@oxyhq/crowdsource-contracts 0.2.0 → 0.4.0

package/dist/esm/reputation-events.js

@@ -0,0 +1,125 @@
+/**
+ * The internal reputation event (§11.5, §11.6, §11.7).
+ *
+ * This is the only thing CrowdSource ever sends toward Oxy Trust, and it is a
+ * statement, not an instruction. "CrowdSource does not write to reputation
+ * collections. It publishes an authenticated internal event" (§11.5), and Oxy
+ * Trust's own consequence engine decides what, if anything, follows. Nothing in
+ * this payload names points, a tier, a strike or a standing: an application —
+ * and CrowdSource on its behalf — never chooses an Oxy reputation figure.
+ *
+ * Three of §11.7's eight pre-effect validations are structural, and all three
+ * are moved into the type rather than left to a runtime check that a future
+ * refactor can drop:
+ *
+ *   * §11.7.4 — `subject.bindingProofId` is required. "No binding proof, no Oxy
+ *     Trust effect" becomes an event that cannot be constructed.
+ *   * §11.7.5 — a finding's scope must be `oxy_network` or `identity_integrity`.
+ *     `application_local` cannot appear here at all, which is §6.5's rule that
+ *     a local restriction does not become a global sanction, enforced at the
+ *     wire rather than by the receiver's diligence.
+ *   * §11.7.8 — the decision may not be superseded or corrected, so the status
+ *     enum has only the two values that may carry an effect (§11.7.3).
+ *
+ * The remaining five are stateful — who signed it, whether this event was seen
+ * before, whether the incident already produced an equivalent effect — and stay
+ * with the bridge.
+ *
+ * This is the one payload in the package that is `.strict()` in the OUTBOUND
+ * direction. §10.11's rule about unknown fields has an explicit exception for
+ * "where the schema forbids them for safety", and this is that case twice over:
+ * a finding here deliberately carries no `resourceIds` and no free text, so
+ * that nothing about the reviewed material reaches a reputation ledger or a
+ * signed attestation, and an unrecognised field is exactly how that would
+ * happen. Forward compatibility is handled by the `.v1` in the event type.
+ */
+import { z } from 'zod';
+import { CONTRACT_LIMITS, IdentifierSchema, Sha256DigestSchema } from './primitives.js';
+import { PrincipalTypeSchema } from './case-envelope.js';
+import { ReputationPolicyVersionsSchema } from './policies.js';
+import { FindingAttributionSchema, ReputationEligibleFindingScopeSchema, SeveritySchema, TaxonomyCodeSchema, } from './taxonomy.js';
+/**
+ * §11.6 names one event type. §11.5 names four bridge operations — apply,
+ * finalize, reverse, reconcile — so siblings are expected, but the plan does
+ * not write them and they are not invented here. Adding one is additive: a new
+ * literal and a new variant, with the `.v1` suffix carrying the version.
+ */
+export const MODERATION_DECISION_FINALIZED_EVENT_TYPE = 'moderation.decision.finalized.v1';
+/**
+ * §11.7.3 and §11.7.8 together: an effect may follow a final decision or,
+ * where policy allows, a provisional one — and never a superseded or corrected
+ * one. Those two states are absent from this enum rather than rejected by a
+ * refinement, so the impossibility is visible in the type.
+ */
+export const REPUTATION_EVENT_DECISION_STATUSES = ['provisional', 'final'];
+export const ReputationEventDecisionStatusSchema = z.enum(REPUTATION_EVENT_DECISION_STATUSES);
+/**
+ * Who the effect would land on (§11.6 `subject`).
+ *
+ * `bindingProofId` is required, unconditionally — see §11.7.4 above. The
+ * envelope's `principalBindings` make the same proof optional for non-Oxy
+ * principal types, because those can never reach this event; here there is
+ * nothing to be lenient about.
+ */
+export const ReputationEventSubjectSchema = z.strictObject({
+    principalType: PrincipalTypeSchema,
+    principalId: IdentifierSchema,
+    bindingProofId: IdentifierSchema,
+});
+/**
+ * A finding as Oxy Trust sees it (§11.6).
+ *
+ * Deliberately narrower than a `DecisionFinding`: no `resourceIds`, no policy
+ * rule ids, no text. Oxy Trust needs to know what was confirmed, how serious it
+ * was, how far it reaches and whose conduct it was — it does not need to know
+ * which piece of content it happened on, and §13.5's minimisation plus the
+ * invariant that sensitive content never appears in logs or public attestations
+ * mean it must not be told.
+ *
+ * `attribution` is required here where it is optional on a decision finding: an
+ * effect must land on somebody, and a finding that attributes nothing has
+ * nothing to contribute to this event.
+ */
+export const ReputationEventFindingSchema = z.strictObject({
+    code: TaxonomyCodeSchema,
+    severity: SeveritySchema,
+    scope: ReputationEligibleFindingScopeSchema,
+    attribution: FindingAttributionSchema,
+});
+/**
+ * `moderation.decision.finalized.v1` (§11.6).
+ *
+ * `incidentId` is what makes "one penalty per incident" enforceable: it is the
+ * first component of the effect's idempotency key (Appendix D:
+ * `incidentId + principalId + effectType + decisionRevision`), so the same
+ * incident reaching the bridge twice — from a replay, from a redelivery, from
+ * two cases that were merged — produces one effect.
+ *
+ * `proofHash` binds the event to the decision it reports, so an effect can be
+ * explained and, if the decision is later corrected, reversed against the exact
+ * revision that caused it.
+ */
+export const ModerationDecisionFinalizedEventSchema = z.strictObject({
+    eventId: IdentifierSchema,
+    type: z.literal(MODERATION_DECISION_FINALIZED_EVENT_TYPE),
+    caseId: IdentifierSchema,
+    incidentId: IdentifierSchema,
+    decisionId: IdentifierSchema,
+    decisionRevision: z.number().int().positive(),
+    applicationId: IdentifierSchema,
+    subject: ReputationEventSubjectSchema,
+    findings: z.array(ReputationEventFindingSchema).min(1).max(CONTRACT_LIMITS.FINDINGS_MAX),
+    decisionStatus: ReputationEventDecisionStatusSchema,
+    policyVersions: ReputationPolicyVersionsSchema,
+    proofHash: Sha256DigestSchema,
+});
+/**
+ * Every reputation event CrowdSource emits.
+ *
+ * A union of one today. It exists so consumers switch on `type` from the start
+ * and adding §11.5's remaining operations does not change how they are written.
+ */
+export const ReputationEventSchema = z.discriminatedUnion('type', [
+    ModerationDecisionFinalizedEventSchema,
+]);
+//# sourceMappingURL=reputation-events.js.map

package/dist/esm/reputation-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reputation-events.js","sourceRoot":"","sources":["../../src/reputation-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EACL,wBAAwB,EACxB,oCAAoC,EACpC,cAAc,EACd,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,kCAAkC,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAU,CAAC;AACpF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;AAG9F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,aAAa,EAAE,mBAAmB;IAClC,WAAW,EAAE,gBAAgB;IAC7B,cAAc,EAAE,gBAAgB;CACjC,CAAC,CAAC;AAGH;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,cAAc;IACxB,KAAK,EAAE,oCAAoC;IAC3C,WAAW,EAAE,wBAAwB;CACtC,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,YAAY,CAAC;IACnE,OAAO,EAAE,gBAAgB;IACzB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wCAAwC,CAAC;IACzD,MAAM,EAAE,gBAAgB;IACxB,UAAU,EAAE,gBAAgB;IAC5B,UAAU,EAAE,gBAAgB;IAC5B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7C,aAAa,EAAE,gBAAgB;IAC/B,OAAO,EAAE,4BAA4B;IACrC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC;IACxF,cAAc,EAAE,mCAAmC;IACnD,cAAc,EAAE,8BAA8B;IAC9C,SAAS,EAAE,kBAAkB;CAC9B,CAAC,CAAC;AAKH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,sCAAsC;CACvC,CAAC,CAAC"}

package/dist/esm/resources.js

@@ -0,0 +1,455 @@
+/**
+ * Resources and relations — the universal content unit (§5.2–§5.7).
+ *
+ * "Applications send data, never executable code" (§5.2). Everything in this
+ * module follows from that one sentence:
+ *
+ *   * The resource union is CLOSED and discriminated on `type`, and each
+ *     variant declares exactly which fields it may carry. There is no free-form
+ *     branch, so there is no place to put a rendering instruction.
+ *   * Every object is `.strict()`. In the outbound direction an unknown field
+ *     is harmless forward compatibility (§10.11); inbound it is not. A field
+ *     that is silently dropped is context an application believes it sent and a
+ *     jury never sees — which is how a case gets decided on incomplete material
+ *     — and a field that is silently kept is a rendering input nobody reviewed.
+ *     §10.11 makes exactly this exception: unknown fields must not break
+ *     clients "except where the schema forbids them for safety".
+ *   * A media type must agree with its resource type, so an `image` cannot
+ *     declare `text/html` and be handed to something that trusts the label.
+ *   * §5.7 custom payloads are bounded JSON with no `$`-prefixed keys, which
+ *     removes every JSON Schema reference mechanism at once — `$ref` to a
+ *     remote document IS the "remote component" §5.7 forbids, and resolving one
+ *     is an SSRF against CrowdSource itself.
+ *
+ * What is deliberately NOT here: any filter on the CONTENT of text fields. The
+ * material under review is hostile by definition — a harassment report quotes
+ * the harassment, a phishing report quotes the phishing link. A lexical
+ * blocklist would reject the evidence and protect nothing, because the contract
+ * has no field whose value is ever interpreted as markup or code.
+ */
+import { z } from 'zod';
+import { CONTRACT_LIMITS, CustomPayloadSchema, HttpUrlSchema, IdentifierSchema, LanguageTagSchema, MetadataBagSchema, MimeTypeSchema, OxyFileIdSchema, Sha256DigestSchema, TimestampSchema, } from './primitives.js';
+import { PolicyVersionSchema } from './policies.js';
+import { SensitivityHintSchema } from './taxonomy.js';
+/** A resource id, unique within one envelope (§5.2 `id`). */
+export const ResourceIdSchema = IdentifierSchema;
+/**
+ * A pseudonymous reference to an actor, resolved within one envelope.
+ *
+ * Never a real identity: §13.5 requires a pseudonymous principal wherever one
+ * suffices. `principalBindings` is the only place a ref is tied to anything,
+ * and even there it is tied to a binding proof id, not to a name.
+ */
+export const PrincipalRefSchema = IdentifierSchema;
+/** §5.2 `role`: why this resource is in the case. */
+export const RESOURCE_ROLES = [
+    'subject',
+    'attachment',
+    'context',
+    'parent',
+    'quoted',
+    'evidence',
+    'metadata',
+    'policy_context',
+];
+export const ResourceRoleSchema = z.enum(RESOURCE_ROLES);
+/** §5.3 standard resource types. */
+export const RESOURCE_TYPES = [
+    'text',
+    'image',
+    'video',
+    'audio',
+    'document',
+    'link',
+    'profile',
+    'conversation',
+    'listing',
+    'location',
+    'metadata',
+    'custom',
+];
+export const ResourceTypeSchema = z.enum(RESOURCE_TYPES);
+/** §5.3 text formatting. Never HTML: `markdown_subset` is a subset for a reason. */
+export const TEXT_FORMATTINGS = ['plain', 'markdown_subset'];
+export const TextFormattingSchema = z.enum(TEXT_FORMATTINGS);
+/**
+ * A reference to bytes held outside the envelope (§5.2 `asset`).
+ *
+ * **`fileId` is where the bytes are. `url` is where they came from.** Those are
+ * not alternatives, and the earlier contract encoding them as "exactly one of
+ * `uploadId` or `url`" is what left an integrator with no safe way to attach an
+ * image at all: the `uploadId` branch needed a presigned upload route that was
+ * superseded by the Oxy media chokepoint before it was ever built, and the `url`
+ * branch put a URL on the reporting application's own host in front of a
+ * reviewer — breaking §9.1's branding rule and the chokepoint rule at once.
+ *
+ * So `fileId` is required and `url` is optional provenance:
+ *
+ *   * **`fileId`** — a bare Oxy file id. The application uploads the bytes
+ *     through the Oxy media chokepoint with its own Oxy credentials and passes
+ *     the id. That is why CrowdSource serves no upload route of its own.
+ *   * **`url`** — a PROVENANCE RECORD, and never a fetch target. A third-party
+ *     URL is not wrong the way a first-party one is (a federated post's image
+ *     genuinely lives elsewhere), but no reviewer client may dereference it:
+ *     fetching it would tell that host exactly when its content is under review,
+ *     which lets the reported party correlate reviewer accesses, and it would
+ *     deliver bytes live rather than the pinned ones §5.6 requires.
+ *
+ * `sha256` stays required, and requiring `fileId` alongside it costs an
+ * integrator nothing new — an application able to compute that digest already
+ * holds the bytes. What changes is that it puts bytes it already has somewhere a
+ * reviewer can read safely, instead of pointing at its own host.
+ */
+export const AssetRefSchema = z.strictObject({
+    /** Bare Oxy file id. The only source of the bytes a jury sees. */
+    fileId: OxyFileIdSchema,
+    /** Where the material was found. Recorded, never fetched — see above. */
+    url: HttpUrlSchema.optional(),
+    mimeType: MimeTypeSchema,
+    sha256: Sha256DigestSchema,
+    sizeBytes: z.number().int().positive().optional(),
+    width: z.number().int().positive().optional(),
+    height: z.number().int().positive().optional(),
+    durationSeconds: z.number().positive().optional(),
+});
+const mediaTypeMismatch = (ctx, mimeType, allowedPrefixes) => {
+    if (!allowedPrefixes.some((prefix) => mimeType.startsWith(prefix))) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['asset', 'mimeType'],
+            message: `must be one of ${allowedPrefixes.join(', ')}* for this resource type`,
+        });
+    }
+};
+const resourceBaseShape = {
+    id: ResourceIdSchema,
+    role: ResourceRoleSchema,
+    /** §5.2: BCP 47 "where applicable" — a text of unknown language is real. */
+    language: LanguageTagSchema.optional(),
+    /** §5.2: the moment of the ORIGINAL object, not of the report. */
+    createdAt: TimestampSchema.optional(),
+    authorPrincipalRef: PrincipalRefSchema.optional(),
+    /** §5.2: a prior classification of exposure, never shown as a verdict. */
+    sensitivity: SensitivityHintSchema.optional(),
+};
+/**
+ * `sha256` is required on every resource whose content travels inline, and
+ * optional on asset-backed ones where `asset.sha256` carries it instead.
+ *
+ * That split is not a preference; it is what both reference envelopes do.
+ * Appendix A's `res_post` and `res_parent` carry a top-level digest and its
+ * `res_image` carries the digest on the asset only. §5.6 asks for "SHA 256 of
+ * each resource", so one of the two is always present.
+ */
+const inlineResourceShape = { ...resourceBaseShape, sha256: Sha256DigestSchema };
+const assetResourceShape = { ...resourceBaseShape, sha256: Sha256DigestSchema.optional() };
+/**
+ * The `data` of each resource type, named.
+ *
+ * Extracted so the reviewer surface (`reviewer-surface.ts`) can build its own
+ * resource union — same content, no `sha256`, a media handle instead of an asset
+ * locator — out of THESE schemas rather than restating twelve content shapes.
+ * A second copy would drift, and the direction it would drift in is a jury shown
+ * less than the application sent.
+ */
+export const TextResourceDataSchema = z.strictObject({
+    text: z.string().min(1).max(CONTRACT_LIMITS.TEXT_RESOURCE_MAX_LENGTH),
+    formatting: TextFormattingSchema.optional(),
+});
+const TextResourceSchema = z.strictObject({
+    ...inlineResourceShape,
+    type: z.literal('text'),
+    data: TextResourceDataSchema,
+});
+export const VideoResourceDataSchema = z.strictObject({
+    timeRange: z
+        .strictObject({
+        startSeconds: z.number().nonnegative(),
+        endSeconds: z.number().positive(),
+    })
+        .refine((range) => range.endSeconds > range.startSeconds, {
+        message: 'endSeconds must be greater than startSeconds',
+        path: ['endSeconds'],
+    })
+        .optional(),
+});
+export const AudioResourceDataSchema = z.strictObject({
+    transcript: z.string().max(CONTRACT_LIMITS.EXTRACTED_TEXT_MAX_LENGTH).optional(),
+});
+export const DocumentResourceDataSchema = z.strictObject({
+    title: z.string().min(1).max(CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH),
+    extractedText: z.string().max(CONTRACT_LIMITS.EXTRACTED_TEXT_MAX_LENGTH).optional(),
+});
+const ImageResourceSchema = z
+    .strictObject({
+    ...assetResourceShape,
+    type: z.literal('image'),
+    asset: AssetRefSchema,
+})
+    .superRefine((resource, ctx) => mediaTypeMismatch(ctx, resource.asset.mimeType, ['image/']));
+const VideoResourceSchema = z
+    .strictObject({
+    ...assetResourceShape,
+    type: z.literal('video'),
+    asset: AssetRefSchema,
+    data: VideoResourceDataSchema.optional(),
+})
+    .superRefine((resource, ctx) => {
+    mediaTypeMismatch(ctx, resource.asset.mimeType, ['video/']);
+    if (resource.asset.durationSeconds === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['asset', 'durationSeconds'],
+            message: 'a video asset must declare durationSeconds',
+        });
+    }
+});
+const AudioResourceSchema = z
+    .strictObject({
+    ...assetResourceShape,
+    type: z.literal('audio'),
+    asset: AssetRefSchema,
+    data: AudioResourceDataSchema.optional(),
+})
+    .superRefine((resource, ctx) => {
+    mediaTypeMismatch(ctx, resource.asset.mimeType, ['audio/']);
+    if (resource.asset.durationSeconds === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['asset', 'durationSeconds'],
+            message: 'an audio asset must declare durationSeconds',
+        });
+    }
+});
+const DocumentResourceSchema = z
+    .strictObject({
+    ...assetResourceShape,
+    type: z.literal('document'),
+    asset: AssetRefSchema,
+    data: DocumentResourceDataSchema,
+})
+    .superRefine((resource, ctx) => mediaTypeMismatch(ctx, resource.asset.mimeType, ['application/', 'text/']));
+export const LinkResourceDataSchema = z.strictObject({
+    url: HttpUrlSchema,
+    title: z.string().max(CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH).optional(),
+    resolvedHost: z
+        .string()
+        .max(253)
+        .regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/, 'must be a hostname')
+        .optional(),
+    snapshot: z.string().max(CONTRACT_LIMITS.EXTRACTED_TEXT_MAX_LENGTH).optional(),
+});
+const LinkResourceSchema = z.strictObject({
+    ...inlineResourceShape,
+    type: z.literal('link'),
+    data: LinkResourceDataSchema,
+});
+export const ProfileResourceDataSchema = z.strictObject({
+    /**
+     * Every field is optional on purpose. A federated or unresolved actor
+     * routinely has no display name, and requiring one would push applications
+     * into synthesising a name — the opposite of what the profile-identity rule
+     * in the ecosystem instructions asks for.
+     */
+    displayName: z.string().max(CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH).optional(),
+    bio: z.string().max(CONTRACT_LIMITS.LONG_TEXT_MAX_LENGTH).optional(),
+    /** An `image` resource in the same envelope. */
+    avatarRef: ResourceIdSchema.optional(),
+    claims: MetadataBagSchema.optional(),
+});
+const ProfileResourceSchema = z.strictObject({
+    ...inlineResourceShape,
+    type: z.literal('profile'),
+    data: ProfileResourceDataSchema,
+});
+export const ConversationResourceDataSchema = z.strictObject({
+    /**
+     * Ordered (§5.3). §13.5 asks for five messages around the incident rather
+     * than the whole thread, which is why this is a bounded list of ids the
+     * application chose, not a pointer to a conversation.
+     */
+    messageResourceIds: z
+        .array(ResourceIdSchema)
+        .min(1)
+        .max(CONTRACT_LIMITS.CONVERSATION_MESSAGES_MAX),
+});
+const ConversationResourceSchema = z.strictObject({
+    ...inlineResourceShape,
+    type: z.literal('conversation'),
+    data: ConversationResourceDataSchema,
+});
+export const ListingResourceDataSchema = z.strictObject({
+    title: z.string().min(1).max(CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH),
+    description: z.string().max(CONTRACT_LIMITS.LONG_TEXT_MAX_LENGTH).optional(),
+    price: z.number().finite().nonnegative().optional(),
+    currency: z
+        .string()
+        .regex(/^[A-Z]{3}$/, 'must be an ISO 4217 alphabetic code')
+        .optional(),
+    sellerRef: PrincipalRefSchema.optional(),
+    mediaRefs: z.array(ResourceIdSchema).max(CONTRACT_LIMITS.LISTING_MEDIA_REFS_MAX).optional(),
+});
+const ListingResourceSchema = z
+    .strictObject({
+    ...inlineResourceShape,
+    type: z.literal('listing'),
+    data: ListingResourceDataSchema,
+})
+    .superRefine((resource, ctx) => {
+    const hasPrice = resource.data.price !== undefined;
+    const hasCurrency = resource.data.currency !== undefined;
+    if (hasPrice !== hasCurrency) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['data', hasPrice ? 'currency' : 'price'],
+            message: 'price and currency must travel together',
+        });
+    }
+});
+/** Two decimal places ≈ 1.1 km — coarse enough not to locate a person. */
+const COARSE_COORDINATE_DECIMALS = 2;
+const isCoarse = (value) => Number.isInteger(value * 10 ** COARSE_COORDINATE_DECIMALS);
+export const LocationResourceDataSchema = z.strictObject({
+    label: z.string().max(CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH).optional(),
+    latitude: z.number().min(-90).max(90).optional(),
+    longitude: z.number().min(-180).max(180).optional(),
+});
+const LocationResourceSchema = z
+    .strictObject({
+    ...inlineResourceShape,
+    type: z.literal('location'),
+    data: LocationResourceDataSchema,
+})
+    .superRefine((resource, ctx) => {
+    const { label, latitude, longitude } = resource.data;
+    if (label === undefined && latitude === undefined && longitude === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['data'],
+            message: 'a location must carry a label, coordinates, or both',
+        });
+    }
+    if ((latitude === undefined) !== (longitude === undefined)) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['data', latitude === undefined ? 'latitude' : 'longitude'],
+            message: 'latitude and longitude must travel together',
+        });
+    }
+    /**
+     * §5.3 says "coarse location or place label" and §13.5 requires precise
+     * location to be redacted before community review. Precision is a property
+     * of the number itself, so the contract can refuse the precise value rather
+     * than trusting every downstream renderer to round it.
+     */
+    if (latitude !== undefined && !isCoarse(latitude)) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['data', 'latitude'],
+            message: `must be coarse: at most ${COARSE_COORDINATE_DECIMALS} decimal places`,
+        });
+    }
+    if (longitude !== undefined && !isCoarse(longitude)) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['data', 'longitude'],
+            message: `must be coarse: at most ${COARSE_COORDINATE_DECIMALS} decimal places`,
+        });
+    }
+});
+export const MetadataResourceDataSchema = MetadataBagSchema.refine((bag) => Object.keys(bag).length >= 1, { message: 'a metadata resource must carry at least one field' });
+const MetadataResourceSchema = z.strictObject({
+    ...inlineResourceShape,
+    type: z.literal('metadata'),
+    data: MetadataResourceDataSchema,
+});
+const CustomResourceSchema = z.strictObject({
+    ...inlineResourceShape,
+    type: z.literal('custom'),
+    /** The schema the application registered for this shape (§5.7). */
+    schemaId: IdentifierSchema,
+    /**
+     * Validated twice: structurally here, then against the registered JSON Schema
+     * at ingress. The registered schema decides what the fields MEAN; this decides
+     * that they are fields at all.
+     */
+    payload: CustomPayloadSchema,
+});
+/**
+ * One resource (§5.2).
+ *
+ * A discriminated union rather than one object with everything optional: the
+ * latter would accept an `image` with inline text and no asset, which is not a
+ * resource anybody can review.
+ */
+export const ResourceSchema = z.discriminatedUnion('type', [
+    TextResourceSchema,
+    ImageResourceSchema,
+    VideoResourceSchema,
+    AudioResourceSchema,
+    DocumentResourceSchema,
+    LinkResourceSchema,
+    ProfileResourceSchema,
+    ConversationResourceSchema,
+    ListingResourceSchema,
+    LocationResourceSchema,
+    MetadataResourceSchema,
+    CustomResourceSchema,
+]);
+/** §5.5 relation types. */
+export const RELATION_TYPES = [
+    'has_attachment',
+    'replies_to',
+    'quotes',
+    'authored_by',
+    'contextualizes',
+    'previous_version',
+    'contains',
+    'refers_to',
+];
+export const RelationTypeSchema = z.enum(RELATION_TYPES);
+/**
+ * Relation types whose `to` names a principal rather than a resource.
+ *
+ * §5.5 defines `authored_by` as "a resource was created by a principal", so its
+ * target is a `principalRef`. Every other relation in the table joins two
+ * resources. No example in the plan exercises `authored_by`, so this reading is
+ * recorded here rather than assumed: it is what makes §5.5's "the backend must
+ * validate that every referenced id exists in the envelope" checkable at all,
+ * since the two id spaces are separate.
+ */
+export const PRINCIPAL_TARGETED_RELATION_TYPES = ['authored_by'];
+/**
+ * A relation (§5.5).
+ *
+ * `from` and `to` are only shape-checked here. Whether they RESOLVE is decided
+ * by `CaseEnvelopeSchema`, which is the smallest scope that can see both the
+ * resource list and the principal list.
+ */
+export const RelationSchema = z.strictObject({
+    from: ResourceIdSchema,
+    type: RelationTypeSchema,
+    to: IdentifierSchema,
+});
+/**
+ * A custom resource schema an application registers (§5.7).
+ *
+ * `jsonSchema` reuses the custom-payload grammar, which forbids `$`-prefixed
+ * keys. That single restriction removes `$ref`, `$dynamicRef`, `$recursiveRef`
+ * and `$id` in one move — every mechanism by which a registered schema could
+ * point at a document CrowdSource would then have to fetch. §5.7's "no remote
+ * components" is not a rendering rule alone; a remote `$ref` is also an SSRF
+ * with a tenant holding the pen.
+ *
+ * The cost is `$defs`, `$schema` and `$comment`, which flat custom-field
+ * schemas do not need. Recursive tenant schemas are not supported and are not
+ * meant to be.
+ */
+export const ResourceSchemaRegistrationSchema = z.strictObject({
+    schemaId: IdentifierSchema,
+    version: PolicyVersionSchema,
+    title: z.string().min(1).max(CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH),
+    description: z.string().max(CONTRACT_LIMITS.LONG_TEXT_MAX_LENGTH).optional(),
+    jsonSchema: CustomPayloadSchema,
+});
+//# sourceMappingURL=resources.js.map

package/dist/esm/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../src/resources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEtD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAGjD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAGnD,qDAAqD;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS;IACT,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,UAAU;IACV,gBAAgB;CACR,CAAC;AACX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGzD,oCAAoC;AACpC,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,UAAU;IACV,MAAM;IACN,SAAS;IACT,cAAc;IACd,SAAS;IACT,UAAU;IACV,UAAU;IACV,QAAQ;CACA,CAAC;AACX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGzD,oFAAoF;AACpF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAU,CAAC;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAG7D;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3C,kEAAkE;IAClE,MAAM,EAAE,eAAe;IACvB,yEAAyE;IACzE,GAAG,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,kBAAkB;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAGH,MAAM,iBAAiB,GAAG,CACxB,GAAoB,EACpB,QAAgB,EAChB,eAAkC,EAC5B,EAAE;IACR,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;YAC3B,OAAO,EAAE,kBAAkB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B;SAChF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACxB,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,kBAAkB;IACxB,4EAA4E;IAC5E,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACtC,kEAAkE;IAClE,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACjD,0EAA0E;IAC1E,WAAW,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAC9C,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,EAAE,GAAG,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;AACjF,MAAM,kBAAkB,GAAG,EAAE,GAAG,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,wBAAwB,CAAC;IACrE,UAAU,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IACxC,GAAG,mBAAmB;IACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,IAAI,EAAE,sBAAsB;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,SAAS,EAAE,CAAC;SACT,YAAY,CAAC;QACZ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,YAAY,EAAE;QACxD,OAAO,EAAE,8CAA8C;QACvD,IAAI,EAAE,CAAC,YAAY,CAAC;KACrB,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,YAAY,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC;IACnE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;CACpF,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC;KAC1B,YAAY,CAAC;IACZ,GAAG,kBAAkB;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,KAAK,EAAE,cAAc;CACtB,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAE/F,MAAM,mBAAmB,GAAG,CAAC;KAC1B,YAAY,CAAC;IACZ,GAAG,kBAAkB;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,KAAK,EAAE,cAAc;IACrB,IAAI,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC;YAClC,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,CAAC;KAC1B,YAAY,CAAC;IACZ,GAAG,kBAAkB;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,KAAK,EAAE,cAAc;IACrB,IAAI,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC;YAClC,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,sBAAsB,GAAG,CAAC;KAC7B,YAAY,CAAC;IACZ,GAAG,kBAAkB;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,KAAK,EAAE,cAAc;IACrB,IAAI,EAAE,0BAA0B;CACjC,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAC7B,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAC3E,CAAC;AAEJ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,GAAG,EAAE,aAAa;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACvE,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,mEAAmE,EAAE,oBAAoB,CAAC;SAChG,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;CAC/E,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IACxC,GAAG,mBAAmB;IACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,IAAI,EAAE,sBAAsB;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD;;;;;OAKG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IAC7E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACpE,gDAAgD;IAChD,SAAS,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3C,GAAG,mBAAmB;IACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,IAAI,EAAE,yBAAyB;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD;;;;OAIG;IACL,kBAAkB,EAAE,CAAC;SAClB,KAAK,CAAC,gBAAgB,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,eAAe,CAAC,yBAAyB,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,GAAG,mBAAmB;IACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,8BAA8B;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC5E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,KAAK,CAAC,YAAY,EAAE,qCAAqC,CAAC;SAC1D,QAAQ,EAAE;IACb,SAAS,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;CAC5F,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC;KAC5B,YAAY,CAAC;IACZ,GAAG,mBAAmB;IACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,IAAI,EAAE,yBAAyB;CAChC,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;IACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;IACzD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,0EAA0E;AAC1E,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAErC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAW,EAAE,CAC1C,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE,IAAI,0BAA0B,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,YAAY,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACvE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC;KAC7B,YAAY,CAAC;IACZ,GAAG,mBAAmB;IACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,IAAI,EAAE,0BAA0B;CACjC,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;IACrD,IAAI,KAAK,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;YACjE,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAC;IACL,CAAC;IACD;;;;;OAKG;IACH,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;YAC1B,OAAO,EAAE,2BAA2B,0BAA0B,iBAAiB;SAChF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;YAC3B,OAAO,EAAE,2BAA2B,0BAA0B,iBAAiB;SAChF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAC,MAAM,CAChE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EACrC,EAAE,OAAO,EAAE,mDAAmD,EAAE,CACjE,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5C,GAAG,mBAAmB;IACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,IAAI,EAAE,0BAA0B;CACjC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1C,GAAG,mBAAmB;IACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,mEAAmE;IACnE,QAAQ,EAAE,gBAAgB;IAC1B;;;;OAIG;IACH,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzD,kBAAkB;IAClB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,sBAAsB;IACtB,kBAAkB;IAClB,qBAAqB;IACrB,0BAA0B;IAC1B,qBAAqB;IACrB,sBAAsB;IACtB,sBAAsB;IACtB,oBAAoB;CACrB,CAAC,CAAC;AAGH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,gBAAgB;IAChB,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,UAAU;IACV,WAAW;CACH,CAAC;AACX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGzD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,aAAa,CAAU,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3C,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,kBAAkB;IACxB,EAAE,EAAE,gBAAgB;CACrB,CAAC,CAAC;AAGH;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC7D,QAAQ,EAAE,gBAAgB;IAC1B,OAAO,EAAE,mBAAmB;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC5E,UAAU,EAAE,mBAAmB;CAChC,CAAC,CAAC"}