@peac/adapter-runtime-governance 0.12.9

package/dist/index.cjs

@@ -0,0 +1,517 @@
+'use strict';
+
+var protocol = require('@peac/protocol');
+var crypto = require('@peac/crypto');
+
+// src/constants.ts
+var EXTENSION_NAMESPACE = "org.peacprotocol/runtime-governance";
+var TYPE_PREFIX = "org.peacprotocol/runtime-governance-";
+var EVENT_TYPES = {
+  POLICY_DECISION: `${TYPE_PREFIX}policy-decision`,
+  AUDIT_ENTRY: `${TYPE_PREFIX}audit-entry`,
+  AUTHORITY_SCOPE: `${TYPE_PREFIX}authority-scope`,
+  LIFECYCLE_EVENT: `${TYPE_PREFIX}lifecycle-event`,
+  TRUST_OBSERVATION: `${TYPE_PREFIX}trust-observation`,
+  COMPLIANCE_OBSERVATION: `${TYPE_PREFIX}compliance-observation`
+};
+var FIELD_LIMITS = {
+  /** Identifiers: provider, agent_id, session_id, entry_id, etc. */
+  maxIdentifier: 256,
+  /** General string fields: action, matched_rule, policy_name, etc. */
+  maxString: 1024,
+  /** Digest strings: previous_hash, entry_hash, etc. */
+  maxDigest: 512,
+  /** URI fields: source_artifact_ref, etc. */
+  maxUri: 2048,
+  /** Timestamp fields: source_timestamp, etc. */
+  maxTimestamp: 64,
+  /** CloudEvents type URIs. */
+  maxCloudEventType: 256,
+  /** Array fields: effective_scope, matched_invariants. */
+  maxArrayLength: 64,
+  /** Array entry string length. */
+  maxArrayEntry: 256,
+  /** Framework token length. */
+  maxFramework: 128
+};
+
+// src/types.ts
+var RUNTIME_GOVERNANCE_FAMILIES = [
+  "policy_decision",
+  "audit_entry",
+  "authority_scope",
+  "lifecycle_event",
+  "trust_observation",
+  "compliance_observation"
+];
+
+// src/families.ts
+var FAMILY_REGISTRY = {
+  policy_decision: { type: EVENT_TYPES.POLICY_DECISION, kind: "evidence" },
+  audit_entry: { type: EVENT_TYPES.AUDIT_ENTRY, kind: "evidence" },
+  authority_scope: { type: EVENT_TYPES.AUTHORITY_SCOPE, kind: "evidence" },
+  lifecycle_event: { type: EVENT_TYPES.LIFECYCLE_EVENT, kind: "evidence" },
+  trust_observation: { type: EVENT_TYPES.TRUST_OBSERVATION, kind: "evidence" },
+  compliance_observation: { type: EVENT_TYPES.COMPLIANCE_OBSERVATION, kind: "evidence" }
+};
+
+// src/normalize.ts
+var NormalizationError = class extends Error {
+  constructor(message, field) {
+    super(message);
+    this.field = field;
+    this.name = "NormalizationError";
+  }
+};
+function requireString(value, field, maxLen) {
+  if (typeof value !== "string") {
+    throw new NormalizationError(`${field} must be a string`, field);
+  }
+  if (value.length === 0) {
+    throw new NormalizationError(`${field} must not be empty`, field);
+  }
+  if (value.length > maxLen) {
+    throw new NormalizationError(`${field} exceeds max length ${maxLen}`, field);
+  }
+  return value;
+}
+function optionalString(value, field, maxLen) {
+  if (value === void 0 || value === null) return void 0;
+  return requireString(value, field, maxLen);
+}
+function optionalFiniteNumber(value, field, min, max) {
+  if (value === void 0 || value === null) return void 0;
+  if (typeof value !== "number" || !Number.isFinite(value)) {
+    throw new NormalizationError(`${field} must be a finite number`, field);
+  }
+  if (min !== void 0 && value < min) {
+    throw new NormalizationError(`${field} must be >= ${min}`, field);
+  }
+  if (max !== void 0 && value > max) {
+    throw new NormalizationError(`${field} must be <= ${max}`, field);
+  }
+  return value;
+}
+function optionalInteger(value, field, min, max) {
+  const n = optionalFiniteNumber(value, field, min, max);
+  if (n !== void 0 && !Number.isInteger(n)) {
+    throw new NormalizationError(`${field} must be an integer`, field);
+  }
+  return n;
+}
+function optionalBoolean(value, field) {
+  if (value === void 0 || value === null) return void 0;
+  if (typeof value !== "boolean") {
+    throw new NormalizationError(`${field} must be a boolean`, field);
+  }
+  return value;
+}
+var RFC3339_PATTERN = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})$/;
+function optionalRfc3339(value, field, maxLen) {
+  const s = optionalString(value, field, maxLen);
+  if (s !== void 0 && !RFC3339_PATTERN.test(s)) {
+    throw new NormalizationError(`${field} must be RFC 3339 format`, field);
+  }
+  return s;
+}
+var DIGEST_PATTERN = /^[a-zA-Z0-9_-]+:[a-fA-F0-9]+$/;
+function optionalDigest(value, field, maxLen) {
+  const s = optionalString(value, field, maxLen);
+  if (s !== void 0 && !DIGEST_PATTERN.test(s)) {
+    throw new NormalizationError(`${field} must match digest pattern (algorithm:hex)`, field);
+  }
+  return s;
+}
+var URI_PATTERN = /^[a-zA-Z][a-zA-Z0-9+.-]*:/;
+function optionalUri(value, field, maxLen) {
+  const s = optionalString(value, field, maxLen);
+  if (s !== void 0 && !URI_PATTERN.test(s)) {
+    throw new NormalizationError(`${field} must be a valid URI`, field);
+  }
+  return s;
+}
+function optionalStringArray(value, field, maxLen, maxEntryLen) {
+  if (value === void 0 || value === null) return void 0;
+  if (!Array.isArray(value)) {
+    throw new NormalizationError(`${field} must be an array`, field);
+  }
+  if (value.length > maxLen) {
+    throw new NormalizationError(`${field} exceeds max length ${maxLen}`, field);
+  }
+  return value.map((entry, i) => requireString(entry, `${field}[${i}]`, maxEntryLen));
+}
+function normalizePolicyDecision(input) {
+  return {
+    family: "policy_decision",
+    action: requireString(input.action, "action", FIELD_LIMITS.maxString),
+    matched_rule: optionalString(input.matched_rule, "matched_rule", FIELD_LIMITS.maxString),
+    policy_name: optionalString(input.policy_name, "policy_name", FIELD_LIMITS.maxString),
+    reason: optionalString(input.reason, "reason", FIELD_LIMITS.maxString),
+    evaluation_ms: optionalFiniteNumber(input.evaluation_ms, "evaluation_ms", 0)
+  };
+}
+function normalizeAuditEntry(input) {
+  return {
+    family: "audit_entry",
+    entry_id: optionalString(input.entry_id, "entry_id", FIELD_LIMITS.maxIdentifier),
+    event_type: optionalString(input.event_type, "event_type", FIELD_LIMITS.maxString),
+    outcome: optionalString(input.outcome, "outcome", FIELD_LIMITS.maxString),
+    previous_hash: optionalDigest(input.previous_hash, "previous_hash", FIELD_LIMITS.maxDigest),
+    entry_hash: optionalDigest(input.entry_hash, "entry_hash", FIELD_LIMITS.maxDigest),
+    trace_id: optionalString(input.trace_id, "trace_id", FIELD_LIMITS.maxIdentifier)
+  };
+}
+function normalizeAuthorityScope(input) {
+  return {
+    family: "authority_scope",
+    decision: optionalString(input.decision, "decision", FIELD_LIMITS.maxString),
+    effective_scope: optionalStringArray(
+      input.effective_scope,
+      "effective_scope",
+      FIELD_LIMITS.maxArrayLength,
+      FIELD_LIMITS.maxArrayEntry
+    ),
+    trust_tier: optionalString(input.trust_tier, "trust_tier", FIELD_LIMITS.maxString),
+    matched_invariants: optionalStringArray(
+      input.matched_invariants,
+      "matched_invariants",
+      FIELD_LIMITS.maxArrayLength,
+      FIELD_LIMITS.maxArrayEntry
+    )
+  };
+}
+function normalizeLifecycleEvent(input) {
+  return {
+    family: "lifecycle_event",
+    lifecycle_event_type: optionalString(
+      input.lifecycle_event_type,
+      "lifecycle_event_type",
+      FIELD_LIMITS.maxString
+    ),
+    previous_state: optionalString(input.previous_state, "previous_state", FIELD_LIMITS.maxString),
+    new_state: optionalString(input.new_state, "new_state", FIELD_LIMITS.maxString),
+    actor: optionalString(input.actor, "actor", FIELD_LIMITS.maxIdentifier)
+  };
+}
+function normalizeTrustObservation(input) {
+  return {
+    family: "trust_observation",
+    peer_id: optionalString(input.peer_id, "peer_id", FIELD_LIMITS.maxIdentifier),
+    action: optionalString(input.action, "action", FIELD_LIMITS.maxString),
+    success: optionalBoolean(input.success, "success"),
+    trust_delta: optionalInteger(input.trust_delta, "trust_delta", -1e3, 1e3),
+    trust_score: optionalInteger(input.trust_score, "trust_score", 0, 1e3)
+  };
+}
+function normalizeComplianceObservation(input) {
+  return {
+    family: "compliance_observation",
+    framework: optionalString(input.framework, "framework", FIELD_LIMITS.maxFramework),
+    compliance_score: optionalFiniteNumber(input.compliance_score, "compliance_score", 0, 100),
+    violation_count: optionalInteger(input.violation_count, "violation_count", 0),
+    evidence_item_count: optionalInteger(input.evidence_item_count, "evidence_item_count", 0)
+  };
+}
+var FAMILY_NORMALIZERS = {
+  policy_decision: normalizePolicyDecision,
+  audit_entry: normalizeAuditEntry,
+  authority_scope: normalizeAuthorityScope,
+  lifecycle_event: normalizeLifecycleEvent,
+  trust_observation: normalizeTrustObservation,
+  compliance_observation: normalizeComplianceObservation
+};
+function normalizeUpstream(input) {
+  if (input === void 0 || input === null) return void 0;
+  if (typeof input !== "object" || Array.isArray(input)) {
+    throw new NormalizationError("upstream must be a plain object", "upstream");
+  }
+  const obj = input;
+  return {
+    source_system: optionalString(
+      obj.source_system,
+      "upstream.source_system",
+      FIELD_LIMITS.maxIdentifier
+    ),
+    source_event_type: optionalString(
+      obj.source_event_type,
+      "upstream.source_event_type",
+      FIELD_LIMITS.maxIdentifier
+    ),
+    source_event_id: optionalString(
+      obj.source_event_id,
+      "upstream.source_event_id",
+      FIELD_LIMITS.maxIdentifier
+    ),
+    source_timestamp: optionalRfc3339(
+      obj.source_timestamp,
+      "upstream.source_timestamp",
+      FIELD_LIMITS.maxTimestamp
+    ),
+    source_artifact_hash: optionalDigest(
+      obj.source_artifact_hash,
+      "upstream.source_artifact_hash",
+      FIELD_LIMITS.maxDigest
+    ),
+    source_artifact_ref: optionalUri(
+      obj.source_artifact_ref,
+      "upstream.source_artifact_ref",
+      FIELD_LIMITS.maxUri
+    ),
+    source_cloud_event_type: optionalString(
+      obj.source_cloud_event_type,
+      "upstream.source_cloud_event_type",
+      FIELD_LIMITS.maxCloudEventType
+    )
+  };
+}
+function normalizeRuntimeGovernanceEvent(input) {
+  if (typeof input !== "object" || input === null || Array.isArray(input)) {
+    throw new NormalizationError("input must be a plain object", "input");
+  }
+  const obj = input;
+  const eventName = requireString(obj.event_name, "event_name", FIELD_LIMITS.maxString);
+  if (typeof obj.payload !== "object" || obj.payload === null || Array.isArray(obj.payload)) {
+    throw new NormalizationError("payload must be a plain object", "payload");
+  }
+  const payloadObj = obj.payload;
+  const family = payloadObj.family;
+  if (typeof family !== "string" || !RUNTIME_GOVERNANCE_FAMILIES.includes(family)) {
+    throw new NormalizationError(
+      `payload.family must be one of: ${RUNTIME_GOVERNANCE_FAMILIES.join(", ")}`,
+      "payload.family"
+    );
+  }
+  const normalizer = FAMILY_NORMALIZERS[family];
+  const payload = normalizer(payloadObj);
+  return {
+    event_name: eventName,
+    payload,
+    upstream: normalizeUpstream(obj.upstream)
+  };
+}
+
+// src/builders.ts
+function stripUndefined(obj) {
+  const result = {};
+  for (const [key, value] of Object.entries(obj)) {
+    if (value !== void 0) {
+      if (typeof value === "object" && value !== null && !Array.isArray(value)) {
+        const nested = stripUndefined(value);
+        if (Object.keys(nested).length > 0) {
+          result[key] = nested;
+        }
+      } else {
+        result[key] = value;
+      }
+    }
+  }
+  return result;
+}
+function buildPolicyDecisionExtension(payload, common, upstream) {
+  return stripUndefined({
+    ...common,
+    action: payload.action,
+    matched_rule: payload.matched_rule,
+    policy_name: payload.policy_name,
+    reason: payload.reason,
+    evaluation_ms: payload.evaluation_ms,
+    upstream
+  });
+}
+function buildAuditEntryExtension(payload, common, upstream) {
+  return stripUndefined({
+    ...common,
+    entry_id: payload.entry_id,
+    event_type: payload.event_type,
+    outcome: payload.outcome,
+    previous_hash: payload.previous_hash,
+    entry_hash: payload.entry_hash,
+    trace_id: payload.trace_id,
+    upstream
+  });
+}
+function buildAuthorityScopeExtension(payload, common, upstream) {
+  return stripUndefined({
+    ...common,
+    decision: payload.decision,
+    effective_scope: payload.effective_scope,
+    trust_tier: payload.trust_tier,
+    matched_invariants: payload.matched_invariants,
+    upstream
+  });
+}
+function buildLifecycleEventExtension(payload, common, upstream) {
+  return stripUndefined({
+    ...common,
+    lifecycle_event_type: payload.lifecycle_event_type,
+    previous_state: payload.previous_state,
+    new_state: payload.new_state,
+    actor: payload.actor,
+    upstream
+  });
+}
+function buildTrustObservationExtension(payload, common, upstream) {
+  return stripUndefined({
+    ...common,
+    peer_id: payload.peer_id,
+    action: payload.action,
+    success: payload.success,
+    trust_delta: payload.trust_delta,
+    trust_score: payload.trust_score,
+    upstream
+  });
+}
+function buildComplianceObservationExtension(payload, common, upstream) {
+  return stripUndefined({
+    ...common,
+    framework: payload.framework,
+    compliance_score: payload.compliance_score,
+    violation_count: payload.violation_count,
+    evidence_item_count: payload.evidence_item_count,
+    upstream
+  });
+}
+var FAMILY_BUILDERS = {
+  policy_decision: (p, c, u) => buildPolicyDecisionExtension(p, c, u),
+  audit_entry: (p, c, u) => buildAuditEntryExtension(p, c, u),
+  authority_scope: (p, c, u) => buildAuthorityScopeExtension(p, c, u),
+  lifecycle_event: (p, c, u) => buildLifecycleEventExtension(p, c, u),
+  trust_observation: (p, c, u) => buildTrustObservationExtension(p, c, u),
+  compliance_observation: (p, c, u) => buildComplianceObservationExtension(p, c, u)
+};
+
+// src/issue.ts
+function validateIssueOptions(options) {
+  if (!(options.privateKey instanceof Uint8Array) || options.privateKey.length !== 32) {
+    throw new Error("privateKey must be a 32-byte Uint8Array");
+  }
+  if (typeof options.kid !== "string" || options.kid.length === 0 || options.kid.length > 256) {
+    throw new Error("kid must be a non-empty string (max 256 chars)");
+  }
+  if (typeof options.issuer !== "string" || options.issuer.length === 0) {
+    throw new Error("issuer must be a non-empty string");
+  }
+  if (typeof options.sessionId !== "string" || options.sessionId.length === 0 || options.sessionId.length > 256) {
+    throw new Error("sessionId must be a non-empty string (max 256 chars)");
+  }
+  if (typeof options.agentId !== "string" || options.agentId.length === 0 || options.agentId.length > 256) {
+    throw new Error("agentId must be a non-empty string (max 256 chars)");
+  }
+  if (typeof options.provider !== "string" || options.provider.length === 0 || options.provider.length > 256) {
+    throw new Error("provider must be a non-empty string (max 256 chars)");
+  }
+}
+async function issueRuntimeGovernanceRecord(event, options) {
+  validateIssueOptions(options);
+  const entry = FAMILY_REGISTRY[event.payload.family];
+  const { privateKey, kid, issuer, sessionId, agentId, provider } = options;
+  const common = {
+    session_id: sessionId,
+    event: event.event_name,
+    agent_id: agentId,
+    provider
+  };
+  const extensionData = FAMILY_BUILDERS[event.payload.family](
+    event.payload,
+    common,
+    event.upstream
+  );
+  const { jws } = await protocol.issue({
+    iss: issuer,
+    kind: entry.kind,
+    type: entry.type,
+    privateKey,
+    kid,
+    extensions: { [EXTENSION_NAMESPACE]: extensionData }
+  });
+  return { jws, type: entry.type, family: event.payload.family };
+}
+var KNOWN_SUFFIXES = new Set(RUNTIME_GOVERNANCE_FAMILIES.map((f) => f.replace(/_/g, "-")));
+function buildSessionSummary(receipts) {
+  if (receipts.length === 0) {
+    return { sessionId: "", receipts: 0, families: [], unknownTypeCount: 0, issuer: "" };
+  }
+  let sessionId = "";
+  let issuer = "";
+  let unknownTypeCount = 0;
+  const familySet = /* @__PURE__ */ new Set();
+  for (const jws of receipts) {
+    const decoded = crypto.decode(jws);
+    const claims = decoded.payload;
+    if (!issuer && typeof claims.iss === "string") {
+      issuer = claims.iss;
+    }
+    const extensions = claims.extensions;
+    const govExt = extensions?.[EXTENSION_NAMESPACE];
+    if (govExt) {
+      if (!sessionId && typeof govExt.session_id === "string") {
+        sessionId = govExt.session_id;
+      }
+    }
+    const type = claims.type;
+    if (type?.startsWith(TYPE_PREFIX)) {
+      const suffix = type.slice(TYPE_PREFIX.length);
+      if (KNOWN_SUFFIXES.has(suffix)) {
+        familySet.add(suffix.replace(/-/g, "_"));
+      } else {
+        unknownTypeCount++;
+      }
+    } else if (type) {
+      unknownTypeCount++;
+    }
+  }
+  return {
+    sessionId,
+    receipts: receipts.length,
+    families: [...familySet].sort(),
+    unknownTypeCount,
+    issuer
+  };
+}
+
+// src/mappers/agt.ts
+var AGT_FAMILY_MAP = {
+  policy_decision: "policy_decision",
+  audit_entry: "audit_entry",
+  authority_scope: "authority_scope",
+  lifecycle_event: "lifecycle_event",
+  trust_observation: "trust_observation",
+  compliance_observation: "compliance_observation"
+};
+function mapAgtEvent(input) {
+  const family = AGT_FAMILY_MAP[input.family];
+  if (!family) {
+    throw new NormalizationError(`unrecognized AGT family: ${input.family}`, "family");
+  }
+  const raw = {
+    event_name: input.event,
+    payload: {
+      family,
+      ...input.data
+    },
+    upstream: input.source ? {
+      source_system: input.source.system,
+      source_event_type: input.source.event_type,
+      source_event_id: input.source.event_id,
+      source_timestamp: input.source.timestamp,
+      source_artifact_hash: input.source.artifact_hash,
+      source_artifact_ref: input.source.artifact_ref,
+      source_cloud_event_type: input.source.cloud_event_type
+    } : void 0
+  };
+  return normalizeRuntimeGovernanceEvent(raw);
+}
+
+exports.EVENT_TYPES = EVENT_TYPES;
+exports.EXTENSION_NAMESPACE = EXTENSION_NAMESPACE;
+exports.FAMILY_REGISTRY = FAMILY_REGISTRY;
+exports.FIELD_LIMITS = FIELD_LIMITS;
+exports.NormalizationError = NormalizationError;
+exports.RUNTIME_GOVERNANCE_FAMILIES = RUNTIME_GOVERNANCE_FAMILIES;
+exports.TYPE_PREFIX = TYPE_PREFIX;
+exports.buildSessionSummary = buildSessionSummary;
+exports.issueRuntimeGovernanceRecord = issueRuntimeGovernanceRecord;
+exports.mapAgtEvent = mapAgtEvent;
+exports.normalizeRuntimeGovernanceEvent = normalizeRuntimeGovernanceEvent;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants.ts","../src/types.ts","../src/families.ts","../src/normalize.ts","../src/builders.ts","../src/issue.ts","../src/session-summary.ts","../src/mappers/agt.ts"],"names":["issue","decode"],"mappings":";;;;;;AASO,IAAM,mBAAA,GAAsB;AAG5B,IAAM,WAAA,GAAc;AAMpB,IAAM,WAAA,GAAc;AAAA,EACzB,eAAA,EAAiB,GAAG,WAAW,CAAA,eAAA,CAAA;AAAA,EAC/B,WAAA,EAAa,GAAG,WAAW,CAAA,WAAA,CAAA;AAAA,EAC3B,eAAA,EAAiB,GAAG,WAAW,CAAA,eAAA,CAAA;AAAA,EAC/B,eAAA,EAAiB,GAAG,WAAW,CAAA,eAAA,CAAA;AAAA,EAC/B,iBAAA,EAAmB,GAAG,WAAW,CAAA,iBAAA,CAAA;AAAA,EACjC,sBAAA,EAAwB,GAAG,WAAW,CAAA,sBAAA;AACxC;AAKO,IAAM,YAAA,GAAe;AAAA;AAAA,EAE1B,aAAA,EAAe,GAAA;AAAA;AAAA,EAEf,SAAA,EAAW,IAAA;AAAA;AAAA,EAEX,SAAA,EAAW,GAAA;AAAA;AAAA,EAEX,MAAA,EAAQ,IAAA;AAAA;AAAA,EAER,YAAA,EAAc,EAAA;AAAA;AAAA,EAEd,iBAAA,EAAmB,GAAA;AAAA;AAAA,EAEnB,cAAA,EAAgB,EAAA;AAAA;AAAA,EAEhB,aAAA,EAAe,GAAA;AAAA;AAAA,EAEf,YAAA,EAAc;AAChB;;;ACtCO,IAAM,2BAAA,GAA8B;AAAA,EACzC,iBAAA;AAAA,EACA,aAAA;AAAA,EACA,iBAAA;AAAA,EACA,iBAAA;AAAA,EACA,mBAAA;AAAA,EACA;AACF;;;ACDO,IAAM,eAAA,GAAgE;AAAA,EAC3E,iBAAiB,EAAE,IAAA,EAAM,WAAA,CAAY,eAAA,EAAiB,MAAM,UAAA,EAAW;AAAA,EACvE,aAAa,EAAE,IAAA,EAAM,WAAA,CAAY,WAAA,EAAa,MAAM,UAAA,EAAW;AAAA,EAC/D,iBAAiB,EAAE,IAAA,EAAM,WAAA,CAAY,eAAA,EAAiB,MAAM,UAAA,EAAW;AAAA,EACvE,iBAAiB,EAAE,IAAA,EAAM,WAAA,CAAY,eAAA,EAAiB,MAAM,UAAA,EAAW;AAAA,EACvE,mBAAmB,EAAE,IAAA,EAAM,WAAA,CAAY,iBAAA,EAAmB,MAAM,UAAA,EAAW;AAAA,EAC3E,wBAAwB,EAAE,IAAA,EAAM,WAAA,CAAY,sBAAA,EAAwB,MAAM,UAAA;AAC5E;;;ACIO,IAAM,kBAAA,GAAN,cAAiC,KAAA,CAAM;AAAA,EAC5C,WAAA,CACE,SACgB,KAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAFG,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AAGhB,IAAA,IAAA,CAAK,IAAA,GAAO,oBAAA;AAAA,EACd;AACF;AAEA,SAAS,aAAA,CAAc,KAAA,EAAgB,KAAA,EAAe,MAAA,EAAwB;AAC5E,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,qBAAqB,KAAK,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,sBAAsB,KAAK,CAAA;AAAA,EAClE;AACA,EAAA,IAAI,KAAA,CAAM,SAAS,MAAA,EAAQ;AACzB,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,CAAA,oBAAA,EAAuB,MAAM,IAAI,KAAK,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,cAAA,CAAe,KAAA,EAAgB,KAAA,EAAe,MAAA,EAAoC;AACzF,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM,OAAO,MAAA;AAClD,EAAA,OAAO,aAAA,CAAc,KAAA,EAAO,KAAA,EAAO,MAAM,CAAA;AAC3C;AAEA,SAAS,oBAAA,CACP,KAAA,EACA,KAAA,EACA,GAAA,EACA,GAAA,EACoB;AACpB,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM,OAAO,MAAA;AAClD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,EAAG;AACxD,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,4BAA4B,KAAK,CAAA;AAAA,EACxE;AACA,EAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,KAAA,GAAQ,GAAA,EAAK;AACpC,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,CAAA,YAAA,EAAe,GAAG,IAAI,KAAK,CAAA;AAAA,EAClE;AACA,EAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,KAAA,GAAQ,GAAA,EAAK;AACpC,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,CAAA,YAAA,EAAe,GAAG,IAAI,KAAK,CAAA;AAAA,EAClE;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,eAAA,CACP,KAAA,EACA,KAAA,EACA,GAAA,EACA,GAAA,EACoB;AACpB,EAAA,MAAM,CAAA,GAAI,oBAAA,CAAqB,KAAA,EAAO,KAAA,EAAO,KAAK,GAAG,CAAA;AACrD,EAAA,IAAI,MAAM,MAAA,IAAa,CAAC,MAAA,CAAO,SAAA,CAAU,CAAC,CAAA,EAAG;AAC3C,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,uBAAuB,KAAK,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,CAAA;AACT;AAEA,SAAS,eAAA,CAAgB,OAAgB,KAAA,EAAoC;AAC3E,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM,OAAO,MAAA;AAClD,EAAA,IAAI,OAAO,UAAU,SAAA,EAAW;AAC9B,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,sBAAsB,KAAK,CAAA;AAAA,EAClE;AACA,EAAA,OAAO,KAAA;AACT;AAEA,IAAM,eAAA,GAAkB,kEAAA;AAExB,SAAS,eAAA,CAAgB,KAAA,EAAgB,KAAA,EAAe,MAAA,EAAoC;AAC1F,EAAA,MAAM,CAAA,GAAI,cAAA,CAAe,KAAA,EAAO,KAAA,EAAO,MAAM,CAAA;AAC7C,EAAA,IAAI,MAAM,MAAA,IAAa,CAAC,eAAA,CAAgB,IAAA,CAAK,CAAC,CAAA,EAAG;AAC/C,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,4BAA4B,KAAK,CAAA;AAAA,EACxE;AACA,EAAA,OAAO,CAAA;AACT;AAEA,IAAM,cAAA,GAAiB,+BAAA;AAEvB,SAAS,cAAA,CAAe,KAAA,EAAgB,KAAA,EAAe,MAAA,EAAoC;AACzF,EAAA,MAAM,CAAA,GAAI,cAAA,CAAe,KAAA,EAAO,KAAA,EAAO,MAAM,CAAA;AAC7C,EAAA,IAAI,MAAM,MAAA,IAAa,CAAC,cAAA,CAAe,IAAA,CAAK,CAAC,CAAA,EAAG;AAC9C,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,8CAA8C,KAAK,CAAA;AAAA,EAC1F;AACA,EAAA,OAAO,CAAA;AACT;AAEA,IAAM,WAAA,GAAc,2BAAA;AAEpB,SAAS,WAAA,CAAY,KAAA,EAAgB,KAAA,EAAe,MAAA,EAAoC;AACtF,EAAA,MAAM,CAAA,GAAI,cAAA,CAAe,KAAA,EAAO,KAAA,EAAO,MAAM,CAAA;AAC7C,EAAA,IAAI,MAAM,MAAA,IAAa,CAAC,WAAA,CAAY,IAAA,CAAK,CAAC,CAAA,EAAG;AAC3C,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,wBAAwB,KAAK,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,CAAA;AACT;AAEA,SAAS,mBAAA,CACP,KAAA,EACA,KAAA,EACA,MAAA,EACA,WAAA,EACsB;AACtB,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM,OAAO,MAAA;AAClD,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACzB,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,qBAAqB,KAAK,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,KAAA,CAAM,SAAS,MAAA,EAAQ;AACzB,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,EAAG,KAAK,CAAA,oBAAA,EAAuB,MAAM,IAAI,KAAK,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,KAAA,EAAO,CAAA,KAAM,aAAA,CAAc,KAAA,EAAO,CAAA,EAAG,KAAK,CAAA,CAAA,EAAI,CAAC,CAAA,CAAA,CAAA,EAAK,WAAW,CAAC,CAAA;AACpF;AAEA,SAAS,wBAAwB,KAAA,EAA0D;AACzF,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,iBAAA;AAAA,IACR,QAAQ,aAAA,CAAc,KAAA,CAAM,MAAA,EAAQ,QAAA,EAAU,aAAa,SAAS,CAAA;AAAA,IACpE,cAAc,cAAA,CAAe,KAAA,CAAM,YAAA,EAAc,cAAA,EAAgB,aAAa,SAAS,CAAA;AAAA,IACvF,aAAa,cAAA,CAAe,KAAA,CAAM,WAAA,EAAa,aAAA,EAAe,aAAa,SAAS,CAAA;AAAA,IACpF,QAAQ,cAAA,CAAe,KAAA,CAAM,MAAA,EAAQ,QAAA,EAAU,aAAa,SAAS,CAAA;AAAA,IACrE,aAAA,EAAe,oBAAA,CAAqB,KAAA,CAAM,aAAA,EAAe,iBAAiB,CAAC;AAAA,GAC7E;AACF;AAEA,SAAS,oBAAoB,KAAA,EAA0D;AACrF,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,aAAA;AAAA,IACR,UAAU,cAAA,CAAe,KAAA,CAAM,QAAA,EAAU,UAAA,EAAY,aAAa,aAAa,CAAA;AAAA,IAC/E,YAAY,cAAA,CAAe,KAAA,CAAM,UAAA,EAAY,YAAA,EAAc,aAAa,SAAS,CAAA;AAAA,IACjF,SAAS,cAAA,CAAe,KAAA,CAAM,OAAA,EAAS,SAAA,EAAW,aAAa,SAAS,CAAA;AAAA,IACxE,eAAe,cAAA,CAAe,KAAA,CAAM,aAAA,EAAe,eAAA,EAAiB,aAAa,SAAS,CAAA;AAAA,IAC1F,YAAY,cAAA,CAAe,KAAA,CAAM,UAAA,EAAY,YAAA,EAAc,aAAa,SAAS,CAAA;AAAA,IACjF,UAAU,cAAA,CAAe,KAAA,CAAM,QAAA,EAAU,UAAA,EAAY,aAAa,aAAa;AAAA,GACjF;AACF;AAEA,SAAS,wBAAwB,KAAA,EAA0D;AACzF,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,iBAAA;AAAA,IACR,UAAU,cAAA,CAAe,KAAA,CAAM,QAAA,EAAU,UAAA,EAAY,aAAa,SAAS,CAAA;AAAA,IAC3E,eAAA,EAAiB,mBAAA;AAAA,MACf,KAAA,CAAM,eAAA;AAAA,MACN,iBAAA;AAAA,MACA,YAAA,CAAa,cAAA;AAAA,MACb,YAAA,CAAa;AAAA,KACf;AAAA,IACA,YAAY,cAAA,CAAe,KAAA,CAAM,UAAA,EAAY,YAAA,EAAc,aAAa,SAAS,CAAA;AAAA,IACjF,kBAAA,EAAoB,mBAAA;AAAA,MAClB,KAAA,CAAM,kBAAA;AAAA,MACN,oBAAA;AAAA,MACA,YAAA,CAAa,cAAA;AAAA,MACb,YAAA,CAAa;AAAA;AACf,GACF;AACF;AAEA,SAAS,wBAAwB,KAAA,EAA0D;AACzF,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,iBAAA;AAAA,IACR,oBAAA,EAAsB,cAAA;AAAA,MACpB,KAAA,CAAM,oBAAA;AAAA,MACN,sBAAA;AAAA,MACA,YAAA,CAAa;AAAA,KACf;AAAA,IACA,gBAAgB,cAAA,CAAe,KAAA,CAAM,cAAA,EAAgB,gBAAA,EAAkB,aAAa,SAAS,CAAA;AAAA,IAC7F,WAAW,cAAA,CAAe,KAAA,CAAM,SAAA,EAAW,WAAA,EAAa,aAAa,SAAS,CAAA;AAAA,IAC9E,OAAO,cAAA,CAAe,KAAA,CAAM,KAAA,EAAO,OAAA,EAAS,aAAa,aAAa;AAAA,GACxE;AACF;AAEA,SAAS,0BAA0B,KAAA,EAA0D;AAC3F,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,mBAAA;AAAA,IACR,SAAS,cAAA,CAAe,KAAA,CAAM,OAAA,EAAS,SAAA,EAAW,aAAa,aAAa,CAAA;AAAA,IAC5E,QAAQ,cAAA,CAAe,KAAA,CAAM,MAAA,EAAQ,QAAA,EAAU,aAAa,SAAS,CAAA;AAAA,IACrE,OAAA,EAAS,eAAA,CAAgB,KAAA,CAAM,OAAA,EAAS,SAAS,CAAA;AAAA,IACjD,aAAa,eAAA,CAAgB,KAAA,CAAM,WAAA,EAAa,aAAA,EAAe,MAAO,GAAI,CAAA;AAAA,IAC1E,aAAa,eAAA,CAAgB,KAAA,CAAM,WAAA,EAAa,aAAA,EAAe,GAAG,GAAI;AAAA,GACxE;AACF;AAEA,SAAS,+BAA+B,KAAA,EAA0D;AAChG,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,wBAAA;AAAA,IACR,WAAW,cAAA,CAAe,KAAA,CAAM,SAAA,EAAW,WAAA,EAAa,aAAa,YAAY,CAAA;AAAA,IACjF,kBAAkB,oBAAA,CAAqB,KAAA,CAAM,gBAAA,EAAkB,kBAAA,EAAoB,GAAG,GAAG,CAAA;AAAA,IACzF,eAAA,EAAiB,eAAA,CAAgB,KAAA,CAAM,eAAA,EAAiB,mBAAmB,CAAC,CAAA;AAAA,IAC5E,mBAAA,EAAqB,eAAA,CAAgB,KAAA,CAAM,mBAAA,EAAqB,uBAAuB,CAAC;AAAA,GAC1F;AACF;AAEA,IAAM,kBAAA,GAGF;AAAA,EACF,eAAA,EAAiB,uBAAA;AAAA,EACjB,WAAA,EAAa,mBAAA;AAAA,EACb,eAAA,EAAiB,uBAAA;AAAA,EACjB,eAAA,EAAiB,uBAAA;AAAA,EACjB,iBAAA,EAAmB,yBAAA;AAAA,EACnB,sBAAA,EAAwB;AAC1B,CAAA;AAEA,SAAS,kBAAkB,KAAA,EAAuD;AAChF,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM,OAAO,MAAA;AAClD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACrD,IAAA,MAAM,IAAI,kBAAA,CAAmB,iCAAA,EAAmC,UAAU,CAAA;AAAA,EAC5E;AACA,EAAA,MAAM,GAAA,GAAM,KAAA;AACZ,EAAA,OAAO;AAAA,IACL,aAAA,EAAe,cAAA;AAAA,MACb,GAAA,CAAI,aAAA;AAAA,MACJ,wBAAA;AAAA,MACA,YAAA,CAAa;AAAA,KACf;AAAA,IACA,iBAAA,EAAmB,cAAA;AAAA,MACjB,GAAA,CAAI,iBAAA;AAAA,MACJ,4BAAA;AAAA,MACA,YAAA,CAAa;AAAA,KACf;AAAA,IACA,eAAA,EAAiB,cAAA;AAAA,MACf,GAAA,CAAI,eAAA;AAAA,MACJ,0BAAA;AAAA,MACA,YAAA,CAAa;AAAA,KACf;AAAA,IACA,gBAAA,EAAkB,eAAA;AAAA,MAChB,GAAA,CAAI,gBAAA;AAAA,MACJ,2BAAA;AAAA,MACA,YAAA,CAAa;AAAA,KACf;AAAA,IACA,oBAAA,EAAsB,cAAA;AAAA,MACpB,GAAA,CAAI,oBAAA;AAAA,MACJ,+BAAA;AAAA,MACA,YAAA,CAAa;AAAA,KACf;AAAA,IACA,mBAAA,EAAqB,WAAA;AAAA,MACnB,GAAA,CAAI,mBAAA;AAAA,MACJ,8BAAA;AAAA,MACA,YAAA,CAAa;AAAA,KACf;AAAA,IACA,uBAAA,EAAyB,cAAA;AAAA,MACvB,GAAA,CAAI,uBAAA;AAAA,MACJ,kCAAA;AAAA,MACA,YAAA,CAAa;AAAA;AACf,GACF;AACF;AAMO,SAAS,gCAAgC,KAAA,EAAwC;AACtF,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACvE,IAAA,MAAM,IAAI,kBAAA,CAAmB,8BAAA,EAAgC,OAAO,CAAA;AAAA,EACtE;AACA,EAAA,MAAM,GAAA,GAAM,KAAA;AAEZ,EAAA,MAAM,YAAY,aAAA,CAAc,GAAA,CAAI,UAAA,EAAY,YAAA,EAAc,aAAa,SAAS,CAAA;AAEpF,EAAA,IAAI,OAAO,GAAA,CAAI,OAAA,KAAY,QAAA,IAAY,GAAA,CAAI,OAAA,KAAY,IAAA,IAAQ,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACzF,IAAA,MAAM,IAAI,kBAAA,CAAmB,gCAAA,EAAkC,SAAS,CAAA;AAAA,EAC1E;AACA,EAAA,MAAM,aAAa,GAAA,CAAI,OAAA;AAEvB,EAAA,MAAM,SAAS,UAAA,CAAW,MAAA;AAC1B,EAAA,IACE,OAAO,MAAA,KAAW,QAAA,IAClB,CAAE,2BAAA,CAAkD,QAAA,CAAS,MAAM,CAAA,EACnE;AACA,IAAA,MAAM,IAAI,kBAAA;AAAA,MACR,CAAA,+BAAA,EAAkC,2BAAA,CAA4B,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,MACxE;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,GAAa,mBAAmB,MAAiC,CAAA;AACvE,EAAA,MAAM,OAAA,GAAU,WAAW,UAAU,CAAA;AAErC,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,SAAA;AAAA,IACZ,OAAA;AAAA,IACA,QAAA,EAAU,iBAAA,CAAkB,GAAA,CAAI,QAAQ;AAAA,GAC1C;AACF;;;AC9RA,SAAS,eAAe,GAAA,EAAuD;AAC7E,EAAA,MAAM,SAAkC,EAAC;AACzC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAC9C,IAAA,IAAI,UAAU,MAAA,EAAW;AACvB,MAAA,IAAI,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxE,QAAA,MAAM,MAAA,GAAS,eAAe,KAAgC,CAAA;AAC9D,QAAA,IAAI,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CAAE,SAAS,CAAA,EAAG;AAClC,UAAA,MAAA,CAAO,GAAG,CAAA,GAAI,MAAA;AAAA,QAChB;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAA,CAAO,GAAG,CAAA,GAAI,KAAA;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,4BAAA,CACP,OAAA,EACA,MAAA,EACA,QAAA,EACyB;AACzB,EAAA,OAAO,cAAA,CAAe;AAAA,IACpB,GAAG,MAAA;AAAA,IACH,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,cAAc,OAAA,CAAQ,YAAA;AAAA,IACtB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,eAAe,OAAA,CAAQ,aAAA;AAAA,IACvB;AAAA,GACD,CAAA;AACH;AAEA,SAAS,wBAAA,CACP,OAAA,EACA,MAAA,EACA,QAAA,EACyB;AACzB,EAAA,OAAO,cAAA,CAAe;AAAA,IACpB,GAAG,MAAA;AAAA,IACH,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,SAAS,OAAA,CAAQ,OAAA;AAAA,IACjB,eAAe,OAAA,CAAQ,aAAA;AAAA,IACvB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB;AAAA,GACD,CAAA;AACH;AAEA,SAAS,4BAAA,CACP,OAAA,EACA,MAAA,EACA,QAAA,EACyB;AACzB,EAAA,OAAO,cAAA,CAAe;AAAA,IACpB,GAAG,MAAA;AAAA,IACH,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,iBAAiB,OAAA,CAAQ,eAAA;AAAA,IACzB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,oBAAoB,OAAA,CAAQ,kBAAA;AAAA,IAC5B;AAAA,GACD,CAAA;AACH;AAEA,SAAS,4BAAA,CACP,OAAA,EACA,MAAA,EACA,QAAA,EACyB;AACzB,EAAA,OAAO,cAAA,CAAe;AAAA,IACpB,GAAG,MAAA;AAAA,IACH,sBAAsB,OAAA,CAAQ,oBAAA;AAAA,IAC9B,gBAAgB,OAAA,CAAQ,cAAA;AAAA,IACxB,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf;AAAA,GACD,CAAA;AACH;AAEA,SAAS,8BAAA,CACP,OAAA,EACA,MAAA,EACA,QAAA,EACyB;AACzB,EAAA,OAAO,cAAA,CAAe;AAAA,IACpB,GAAG,MAAA;AAAA,IACH,SAAS,OAAA,CAAQ,OAAA;AAAA,IACjB,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,SAAS,OAAA,CAAQ,OAAA;AAAA,IACjB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB;AAAA,GACD,CAAA;AACH;AAEA,SAAS,mCAAA,CACP,OAAA,EACA,MAAA,EACA,QAAA,EACyB;AACzB,EAAA,OAAO,cAAA,CAAe;AAAA,IACpB,GAAG,MAAA;AAAA,IACH,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,kBAAkB,OAAA,CAAQ,gBAAA;AAAA,IAC1B,iBAAiB,OAAA,CAAQ,eAAA;AAAA,IACzB,qBAAqB,OAAA,CAAQ,mBAAA;AAAA,IAC7B;AAAA,GACD,CAAA;AACH;AAYO,IAAM,eAAA,GAAqE;AAAA,EAChF,eAAA,EAAiB,CAAC,CAAA,EAAG,CAAA,EAAG,MAAM,4BAAA,CAA6B,CAAA,EAA4B,GAAG,CAAC,CAAA;AAAA,EAC3F,WAAA,EAAa,CAAC,CAAA,EAAG,CAAA,EAAG,MAAM,wBAAA,CAAyB,CAAA,EAAwB,GAAG,CAAC,CAAA;AAAA,EAC/E,eAAA,EAAiB,CAAC,CAAA,EAAG,CAAA,EAAG,MAAM,4BAAA,CAA6B,CAAA,EAA4B,GAAG,CAAC,CAAA;AAAA,EAC3F,eAAA,EAAiB,CAAC,CAAA,EAAG,CAAA,EAAG,MAAM,4BAAA,CAA6B,CAAA,EAA4B,GAAG,CAAC,CAAA;AAAA,EAC3F,iBAAA,EAAmB,CAAC,CAAA,EAAG,CAAA,EAAG,MACxB,8BAAA,CAA+B,CAAA,EAA8B,GAAG,CAAC,CAAA;AAAA,EACnE,sBAAA,EAAwB,CAAC,CAAA,EAAG,CAAA,EAAG,MAC7B,mCAAA,CAAoC,CAAA,EAAmC,GAAG,CAAC;AAC/E,CAAA;;;ACrIA,SAAS,qBAAqB,OAAA,EAA6B;AACzD,EAAA,IAAI,EAAE,OAAA,CAAQ,UAAA,YAAsB,eAAe,OAAA,CAAQ,UAAA,CAAW,WAAW,EAAA,EAAI;AACnF,IAAA,MAAM,IAAI,MAAM,yCAAyC,CAAA;AAAA,EAC3D;AACA,EAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,IAAY,OAAA,CAAQ,GAAA,CAAI,MAAA,KAAW,CAAA,IAAK,OAAA,CAAQ,GAAA,CAAI,MAAA,GAAS,GAAA,EAAK;AAC3F,IAAA,MAAM,IAAI,MAAM,gDAAgD,CAAA;AAAA,EAClE;AACA,EAAA,IAAI,OAAO,OAAA,CAAQ,MAAA,KAAW,YAAY,OAAA,CAAQ,MAAA,CAAO,WAAW,CAAA,EAAG;AACrE,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACrD;AACA,EAAA,IACE,OAAO,OAAA,CAAQ,SAAA,KAAc,QAAA,IAC7B,OAAA,CAAQ,SAAA,CAAU,MAAA,KAAW,CAAA,IAC7B,OAAA,CAAQ,SAAA,CAAU,MAAA,GAAS,GAAA,EAC3B;AACA,IAAA,MAAM,IAAI,MAAM,sDAAsD,CAAA;AAAA,EACxE;AACA,EAAA,IACE,OAAO,OAAA,CAAQ,OAAA,KAAY,QAAA,IAC3B,OAAA,CAAQ,OAAA,CAAQ,MAAA,KAAW,CAAA,IAC3B,OAAA,CAAQ,OAAA,CAAQ,MAAA,GAAS,GAAA,EACzB;AACA,IAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,EACtE;AACA,EAAA,IACE,OAAO,OAAA,CAAQ,QAAA,KAAa,QAAA,IAC5B,OAAA,CAAQ,QAAA,CAAS,MAAA,KAAW,CAAA,IAC5B,OAAA,CAAQ,QAAA,CAAS,MAAA,GAAS,GAAA,EAC1B;AACA,IAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,EACvE;AACF;AAEA,eAAsB,4BAAA,CACpB,OACA,OAAA,EACsB;AACtB,EAAA,oBAAA,CAAqB,OAAO,CAAA;AAC5B,EAAA,MAAM,KAAA,GAAQ,eAAA,CAAgB,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA;AAClD,EAAA,MAAM,EAAE,UAAA,EAAY,GAAA,EAAK,QAAQ,SAAA,EAAW,OAAA,EAAS,UAAS,GAAI,OAAA;AAElE,EAAA,MAAM,MAAA,GAAS;AAAA,IACb,UAAA,EAAY,SAAA;AAAA,IACZ,OAAO,KAAA,CAAM,UAAA;AAAA,IACb,QAAA,EAAU,OAAA;AAAA,IACV;AAAA,GACF;AAEA,EAAA,MAAM,aAAA,GAAgB,eAAA,CAAgB,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA;AAAA,IACxD,KAAA,CAAM,OAAA;AAAA,IACN,MAAA;AAAA,IACA,KAAA,CAAM;AAAA,GACR;AAEA,EAAA,MAAM,EAAE,GAAA,EAAI,GAAI,MAAMA,cAAA,CAAM;AAAA,IAC1B,GAAA,EAAK,MAAA;AAAA,IACL,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,UAAA;AAAA,IACA,GAAA;AAAA,IACA,UAAA,EAAY,EAAE,CAAC,mBAAmB,GAAG,aAAA;AAAc,GACpD,CAAA;AAED,EAAA,OAAO,EAAE,KAAK,IAAA,EAAM,KAAA,CAAM,MAAM,MAAA,EAAQ,KAAA,CAAM,QAAQ,MAAA,EAAO;AAC/D;ACrEA,IAAM,cAAA,GAAiB,IAAI,GAAA,CAAI,2BAAA,CAA4B,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAC,CAAA;AAYpF,SAAS,oBAAoB,QAAA,EAAoC;AACtE,EAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,IAAA,OAAO,EAAE,SAAA,EAAW,EAAA,EAAI,QAAA,EAAU,CAAA,EAAG,QAAA,EAAU,EAAC,EAAG,gBAAA,EAAkB,CAAA,EAAG,MAAA,EAAQ,EAAA,EAAG;AAAA,EACrF;AAEA,EAAA,IAAI,SAAA,GAAY,EAAA;AAChB,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI,gBAAA,GAAmB,CAAA;AACvB,EAAA,MAAM,SAAA,uBAAgB,GAAA,EAA6B;AAEnD,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,MAAM,OAAA,GAAUC,cAAO,GAAG,CAAA;AAC1B,IAAA,MAAM,SAAS,OAAA,CAAQ,OAAA;AAEvB,IAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,CAAO,QAAQ,QAAA,EAAU;AAC7C,MAAA,MAAA,GAAS,MAAA,CAAO,GAAA;AAAA,IAClB;AAEA,IAAA,MAAM,aAAa,MAAA,CAAO,UAAA;AAC1B,IAAA,MAAM,MAAA,GAAS,aAAa,mBAAmB,CAAA;AAE/C,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,CAAC,SAAA,IAAa,OAAO,MAAA,CAAO,eAAe,QAAA,EAAU;AACvD,QAAA,SAAA,GAAY,MAAA,CAAO,UAAA;AAAA,MACrB;AAAA,IACF;AAEA,IAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AACpB,IAAA,IAAI,IAAA,EAAM,UAAA,CAAW,WAAW,CAAA,EAAG;AACjC,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,WAAA,CAAY,MAAM,CAAA;AAC5C,MAAA,IAAI,cAAA,CAAe,GAAA,CAAI,MAAM,CAAA,EAAG;AAC9B,QAAA,SAAA,CAAU,GAAA,CAAI,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,GAAG,CAA4B,CAAA;AAAA,MACpE,CAAA,MAAO;AACL,QAAA,gBAAA,EAAA;AAAA,MACF;AAAA,IACF,WAAW,IAAA,EAAM;AACf,MAAA,gBAAA,EAAA;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,UAAU,QAAA,CAAS,MAAA;AAAA,IACnB,QAAA,EAAU,CAAC,GAAG,SAAS,EAAE,IAAA,EAAK;AAAA,IAC9B,gBAAA;AAAA,IACA;AAAA,GACF;AACF;;;AC9CA,IAAM,cAAA,GAA0D;AAAA,EAC9D,eAAA,EAAiB,iBAAA;AAAA,EACjB,WAAA,EAAa,aAAA;AAAA,EACb,eAAA,EAAiB,iBAAA;AAAA,EACjB,eAAA,EAAiB,iBAAA;AAAA,EACjB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,sBAAA,EAAwB;AAC1B,CAAA;AAMO,SAAS,YAAY,KAAA,EAA8C;AACxE,EAAA,MAAM,MAAA,GAAS,cAAA,CAAe,KAAA,CAAM,MAAM,CAAA;AAC1C,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,yBAAA,EAA4B,KAAA,CAAM,MAAM,IAAI,QAAQ,CAAA;AAAA,EACnF;AAEA,EAAA,MAAM,GAAA,GAAM;AAAA,IACV,YAAY,KAAA,CAAM,KAAA;AAAA,IAClB,OAAA,EAAS;AAAA,MACP,MAAA;AAAA,MACA,GAAG,KAAA,CAAM;AAAA,KACX;AAAA,IACA,QAAA,EAAU,MAAM,MAAA,GACZ;AAAA,MACE,aAAA,EAAe,MAAM,MAAA,CAAO,MAAA;AAAA,MAC5B,iBAAA,EAAmB,MAAM,MAAA,CAAO,UAAA;AAAA,MAChC,eAAA,EAAiB,MAAM,MAAA,CAAO,QAAA;AAAA,MAC9B,gBAAA,EAAkB,MAAM,MAAA,CAAO,SAAA;AAAA,MAC/B,oBAAA,EAAsB,MAAM,MAAA,CAAO,aAAA;AAAA,MACnC,mBAAA,EAAqB,MAAM,MAAA,CAAO,YAAA;AAAA,MAClC,uBAAA,EAAyB,MAAM,MAAA,CAAO;AAAA,KACxC,GACA;AAAA,GACN;AAEA,EAAA,OAAO,gCAAgC,GAAG,CAAA;AAC5C","file":"index.cjs","sourcesContent":["/**\n * @peac/adapter-runtime-governance constants\n *\n * Vendor-neutral type URIs and extension namespace for runtime\n * governance record families. Observation-specific suffixes prevent\n * semantic bleed into authoritative claims.\n */\n\n/** Extension namespace for runtime governance record metadata. */\nexport const EXTENSION_NAMESPACE = 'org.peacprotocol/runtime-governance' as const;\n\n/** Reverse-DNS type prefix for all runtime governance record families. */\nexport const TYPE_PREFIX = 'org.peacprotocol/runtime-governance-' as const;\n\n/**\n * Canonical type URIs for the 6 runtime governance record families.\n * Each suffix is observation-specific (e.g., \"policy-decision\" not \"policy\").\n */\nexport const EVENT_TYPES = {\n  POLICY_DECISION: `${TYPE_PREFIX}policy-decision`,\n  AUDIT_ENTRY: `${TYPE_PREFIX}audit-entry`,\n  AUTHORITY_SCOPE: `${TYPE_PREFIX}authority-scope`,\n  LIFECYCLE_EVENT: `${TYPE_PREFIX}lifecycle-event`,\n  TRUST_OBSERVATION: `${TYPE_PREFIX}trust-observation`,\n  COMPLIANCE_OBSERVATION: `${TYPE_PREFIX}compliance-observation`,\n} as const;\n\nexport type EventType = (typeof EVENT_TYPES)[keyof typeof EVENT_TYPES];\n\n/** Maximum field lengths for validation. */\nexport const FIELD_LIMITS = {\n  /** Identifiers: provider, agent_id, session_id, entry_id, etc. */\n  maxIdentifier: 256,\n  /** General string fields: action, matched_rule, policy_name, etc. */\n  maxString: 1024,\n  /** Digest strings: previous_hash, entry_hash, etc. */\n  maxDigest: 512,\n  /** URI fields: source_artifact_ref, etc. */\n  maxUri: 2048,\n  /** Timestamp fields: source_timestamp, etc. */\n  maxTimestamp: 64,\n  /** CloudEvents type URIs. */\n  maxCloudEventType: 256,\n  /** Array fields: effective_scope, matched_invariants. */\n  maxArrayLength: 64,\n  /** Array entry string length. */\n  maxArrayEntry: 256,\n  /** Framework token length. */\n  maxFramework: 128,\n} as const;\n","/**\n * @peac/adapter-runtime-governance types\n *\n * Discriminated union payload model with per-family typing.\n * No weak Record<string, unknown> blobs.\n */\n\n/**\n * Runtime governance record families.\n * String-literal union (not enum) for lighter output and tree-shaking.\n */\nexport const RUNTIME_GOVERNANCE_FAMILIES = [\n  'policy_decision',\n  'audit_entry',\n  'authority_scope',\n  'lifecycle_event',\n  'trust_observation',\n  'compliance_observation',\n] as const;\n\nexport type RuntimeGovernanceFamily = (typeof RUNTIME_GOVERNANCE_FAMILIES)[number];\n\n/**\n * Preserved upstream artifact context.\n * All optional, all observational. Bounded fields, no arbitrary passthrough.\n */\nexport interface PreservedUpstreamArtifact {\n  /** Upstream system identifier (max 256 chars). */\n  source_system?: string;\n  /** Upstream event type identifier (max 256 chars). */\n  source_event_type?: string;\n  /** Upstream event identifier for deduplication (max 256 chars). */\n  source_event_id?: string;\n  /** Upstream event timestamp (RFC 3339, max 64 chars). */\n  source_timestamp?: string;\n  /** Hash of upstream artifact (max 512 chars). */\n  source_artifact_hash?: string;\n  /** URI or reference to upstream artifact (max 2048 chars). */\n  source_artifact_ref?: string;\n  /** CloudEvents type URI for cross-system correlation (max 256 chars). */\n  source_cloud_event_type?: string;\n}\n\n/** Policy decision payload. */\nexport interface PolicyDecisionPayload {\n  family: 'policy_decision';\n  action: string;\n  matched_rule?: string;\n  policy_name?: string;\n  reason?: string;\n  evaluation_ms?: number;\n}\n\n/** Audit entry payload. */\nexport interface AuditEntryPayload {\n  family: 'audit_entry';\n  entry_id?: string;\n  event_type?: string;\n  outcome?: string;\n  previous_hash?: string;\n  entry_hash?: string;\n  trace_id?: string;\n}\n\n/** Authority scope payload. */\nexport interface AuthorityScopePayload {\n  family: 'authority_scope';\n  decision?: string;\n  effective_scope?: string[];\n  trust_tier?: string;\n  matched_invariants?: string[];\n}\n\n/** Lifecycle event payload. */\nexport interface LifecycleEventPayload {\n  family: 'lifecycle_event';\n  lifecycle_event_type?: string;\n  previous_state?: string;\n  new_state?: string;\n  actor?: string;\n}\n\n/** Trust observation payload. */\nexport interface TrustObservationPayload {\n  family: 'trust_observation';\n  peer_id?: string;\n  action?: string;\n  success?: boolean;\n  trust_delta?: number;\n  trust_score?: number;\n}\n\n/** Compliance observation payload. */\nexport interface ComplianceObservationPayload {\n  family: 'compliance_observation';\n  framework?: string;\n  compliance_score?: number;\n  violation_count?: number;\n  evidence_item_count?: number;\n}\n\n/** Discriminated union of all family payloads. */\nexport type RuntimeGovernancePayload =\n  | PolicyDecisionPayload\n  | AuditEntryPayload\n  | AuthorityScopePayload\n  | LifecycleEventPayload\n  | TrustObservationPayload\n  | ComplianceObservationPayload;\n\n/**\n * Normalized runtime governance event.\n * Generic input to issueRuntimeGovernanceRecord().\n */\nexport interface RuntimeGovernanceEvent {\n  /** Specific event name (e.g., 'policy.evaluated'). */\n  event_name: string;\n  /** Typed, validated payload (discriminated by family). */\n  payload: RuntimeGovernancePayload;\n  /** Optional preserved upstream artifact context. */\n  upstream?: PreservedUpstreamArtifact;\n}\n\n/** Options for issuing a runtime governance record. */\nexport interface IssueOptions {\n  /** Ed25519 private key (32 bytes). Caller-provided; never stored. */\n  privateKey: Uint8Array;\n  /** Key ID (max 256 chars). */\n  kid: string;\n  /** Canonical issuer URL (HTTPS or DID). */\n  issuer: string;\n  /** Session identifier for event correlation. */\n  sessionId: string;\n  /** Agent identifier. */\n  agentId: string;\n  /** Provider name. Caller-supplied; never hardcoded. */\n  provider: string;\n}\n\n/** Result of issuing a runtime governance record. */\nexport interface IssueResult {\n  /** Compact JWS (signed Interaction Record). */\n  jws: string;\n  /** PEAC event type URI used. */\n  type: string;\n  /** Record family. */\n  family: RuntimeGovernanceFamily;\n}\n\n/** Session summary aggregated from decoded receipts. */\nexport interface SessionSummary {\n  /** Session identifier. */\n  sessionId: string;\n  /** Total receipts in the session. */\n  receipts: number;\n  /** Distinct families represented (sorted alphabetically). */\n  families: RuntimeGovernanceFamily[];\n  /** Count of receipts with unrecognized type URIs. */\n  unknownTypeCount: number;\n  /** Issuer (from the first receipt, or empty if no receipts). */\n  issuer: string;\n}\n","/**\n * Family registry.\n *\n * Maps each RuntimeGovernanceFamily to its canonical type URI\n * and Interaction Record kind. All families produce `evidence` kind.\n */\n\nimport { EVENT_TYPES, type EventType } from './constants.js';\nimport type { RuntimeGovernanceFamily } from './types.js';\n\nexport interface FamilyEntry {\n  /** Canonical type URI for this family. */\n  type: EventType;\n  /** Interaction Record kind. Always 'evidence' for runtime governance. */\n  kind: 'evidence';\n}\n\nexport const FAMILY_REGISTRY: Record<RuntimeGovernanceFamily, FamilyEntry> = {\n  policy_decision: { type: EVENT_TYPES.POLICY_DECISION, kind: 'evidence' },\n  audit_entry: { type: EVENT_TYPES.AUDIT_ENTRY, kind: 'evidence' },\n  authority_scope: { type: EVENT_TYPES.AUTHORITY_SCOPE, kind: 'evidence' },\n  lifecycle_event: { type: EVENT_TYPES.LIFECYCLE_EVENT, kind: 'evidence' },\n  trust_observation: { type: EVENT_TYPES.TRUST_OBSERVATION, kind: 'evidence' },\n  compliance_observation: { type: EVENT_TYPES.COMPLIANCE_OBSERVATION, kind: 'evidence' },\n};\n","/**\n * @peac/adapter-runtime-governance normalization and validation\n *\n * Fail-closed input validation for runtime governance payloads.\n * Rejects malformed input with descriptive errors.\n *\n * These are adapter-level shape prechecks: string presence, max lengths,\n * numeric bounds, RFC 3339 format, digest grammar (algorithm:hex), and\n * URI scheme presence. Protocol-layer validation (@peac/protocol issue()\n * and @peac/schema Wire02ClaimsSchema) remains authoritative for issuer\n * canonicality, JOSE hardening, and wire-format compliance. Adapter\n * validators catch obviously malformed input before it reaches the\n * protocol layer.\n *\n * PEAC validates the structure of carried values, not upstream truth.\n * Trust scores are structurally validated (finite, 0-1000 integer)\n * but never derived, recomputed, ranked, or authoritatively assessed.\n */\n\nimport { FIELD_LIMITS } from './constants.js';\nimport { RUNTIME_GOVERNANCE_FAMILIES } from './types.js';\nimport type {\n  RuntimeGovernanceFamily,\n  RuntimeGovernancePayload,\n  PreservedUpstreamArtifact,\n  RuntimeGovernanceEvent,\n} from './types.js';\n\nexport class NormalizationError extends Error {\n  constructor(\n    message: string,\n    public readonly field: string\n  ) {\n    super(message);\n    this.name = 'NormalizationError';\n  }\n}\n\nfunction requireString(value: unknown, field: string, maxLen: number): string {\n  if (typeof value !== 'string') {\n    throw new NormalizationError(`${field} must be a string`, field);\n  }\n  if (value.length === 0) {\n    throw new NormalizationError(`${field} must not be empty`, field);\n  }\n  if (value.length > maxLen) {\n    throw new NormalizationError(`${field} exceeds max length ${maxLen}`, field);\n  }\n  return value;\n}\n\nfunction optionalString(value: unknown, field: string, maxLen: number): string | undefined {\n  if (value === undefined || value === null) return undefined;\n  return requireString(value, field, maxLen);\n}\n\nfunction optionalFiniteNumber(\n  value: unknown,\n  field: string,\n  min?: number,\n  max?: number\n): number | undefined {\n  if (value === undefined || value === null) return undefined;\n  if (typeof value !== 'number' || !Number.isFinite(value)) {\n    throw new NormalizationError(`${field} must be a finite number`, field);\n  }\n  if (min !== undefined && value < min) {\n    throw new NormalizationError(`${field} must be >= ${min}`, field);\n  }\n  if (max !== undefined && value > max) {\n    throw new NormalizationError(`${field} must be <= ${max}`, field);\n  }\n  return value;\n}\n\nfunction optionalInteger(\n  value: unknown,\n  field: string,\n  min?: number,\n  max?: number\n): number | undefined {\n  const n = optionalFiniteNumber(value, field, min, max);\n  if (n !== undefined && !Number.isInteger(n)) {\n    throw new NormalizationError(`${field} must be an integer`, field);\n  }\n  return n;\n}\n\nfunction optionalBoolean(value: unknown, field: string): boolean | undefined {\n  if (value === undefined || value === null) return undefined;\n  if (typeof value !== 'boolean') {\n    throw new NormalizationError(`${field} must be a boolean`, field);\n  }\n  return value;\n}\n\nconst RFC3339_PATTERN = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(\\.\\d+)?(Z|[+-]\\d{2}:\\d{2})$/;\n\nfunction optionalRfc3339(value: unknown, field: string, maxLen: number): string | undefined {\n  const s = optionalString(value, field, maxLen);\n  if (s !== undefined && !RFC3339_PATTERN.test(s)) {\n    throw new NormalizationError(`${field} must be RFC 3339 format`, field);\n  }\n  return s;\n}\n\nconst DIGEST_PATTERN = /^[a-zA-Z0-9_-]+:[a-fA-F0-9]+$/;\n\nfunction optionalDigest(value: unknown, field: string, maxLen: number): string | undefined {\n  const s = optionalString(value, field, maxLen);\n  if (s !== undefined && !DIGEST_PATTERN.test(s)) {\n    throw new NormalizationError(`${field} must match digest pattern (algorithm:hex)`, field);\n  }\n  return s;\n}\n\nconst URI_PATTERN = /^[a-zA-Z][a-zA-Z0-9+.-]*:/;\n\nfunction optionalUri(value: unknown, field: string, maxLen: number): string | undefined {\n  const s = optionalString(value, field, maxLen);\n  if (s !== undefined && !URI_PATTERN.test(s)) {\n    throw new NormalizationError(`${field} must be a valid URI`, field);\n  }\n  return s;\n}\n\nfunction optionalStringArray(\n  value: unknown,\n  field: string,\n  maxLen: number,\n  maxEntryLen: number\n): string[] | undefined {\n  if (value === undefined || value === null) return undefined;\n  if (!Array.isArray(value)) {\n    throw new NormalizationError(`${field} must be an array`, field);\n  }\n  if (value.length > maxLen) {\n    throw new NormalizationError(`${field} exceeds max length ${maxLen}`, field);\n  }\n  return value.map((entry, i) => requireString(entry, `${field}[${i}]`, maxEntryLen));\n}\n\nfunction normalizePolicyDecision(input: Record<string, unknown>): RuntimeGovernancePayload {\n  return {\n    family: 'policy_decision',\n    action: requireString(input.action, 'action', FIELD_LIMITS.maxString),\n    matched_rule: optionalString(input.matched_rule, 'matched_rule', FIELD_LIMITS.maxString),\n    policy_name: optionalString(input.policy_name, 'policy_name', FIELD_LIMITS.maxString),\n    reason: optionalString(input.reason, 'reason', FIELD_LIMITS.maxString),\n    evaluation_ms: optionalFiniteNumber(input.evaluation_ms, 'evaluation_ms', 0),\n  };\n}\n\nfunction normalizeAuditEntry(input: Record<string, unknown>): RuntimeGovernancePayload {\n  return {\n    family: 'audit_entry',\n    entry_id: optionalString(input.entry_id, 'entry_id', FIELD_LIMITS.maxIdentifier),\n    event_type: optionalString(input.event_type, 'event_type', FIELD_LIMITS.maxString),\n    outcome: optionalString(input.outcome, 'outcome', FIELD_LIMITS.maxString),\n    previous_hash: optionalDigest(input.previous_hash, 'previous_hash', FIELD_LIMITS.maxDigest),\n    entry_hash: optionalDigest(input.entry_hash, 'entry_hash', FIELD_LIMITS.maxDigest),\n    trace_id: optionalString(input.trace_id, 'trace_id', FIELD_LIMITS.maxIdentifier),\n  };\n}\n\nfunction normalizeAuthorityScope(input: Record<string, unknown>): RuntimeGovernancePayload {\n  return {\n    family: 'authority_scope',\n    decision: optionalString(input.decision, 'decision', FIELD_LIMITS.maxString),\n    effective_scope: optionalStringArray(\n      input.effective_scope,\n      'effective_scope',\n      FIELD_LIMITS.maxArrayLength,\n      FIELD_LIMITS.maxArrayEntry\n    ),\n    trust_tier: optionalString(input.trust_tier, 'trust_tier', FIELD_LIMITS.maxString),\n    matched_invariants: optionalStringArray(\n      input.matched_invariants,\n      'matched_invariants',\n      FIELD_LIMITS.maxArrayLength,\n      FIELD_LIMITS.maxArrayEntry\n    ),\n  };\n}\n\nfunction normalizeLifecycleEvent(input: Record<string, unknown>): RuntimeGovernancePayload {\n  return {\n    family: 'lifecycle_event',\n    lifecycle_event_type: optionalString(\n      input.lifecycle_event_type,\n      'lifecycle_event_type',\n      FIELD_LIMITS.maxString\n    ),\n    previous_state: optionalString(input.previous_state, 'previous_state', FIELD_LIMITS.maxString),\n    new_state: optionalString(input.new_state, 'new_state', FIELD_LIMITS.maxString),\n    actor: optionalString(input.actor, 'actor', FIELD_LIMITS.maxIdentifier),\n  };\n}\n\nfunction normalizeTrustObservation(input: Record<string, unknown>): RuntimeGovernancePayload {\n  return {\n    family: 'trust_observation',\n    peer_id: optionalString(input.peer_id, 'peer_id', FIELD_LIMITS.maxIdentifier),\n    action: optionalString(input.action, 'action', FIELD_LIMITS.maxString),\n    success: optionalBoolean(input.success, 'success'),\n    trust_delta: optionalInteger(input.trust_delta, 'trust_delta', -1000, 1000),\n    trust_score: optionalInteger(input.trust_score, 'trust_score', 0, 1000),\n  };\n}\n\nfunction normalizeComplianceObservation(input: Record<string, unknown>): RuntimeGovernancePayload {\n  return {\n    family: 'compliance_observation',\n    framework: optionalString(input.framework, 'framework', FIELD_LIMITS.maxFramework),\n    compliance_score: optionalFiniteNumber(input.compliance_score, 'compliance_score', 0, 100),\n    violation_count: optionalInteger(input.violation_count, 'violation_count', 0),\n    evidence_item_count: optionalInteger(input.evidence_item_count, 'evidence_item_count', 0),\n  };\n}\n\nconst FAMILY_NORMALIZERS: Record<\n  RuntimeGovernanceFamily,\n  (input: Record<string, unknown>) => RuntimeGovernancePayload\n> = {\n  policy_decision: normalizePolicyDecision,\n  audit_entry: normalizeAuditEntry,\n  authority_scope: normalizeAuthorityScope,\n  lifecycle_event: normalizeLifecycleEvent,\n  trust_observation: normalizeTrustObservation,\n  compliance_observation: normalizeComplianceObservation,\n};\n\nfunction normalizeUpstream(input: unknown): PreservedUpstreamArtifact | undefined {\n  if (input === undefined || input === null) return undefined;\n  if (typeof input !== 'object' || Array.isArray(input)) {\n    throw new NormalizationError('upstream must be a plain object', 'upstream');\n  }\n  const obj = input as Record<string, unknown>;\n  return {\n    source_system: optionalString(\n      obj.source_system,\n      'upstream.source_system',\n      FIELD_LIMITS.maxIdentifier\n    ),\n    source_event_type: optionalString(\n      obj.source_event_type,\n      'upstream.source_event_type',\n      FIELD_LIMITS.maxIdentifier\n    ),\n    source_event_id: optionalString(\n      obj.source_event_id,\n      'upstream.source_event_id',\n      FIELD_LIMITS.maxIdentifier\n    ),\n    source_timestamp: optionalRfc3339(\n      obj.source_timestamp,\n      'upstream.source_timestamp',\n      FIELD_LIMITS.maxTimestamp\n    ),\n    source_artifact_hash: optionalDigest(\n      obj.source_artifact_hash,\n      'upstream.source_artifact_hash',\n      FIELD_LIMITS.maxDigest\n    ),\n    source_artifact_ref: optionalUri(\n      obj.source_artifact_ref,\n      'upstream.source_artifact_ref',\n      FIELD_LIMITS.maxUri\n    ),\n    source_cloud_event_type: optionalString(\n      obj.source_cloud_event_type,\n      'upstream.source_cloud_event_type',\n      FIELD_LIMITS.maxCloudEventType\n    ),\n  };\n}\n\n/**\n * Normalize and validate a raw runtime governance event input.\n * Fail-closed: rejects malformed input with descriptive errors.\n */\nexport function normalizeRuntimeGovernanceEvent(input: unknown): RuntimeGovernanceEvent {\n  if (typeof input !== 'object' || input === null || Array.isArray(input)) {\n    throw new NormalizationError('input must be a plain object', 'input');\n  }\n  const obj = input as Record<string, unknown>;\n\n  const eventName = requireString(obj.event_name, 'event_name', FIELD_LIMITS.maxString);\n\n  if (typeof obj.payload !== 'object' || obj.payload === null || Array.isArray(obj.payload)) {\n    throw new NormalizationError('payload must be a plain object', 'payload');\n  }\n  const payloadObj = obj.payload as Record<string, unknown>;\n\n  const family = payloadObj.family;\n  if (\n    typeof family !== 'string' ||\n    !(RUNTIME_GOVERNANCE_FAMILIES as readonly string[]).includes(family)\n  ) {\n    throw new NormalizationError(\n      `payload.family must be one of: ${RUNTIME_GOVERNANCE_FAMILIES.join(', ')}`,\n      'payload.family'\n    );\n  }\n\n  const normalizer = FAMILY_NORMALIZERS[family as RuntimeGovernanceFamily];\n  const payload = normalizer(payloadObj);\n\n  return {\n    event_name: eventName,\n    payload,\n    upstream: normalizeUpstream(obj.upstream),\n  };\n}\n","/**\n * @peac/adapter-runtime-governance extension builders\n *\n * Explicit per-family extension data builders. Each builder selects\n * exactly which fields appear in the extension output. Unknown upstream\n * fields never become top-level extension keys.\n */\n\nimport type {\n  RuntimeGovernancePayload,\n  PolicyDecisionPayload,\n  AuditEntryPayload,\n  AuthorityScopePayload,\n  LifecycleEventPayload,\n  TrustObservationPayload,\n  ComplianceObservationPayload,\n  PreservedUpstreamArtifact,\n  RuntimeGovernanceFamily,\n} from './types.js';\n\ninterface CommonFields {\n  session_id: string;\n  event: string;\n  agent_id: string;\n  provider: string;\n}\n\nfunction stripUndefined(obj: Record<string, unknown>): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(obj)) {\n    if (value !== undefined) {\n      if (typeof value === 'object' && value !== null && !Array.isArray(value)) {\n        const nested = stripUndefined(value as Record<string, unknown>);\n        if (Object.keys(nested).length > 0) {\n          result[key] = nested;\n        }\n      } else {\n        result[key] = value;\n      }\n    }\n  }\n  return result;\n}\n\nfunction buildPolicyDecisionExtension(\n  payload: PolicyDecisionPayload,\n  common: CommonFields,\n  upstream?: PreservedUpstreamArtifact\n): Record<string, unknown> {\n  return stripUndefined({\n    ...common,\n    action: payload.action,\n    matched_rule: payload.matched_rule,\n    policy_name: payload.policy_name,\n    reason: payload.reason,\n    evaluation_ms: payload.evaluation_ms,\n    upstream,\n  });\n}\n\nfunction buildAuditEntryExtension(\n  payload: AuditEntryPayload,\n  common: CommonFields,\n  upstream?: PreservedUpstreamArtifact\n): Record<string, unknown> {\n  return stripUndefined({\n    ...common,\n    entry_id: payload.entry_id,\n    event_type: payload.event_type,\n    outcome: payload.outcome,\n    previous_hash: payload.previous_hash,\n    entry_hash: payload.entry_hash,\n    trace_id: payload.trace_id,\n    upstream,\n  });\n}\n\nfunction buildAuthorityScopeExtension(\n  payload: AuthorityScopePayload,\n  common: CommonFields,\n  upstream?: PreservedUpstreamArtifact\n): Record<string, unknown> {\n  return stripUndefined({\n    ...common,\n    decision: payload.decision,\n    effective_scope: payload.effective_scope,\n    trust_tier: payload.trust_tier,\n    matched_invariants: payload.matched_invariants,\n    upstream,\n  });\n}\n\nfunction buildLifecycleEventExtension(\n  payload: LifecycleEventPayload,\n  common: CommonFields,\n  upstream?: PreservedUpstreamArtifact\n): Record<string, unknown> {\n  return stripUndefined({\n    ...common,\n    lifecycle_event_type: payload.lifecycle_event_type,\n    previous_state: payload.previous_state,\n    new_state: payload.new_state,\n    actor: payload.actor,\n    upstream,\n  });\n}\n\nfunction buildTrustObservationExtension(\n  payload: TrustObservationPayload,\n  common: CommonFields,\n  upstream?: PreservedUpstreamArtifact\n): Record<string, unknown> {\n  return stripUndefined({\n    ...common,\n    peer_id: payload.peer_id,\n    action: payload.action,\n    success: payload.success,\n    trust_delta: payload.trust_delta,\n    trust_score: payload.trust_score,\n    upstream,\n  });\n}\n\nfunction buildComplianceObservationExtension(\n  payload: ComplianceObservationPayload,\n  common: CommonFields,\n  upstream?: PreservedUpstreamArtifact\n): Record<string, unknown> {\n  return stripUndefined({\n    ...common,\n    framework: payload.framework,\n    compliance_score: payload.compliance_score,\n    violation_count: payload.violation_count,\n    evidence_item_count: payload.evidence_item_count,\n    upstream,\n  });\n}\n\ntype ExtensionBuilder = (\n  payload: RuntimeGovernancePayload,\n  common: CommonFields,\n  upstream?: PreservedUpstreamArtifact\n) => Record<string, unknown>;\n\n/**\n * Per-family extension builder registry.\n * issueRuntimeGovernanceRecord() dispatches to the correct builder.\n */\nexport const FAMILY_BUILDERS: Record<RuntimeGovernanceFamily, ExtensionBuilder> = {\n  policy_decision: (p, c, u) => buildPolicyDecisionExtension(p as PolicyDecisionPayload, c, u),\n  audit_entry: (p, c, u) => buildAuditEntryExtension(p as AuditEntryPayload, c, u),\n  authority_scope: (p, c, u) => buildAuthorityScopeExtension(p as AuthorityScopePayload, c, u),\n  lifecycle_event: (p, c, u) => buildLifecycleEventExtension(p as LifecycleEventPayload, c, u),\n  trust_observation: (p, c, u) =>\n    buildTrustObservationExtension(p as TrustObservationPayload, c, u),\n  compliance_observation: (p, c, u) =>\n    buildComplianceObservationExtension(p as ComplianceObservationPayload, c, u),\n};\n","/**\n * @peac/adapter-runtime-governance record issuance\n *\n * Generic issuance function that dispatches to per-family extension\n * builders. Source-specific mappers (e.g., mapAgtEvent) produce the\n * RuntimeGovernanceEvent input; this function handles signing.\n *\n * PEAC validates the structure and signature of the PEAC record,\n * not the truth of the upstream governance decision or the operating\n * effectiveness of the upstream control plane.\n */\n\nimport { issue } from '@peac/protocol';\nimport { EXTENSION_NAMESPACE } from './constants.js';\nimport { FAMILY_REGISTRY } from './families.js';\nimport { FAMILY_BUILDERS } from './builders.js';\nimport type { RuntimeGovernanceEvent, IssueOptions, IssueResult } from './types.js';\n\n/**\n * Issue a signed Interaction Record for a normalized runtime governance event.\n *\n * Use source-specific mappers (e.g., mapAgtEvent) to produce the event input.\n * The provider field is always caller-supplied and never hardcoded.\n */\nfunction validateIssueOptions(options: IssueOptions): void {\n  if (!(options.privateKey instanceof Uint8Array) || options.privateKey.length !== 32) {\n    throw new Error('privateKey must be a 32-byte Uint8Array');\n  }\n  if (typeof options.kid !== 'string' || options.kid.length === 0 || options.kid.length > 256) {\n    throw new Error('kid must be a non-empty string (max 256 chars)');\n  }\n  if (typeof options.issuer !== 'string' || options.issuer.length === 0) {\n    throw new Error('issuer must be a non-empty string');\n  }\n  if (\n    typeof options.sessionId !== 'string' ||\n    options.sessionId.length === 0 ||\n    options.sessionId.length > 256\n  ) {\n    throw new Error('sessionId must be a non-empty string (max 256 chars)');\n  }\n  if (\n    typeof options.agentId !== 'string' ||\n    options.agentId.length === 0 ||\n    options.agentId.length > 256\n  ) {\n    throw new Error('agentId must be a non-empty string (max 256 chars)');\n  }\n  if (\n    typeof options.provider !== 'string' ||\n    options.provider.length === 0 ||\n    options.provider.length > 256\n  ) {\n    throw new Error('provider must be a non-empty string (max 256 chars)');\n  }\n}\n\nexport async function issueRuntimeGovernanceRecord(\n  event: RuntimeGovernanceEvent,\n  options: IssueOptions\n): Promise<IssueResult> {\n  validateIssueOptions(options);\n  const entry = FAMILY_REGISTRY[event.payload.family];\n  const { privateKey, kid, issuer, sessionId, agentId, provider } = options;\n\n  const common = {\n    session_id: sessionId,\n    event: event.event_name,\n    agent_id: agentId,\n    provider,\n  };\n\n  const extensionData = FAMILY_BUILDERS[event.payload.family](\n    event.payload,\n    common,\n    event.upstream\n  );\n\n  const { jws } = await issue({\n    iss: issuer,\n    kind: entry.kind,\n    type: entry.type,\n    privateKey,\n    kid,\n    extensions: { [EXTENSION_NAMESPACE]: extensionData },\n  });\n\n  return { jws, type: entry.type, family: event.payload.family };\n}\n","/**\n * @peac/adapter-runtime-governance session summary builder\n *\n * Aggregates decoded receipts into a session summary.\n * Decode-only (does NOT verify signatures; caller should verify first).\n * Returns deterministic family order (sorted alphabetically).\n * Counts unknown/unsupported type URIs separately.\n * Never implies verification or finality.\n */\n\nimport { decode } from '@peac/crypto';\nimport { EXTENSION_NAMESPACE, TYPE_PREFIX } from './constants.js';\nimport {\n  RUNTIME_GOVERNANCE_FAMILIES,\n  type RuntimeGovernanceFamily,\n  type SessionSummary,\n} from './types.js';\n\n/** Reverse lookup set for known family suffixes. */\nconst KNOWN_SUFFIXES = new Set(RUNTIME_GOVERNANCE_FAMILIES.map((f) => f.replace(/_/g, '-')));\n\n/**\n * Build a session summary from an array of signed JWS receipts.\n *\n * Decodes each JWS (does NOT verify signatures; caller should verify first).\n * Extracts session ID, families, and issuer from claims and extensions.\n * Unknown type URIs are counted but not included in the families list.\n *\n * @param receipts - Array of compact JWS strings (must be valid JWS format)\n * @returns Session summary with deterministic family ordering\n */\nexport function buildSessionSummary(receipts: string[]): SessionSummary {\n  if (receipts.length === 0) {\n    return { sessionId: '', receipts: 0, families: [], unknownTypeCount: 0, issuer: '' };\n  }\n\n  let sessionId = '';\n  let issuer = '';\n  let unknownTypeCount = 0;\n  const familySet = new Set<RuntimeGovernanceFamily>();\n\n  for (const jws of receipts) {\n    const decoded = decode(jws);\n    const claims = decoded.payload as Record<string, unknown>;\n\n    if (!issuer && typeof claims.iss === 'string') {\n      issuer = claims.iss;\n    }\n\n    const extensions = claims.extensions as Record<string, unknown> | undefined;\n    const govExt = extensions?.[EXTENSION_NAMESPACE] as Record<string, unknown> | undefined;\n\n    if (govExt) {\n      if (!sessionId && typeof govExt.session_id === 'string') {\n        sessionId = govExt.session_id;\n      }\n    }\n\n    const type = claims.type as string | undefined;\n    if (type?.startsWith(TYPE_PREFIX)) {\n      const suffix = type.slice(TYPE_PREFIX.length);\n      if (KNOWN_SUFFIXES.has(suffix)) {\n        familySet.add(suffix.replace(/-/g, '_') as RuntimeGovernanceFamily);\n      } else {\n        unknownTypeCount++;\n      }\n    } else if (type) {\n      unknownTypeCount++;\n    }\n  }\n\n  return {\n    sessionId,\n    receipts: receipts.length,\n    families: [...familySet].sort(),\n    unknownTypeCount,\n    issuer,\n  };\n}\n","/**\n * AGT-specific mapper\n *\n * Normalizes AGT-shaped JSON input into the generic\n * RuntimeGovernanceEvent model. Accepts raw JSON (not AGT SDK objects).\n *\n * Pinned to AGT v3.1.0 pre-release documentation (as of 2026-04-13).\n */\n\nimport { normalizeRuntimeGovernanceEvent, NormalizationError } from '../normalize.js';\nimport type { RuntimeGovernanceEvent, RuntimeGovernanceFamily } from '../types.js';\n\n/** AGT-shaped input. Raw JSON, not SDK objects. */\nexport interface AgtEventInput {\n  /** Family name matching a RuntimeGovernanceFamily. */\n  family: string;\n  /** Specific event name (e.g., 'policy.evaluated'). */\n  event: string;\n  /** Event-specific data fields. */\n  data: Record<string, unknown>;\n  /** Optional upstream source context. */\n  source?: {\n    system?: string;\n    event_type?: string;\n    event_id?: string;\n    timestamp?: string;\n    artifact_hash?: string;\n    artifact_ref?: string;\n    cloud_event_type?: string;\n  };\n}\n\nconst AGT_FAMILY_MAP: Record<string, RuntimeGovernanceFamily> = {\n  policy_decision: 'policy_decision',\n  audit_entry: 'audit_entry',\n  authority_scope: 'authority_scope',\n  lifecycle_event: 'lifecycle_event',\n  trust_observation: 'trust_observation',\n  compliance_observation: 'compliance_observation',\n};\n\n/**\n * Map an AGT-shaped event input to a normalized RuntimeGovernanceEvent.\n * Throws NormalizationError on unrecognized or malformed input.\n */\nexport function mapAgtEvent(input: AgtEventInput): RuntimeGovernanceEvent {\n  const family = AGT_FAMILY_MAP[input.family];\n  if (!family) {\n    throw new NormalizationError(`unrecognized AGT family: ${input.family}`, 'family');\n  }\n\n  const raw = {\n    event_name: input.event,\n    payload: {\n      family,\n      ...input.data,\n    },\n    upstream: input.source\n      ? {\n          source_system: input.source.system,\n          source_event_type: input.source.event_type,\n          source_event_id: input.source.event_id,\n          source_timestamp: input.source.timestamp,\n          source_artifact_hash: input.source.artifact_hash,\n          source_artifact_ref: input.source.artifact_ref,\n          source_cloud_event_type: input.source.cloud_event_type,\n        }\n      : undefined,\n  };\n\n  return normalizeRuntimeGovernanceEvent(raw);\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @peac/adapter-runtime-governance
+ *
+ * Generic runtime governance adapter for PEAC interaction records.
+ * Maps runtime governance artifacts to signed Interaction Records
+ * using 6 observation-specific type URIs.
+ *
+ * PEAC validates the structure and signature of the PEAC record,
+ * not the truth of the upstream governance decision or the operating
+ * effectiveness of the upstream control plane.
+ *
+ * AGT is the first mapper. The provider field is always caller-supplied.
+ * No vendor SDK dependencies.
+ */
+export { EXTENSION_NAMESPACE, TYPE_PREFIX, EVENT_TYPES, FIELD_LIMITS, type EventType, } from './constants.js';
+export { RUNTIME_GOVERNANCE_FAMILIES, type RuntimeGovernanceFamily, type PreservedUpstreamArtifact, type PolicyDecisionPayload, type AuditEntryPayload, type AuthorityScopePayload, type LifecycleEventPayload, type TrustObservationPayload, type ComplianceObservationPayload, type RuntimeGovernancePayload, type RuntimeGovernanceEvent, type IssueOptions, type IssueResult, type SessionSummary, } from './types.js';
+export { FAMILY_REGISTRY, type FamilyEntry } from './families.js';
+export { normalizeRuntimeGovernanceEvent, NormalizationError } from './normalize.js';
+export { issueRuntimeGovernanceRecord } from './issue.js';
+export { buildSessionSummary } from './session-summary.js';
+export { mapAgtEvent, type AgtEventInput } from './mappers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,YAAY,EACZ,KAAK,SAAS,GACf,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,2BAA2B,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,cAAc,GACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAGlE,OAAO,EAAE,+BAA+B,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGrF,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAG1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC"}