@oxyhq/crowdsource-contracts 0.3.0 → 0.4.0

package/dist/esm/index.js

@@ -0,0 +1,48 @@
+/**
+ * Public entry point for `@oxyhq/crowdsource-contracts`.
+ *
+ * The contracts every CrowdSource surface agrees on: the backend, the reviewer
+ * and console clients, the published SDKs, and third-party integrators. One
+ * entry point because the package publishes one `exports` path — this is the
+ * package boundary, not a convenience barrel over an internal tree.
+ *
+ * Two version numbers live here and mean different things. `/v1` is the route
+ * prefix and is not this package's business. `CASE_ENVELOPE_SCHEMA_VERSION`
+ * travels inside the payload and is validated separately (§10.11). Additive
+ * changes bump neither.
+ *
+ * Where strictness lands, and why, since it is the one thing a reader will want
+ * to look up:
+ *
+ *   * **Inbound from a tenant or a reviewer — strict.** The Case Envelope tree,
+ *     the review submission, the recusal, the policy set, the resource schema
+ *     registration. A dropped field here is context a jury never sees or an
+ *     input nobody reviewed, and §10.11 makes the exception explicitly for
+ *     fields "the schema forbids for safety".
+ *   * **Outbound to a tenant — loose.** Decisions, webhook envelopes and event
+ *     payloads pass unknown fields through, so a newer CrowdSource never breaks
+ *     an older client and a receiver that persists `event.data` keeps all of it.
+ *   * **Internal, to Oxy Trust — strict.** The reputation event carries no
+ *     resource ids and no free text on purpose; an unrecognised field is how
+ *     content reaches a reputation ledger. The `.v1` in the event type is what
+ *     handles evolution there.
+ *
+ * Open bags (`metadata`, custom payloads, registered JSON Schemas) are the
+ * deliberate exception in both directions: open by definition, but flat or
+ * depth-bounded, scalar-typed, key-restricted and free of prototype-bearing
+ * names.
+ */
+export * from './closed.js';
+export * from './primitives.js';
+export * from './taxonomy.js';
+export * from './policies.js';
+export * from './resources.js';
+export * from './case-envelope.js';
+export * from './reviews.js';
+export * from './reviewer-surface.js';
+export * from './decisions.js';
+export * from './appeals.js';
+export * from './webhooks.js';
+export * from './reputation-events.js';
+export * from './json-schema.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC"}

package/dist/esm/json-schema.js

@@ -0,0 +1,84 @@
+/**
+ * The same contracts as JSON Schema, for integrators who are not on TypeScript.
+ *
+ * §15.2 asks for "Zod and exportable JSON Schema". Conversion is deliberately
+ * lazy — a function, not a frozen constant — so importing the package to
+ * validate one report does not pay for thirteen schema conversions.
+ *
+ * **What JSON Schema does NOT carry.** Zod refinements have no JSON Schema
+ * equivalent and are dropped silently by the conversion. Everything structural
+ * survives — types, enums, patterns, bounds, required keys, `additionalProperties`
+ * — and every cross-field and cross-reference rule does not:
+ *
+ *   * §5.5 reference resolution (relations, `primaryResourceId`, allegation
+ *     resource ids, author and seller refs, conversation members, avatars)
+ *   * the `oxy_user` binding-proof requirement
+ *   * a required `fileId` on every asset, media type agreement, coarse coordinates,
+ *     price-with-currency
+ *   * `agreement = winningVotes / decisiveVotes` and the vote count nesting
+ *   * revision 1 supersedes nothing / later revisions must
+ *   * `externalReportId` matching between request and envelope
+ *
+ * So a payload that passes the JSON Schema is well-FORMED, not accepted. The
+ * server validates with Zod, and that is the authority. This is stated here
+ * because an integrator who assumes otherwise will build against a contract
+ * that is looser than the one they will meet in production, and will discover
+ * the difference as a 422.
+ */
+import { z } from 'zod';
+import { AppealSchema, AppealSubmissionSchema } from './appeals.js';
+import { CaseEnvelopeSchema, CreateReportRequestSchema, CreateReportResponseSchema } from './case-envelope.js';
+import { DecisionSchema } from './decisions.js';
+import { PolicySetVersionSchema } from './policies.js';
+import { ReputationEventSchema } from './reputation-events.js';
+import { RelationSchema, ResourceSchema, ResourceSchemaRegistrationSchema } from './resources.js';
+import { RecusalSubmissionSchema, ReviewSubmissionSchema } from './reviews.js';
+import { KnownWebhookEventSchema, WebhookEventEnvelopeSchema } from './webhooks.js';
+export const CONTRACT_JSON_SCHEMA_NAMES = [
+    'case-envelope',
+    'create-report-request',
+    'create-report-response',
+    'resource',
+    'relation',
+    'resource-schema-registration',
+    'policy-set-version',
+    'review-submission',
+    'recusal-submission',
+    'decision',
+    'appeal-submission',
+    'appeal',
+    'webhook-event-envelope',
+    'known-webhook-event',
+    'reputation-event',
+];
+/**
+ * The Zod schema behind each published name.
+ *
+ * Typed as an exhaustive `Record` so adding a name without a schema — or a
+ * schema without a name — is a compile error rather than a runtime hole in the
+ * exported contract set.
+ */
+export const CONTRACT_SCHEMAS = {
+    'case-envelope': CaseEnvelopeSchema,
+    'create-report-request': CreateReportRequestSchema,
+    'create-report-response': CreateReportResponseSchema,
+    resource: ResourceSchema,
+    relation: RelationSchema,
+    'resource-schema-registration': ResourceSchemaRegistrationSchema,
+    'policy-set-version': PolicySetVersionSchema,
+    'review-submission': ReviewSubmissionSchema,
+    'recusal-submission': RecusalSubmissionSchema,
+    decision: DecisionSchema,
+    'appeal-submission': AppealSubmissionSchema,
+    appeal: AppealSchema,
+    'webhook-event-envelope': WebhookEventEnvelopeSchema,
+    'known-webhook-event': KnownWebhookEventSchema,
+    'reputation-event': ReputationEventSchema,
+};
+/** JSON Schema draft 2020-12, so `$defs` and `unevaluatedProperties` mean what integrators expect. */
+const JSON_SCHEMA_TARGET = 'draft-2020-12';
+/** The JSON Schema for one published contract. */
+export function crowdSourceJsonSchema(name) {
+    return z.toJSONSchema(CONTRACT_SCHEMAS[name], { target: JSON_SCHEMA_TARGET });
+}
+//# sourceMappingURL=json-schema.js.map

package/dist/esm/json-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.js","sourceRoot":"","sources":["../../src/json-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAC/G,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAKpF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,eAAe;IACf,uBAAuB;IACvB,wBAAwB;IACxB,UAAU;IACV,UAAU;IACV,8BAA8B;IAC9B,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,UAAU;IACV,mBAAmB;IACnB,QAAQ;IACR,wBAAwB;IACxB,qBAAqB;IACrB,kBAAkB;CACV,CAAC;AAIX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA8C;IACzE,eAAe,EAAE,kBAAkB;IACnC,uBAAuB,EAAE,yBAAyB;IAClD,wBAAwB,EAAE,0BAA0B;IACpD,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,cAAc;IACxB,8BAA8B,EAAE,gCAAgC;IAChE,oBAAoB,EAAE,sBAAsB;IAC5C,mBAAmB,EAAE,sBAAsB;IAC3C,oBAAoB,EAAE,uBAAuB;IAC7C,QAAQ,EAAE,cAAc;IACxB,mBAAmB,EAAE,sBAAsB;IAC3C,MAAM,EAAE,YAAY;IACpB,wBAAwB,EAAE,0BAA0B;IACpD,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,qBAAqB;CAC1C,CAAC;AAEF,sGAAsG;AACtG,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAE3C,kDAAkD;AAClD,MAAM,UAAU,qBAAqB,CAAC,IAA4B;IAChE,OAAO,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAChF,CAAC"}

package/dist/esm/package.json

@@ -0,0 +1 @@
+{"type":"module"}

package/dist/esm/policies.js

@@ -0,0 +1,175 @@
+/**
+ * The application-policy layer (§6.1 layer 2) and policy versioning (§6.4).
+ *
+ * The taxonomy says what the material contains; a policy set says whether that
+ * violates THIS application's rules. The two are versioned independently and
+ * every decision records both (plus the Oxy conduct policy version), because
+ * §6.4 forbids a policy update from silently changing what a past decision
+ * meant.
+ *
+ * The security boundary of this module is §6.4's last line: "rules must be
+ * expressed as data, not as arbitrary code supplied by the tenant". A rule here
+ * therefore has an id, a title, the taxonomy codes it responds to, a default
+ * severity and recommended actions — and no expression, predicate, script,
+ * template or callback field of any kind. That absence is the control. It is
+ * enforced by `.strict()`: a policy set carrying an unrecognised key is
+ * rejected outright rather than accepted with the key quietly dropped, because
+ * "dropped" and "never evaluated" look identical right up until something
+ * decides to evaluate it.
+ */
+import { z } from 'zod';
+import { CONTRACT_LIMITS, LanguageTagSchema, TimestampSchema } from './primitives.js';
+import { RecommendedActionSchema, SeveritySchema, TaxonomyCodeSchema } from './taxonomy.js';
+/** A namespaced policy set id, e.g. `mention.community`. */
+export const PolicySetIdSchema = z
+    .string()
+    .min(3)
+    .max(CONTRACT_LIMITS.IDENTIFIER_MAX_LENGTH)
+    .regex(/^[a-z][a-z0-9_]*(\.[a-z0-9_]+)+$/, 'must be a dotted lowercase namespace, e.g. "mention.community"');
+/** A rule id within a policy set, e.g. `mention.harassment.2`. */
+export const PolicyRuleIdSchema = z
+    .string()
+    .min(3)
+    .max(CONTRACT_LIMITS.IDENTIFIER_MAX_LENGTH)
+    .regex(/^[a-z][a-z0-9_]*(\.[a-z0-9_]+)+$/, 'must be a dotted lowercase namespace, e.g. "mention.harassment.2"');
+/**
+ * An immutable policy version token, e.g. `2026.07`, `mention.2026.07`,
+ * `oxy.2026.1`.
+ *
+ * Deliberately not semver: the plan's own tokens are calendar-shaped and
+ * tenant-prefixed, and a policy version is an opaque label pointing at a frozen
+ * document — nothing compares two of them for ordering.
+ */
+export const PolicyVersionSchema = z
+    .string()
+    .min(1)
+    .max(64)
+    .regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/, 'must start with a letter or digit and contain only letters, digits, ".", "_" or "-"');
+/**
+ * The version of the Oxy Conduct Policy every decision is stamped with (§6.4).
+ *
+ * §6.1 assigns the third layer — "should this conduct affect global Oxy trust?"
+ * — to the Oxy Conduct Policy, evaluated by the Reputation Bridge. That bridge
+ * does not exist yet, and this constant is deliberately NOT a promise that it
+ * does. What it is: the label a decision published today records, so that when
+ * the bridge arrives it can tell which conduct policy a historical decision was
+ * decided under and refuse to re-interpret it under a newer one. §6.4's "a
+ * policy update never silently rewrites historical decisions" is unenforceable
+ * without a version on every decision from the first one.
+ *
+ * The value is Appendix B's. It is pinned here, in the package both the
+ * decision DTO and the reputation event import, so the two cannot drift into
+ * describing the same decision under two different conduct policies.
+ */
+export const OXY_CONDUCT_POLICY_VERSION = 'oxy.2026.1';
+/**
+ * The policy an envelope asks to be evaluated under (§5.1 `policy`).
+ *
+ * `locale` selects the language the policy text is shown to the reviewer in
+ * (Appendix A), and is not the language of the reported material — that is
+ * `resource.language`.
+ */
+export const CasePolicyRefSchema = z.strictObject({
+    policySetId: PolicySetIdSchema,
+    version: PolicyVersionSchema,
+    locale: LanguageTagSchema.optional(),
+});
+/**
+ * The three policy versions a decision is decided under (§6.4).
+ *
+ * Field names follow Appendix B (`taxonomy`), which is the reference Decision.
+ * §6.4's prose calls the same field `universalTaxonomyVersion` and §11.6's
+ * internal event calls it `universal`; see `ReputationPolicyVersionsSchema` for
+ * why both spellings survive.
+ */
+export const DecisionPolicyVersionsSchema = z.looseObject({
+    taxonomy: PolicyVersionSchema,
+    application: PolicyVersionSchema,
+    oxyConduct: PolicyVersionSchema,
+});
+/**
+ * The same three versions as carried by the internal reputation event (§11.6).
+ *
+ * §11.6 spells the first key `universal` where Appendix B spells it `taxonomy`.
+ * Both are reference payloads in the approved plan and both are load-bearing
+ * for a different consumer, so each surface keeps the spelling its own
+ * reference document uses rather than one of the two documents being quietly
+ * rewritten here. Unifying them is a one-line change and worth doing when the
+ * event contract is agreed with OxyHQServices — it is called out in the package
+ * README as the single naming inconsistency the contract preserves on purpose.
+ */
+export const ReputationPolicyVersionsSchema = z.strictObject({
+    universal: PolicyVersionSchema,
+    application: PolicyVersionSchema,
+    oxyConduct: PolicyVersionSchema,
+});
+/** §6.4: a draft may be edited, a published version may not. */
+export const POLICY_SET_STATUSES = ['draft', 'published'];
+export const PolicySetStatusSchema = z.enum(POLICY_SET_STATUSES);
+/**
+ * One rule inside a policy version — data, never code.
+ *
+ * `taxonomyCodes` is what binds layer 2 back to layer 1: the rule declares
+ * which universal findings it responds to, so a jury classifies once (§9.2 step
+ * one) and any number of applications evaluate that same classification against
+ * their own rules (§6.2).
+ */
+export const PolicyRuleSchema = z.strictObject({
+    id: PolicyRuleIdSchema,
+    title: z.string().min(1).max(CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH),
+    description: z.string().max(CONTRACT_LIMITS.LONG_TEXT_MAX_LENGTH).optional(),
+    taxonomyCodes: z.array(TaxonomyCodeSchema).min(1).max(CONTRACT_LIMITS.FINDINGS_MAX),
+    defaultSeverity: SeveritySchema.optional(),
+    recommendedActions: z
+        .array(RecommendedActionSchema)
+        .max(CONTRACT_LIMITS.RECOMMENDED_ACTIONS_MAX)
+        .optional(),
+});
+const POLICY_RULES_MAX = 500;
+/**
+ * A policy set at one version (§6.4).
+ *
+ * The `status`/`publishedAt` pairing is the immutability rule expressed where a
+ * schema can express it: a published version must record when it was published,
+ * and a draft must not claim to have been. Actual immutability — never
+ * rewriting a published version's rules — is a storage rule the registry
+ * enforces; no parse can see a second write.
+ */
+export const PolicySetVersionSchema = z
+    .strictObject({
+    policySetId: PolicySetIdSchema,
+    version: PolicyVersionSchema,
+    status: PolicySetStatusSchema,
+    title: z.string().min(1).max(CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH),
+    locale: LanguageTagSchema.optional(),
+    publishedAt: TimestampSchema.optional(),
+    rules: z.array(PolicyRuleSchema).min(1).max(POLICY_RULES_MAX),
+})
+    .superRefine((policySet, ctx) => {
+    if (policySet.status === 'published' && policySet.publishedAt === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['publishedAt'],
+            message: 'a published policy version must record publishedAt',
+        });
+    }
+    if (policySet.status === 'draft' && policySet.publishedAt !== undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['publishedAt'],
+            message: 'a draft policy version must not record publishedAt',
+        });
+    }
+    const seen = new Set();
+    policySet.rules.forEach((rule, index) => {
+        if (seen.has(rule.id)) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['rules', index, 'id'],
+                message: `duplicate rule id "${rule.id}"`,
+            });
+        }
+        seen.add(rule.id);
+    });
+});
+//# sourceMappingURL=policies.js.map

package/dist/esm/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../src/policies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAG5F,4DAA4D;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC;KAC1C,KAAK,CACJ,kCAAkC,EAClC,gEAAgE,CACjE,CAAC;AAEJ,kEAAkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC;KAC1C,KAAK,CACJ,kCAAkC,EAClC,mEAAmE,CACpE,CAAC;AAEJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,8BAA8B,EAC9B,qFAAqF,CACtF,CAAC;AAEJ;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,YAAY,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE,mBAAmB;IAC5B,MAAM,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,WAAW,CAAC;IACxD,QAAQ,EAAE,mBAAmB;IAC7B,WAAW,EAAE,mBAAmB;IAChC,UAAU,EAAE,mBAAmB;CAChC,CAAC,CAAC;AAGH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3D,SAAS,EAAE,mBAAmB;IAC9B,WAAW,EAAE,mBAAmB;IAChC,UAAU,EAAE,mBAAmB;CAChC,CAAC,CAAC;AAGH,gEAAgE;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,WAAW,CAAU,CAAC;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAGjE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC7C,EAAE,EAAE,kBAAkB;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC5E,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC;IACnF,eAAe,EAAE,cAAc,CAAC,QAAQ,EAAE;IAC1C,kBAAkB,EAAE,CAAC;SAClB,KAAK,CAAC,uBAAuB,CAAC;SAC9B,GAAG,CAAC,eAAe,CAAC,uBAAuB,CAAC;SAC5C,QAAQ,EAAE;CACd,CAAC,CAAC;AAGH,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,YAAY,CAAC;IACZ,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE,mBAAmB;IAC5B,MAAM,EAAE,qBAAqB;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC;IACnE,MAAM,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,eAAe,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;CAC9D,CAAC;KACD,WAAW,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE;IAC9B,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,oDAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,oDAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACtC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC5B,OAAO,EAAE,sBAAsB,IAAI,CAAC,EAAE,GAAG;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/primitives.js

@@ -0,0 +1,249 @@
+/**
+ * Scalar contracts shared by every CrowdSource surface.
+ *
+ * Nothing here belongs to a single contract module; everything here is depended
+ * on by several of them. Two properties drive most of the choices below:
+ *
+ *   1. **The envelope is content-addressed.** §7.3 derives `caseDedupKey` from
+ *      `applicationId`, `subject.externalId`, the canonical envelope hash and
+ *      the policy version. Two byte-different representations of the SAME value
+ *      produce two different keys, therefore two cases, therefore two penalties
+ *      for one incident — the exact opposite of the "one penalty per incident"
+ *      invariant. So every scalar that can travel in more than one shape is
+ *      pinned to ONE canonical shape here: digests are always `sha256:<hex>`,
+ *      timestamps are always millisecond-precision UTC.
+ *
+ *   2. **`:` is a structural separator.** §7.3 joins the dedup key components
+ *      with `:`. An identifier that may itself contain `:` makes that join
+ *      ambiguous — two distinct tuples can flatten to the same string and merge
+ *      two unrelated cases. Every identifier schema below therefore excludes
+ *      `:`. (The same character is independently forbidden in BullMQ queue and
+ *      job ids, so this also keeps identifiers usable as dispatch keys.)
+ */
+import { z } from 'zod';
+/**
+ * Bounds applied across the contracts.
+ *
+ * §7.2.3 requires ingress to check "size limits, number of resources and MIME
+ * types" but the plan never states the numbers. These are the contract's own
+ * declared limits: generous enough not to reject real moderation material,
+ * finite so that no array or string in the contract is unbounded. A tenant may
+ * be held to something tighter by quota; nothing may exceed these.
+ */
+export const CONTRACT_LIMITS = Object.freeze({
+    /** Envelope-local ids (`res_post`), policy ids, principal refs. */
+    IDENTIFIER_MAX_LENGTH: 128,
+    /** Ids minted by the application (`mention_report_123`, `post_987`). */
+    EXTERNAL_ID_MAX_LENGTH: 200,
+    RESOURCES_PER_ENVELOPE_MAX: 50,
+    RELATIONS_PER_ENVELOPE_MAX: 200,
+    ALLEGATIONS_PER_ENVELOPE_MAX: 20,
+    PRINCIPAL_BINDINGS_PER_ENVELOPE_MAX: 50,
+    /** A reported text resource. Long enough for an article, not a corpus. */
+    TEXT_RESOURCE_MAX_LENGTH: 100000,
+    /** Titles, labels, display names, place names. */
+    SHORT_TEXT_MAX_LENGTH: 500,
+    /** Descriptions, bios, reporter details, reviewer notes. */
+    LONG_TEXT_MAX_LENGTH: 5000,
+    /** Audio transcript, document extracted text, link snapshot. */
+    EXTRACTED_TEXT_MAX_LENGTH: 200000,
+    METADATA_KEYS_MAX: 50,
+    METADATA_KEY_MAX_LENGTH: 64,
+    METADATA_STRING_VALUE_MAX_LENGTH: 1000,
+    /** §5.7 custom payloads: data, bounded, never a document tree. */
+    CUSTOM_PAYLOAD_MAX_DEPTH: 5,
+    CUSTOM_PAYLOAD_ARRAY_MAX_LENGTH: 100,
+    CUSTOM_PAYLOAD_STRING_MAX_LENGTH: 10000,
+    CONVERSATION_MESSAGES_MAX: 50,
+    LISTING_MEDIA_REFS_MAX: 20,
+    PROFILE_CLAIMS_MAX: 20,
+    FINDINGS_MAX: 20,
+    RESOURCE_REFS_PER_FINDING_MAX: 50,
+    POLICY_RULE_IDS_MAX: 20,
+    RECOMMENDED_ACTIONS_MAX: 10,
+    /** §13.6 defaults to 30 days "configurable by policy"; this is the ceiling. */
+    RETENTION_DAYS_MAX: 3650,
+    /** A jury is 3, 5 or 7 today (§9.4). The bound only stops absurd values. */
+    JURY_SIZE_MAX: 99,
+});
+/**
+ * Keys that must never appear in a caller-supplied object, at any depth.
+ *
+ * A payload is data. These three names are how a data payload stops being data
+ * the moment anything merges, clones or `Object.assign`s it into a prototype
+ * chain. Rejecting them at the contract boundary is cheap and total; sanitising
+ * them later depends on every consumer remembering to.
+ *
+ * One of the three behaves differently and it is worth knowing which, because
+ * the list reads as though it were doing all the work: Zod removes an own
+ * `__proto__` property from any input before a key schema or a strict-key check
+ * ever sees it, so `__proto__` is DROPPED rather than rejected, and this list
+ * never fires for it. The safety outcome is the same — nothing is polluted, and
+ * the key cannot survive into parsed output — but a test asserting that
+ * `__proto__` is *rejected* would fail, and a reader assuming this constant is
+ * what prevents pollution would be assuming the wrong thing. `constructor` and
+ * `prototype` are ordinary keys to Zod and are rejected here.
+ */
+export const FORBIDDEN_OBJECT_KEYS = Object.freeze([
+    '__proto__',
+    'constructor',
+    'prototype',
+]);
+const IDENTIFIER_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+/**
+ * An id that is local to one envelope, policy set or contract payload.
+ *
+ * Deliberately opaque: the plan writes both slugs (`app_mention`,
+ * `mention.community`) and ULID-prefixed ids (`case_01...`) in the same fields,
+ * so pinning the format would reject the plan's own reference documents. What
+ * IS pinned is the character set — see the `:` note in the module comment.
+ */
+export const IdentifierSchema = z
+    .string()
+    .min(1)
+    .max(CONTRACT_LIMITS.IDENTIFIER_MAX_LENGTH)
+    .regex(IDENTIFIER_PATTERN, 'must start with a letter or digit and contain only letters, digits, ".", "_" or "-"');
+/** An id minted by the reporting application, echoed back but never trusted. */
+export const ExternalIdSchema = z
+    .string()
+    .min(1)
+    .max(CONTRACT_LIMITS.EXTERNAL_ID_MAX_LENGTH)
+    .regex(IDENTIFIER_PATTERN, 'must start with a letter or digit and contain only letters, digits, ".", "_" or "-"');
+/**
+ * `sha256:<64 lowercase hex>` — the ONLY accepted digest form.
+ *
+ * Appendix A writes `"sha256:..."`; §5.8 writes `"..."`. Accepting both would
+ * let the same bytes be described two ways, and the canonical envelope hash
+ * would differ between them (see property 1 in the module comment). Appendix A
+ * is the reference document, so the prefixed form wins and the bare form is
+ * rejected rather than silently normalised — normalising would mean the digest
+ * CrowdSource stores is not the digest the application sent.
+ */
+export const Sha256DigestSchema = z
+    .string()
+    .regex(/^sha256:[0-9a-f]{64}$/, 'must be "sha256:" followed by 64 lowercase hex characters');
+/**
+ * Millisecond-precision UTC, e.g. `2026-07-28T18:00:00.000Z`.
+ *
+ * Every timestamp in the plan is written this way, and it is what
+ * `Date.prototype.toISOString()` produces, so the canonical form costs a
+ * JavaScript integrator nothing. Offsets are rejected: `18:00+02:00` and
+ * `16:00Z` are the same instant and would hash differently.
+ */
+export const TimestampSchema = z.iso.datetime({ offset: false, precision: 3 });
+/**
+ * BCP 47, restricted to `language[-Script][-Region][-variant…]`.
+ *
+ * A syntactic subset, not the full grammar (no extensions, no private use, no
+ * grandfathered tags). Covers `es` and `es-ES` from the plan and everything a
+ * real application sends; a tag outside the subset is a signal worth rejecting
+ * at ingress rather than carrying into reviewer language eligibility.
+ */
+export const LanguageTagSchema = z
+    .string()
+    .regex(/^[a-z]{2,3}(-[A-Z][a-z]{3})?(-([A-Z]{2}|[0-9]{3}))?(-([0-9][A-Za-z0-9]{3}|[A-Za-z0-9]{5,8}))*$/, 'must be a BCP 47 tag of the form language[-Script][-Region][-variant]');
+/**
+ * An absolute `http`/`https` URL.
+ *
+ * §7.2.7 rejects "dangerous schemes and executable resources". Scheme is a
+ * purely syntactic property, so the contract enforces it. Host reachability is
+ * NOT enforced here: deciding whether a host is internal needs DNS resolution
+ * and belongs to `safeFetch` at ingestion time. A scheme check that pretended
+ * to be an SSRF control would be the more dangerous of the two.
+ */
+export const HttpUrlSchema = z.url({ protocol: /^https?$/ }).max(2048);
+/**
+ * A bare Oxy file id — the one way bytes enter a case.
+ *
+ * Evidence goes through the Oxy media chokepoint (`getFileDownloadUrl`) rather
+ * than a presigned bucket, which is the §12.3 divergence recorded in
+ * `AGENTS.md`. A file id is what that chokepoint takes, so it is what an asset
+ * carries: never a URL, never a host, never a variant. The reviewer client
+ * resolves it once through Bloom's `ImageResolver`, so nothing downstream needs
+ * to know where `cloud.oxy.so` is.
+ *
+ * Deliberately opaque, for the same reason `IdentifierSchema` is: the format
+ * belongs to Oxy, not to CrowdSource, and pinning it here would make an Oxy
+ * change look like a CrowdSource contract violation. What is pinned is that it
+ * is a bounded, non-empty token with no separators that could smuggle a path or
+ * a scheme into a resolver — `..`, `/` and `:` are all excluded by the pattern.
+ */
+export const OxyFileIdSchema = z
+    .string()
+    .min(1)
+    .max(CONTRACT_LIMITS.IDENTIFIER_MAX_LENGTH)
+    .regex(/^[A-Za-z0-9][A-Za-z0-9_-]*$/, 'must be a bare Oxy file id: letters, digits, "_" or "-", starting with a letter or digit');
+/** A `type/subtype` media type, without parameters. */
+export const MimeTypeSchema = z
+    .string()
+    .max(255)
+    .regex(/^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/, 'must be a lowercase "type/subtype" media type without parameters');
+const METADATA_KEY_PATTERN = /^[A-Za-z][A-Za-z0-9._-]*$/;
+/** A key in any caller-supplied open bag. */
+export const ObjectKeySchema = z
+    .string()
+    .min(1)
+    .max(CONTRACT_LIMITS.METADATA_KEY_MAX_LENGTH)
+    .regex(METADATA_KEY_PATTERN, 'must start with a letter and contain only letters, digits, ".", "_" or "-"')
+    .refine((key) => !FORBIDDEN_OBJECT_KEYS.includes(key), {
+    message: 'must not be a prototype-bearing key',
+});
+/** A single metadata value: scalar only, never a nested structure. */
+export const MetadataValueSchema = z.union([
+    z.string().max(CONTRACT_LIMITS.METADATA_STRING_VALUE_MAX_LENGTH),
+    z.number().finite(),
+    z.boolean(),
+    z.null(),
+]);
+/**
+ * An open key/value bag (§5.1 `metadata`, §5.3 the `metadata` resource type).
+ *
+ * Open by definition — the plan calls it "typed key value fields" and every
+ * tenant's keys differ — but flat and bounded. Allowing nesting here would make
+ * this the one field in the envelope through which an application could ship an
+ * arbitrary document tree past every other constraint in the contract.
+ */
+export const MetadataBagSchema = z
+    .record(ObjectKeySchema, MetadataValueSchema)
+    .refine((bag) => Object.keys(bag).length <= CONTRACT_LIMITS.METADATA_KEYS_MAX, {
+    message: `must not have more than ${CONTRACT_LIMITS.METADATA_KEYS_MAX} keys`,
+});
+const customPayloadScalarSchema = z.union([
+    z.string().max(CONTRACT_LIMITS.CUSTOM_PAYLOAD_STRING_MAX_LENGTH),
+    z.number().finite(),
+    z.boolean(),
+    z.null(),
+]);
+const buildCustomPayloadValueSchema = () => {
+    let value = customPayloadScalarSchema;
+    for (let depth = 1; depth < CONTRACT_LIMITS.CUSTOM_PAYLOAD_MAX_DEPTH; depth += 1) {
+        value = z.union([
+            customPayloadScalarSchema,
+            z.array(value).max(CONTRACT_LIMITS.CUSTOM_PAYLOAD_ARRAY_MAX_LENGTH),
+            z.record(ObjectKeySchema, value),
+        ]);
+    }
+    return value;
+};
+/**
+ * The value grammar for a §5.7 custom payload.
+ *
+ * Nesting is unrolled to a fixed depth rather than made recursive so the bound
+ * is part of the type, enforced by the same parse as everything else, and
+ * visible in the exported JSON Schema. Depth is what stops a payload being a
+ * document; `ObjectKeySchema` is what stops it being a prototype.
+ *
+ * Note what is deliberately absent: no lexical filter on string values. A
+ * moderation payload legitimately carries the exact hostile text under review —
+ * markup, script fragments, `javascript:` URLs quoted inside a harassment
+ * report. Rejecting those strings would reject the material the system exists
+ * to review. §5.7's boundary is structural, not lexical: the contract has no
+ * field anywhere that carries markup, a template, a component or a remote URL
+ * to be rendered, so there is nothing for such a string to be interpreted as.
+ */
+export const CustomPayloadValueSchema = buildCustomPayloadValueSchema();
+/** The top level of a §5.7 custom payload: always an object, never an array. */
+export const CustomPayloadSchema = z.record(ObjectKeySchema, CustomPayloadValueSchema);
+/** A number in the closed interval [0, 1] — §9.5 clamps confidence to it. */
+export const UnitIntervalSchema = z.number().min(0).max(1);
+//# sourceMappingURL=primitives.js.map

package/dist/esm/primitives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.js","sourceRoot":"","sources":["../../src/primitives.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,mEAAmE;IACnE,qBAAqB,EAAE,GAAG;IAC1B,wEAAwE;IACxE,sBAAsB,EAAE,GAAG;IAE3B,0BAA0B,EAAE,EAAE;IAC9B,0BAA0B,EAAE,GAAG;IAC/B,4BAA4B,EAAE,EAAE;IAChC,mCAAmC,EAAE,EAAE;IAEvC,0EAA0E;IAC1E,wBAAwB,EAAE,MAAO;IACjC,kDAAkD;IAClD,qBAAqB,EAAE,GAAG;IAC1B,4DAA4D;IAC5D,oBAAoB,EAAE,IAAK;IAC3B,gEAAgE;IAChE,yBAAyB,EAAE,MAAO;IAElC,iBAAiB,EAAE,EAAE;IACrB,uBAAuB,EAAE,EAAE;IAC3B,gCAAgC,EAAE,IAAK;IAEvC,kEAAkE;IAClE,wBAAwB,EAAE,CAAC;IAC3B,+BAA+B,EAAE,GAAG;IACpC,gCAAgC,EAAE,KAAM;IAExC,yBAAyB,EAAE,EAAE;IAC7B,sBAAsB,EAAE,EAAE;IAC1B,kBAAkB,EAAE,EAAE;IAEtB,YAAY,EAAE,EAAE;IAChB,6BAA6B,EAAE,EAAE;IACjC,mBAAmB,EAAE,EAAE;IACvB,uBAAuB,EAAE,EAAE;IAE3B,+EAA+E;IAC/E,kBAAkB,EAAE,IAAK;IACzB,4EAA4E;IAC5E,aAAa,EAAE,EAAE;CACT,CAAC,CAAC;AAEZ;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACpE,WAAW;IACX,aAAa;IACb,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC;KAC1C,KAAK,CACJ,kBAAkB,EAClB,qFAAqF,CACtF,CAAC;AAEJ,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,eAAe,CAAC,sBAAsB,CAAC;KAC3C,KAAK,CACJ,kBAAkB,EAClB,qFAAqF,CACtF,CAAC;AAEJ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,EAAE;KACR,KAAK,CAAC,uBAAuB,EAAE,2DAA2D,CAAC,CAAC;AAE/F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;AAE/E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,KAAK,CACJ,gGAAgG,EAChG,uEAAuE,CACxE,CAAC;AAEJ;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,IAAK,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC;KAC1C,KAAK,CACJ,6BAA6B,EAC7B,0FAA0F,CAC3F,CAAC;AAEJ,uDAAuD;AACvD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CACJ,0DAA0D,EAC1D,kEAAkE,CACnE,CAAC;AAEJ,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEzD,6CAA6C;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,eAAe,CAAC,uBAAuB,CAAC;KAC5C,KAAK,CAAC,oBAAoB,EAAE,4EAA4E,CAAC;KACzG,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;IACrD,OAAO,EAAE,qCAAqC;CAC/C,CAAC,CAAC;AAEL,sEAAsE;AACtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC;IACzC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,gCAAgC,CAAC;IAChE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;IACnB,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,IAAI,EAAE;CACT,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC;KAC5C,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE;IAC7E,OAAO,EAAE,2BAA2B,eAAe,CAAC,iBAAiB,OAAO;CAC7E,CAAC,CAAC;AAWL,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC;IACxC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,gCAAgC,CAAC;IAChE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;IACnB,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,IAAI,EAAE;CACT,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAG,GAAkC,EAAE;IACxE,IAAI,KAAK,GAAkC,yBAAyB,CAAC;IACrE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,eAAe,CAAC,wBAAwB,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACjF,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YACd,yBAAyB;YACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,+BAA+B,CAAC;YACnE,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,6BAA6B,EAAE,CAAC;AAExE,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;AAEvF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC"}