@onchaindiligence/agent-evidence 0.1.0

package/dist/verifier.js

@@ -0,0 +1,489 @@
+import { verify as ed25519Verify } from 'node:crypto';
+import { ATTESTATION_ISSUER, ATTESTATION_PURPOSE, ATTESTATION_V2, BUNDLE_PAYLOAD_TYPE, BUNDLE_VERSION, MEDIA_TYPE, } from './constants.js';
+import { canonicalize, enforceLimits, parseJson, parseTimestamp } from './canonical.js';
+import { dssePae } from './dsse.js';
+import { CanonicalizationError, EvidenceValidationError, ParseError, SchemaValidationError, } from './errors.js';
+import { validateBundlePayload } from './graph.js';
+import { validateDocument } from './schema.js';
+import { evaluateKeyLifecycle, TrustPolicy } from './trust.js';
+const BASE64 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
+const BASE64URL_SIGNATURE = /^[A-Za-z0-9_-]{86}$/;
+function result(component, state, code, message, options = {}) {
+    const item = {
+        component,
+        state,
+        code,
+        message,
+        required: options.required ?? true,
+    };
+    if (options.keyId !== undefined)
+        item.key_id = options.keyId;
+    if (options.recordId !== undefined)
+        item.record_id = options.recordId;
+    return item;
+}
+export function overallState(components) {
+    const required = components.filter((item) => item.required);
+    if (required.some((item) => item.state === 'INVALID'))
+        return 'INVALID';
+    if (required.some((item) => item.state === 'UNVERIFIABLE'))
+        return 'UNVERIFIABLE';
+    return 'VALID';
+}
+function report(components, payload) {
+    const state = overallState(components);
+    const value = {
+        state,
+        valid: state === 'VALID',
+        bundle_id: payload?.bundle_id ?? null,
+        components,
+    };
+    if (payload)
+        value.payload = payload;
+    return value;
+}
+function decodeBase64(value, label) {
+    if (!BASE64.test(value))
+        throw new ParseError(`${label} is not strict padded base64`);
+    const decoded = Buffer.from(value, 'base64');
+    if (decoded.toString('base64') !== value)
+        throw new ParseError(`${label} is not canonical padded base64`);
+    return decoded;
+}
+function decodeBase64UrlSignature(value) {
+    if (!BASE64URL_SIGNATURE.test(value)) {
+        throw new ParseError('attestation signature must be 86-character unpadded base64url');
+    }
+    const decoded = Buffer.from(value, 'base64url');
+    if (decoded.length !== 64 || decoded.toString('base64url') !== value) {
+        throw new ParseError('Ed25519 signature must contain 64 canonical base64url bytes');
+    }
+    return decoded;
+}
+function strictInput(document, policy) {
+    let value;
+    if (typeof document === 'string' || document instanceof Uint8Array) {
+        const bytes = typeof document === 'string' ? Buffer.from(document, 'utf8') : Buffer.from(document);
+        if (bytes.length > policy.maxFileSize) {
+            throw new ParseError(`portable file exceeds maximum size ${policy.maxFileSize}`);
+        }
+        value = parseJson(bytes);
+    }
+    else {
+        value = parseJson(canonicalize(document));
+    }
+    if (value === null || Array.isArray(value) || typeof value !== 'object') {
+        throw new ParseError('portable file must be a JSON object');
+    }
+    enforceLimits(value, {
+        maxDepth: policy.maxDepth,
+        maxStringLength: policy.maxStringLength,
+        maxArrayLength: policy.maxArrayLength,
+    });
+    return value;
+}
+function verifySignature(key, signature, message) {
+    return ed25519Verify(null, Buffer.from(message), key.publicKey, Buffer.from(signature));
+}
+function verifySignatureSet(envelope, payloadBytes, policy, options) {
+    const components = [];
+    const seen = new Set();
+    let validCount = 0;
+    for (const signature of envelope.signatures) {
+        const keyId = signature.keyid;
+        if (seen.has(keyId)) {
+            components.push(result(options.component, 'INVALID', 'duplicate-signature-key', 'a DSSE signature set may contain each key ID at most once', { keyId, recordId: options.recordId }));
+            continue;
+        }
+        seen.add(keyId);
+        const key = policy.key(keyId);
+        if (!key) {
+            components.push(result(options.component, 'UNVERIFIABLE', 'key-not-trusted', 'signature key is absent from caller-supplied trust', { keyId, recordId: options.recordId }));
+            continue;
+        }
+        let signatureBytes;
+        try {
+            signatureBytes = decodeBase64(signature.sig, 'DSSE signature');
+        }
+        catch (error) {
+            components.push(result(options.component, 'INVALID', 'signature-encoding', error instanceof Error ? error.message : String(error), { keyId, recordId: options.recordId }));
+            continue;
+        }
+        if (signatureBytes.length !== 64
+            || !verifySignature(key, signatureBytes, dssePae(envelope.payloadType, payloadBytes))) {
+            components.push(result(options.component, 'INVALID', 'signature-invalid', 'Ed25519 signature does not verify over the exact DSSE PAE bytes', { keyId, recordId: options.recordId }));
+            continue;
+        }
+        const [state, code, message] = evaluateKeyLifecycle(key, options.signedAt, policy);
+        components.push(result(options.component, state, code, message, { keyId, recordId: options.recordId }));
+        if (state === 'VALID')
+            validCount += 1;
+    }
+    if (validCount < 1) {
+        components.push(result(options.component, 'UNVERIFIABLE', 'signature-threshold-not-met', `required one valid caller-trusted source signature, got ${validCount}`, { recordId: options.recordId }));
+    }
+    return components;
+}
+function javascriptStringify(value) {
+    if (value !== null && typeof value === 'object' && !Array.isArray(value)) {
+        const parts = Object.entries(value).map(([key, item]) => Buffer.concat([
+            Buffer.from(canonicalize(key)),
+            Buffer.from(':'),
+            Buffer.from(javascriptStringify(item)),
+        ]));
+        return Buffer.concat([Buffer.from('{'), ...parts.flatMap((part, index) => index === parts.length - 1 ? [part] : [part, Buffer.from(',')]), Buffer.from('}')]);
+    }
+    if (Array.isArray(value)) {
+        const parts = value.map((item) => Buffer.from(javascriptStringify(item)));
+        return Buffer.concat([Buffer.from('['), ...parts.flatMap((part, index) => index === parts.length - 1 ? [part] : [part, Buffer.from(',')]), Buffer.from(']')]);
+    }
+    return canonicalize(value);
+}
+function verifyAttestationProof(proof, policy, recordId) {
+    const proofType = String(proof.proof_type);
+    const envelope = proof.envelope;
+    const attestation = envelope.attestation;
+    const keyId = String(attestation.key_id);
+    const key = policy.key(keyId);
+    if (!key) {
+        return result('source-proof', 'UNVERIFIABLE', 'key-not-trusted', 'attestation key is absent from caller-supplied trust', { keyId, recordId });
+    }
+    let issuedAt;
+    let signature;
+    try {
+        issuedAt = parseTimestamp(String(attestation.issued_at));
+        signature = decodeBase64UrlSignature(String(attestation.signature));
+    }
+    catch (error) {
+        return result('source-proof', 'INVALID', 'attestation-encoding', error instanceof Error ? error.message : String(error), { keyId, recordId });
+    }
+    let message;
+    if (proofType === 'onchaindiligence-attestation-v2') {
+        if (attestation.issuer !== ATTESTATION_ISSUER) {
+            return result('source-proof', 'INVALID', 'attestation-issuer', 'v2 attestation issuer is not the exact OnChainDiligence issuer', { keyId, recordId });
+        }
+        if (attestation.purpose !== ATTESTATION_PURPOSE) {
+            return result('source-proof', 'INVALID', 'attestation-purpose', 'v2 attestation purpose is not a compliance result', { keyId, recordId });
+        }
+        message = canonicalize({
+            schema_version: ATTESTATION_V2,
+            issuer: attestation.issuer,
+            purpose: attestation.purpose,
+            data: envelope.data,
+            issued_at: attestation.issued_at,
+            key_id: keyId,
+        });
+    }
+    else {
+        message = javascriptStringify({
+            data: envelope.data,
+            issued_at: attestation.issued_at,
+            key_id: keyId,
+        });
+    }
+    if (!verifySignature(key, signature, message)) {
+        const legacy = proofType.endsWith('-v1');
+        return result('source-proof', legacy ? 'UNVERIFIABLE' : 'INVALID', legacy ? 'legacy-signature-unverifiable' : 'signature-invalid', legacy
+            ? 'v1 signature did not verify from the object order representable in the canonical bundle'
+            : 'attestation signature does not verify', { keyId, recordId });
+    }
+    const [state, code, messageText] = evaluateKeyLifecycle(key, issuedAt, policy);
+    return result('source-proof', state, code, messageText, { keyId, recordId });
+}
+function verifyRecordProofs(payload, policy) {
+    const components = [];
+    for (const record of payload.records) {
+        for (const proof of record.proofs) {
+            const proofType = String(proof.proof_type);
+            if (proofType === 'external-digest') {
+                components.push(result('source-proof', 'VALID', 'external-digest-bound', 'digest is bound by the record ID but does not establish source attribution', { recordId: record.id }));
+            }
+            else if (proofType === 'onchaindiligence-attestation-v1'
+                || proofType === 'onchaindiligence-attestation-v2') {
+                const response = record.statement.response;
+                const source = record.statement.source;
+                if (source === null || typeof source !== 'object' || Array.isArray(source)
+                    || source.id !== ATTESTATION_ISSUER) {
+                    components.push(result('source-proof', 'INVALID', 'attestation-source-mismatch', 'OnChainDiligence attestation proof requires the exact OnChainDiligence source ID', { recordId: record.id }));
+                    continue;
+                }
+                if (record.kind !== 'evidence'
+                    || response === null || typeof response !== 'object' || Array.isArray(response)
+                    || response.mode !== 'embedded'
+                    || Buffer.compare(Buffer.from(canonicalize(response.value)), Buffer.from(canonicalize(proof.envelope))) !== 0) {
+                    components.push(result('source-proof', 'INVALID', 'attestation-response-mismatch', 'attestation proof must exactly equal the embedded evidence response', { recordId: record.id }));
+                    continue;
+                }
+                components.push(verifyAttestationProof(proof, policy, record.id));
+            }
+            else if (proofType === 'dsse-ed25519-v1') {
+                const envelope = proof.envelope;
+                let proofBytes;
+                try {
+                    proofBytes = decodeBase64(envelope.payload, 'source DSSE payload');
+                }
+                catch (error) {
+                    components.push(result('source-proof', 'INVALID', 'proof-payload-encoding', error instanceof Error ? error.message : String(error), { recordId: record.id }));
+                    continue;
+                }
+                if (envelope.payloadType !== proof.statement_media_type) {
+                    components.push(result('source-proof', 'INVALID', 'proof-payload-type', 'source DSSE payloadType does not equal statement_media_type', { recordId: record.id }));
+                    continue;
+                }
+                if (Buffer.compare(proofBytes, Buffer.from(canonicalize(record.statement))) !== 0) {
+                    components.push(result('source-proof', 'INVALID', 'proof-statement-mismatch', 'source DSSE payload is not the canonical record statement', { recordId: record.id }));
+                    continue;
+                }
+                components.push(...verifySignatureSet(envelope, proofBytes, policy, {
+                    signedAt: null,
+                    component: 'source-proof',
+                    recordId: record.id,
+                }));
+            }
+        }
+    }
+    return components;
+}
+function verifyEvidenceSemantics(payload, proofComponents, policy) {
+    const components = [];
+    const cryptographicTypes = new Set([
+        'dsse-ed25519-v1',
+        'onchaindiligence-attestation-v1',
+        'onchaindiligence-attestation-v2',
+    ]);
+    for (const record of payload.records.filter((candidate) => candidate.kind === 'evidence')) {
+        const statement = record.statement;
+        const response = statement.response;
+        if (response.mode === 'reference') {
+            components.push(result('evidence-content', policy.allowDigestOnlyEvidence ? 'VALID' : 'UNVERIFIABLE', policy.allowDigestOnlyEvidence ? 'digest-only-allowed' : 'evidence-content-unavailable', policy.allowDigestOnlyEvidence
+                ? 'caller policy permits digest-only evidence'
+                : 'offline verifier cannot resolve referenced evidence required by default policy', { recordId: record.id }));
+        }
+        else {
+            components.push(result('evidence-content', 'VALID', 'evidence-embedded', 'evidence response is embedded and its digest matches', { recordId: record.id }));
+        }
+        if (statement.trust_mode === 'agent-assertion') {
+            components.push(result('trust-mode', 'VALID', 'agent-assertion', 'statement is explicitly limited to an agent assertion', { recordId: record.id }));
+            continue;
+        }
+        const cryptoProofs = record.proofs.filter((proof) => cryptographicTypes.has(String(proof.proof_type)));
+        if (!cryptoProofs.length) {
+            components.push(result('trust-mode', 'INVALID', 'cryptographic-proof-missing', `${String(statement.trust_mode)} requires a cryptographic source proof`, { recordId: record.id }));
+            continue;
+        }
+        const relevant = proofComponents.filter((item) => item.record_id === record.id && item.code !== 'external-digest-bound');
+        const state = relevant.some((item) => item.state === 'INVALID')
+            ? 'INVALID'
+            : relevant.some((item) => item.state === 'UNVERIFIABLE') ? 'UNVERIFIABLE' : 'VALID';
+        const code = state === 'INVALID' ? 'trust-proof-invalid'
+            : state === 'UNVERIFIABLE' ? 'trust-proof-unverifiable' : 'trust-proof-valid';
+        components.push(result('trust-mode', state, code, `${String(statement.trust_mode)} is reported exactly and backed by the source-proof result`, { recordId: record.id }));
+    }
+    return components;
+}
+function verificationMaterialComponents(portable, policy) {
+    const components = [];
+    if (portable.verification_material.keys.length) {
+        components.push(result('verification-material', 'UNVERIFIABLE', 'embedded-keys-untrusted', 'embedded public keys are verification hints, never caller trust', { required: false }));
+    }
+    for (const _snapshot of portable.verification_material.registry_snapshots) {
+        components.push(result('registry-snapshot', 'UNVERIFIABLE', 'snapshot-format-unsupported', 'registry snapshot is preserved but not trusted or verified by v0 core', { required: false }));
+    }
+    if (policy.requireVerifiedAnchor && !portable.verification_material.anchors.length) {
+        components.push(result('anchor', 'UNVERIFIABLE', 'anchor-required-missing', 'caller policy requires an independently verified anchor'));
+    }
+    for (const _anchor of portable.verification_material.anchors) {
+        components.push(result('anchor', 'UNVERIFIABLE', 'anchor-format-unsupported', 'anchor is preserved but no v0 core anchor format is verified', { required: policy.requireVerifiedAnchor }));
+    }
+    return components;
+}
+function verifyFreshness(payload, policy) {
+    const components = [];
+    let createdAt;
+    try {
+        createdAt = parseTimestamp(payload.created_at);
+    }
+    catch (error) {
+        return [result('freshness', 'INVALID', 'timestamp-invalid', error instanceof Error ? error.message : String(error))];
+    }
+    if (createdAt.getTime() > policy.now.getTime() + policy.maxFutureSkewMs) {
+        components.push(result('freshness', 'INVALID', 'bundle-time-future', 'bundle created_at exceeds allowed clock skew'));
+    }
+    else if (policy.maxBundleAgeMs !== null && policy.now.getTime() - createdAt.getTime() > policy.maxBundleAgeMs) {
+        components.push(result('freshness', 'INVALID', 'bundle-stale', 'bundle exceeds caller-supplied maximum age'));
+    }
+    else {
+        components.push(result('freshness', 'VALID', 'bundle-freshness-valid', 'bundle satisfies caller-supplied time policy'));
+    }
+    const fields = {
+        evidence: ['observed_at'],
+        decision: ['decided_at'],
+        execution: ['submitted_at', 'confirmed_at'],
+        run: ['started_at', 'ended_at'],
+    };
+    for (const record of payload.records) {
+        for (const name of fields[record.kind] ?? []) {
+            const raw = record.statement[name];
+            if (typeof raw === 'string' && parseTimestamp(raw).getTime() > policy.now.getTime() + policy.maxFutureSkewMs) {
+                components.push(result('freshness', 'INVALID', 'asserted-time-future', `${record.kind}.${name} exceeds allowed clock skew`, { recordId: record.id }));
+            }
+        }
+        if (policy.enforceEvidenceExpiration
+            && record.kind === 'evidence'
+            && typeof record.statement.expires_at === 'string'
+            && policy.now.getTime() > parseTimestamp(record.statement.expires_at).getTime()) {
+            components.push(result('freshness', 'INVALID', 'evidence-expired', 'evidence expires_at is before policy time', { recordId: record.id }));
+        }
+    }
+    return components;
+}
+export function verifyBundle(document, policy) {
+    const components = [];
+    let portable;
+    try {
+        portable = strictInput(document, policy);
+    }
+    catch (error) {
+        if (error instanceof ParseError || error instanceof CanonicalizationError) {
+            return report([result('outer', 'INVALID', 'json-invalid', error.message)]);
+        }
+        throw error;
+    }
+    try {
+        validateDocument('portable-file.schema.json', portable);
+    }
+    catch (error) {
+        if (error instanceof SchemaValidationError) {
+            return report([result('outer', 'INVALID', 'schema-invalid', error.message)]);
+        }
+        throw error;
+    }
+    if (portable.media_type !== MEDIA_TYPE || portable.bundle_version !== BUNDLE_VERSION) {
+        return report([result('outer', 'INVALID', 'version-unsupported', 'unsupported outer format')]);
+    }
+    components.push(result('outer', 'VALID', 'outer-valid', 'portable file schema and version are valid'));
+    components.push(...verificationMaterialComponents(portable, policy));
+    const envelope = portable.envelope;
+    if (envelope.payloadType !== BUNDLE_PAYLOAD_TYPE) {
+        components.push(result('payload', 'INVALID', 'payload-type-unsupported', 'unsupported DSSE payload type'));
+        return report(components);
+    }
+    let payloadBytes;
+    try {
+        payloadBytes = decodeBase64(envelope.payload, 'DSSE payload');
+    }
+    catch (error) {
+        components.push(result('payload', 'INVALID', 'payload-encoding', error instanceof Error ? error.message : String(error)));
+        return report(components);
+    }
+    const cryptographic = [];
+    const seen = new Set();
+    let signatureFailure = false;
+    for (const signature of envelope.signatures) {
+        const keyId = signature.keyid;
+        if (seen.has(keyId)) {
+            components.push(result('bundle-signature', 'INVALID', 'duplicate-signature-key', 'a DSSE signature set may contain each key ID at most once', { keyId }));
+            signatureFailure = true;
+            continue;
+        }
+        seen.add(keyId);
+        const key = policy.key(keyId);
+        if (!key) {
+            components.push(result('bundle-signature', 'UNVERIFIABLE', 'key-not-trusted', 'bundle key is absent from caller-supplied trust; embedded keys are hints only', { keyId }));
+            continue;
+        }
+        let signatureBytes;
+        try {
+            signatureBytes = decodeBase64(signature.sig, 'DSSE signature');
+        }
+        catch (error) {
+            components.push(result('bundle-signature', 'INVALID', 'signature-encoding', error instanceof Error ? error.message : String(error), { keyId }));
+            signatureFailure = true;
+            continue;
+        }
+        if (signatureBytes.length !== 64
+            || !verifySignature(key, signatureBytes, dssePae(BUNDLE_PAYLOAD_TYPE, payloadBytes))) {
+            components.push(result('bundle-signature', 'INVALID', 'signature-invalid', 'bundle signature does not verify over the exact DSSE PAE bytes', { keyId }));
+            signatureFailure = true;
+            continue;
+        }
+        cryptographic.push([key, keyId]);
+    }
+    if (signatureFailure)
+        return report(components);
+    if (!cryptographic.length) {
+        components.push(result('bundle-signature', 'UNVERIFIABLE', 'signature-threshold-not-met', 'no bundle signature uses a caller-trusted key'));
+        return report(components);
+    }
+    let payload;
+    try {
+        const parsed = parseJson(payloadBytes);
+        if (parsed === null || Array.isArray(parsed) || typeof parsed !== 'object') {
+            throw new ParseError('signed payload must be a JSON object');
+        }
+        enforceLimits(parsed, {
+            maxDepth: policy.maxDepth,
+            maxStringLength: policy.maxStringLength,
+            maxArrayLength: policy.maxArrayLength,
+        });
+        payload = parsed;
+        validateDocument('bundle-payload.schema.json', payload);
+    }
+    catch (error) {
+        if (error instanceof ParseError || error instanceof SchemaValidationError) {
+            components.push(result('payload', 'INVALID', 'payload-invalid', error.message));
+            return report(components);
+        }
+        throw error;
+    }
+    try {
+        if (Buffer.compare(Buffer.from(canonicalize(payload)), payloadBytes) !== 0) {
+            components.push(result('payload', 'INVALID', 'payload-not-rfc8785', 'signed payload bytes are not their RFC 8785 representation'));
+            return report(components, payload);
+        }
+    }
+    catch (error) {
+        if (error instanceof CanonicalizationError) {
+            components.push(result('payload', 'INVALID', 'payload-not-ijson', error.message));
+            return report(components, payload);
+        }
+        throw error;
+    }
+    if (payload.bundle_version !== BUNDLE_VERSION || portable.bundle_version !== payload.bundle_version) {
+        components.push(result('payload', 'INVALID', 'outer-inner-version-mismatch', 'authoritative and routing versions do not match'));
+        return report(components, payload);
+    }
+    components.push(result('payload', 'VALID', 'payload-valid', 'signed payload is canonical v0 JSON'));
+    const createdAt = parseTimestamp(payload.created_at);
+    let lifecycleCount = 0;
+    for (const [key, keyId] of cryptographic) {
+        const [state, code, message] = evaluateKeyLifecycle(key, createdAt, policy);
+        components.push(result('bundle-signature', state, code, message, { keyId }));
+        if (state === 'VALID')
+            lifecycleCount += 1;
+    }
+    const presented = new Set(envelope.signatures.map((signature) => signature.keyid));
+    for (const keyId of [...policy.requiredSignatureKeyIds].filter((id) => !presented.has(id)).sort()) {
+        components.push(result('bundle-signature', 'UNVERIFIABLE', 'required-signature-missing', 'a caller-required bundle signature is not present', { keyId }));
+    }
+    if (lifecycleCount < policy.minimumValidSignatures) {
+        components.push(result('bundle-signature', 'UNVERIFIABLE', 'signature-threshold-not-met', `required ${policy.minimumValidSignatures} valid signature(s), got ${lifecycleCount}`));
+    }
+    try {
+        validateBundlePayload(payload);
+    }
+    catch (error) {
+        if (error instanceof EvidenceValidationError) {
+            components.push(result('graph', 'INVALID', 'graph-invalid', error.message));
+            return report(components, payload);
+        }
+        throw error;
+    }
+    components.push(result('graph', 'VALID', 'graph-valid', 'IDs, roots, DAG, references, and kind rules are valid'));
+    const proofComponents = verifyRecordProofs(payload, policy);
+    components.push(...proofComponents);
+    components.push(...verifyEvidenceSemantics(payload, proofComponents, policy));
+    components.push(...verifyFreshness(payload, policy));
+    return report(components, payload);
+}
+//# sourceMappingURL=verifier.js.map

package/dist/verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,UAAU,GACX,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,UAAU,EACV,qBAAqB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,oBAAoB,EAAuB,WAAW,EAAE,MAAM,YAAY,CAAA;AAanF,MAAM,MAAM,GAAG,kEAAkE,CAAA;AACjF,MAAM,mBAAmB,GAAG,qBAAqB,CAAA;AAEjD,SAAS,MAAM,CACb,SAAiB,EACjB,KAAwB,EACxB,IAAY,EACZ,OAAe,EACf,UAII,EAAE;IAEN,MAAM,IAAI,GAAoB;QAC5B,SAAS;QACT,KAAK;QACL,IAAI;QACJ,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;KACnC,CAAA;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAA;IAC5D,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAA;IACrE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAAsC;IACjE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC3D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IACvE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc,CAAC;QAAE,OAAO,cAAc,CAAA;IACjF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,UAA6B,EAAE,OAAuB;IACpE,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAA;IACtC,MAAM,KAAK,GAAuB;QAChC,KAAK;QACL,KAAK,EAAE,KAAK,KAAK,OAAO;QACxB,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI;QACrC,UAAU;KACX,CAAA;IACD,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAA;IACpC,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAA;IACrF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAA;IACzG,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,UAAU,CAAC,+DAA+D,CAAC,CAAA;IACvF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;QACrE,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,WAAW,CAClB,QAAwE,EACxE,MAAmB;IAEnB,IAAI,KAAgB,CAAA;IACpB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,YAAY,UAAU,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClG,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,IAAI,UAAU,CAAC,sCAAsC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;QAClF,CAAC;QACD,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC3C,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxE,MAAM,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAA;IAC7D,CAAC;IACD,aAAa,CAAC,KAAK,EAAE;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC,CAAA;IACF,OAAO,KAAkC,CAAA;AAC3C,CAAC;AAED,SAAS,eAAe,CAAC,GAAmB,EAAE,SAAqB,EAAE,OAAmB;IACtF,OAAO,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;AACzF,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAsB,EACtB,YAAwB,EACxB,MAAmB,EACnB,OAAwE;IAExE,MAAM,UAAU,GAAsB,EAAE,CAAA;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAA;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,yBAAyB,EAC5E,2DAA2D,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YACtG,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACf,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,iBAAiB,EACzE,oDAAoD,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAC/F,SAAQ;QACV,CAAC;QACD,IAAI,cAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,cAAc,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,EACvE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YACjG,SAAQ;QACV,CAAC;QACD,IACE,cAAc,CAAC,MAAM,KAAK,EAAE;eACzB,CAAC,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,EACrF,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,mBAAmB,EACtE,iEAAiE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAC5G,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAClF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QACvG,IAAI,KAAK,KAAK,OAAO;YAAE,UAAU,IAAI,CAAC,CAAA;IACxC,CAAC;IACD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,6BAA6B,EACrF,2DAA2D,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC7G,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;SACvC,CAAC,CAAC,CAAA;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACvE,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACzE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACvE,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACvF,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAiB,EACjB,MAAmB,EACnB,QAAgB;IAEhB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAsB,CAAA;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAyB,CAAA;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAC7D,sDAAsD,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,QAAc,CAAA;IAClB,IAAI,SAAiB,CAAA;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAA;QACxD,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAA;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,sBAAsB,EAC7D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,IAAI,OAAmB,CAAA;IACvB,IAAI,SAAS,KAAK,iCAAiC,EAAE,CAAC;QACpD,IAAI,WAAW,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAC9C,OAAO,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,oBAAoB,EAC3D,gEAAgE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1F,CAAC;QACD,IAAI,WAAW,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;YAChD,OAAO,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,qBAAqB,EAC5D,mDAAmD,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC7E,CAAC;QACD,OAAO,GAAG,YAAY,CAAC;YACrB,cAAc,EAAE,cAAc;YAC9B,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,mBAAmB,CAAC;YAC5B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACxC,OAAO,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,EAC/D,MAAM,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,mBAAmB,EAC9D,MAAM;YACJ,CAAC,CAAC,yFAAyF;YAC3F,CAAC,CAAC,uCAAuC,EAC3C,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACxB,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC9E,OAAO,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAsB,EAAE,MAAmB;IACrE,MAAM,UAAU,GAAsB,EAAE,CAAA;IACxC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YAC1C,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;gBACpC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,uBAAuB,EACrE,4EAA4E,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAC3G,CAAC;iBAAM,IACL,SAAS,KAAK,iCAAiC;mBAC5C,SAAS,KAAK,iCAAiC,EAClD,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAA;gBAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAA;gBACtC,IACE,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;uBAClE,MAAqB,CAAC,EAAE,KAAK,kBAAkB,EACnD,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,6BAA6B,EAC7E,kFAAkF,EAClF,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;oBAC3B,SAAQ;gBACV,CAAC;gBACD,IACE,MAAM,CAAC,IAAI,KAAK,UAAU;uBACvB,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;uBAC3E,QAAuB,CAAC,IAAI,KAAK,UAAU;uBAC5C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAE,QAAuB,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAC7H,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,+BAA+B,EAC/E,qEAAqE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;oBAClG,SAAQ;gBACV,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;YACnE,CAAC;iBAAM,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAmC,CAAA;gBAC1D,IAAI,UAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAA;gBACpE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,wBAAwB,EACxE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;oBACnF,SAAQ;gBACV,CAAC;gBACD,IAAI,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,oBAAoB,EAAE,CAAC;oBACxD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,oBAAoB,EACpE,6DAA6D,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;oBAC1F,SAAQ;gBACV,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,0BAA0B,EAC1E,2DAA2D,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;oBACxF,SAAQ;gBACV,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE;oBAClE,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,cAAc;oBACzB,QAAQ,EAAE,MAAM,CAAC,EAAE;iBACpB,CAAC,CAAC,CAAA;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAsB,EACtB,eAAkC,EAClC,MAAmB;IAEnB,MAAM,UAAU,GAAsB,EAAE,CAAA;IACxC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;QACjC,iBAAiB;QACjB,iCAAiC;QACjC,iCAAiC;KAClC,CAAC,CAAA;IACF,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAC1F,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;QAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAsB,CAAA;QACjD,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAClG,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,8BAA8B,EACvF,MAAM,CAAC,uBAAuB;gBAC5B,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,gFAAgF,EACpF,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC7B,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EACrE,sDAAsD,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACrF,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;YAC/C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAC7D,uDAAuD,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YACpF,SAAQ;QACV,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACtG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,6BAA6B,EAC3E,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,wCAAwC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YACpG,SAAQ;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/C,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAA;QACxE,MAAM,KAAK,GAAsB,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;YAChF,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAA;QACrF,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB;YACtD,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,mBAAmB,CAAA;QAC/E,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAC9C,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,4DAA4D,EAC3F,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IAC7B,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAwB,EAAE,MAAmB;IACnF,MAAM,UAAU,GAAsB,EAAE,CAAA;IACxC,IAAI,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,cAAc,EAAE,yBAAyB,EACvF,iEAAiE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IAC5F,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,CAAC;QAC1E,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,6BAA6B,EACvF,uEAAuE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IAClG,CAAC;IACD,IAAI,MAAM,CAAC,qBAAqB,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,yBAAyB,EACxE,yDAAyD,CAAC,CAAC,CAAA;IAC/D,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC;QAC7D,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,2BAA2B,EAC1E,8DAA8D,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAA;IAChH,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,OAAsB,EAAE,MAAmB;IAClE,MAAM,UAAU,GAAsB,EAAE,CAAA;IACxC,IAAI,SAAe,CAAA;IACnB,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,mBAAmB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACtH,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACxE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,oBAAoB,EACjE,8CAA8C,CAAC,CAAC,CAAA;IACpD,CAAC;SAAM,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAChH,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,EAC3D,4CAA4C,CAAC,CAAC,CAAA;IAClD,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,wBAAwB,EACnE,8CAA8C,CAAC,CAAC,CAAA;IACpD,CAAC;IACD,MAAM,MAAM,GAAoE;QAC9E,QAAQ,EAAE,CAAC,aAAa,CAAC;QACzB,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,SAAS,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;QAC3C,GAAG,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC;KAChC,CAAA;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC7G,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,sBAAsB,EACnE,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,6BAA6B,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAClF,CAAC;QACH,CAAC;QACD,IACE,MAAM,CAAC,yBAAyB;eAC7B,MAAM,CAAC,IAAI,KAAK,UAAU;eAC1B,OAAO,MAAM,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ;eAC/C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAC/E,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,kBAAkB,EAC/D,2CAA2C,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,QAAwE,EACxE,MAAmB;IAEnB,MAAM,UAAU,GAAsB,EAAE,CAAA;IACxC,IAAI,QAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC1E,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC5E,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,gBAAgB,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC9E,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,IAAI,QAAQ,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;QACrF,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAA;IAChG,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,4CAA4C,CAAC,CAAC,CAAA;IACtG,UAAU,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;IAEpE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;IAClC,IAAI,QAAQ,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,0BAA0B,EAAE,+BAA+B,CAAC,CAAC,CAAA;QAC1G,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IAC3B,CAAC;IACD,IAAI,YAAoB,CAAA;IACxB,IAAI,CAAC;QACH,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAC7D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC1D,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IAC3B,CAAC;IAED,MAAM,aAAa,GAA6C,EAAE,CAAA;IAClE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,gBAAgB,GAAG,KAAK,CAAA;IAC5B,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAA;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,SAAS,EAAE,yBAAyB,EAC7E,2DAA2D,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;YAC1E,gBAAgB,GAAG,IAAI,CAAA;YACvB,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACf,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,cAAc,EAAE,iBAAiB,EAC1E,+EAA+E,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;YAC9F,SAAQ;QACV,CAAC;QACD,IAAI,cAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,cAAc,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,SAAS,EAAE,oBAAoB,EACxE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;YACrE,gBAAgB,GAAG,IAAI,CAAA;YACvB,SAAQ;QACV,CAAC;QACD,IACE,cAAc,CAAC,MAAM,KAAK,EAAE;eACzB,CAAC,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,EACpF,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EACvE,gEAAgE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;YAC/E,gBAAgB,GAAG,IAAI,CAAA;YACvB,SAAQ;QACV,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;IAClC,CAAC;IACD,IAAI,gBAAgB;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IAC/C,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,cAAc,EAAE,6BAA6B,EACtF,+CAA+C,CAAC,CAAC,CAAA;QACnD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IAC3B,CAAC;IAED,IAAI,OAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,CAAA;QACtC,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3E,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAA;QAC9D,CAAC;QACD,aAAa,CAAC,MAAM,EAAE;YACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAA;QACF,OAAO,GAAG,MAAkC,CAAA;QAC5C,gBAAgB,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC1E,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;YAC/E,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;QAC3B,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3E,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,qBAAqB,EAChE,4DAA4D,CAAC,CAAC,CAAA;YAChE,OAAO,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;YACjF,OAAO,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACpC,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,cAAc,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACpG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,8BAA8B,EACzE,iDAAiD,CAAC,CAAC,CAAA;QACrD,OAAO,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACpC,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,qCAAqC,CAAC,CAAC,CAAA;IAEnG,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACpD,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QAC3E,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QAC5E,IAAI,KAAK,KAAK,OAAO;YAAE,cAAc,IAAI,CAAC,CAAA;IAC5C,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IAClF,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,cAAc,EAAE,4BAA4B,EACrF,mDAAmD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,cAAc,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACnD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,cAAc,EAAE,6BAA6B,EACtF,YAAY,MAAM,CAAC,sBAAsB,4BAA4B,cAAc,EAAE,CAAC,CAAC,CAAA;IAC3F,CAAC;IAED,IAAI,CAAC;QACH,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;YAC3E,OAAO,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACpC,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EACpD,uDAAuD,CAAC,CAAC,CAAA;IAC3D,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC3D,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAA;IACnC,UAAU,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,CAAA;IAC7E,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IACpD,OAAO,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;AACpC,CAAC"}

package/examples/withheld-payment.mjs

@@ -0,0 +1,67 @@
+import { generateKeyPairSync } from 'node:crypto'
+import {
+  contentId,
+  createBundlePayload,
+  createEd25519Signer,
+  createKeyRecord,
+  createRecord,
+  sealBundle,
+  TrustPolicy,
+  verifyBundle,
+} from '@onchaindiligence/agent-evidence'
+
+// Concise financial-agent example. It deliberately records non-execution;
+// no blockchain settlement is fabricated.
+const { privateKey, publicKey } = generateKeyPairSync('ed25519')
+const signer = createEd25519Signer(privateKey)
+const key = createKeyRecord(publicKey, { validFrom: '2026-08-28T00:00:00.000Z' })
+const principal = createRecord('principal', {
+  principal_id: 'urn:example:treasury', principal_type: 'organization',
+})
+const agent = createRecord('agent', {
+  agent_id: 'urn:example:payment-agent', agent_version: '1.0.0', operator_ref: principal.id,
+}, { parents: [principal.id] })
+const mandate = createRecord('mandate', {
+  mandate_id: 'INV-1042', principal_ref: principal.id,
+  scope: { action: 'pay', recipient: 'vendor-X', asset: 'USDC', chain: 'eip155:5042002' },
+  limits: { maximum: '500.00' },
+  valid_from: '2026-08-28T00:00:00.000Z', valid_until: '2026-08-29T00:00:00.000Z',
+}, { parents: [principal.id] })
+const run = createRecord('run', {
+  run_external_id: 'run-INV-1042', agent_ref: agent.id, mandate_ref: mandate.id,
+  started_at: '2026-08-28T12:00:00.000Z',
+}, { parents: [agent.id, mandate.id] })
+const observation = { recipient_verified: false }
+const evidence = createRecord('evidence', {
+  evidence_type: 'recipient-check', run_ref: run.id, trust_mode: 'agent-assertion',
+  source: { id: 'urn:example:ledger', type: 'internal-ledger' },
+  tool: { name: 'recipient-check', version: '1' },
+  request: { digest: { sha256: contentId({ invoice: 'INV-1042' }).slice(7) }, media_type: 'application/json' },
+  response: { mode: 'embedded', media_type: 'application/json', value: observation,
+    digest: { sha256: contentId(observation).slice(7) } },
+  observed_at: '2026-08-28T12:00:01.000Z', expires_at: null, scope: { invoice: 'INV-1042' },
+}, { parents: [run.id] })
+const rules = { require_recipient_verification: true }
+const policy = createRecord('policy', {
+  policy_id: 'payment-policy', version: '1', digest: { sha256: contentId(rules).slice(7) },
+  source: 'https://example.invalid/policy/1', effective_from: '2026-08-28T00:00:00.000Z', policy: rules,
+}, { parents: [run.id] })
+const decision = createRecord('decision', {
+  decision_id: 'decision-INV-1042', run_ref: run.id, agent_ref: agent.id,
+  decision_type: 'payment-authorization', outcome: { authorized: false }, evidence_refs: [evidence.id],
+  policy_ref: policy.id, policy_digest: policy.statement.digest, decided_at: '2026-08-28T12:00:02.000Z',
+}, { parents: [run.id, evidence.id, policy.id] })
+const execution = createRecord('execution', {
+  execution_id: 'execution-INV-1042', decision_ref: decision.id,
+  execution_type: 'payment-withheld', status: 'withheld-not-submitted',
+  submitted_at: '2026-08-28T12:00:03.000Z',
+}, { parents: [decision.id] })
+const payload = createBundlePayload(
+  [principal, agent, mandate, run, evidence, policy, decision, execution],
+  { createdAt: '2026-08-28T12:00:04.000Z' },
+)
+const bundle = await sealBundle(payload, signer, { keys: [key] })
+const report = verifyBundle(bundle, TrustPolicy.fromKeyRecords([key], {
+  now: new Date('2026-08-28T12:01:00.000Z'),
+}))
+console.log(report.state, payload.bundle_id, execution.statement.status)