@openauditmodel/cli 0.1.0

package/dist/conformance/src/cli.js

@@ -0,0 +1,560 @@
+#!/usr/bin/env node
+/**
+ * `auditmodel` — the OpenAuditModel conformance command line interface.
+ *
+ * v0.1 implements three commands:
+ *   validate          check events against the canonical schema
+ *   verify-integrity  recalculate and compare each event's own digest
+ *   verify-chain      verify previous-hash chains across a set of events
+ *
+ * Exit codes:
+ *   0  a verdict was produced and it passed
+ *   1  a verdict was produced and it failed
+ *   2  the tool could not run: usage error, or a file could not be read or parsed
+ *   3  NO VERDICT was produced — nothing was evaluated
+ *
+ * 3 is the code that matters most, because it is the one that is easy to misread
+ * as success. `check-profile` returns it when no rule governs the event, and
+ * `lint-privacy` returns it when the input is not an audit event and was
+ * therefore never scanned. Neither is an approval of anything.
+ *
+ * The tooling is offline: it resolves no remote reference, fetches no evidence
+ * URL and executes nothing contained in an event.
+ */
+import { readFileSync, realpathSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { parseArgs } from "node:util";
+import { createValidator, SPEC_VERSION } from "./validate.js";
+import { loadEventDocuments } from "./sources.js";
+import { formatIssues } from "./format-errors.js";
+import { verifyEventIntegrity } from "./integrity/verify-event.js";
+import { verifyChains } from "./integrity/verify-chain.js";
+import { lintEvent } from "./privacy/lint-event.js";
+import { summarise } from "./privacy/types.js";
+import { availableProfiles, loadProfile } from "./profiles/load-profile.js";
+import { checkProfile } from "./profiles/check-profile.js";
+import { summariseProfileResults } from "./profiles/types.js";
+export const EXIT_OK = 0;
+export const EXIT_INVALID = 1;
+export const EXIT_ERROR = 2;
+/**
+ * No verdict was produced for the input.
+ *
+ * `check-profile`: nothing checked was governed by the profile.
+ * `lint-privacy`: the input could not be evaluated as an audit event, so it was
+ * not scanned at all.
+ *
+ * Distinct from 0 in both cases for the same reason: a pipeline must not be able
+ * to read "the tool said nothing" as "the tool was satisfied". Distinct from 1
+ * because 1 means a real verdict was produced and it was negative, which is a
+ * different thing for an operator to act on.
+ */
+export const EXIT_NO_VERDICT = 3;
+/** Retained name for the `check-profile` reading of {@link EXIT_NO_VERDICT}. */
+export const EXIT_NOT_APPLICABLE = EXIT_NO_VERDICT;
+/** Commands that are specified as future work and deliberately not implemented in v0.1. */
+const PLANNED_COMMANDS = new Set(["check-coverage"]);
+const OUTPUT_FORMATS = new Set(["text", "json"]);
+const USAGE = `auditmodel — OpenAuditModel conformance tooling (specification ${SPEC_VERSION}, experimental)
+
+Usage:
+  auditmodel validate <path...>          Validate events against the canonical schema
+  auditmodel verify-integrity <path...>  Recalculate and compare each event's own digest
+  auditmodel verify-chain <path...>      Verify previous-hash chains across a set of events
+  auditmodel lint-privacy <path...>      Report suspected privacy and secret-exposure risks
+  auditmodel check-profile <path...>     Check events against a domain profile
+  auditmodel --help                      Show this help
+  auditmodel --version                   Show the tool version
+
+A path may be a JSON file holding one event, a JSON file holding an array of
+events, a .jsonl or .ndjson file holding one event per line, or a directory of
+those files.
+
+Options:
+  -q, --quiet                            Only report failures
+      --format <text|json>               Output format for lint-privacy and check-profile
+      --profile <name>                   Profile to check against (check-profile)
+
+Exit codes:
+  0  a verdict was produced and it passed
+  1  a verdict was produced and it failed: invalid, unverified, a finding, or a
+     profile rule violation
+  2  the tool could not run: usage error, or a file could not be read or parsed
+  3  no verdict was produced, so nothing was approved:
+       check-profile  no checked event is governed by the profile
+       lint-privacy   the input is not an audit event and was NOT scanned
+
+Verification is tamper-evident, not tamper-proof: it detects modification of the
+events supplied to it. It cannot prove that events were never deleted, and it
+makes no claim of immutability, legal weight or non-repudiation.
+
+Privacy linting is deterministic local static analysis. It reports suspicions,
+never proof: a finding does not confirm a credential, personal data or a breach,
+and a clean result does not mean an event is safe or compliant. Findings never
+contain the value that produced them.
+
+A profile only ever adds requirements to the core model. Profile conformance is
+not regulatory or legal compliance, and an event the profile does not govern is
+reported as not-applicable rather than as conforming.
+
+Planned commands (not implemented in v0.1):
+  check-coverage
+`;
+function toolVersion(schemaPath) {
+    // <root>/schemas/v0.1/audit-event.schema.json -> <root>/package.json
+    const root = path.dirname(path.dirname(path.dirname(schemaPath)));
+    try {
+        const manifest = JSON.parse(readFileSync(path.join(root, "package.json"), "utf8"));
+        return manifest.version ?? SPEC_VERSION;
+    }
+    catch {
+        return SPEC_VERSION;
+    }
+}
+function displayPath(file) {
+    return path.relative(process.cwd(), path.resolve(file)).split(path.sep).join("/") || file;
+}
+/** Report label for one event: its file, plus its position when the file holds several. */
+function displayLabel(document) {
+    const base = displayPath(document.file);
+    return document.index === undefined ? base : `${base}#${document.index}`;
+}
+function write(text) {
+    process.stdout.write(text);
+}
+function writeFindings(findings, indent) {
+    for (const finding of findings) {
+        const where = finding.label === undefined ? "" : `${finding.label}: `;
+        write(`${indent}${where}${finding.message}  [${finding.kind}]\n`);
+        for (const line of finding.detail ?? []) {
+            write(`${indent}  ${line}\n`);
+        }
+    }
+}
+function writeProfileFindings(findings, indent) {
+    for (const finding of findings) {
+        write(`${indent}${finding.severity.toUpperCase()}  ${finding.ruleId}  ${finding.path}\n${indent}  ${finding.message}\n`);
+    }
+}
+function writeChecks(checks, indent) {
+    for (const check of checks) {
+        write(`${indent}${check.message}\n`);
+    }
+}
+function writeNotes(notes, indent) {
+    for (const note of notes) {
+        write(`${indent}note: ${note.message}\n`);
+        for (const line of note.detail ?? []) {
+            write(`${indent}  ${line}\n`);
+        }
+    }
+}
+/**
+ * Expands the given paths, reads every event they contain and compiles the
+ * schema. Returns an exit code when the command cannot proceed at all.
+ */
+function loadInput(inputs, command, quiet) {
+    if (inputs.length === 0) {
+        process.stderr.write(`auditmodel: ${command} requires at least one file or directory\n\n`);
+        process.stderr.write(USAGE);
+        return EXIT_ERROR;
+    }
+    let loaded;
+    try {
+        loaded = loadEventDocuments(inputs);
+    }
+    catch (cause) {
+        process.stderr.write(`auditmodel: ${cause.message}\n`);
+        return EXIT_ERROR;
+    }
+    if (loaded.documents.length === 0 && loaded.failures.length === 0) {
+        process.stderr.write("auditmodel: no events found in the given paths\n");
+        return EXIT_ERROR;
+    }
+    let validator;
+    try {
+        validator = createValidator();
+    }
+    catch (cause) {
+        process.stderr.write(`auditmodel: ${cause.message}\n`);
+        return EXIT_ERROR;
+    }
+    if (!quiet) {
+        write(`schema: ${validator.schemaId} (${displayPath(validator.schemaPath)})\n\n`);
+    }
+    return { documents: loaded.documents, failures: loaded.failures, validator };
+}
+function reportLoadFailures(failures) {
+    for (const failure of failures) {
+        write(`ERROR ${displayPath(failure.file)}\n    ${failure.error}\n`);
+    }
+}
+function runValidate(inputs, quiet) {
+    const loaded = loadInput(inputs, "validate", quiet);
+    if (typeof loaded === "number") {
+        return loaded;
+    }
+    reportLoadFailures(loaded.failures);
+    let valid = 0;
+    let invalid = 0;
+    for (const document of loaded.documents) {
+        const label = displayLabel(document);
+        const issues = loaded.validator.validateEvent(document.event);
+        if (issues.length === 0) {
+            valid += 1;
+            if (!quiet) {
+                write(`ok    ${label}\n`);
+            }
+        }
+        else {
+            invalid += 1;
+            write(`FAIL  ${label}\n${formatIssues(issues)}\n`);
+        }
+    }
+    const total = loaded.documents.length;
+    const noun = total === 1 ? "event" : "events";
+    write(`\n${total} ${noun} checked: ${valid} valid, ${invalid} invalid, ${loaded.failures.length} unreadable\n`);
+    if (loaded.failures.length > 0) {
+        return EXIT_ERROR;
+    }
+    return invalid > 0 ? EXIT_INVALID : EXIT_OK;
+}
+function runVerifyIntegrity(inputs, quiet) {
+    const loaded = loadInput(inputs, "verify-integrity", quiet);
+    if (typeof loaded === "number") {
+        return loaded;
+    }
+    reportLoadFailures(loaded.failures);
+    let verified = 0;
+    let failed = 0;
+    for (const document of loaded.documents) {
+        const label = displayLabel(document);
+        const result = verifyEventIntegrity(document.event, label, loaded.validator);
+        if (result.verified) {
+            verified += 1;
+            if (!quiet) {
+                write(`ok    ${label}\n`);
+                writeChecks(result.checks, "        ");
+            }
+        }
+        else {
+            failed += 1;
+            write(`FAIL  ${label}\n`);
+            if (!quiet) {
+                writeChecks(result.checks, "        ");
+            }
+            // The file name is already on the FAIL line, so the per-finding label
+            // would only repeat it.
+            writeFindings(result.findings.map((finding) => ({
+                kind: finding.kind,
+                message: finding.message,
+                ...(finding.detail === undefined ? {} : { detail: finding.detail }),
+            })), "        ");
+        }
+    }
+    const total = loaded.documents.length;
+    const noun = total === 1 ? "event" : "events";
+    write(`\n${total} ${noun} checked: ${verified} verified, ${failed} failed\n`);
+    if (loaded.failures.length > 0) {
+        return EXIT_ERROR;
+    }
+    return failed > 0 ? EXIT_INVALID : EXIT_OK;
+}
+function runVerifyChain(inputs, quiet) {
+    const loaded = loadInput(inputs, "verify-chain", quiet);
+    if (typeof loaded === "number") {
+        return loaded;
+    }
+    reportLoadFailures(loaded.failures);
+    const events = loaded.documents.map((document) => ({
+        label: displayLabel(document),
+        event: document.event,
+    }));
+    const report = verifyChains(events, loaded.validator);
+    if (report.unassigned.length > 0) {
+        write("events that could not be assigned to a chain\n");
+        writeFindings(report.unassigned, "  ");
+        write("\n");
+    }
+    for (const chain of report.chains) {
+        const range = chain.firstSequence === undefined || chain.lastSequence === undefined
+            ? "none"
+            : `${chain.firstSequence}..${chain.lastSequence}`;
+        write(`chain ${chain.chainId}\n`);
+        write(`  events:    ${chain.eventCount}\n`);
+        write(`  sequences: ${range}\n`);
+        if (!quiet) {
+            writeChecks(chain.checks.map((check) => ({ message: `ok    ${check.message}` })), "  ");
+        }
+        if (chain.findings.length > 0) {
+            write("  FAIL\n");
+            writeFindings(chain.findings, "    ");
+        }
+        if (!quiet) {
+            writeNotes(chain.notes, "  ");
+        }
+        write("\n");
+    }
+    const intact = report.chains.filter((chain) => chain.intact).length;
+    const broken = report.chains.length - intact;
+    const chainNoun = report.chains.length === 1 ? "chain" : "chains";
+    write(`${report.chains.length} ${chainNoun} checked: ${intact} intact, ${broken} broken (${report.eventCount} events)\n`);
+    if (loaded.failures.length > 0) {
+        return EXIT_ERROR;
+    }
+    if (report.chains.length === 0 && report.unassigned.length === 0) {
+        process.stderr.write("auditmodel: no chains found in the given paths\n");
+        return EXIT_INVALID;
+    }
+    return report.intact ? EXIT_OK : EXIT_INVALID;
+}
+function runLintPrivacy(inputs, quiet, format) {
+    const loaded = loadInput(inputs, "lint-privacy", quiet || format === "json");
+    if (typeof loaded === "number") {
+        return loaded;
+    }
+    const results = loaded.documents.map((document) => lintEvent(document.event, displayLabel(document), loaded.validator));
+    const summary = summarise(results);
+    if (format === "json") {
+        const report = {
+            tool: "auditmodel lint-privacy",
+            specVersion: SPEC_VERSION,
+            schemaId: loaded.validator.schemaId,
+            summary,
+            unreadable: loaded.failures.map((failure) => ({
+                file: displayPath(failure.file),
+                error: failure.error,
+            })),
+            results: results.map((result) => ({
+                file: result.label,
+                ...(result.eventId === undefined ? {} : { eventId: result.eventId }),
+                status: result.status,
+                schemaIssues: result.schemaIssues,
+                // Findings never carry the value that produced them.
+                findings: result.findings.map((entry) => ({
+                    ruleId: entry.ruleId,
+                    severity: entry.severity,
+                    confidence: entry.confidence,
+                    category: entry.category,
+                    path: entry.path,
+                    message: entry.message,
+                    recommendation: entry.recommendation,
+                })),
+            })),
+        };
+        write(`${JSON.stringify(report, null, 2)}\n`);
+    }
+    else {
+        reportLoadFailures(loaded.failures);
+        for (const result of results) {
+            if (result.status === "clean") {
+                if (!quiet) {
+                    write(`ok    ${result.label}\n`);
+                }
+                continue;
+            }
+            if (result.status === "schema-invalid") {
+                write(`FAIL  ${result.label}  (not an OpenAuditModel event: NOT scanned)\n`);
+                for (const issue of result.schemaIssues) {
+                    write(`        ${issue}\n`);
+                }
+                continue;
+            }
+            const noun = result.findings.length === 1 ? "finding" : "findings";
+            write(`FAIL  ${result.label}  (${result.findings.length} ${noun})\n`);
+            for (const entry of result.findings) {
+                write(`        ${entry.severity.toUpperCase()}  ${entry.ruleId}  confidence ${entry.confidence}  ${entry.path}\n`);
+                write(`          ${entry.message}\n`);
+                if (entry.recommendation !== undefined) {
+                    write(`          recommendation: ${entry.recommendation}\n`);
+                }
+            }
+        }
+        const eventNoun = summary.events === 1 ? "event" : "events";
+        write(`\n${summary.events} ${eventNoun} checked: ${summary.clean} clean, ${summary.withFindings} with findings, ${summary.schemaInvalid} schema-invalid, ${loaded.failures.length} unreadable\n`);
+        const { critical, high, medium, low, info } = summary.bySeverity;
+        const findingNoun = summary.findings === 1 ? "finding" : "findings";
+        write(`${summary.findings} privacy ${findingNoun}: ${critical} critical, ${high} high, ${medium} medium, ${low} low, ${info} info\n`);
+        if (summary.schemaInvalid > 0) {
+            const noun = summary.schemaInvalid === 1 ? "input" : "inputs";
+            write(`\nPrivacy evaluation was not completed for ${summary.schemaInvalid} ${noun}: not a valid OpenAuditModel event. Those inputs were NOT scanned, and are not reported as clean.\n`);
+        }
+    }
+    if (loaded.failures.length > 0) {
+        return EXIT_ERROR;
+    }
+    // Findings win over schema-invalid: a real finding is the more actionable
+    // signal, and reporting "not evaluated" would bury it. With no findings, a
+    // schema-invalid input must never look clean — nothing was scanned.
+    if (summary.findings > 0) {
+        return EXIT_INVALID;
+    }
+    return summary.schemaInvalid > 0 ? EXIT_NO_VERDICT : EXIT_OK;
+}
+function runCheckProfile(inputs, quiet, format, profileName) {
+    if (profileName === undefined || profileName === "") {
+        process.stderr.write(`auditmodel: check-profile requires --profile <name>; available profiles: ${availableProfiles().join(", ")}\n`);
+        return EXIT_ERROR;
+    }
+    const loaded = loadProfile(profileName);
+    if (!loaded.ok) {
+        process.stderr.write(`auditmodel: ${loaded.error}\n`);
+        for (const issue of loaded.issues ?? []) {
+            process.stderr.write(`    ${issue}\n`);
+        }
+        return EXIT_ERROR;
+    }
+    const input = loadInput(inputs, "check-profile", quiet || format === "json");
+    if (typeof input === "number") {
+        return input;
+    }
+    const { profile } = loaded;
+    const results = input.documents.map((document) => checkProfile(document.event, displayLabel(document), profile, input.validator));
+    const summary = summariseProfileResults(results);
+    if (format === "json") {
+        write(`${JSON.stringify({
+            tool: "auditmodel check-profile",
+            specVersion: SPEC_VERSION,
+            schemaId: input.validator.schemaId,
+            profile: { name: profile.name, version: profile.version, status: profile.status },
+            summary,
+            unreadable: input.failures.map((failure) => ({
+                file: displayPath(failure.file),
+                error: failure.error,
+            })),
+            results,
+        }, null, 2)}\n`);
+    }
+    else {
+        reportLoadFailures(input.failures);
+        if (!quiet) {
+            write(`profile: ${profile.name} ${profile.version} (${profile.status})\n\n`);
+        }
+        for (const result of results) {
+            if (result.status === "conforming") {
+                if (!quiet) {
+                    write(`ok    ${result.label}  (${result.matchedRules.join(", ")})\n`);
+                    writeProfileFindings(result.warnings, "        ");
+                }
+                continue;
+            }
+            if (result.status === "not-applicable") {
+                if (!quiet) {
+                    write(`n/a   ${result.label}  (no rule in this profile governs this event)\n`);
+                }
+                continue;
+            }
+            if (result.status === "core-invalid") {
+                write(`FAIL  ${result.label}  (core-invalid: profile rules not evaluated)\n`);
+                for (const issue of result.coreIssues) {
+                    write(`        ${issue}\n`);
+                }
+                continue;
+            }
+            const noun = result.errors.length === 1 ? "violation" : "violations";
+            write(`FAIL  ${result.label}  (${result.errors.length} ${noun})\n`);
+            if (!quiet && result.matchedRules.length > 0) {
+                write(`        matched rules: ${result.matchedRules.join(", ")}\n`);
+            }
+            writeProfileFindings(result.errors, "        ");
+            if (!quiet) {
+                writeProfileFindings(result.warnings, "        ");
+            }
+        }
+        const noun = summary.events === 1 ? "event" : "events";
+        write(`\n${summary.events} ${noun} checked: ${summary.conforming} conforming, ${summary.violations} with violations, ${summary.notApplicable} not applicable, ${summary.coreInvalid} core-invalid, ${input.failures.length} unreadable\n`);
+        write(`${summary.errors} profile violations, ${summary.warnings} recommendations\n`);
+    }
+    if (input.failures.length > 0) {
+        return EXIT_ERROR;
+    }
+    if (summary.errors > 0 || summary.coreInvalid > 0) {
+        return EXIT_INVALID;
+    }
+    // Only when nothing at all was governed; a mix of conforming and
+    // not-applicable events is a pass.
+    return summary.conforming === 0 && summary.notApplicable > 0 ? EXIT_NOT_APPLICABLE : EXIT_OK;
+}
+export function run(argv) {
+    let parsed;
+    try {
+        parsed = parseArgs({
+            args: [...argv],
+            allowPositionals: true,
+            strict: true,
+            options: {
+                help: { type: "boolean", short: "h", default: false },
+                version: { type: "boolean", default: false },
+                quiet: { type: "boolean", short: "q", default: false },
+                format: { type: "string", default: "text" },
+                profile: { type: "string" },
+            },
+        });
+    }
+    catch (cause) {
+        process.stderr.write(`auditmodel: ${cause.message}\n\n`);
+        process.stderr.write(USAGE);
+        return EXIT_ERROR;
+    }
+    const { values, positionals } = parsed;
+    if (values.version === true) {
+        const validator = createValidator();
+        write(`auditmodel ${toolVersion(validator.schemaPath)} (specification ${SPEC_VERSION}, experimental)\n`);
+        return EXIT_OK;
+    }
+    const command = positionals[0];
+    if (values.help === true || command === undefined || command === "help") {
+        write(USAGE);
+        return command === undefined && values.help !== true ? EXIT_ERROR : EXIT_OK;
+    }
+    const rest = positionals.slice(1);
+    const quiet = values.quiet === true;
+    const format = typeof values.format === "string" ? values.format : "text";
+    if (!OUTPUT_FORMATS.has(format)) {
+        process.stderr.write(`auditmodel: unknown output format "${format}"; expected ${[...OUTPUT_FORMATS].join(" or ")}\n`);
+        return EXIT_ERROR;
+    }
+    if (command === "validate") {
+        return runValidate(rest, quiet);
+    }
+    if (command === "verify-integrity") {
+        return runVerifyIntegrity(rest, quiet);
+    }
+    if (command === "verify-chain") {
+        return runVerifyChain(rest, quiet);
+    }
+    if (command === "lint-privacy") {
+        return runLintPrivacy(rest, quiet, format);
+    }
+    if (command === "check-profile") {
+        return runCheckProfile(rest, quiet, format, typeof values.profile === "string" ? values.profile : undefined);
+    }
+    if (PLANNED_COMMANDS.has(command)) {
+        process.stderr.write(`auditmodel: "${command}" is planned for a future specification version and is not implemented in v${SPEC_VERSION}\n`);
+        return EXIT_ERROR;
+    }
+    process.stderr.write(`auditmodel: unknown command "${command}"\n\n`);
+    process.stderr.write(USAGE);
+    return EXIT_ERROR;
+}
+/**
+ * True when this module is the process entry point. Real paths are compared so
+ * that execution through a `node_modules/.bin` shim is still recognised.
+ */
+function isDirectInvocation() {
+    const entry = process.argv[1];
+    if (entry === undefined) {
+        return false;
+    }
+    try {
+        return realpathSync(entry) === realpathSync(fileURLToPath(import.meta.url));
+    }
+    catch {
+        return true;
+    }
+}
+if (isDirectInvocation()) {
+    process.exitCode = run(process.argv.slice(2));
+}
+//# sourceMappingURL=cli.js.map

package/dist/conformance/src/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../conformance/src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAkB,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAA+C,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAwB,MAAM,6BAA6B,CAAC;AAEjF,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAuB,MAAM,qBAAqB,CAAC;AAEnF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC;AACzB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAC5B;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAEjC,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAEnD,2FAA2F;AAC3F,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAErD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjD,MAAM,KAAK,GAAG,kEAAkE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4C3F,CAAC;AAEF,SAAS,WAAW,CAAC,UAAkB;IACrC,qEAAqE;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAEhF,CAAC;QACF,OAAO,QAAQ,CAAC,OAAO,IAAI,YAAY,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAC5F,CAAC;AAED,2FAA2F;AAC3F,SAAS,YAAY,CAAC,QAAuB;IAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,QAA4B,EAAE,MAAc;IACjE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC;QACtE,KAAK,CAAC,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC,OAAO,MAAM,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACxC,KAAK,CAAC,GAAG,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAmC,EAAE,MAAc;IAC/E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CACH,GAAG,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,CAAC,OAAO,IAAI,CAClH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAA8B,EAAE,MAAc;IACjE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAsB,EAAE,MAAc;IACxD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,GAAG,MAAM,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACrC,KAAK,CAAC,GAAG,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;AACH,CAAC;AAQD;;;GAGG;AACH,SAAS,SAAS,CAChB,MAAyB,EACzB,OAAe,EACf,KAAc;IAEd,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,OAAO,8CAA8C,CAAC,CAAC;QAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAgB,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;QAClE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACzE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,SAAoB,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,eAAe,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAgB,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;QAClE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,CAAC,WAAW,SAAS,CAAC,QAAQ,KAAK,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAwC;IAClE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB,EAAE,KAAc;IAC5D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEpC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE9D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC,CAAC;YACb,KAAK,CAAC,SAAS,KAAK,KAAK,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9C,KAAK,CACH,KAAK,KAAK,IAAI,IAAI,aAAa,KAAK,WAAW,OAAO,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,eAAe,CACzG,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAyB,EAAE,KAAc;IACnE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEpC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;gBAC1B,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,CAAC;YACZ,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACzC,CAAC;YACD,sEAAsE;YACtE,wBAAwB;YACxB,aAAa,CACX,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAChC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;aACpE,CAAC,CAAC,EACH,UAAU,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9C,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,aAAa,QAAQ,cAAc,MAAM,WAAW,CAAC,CAAC;IAE9E,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB,EAAE,KAAc;IAC/D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;IACxD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAsB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpE,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC;QAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;KACtB,CAAC,CAAC,CAAC;IAEJ,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAEtD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACxD,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,KAAK,GACT,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;YACnE,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,GAAG,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QAEtD,KAAK,CAAC,SAAS,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QAClC,KAAK,CAAC,gBAAgB,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;QAC5C,KAAK,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC;QAEjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,WAAW,CACT,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EACpE,IAAI,CACL,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,UAAU,CAAC,CAAC;YAClB,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClE,KAAK,CACH,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,aAAa,MAAM,YAAY,MAAM,YAAY,MAAM,CAAC,UAAU,YAAY,CACnH,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACzE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB,EAAE,KAAc,EAAE,MAAc;IAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;IAC7E,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CACpE,CAAC;IACF,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAEnC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,yBAAyB;YAC/B,WAAW,EAAE,YAAY;YACzB,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ;YACnC,OAAO;YACP,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5C,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,IAAI,EAAE,MAAM,CAAC,KAAK;gBAClB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpE,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,qDAAqD;gBACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACxC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CAAC,CAAC;aACJ,CAAC,CAAC;SACJ,CAAC;QACF,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;gBACnC,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBACvC,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,gDAAgD,CAAC,CAAC;gBAC7E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBACxC,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;gBAC9B,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;YACnE,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC;YACtE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpC,KAAK,CACH,WAAW,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,MAAM,gBAAgB,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,IAAI,CAC5G,CAAC;gBACF,KAAK,CAAC,aAAa,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;gBACtC,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACvC,KAAK,CAAC,6BAA6B,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC5D,KAAK,CACH,KAAK,OAAO,CAAC,MAAM,IAAI,SAAS,aAAa,OAAO,CAAC,KAAK,WAAW,OAAO,CAAC,YAAY,mBAAmB,OAAO,CAAC,aAAa,oBAAoB,MAAM,CAAC,QAAQ,CAAC,MAAM,eAAe,CAC3L,CAAC;QACF,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;QACjE,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QACpE,KAAK,CACH,GAAG,OAAO,CAAC,QAAQ,YAAY,WAAW,KAAK,QAAQ,cAAc,IAAI,UAAU,MAAM,YAAY,GAAG,SAAS,IAAI,SAAS,CAC/H,CAAC;QAEF,IAAI,OAAO,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC9D,KAAK,CACH,8CAA8C,OAAO,CAAC,aAAa,IAAI,IAAI,qGAAqG,CACjL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,0EAA0E;IAC1E,2EAA2E;IAC3E,oEAAoE;IACpE,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,SAAS,eAAe,CACtB,MAAyB,EACzB,KAAc,EACd,MAAc,EACd,WAA+B;IAE/B,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4EAA4E,iBAAiB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC/G,CAAC;QACF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC/C,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAC/E,CAAC;IACF,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,KAAK,CACH,GAAG,IAAI,CAAC,SAAS,CACf;YACE,IAAI,EAAE,0BAA0B;YAChC,WAAW,EAAE,YAAY;YACzB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ;YAClC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;YACjF,OAAO;YACP,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC3C,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC,CAAC;YACH,OAAO;SACR,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CACN,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,YAAY,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,OAAO,CAAC,CAAC;QAC/E,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACnC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACtE,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACpD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,kDAAkD,CAAC,CAAC;gBACjF,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBACrC,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,iDAAiD,CAAC,CAAC;gBAC9E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtC,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;gBAC9B,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;YACrE,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC;YACpE,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7C,KAAK,CAAC,0BAA0B,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtE,CAAC;YACD,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvD,KAAK,CACH,KAAK,OAAO,CAAC,MAAM,IAAI,IAAI,aAAa,OAAO,CAAC,UAAU,gBAAgB,OAAO,CAAC,UAAU,qBAAqB,OAAO,CAAC,aAAa,oBAAoB,OAAO,CAAC,WAAW,kBAAkB,KAAK,CAAC,QAAQ,CAAC,MAAM,eAAe,CACpO,CAAC;QACF,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,wBAAwB,OAAO,CAAC,QAAQ,oBAAoB,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,iEAAiE;IACjE,mCAAmC;IACnC,OAAO,OAAO,CAAC,UAAU,KAAK,CAAC,IAAI,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAuB;IACzC,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;YACjB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YACf,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE;gBACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;gBACrD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC5C,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;gBACtD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;gBAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC5B;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAgB,KAAe,CAAC,OAAO,MAAM,CAAC,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAEvC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;QACpC,KAAK,CACH,cAAc,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,mBAAmB,YAAY,mBAAmB,CAClG,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAE/B,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACxE,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,OAAO,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAE1E,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,MAAM,eAAe,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAChG,CAAC;QACF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;QACnC,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QAC/B,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QAC/B,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAChC,OAAO,eAAe,CACpB,IAAI,EACJ,KAAK,EACL,MAAM,EACN,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAChE,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,OAAO,8EAA8E,YAAY,IAAI,CACtH,CAAC;QACF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,OAAO,OAAO,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,IAAI,kBAAkB,EAAE,EAAE,CAAC;IACzB,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/conformance/src/format-errors.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Translation of raw JSON Schema validation errors into stable, human readable
+ * issues. Every issue carries a JSON Pointer so that a reader can locate the
+ * offending value inside the audit event without guessing.
+ */
+import type { ErrorObject } from "ajv";
+export interface ValidationIssue {
+    /** JSON Pointer to the offending location inside the event. `/` is the event root. */
+    readonly path: string;
+    /** Human readable explanation of the failure. */
+    readonly message: string;
+    /** JSON Schema keyword that produced the failure. */
+    readonly keyword: string;
+    /** Additional context such as the allowed values or the expected pattern. */
+    readonly detail?: string;
+}
+/** Converts validator errors into issues, deduplicating identical entries. */
+export declare function toIssues(errors: readonly ErrorObject[] | null | undefined): ValidationIssue[];
+/** Renders issues as indented report lines. */
+export declare function formatIssues(issues: readonly ValidationIssue[], indent?: string): string;