAAM,CAAC,CAAA,EAAG,OAAO,KAAK,MAAA,CAAO,IAAA,CAAK,CAAA,WAAA,EAAc,CAAC,CAAA,gBAAA,CAAkB,CAAA;AACxE,MAAA,SAAA,CAAU,CAAA,EAAG,cAAA,EAAgB,CAAA,WAAA,EAAc,CAAC,KAAK,MAAM,CAAA;AACvD,MAAA,IAAI,OAAO,EAAE,GAAA,KAAQ,QAAA,IAAY,CAAC,0BAAA,CAA2B,QAAA,CAAS,CAAA,CAAE,GAAG,CAAA,EAAG;AAC5E,QAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAC,CAAA,sBAAA,EAAyB,2BAA2B,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,MAC7F;AACA,MAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAC,KAAA,CAAM,IAAA,CAAK,CAAA,CAAE,IAAI,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,WAAA,EAAc,CAAC,CAAA,gCAAA,CAAkC,CAAA;AAAA,WAC/G,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA;AAAA,IACxB,CAAC,CAAA;AAEH,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,IAAK,IAAA,CAAK,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,kCAAkC,CAAA;AAAA;AAEvG,IAAA,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,KAAM;AAC3B,MAAA,IAAI,CAAC,KAAA,CAAM,CAAC,CAAA,EAAG,OAAO,KAAK,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,gBAAA,CAAkB,CAAA;AACnE,MAAA,SAAA,CAAU,CAAA,EAAG,SAAA,EAAW,CAAA,MAAA,EAAS,CAAC,KAAK,MAAM,CAAA;AAC7C,MAAA,IAAI,OAAO,CAAA,CAAE,EAAA,KAAO,QAAA,IAAY,CAAC,SAAA,CAAU,IAAA,CAAK,CAAA,CAAE,EAAE,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,sDAAA,CAAwD,CAAA;AAAA,WAAA,IAC5H,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,EAAE,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,yBAAA,EAA4B,CAAA,CAAE,EAAE,CAAA,CAAA,CAAG,CAAA;AAAA,WAChF,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,EAAE,CAAA;AACrB,MAAA,IAAI,CAAA,CAAE,IAAA,KAAS,OAAA,IAAW,CAAA,CAAE,IAAA,KAAS,UAAU,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,mCAAA,CAAqC,CAAA;AAC1G,MAAA,IAAI,OAAO,EAAE,KAAA,KAAU,QAAA,IAAY,CAAC,CAAA,CAAE,KAAA,IAAS,EAAE,KAAA,CAAM,MAAA,GAAS,aAAa,mBAAA,CAAoB,IAAA,CAAK,EAAE,KAAK,CAAA,IAAK,CAAC,KAAA,CAAM,IAAA,CAAK,CAAA,CAAE,KAAK,CAAA,EAAG;AACtI,QAAA,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,uCAAA,EAA0C,SAAS,CAAA,sBAAA,CAAwB,CAAA;AAAA,MACnG;AACA,MAAA,IAAI,OAAO,CAAA,CAAE,KAAA,KAAU,QAAA,IAAY,CAAC,OAAO,aAAA,CAAc,CAAA,CAAE,KAAK,CAAA,IAAK,EAAE,KAAA,GAAQ,CAAA,SAAU,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,uCAAA,CAAyC,CAAA;AACjJ,MAAA,IAAI,OAAO,CAAA,CAAE,cAAA,KAAmB,QAAA,IAAY,CAAC,KAAA,CAAM,IAAA,CAAK,CAAA,CAAE,cAAc,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,0CAAA,CAA4C,CAAA;AAAA,WAAA,IACpI,CAAC,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,cAAc,GAAG,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,6CAAA,CAA+C,CAAA;AAAA,WACxG,UAAA,CAAW,GAAA,CAAI,CAAA,CAAE,cAAc,CAAA;AAAA,IACtC,CAAC,CAAA;AACH,EAAA,KAAA,MAAW,CAAA,IAAK,MAAA,EAAQ,IAAI,CAAC,UAAA,CAAW,GAAA,CAAI,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,YAAA,EAAe,CAAC,CAAA,8BAAA,CAAgC,CAAA;AAC5G,EAAA,OAAO,MAAA;AACT;AAMA,eAAsB,eAAA,CACpB,MACA,OAAA,EACgC;AAChC,EAAA,MAAMC,KAAAA,GAAO,CAAC,MAAA,MAA6C,EAAE,OAAO,KAAA,EAAO,KAAA,EAAO,EAAC,EAAG,MAAA,EAAO,CAAA;AAC7F,EAAA,MAAM,WAAA,GAAc,uBAAuB,IAAI,CAAA;AAC/C,EAAA,IAAI,WAAA,CAAY,MAAA,GAAS,CAAA,EAAG,OAAOA,MAAK,WAAW,CAAA;AACnD,EAAA,MAAM,CAAA,GAAI,IAAA;AACV,EAAA,IAAI,EAAA,GAAK,KAAA;AACT,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAK,OAAO,OAAA,CAAQ,SAAA,KAAc,WAAW,UAAA,CAAW,OAAA,CAAQ,SAAS,CAAA,GAAI,OAAA,CAAQ,SAAA;AAC3F,IAAA,EAAA,GAAK,MAAMC,mBAAAA,CAAY,gBAAA,CAAiB,CAAA,CAAE,SAAS,CAAA,EAAGC,oBAAAA,CAAY,qBAAA,CAAsB,CAAuC,CAAC,CAAA,EAAG,EAAA,EAAI,EAAE,MAAA,EAAQ,OAAO,CAAA;AAAA,EAC1J,CAAA,CAAA,MAAQ;AACN,IAAA,EAAA,GAAK,KAAA;AAAA,EACP;AACA,EAAA,IAAI,CAAC,EAAA,EAAI,OAAOF,KAAAA,CAAK,CAAC,gCAAgC,CAAC,CAAA;AACvD,EAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,KAAA,EAAO,CAAA,CAAE,MAAM,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,GAAG,CAAA,EAAE,CAAE,CAAA,EAAG,MAAA,EAAQ,EAAC,EAAE;AAC1E;;;ACvLO,IAAM,eAAA,GAAkB;AAAA,EAC7B,sBAAA;AAAA,EACA,iBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF,CAAA;AAIO,IAAM,UAAA,GAAa,qBAAA;AAyDnB,IAAM,iBAAA,GAAoB,CAAC,UAAA,EAAY,SAAA,EAAW,SAAS,CAAA;AAuC3D,IAAM,OAAA,GAAU;AAAA,EACrB,aAAA,EAAe,eAAA;AAAA,EACf,WAAA,EAAa,aAAA;AAAA,EACb,eAAA,EAAiB,iBAAA;AAAA,EACjB,sBAAA,EAAwB,wBAAA;AAAA,EACxB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,mBAAA,EAAqB,qBAAA;AAAA,EACrB,aAAA,EAAe,eAAA;AAAA,EACf,eAAA,EAAiB,iBAAA;AAAA,EACjB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,oBAAA,EAAsB,sBAAA;AAAA,EACtB,kBAAA,EAAoB,oBAAA;AAAA,EACpB,yBAAA,EAA2B,2BAAA;AAAA,EAC3B,gBAAA,EAAkB,kBAAA;AAAA,EAClB,0BAAA,EAA4B,4BAAA;AAAA,EAC5B,2BAAA,EAA6B,6BAAA;AAAA,EAC7B,6BAAA,EAA+B;AACjC,CAAA;AAKO,IAAM,KAAA,GAAQ;AAAA,EACnB,sBAAA,EAAwB,wBAAA;AAAA,EACxB,cAAA,EAAgB,gBAAA;AAAA,EAChB,8BAAA,EAAgC;AAClC,CAAA;;;AC1IA,IAAM,SAAA,GAAY,gBAAA;AAElB,SAASF,UAAS,CAAA,EAA0C;AAC1D,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAOO,SAAS,oBAAoB,SAAA,EAA4C;AAC9E,EAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAY,GAAG,MAAK,GAAI,SAAA;AAC3C,EAAA,OAAO,cAAc,IAAI,CAAA;AAC3B;AAGO,SAAS,gBAAgB,SAAA,EAA4C;AAC1E,EAAA,OAAOK,oBAAWC,cAAAA,CAAOF,oBAAAA,CAAY,oBAAoB,SAAS,CAAC,CAAC,CAAC,CAAA;AACvE;AAGA,SAAS,SAAA,CAAU,MAAkB,GAAA,EAAoD;AACvF,EAAA,MAAM,IAAA,GAAOJ,SAAAA,CAAS,IAAI,CAAA,IAAK,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA,GAAI,IAAA,CAAK,IAAA,GAAO,EAAC;AACvE,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,KAAiBA,UAAS,CAAC,CAAA,IAAK,CAAA,CAAE,GAAA,KAAQ,GAAG,CAAA;AACpE,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,MAAA,EAAQ,QAAQ,aAAA,EAAc;AAGjD,EAAA,IAAI,GAAA,CAAI,GAAA,KAAQ,OAAA,IAAW,GAAA,CAAI,GAAA,KAAQ,KAAA,IAAS,GAAA,CAAI,GAAA,KAAQ,SAAA,IAAa,OAAO,GAAA,CAAI,CAAA,KAAM,QAAA,EAAU;AAClG,IAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,CAAQ,eAAA,EAAgB;AAAA,EAC3C;AACA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,gBAAA,CAAiB,IAAI,CAAC,CAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,CAAQ,eAAA,EAAgB;AAAA,EAC3C;AACA,EAAA,IAAI,IAAI,MAAA,KAAW,EAAA,SAAW,EAAE,MAAA,EAAQ,QAAQ,eAAA,EAAgB;AAChE,EAAA,OAAO,EAAE,GAAA,EAAI;AACf;AAEA,SAAS,gBAAgB,WAAA,EAAuC;AAC9D,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,SAAU,EAAC;AACzC,EAAA,MAAM,QAAyB,EAAC;AAChC,EAAA,KAAA,MAAW,KAAK,WAAA,EAAqC;AACnD,IAAA,IAAI,CAACA,SAAAA,CAAS,CAAC,CAAA,EAAG;AAClB,IAAA,MAAM,UAAU,OAAO,CAAA,CAAE,aAAA,KAAkB,QAAA,GAAW,EAAE,aAAA,GAAgB,oBAAA;AACxE,IAAA,IAAI,OAAO,CAAA,CAAE,SAAA,KAAc,YAAY,CAAA,CAAE,SAAA,CAAU,WAAW,CAAA,EAAG;AAC/D,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,KAAA,CAAM,sBAAA,EAAwB,SAAS,CAAA;AAAA,IAC5D;AACA,IAAA,MAAM,KAAA,GACJ,OAAO,CAAA,CAAE,mBAAA,KAAwB,YACjC,CAAA,CAAE,mBAAA,CAAoB,MAAA,GAAS,CAAA,IAC/B,OAAO,CAAA,CAAE,oBAAA,KAAyB,QAAA,IAClC,CAAA,CAAE,qBAAqB,MAAA,GAAS,CAAA;AAClC,IAAA,IAAI,CAAC,OAAO,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,CAAM,cAAA,EAAgB,OAAA,EAAS,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,iBAAiB,KAAA,EAA0B;AAClD,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,SAAU,EAAC;AACnC,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,QAAQ,KAAA,EAA0B;AAC3C,IAAA,IAAI,CAACA,UAAS,IAAI,CAAA,IAAK,CAAE,iBAAA,CAAwC,QAAA,CAAS,IAAA,CAAK,KAAe,CAAA,EAAG;AAC/F,MAAA,OAAA,CAAQ,IAAA,CAAK,QAAQ,2BAA2B,CAAA;AAChD,MAAA;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,UAAU,SAAA,EAAW;AAC5B,MAAA,MAAM,MAAM,IAAA,CAAK,QAAA;AACjB,MAAA,MAAM,KACJA,SAAAA,CAAS,GAAG,KACZ,MAAA,CAAO,SAAA,CAAU,IAAI,MAAM,CAAA,IAC3B,OAAO,SAAA,CAAU,GAAA,CAAI,KAAK,CAAA,IACzB,GAAA,CAAI,UAAqB,CAAA,IACzB,GAAA,CAAI,SAAqB,GAAA,CAAI,MAAA;AAChC,MAAA,IAAI,CAAC,EAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,6BAA6B,CAAA;AAAA,IAC7D;AAAA,EACF;AACA,EAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,OAAO,CAAC,CAAA;AAC7B;AASA,SAAS,eAAe,SAAA,EAA+C;AACrE,EAAA,MAAM,MAAiB,EAAC;AACxB,EAAA,IAAI,SAAA,CAAU,eAAA,KAAoB,MAAA,IAAa,SAAA,CAAU,oBAAoB,IAAA,EAAM;AACjF,IAAA,GAAA,CAAI,IAAA,CAAK,UAAU,eAAe,CAAA;AAAA,EACpC;AACA,EAAA,IAAI,UAAU,gBAAA,KAAqB,MAAA,EAAW,GAAA,CAAI,IAAA,CAAK,UAAU,gBAAgB,CAAA;AACjF,EAAA,IAAI,UAAU,aAAA,KAAkB,MAAA,EAAW,GAAA,CAAI,IAAA,CAAK,UAAU,aAAa,CAAA;AAC3E,EAAA,IAAI,SAAA,CAAU,oBAAoB,MAAA,EAAW;AAG3C,IAAA,IAAI,KAAA,CAAM,QAAQ,SAAA,CAAU,eAAe,GAAG,GAAA,CAAI,IAAA,CAAK,GAAG,SAAA,CAAU,eAAe,CAAA;AAAA,SAC9E,GAAA,CAAI,KAAK,IAAI,CAAA;AAAA,EACpB;AACA,EAAA,OAAO,GAAA;AACT;AAMA,eAAsB,eAAA,CACpB,WACA,IAAA,EACsC;AACtC,EAAA,MAAME,KAAAA,GAAO,CACXK,QAAAA,EACA,OAAA,GAAgD,EAAC,MAChB;AAAA,IACjC,KAAA,EAAO,KAAA;AAAA,IACP,GAAA,EAAK,IAAA;AAAA,IACL,MAAA,EAAQ,IAAA;AAAA,IACR,cAAA,EAAgB,IAAA;AAAA,IAChB,OAAO,EAAC;AAAA,IACR,GAAG,OAAA;AAAA,IACH,OAAA,EAAAA;AAAA,GACF,CAAA;AAEA,EAAA,IAAI,CAACP,UAAS,SAAS,CAAA,SAAUE,KAAAA,CAAK,CAAC,OAAA,CAAQ,aAAa,CAAC,CAAA;AAC7D,EAAA,MAAM,MAAM,OAAO,SAAA,CAAU,GAAA,KAAQ,QAAA,GAAW,UAAU,GAAA,GAAM,IAAA;AAChE,EAAA,MAAM,MAAA,GAAS,gBAAgB,SAAS,CAAA;AACxC,EAAA,MAAM,MAAM,OAAO,SAAA,CAAU,cAAA,KAAmB,QAAA,GAAW,UAAU,cAAA,GAAiB,IAAA;AACtF,EAAA,MAAM,IAAA,GAAO,EAAE,GAAA,EAAK,MAAA,EAAQ,gBAAgB,GAAA,EAAI;AAEhD,EAAA,IAAI,CAAC,GAAA,IAAO,CAAE,eAAA,CAAsC,QAAA,CAAS,GAAG,CAAA,EAAG;AACjE,IAAA,OAAOA,KAAAA,CAAK,CAAC,OAAA,CAAQ,WAAW,GAAG,IAAI,CAAA;AAAA,EACzC;AAEA,EAAA,IAAI,SAAA,CAAU,GAAA,KAAQ,MAAA,IAAa,SAAA,CAAU,QAAQ,OAAA,EAAS;AAC5D,IAAA,OAAOA,KAAAA,CAAK,CAAC,OAAA,CAAQ,eAAe,GAAG,IAAI,CAAA;AAAA,EAC7C;AACA,EAAA,IAAI,CAAC,KAAK,OAAOA,KAAAA,CAAK,CAAC,OAAA,CAAQ,sBAAsB,GAAG,IAAI,CAAA;AAC5D,EAAA,IAAI,OAAO,SAAA,CAAU,SAAA,KAAc,YAAY,SAAA,CAAU,SAAA,CAAU,WAAW,CAAA,EAAG;AAC/E,IAAA,OAAOA,KAAAA,CAAK,CAAC,OAAA,CAAQ,iBAAiB,GAAG,IAAI,CAAA;AAAA,EAC/C;AACA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,gBAAA,CAAiB,UAAU,SAAS,CAAA;AAAA,EAC5C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAOA,KAAAA,CAAK,CAAC,OAAA,CAAQ,mBAAmB,GAAG,IAAI,CAAA;AAAA,EACjD;AACA,EAAA,IAAI,GAAA,CAAI,WAAW,EAAA,EAAI,OAAOA,MAAK,CAAC,OAAA,CAAQ,mBAAmB,CAAA,EAAG,IAAI,CAAA;AAEtE,EAAA,MAAM,QAAA,GAAW,SAAA,CAAU,IAAA,EAAM,GAAG,CAAA;AACpC,EAAA,IAAI,CAAC,SAAS,GAAA,EAAK,OAAOA,MAAK,CAAC,QAAA,CAAS,MAAgB,CAAA,EAAG,IAAI,CAAA;AAEhE,EAAA,IAAI,KAAA,GAAQ,KAAA;AACZ,EAAA,IAAI;AACF,IAAA,KAAA,GAAQ,MAAMC,oBAAY,GAAA,EAAKC,oBAAAA,CAAY,oBAAoB,SAAS,CAAC,CAAA,EAAG,QAAA,CAAS,GAAG,CAAA;AAAA,EAC1F,CAAA,CAAA,MAAQ;AACN,IAAA,KAAA,GAAQ,KAAA;AAAA,EACV;AACA,EAAA,IAAI,CAAC,OAAO,OAAOF,KAAAA,CAAK,CAAC,OAAA,CAAQ,iBAAiB,GAAG,IAAI,CAAA;AAEzD,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,CAAA,IAAK,cAAA,CAAe,SAAS,CAAA,EAAG;AACzC,IAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAC,SAAA,CAAU,IAAA,CAAK,CAAC,CAAA,EAAG;AAC/C,MAAA,OAAA,CAAQ,IAAA,CAAK,QAAQ,gBAAgB,CAAA;AACrC,MAAA;AAAA,IACF;AAAA,EACF;AACA,EAAA,IAAI,GAAA,KAAQ,oBAAoB,OAAA,CAAQ,IAAA,CAAK,GAAG,gBAAA,CAAiB,SAAA,CAAU,KAAK,CAAC,CAAA;AAEjF,EAAA,MAAM,QAAQ,GAAA,KAAQ,sBAAA,GAAyB,gBAAgB,SAAA,CAAU,WAAW,IAAI,EAAC;AAEzF,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,QAAQ,MAAA,KAAW,CAAA;AAAA,IAC1B,GAAA;AAAA,IACA,MAAA;AAAA,IACA,cAAA,EAAgB,GAAA;AAAA,IAChB,OAAA;AAAA,IACA;AAAA,GACF;AACF;AAGA,IAAM,YAAA,GAAiE;AAAA,EACrE,eAAA,EAAiB,MAAA;AAAA,EACjB,eAAA,EAAiB,CAAC,sBAAsB,CAAA;AAAA,EACxC,gBAAA,EAAkB,CAAC,iBAAiB,CAAA;AAAA,EACpC,aAAA,EAAe,CAAC,sBAAA,EAAwB,iBAAA,EAAmB,gBAAgB;AAC7E,CAAA;AAWA,eAAsB,MAAA,CACpB,OACA,IAAA,EACmC;AACnC,EAAA,MAAM,WAAA,GAAA,iBAAc,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAC3C,EAAA,MAAM,MAAA,GAAS,CACb,KAAA,EACAK,QAAAA,EACAC,QACAC,WAAAA,MAC8B,EAAE,KAAA,EAAO,OAAA,EAAAF,QAAAA,EAAS,KAAA,EAAAC,MAAAA,EAAO,UAAA,EAAAC,aAAY,WAAA,EAAY,CAAA;AAEjF,EAAA,IAAI,CAACT,SAAAA,CAAS,KAAK,CAAA,SAAU,MAAA,CAAO,KAAA,EAAO,CAAC,OAAA,CAAQ,oBAAoB,CAAA,EAAG,EAAC,EAAG,EAAE,CAAA;AAKjF,EAAA,IACE,KAAA,CAAM,GAAA,KAAQ,UAAA,IACd,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,UAAU,CAAA,IAC9B,CAAE,eAAA,CAAsC,QAAA,CAAS,KAAA,CAAM,GAAa,CAAA,EACpE;AACA,IAAA,OAAO,MAAA,CAAO,OAAO,CAAC,OAAA,CAAQ,kBAAkB,CAAA,EAAG,EAAC,EAAG,EAAE,CAAA;AAAA,EAC3D;AAGA,EAAA,IAAI,KAAA,CAAM,QAAQ,UAAA,EAAY;AAC5B,IAAA,MAAM,GAAA,GAAM,MAAM,eAAA,CAAgB,KAAA,EAAO,IAAI,CAAA;AAC7C,IAAA,OAAO,OAAO,GAAA,CAAI,KAAA,EAAO,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAC,CAAA,KAAM,CAAA,EAAA,EAAK,CAAC,EAAE,CAAA,EAAG,GAAA,CAAI,KAAA,EAAO,CAAC,GAAG,CAAC,CAAA;AAAA,EAC7E;AAEA,EAAA,MAAM,gBAAkC,KAAA,CAAM,OAAA,CAAQ,MAAM,UAAU,CAAA,GAAI,MAAM,UAAA,GAAa,IAAA;AAC7F,EAAA,IAAI,CAAC,aAAA,EAAe;AAClB,IAAA,OAAO,MAAA,CAAO,OAAO,CAAC,OAAA,CAAQ,yBAAyB,CAAA,EAAG,EAAC,EAAG,EAAE,CAAA;AAAA,EAClE;AAEA,EAAA,MAAM,aAA4C,EAAC;AACnD,EAAA,KAAA,MAAW,CAAA,IAAK,eAAe,UAAA,CAAW,IAAA,CAAK,MAAM,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAC,CAAA;AAE7E,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAyC;AAC9D,EAAA,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAM;AACxB,IAAA,IAAI,EAAE,MAAA,EAAQ,QAAA,CAAS,GAAA,CAAI,CAAA,CAAE,QAAQ,CAAC,CAAA;AAAA,EACxC,CAAC,CAAA;AAED,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,QAAyB,EAAC;AAChC,EAAA,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,KAAM;AAC3B,IAAA,CAAA,CAAE,OAAA,CAAQ,OAAA,CAAQ,CAAC,CAAA,KAAM,OAAA,CAAQ,IAAA,CAAK,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,CAAC,CAAA,CAAE,CAAC,CAAA;AAClD,IAAA,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA,CAAE,KAAK,CAAA;AACrB,IAAA,MAAM,GAAA,GAAM,cAAc,CAAC,CAAA;AAC3B,IAAA,IAAI,CAAC,CAAA,CAAE,KAAA,IAAS,CAACA,SAAAA,CAAS,GAAG,CAAA,EAAG;AAChC,IAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,KAAK,MAAA,CAAO,OAAA,CAAQ,YAAY,CAAA,EAAG;AAC3D,MAAA,MAAM,KAAA,GAAQ,IAAI,KAAK,CAAA;AACvB,MAAA,MAAM,UAAU,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACrD,MAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,QAAA,IAAI,OAAO,MAAM,QAAA,EAAU;AAC3B,QAAA,MAAM,MAAA,GAAS,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA;AAC7B,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,MAAM,8BAAA,EAAgC,OAAA,EAAS,GAAG,CAAA;AACrE,UAAA;AAAA,QACF;AACA,QAAA,MAAM,UAAU,OAAA,KAAY,MAAA,GAAS,CAAC,CAAA,CAAE,GAAmB,CAAA,GAAI,OAAA;AAC/D,QAAA,IAAI,CAAC,OAAO,GAAA,IAAO,CAAC,QAAQ,QAAA,CAAS,MAAA,CAAO,GAAmB,CAAA,EAAG;AAChE,UAAA,OAAA,CAAQ,KAAK,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,OAAA,CAAQ,0BAA0B,CAAA,CAAE,CAAA;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC,CAAA;AAED,EAAA,OAAO,OAAO,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAA,EAAS,OAAO,UAAU,CAAA;AAChE;;;ACrPO,IAAM,oBAAA,GAAuB;AAAA,EAClC,qBAAA,EAAuB,uBAAA;AAAA,EACvB,eAAA,EAAiB,iBAAA;AAAA,EACjB,cAAA,EAAgB,gBAAA;AAAA,EAChB,WAAA,EAAa,aAAA;AAAA,EACb,uBAAA,EAAyB,yBAAA;AAAA,EACzB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,sBAAA,EAAwB,wBAAA;AAAA,EACxB,cAAA,EAAgB,gBAAA;AAAA,EAChB,QAAA,EAAU,UAAA;AAAA,EACV,4BAAA,EAA8B,8BAAA;AAAA,EAC9B,+BAAA,EAAiC,iCAAA;AAAA,EACjC,uBAAA,EAAyB,yBAAA;AAAA,EACzB,WAAA,EAAa;AACf;AAYA,IAAM,CAAA,GAAI,oBAAA;AAGH,SAAS,mBAAmB,IAAA,EAAoC;AACrE,EAAA,IAAI,IAAA,EAAM,OAAA,KAAY,IAAA,EAAM,OAAO,IAAA;AACnC,EAAA,MAAM,GAAA,GAAO,WAA0E,OAAA,EAAS,GAAA;AAChG,EAAA,OAAO,KAAK,gBAAA,KAAqB,GAAA;AACnC;AAEA,IAAM,IAAA,GAAO,CAAC,OAAA,EAAmB,UAAA,MAAqD;AAAA,EACpF,EAAA,EAAI,KAAA;AAAA,EACJ,OAAO,EAAC;AAAA,EACR,OAAA;AAAA,EACA,GAAI,UAAA,GAAa,EAAE,UAAA,KAAe;AACpC,CAAA,CAAA;AAEA,SAASU,OAAM,CAAA,EAA0C;AACvD,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAQA,IAAMC,eAAAA,uBAAqB,GAAA,CAAI;AAAA,EAC7B,KAAA;AAAA,EAAO,gBAAA;AAAA,EAAkB,WAAA;AAAA,EAAa,KAAA;AAAA,EAAO,UAAA;AAAA,EAAY,iBAAA;AAAA,EACzD,mBAAA;AAAA,EAAqB,WAAA;AAAA,EAAa,eAAA;AAAA,EAAiB;AACrD,CAAC,CAAA;AACD,IAAM,sCAAsB,IAAI,GAAA,CAAI,CAAC,OAAA,EAAS,MAAA,EAAQ,UAAU,CAAC,CAAA;AACjE,IAAM,gCAAgB,IAAI,GAAA,CAAI,CAAC,QAAA,EAAU,OAAO,CAAC,CAAA;AAEjD,SAAS,WAAA,CAAY,CAAA,EAA4B,OAAA,EAAsB,KAAA,EAAyB;AAC9F,EAAA,OAAO,MAAA,CAAO,KAAK,CAAC,CAAA,CAAE,OAAO,CAAC,CAAA,KAAM,CAAC,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAC,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA,CAAE,iBAAiB,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,EAAI,CAAC,CAAA,CAAE,CAAA;AACxG;AAGA,SAAS,YAAY,CAAA,EAA4D;AAC/E,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAO,IAAA;AAC1C,EAAA,IAAI,CAAA,CAAE,OAAA,KAAY,oBAAA,EAAsB,OAAO,UAAA;AAC/C,EAAA,IAAI,CAAA,CAAE,OAAA,KAAY,UAAA,EAAY,OAAO,UAAA;AACrC,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAA,CAAO,SAAwB,KAAA,EAA0C;AAChF,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG,OAAO,KAAK,CAAC,CAAA,CAAE,QAAQ,CAAC,CAAA;AAChD,EAAA,IAAI,OAAA,KAAY,aAAA,IAAiB,CAAC,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,IAAI,CAAA,EAAG;AACtE,IAAA,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,+BAA+B,CAAC,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,GAAA,CAAI,CAAC,EAAE,QAAQ,OAAA,EAAS,GAAG,CAAA,EAAE,KAAM,CAAC,CAAA;AAC5D,EAAA,MAAM,OAAO,aAAA,CAAc,EAAE,OAAA,EAAS,KAAA,EAAO,WAAW,CAAA;AACxD,EAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,WAAW,CAAA,EAAG,IAAA,CAAK,UAAU,CAAA;AAC1D,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,OAAA,EAAS,EAAC,EAAE;AACxC;AAEA,eAAe,oBAAA,CAAqB,KAAA,EAAgC,OAAA,EAAwB,IAAA,EAA8C;AACxI,EAAA,MAAM,CAAA,GAAI,MAAM,MAAA,CAAO,KAAA,EAAO,IAAI,CAAA;AAClC,EAAA,IAAI,CAAC,CAAA,CAAE,KAAA,EAAO,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,cAAA,EAAgB,GAAG,CAAA,CAAE,OAAO,CAAC,CAAA;AAE1D,EAAA,MAAM,UAAA,GAAc,MAAM,OAAA,CAAQ,KAAA,CAAM,UAAU,CAAA,GAAI,KAAA,CAAM,UAAA,GAAa,CAAC,KAAK,CAAA;AAC/E,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,MAAA,CAAO,CAAC,CAAA,KAAMD,OAAM,CAAC,CAAA,IAAK,CAAA,CAAE,GAAA,KAAQ,kBAAkB,CAAA;AAC/E,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG,OAAO,KAAK,CAAC,CAAA,CAAE,uBAAuB,CAAC,CAAA;AAE/D,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,MAAM,QAAwB,EAAC;AAC/B,EAAA,KAAA,CAAM,OAAA,CAAQ,CAAC,IAAA,EAAM,EAAA,KAAO;AAC1B,IAAA,MAAA,CAAO,IAAA,CAAK,GAAG,WAAA,CAAY,IAAA,EAAMC,iBAAgB,CAAA,IAAA,EAAO,EAAE,EAAE,CAAC,CAAA;AAC7D,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,GAAK,IAAA,CAAK,QAAsB,EAAC;AACrE,IAAA,GAAA,CAAI,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,KAAM;AACpB,MAAA,MAAM,KAAA,GAAQ,CAAA,IAAA,EAAO,EAAE,CAAA,OAAA,EAAU,CAAC,CAAA,CAAA,CAAA;AAClC,MAAA,IAAI,CAACD,MAAAA,CAAM,CAAC,CAAA,EAAG,OAAO,KAAK,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,CAAA,CAAE,cAAc,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AACrE,MAAA,MAAA,CAAO,KAAK,GAAG,WAAA,CAAY,CAAA,EAAG,mBAAA,EAAqB,KAAK,CAAC,CAAA;AACzD,MAAA,IAAI,CAAA,CAAE,UAAU,UAAA,IAAc,CAAA,CAAE,UAAU,SAAA,IAAa,CAAA,CAAE,UAAU,SAAA,EAAW;AAC5E,QAAA,OAAO,KAAK,OAAO,IAAA,CAAK,CAAA,EAAG,EAAE,sBAAsB,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AAAA,MAChE;AACA,MAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAA,CAAE,KAAK,MAAA,KAAW,CAAA,EAAG,OAAO,KAAK,OAAO,IAAA,CAAK,CAAA,EAAG,EAAE,cAAc,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AAC7G,MAAA,MAAM,MAAoB,EAAE,KAAA,EAAO,EAAE,KAAA,EAAO,IAAA,EAAM,EAAE,IAAA,EAAK;AACzD,MAAA,IAAI,CAAA,CAAE,UAAU,SAAA,EAAW;AACzB,QAAA,MAAM,IAAI,CAAA,CAAE,QAAA;AACZ,QAAA,IAAI,CAACA,MAAAA,CAAM,CAAC,CAAA,EAAG,OAAO,KAAK,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,CAAA,CAAE,cAAc,CAAA,CAAA,EAAI,KAAK,CAAA,SAAA,CAAW,CAAA;AAC9E,QAAA,MAAA,CAAO,IAAA,CAAK,GAAG,WAAA,CAAY,CAAA,EAAG,eAAe,CAAA,EAAG,KAAK,WAAW,CAAC,CAAA;AACjE,QAAA,GAAA,CAAI,WAAW,EAAE,MAAA,EAAQ,EAAE,MAAA,EAAkB,KAAA,EAAO,EAAE,KAAA,EAAgB;AAAA,MACxE,WAAW,CAAA,CAAE,QAAA,KAAa,MAAA,IAAa,CAAA,CAAE,aAAa,IAAA,EAAM;AAC1D,QAAA,MAAA,CAAO,KAAK,CAAA,EAAG,CAAA,CAAE,iBAAiB,CAAA,CAAA,EAAI,KAAK,CAAA,SAAA,CAAW,CAAA;AAAA,MACxD;AAGA,MAAA,KAAA,CAAM,KAAK,GAAG,CAAA;AAAA,IAChB,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AAED,EAAA,IAAI,YAAY,aAAA,EAAe;AAC7B,IAAA,MAAM,QAAA,GAAW,UAAA,CAAW,MAAA,CAAO,CAAC,CAAA,KAAMA,OAAM,CAAC,CAAA,IAAK,CAAA,CAAE,GAAA,KAAQ,gBAAgB,CAAA;AAChF,IAAA,IAAI,SAAS,MAAA,KAAW,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,EAAE,4BAA4B,CAAA;AAAA,SAChE;AACH,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,WAAW,CAAA;AACtC,MAAA,IAAI,KAAA,CAAM,SAAS,IAAI,CAAA,SAAU,IAAA,CAAK,CAAA,EAAG,CAAA,CAAE,cAAc,CAAA,QAAA,CAAU,CAAA;AAAA,WAC9D;AACH,QAAA,MAAM,WAAW,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,KAAM,UAAU,CAAA,CAAE,MAAA;AAEvD,QAAA,KAAA,CAAM,IAAA,CAAK,EAAE,KAAA,EAAO,SAAA,EAAW,IAAA,EAAM,CAAA,EAAG,QAAQ,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,iBAAA,CAAA,EAAqB,MAAA,EAAQ,MAAM,CAAA;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AACA,EAAA,IAAI,MAAA,CAAO,MAAA,GAAS,CAAA,EAAG,OAAO,KAAK,MAAM,CAAA;AACzC,EAAA,OAAO,MAAA,CAAO,SAAS,KAAK,CAAA;AAC9B;AAEA,eAAe,qBAAA,CAAsB,IAAA,EAAe,OAAA,EAAwB,SAAA,EAA4D;AAEtI,EAAA,MAAM,KAAA,GAAQ,uBAAuB,IAAI,CAAA;AACzC,EAAA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACpB,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,CAAC,MAAM,mBAAA,CAAoB,IAAA,CAAK,CAAC,CAAC,CAAA;AAC3D,IAAA,OAAO,IAAA,CAAK,CAAC,KAAA,GAAQ,CAAA,CAAE,oBAAoB,CAAA,CAAE,cAAA,EAAgB,GAAG,KAAK,CAAC,CAAA;AAAA,EACxE;AACA,EAAA,MAAM,IAAI,MAAM,eAAA,CAAgB,IAAA,EAAM,EAAE,WAAW,CAAA;AACnD,EAAA,IAAI,CAAC,CAAA,CAAE,KAAA,EAAO,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,cAAA,EAAgB,GAAG,CAAA,CAAE,MAAM,CAAC,CAAA;AACzD,EAAA,MAAM,KAAA,GAAwB,EAAE,KAAA,CAAM,GAAA;AAAA,IAAI,CAAC,CAAA,KACzC,CAAA,CAAE,IAAA,KAAS,QAAA,GACP,EAAE,KAAA,EAAO,SAAA,EAAW,IAAA,EAAM,CAAA,EAAG,CAAA,CAAE,KAAK,CAAA,EAAA,EAAK,CAAA,CAAE,KAAK,CAAA,CAAA,EAAI,MAAA,EAAQ,IAAA,EAAK,GACjE,EAAE,KAAA,EAAO,UAAA,EAAY,IAAA,EAAM,CAAA,EAAG,CAAA,CAAE,KAAK,CAAA,EAAA,EAAK,CAAA,CAAE,KAAK,CAAA,CAAA;AAAG,GAC1D;AACA,EAAA,OAAO,MAAA,CAAO,SAAS,KAAK,CAAA;AAC9B;AAMA,eAAsB,WAAA,CAAY,KAAA,EAAgB,IAAA,GAA2B,EAAC,EAA+B;AAC3G,EAAA,IAAI;AACF,IAAA,IAAI,CAAC,mBAAmB,IAAI,CAAA,SAAU,IAAA,CAAK,CAAC,CAAA,CAAE,qBAAqB,CAAC,CAAA;AACpE,IAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,YAAA;AAChC,IAAA,IAAI,OAAA,KAAY,gBAAgB,OAAA,KAAY,aAAA,SAAsB,IAAA,CAAK,CAAC,CAAA,CAAE,eAAe,CAAC,CAAA;AAC1F,IAAA,IAAI,CAACA,OAAM,KAAK,CAAA,SAAU,IAAA,CAAK,CAAC,CAAA,CAAE,cAAc,CAAC,CAAA;AAEjD,IAAA,IAAI,UAAA,IAAc,KAAA,IAAS,SAAA,IAAa,KAAA,EAAO;AAC7C,MAAA,MAAM,IAAI,oBAAA,CAAqB,KAAA,CAAM,QAAA,IAAY,KAAA,CAAM,SAAS,OAAO,CAAA;AACvE,MAAA,OAAO,KAAK,CAAC,CAAA,CAAE,yBAAyB,GAAG,CAAA,CAAE,OAAO,CAAC,CAAA;AAAA,IACvD;AACA,IAAA,IAAI,aAAa,KAAA,EAAO;AACtB,MAAA,IAAI,IAAA,CAAK,cAAc,KAAA,CAAA,EAAW,OAAO,KAAK,CAAC,CAAA,CAAE,WAAW,CAAC,CAAA;AAC7D,MAAA,OAAO,MAAM,qBAAA,CAAsB,KAAA,EAAO,OAAA,EAAS,KAAK,SAAS,CAAA;AAAA,IACnE;AACA,IAAA,IAAI,CAAC,KAAK,IAAA,EAAM,OAAO,KAAK,CAAC,CAAA,CAAE,WAAW,CAAC,CAAA;AAC3C,IAAA,OAAO,MAAM,oBAAA,CAAqB,KAAA,EAAO,OAAA,EAAS,KAAK,IAAI,CAAA;AAAA,EAC7D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,cAAc,CAAC,CAAA;AAAA,EAChC;AACF","file":"render-lines.cjs","sourcesContent":["/**\n * The claim table (design decision T5): one table mapping record fields to\n * the claim class they may be rendered as and, for goal and protection lines,\n * the verb each mode produces. Every renderer and the verifier read this\n * table; copy is never written per renderer.\n *\n * Rules the table encodes (design \"Claim classes and verbs\", \"Cost\",\n * \"Share cards\"):\n * - A line is exactly one class. \"Safe\", \"correct\" and \"prevented\" never appear.\n * - No protection or goal line carries a dollar figure.\n * - An implicit goal line never says \"sealed\"; goals off read \"not checked\".\n * - The verb comes from the area's mode at the time of the act and, for a\n *   protection act, its verdict. \"Stopped\" shows the tool name and never its\n *   arguments; on a card, no tool name at all.\n * - Cards carry measured, outcome and covered verdict lines only. Estimates\n *   and savings never appear on a card or a PR comment (T8).\n * - No benchmark line ships until the head-to-head is published with its\n *   losing arms; no savings percentage appears anywhere until then.\n */\n\nexport const CLAIM_CLASSES = [\"measured\", \"verdict\", \"estimate\", \"benchmark\", \"outcome\"] as const;\nexport type ClaimClass = (typeof CLAIM_CLASSES)[number];\n\n/**\n * Where a rendering is shown. Cards are the share card and the period card.\n * `share_card` is the `AAP-ShareCard/v1` record statement's lines\n * (`RecordShareCardLine`, statements.ts: `{class, text, coverage}`), the shape\n * `verify` checks; not the MNE-9022 numeric card (sharecard.ts `ShareCardLine`).\n */\nexport const SURFACES = [\"record_page\", \"check_summary\", \"pr_comment\", \"share_card\", \"period_card\"] as const;\nexport type Surface = (typeof SURFACES)[number];\n\nexport const CARD_SURFACES: readonly Surface[] = [\"share_card\", \"period_card\"];\n\n/** Surfaces that never show the savings estimate, even once it qualifies (T8). */\nexport const ESTIMATE_FORBIDDEN_SURFACES: readonly Surface[] = [\"pr_comment\", \"share_card\", \"period_card\"];\n\n/** Protection and goal area modes, as stored at the act. */\nexport const MODES = [\"off\", \"observe\", \"nudge\", \"enforce\"] as const;\nexport type Mode = (typeof MODES)[number];\n\n/**\n * The verb each mode produces at its strongest verdict. `off` produces no line, or\n * \"not checked\". A protection act's verb also depends on its verdict: see\n * `protectionVerb`.\n */\nexport const MODE_VERBS: Record<Mode, string> = {\n  off: \"not checked\",\n  observe: \"flagged\",\n  nudge: \"flagged, agent nudged\",\n  enforce: \"stopped\",\n};\n\n/** A protection act's verdict, as stored at the act (mnemom-api `ProtectionVerdict`). */\nexport const PROTECTION_VERDICTS = [\"pass\", \"warn\", \"nudge\", \"quarantine\", \"block\"] as const;\nexport type ProtectionVerdict = (typeof PROTECTION_VERDICTS)[number];\n\n/**\n * The verb one protection act produces, from the mode and verdict stored at the act; null\n * means the act has no line (mode off, or a pass). Mirrors mnemom-api\n * `src/record/claims.ts` `protectionVerb`: under enforce only a block or quarantine\n * \"stopped\" anything and anything else is \"flagged\"; under nudge only a nudge verdict\n * reads \"flagged, agent nudged\".\n */\nexport function protectionVerb(mode: Mode, verdict: ProtectionVerdict): string | null {\n  if (mode === \"off\" || verdict === \"pass\") return null;\n  if (mode === \"observe\") return MODE_VERBS.observe;\n  if (mode === \"nudge\") return verdict === \"nudge\" ? MODE_VERBS.nudge : MODE_VERBS.observe;\n  return verdict === \"block\" || verdict === \"quarantine\" ? MODE_VERBS.enforce : MODE_VERBS.observe;\n}\n\n/** How the goal was set. An implicit goal is never read as sealed (T16). */\nexport const GOAL_MODES = [\"sealed\", \"implicit\", \"off\"] as const;\nexport type GoalMode = (typeof GOAL_MODES)[number];\n\nexport interface ClaimTableEntry {\n  class: ClaimClass;\n  /** True for the goal and protection areas: the verb comes from the mode. */\n  verb_by_mode: boolean;\n  /** True when the line may carry a money figure (model cost and μ only). */\n  money_allowed: boolean;\n  /** Surfaces this field may appear on; absent means every surface. */\n  surfaces?: readonly Surface[];\n}\n\nexport const CLAIM_TABLE = {\n  commits_recorded: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  messages_from_person: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  compactions: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  tokens_sent_vs_reaching: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  peak_context: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  model_cost: { class: \"measured\", verb_by_mode: false, money_allowed: true },\n  mu_cost: { class: \"measured\", verb_by_mode: false, money_allowed: true },\n  approval: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  /** How the goal was set: \"sealed contract\", \"implicit goal\" or \"not checked\" (M7: its own measured line). */\n  goal_mode: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  goal: { class: \"verdict\", verb_by_mode: true, money_allowed: false },\n  /** The protection area's mode when no act is shown: \"not checked\" under off. */\n  protection_mode: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  protection: { class: \"verdict\", verb_by_mode: true, money_allowed: false },\n  autonomy: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  savings_estimate: {\n    class: \"estimate\",\n    verb_by_mode: false,\n    money_allowed: true,\n    surfaces: [\"record_page\", \"check_summary\"],\n  },\n  benchmark: { class: \"benchmark\", verb_by_mode: false, money_allowed: false },\n  outcome: { class: \"outcome\", verb_by_mode: false, money_allowed: false },\n} as const satisfies Record<string, ClaimTableEntry>;\n\nexport type ClaimField = keyof typeof CLAIM_TABLE;\n\nexport function isClaimField(field: unknown): field is ClaimField {\n  return typeof field === \"string\" && Object.prototype.hasOwnProperty.call(CLAIM_TABLE, field);\n}\n\n/**\n * Line keys the builder (mnemom-api `src/record/claims.ts`) writes on a\n * statement's `lines[]`, mapped to the claim-table field each one renders\n * (cross-lane pick M6). `protection.act.<n>` maps to `protection` for any n.\n */\nexport const LINE_KEY_FIELDS: Readonly<Record<string, ClaimField>> = {\n  \"cost.model\": \"model_cost\",\n  \"cost.mu\": \"mu_cost\",\n  \"goal.mode\": \"goal_mode\",\n  \"goal.verdict\": \"goal\",\n  \"protection.mode\": \"protection_mode\",\n  \"people.messages\": \"messages_from_person\",\n  \"context.compactions\": \"compactions\",\n};\n\nconst PROTECTION_ACT_KEY = /^protection\\.act\\.\\d+$/;\n\n/** The claim-table field a statement line key renders, or undefined for a key the table does not know. */\nexport function fieldForLineKey(key: unknown): ClaimField | undefined {\n  if (typeof key !== \"string\") return undefined;\n  if (PROTECTION_ACT_KEY.test(key)) return \"protection\";\n  return Object.prototype.hasOwnProperty.call(LINE_KEY_FIELDS, key) ? LINE_KEY_FIELDS[key] : undefined;\n}\n","/**\n * claim-lint: the mechanical check every rendering passes (criterion K1.17).\n *\n * A rendering is a surface plus the lines shown on it. Each line names its\n * class, its text, and when it comes from a mode-bearing area, the mode stored\n * at the act. The lint returns every violation with a stable rule name; it\n * never rewrites a line.\n *\n * Line shape (cross-lane pick M6): a signed statement carries\n * `{class, key, text}` per line, with the builder's keys (`cost.model`,\n * `goal.verdict`, `protection.act.0`, ...). The renderer attaches `mode`,\n * `verdict`, `goal_mode`, `tool_name` and `coverage` from the statement's\n * `goal` and `protection` blocks before linting. The lint resolves `field`\n * from `key` when `field` is absent, and off a card reads a verdict line's\n * coverage from the \"<n> of <m> turns judged\" words when no `coverage` object\n * is attached.\n *\n * On `share_card` the lines are the record share card statement's lines\n * (`RecordShareCardLine`, statements.ts `{class, text, coverage}`), the ones\n * `verify` checks in `shareCardReasons`. The MNE-9022 card (sharecard.ts,\n * `{id, kind, label, value, statement_hash}`) carries no `class` and is not a\n * `Rendering`; linting its lines as-is reports `one_class_per_line` on each.\n *\n * Rules, each from the claim table (T5) and the design's claim rules:\n *   one_class_per_line          class is one of the five, and matches the field's class\n *   forbidden_word              \"safe\", \"correct\", \"prevented\" never appear\n *   money_on_goal_or_protection no dollar figure on a goal or protection line\n *   implicit_goal_sealed        an implicit goal line never says \"sealed\"\n *   goal_off_not_checked        with goals off the goal line reads \"not checked\"\n *   estimate_on_forbidden_surface  no estimate or savings on a card or PR comment\n *   verb_mismatch               the verb is the one the mode and the act's verdict produce, exactly\n *                               (mnemom-api `protectionVerb`); a tool name follows \"stopped\" only\n *   enforce_without_tool_name   \"stopped\" names the tool off-card\n *   tool_name_on_card           a card never shows a tool name\n *   tool_arguments_shown        tool arguments never appear\n *   trust_claim                 no minutes-to-trust, review-time or re-checking claim\n *   savings_percentage          no savings percentage anywhere until the board exists\n *   benchmark_not_published     no benchmark line ships yet\n *   verdict_without_coverage    off a card, a goal verdict always shows its coverage (\"N of M turns\n *                               judged\") and a protection act, one recorded decision, carries none;\n *                               on a card every verdict line carries a `coverage` object, as\n *                               `verify` requires (`card_verdict_without_coverage`)\n *   card_class_not_allowed      a card carries measured, outcome and verdict lines only\n *   period_card_without_revert  a period card renders its reverts\n *   field_not_on_surface        the field is not shown on this surface\n *   provisional_mu_on_card      a provisional μ amount (\"≈ N μ (pending)\", A-S-001) never appears on a card:\n *                               cards keep K1.17 and read \"μ pending\" at most\n *   provisional_mu_off_cost_line a provisional μ amount appears on the μ cost line and nowhere else\n */\n\nimport {\n  CARD_SURFACES,\n  CLAIM_CLASSES,\n  CLAIM_TABLE,\n  ESTIMATE_FORBIDDEN_SURFACES,\n  MODES,\n  MODE_VERBS,\n  PROTECTION_VERDICTS,\n  SURFACES,\n  fieldForLineKey,\n  isClaimField,\n  protectionVerb,\n  type ClaimClass,\n  type ClaimTableEntry,\n  type GoalMode,\n  type Mode,\n  type ProtectionVerdict,\n  type Surface,\n} from \"./claim-table.js\";\n\nexport interface RenderedLine {\n  /** Record field the line renders; when present its class must match the claim table. */\n  field?: string;\n  /** Builder line key (`cost.model`, `goal.verdict`, `protection.act.0`, ...); resolves `field` when that is absent. */\n  key?: string;\n  class: string;\n  text: string;\n  /** Mode stored at the act, for goal and protection lines. */\n  mode?: Mode;\n  /** Verdict stored at a protection act; required with nudge and enforce, whose verb depends on it. */\n  verdict?: ProtectionVerdict;\n  /** How the goal was set, for goal lines. */\n  goal_mode?: GoalMode;\n  /** Tool the act concerned; shown only after \"stopped\", and never on a card. */\n  tool_name?: string;\n  /** Never rendered; present here only so the lint can prove it is absent from the text. */\n  tool_arguments?: unknown;\n  /** \"N of M judged\". Required on every verdict line on a card; off a card a goal verdict may say it in words instead. */\n  coverage?: { judged: number; total: number } | null;\n  [k: string]: unknown;\n}\n\nexport interface Rendering {\n  surface: Surface;\n  lines: RenderedLine[];\n  [k: string]: unknown;\n}\n\nexport const LINT_RULES = {\n  one_class_per_line: \"one_class_per_line\",\n  forbidden_word: \"forbidden_word\",\n  money_on_goal_or_protection: \"money_on_goal_or_protection\",\n  implicit_goal_sealed: \"implicit_goal_sealed\",\n  goal_off_not_checked: \"goal_off_not_checked\",\n  estimate_on_forbidden_surface: \"estimate_on_forbidden_surface\",\n  verb_mismatch: \"verb_mismatch\",\n  enforce_without_tool_name: \"enforce_without_tool_name\",\n  tool_name_on_card: \"tool_name_on_card\",\n  tool_arguments_shown: \"tool_arguments_shown\",\n  trust_claim: \"trust_claim\",\n  savings_percentage: \"savings_percentage\",\n  benchmark_not_published: \"benchmark_not_published\",\n  verdict_without_coverage: \"verdict_without_coverage\",\n  card_class_not_allowed: \"card_class_not_allowed\",\n  period_card_without_revert: \"period_card_without_revert\",\n  field_not_on_surface: \"field_not_on_surface\",\n  provisional_mu_on_card: \"provisional_mu_on_card\",\n  provisional_mu_off_cost_line: \"provisional_mu_off_cost_line\",\n  unknown_surface: \"unknown_surface\",\n} as const;\n\nexport type LintRule = (typeof LINT_RULES)[keyof typeof LINT_RULES];\n\nexport interface LintViolation {\n  rule: LintRule;\n  /** Index of the line in the rendering, or -1 for a rendering-level violation. */\n  line: number;\n  text: string;\n}\n\nexport interface LintResult {\n  ok: boolean;\n  violations: LintViolation[];\n}\n\n/**\n * A rule about two things in one clause (\"38% … cheaper\", \"50 mmu … pending\"), read in a\n * single left-to-right pass so the cost stays linear in the line's length; a regex bridge\n * such as `\\d+%[^.\\n]*\\bword\\b` re-scans the clause from every start (CodeQL\n * js/polynomial-redos). `tokens` is global; its named groups are the tokens, `brk` (a\n * full stop or newline outside a number) ends the clause. A number is one token: its digit\n * run always matches and its tail (\"%\", \"mmu\") is an optional named group, so no match can\n * fail after reading digits and no number is re-read from inside its run.\n */\ninterface ClauseRule {\n  tokens: RegExp;\n  /** [first, then]: the rule holds when `then` follows `first` in one clause. */\n  pairs: ReadonlyArray<readonly [string, string]>;\n  /** Tokens that make the rule hold on their own. */\n  alone?: readonly string[];\n}\n\nfunction clauseHas(text: string, rule: ClauseRule): boolean {\n  const seen = new Set<string>();\n  for (const m of text.matchAll(rule.tokens)) {\n    const kind = Object.entries(m.groups ?? {}).find(([, v]) => v !== undefined)?.[0];\n    if (kind === undefined) continue;\n    if (kind === \"brk\") {\n      seen.clear();\n      continue;\n    }\n    if (rule.alone?.includes(kind)) return true;\n    if (rule.pairs.some(([first, then]) => then === kind && seen.has(first))) return true;\n    seen.add(kind);\n  }\n  return false;\n}\n\nconst FORBIDDEN_WORD = /\\b(safe|safely|unsafe|correct|correctly|incorrect|prevent|prevents|prevented|preventing|prevention)\\b/i;\n/**\n * A currency figure. A spelled-out amount is read from the first digit of its run only\n * (`(?<!\\d,+)`), so a long \"9,9,9,…\" is scanned once rather than from every digit.\n */\nconst MONEY = /(?:\\$|€|£|¥)\\s?\\d|\\b(?<!\\d,+)\\d[\\d,]*(?:\\.\\d+)?\\s?(?:USD|EUR|GBP|dollars?|cents?)\\b/i;\nconst SEALED = /\\bsealed\\b/i;\nconst ESTIMATE_WORDS = /\\b(estimate[ds]?|estimation|saving|savings|saved|would have cost|counterfactual)\\b/i;\nconst TRUST_CLAIM =\n  /\\b(minutes?|seconds?|hours?)\\s+to\\s+trust\\b|\\btrust(ed)?\\s+in\\s+(under\\s+|about\\s+)?\\d+\\s*(minutes?|seconds?|hours?|min|s|h)\\b|\\breview[- ]time\\b|\\btime\\s+to\\s+review\\b|\\bwithout\\s+re-?check(ing)?\\b|\\bno\\s+need\\s+to\\s+(re-?check|review)\\b|\\btrust(ed)?\\s+without\\b/i;\n/** A savings percentage: a percent and a saving word in one clause, either order (\"less\" only after). */\nconst SAVINGS_PERCENTAGE: ClauseRule = {\n  tokens:\n    /\\d+(?<percent>(?:\\.\\d+)?\\s?%)?|\\b(?<less>less)\\b|\\b(?<saving>sav(?:e[sd]?|ings?)|cheaper|reduction|reduced)\\b|(?<brk>[.\\n])/gi,\n  pairs: [\n    [\"percent\", \"saving\"],\n    [\"percent\", \"less\"],\n    [\"saving\", \"percent\"],\n  ],\n};\nconst REVERT = /\\brevert(s|ed)?\\b/i;\n/**\n * A provisional μ amount (A-S-001): an approximate figure with a pending marker,\n * \"≈ 50000 mmu (pending)\" or \"≈ 50 μ (pending)\". A bare \"μ pending\" (K1.4) carries no\n * amount and is not provisional. Either half alone is enough to count: a \"≈\" before a\n * figure, or a figure with \"pending\" beside it, so a renderer cannot shed one marker to\n * slip the amount onto a card.\n */\nconst PROVISIONAL_MU: ClauseRule = {\n  tokens:\n    /(?<approx>(?:≈|~|\\bapprox(?:\\.|imately)?\\b|\\babout\\b)\\s*\\d[\\d,]*(?:\\.\\d+)?\\s*(?:mmu\\b|mu\\b|μ|µ))|\\d[\\d,]*(?<amount>(?:\\.\\d+)?\\s*(?:mmu\\b|mu\\b|μ|µ))?|\\b(?<pending>pending)\\b|(?<brk>[.\\n])/gi,\n  alone: [\"approx\"],\n  pairs: [\n    [\"amount\", \"pending\"],\n    [\"pending\", \"amount\"],\n  ],\n};\nconst NOT_CHECKED = /^not checked$/i;\n/** Coverage written into a verdict line's words by the builder: \"4 of 12 turns judged\". */\nconst COVERAGE_IN_TEXT = /\\b(\\d+)\\s+of\\s+(\\d+)\\s+turns\\s+judged\\b/i;\n\n/** Each verb's words, keyed by the mode whose `MODE_VERBS` entry it is. */\nconst MODE_VERB_REGEX: Record<Mode, RegExp> = {\n  off: NOT_CHECKED,\n  observe: /\\bflagged\\b/i,\n  nudge: /\\bflagged, agent nudged\\b/i,\n  enforce: /\\bstopped\\b/i,\n};\n\n/** Verbs that must not appear beside a verb: another verb read as this one. */\nconst OTHER_MODE_VERBS: Record<Mode, RegExp[]> = {\n  off: [/\\bflagged\\b/i, /\\bnudged\\b/i, /\\bstopped\\b/i],\n  observe: [/\\bnudged\\b/i, /\\bstopped\\b/i],\n  nudge: [/\\bstopped\\b/i],\n  enforce: [/\\bflagged\\b/i, /\\bnudged\\b/i],\n};\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\n/** A `coverage` object as `verify` accepts it on a share card line (verify-record.ts `shareCardReasons`). */\nfunction coverageObjectValid(cov: unknown): boolean {\n  return (\n    isObject(cov) &&\n    Number.isInteger(cov.judged) &&\n    Number.isInteger(cov.total) &&\n    (cov.judged as number) >= 0 &&\n    (cov.total as number) >= (cov.judged as number)\n  );\n}\n\n/** Coverage from the attached object, or, when none is attached, from the builder's words. */\nfunction coverageShown(line: RenderedLine): boolean {\n  const cov = line.coverage;\n  if (cov !== undefined) return coverageObjectValid(cov);\n  const m = COVERAGE_IN_TEXT.exec(line.text);\n  return m !== null && Number(m[2]) >= Number(m[1]);\n}\n\n/**\n * The verb a mode-bearing line must show, as the `MODE_VERBS` key it reads as, or undefined\n * when the line should not exist or its verb cannot be known: a pass verdict, an unknown\n * verdict, or nudge or enforce with no verdict attached (each has two verbs).\n */\nfunction expectedVerb(mode: Mode, verdict: unknown): Mode | undefined {\n  if (mode === \"off\") return \"off\";\n  if (verdict === undefined) return mode === \"observe\" ? \"observe\" : undefined;\n  if (!(PROTECTION_VERDICTS as readonly unknown[]).includes(verdict)) return undefined;\n  const verb = protectionVerb(mode, verdict as ProtectionVerdict);\n  return MODES.find((m) => MODE_VERBS[m] === verb);\n}\n\nfunction escapeRegExp(s: string): string {\n  return s.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\nfunction argumentsAppear(text: string, args: unknown): boolean {\n  if (args === undefined || args === null) return false;\n  const needles: string[] = [];\n  const walk = (v: unknown): void => {\n    if (typeof v === \"string\") {\n      if (v.length >= 3) needles.push(v);\n    } else if (typeof v === \"number\" || typeof v === \"boolean\") {\n      needles.push(String(v));\n    } else if (Array.isArray(v)) {\n      v.forEach(walk);\n    } else if (isObject(v)) {\n      Object.values(v).forEach(walk);\n    }\n  };\n  walk(args);\n  if (needles.length === 0) return false;\n  try {\n    needles.push(JSON.stringify(args));\n  } catch {\n    /* unserialisable arguments: the walked values are enough */\n  }\n  return needles.some((n) => n.length > 0 && text.includes(n));\n}\n\nfunction lintLine(surface: Surface, line: RenderedLine, index: number, out: LintViolation[]): void {\n  const push = (rule: LintRule): void => {\n    out.push({ rule, line: index, text: isObject(line) && typeof line.text === \"string\" ? line.text : \"\" });\n  };\n  if (!isObject(line) || typeof line.text !== \"string\" || typeof line.class !== \"string\") {\n    push(LINT_RULES.one_class_per_line);\n    return;\n  }\n  const text = line.text;\n  const onCard = CARD_SURFACES.includes(surface);\n  // The field named on the line wins; a builder key resolves it otherwise (M6).\n  const field = line.field !== undefined ? line.field : fieldForLineKey(line.key);\n\n  // one class per line: a known class, and the field's class when the field is named.\n  const cls = line.class as ClaimClass;\n  if (!(CLAIM_CLASSES as readonly string[]).includes(cls)) {\n    push(LINT_RULES.one_class_per_line);\n  } else if (field !== undefined) {\n    if (!isClaimField(field)) {\n      push(LINT_RULES.one_class_per_line);\n    } else {\n      const entry: ClaimTableEntry = CLAIM_TABLE[field];\n      if (entry.class !== cls) push(LINT_RULES.one_class_per_line);\n      if (entry.surfaces && !(entry.surfaces as readonly Surface[]).includes(surface)) {\n        push(LINT_RULES.field_not_on_surface);\n      }\n    }\n  }\n  // A line of one class never borrows another class's words.\n  if (cls !== \"estimate\" && ESTIMATE_WORDS.test(text)) push(LINT_RULES.one_class_per_line);\n\n  if (FORBIDDEN_WORD.test(text)) push(LINT_RULES.forbidden_word);\n\n  const isGoal = field === \"goal\" || field === \"goal_mode\";\n  const isProtection = field === \"protection\" || field === \"protection_mode\";\n  if ((isGoal || isProtection) && MONEY.test(text)) push(LINT_RULES.money_on_goal_or_protection);\n  if (field !== undefined && isClaimField(field) && !CLAIM_TABLE[field].money_allowed) {\n    if (!isGoal && !isProtection && MONEY.test(text)) push(LINT_RULES.one_class_per_line);\n  }\n\n  if (isGoal) {\n    if (line.goal_mode === \"implicit\" && SEALED.test(text)) push(LINT_RULES.implicit_goal_sealed);\n    if (line.goal_mode === \"off\" && !NOT_CHECKED.test(text.trim())) push(LINT_RULES.goal_off_not_checked);\n  }\n\n  if (cls === \"estimate\" || ESTIMATE_WORDS.test(text)) {\n    if (ESTIMATE_FORBIDDEN_SURFACES.includes(surface)) push(LINT_RULES.estimate_on_forbidden_surface);\n  }\n\n  if (line.mode !== undefined) {\n    const verb = (MODES as readonly string[]).includes(line.mode) ? expectedVerb(line.mode, line.verdict) : undefined;\n    const name = typeof line.tool_name === \"string\" ? line.tool_name.trim() : \"\";\n    const nameShown = name.length > 0 && new RegExp(`(^|[^A-Za-z0-9_])${escapeRegExp(name)}([^A-Za-z0-9_]|$)`).test(text);\n    if (verb === undefined) {\n      push(LINT_RULES.verb_mismatch);\n    } else if (!MODE_VERB_REGEX[verb].test(verb === \"off\" ? text.trim() : text)) {\n      push(LINT_RULES.verb_mismatch);\n    } else if (OTHER_MODE_VERBS[verb].some((re) => re.test(text))) {\n      push(LINT_RULES.verb_mismatch);\n    } else if (verb !== \"enforce\" && nameShown && !onCard) {\n      // The builder names the tool after \"stopped\" only (mnemom-api `protectionActLine`).\n      push(LINT_RULES.verb_mismatch);\n    }\n    if (onCard) {\n      if (nameShown) push(LINT_RULES.tool_name_on_card);\n    } else if (verb === \"enforce\" && !nameShown) {\n      push(LINT_RULES.enforce_without_tool_name);\n    }\n  }\n  if (argumentsAppear(text, line.tool_arguments)) push(LINT_RULES.tool_arguments_shown);\n\n  // A-S-001: a provisional μ amount lives on the μ cost line and never on a card (K1.17).\n  if (clauseHas(text, PROVISIONAL_MU)) {\n    if (onCard) push(LINT_RULES.provisional_mu_on_card);\n    if (field !== \"mu_cost\") push(LINT_RULES.provisional_mu_off_cost_line);\n  }\n\n  if (TRUST_CLAIM.test(text)) push(LINT_RULES.trust_claim);\n  if (clauseHas(text, SAVINGS_PERCENTAGE)) push(LINT_RULES.savings_percentage);\n  if (cls === \"benchmark\") push(LINT_RULES.benchmark_not_published);\n  if (cls === \"verdict\") {\n    // A card carries the coverage object on every verdict line, the rule `verify` enforces on a\n    // signed share card; off a card a protection act has none and a goal verdict may say it in words.\n    const covered = onCard ? coverageObjectValid(line.coverage) : field === \"protection\" || coverageShown(line);\n    if (!covered) push(LINT_RULES.verdict_without_coverage);\n  }\n  if (onCard && cls !== \"measured\" && cls !== \"verdict\" && cls !== \"outcome\") push(LINT_RULES.card_class_not_allowed);\n}\n\n/** Lint one rendering. Never throws; a malformed rendering is a violation. */\nexport function lintRendering(rendering: unknown): LintResult {\n  const violations: LintViolation[] = [];\n  if (!isObject(rendering) || !Array.isArray(rendering.lines)) {\n    return { ok: false, violations: [{ rule: LINT_RULES.unknown_surface, line: -1, text: \"\" }] };\n  }\n  const surface = rendering.surface;\n  if (!(SURFACES as readonly unknown[]).includes(surface)) {\n    return { ok: false, violations: [{ rule: LINT_RULES.unknown_surface, line: -1, text: String(surface) }] };\n  }\n  const lines = rendering.lines as RenderedLine[];\n  lines.forEach((line, i) => lintLine(surface as Surface, line, i, violations));\n\n  if (surface === \"period_card\") {\n    const hasRevert = lines.some(\n      (l) => isObject(l) && l.class === \"outcome\" && typeof l.text === \"string\" && REVERT.test(l.text),\n    );\n    if (!hasRevert) violations.push({ rule: LINT_RULES.period_card_without_revert, line: -1, text: \"\" });\n  }\n\n  return { ok: violations.length === 0, violations };\n}\n\n/** Lint several renderings and keep each result keyed by its position. */\nexport function lintRenderings(renderings: unknown[]): LintResult[] {\n  return renderings.map(lintRendering);\n}\n\n/** The `goal` block a conduct record statement carries (mnemom-api `src/record/builder.ts`). */\nexport interface StatementGoalBlock {\n  mode: GoalMode;\n  [k: string]: unknown;\n}\n\n/** One entry of a conduct record statement's `protection.acts[]`. */\nexport interface StatementProtectionAct {\n  mode: Mode;\n  verdict: ProtectionVerdict;\n  tool_name: string | null;\n  [k: string]: unknown;\n}\n\n/** A statement line as the builder signs it: one class, a stable key, the words shown. */\nexport interface StatementLine {\n  class: string;\n  key: string;\n  text: string;\n}\n\n/**\n * Attach the lint context a signed statement's lines leave out (cross-lane\n * pick M6). The statement carries `{class, key, text}` only; this returns the\n * same lines with `goal_mode` on `goal.*` lines, and `mode`, `verdict` and\n * `tool_name` on `protection.act.*` lines, read from the statement's `goal`\n * and `protection.acts` blocks (`protection.act.<i>` is `acts[i]`). Coverage\n * stays in the verdict line's words; a card renderer attaches the `coverage`\n * object itself. The text is never changed.\n */\nexport function attachLineContext(\n  lines: readonly StatementLine[],\n  goal: StatementGoalBlock | null | undefined,\n  protection: { acts: readonly StatementProtectionAct[] } | null | undefined,\n): RenderedLine[] {\n  return lines.map((line) => {\n    const out: RenderedLine = { class: line.class, key: line.key, text: line.text };\n    if (line.key.startsWith(\"goal.\") && goal) out.goal_mode = goal.mode;\n    if (line.key === \"protection.mode\") out.mode = \"off\";\n    const act = /^protection\\.act\\.(\\d+)$/.exec(line.key);\n    if (act && protection) {\n      const entry = protection.acts[Number(act[1])];\n      if (entry) {\n        out.mode = entry.mode;\n        out.verdict = entry.verdict;\n        if (entry.tool_name) out.tool_name = entry.tool_name;\n      }\n    }\n    return out;\n  });\n}\n","/**\n * The render-estimate rule (criterion K4.4, design decision T8).\n *\n * The savings estimate stays off every rendering until the estimator gives a\n * conservative net lower bound. Today's estimator overstates: it uses median\n * benchmark savings, starts counting at 60k tokens, does not subtract μ, and\n * never shows a loss. `estimateQualifies` is the registry's rule written as a\n * pure function over the estimator's self-description, so a renderer and the\n * verifier reach the same answer. Even when it qualifies, the estimate never\n * appears on a PR comment or a share card.\n */\n\nimport { ESTIMATE_FORBIDDEN_SURFACES, SURFACES, type Surface } from \"./claim-table.js\";\n\n/** Tokens above which the gateway's context work is counted (the 200k line). */\nexport const ESTIMATE_COUNTING_FLOOR_TOKENS = 200_000;\n\nexport interface EstimateDescription {\n  /** How the per-request saving is derived. Only a lower bound qualifies. */\n  method: \"lower_bound\" | \"median\" | \"mean\" | string;\n  /** Tokens from which the estimator starts counting. Must be at least the 200k line. */\n  counting_floor_tokens: number;\n  /** True when μ is subtracted from the gross saving. */\n  net_of_mu: boolean;\n  /** True when the estimator reports a loss as a negative figure rather than clamping at zero. */\n  reports_loss: boolean;\n  /** The net lower bound itself, in the same currency as model cost. */\n  net_lower_bound?: number;\n  [k: string]: unknown;\n}\n\nexport const ESTIMATE_DISQUALIFIERS = {\n  not_an_object: \"not_an_object\",\n  method_not_lower_bound: \"method_not_lower_bound\",\n  counting_floor_below_200k: \"counting_floor_below_200k\",\n  not_net_of_mu: \"not_net_of_mu\",\n  never_shows_loss: \"never_shows_loss\",\n  value_not_finite: \"value_not_finite\",\n} as const;\n\nexport type EstimateDisqualifier = (typeof ESTIMATE_DISQUALIFIERS)[keyof typeof ESTIMATE_DISQUALIFIERS];\n\nexport interface EstimateQualification {\n  qualifies: boolean;\n  reasons: EstimateDisqualifier[];\n}\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\n/** The registry's `estimate_qualifies` rule: a conservative net lower bound. */\nexport function estimateQualifies(estimate: unknown): EstimateQualification {\n  if (!isObject(estimate)) return { qualifies: false, reasons: [ESTIMATE_DISQUALIFIERS.not_an_object] };\n  const reasons: EstimateDisqualifier[] = [];\n  if (estimate.method !== \"lower_bound\") reasons.push(ESTIMATE_DISQUALIFIERS.method_not_lower_bound);\n  const floor = estimate.counting_floor_tokens;\n  if (typeof floor !== \"number\" || !Number.isFinite(floor) || floor < ESTIMATE_COUNTING_FLOOR_TOKENS) {\n    reasons.push(ESTIMATE_DISQUALIFIERS.counting_floor_below_200k);\n  }\n  if (estimate.net_of_mu !== true) reasons.push(ESTIMATE_DISQUALIFIERS.not_net_of_mu);\n  if (estimate.reports_loss !== true) reasons.push(ESTIMATE_DISQUALIFIERS.never_shows_loss);\n  if (typeof estimate.net_lower_bound !== \"number\" || !Number.isFinite(estimate.net_lower_bound)) {\n    reasons.push(ESTIMATE_DISQUALIFIERS.value_not_finite);\n  }\n  return { qualifies: reasons.length === 0, reasons };\n}\n\nexport const RENDER_ESTIMATE_REASONS = {\n  unknown_surface: \"unknown_surface\",\n  surface_never_shows_estimate: \"surface_never_shows_estimate\",\n  estimate_does_not_qualify: \"estimate_does_not_qualify\",\n} as const;\n\nexport interface RenderEstimateDecision {\n  render: boolean;\n  reasons: string[];\n}\n\n/**\n * Whether a rendering on `surface` may show the estimate. False on a PR\n * comment or any card regardless of the estimate; otherwise the registry's\n * rule decides. A missing estimate never renders.\n */\nexport function shouldRenderEstimate(estimate: unknown, surface: unknown): RenderEstimateDecision {\n  if (!(SURFACES as readonly unknown[]).includes(surface)) {\n    return { render: false, reasons: [RENDER_ESTIMATE_REASONS.unknown_surface] };\n  }\n  if (ESTIMATE_FORBIDDEN_SURFACES.includes(surface as Surface)) {\n    return { render: false, reasons: [RENDER_ESTIMATE_REASONS.surface_never_shows_estimate] };\n  }\n  const q = estimateQualifies(estimate);\n  if (!q.qualifies) {\n    return { render: false, reasons: [RENDER_ESTIMATE_REASONS.estimate_does_not_qualify, ...q.reasons] };\n  }\n  return { render: true, reasons: [] };\n}\n","/**\n * Canonical JSON, byte-identical to mnemom-api `src/attestation/crypto.ts`\n * (`canonicalJson`): object keys sorted recursively, no whitespace, arrays\n * kept in order, primitives through `JSON.stringify`.\n *\n * Every signed record statement commits to this serialisation of the\n * statement minus its `signature` field, exactly the way\n * `AAP-TransparencyRoot/v1` does (mnemom-api `src/transparency/root_publisher.ts`).\n */\n\nexport function canonicalJson(value: unknown): string {\n  if (value === null || typeof value !== \"object\") {\n    return JSON.stringify(value);\n  }\n  if (Array.isArray(value)) {\n    return `[${value.map(canonicalJson).join(\",\")}]`;\n  }\n  const record = value as Record<string, unknown>;\n  const entries = Object.keys(record)\n    .sort()\n    .map((k) => `${JSON.stringify(k)}:${canonicalJson(record[k])}`);\n  return `{${entries.join(\",\")}}`;\n}\n\n/** Decode base64url (padding optional) to bytes. Throws on malformed input. */\nexport function base64urlToUint8(input: string): Uint8Array {\n  if (typeof input !== \"string\" || !/^[A-Za-z0-9_-]*={0,2}$/.test(input)) {\n    throw new Error(\"not base64url\");\n  }\n  const b64 = input.replace(/-/g, \"+\").replace(/_/g, \"/\").replace(/=+$/, \"\");\n  const padded = b64 + \"===\".slice(0, (4 - (b64.length % 4)) % 4);\n  const binary = atob(padded);\n  const out = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n  return out;\n}\n","/**\n * Cryptographic helpers for AIP certificate verification.\n *\n * Uses @noble/ed25519 for signatures and @noble/hashes for SHA-256.\n * All operations are offline — no network calls.\n */\n\nimport { verifyAsync } from \"@noble/ed25519\";\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport {\n  bytesToHex,\n  hexToBytes,\n  utf8ToBytes,\n} from \"@noble/hashes/utils.js\";\n\nimport type { MerkleSibling } from \"./types.js\";\n\n// ---------------------------------------------------------------------------\n// Encoding helpers\n// ---------------------------------------------------------------------------\n\n/** Decode a standard base-64 string to Uint8Array. */\nexport function base64ToUint8(b64: string): Uint8Array {\n  const binary = atob(b64);\n  const bytes = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) {\n    bytes[i] = binary.charCodeAt(i);\n  }\n  return bytes;\n}\n\n/** Decode a hex string to Uint8Array. */\nexport function hexToUint8(hex: string): Uint8Array {\n  return hexToBytes(hex);\n}\n\n// ---------------------------------------------------------------------------\n// SHA-256\n// ---------------------------------------------------------------------------\n\n/** SHA-256 hash of a UTF-8 string, returned as lowercase hex. */\nexport function sha256Hex(input: string): string {\n  return bytesToHex(sha256(utf8ToBytes(input)));\n}\n\n// ---------------------------------------------------------------------------\n// Ed25519 signature verification\n// ---------------------------------------------------------------------------\n\n/**\n * Verify an Ed25519 signature.\n *\n * @param signature - Base-64 encoded signature.\n * @param payload   - The signed payload string (UTF-8).\n * @param publicKey - Ed25519 public key as Uint8Array.\n * @returns `true` if valid, `false` otherwise.\n */\nexport async function verifySignature(\n  signature: string,\n  payload: string,\n  publicKey: Uint8Array,\n): Promise<boolean> {\n  try {\n    const sigBytes = base64ToUint8(signature);\n    const msgBytes = utf8ToBytes(payload);\n    return await verifyAsync(sigBytes, msgBytes, publicKey);\n  } catch {\n    return false;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Merkle proof verification\n// ---------------------------------------------------------------------------\n\n/**\n * Verify a Merkle inclusion proof by walking from leaf to root.\n *\n * Each sibling specifies whether it sits on the `\"left\"` or `\"right\"` side.\n * The combined hash at each level is `SHA-256(left || right)` in hex.\n */\nexport function verifyMerkleProof(\n  leafHash: string,\n  siblings: MerkleSibling[],\n  expectedRoot: string,\n): boolean {\n  let current = leafHash;\n\n  for (const sibling of siblings) {\n    const pair =\n      sibling.position === \"left\"\n        ? sibling.hash + current\n        : current + sibling.hash;\n    current = sha256Hex(pair);\n  }\n\n  return current === expectedRoot;\n}\n\n// ---------------------------------------------------------------------------\n// Chain hash computation\n// ---------------------------------------------------------------------------\n\n/**\n * Recompute a chain hash from its constituent parts.\n *\n * Format: `SHA-256(prevChainHash|checkpointId|verdict|thinkingBlockHash|inputCommitment|timestamp)`\n *\n * When `prevChainHash` is `null` the literal string `\"genesis\"` is used.\n */\nexport function computeChainHash(\n  prevChainHash: string | null,\n  checkpointId: string,\n  verdict: string,\n  thinkingBlockHash: string,\n  inputCommitment: string,\n  timestamp: string,\n): string {\n  const prev = prevChainHash ?? \"genesis\";\n  const preimage = [\n    prev,\n    checkpointId,\n    verdict,\n    thinkingBlockHash,\n    inputCommitment,\n    timestamp,\n  ].join(\"|\");\n\n  return sha256Hex(preimage);\n}\n","/**\n * AAP-ShareCard/v1 — canonicalizer and offline verifier (MNE-9022).\n *\n * A share card is a signed set of numeric lines, each committing to the hash\n * of the signed statement it was derived from. Signing follows the\n * AAP-TransparencyRoot/v1 pattern (mnemom-api src/transparency/root_publisher.ts):\n * Ed25519 over canonical JSON (sorted keys, no whitespace) of the card MINUS\n * `signature`, with its own pinned `typ`. Renderers must display only the\n * `lines` returned by a successful verification.\n *\n * This module verifies only. It never handles private keys.\n */\n\nimport { verifyAsync } from \"@noble/ed25519\";\nimport { utf8ToBytes } from \"@noble/hashes/utils.js\";\n\nimport { canonicalJson } from \"./canonical.js\";\nimport { hexToUint8 } from \"./crypto.js\";\n\nexport const SHARE_CARD_TYP = \"AAP-ShareCard/v1\";\n\nexport type ShareCardLineKind = \"count\" | \"revert\";\n\nexport interface ShareCardLine {\n  id: string;\n  kind: ShareCardLineKind;\n  label: string;\n  value: number;\n  statement_hash: string;\n}\n\nexport interface ShareCardStatementRef {\n  typ: string;\n  hash: string;\n}\n\nexport interface ShareCard {\n  typ: string;\n  card_id: string;\n  period: { start: string; end: string };\n  issued_at: string;\n  signing_key_id: string;\n  statements: ShareCardStatementRef[];\n  lines: ShareCardLine[];\n  /** base64url Ed25519 signature over canonicalJson(card minus signature). */\n  signature: string;\n}\n\nexport interface ShareCardVerification {\n  valid: boolean;\n  /** Empty unless `valid`. Renderers must show only these. */\n  lines: ShareCardLine[];\n  errors: string[];\n}\n\n/** Keys that identify a repo, branch, PR or commit; never allowed anywhere. */\nconst IDENTIFYING_KEYS = new Set([\n  \"repo\", \"repository\", \"repo_name\", \"branch\", \"branch_name\", \"ref\",\n  \"pr\", \"pr_title\", \"pull_request\", \"title\", \"commit\", \"commit_message\",\n  \"commit_sha\", \"message\", \"author\", \"email\", \"url\", \"path\",\n]);\n\nconst CARD_KEYS = [\"typ\", \"card_id\", \"period\", \"issued_at\", \"signing_key_id\", \"statements\", \"lines\", \"signature\"];\nconst PERIOD_KEYS = [\"start\", \"end\"];\nconst STATEMENT_KEYS = [\"typ\", \"hash\"];\nconst LINE_KEYS = [\"id\", \"kind\", \"label\", \"value\", \"statement_hash\"];\nconst HEX64 = /^[0-9a-f]{64}$/;\nconst DATE = /^\\d{4}-\\d{2}-\\d{2}$/;\n/** Opaque identifiers: no \"/\", no free text. Mirrored in schemas/aap-sharecard.schema.json. */\nconst OPAQUE_ID = /^[a-z0-9_-]{1,64}$/;\n/**\n * TODO(MNE-9022): label -> fixed label ID enum pending format sign-off.\n * Until then labels are restricted to a short, plain-text charset so they\n * cannot carry repo paths, branches, PR refs or URLs.\n */\nconst LABEL = /^[A-Za-z0-9 .,()+-]{1,40}$/;\nconst LABEL_MAX = 40;\n/**\n * Statement types a v1 card may commit to: the three signed record statements\n * (C5-R3). The share card itself (\"AAP-ShareCard/v1\") and the bundle are not\n * valid sources. Mirrored in schemas/aap-sharecard.schema.json.\n */\nexport const SHARE_CARD_STATEMENT_TYPES: readonly string[] = [\n  \"AAP-ConductRecord/v1\",\n  \"AAP-PRRecord/v1\",\n  \"AAP-Outcome/v1\",\n];\nconst SIGNATURE_LEN = 86; // 64 bytes, unpadded base64url\nconst RFC3339 = /^(\\d{4})-(\\d{2})-(\\d{2})T(\\d{2}):(\\d{2}):(\\d{2})(?:\\.\\d+)?(?:Z|([+-])(\\d{2}):(\\d{2}))$/;\n\nfunction isCalendarDate(y: number, m: number, d: number): boolean {\n  if (m < 1 || m > 12 || d < 1) return false;\n  const dim = [31, y % 4 === 0 && (y % 100 !== 0 || y % 400 === 0) ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31][m - 1]!;\n  return d <= dim;\n}\n\nfunction isRfc3339(v: string): boolean {\n  const m = RFC3339.exec(v);\n  if (!m) return false;\n  const [y, mo, d, h, mi, se] = m.slice(1, 7).map(Number) as [number, number, number, number, number, number];\n  if (!isCalendarDate(y, mo, d) || h > 23 || mi > 59 || se > 59) return false;\n  if (m[7] !== undefined && (Number(m[8]) > 23 || Number(m[9]) > 59)) return false;\n  return true;\n}\n\n/** Sorted-key, whitespace-free JSON; identical to mnemom-api canonicalJson. One implementation for every signed statement (canonical.ts). */\nexport { canonicalJson };\n\n/** The exact string that is signed: canonical JSON of the card minus `signature`. */\nexport function shareCardSigningInput(card: Record<string, unknown>): string {\n  const { signature: _signature, ...rest } = card;\n  return canonicalJson(rest);\n}\n\nfunction bytesToBase64url(b: Uint8Array): string {\n  let bin = \"\";\n  for (const x of b) bin += String.fromCharCode(x);\n  return btoa(bin).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n/** Strict decode: exactly 86 chars that re-encode to the identical string (no malleable trailing bits). */\nfunction base64urlToBytes(s: string): Uint8Array {\n  if (s.length !== SIGNATURE_LEN || !/^[A-Za-z0-9_-]+$/.test(s)) throw new Error(\"bad base64url\");\n  const padded = s.replace(/-/g, \"+\").replace(/_/g, \"/\") + \"===\".slice(0, (4 - (s.length % 4)) % 4);\n  const bin = atob(padded);\n  const out = new Uint8Array(bin.length);\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n  if (out.length !== 64 || bytesToBase64url(out) !== s) throw new Error(\"non-canonical base64url\");\n  return out;\n}\n\nfunction isObj(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\nfunction exactKeys(obj: Record<string, unknown>, allowed: string[], where: string, errors: string[]): void {\n  for (const k of Object.keys(obj)) {\n    if (IDENTIFYING_KEYS.has(k.toLowerCase())) errors.push(`${where}: identifying field \"${k}\" is not allowed`);\n    else if (!allowed.includes(k)) errors.push(`${where}: unknown field \"${k}\"`);\n  }\n  for (const k of allowed) if (!(k in obj)) errors.push(`${where}: missing field \"${k}\"`);\n}\n\n/** Structural validation (no signature check). Returns error strings. */\nexport function validateShareCardShape(card: unknown): string[] {\n  const errors: string[] = [];\n  if (!isObj(card)) return [\"card: not an object\"];\n  exactKeys(card, CARD_KEYS, \"card\", errors);\n  if (card.typ !== SHARE_CARD_TYP) errors.push(`card: typ must be ${SHARE_CARD_TYP}`);\n  if (typeof card.card_id !== \"string\" || !OPAQUE_ID.test(card.card_id)) errors.push(\"card: card_id must be an opaque id matching ^[a-z0-9_-]{1,64}$\");\n  if (typeof card.issued_at !== \"string\" || !isRfc3339(card.issued_at)) errors.push(\"card: issued_at must be an RFC 3339 date-time\");\n  if (typeof card.signing_key_id !== \"string\" || !card.signing_key_id) errors.push(\"card: signing_key_id must be a non-empty string\");\n  if (typeof card.signature !== \"string\") errors.push(\"card: signature must be a string\");\n  else {\n    try {\n      base64urlToBytes(card.signature);\n    } catch {\n      errors.push(\"card: signature must be a canonical 86-char unpadded base64url Ed25519 signature\");\n    }\n  }\n\n  if (!isObj(card.period)) errors.push(\"period: not an object\");\n  else {\n    exactKeys(card.period, PERIOD_KEYS, \"period\", errors);\n    for (const k of PERIOD_KEYS) {\n      const v = card.period[k];\n      if (typeof v !== \"string\" || !DATE.test(v) || !isCalendarDate(Number(v.slice(0, 4)), Number(v.slice(5, 7)), Number(v.slice(8, 10)))) {\n        errors.push(`period.${k}: must be a real calendar date YYYY-MM-DD`);\n      }\n    }\n    const { start, end } = card.period;\n    if (typeof start === \"string\" && typeof end === \"string\" && DATE.test(start) && DATE.test(end) && start > end) {\n      errors.push(\"period: start must be <= end\");\n    }\n  }\n\n  const hashes = new Set<string>();\n  const referenced = new Set<string>();\n  const lineIds = new Set<string>();\n  if (!Array.isArray(card.statements) || card.statements.length === 0) errors.push(\"statements: must be a non-empty array\");\n  else\n    card.statements.forEach((s, i) => {\n      if (!isObj(s)) return void errors.push(`statements[${i}]: not an object`);\n      exactKeys(s, STATEMENT_KEYS, `statements[${i}]`, errors);\n      if (typeof s.typ !== \"string\" || !SHARE_CARD_STATEMENT_TYPES.includes(s.typ)) {\n        errors.push(`statements[${i}].typ: must be one of ${SHARE_CARD_STATEMENT_TYPES.join(\", \")}`);\n      }\n      if (typeof s.hash !== \"string\" || !HEX64.test(s.hash)) errors.push(`statements[${i}].hash: must be 64 lowercase hex`);\n      else hashes.add(s.hash);\n    });\n\n  if (!Array.isArray(card.lines) || card.lines.length === 0) errors.push(\"lines: must be a non-empty array\");\n  else\n    card.lines.forEach((l, i) => {\n      if (!isObj(l)) return void errors.push(`lines[${i}]: not an object`);\n      exactKeys(l, LINE_KEYS, `lines[${i}]`, errors);\n      if (typeof l.id !== \"string\" || !OPAQUE_ID.test(l.id)) errors.push(`lines[${i}].id: must be an opaque id matching ^[a-z0-9_-]{1,64}$`);\n      else if (lineIds.has(l.id)) errors.push(`lines[${i}].id: duplicate line id \"${l.id}\"`);\n      else lineIds.add(l.id);\n      if (l.kind !== \"count\" && l.kind !== \"revert\") errors.push(`lines[${i}].kind: must be \"count\" or \"revert\"`);\n      if (typeof l.label !== \"string\" || !l.label || l.label.length > LABEL_MAX || /[/#]|:\\/\\/|www\\./i.test(l.label) || !LABEL.test(l.label)) {\n        errors.push(`lines[${i}].label: must be short plain text (max ${LABEL_MAX}), no \"/\", \"#\" or URLs`);\n      }\n      if (typeof l.value !== \"number\" || !Number.isSafeInteger(l.value) || l.value < 0) errors.push(`lines[${i}].value: must be a non-negative integer`);\n      if (typeof l.statement_hash !== \"string\" || !HEX64.test(l.statement_hash)) errors.push(`lines[${i}].statement_hash: must be 64 lowercase hex`);\n      else if (!hashes.has(l.statement_hash)) errors.push(`lines[${i}].statement_hash: not committed in statements`);\n      else referenced.add(l.statement_hash);\n    });\n  for (const h of hashes) if (!referenced.has(h)) errors.push(`statements: ${h} is not referenced by any line`);\n  return errors;\n}\n\n/**\n * Verify a share card offline against a trusted Ed25519 public key.\n * Fails closed: on any error `lines` is empty so nothing can be rendered.\n */\nexport async function verifyShareCard(\n  card: unknown,\n  options: { publicKey: string | Uint8Array },\n): Promise<ShareCardVerification> {\n  const fail = (errors: string[]): ShareCardVerification => ({ valid: false, lines: [], errors });\n  const shapeErrors = validateShareCardShape(card);\n  if (shapeErrors.length > 0) return fail(shapeErrors);\n  const c = card as ShareCard;\n  let ok = false;\n  try {\n    const pk = typeof options.publicKey === \"string\" ? hexToUint8(options.publicKey) : options.publicKey;\n    ok = await verifyAsync(base64urlToBytes(c.signature), utf8ToBytes(shareCardSigningInput(c as unknown as Record<string, unknown>)), pk, { zip215: false });\n  } catch {\n    ok = false;\n  }\n  if (!ok) return fail([\"signature: verification failed\"]);\n  return { valid: true, lines: c.lines.map((l) => ({ ...l })), errors: [] };\n}\n","/**\n * Record statements: the four signed statement types the Mnemom record is\n * built from, their bundle, and the JWKS they verify against.\n *\n * Shape (design \"The record\", decisions T2, T3, T12):\n *\n * - Every statement carries `typ` (domain separation), `signing_key_id` (the\n *   `kid` of an Ed25519 key in the published JWKS) and a detached `signature`:\n *   base64url Ed25519 over `canonicalJson(statement minus signature)`.\n * - Statements link by digest. A statement's digest is the lowercase sha256\n *   hex of that same canonical commitment. `previous_digest` points at the\n *   previous build of the same record; a PR record lists the conduct records\n *   it rolls up; an outcome and a share card name the statement they derive\n *   from.\n * - A conduct record cites checkpoints by their signed `combined_commitment`\n *   (T12). A citation with no `card_hash` is flagged \"card hash not recorded\";\n *   one with no signed commitment is flagged \"card not bound\". Flags never\n *   make a statement invalid: they tell the reader how strong the binding is.\n * - A share card carries only measured lines, outcome lines, and verdict\n *   lines shown with their coverage. Any other class fails the card.\n */\n\n// ---------------------------------------------------------------------------\n// JWKS\n// ---------------------------------------------------------------------------\n\n/**\n * One key from the published JWKS. Only Ed25519 OKP keys with `alg: EdDSA`\n * are used: a key whose `alg` is absent or anything else is refused with\n * `key_not_ed25519`, so the field is required here as it is at runtime.\n */\nexport interface RecordJwk {\n  kty: string;\n  crv?: string;\n  x?: string;\n  kid?: string;\n  alg: string;\n  use?: string;\n  [k: string]: unknown;\n}\n\n/** The published key set, as served at `/v1/.well-known/jwks.json`. */\nexport interface RecordJwks {\n  keys: RecordJwk[];\n}\n\n// ---------------------------------------------------------------------------\n// Statements\n// ---------------------------------------------------------------------------\n\nexport const STATEMENT_TYPES = [\n  \"AAP-ConductRecord/v1\",\n  \"AAP-PRRecord/v1\",\n  \"AAP-Outcome/v1\",\n  \"AAP-ShareCard/v1\",\n] as const;\n\nexport type StatementTyp = (typeof STATEMENT_TYPES)[number];\n\nexport const BUNDLE_TYP = \"AAP-RecordBundle/v1\" as const;\n\n/** Fields every signed statement carries. */\nexport interface SignedStatementBase {\n  typ: StatementTyp;\n  /** `kid` of the signing key in the JWKS. */\n  signing_key_id: string;\n  /** base64url Ed25519 signature over `canonicalJson(statement minus signature)`. */\n  signature: string;\n  /** Optional, must equal `EdDSA` when present. */\n  alg?: string;\n  /** ISO 8601 time the statement was built. */\n  built_at?: string;\n  /** Digest of the previous build of this record, or null for the first build (T2). */\n  previous_digest?: string | null;\n  /** `kid` of the key that made `commitment_signature`, or null when the attestation failed open. */\n  commitment_key_id?: string | null;\n  /** Generic unit the statement is about, e.g. `pull_request`. */\n  unit_kind?: string;\n  [k: string]: unknown;\n}\n\n/** A checkpoint cited by a conduct record (T12). */\nexport interface CheckpointCitation {\n  checkpoint_id: string;\n  /** sha256 hex of the alignment card the checkpoint was judged against, or null when not recorded. */\n  card_hash?: string | null;\n  /** The checkpoint's signed `combined_commitment`, or null when none was signed. */\n  combined_commitment?: string | null;\n  /** The checkpoint certificate's signature over its own payload (own key, own payload per T3). */\n  commitment_signature?: string | null;\n  [k: string]: unknown;\n}\n\nexport interface ConductRecordStatement extends SignedStatementBase {\n  typ: \"AAP-ConductRecord/v1\";\n  /** Lineage the record is keyed on (T1), e.g. a conversation id. */\n  lineage_key?: string;\n  checkpoints?: CheckpointCitation[];\n}\n\nexport interface PRRecordStatement extends SignedStatementBase {\n  typ: \"AAP-PRRecord/v1\";\n  /** Digests of the conduct records this PR record rolls up. */\n  conduct_digests?: string[];\n  /** Head SHA from before the App's bundle commit. */\n  head_sha?: string;\n}\n\nexport interface OutcomeStatement extends SignedStatementBase {\n  typ: \"AAP-Outcome/v1\";\n  /** Digest of the PR record this outcome belongs to. */\n  pr_record_digest?: string;\n  merge_sha?: string;\n}\n\n/** Claim classes a share card may carry. */\nexport const CARD_LINE_CLASSES = [\"measured\", \"verdict\", \"outcome\"] as const;\nexport type CardLineClass = (typeof CARD_LINE_CLASSES)[number];\n\nexport interface ShareCardLine {\n  class: string;\n  text: string;\n  /** Required on a verdict line: \"N of M judged\". */\n  coverage?: { judged: number; total: number } | null;\n  [k: string]: unknown;\n}\n\nexport interface ShareCardStatement extends SignedStatementBase {\n  typ: \"AAP-ShareCard/v1\";\n  /** Digest of the statement the card's lines were taken from. */\n  source_digest?: string;\n  lines?: ShareCardLine[];\n}\n\nexport type SignedStatement =\n  | ConductRecordStatement\n  | PRRecordStatement\n  | OutcomeStatement\n  | ShareCardStatement;\n\n/** A customer-held bundle: statements in build order. */\nexport interface RecordBundle {\n  typ: typeof BUNDLE_TYP;\n  statements: SignedStatement[];\n  [k: string]: unknown;\n}\n\n// ---------------------------------------------------------------------------\n// Results\n// ---------------------------------------------------------------------------\n\n/**\n * Named reasons a statement fails. Stable strings: tampered fixtures assert\n * on them, and every renderer prints them as they are.\n */\nexport const REASONS = {\n  not_an_object: \"not_an_object\",\n  unknown_typ: \"unknown_typ\",\n  unsupported_alg: \"unsupported_alg\",\n  signing_key_id_missing: \"signing_key_id_missing\",\n  signature_missing: \"signature_missing\",\n  signature_malformed: \"signature_malformed\",\n  key_not_found: \"key_not_found\",\n  key_not_ed25519: \"key_not_ed25519\",\n  signature_invalid: \"signature_invalid\",\n  bundle_not_an_object: \"bundle_not_an_object\",\n  bundle_unknown_typ: \"bundle_unknown_typ\",\n  bundle_statements_missing: \"bundle_statements_missing\",\n  digest_malformed: \"digest_malformed\",\n  linked_statement_wrong_typ: \"linked_statement_wrong_typ\",\n  card_line_class_not_allowed: \"card_line_class_not_allowed\",\n  card_verdict_without_coverage: \"card_verdict_without_coverage\",\n} as const;\n\nexport type Reason = (typeof REASONS)[keyof typeof REASONS];\n\n/** Named flags. A flag weakens a binding but never invalidates a statement. */\nexport const FLAGS = {\n  card_hash_not_recorded: \"card hash not recorded\",\n  card_not_bound: \"card not bound\",\n  linked_statement_not_in_bundle: \"linked statement not in bundle\",\n} as const;\n\nexport type Flag = (typeof FLAGS)[keyof typeof FLAGS];\n\nexport interface StatementFlag {\n  flag: Flag;\n  /** `checkpoint_id` or the digest the flag is about. */\n  subject: string;\n}\n\nexport interface StatementVerificationResult {\n  valid: boolean;\n  typ: string | null;\n  /** sha256 hex of the canonical commitment, or null when the input is not an object. */\n  digest: string | null;\n  signing_key_id: string | null;\n  reasons: Reason[];\n  flags: StatementFlag[];\n}\n\nexport interface RecordVerificationResult {\n  valid: boolean;\n  /** Reasons at the bundle level, plus every statement reason prefixed by its index. */\n  reasons: string[];\n  flags: StatementFlag[];\n  statements: StatementVerificationResult[];\n  verified_at: string;\n}\n","/**\n * Offline verification of record statements and bundles.\n *\n * `verify(statement | bundle, jwks)` is the one entry point the CLI, CI,\n * the PR check and the web pages all call. It never touches the network:\n * the caller hands it the published JWKS.\n *\n * Order of checks for one statement, fail-closed, same as the SDK's\n * `JwksClient.verify` (mnemom-platform `shared/sdk/src/jwks.ts`):\n *\n * 1. shape and `typ` (domain separation, T3)\n * 2. `alg`, exact-match `EdDSA`, before any key material is touched\n * 3. `signing_key_id` and `signature` present and well formed\n * 4. key lookup by `kid`; the key must be an Ed25519 OKP key with `alg: EdDSA`\n * 5. Ed25519 over `canonicalJson(statement minus signature)`\n * 6. per-type rules (share card line classes, verdict coverage)\n * 7. flags on cited checkpoints (T12), which never change `valid`\n */\n\nimport { verifyAsync } from \"@noble/ed25519\";\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport { bytesToHex, utf8ToBytes } from \"@noble/hashes/utils.js\";\n\nimport { canonicalJson, base64urlToUint8 } from \"./canonical.js\";\nimport {\n  BUNDLE_TYP,\n  CARD_LINE_CLASSES,\n  FLAGS,\n  REASONS,\n  STATEMENT_TYPES,\n  type CheckpointCitation,\n  type Reason,\n  type RecordBundle,\n  type RecordJwk,\n  type RecordJwks,\n  type RecordVerificationResult,\n  type ShareCardLine,\n  type SignedStatement,\n  type StatementFlag,\n  type StatementTyp,\n  type StatementVerificationResult,\n} from \"./statements.js\";\n\nconst DIGEST_RE = /^[0-9a-f]{64}$/;\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\n/**\n * The bytes a statement's signature covers: canonical JSON of the statement\n * with `signature` removed. Exported so a signer in another language can be\n * checked against it byte for byte.\n */\nexport function statementCommitment(statement: Record<string, unknown>): string {\n  const { signature: _signature, ...rest } = statement;\n  return canonicalJson(rest);\n}\n\n/** Lowercase sha256 hex of a statement's commitment: how statements link (T2). */\nexport function statementDigest(statement: Record<string, unknown>): string {\n  return bytesToHex(sha256(utf8ToBytes(statementCommitment(statement))));\n}\n\n/** Pick the Ed25519 key for `kid`, or say why none can be used. */\nfunction selectKey(jwks: RecordJwks, kid: string): { key?: Uint8Array; reason?: Reason } {\n  const keys = isObject(jwks) && Array.isArray(jwks.keys) ? jwks.keys : [];\n  const jwk = keys.find((k: RecordJwk) => isObject(k) && k.kid === kid);\n  if (!jwk) return { reason: REASONS.key_not_found };\n  // Exact-match allowlist on the key as well as the statement: a key that\n  // is not declared `EdDSA` is never used, whatever its curve says.\n  if (jwk.alg !== \"EdDSA\" || jwk.kty !== \"OKP\" || jwk.crv !== \"Ed25519\" || typeof jwk.x !== \"string\") {\n    return { reason: REASONS.key_not_ed25519 };\n  }\n  let key: Uint8Array;\n  try {\n    key = base64urlToUint8(jwk.x);\n  } catch {\n    return { reason: REASONS.key_not_ed25519 };\n  }\n  if (key.length !== 32) return { reason: REASONS.key_not_ed25519 };\n  return { key };\n}\n\nfunction checkpointFlags(checkpoints: unknown): StatementFlag[] {\n  if (!Array.isArray(checkpoints)) return [];\n  const flags: StatementFlag[] = [];\n  for (const c of checkpoints as CheckpointCitation[]) {\n    if (!isObject(c)) continue;\n    const subject = typeof c.checkpoint_id === \"string\" ? c.checkpoint_id : \"<no checkpoint_id>\";\n    if (typeof c.card_hash !== \"string\" || c.card_hash.length === 0) {\n      flags.push({ flag: FLAGS.card_hash_not_recorded, subject });\n    }\n    const bound =\n      typeof c.combined_commitment === \"string\" &&\n      c.combined_commitment.length > 0 &&\n      typeof c.commitment_signature === \"string\" &&\n      c.commitment_signature.length > 0;\n    if (!bound) flags.push({ flag: FLAGS.card_not_bound, subject });\n  }\n  return flags;\n}\n\nfunction shareCardReasons(lines: unknown): Reason[] {\n  if (!Array.isArray(lines)) return [];\n  const reasons: Reason[] = [];\n  for (const line of lines as ShareCardLine[]) {\n    if (!isObject(line) || !(CARD_LINE_CLASSES as readonly string[]).includes(line.class as string)) {\n      reasons.push(REASONS.card_line_class_not_allowed);\n      continue;\n    }\n    if (line.class === \"verdict\") {\n      const cov = line.coverage;\n      const ok =\n        isObject(cov) &&\n        Number.isInteger(cov.judged) &&\n        Number.isInteger(cov.total) &&\n        (cov.judged as number) >= 0 &&\n        (cov.total as number) >= (cov.judged as number);\n      if (!ok) reasons.push(REASONS.card_verdict_without_coverage);\n    }\n  }\n  return [...new Set(reasons)];\n}\n\n/**\n * Every digest reference a statement carries, as written. An absent field\n * is skipped, and `previous_digest: null` is the first build (T2); anything\n * else that is not a 64-hex string is reported as `digest_malformed` rather\n * than dropped, so a non-string entry in `conduct_digests` cannot pass\n * unnoticed.\n */\nfunction digestFieldsOf(statement: Record<string, unknown>): unknown[] {\n  const out: unknown[] = [];\n  if (statement.previous_digest !== undefined && statement.previous_digest !== null) {\n    out.push(statement.previous_digest);\n  }\n  if (statement.pr_record_digest !== undefined) out.push(statement.pr_record_digest);\n  if (statement.source_digest !== undefined) out.push(statement.source_digest);\n  if (statement.conduct_digests !== undefined) {\n    // `conduct_digests` is a list; anything else is malformed even when it\n    // happens to look like one digest.\n    if (Array.isArray(statement.conduct_digests)) out.push(...statement.conduct_digests);\n    else out.push(null);\n  }\n  return out;\n}\n\n/**\n * Verify one signed statement against the published JWKS.\n * Never throws and never calls the network.\n */\nexport async function verifyStatement(\n  statement: unknown,\n  jwks: RecordJwks,\n): Promise<StatementVerificationResult> {\n  const fail = (\n    reasons: Reason[],\n    partial: Partial<StatementVerificationResult> = {},\n  ): StatementVerificationResult => ({\n    valid: false,\n    typ: null,\n    digest: null,\n    signing_key_id: null,\n    flags: [],\n    ...partial,\n    reasons,\n  });\n\n  if (!isObject(statement)) return fail([REASONS.not_an_object]);\n  const typ = typeof statement.typ === \"string\" ? statement.typ : null;\n  const digest = statementDigest(statement);\n  const kid = typeof statement.signing_key_id === \"string\" ? statement.signing_key_id : null;\n  const base = { typ, digest, signing_key_id: kid };\n\n  if (!typ || !(STATEMENT_TYPES as readonly string[]).includes(typ)) {\n    return fail([REASONS.unknown_typ], base);\n  }\n  // Algorithm-confusion guard: before any key lookup.\n  if (statement.alg !== undefined && statement.alg !== \"EdDSA\") {\n    return fail([REASONS.unsupported_alg], base);\n  }\n  if (!kid) return fail([REASONS.signing_key_id_missing], base);\n  if (typeof statement.signature !== \"string\" || statement.signature.length === 0) {\n    return fail([REASONS.signature_missing], base);\n  }\n  let sig: Uint8Array;\n  try {\n    sig = base64urlToUint8(statement.signature);\n  } catch {\n    return fail([REASONS.signature_malformed], base);\n  }\n  if (sig.length !== 64) return fail([REASONS.signature_malformed], base);\n\n  const selected = selectKey(jwks, kid);\n  if (!selected.key) return fail([selected.reason as Reason], base);\n\n  let sigOk = false;\n  try {\n    sigOk = await verifyAsync(sig, utf8ToBytes(statementCommitment(statement)), selected.key);\n  } catch {\n    sigOk = false;\n  }\n  if (!sigOk) return fail([REASONS.signature_invalid], base);\n\n  const reasons: Reason[] = [];\n  for (const d of digestFieldsOf(statement)) {\n    if (typeof d !== \"string\" || !DIGEST_RE.test(d)) {\n      reasons.push(REASONS.digest_malformed);\n      break;\n    }\n  }\n  if (typ === \"AAP-ShareCard/v1\") reasons.push(...shareCardReasons(statement.lines));\n\n  const flags = typ === \"AAP-ConductRecord/v1\" ? checkpointFlags(statement.checkpoints) : [];\n\n  return {\n    valid: reasons.length === 0,\n    typ,\n    digest,\n    signing_key_id: kid,\n    reasons,\n    flags,\n  };\n}\n\n/** Which statement types a link field may point at. */\nconst LINK_TARGETS: Record<string, readonly StatementTyp[] | \"same\"> = {\n  previous_digest: \"same\",\n  conduct_digests: [\"AAP-ConductRecord/v1\"],\n  pr_record_digest: [\"AAP-PRRecord/v1\"],\n  source_digest: [\"AAP-ConductRecord/v1\", \"AAP-PRRecord/v1\", \"AAP-Outcome/v1\"],\n};\n\n/**\n * Verify a statement or a whole bundle against the published JWKS.\n *\n * For a bundle every statement is verified on its own, then the links\n * between them are checked: a digest that names a statement in the bundle\n * must name one of the right type. A digest that names nothing in the\n * bundle is flagged, not failed, because a long session's earlier\n * statements may live outside the bundle (design, open questions).\n */\nexport async function verify(\n  input: SignedStatement | RecordBundle | unknown,\n  jwks: RecordJwks,\n): Promise<RecordVerificationResult> {\n  const verified_at = new Date().toISOString();\n  const result = (\n    valid: boolean,\n    reasons: string[],\n    flags: StatementFlag[],\n    statements: StatementVerificationResult[],\n  ): RecordVerificationResult => ({ valid, reasons, flags, statements, verified_at });\n\n  if (!isObject(input)) return result(false, [REASONS.bundle_not_an_object], [], []);\n\n  // Something shaped like a bundle (it carries `statements`) under a typ\n  // that is neither the bundle typ nor a statement typ: say so, instead of\n  // reporting it as one unknown statement.\n  if (\n    input.typ !== BUNDLE_TYP &&\n    Array.isArray(input.statements) &&\n    !(STATEMENT_TYPES as readonly string[]).includes(input.typ as string)\n  ) {\n    return result(false, [REASONS.bundle_unknown_typ], [], []);\n  }\n\n  // A bare statement.\n  if (input.typ !== BUNDLE_TYP) {\n    const one = await verifyStatement(input, jwks);\n    return result(one.valid, one.reasons.map((r) => `0:${r}`), one.flags, [one]);\n  }\n\n  const rawStatements: unknown[] | null = Array.isArray(input.statements) ? input.statements : null;\n  if (!rawStatements) {\n    return result(false, [REASONS.bundle_statements_missing], [], []);\n  }\n\n  const statements: StatementVerificationResult[] = [];\n  for (const s of rawStatements) statements.push(await verifyStatement(s, jwks));\n\n  const byDigest = new Map<string, StatementVerificationResult>();\n  statements.forEach((s) => {\n    if (s.digest) byDigest.set(s.digest, s);\n  });\n\n  const reasons: string[] = [];\n  const flags: StatementFlag[] = [];\n  statements.forEach((s, i) => {\n    s.reasons.forEach((r) => reasons.push(`${i}:${r}`));\n    flags.push(...s.flags);\n    const raw = rawStatements[i];\n    if (!s.valid || !isObject(raw)) return;\n    for (const [field, targets] of Object.entries(LINK_TARGETS)) {\n      const value = raw[field];\n      const digests = Array.isArray(value) ? value : [value];\n      for (const d of digests) {\n        if (typeof d !== \"string\") continue;\n        const linked = byDigest.get(d);\n        if (!linked) {\n          flags.push({ flag: FLAGS.linked_statement_not_in_bundle, subject: d });\n          continue;\n        }\n        const allowed = targets === \"same\" ? [s.typ as StatementTyp] : targets;\n        if (!linked.typ || !allowed.includes(linked.typ as StatementTyp)) {\n          reasons.push(`${i}:${REASONS.linked_statement_wrong_typ}`);\n        }\n      }\n    }\n  });\n\n  return result(reasons.length === 0, reasons, flags, statements);\n}\n","/**\n * Card line renderer (MNE-9026, criterion K4.3/K4.4, design C5-R6).\n *\n * `renderLines` turns signed input into the lines a share card or period card\n * may show, and nothing else. Every line is derived from a statement that\n * verified against the published key: there is no parameter that accepts a\n * typed number, a string or an estimate. Only measured, outcome and\n * verdict-with-coverage lines come out. Fail closed: on any problem `lines` is\n * empty, so a renderer that prints `result.lines` prints nothing.\n *\n * FLAG-GATED. This module is NOT re-exported from the package index. It is\n * reachable only via the `@mnemom/aip-verifier/render-lines` subpath, and even\n * there it returns `render_lines_disabled` (no lines) unless the caller passes\n * `opts.enabled: true` or the environment sets `AIP_RENDER_LINES=1`. Default\n * behavior and the existing published API are unchanged.\n *\n * Accepted inputs (`opts` says which key verifies them):\n *   1. A record bundle or a single `AAP-ShareCard/v1` record statement\n *      (`{class, text, coverage}` lines), verified with `opts.jwks` through the\n *      existing `verify`. A period card additionally needs signed\n *      `AAP-Outcome/v1` statements in the bundle: its revert line is derived\n *      from them, never typed.\n *   2. The MNE-9022 numeric card (`card_id`, `{id, kind, label, value}` lines),\n *      verified with `opts.publicKey` through the existing `verifyShareCard`.\n *\n * Every rendered line is re-checked with `lintRendering` on the chosen\n * surface; any violation makes the whole render fail.\n */\n\nimport { lintRendering } from \"./claim-lint.js\";\nimport type { LintViolation } from \"./claim-lint.js\";\nimport { shouldRenderEstimate } from \"./render-estimate.js\";\nimport { validateShareCardShape, verifyShareCard } from \"./sharecard.js\";\nimport { verify } from \"./verify-record.js\";\nimport type { RecordJwks } from \"./statements.js\";\n\n/**\n * One line the CLI (or any consumer) may print, verbatim. Contract:\n * - `class` is exactly one of `measured`, `outcome`, `verdict`. No estimate,\n *   benchmark or savings class can be produced.\n * - `text` is display text, already claim-lint clean. Print it as is; never\n *   append a figure, tool name, repo, org or person.\n * - `coverage` is present on every `verdict` line (\"judged of total\") and\n *   absent on the other classes.\n * - `revert` is true on the line that reports reverts. A period card always\n *   contains at least one such line.\n * Structurally assignable to claim-lint's `RenderedLine`.\n */\nexport interface RenderedLine {\n  class: \"measured\" | \"outcome\" | \"verdict\";\n  text: string;\n  coverage?: { judged: number; total: number };\n  revert?: true;\n}\n\nexport type RenderSurface = \"share_card\" | \"period_card\";\n\nexport interface RenderLinesOptions {\n  /** Which card is being drawn. Default `share_card`. */\n  surface?: RenderSurface;\n  /** Explicit flag. Also on when `AIP_RENDER_LINES=1`. */\n  enabled?: boolean;\n  /** Published JWKS, to verify record statements. */\n  jwks?: RecordJwks;\n  /** Trusted Ed25519 public key (hex or bytes), to verify a numeric card. */\n  publicKey?: string | Uint8Array;\n}\n\nexport const RENDER_LINES_REASONS = {\n  render_lines_disabled: \"render_lines_disabled\",\n  unknown_surface: \"unknown_surface\",\n  not_verifiable: \"not_verifiable\",\n  missing_key: \"missing_key\",\n  no_share_card_statement: \"no_share_card_statement\",\n  identifying_field: \"identifying_field\",\n  line_class_not_allowed: \"line_class_not_allowed\",\n  line_malformed: \"line_malformed\",\n  no_lines: \"no_lines\",\n  period_card_without_outcomes: \"period_card_without_outcomes\",\n  period_card_without_revert_line: \"period_card_without_revert_line\",\n  estimate_not_renderable: \"estimate_not_renderable\",\n  lint_failed: \"lint_failed\",\n} as const;\n\nexport interface RenderLinesResult {\n  ok: boolean;\n  /** Empty unless `ok`. */\n  lines: RenderedLine[];\n  /** Stable reason strings; prefixed detail follows a colon. */\n  reasons: string[];\n  /** claim-lint violations when `lint_failed`. */\n  violations?: LintViolation[];\n}\n\nconst R = RENDER_LINES_REASONS;\n\n/** Flag read; safe where `process` does not exist (Workers, browsers). */\nexport function renderLinesEnabled(opts?: RenderLinesOptions): boolean {\n  if (opts?.enabled === true) return true;\n  const env = (globalThis as { process?: { env?: Record<string, string | undefined> } }).process?.env;\n  return env?.AIP_RENDER_LINES === \"1\";\n}\n\nconst fail = (reasons: string[], violations?: LintViolation[]): RenderLinesResult => ({\n  ok: false,\n  lines: [],\n  reasons,\n  ...(violations ? { violations } : {}),\n});\n\nfunction isObj(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\n/**\n * Keys a record share card statement may carry. Anything else (repo, org,\n * person, goal text, tool name, estimate, ...) fails the render, even though\n * the statement is signed: a signature proves origin, not that a field is safe\n * to show.\n */\nconst STATEMENT_KEYS = new Set([\n  \"typ\", \"signing_key_id\", \"signature\", \"alg\", \"built_at\", \"previous_digest\",\n  \"commitment_key_id\", \"unit_kind\", \"source_digest\", \"lines\",\n]);\nconst STATEMENT_LINE_KEYS = new Set([\"class\", \"text\", \"coverage\"]);\nconst COVERAGE_KEYS = new Set([\"judged\", \"total\"]);\n\nfunction unknownKeys(o: Record<string, unknown>, allowed: Set<string>, where: string): string[] {\n  return Object.keys(o).filter((k) => !allowed.has(k)).map((k) => `${R.identifying_field}:${where}.${k}`);\n}\n\n/** Fixed, signed-outcome vocabulary: the outcome statement's `outcome` field never prints raw. */\nfunction outcomeKind(s: Record<string, unknown>): \"reverted\" | \"accepted\" | null {\n  if (typeof s.outcome !== \"string\") return null;\n  if (s.outcome === \"accepted_no_revert\") return \"accepted\";\n  if (s.outcome === \"reverted\") return \"reverted\";\n  return null;\n}\n\nfunction finish(surface: RenderSurface, lines: RenderedLine[]): RenderLinesResult {\n  if (lines.length === 0) return fail([R.no_lines]);\n  if (surface === \"period_card\" && !lines.some((l) => l.revert === true)) {\n    return fail([R.period_card_without_revert_line]);\n  }\n  // Lint the exact text a consumer will print; the `revert` marker is ours, not a lint field.\n  const lintLines = lines.map(({ revert: _revert, ...l }) => l);\n  const lint = lintRendering({ surface, lines: lintLines });\n  if (!lint.ok) return fail([R.lint_failed], lint.violations);\n  return { ok: true, lines, reasons: [] };\n}\n\nasync function renderFromStatements(input: Record<string, unknown>, surface: RenderSurface, jwks: RecordJwks): Promise<RenderLinesResult> {\n  const v = await verify(input, jwks);\n  if (!v.valid) return fail([R.not_verifiable, ...v.reasons]);\n\n  const statements = (Array.isArray(input.statements) ? input.statements : [input]) as Record<string, unknown>[];\n  const cards = statements.filter((s) => isObj(s) && s.typ === \"AAP-ShareCard/v1\");\n  if (cards.length === 0) return fail([R.no_share_card_statement]);\n\n  const errors: string[] = [];\n  const lines: RenderedLine[] = [];\n  cards.forEach((card, ci) => {\n    errors.push(...unknownKeys(card, STATEMENT_KEYS, `card${ci}`));\n    const raw = Array.isArray(card.lines) ? (card.lines as unknown[]) : [];\n    raw.forEach((l, i) => {\n      const where = `card${ci}.lines[${i}]`;\n      if (!isObj(l)) return void errors.push(`${R.line_malformed}:${where}`);\n      errors.push(...unknownKeys(l, STATEMENT_LINE_KEYS, where));\n      if (l.class !== \"measured\" && l.class !== \"outcome\" && l.class !== \"verdict\") {\n        return void errors.push(`${R.line_class_not_allowed}:${where}`);\n      }\n      if (typeof l.text !== \"string\" || l.text.length === 0) return void errors.push(`${R.line_malformed}:${where}`);\n      const out: RenderedLine = { class: l.class, text: l.text };\n      if (l.class === \"verdict\") {\n        const c = l.coverage;\n        if (!isObj(c)) return void errors.push(`${R.line_malformed}:${where}.coverage`);\n        errors.push(...unknownKeys(c, COVERAGE_KEYS, `${where}.coverage`));\n        out.coverage = { judged: c.judged as number, total: c.total as number };\n      } else if (l.coverage !== undefined && l.coverage !== null) {\n        errors.push(`${R.identifying_field}:${where}.coverage`);\n      }\n      // `revert` is never inferred from display text (\"Accepted, no revert in 7 days\" is a clean outcome);\n      // it is set only on the line derived from signed AAP-Outcome/v1 values below, or a numeric `revert` kind.\n      lines.push(out);\n    });\n  });\n\n  if (surface === \"period_card\") {\n    const outcomes = statements.filter((s) => isObj(s) && s.typ === \"AAP-Outcome/v1\");\n    if (outcomes.length === 0) errors.push(R.period_card_without_outcomes);\n    else {\n      const kinds = outcomes.map(outcomeKind);\n      if (kinds.includes(null)) errors.push(`${R.line_malformed}:outcome`);\n      else {\n        const reverted = kinds.filter((k) => k === \"reverted\").length;\n        // Always present on a period card, including \"0 of N\": silence about reverts is not allowed.\n        lines.push({ class: \"outcome\", text: `${reverted} of ${kinds.length} changes reverted`, revert: true });\n      }\n    }\n  }\n  if (errors.length > 0) return fail(errors);\n  return finish(surface, lines);\n}\n\nasync function renderFromNumericCard(card: unknown, surface: RenderSurface, publicKey: string | Uint8Array): Promise<RenderLinesResult> {\n  // Shape first: identifying fields get their own named reason.\n  const shape = validateShareCardShape(card);\n  if (shape.length > 0) {\n    const ident = shape.some((e) => /identifying field/.test(e));\n    return fail([ident ? R.identifying_field : R.not_verifiable, ...shape]);\n  }\n  const v = await verifyShareCard(card, { publicKey });\n  if (!v.valid) return fail([R.not_verifiable, ...v.errors]);\n  const lines: RenderedLine[] = v.lines.map((l) =>\n    l.kind === \"revert\"\n      ? { class: \"outcome\", text: `${l.label}: ${l.value}`, revert: true }\n      : { class: \"measured\", text: `${l.label}: ${l.value}` },\n  );\n  return finish(surface, lines);\n}\n\n/**\n * Derive the lines to show for a card from signed input. See the module doc\n * for accepted inputs and the flag. Never throws.\n */\nexport async function renderLines(input: unknown, opts: RenderLinesOptions = {}): Promise<RenderLinesResult> {\n  try {\n    if (!renderLinesEnabled(opts)) return fail([R.render_lines_disabled]);\n    const surface = opts.surface ?? \"share_card\";\n    if (surface !== \"share_card\" && surface !== \"period_card\") return fail([R.unknown_surface]);\n    if (!isObj(input)) return fail([R.not_verifiable]);\n    // An estimate has no input path: reject one handed in alongside, then render nothing from it.\n    if (\"estimate\" in input || \"savings\" in input) {\n      const d = shouldRenderEstimate(input.estimate ?? input.savings, surface);\n      return fail([R.estimate_not_renderable, ...d.reasons]);\n    }\n    if (\"card_id\" in input) {\n      if (opts.publicKey === undefined) return fail([R.missing_key]);\n      return await renderFromNumericCard(input, surface, opts.publicKey);\n    }\n    if (!opts.jwks) return fail([R.missing_key]);\n    return await renderFromStatements(input, surface, opts.jwks);\n  } catch {\n    return fail([R.not_verifiable]);\n  }\n}\n"]}

package/node_modules/@mnemom/aip-verifier/dist/render-lines.d.cts

@@ -1,96 +0,0 @@
-import { a as RecordJwks, r as LintViolation } from './claim-lint-CVITIRcU.cjs';
-
-/**
- * Card line renderer (MNE-9026, criterion K4.3/K4.4, design C5-R6).
- *
- * `renderLines` turns signed input into the lines a share card or period card
- * may show, and nothing else. Every line is derived from a statement that
- * verified against the published key: there is no parameter that accepts a
- * typed number, a string or an estimate. Only measured, outcome and
- * verdict-with-coverage lines come out. Fail closed: on any problem `lines` is
- * empty, so a renderer that prints `result.lines` prints nothing.
- *
- * FLAG-GATED. This module is NOT re-exported from the package index. It is
- * reachable only via the `@mnemom/aip-verifier/render-lines` subpath, and even
- * there it returns `render_lines_disabled` (no lines) unless the caller passes
- * `opts.enabled: true` or the environment sets `AIP_RENDER_LINES=1`. Default
- * behavior and the existing published API are unchanged.
- *
- * Accepted inputs (`opts` says which key verifies them):
- *   1. A record bundle or a single `AAP-ShareCard/v1` record statement
- *      (`{class, text, coverage}` lines), verified with `opts.jwks` through the
- *      existing `verify`. A period card additionally needs signed
- *      `AAP-Outcome/v1` statements in the bundle: its revert line is derived
- *      from them, never typed.
- *   2. The MNE-9022 numeric card (`card_id`, `{id, kind, label, value}` lines),
- *      verified with `opts.publicKey` through the existing `verifyShareCard`.
- *
- * Every rendered line is re-checked with `lintRendering` on the chosen
- * surface; any violation makes the whole render fail.
- */
-
-/**
- * One line the CLI (or any consumer) may print, verbatim. Contract:
- * - `class` is exactly one of `measured`, `outcome`, `verdict`. No estimate,
- *   benchmark or savings class can be produced.
- * - `text` is display text, already claim-lint clean. Print it as is; never
- *   append a figure, tool name, repo, org or person.
- * - `coverage` is present on every `verdict` line ("judged of total") and
- *   absent on the other classes.
- * - `revert` is true on the line that reports reverts. A period card always
- *   contains at least one such line.
- * Structurally assignable to claim-lint's `RenderedLine`.
- */
-interface RenderedLine {
-    class: "measured" | "outcome" | "verdict";
-    text: string;
-    coverage?: {
-        judged: number;
-        total: number;
-    };
-    revert?: true;
-}
-type RenderSurface = "share_card" | "period_card";
-interface RenderLinesOptions {
-    /** Which card is being drawn. Default `share_card`. */
-    surface?: RenderSurface;
-    /** Explicit flag. Also on when `AIP_RENDER_LINES=1`. */
-    enabled?: boolean;
-    /** Published JWKS, to verify record statements. */
-    jwks?: RecordJwks;
-    /** Trusted Ed25519 public key (hex or bytes), to verify a numeric card. */
-    publicKey?: string | Uint8Array;
-}
-declare const RENDER_LINES_REASONS: {
-    readonly render_lines_disabled: "render_lines_disabled";
-    readonly unknown_surface: "unknown_surface";
-    readonly not_verifiable: "not_verifiable";
-    readonly missing_key: "missing_key";
-    readonly no_share_card_statement: "no_share_card_statement";
-    readonly identifying_field: "identifying_field";
-    readonly line_class_not_allowed: "line_class_not_allowed";
-    readonly line_malformed: "line_malformed";
-    readonly no_lines: "no_lines";
-    readonly period_card_without_outcomes: "period_card_without_outcomes";
-    readonly period_card_without_revert_line: "period_card_without_revert_line";
-    readonly estimate_not_renderable: "estimate_not_renderable";
-    readonly lint_failed: "lint_failed";
-};
-interface RenderLinesResult {
-    ok: boolean;
-    /** Empty unless `ok`. */
-    lines: RenderedLine[];
-    /** Stable reason strings; prefixed detail follows a colon. */
-    reasons: string[];
-    /** claim-lint violations when `lint_failed`. */
-    violations?: LintViolation[];
-}
-/** Flag read; safe where `process` does not exist (Workers, browsers). */
-declare function renderLinesEnabled(opts?: RenderLinesOptions): boolean;
-/**
- * Derive the lines to show for a card from signed input. See the module doc
- * for accepted inputs and the flag. Never throws.
- */
-declare function renderLines(input: unknown, opts?: RenderLinesOptions): Promise<RenderLinesResult>;
-
-export { RENDER_LINES_REASONS, type RenderLinesOptions, type RenderLinesResult, type RenderSurface, type RenderedLine, renderLines, renderLinesEnabled };

package/node_modules/@mnemom/aip-verifier/dist/render-lines.d.ts

@@ -1,96 +0,0 @@
-import { a as RecordJwks, r as LintViolation } from './claim-lint-CVITIRcU.js';
-
-/**
- * Card line renderer (MNE-9026, criterion K4.3/K4.4, design C5-R6).
- *
- * `renderLines` turns signed input into the lines a share card or period card
- * may show, and nothing else. Every line is derived from a statement that
- * verified against the published key: there is no parameter that accepts a
- * typed number, a string or an estimate. Only measured, outcome and
- * verdict-with-coverage lines come out. Fail closed: on any problem `lines` is
- * empty, so a renderer that prints `result.lines` prints nothing.
- *
- * FLAG-GATED. This module is NOT re-exported from the package index. It is
- * reachable only via the `@mnemom/aip-verifier/render-lines` subpath, and even
- * there it returns `render_lines_disabled` (no lines) unless the caller passes
- * `opts.enabled: true` or the environment sets `AIP_RENDER_LINES=1`. Default
- * behavior and the existing published API are unchanged.
- *
- * Accepted inputs (`opts` says which key verifies them):
- *   1. A record bundle or a single `AAP-ShareCard/v1` record statement
- *      (`{class, text, coverage}` lines), verified with `opts.jwks` through the
- *      existing `verify`. A period card additionally needs signed
- *      `AAP-Outcome/v1` statements in the bundle: its revert line is derived
- *      from them, never typed.
- *   2. The MNE-9022 numeric card (`card_id`, `{id, kind, label, value}` lines),
- *      verified with `opts.publicKey` through the existing `verifyShareCard`.
- *
- * Every rendered line is re-checked with `lintRendering` on the chosen
- * surface; any violation makes the whole render fail.
- */
-
-/**
- * One line the CLI (or any consumer) may print, verbatim. Contract:
- * - `class` is exactly one of `measured`, `outcome`, `verdict`. No estimate,
- *   benchmark or savings class can be produced.
- * - `text` is display text, already claim-lint clean. Print it as is; never
- *   append a figure, tool name, repo, org or person.
- * - `coverage` is present on every `verdict` line ("judged of total") and
- *   absent on the other classes.
- * - `revert` is true on the line that reports reverts. A period card always
- *   contains at least one such line.
- * Structurally assignable to claim-lint's `RenderedLine`.
- */
-interface RenderedLine {
-    class: "measured" | "outcome" | "verdict";
-    text: string;
-    coverage?: {
-        judged: number;
-        total: number;
-    };
-    revert?: true;
-}
-type RenderSurface = "share_card" | "period_card";
-interface RenderLinesOptions {
-    /** Which card is being drawn. Default `share_card`. */
-    surface?: RenderSurface;
-    /** Explicit flag. Also on when `AIP_RENDER_LINES=1`. */
-    enabled?: boolean;
-    /** Published JWKS, to verify record statements. */
-    jwks?: RecordJwks;
-    /** Trusted Ed25519 public key (hex or bytes), to verify a numeric card. */
-    publicKey?: string | Uint8Array;
-}
-declare const RENDER_LINES_REASONS: {
-    readonly render_lines_disabled: "render_lines_disabled";
-    readonly unknown_surface: "unknown_surface";
-    readonly not_verifiable: "not_verifiable";
-    readonly missing_key: "missing_key";
-    readonly no_share_card_statement: "no_share_card_statement";
-    readonly identifying_field: "identifying_field";
-    readonly line_class_not_allowed: "line_class_not_allowed";
-    readonly line_malformed: "line_malformed";
-    readonly no_lines: "no_lines";
-    readonly period_card_without_outcomes: "period_card_without_outcomes";
-    readonly period_card_without_revert_line: "period_card_without_revert_line";
-    readonly estimate_not_renderable: "estimate_not_renderable";
-    readonly lint_failed: "lint_failed";
-};
-interface RenderLinesResult {
-    ok: boolean;
-    /** Empty unless `ok`. */
-    lines: RenderedLine[];
-    /** Stable reason strings; prefixed detail follows a colon. */
-    reasons: string[];
-    /** claim-lint violations when `lint_failed`. */
-    violations?: LintViolation[];
-}
-/** Flag read; safe where `process` does not exist (Workers, browsers). */
-declare function renderLinesEnabled(opts?: RenderLinesOptions): boolean;
-/**
- * Derive the lines to show for a card from signed input. See the module doc
- * for accepted inputs and the flag. Never throws.
- */
-declare function renderLines(input: unknown, opts?: RenderLinesOptions): Promise<RenderLinesResult>;
-
-export { RENDER_LINES_REASONS, type RenderLinesOptions, type RenderLinesResult, type RenderSurface, type RenderedLine, renderLines, renderLinesEnabled };