@plasius/schema 1.3.0 → 1.4.0

package/README.md

@@ -20,6 +20,23 @@ Apache-2.0. ESM + CJS builds. TypeScript types included.
 npm install @plasius/schema
 ```
 
+## Personal names and display names
+
+Use `validateName` for first, middle, and last names. It accepts Unicode
+letters and combining marks together with common name punctuation, but it does
+not accept digits. Use `validateDisplayName` for public display names, where
+Unicode decimal digits are also valid:
+
+```ts
+import { validateDisplayName, validateName } from "@plasius/schema";
+
+validateDisplayName("Player 2"); // true
+validateName("Player 2"); // false
+```
+
+Both validators reject empty values, control characters, unsupported symbols,
+and values longer than 256 characters.
+
 ## Packaging policy (template baseline)
 
 `@plasius/schema` is the baseline template for new `@plasius/*` packages.
@@ -28,6 +45,46 @@ uses `dist-cjs/*.js` with `type: module`, it must generate
 `dist-cjs/package.json` with `{ "type": "commonjs" }` and validate this in
 `pack:check` before publish.
 
+### Private-artifact policy
+
+Signed contributor agreements and contributor acceptance records belong only
+in the approved access-controlled system outside source control. The
+zero-dependency repository gate inspects path metadata without opening,
+hashing, copying, or logging suspected private artifacts:
+
+```bash
+npm run privacy:check
+npm run test:privacy
+npm run build
+npm run pack:check
+```
+
+`privacy:check` checks both filesystem metadata and the proposed Git index. It
+rejects CSV files, contributor/CLA registry variants, contributor acceptance,
+signature, and submission record categories, signed CLA/contributor agreement
+storage, and paths that combine privacy and registry markers. Explicit public
+process, template, schema, validator, and policy files remain allowed only as
+terminal path components; matching private-record categories used as
+directories fail closed regardless of their descendants.
+Unicode compatibility normalization occurs before separator folding so
+hierarchical, case-variant, and compatibility-separated protected paths cannot
+evade the same path-only classification. An unstaged deletion remains a
+failure until the deletion is staged. Invalid Git worktree metadata, symbolic
+links, and non-regular entries fail closed, and failures report only rule IDs
+and counts.
+
+`pack:check` requires the exact `dist`, `THIRD_PARTY_NOTICES.md`, and `unicode`
+`package.json.files` entries, then retains prefix-stripped raw member identities
+and cardinality while comparing the canonical `npm pack --dry-run` manifest
+with the package's exact public allowlist. Duplicate members, raw aliases, and
+many-to-one normalization collisions fail without logging member values. The
+same zero-dependency inventory policy runs over the digest-verified sealed
+tarball immediately before publication. The isolated npm cache is removed
+whether the check passes or fails. CI runs the repository gate before
+dependency installation; release preparation and publication repeat the gate.
+These path controls are defense in depth and do not replace secret scanning,
+access controls, or incident response.
+
 ---
 
 ## Player-system event contracts
@@ -49,6 +106,158 @@ Only the stable `playerId` is treated as a personal identifier. It is retained
 for storage partitioning and pseudonymized by `sanitizeForLog`; unknown fields
 and hidden server truth are excluded by schema serialization.
 
+## Privacy-safe feedback contracts
+
+The package exports closed, versioned contracts for feedback intake and
+reporting:
+
+```ts
+import {
+  FeedbackBugPacketSchema,
+  FeedbackPublicSummarySchema,
+  FeedbackRichTextAstSchema,
+  FeedbackReviewPacketSchema,
+  FeedbackTransientAnalysisRequestSchema,
+  validateFeedbackTransientAnalysisRequest,
+} from "@plasius/schema";
+import type {
+  FeedbackBugTransientAnalysisRequest,
+  FeedbackReviewTransientAnalysisRequest,
+} from "@plasius/schema";
+```
+
+Renderer and browser packages that need only the game-diagnostics vocabulary
+should import `@plasius/schema/feedback-diagnostics-vocabulary`. This
+lightweight entrypoint exports the canonical surface/provenance pairs, buckets,
+feature/counter/error allowlists, bounds, and discriminated type without
+loading the schema builder. Server validation and analysis tools should import
+`@plasius/schema/feedback-diagnostics`, which adds the canonical runtime schema.
+Both entrypoints derive from the same source definitions and preserve
+structural parity in ESM and CommonJS builds, so consumers cannot maintain a
+second diagnostics dialect. Use `validateFeedbackGameDiagnostics()` when a
+consumer needs a validation result whose `value` retains the correlated
+`FeedbackGameDiagnostics` TypeScript type.
+
+Free-form feedback exists only in `FeedbackRichTextAstSchema`, which is
+intended for a transient no-retention scanner. Its text nodes are marked
+high-PII, clear-on-storage, and omit-from-logs. The interoperable document is
+rooted at
+`{ type: "doc", version: "1.0.0", schemaVersion: "1", children }`; it permits
+only paragraph and bullet-list-item blocks with bounded indentation and text
+nodes with bold, italic, and underline marks. Narrative must already be NFKC
+normalised against the exported `unicode-15.1.0-nfkc-v1` profile before
+validation. Assignment is checked against the original code units before host
+NFKC is invoked. Its 4,000-character ceiling counts Unicode code points and
+inter-block newlines consistently with the private scanner, with a separate
+8,000 UTF-16-unit safety ceiling. HTML, Markdown links, protocol-relative
+links, and `http`, `https`, `ftp`, `mailto`, `javascript`, `data`, `blob`, and
+`file` schemes are rejected.
+
+`FeedbackTransientAnalysisRequestSchema` is closed and discriminated by
+`purpose`. A bug analysis request must carry a closed `surfaceId`; the service
+must verify it against the caller's capability-projected catalog before
+handing ciphertext to the private scanner. A review analysis request must omit
+`surfaceId`. The exported bug/review request types preserve the same
+discriminator for TypeScript consumers;
+`validateFeedbackTransientAnalysisRequest()` preserves that union on
+successful runtime validation.
+
+Final bug and review JSON bodies deliberately contain no `submissionId`.
+Consuming HTTP APIs require `Idempotency-Key` as the sole final-submission
+correlation mechanism and keep it in the isolated abuse/idempotency control
+plane. It must never be copied into a draft, accepted packet, report, log, or
+public/Admin/MCP projection.
+
+The complete Unicode 15.1 unassigned corpus is shipped independently of the
+host runtime:
+
+```ts
+import {
+  FEEDBACK_UNICODE_PROFILE_ENDPOINT_SHA256,
+  FEEDBACK_UNICODE_PROFILE_ID,
+  containsFeedbackUnicodeProfileUnsupportedText,
+  isFeedbackUnicodeProfileUnassigned,
+} from "@plasius/schema/feedback-unicode-profile";
+```
+
+`containsFeedbackUnicodeProfileUnsupportedText` rejects every code point
+unassigned in Unicode 15.1 and every lone UTF-16 surrogate. The code-point
+helper decodes canonical, delta ULEB128/base64url once and uses binary search
+over 707 half-open ranges. Non-JavaScript scanners can consume the same
+language-neutral corpus from
+`@plasius/schema/unicode/feedback-unicode-15.1.0-unassigned.json` and verify
+its published endpoint digest. The corpus is generated from the exact
+build-time dependency `@unicode/unicode-15.1.0@1.6.17`; run
+`npm run unicode:check` to prove the checked-in artifact is current. See
+[ADR-0007](./docs/adrs/adr-0007-pinned-unicode-feedback-profile.md) and
+[third-party notices](./THIRD_PARTY_NOTICES.md).
+
+The three typed feedback subpaths publish both modern `exports.types` entries
+and exact `typesVersions` fallbacks. This keeps their declarations resolvable
+for consumers that still compile CommonJS with classic TypeScript
+`moduleResolution: "node"`, without opening a wildcard route for unknown
+subpaths.
+
+Validated reusable fragments retain exact `type` and `version` metadata when
+embedded in parent contracts. This makes the output of the encrypted-envelope,
+derived-analysis, and game-diagnostics schemas directly composable into their
+request or packet schemas without a metadata-stripping step.
+
+Accepted packet, diagnostics, report, checkpoint, and public-summary schemas
+cannot express narrative, reporter identity or pseudonyms, network/client
+metadata, arbitrary URLs, pixels, quotes, summaries, embeddings, content
+hashes, or model traces. Game surfaces, provenance contracts, features,
+counters, and error codes are closed enums rather than attacker-controlled
+safe-looking strings. The public summary omits counts, averages, and trends
+entirely when the ten-review privacy threshold is not met and always carries
+13 canonical UTC week slots, using suppressed gaps where a week is below the
+same threshold. A trend is emitted only with a preceding 90-day comparison
+that independently meets the ten-review threshold; the schema derives its
+delta and enforces `up`/`down` only at a change of at least 0.1 stars.
+
+Hourly reports bind targets to the closed surface registry and include
+renderer/backend/viewport/frame-rate/frame-time plus closed diagnostic
+feature/counter/error distributions. Release IDs and build IDs are
+server-registry values: intake clients never submit them, and consumers must
+resolve them from trusted deployment metadata before packet construction.
+Advisory trigger counts and ordered recommendation IDs are derived exactly
+from the report distributions and processor lag rather than accepted as
+free-standing claims. Feedback context caps remaining bug cooldown at 24
+hours and review suppression at 30 days; acceptance receipts distinguish bugs
+from reviews and accept only the five-step bug ladder or exact 30-day review
+period.
+
+All feedback contracts opt in to recursive unknown-field rejection, including
+direct references and arrays of references. Unshaped references admit only
+`type` and `id`; shaped references admit only those keys plus their declared
+fields. Closed feedback vocabularies and definition objects are runtime frozen
+before schemas capture them. Before recursive cloning, strict validation also
+performs an iterative whole-value node/depth budget so malformed containers
+hidden under scalar fields cannot exhaust the call stack. The
+general schema default remains backwards-compatible stripping:
+
+```ts
+const ClosedPacket = createSchema(fields, "closed-packet", {
+  version: "1.0.0",
+  piiEnforcement: "strict",
+  unknownFields: "reject",
+  identity: "exact",
+});
+```
+
+Schema-level validators receive an optional, frozen
+`SchemaValidationContext` with only `wasProvided(fieldName)`. This lets a
+closed discriminator distinguish omission from an explicit `null` without
+giving validation hooks access to raw field values.
+
+Unknown-field errors name only the schema-owned container and never echo an
+untrusted key or value. Exact identity rejects a mismatched contract type or
+version. The schemas constrain data shape; consumers must still
+perform the documented private PII scan, discard narrative immediately, and
+validate again before every storage write. See the
+[feedback contract design](./docs/design/feedback-contracts.md) and
+[ADR-0006](./docs/adrs/adr-0006-privacy-safe-feedback-contract-boundaries.md).
+
 ## Demo
 
 ```bash
@@ -62,7 +271,7 @@ See `demo/README.md` for the local sanity-check scaffold.
 
 ## Node.js Version
 
-This project uses Node.js **22** by default. The version is pinned in the [`.nvmrc`](./.nvmrc) file.
+This project uses Node.js **24** by default. The version is pinned in the [`.nvmrc`](./.nvmrc) file.
 
 If you use [nvm](https://github.com/nvm-sh/nvm), simply run:
 
@@ -303,3 +512,28 @@ We welcome contributions! Please see [CONTRIBUTING.md](./CONTRIBUTING.md) for gu
 ## License
 
 Licensed under the [Apache-2.0 License](./LICENSE).
+
+<!-- BEGIN PLASIUS RELEASE INTEGRITY -->
+## Release integrity
+
+CI keeps the administrative contributor registry outside Git and npm package
+artifacts using exact, case-normalised path checks. Pull requests run on
+GitHub-hosted runners after same-repository admission; protected `main` CI uses
+the workflow-restricted self-hosted group. Release preparation and npm
+publication use GitHub-hosted runners with Node.js 24.18.0 LTS.
+
+Dispatch `cd.yml` from protected `main` with `phase: prepare`. Release metadata
+lands through a unique pull request. After successful push-triggered CI for the
+exact merge SHA, the workflow dispatches a separate `publish` run from that
+same SHA. Publication fails closed if `main`, CI evidence, the version, tag,
+prerelease identity, artifact digests, or npm registry integrity differ.
+
+The read-only validation job installs dependencies, validates the package,
+builds an SBOM, and seals an immutable tarball. The `production` job runs no
+package lifecycle or dependency code; it verifies the exact artifact hand-off
+and rechecks the collision-free exact raw-member inventory before publishing
+that tarball through npm OIDC with provenance. No npm write token or fallback
+is configured. The trusted publisher must be bound to `Plasius-LTD/schema`,
+`cd.yml`, `production`, and `npm publish`. Rollback is to disable `cd.yml`;
+never restore token-based publication.
+<!-- END PLASIUS RELEASE INTEGRITY -->

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,75 @@
+# Third-Party Notices
+
+The distributed projection
+`unicode/feedback-unicode-15.1.0-unassigned.json` is generated from
+`@unicode/unicode-15.1.0` version `1.6.17`, specifically its
+`General_Category/Unassigned` ranges. The pinned package metadata identifies
+Mathias Bynens as the author and declares the MIT license. Its data is derived
+from Unicode data files. Both applicable notices are reproduced below.
+
+## `@unicode/unicode-15.1.0` — MIT License
+
+Copyright Mathias Bynens <https://mathiasbynens.be/>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+## Unicode License V3
+
+UNICODE LICENSE V3
+
+COPYRIGHT AND PERMISSION NOTICE
+
+Copyright © 2016-2025 Unicode, Inc.
+
+NOTICE TO USER: Carefully read the following legal agreement. BY
+DOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING DATA FILES, AND/OR
+SOFTWARE, YOU UNEQUIVOCALLY ACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE
+TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE, DO NOT
+DOWNLOAD, INSTALL, COPY, DISTRIBUTE OR USE THE DATA FILES OR SOFTWARE.
+
+Permission is hereby granted, free of charge, to any person obtaining a
+copy of data files and any associated documentation (the "Data Files") or
+software and any associated documentation (the "Software") to deal in the
+Data Files or Software without restriction, including without limitation
+the rights to use, copy, modify, merge, publish, distribute, and/or sell
+copies of the Data Files or Software, and to permit persons to whom the
+Data Files or Software are furnished to do so, provided that either (a)
+this copyright and permission notice appear with all copies of the Data
+Files or Software, or (b) this copyright and permission notice appear in
+associated Documentation.
+
+THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
+KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF
+THIRD PARTY RIGHTS.
+
+IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS NOTICE
+BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES,
+OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THE DATA
+FILES OR SOFTWARE.
+
+Except as contained in this notice, the name of a copyright holder shall
+not be used in advertising or otherwise to promote the sale, use or other
+dealings in these Data Files or Software without prior written
+authorization of the copyright holder.
+
+SPDX-License-Identifier: Unicode-3.0

package/dist/chunk-6FE4FLKF.js

@@ -0,0 +1,254 @@
+// unicode/feedback-unicode-15.1.0-unassigned.json
+var feedback_unicode_15_1_0_unassigned_default = {
+  profileId: "unicode-15.1.0-nfkc-v1",
+  unicodeVersion: "15.1.0",
+  sourcePackage: "@unicode/unicode-15.1.0",
+  sourcePackageVersion: "1.6.17",
+  sourceProperty: "General_Category/Unassigned",
+  rangeEncoding: "flat-half-open-delta-uleb128-base64url-v1",
+  rangeCount: 707,
+  endpointCount: 1414,
+  codePointCount: 824718,
+  endpointSha256: "591e457524d6b4b988aa7c7687e76c95a78370fea38bbd1b09085be7fd935ef3",
+  payload: "-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-IhoBWQzWARpQAVYCZwUrAV4BVAswAe3kAQM3CdwCFLgBCMsBBQIBAQEFGDsDCgY4CEYIDAZ0Cx4DTgELBCEBNwkOAgoCZxgcCgYCBgIGCQcBBwE8BH4CCgakVwwXBDEE7kQCaiYHDAUFGgEFAQEBAgECAX0QvQMCNgcBICoGMwETAQQEBQGHAQIBAb4BAwYCBgIGAgMDBwEHCgUCDAEaARMBAgEPAg4iewUDBC0DWAENAwEvLoIBHQMxDxwEJAkeBSsFHgElBA4qngECCgYkBCQEKAg0CwwBDwEHAQIBCwEPAQcBAkO3AgkWCggYBgEqAQlFBgIBASwBAgMBAhcBSAgJMBMBAgUhAxsFAUA4BBQCMgECBQgBAwEdAgMECgcJB0AgJwQMCTYDHQIbBRoHBAwHUEk3Mw0zBy4ICqYCHwEqAQMCAksrCCoWGiYcFBcJTgQkCUQKAQIZBwoGNQESCCcJYAEUCxIBLz4HAQEBBAEPAQsGOwUKBgQBCAICAhYBBwECAQUBCgICAgMCAQYBBQcCBwMFiwFcAQUeSAgKpgE2AiYiRQsKBg0TOgYKNhsCDwQXuQE8ZFMMCAIBAggBAgEeAQICDAkKRggCLgILG0gIUw1JBwr2AQkBLQEOCh0DIAIWAQ5JBwECASwDAQECAQkICgYGAQIBJQECAQYHCrYCGQcRASkDHFYBDzINmwdmbwEFC8QBzBRjDdYIqh_HBLlDuQQHHwEKBFEBCgYeAgYKRgoKAQcBFQUTsAVbZUsEOQcRQAULAg74LwjWCSoJ50UEAQcBAgGjAg8BHQMCAQ4ECIwDhBJrBQ0DCQcKAgjcJC4CFwl0PPYBCicCwgEVRnoUDBQMVwkZhwFVAUcBAgIBAgICBAEMAQEBBwFBAQQCCAEHARwBBAEFAQEDBwHUAgKkAgK-BQ8FAQ_QCB8GBtUBBwERAgcBAgEFBT4hAXAtAw4CCgQCwAIfEToFAdADKuYFBwEEAQIBDwHFAQIQKUwECgQCkQZETD3CAQQBGwECAQECAQEKAQQBAQEBBgEEAQEBAQEBAwECAQECAQEBAQEBAQEBAQIBAQIEAQcBBAEEAQEBCgERBQMBBQERNAKOAiwEZAwPAg8BDwElCq4BOB0NLAQJBwIOBpoB2AcEEQMNA3cEXwYMBAEPDAQ4CAoGKAgeAgJO1AIMDgINAwkHLgEHCA4ECQcJB5MBATclCoYI4M0CILogBt4BAoItDrE6D-4EohOeBOILyyYF4CDRuCsBHmCAAfABkPwD_v8DAv7_AwI"
+};
+
+// src/feedback-unicode-profile.codec.ts
+var BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+var BASE64URL_PATTERN = /^[A-Za-z0-9_-]+$/;
+var MAX_UNICODE_ENDPOINT = 1114112;
+var MAX_ENCODED_PAYLOAD_CHARACTERS = 8192;
+var MAX_ULEB128_BYTES = 5;
+var MAX_PROFILE_RANGE_COUNT = 707;
+var MAX_PROFILE_ENDPOINT_COUNT = MAX_PROFILE_RANGE_COUNT * 2;
+var MAX_PROFILE_CODE_POINT_COUNT = MAX_UNICODE_ENDPOINT;
+var ARTIFACT_KEYS = /* @__PURE__ */ new Set([
+  "profileId",
+  "unicodeVersion",
+  "sourcePackage",
+  "sourcePackageVersion",
+  "sourceProperty",
+  "rangeEncoding",
+  "rangeCount",
+  "endpointCount",
+  "codePointCount",
+  "endpointSha256",
+  "payload"
+]);
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasExpectedMetadata(artifact, expected) {
+  return Object.keys(artifact).length === ARTIFACT_KEYS.size && Object.keys(artifact).every((key) => ARTIFACT_KEYS.has(key)) && artifact.profileId === expected.profileId && artifact.unicodeVersion === expected.unicodeVersion && artifact.sourcePackage === expected.sourcePackage && artifact.sourcePackageVersion === expected.sourcePackageVersion && artifact.sourceProperty === expected.sourceProperty && artifact.rangeEncoding === expected.rangeEncoding && artifact.rangeCount === expected.rangeCount && artifact.endpointCount === expected.endpointCount && artifact.codePointCount === expected.codePointCount && artifact.endpointSha256 === expected.endpointSha256;
+}
+function isBoundedPositiveInteger(value, maximum) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value > 0 && value <= maximum;
+}
+function hasBoundedCounts(artifact, expected) {
+  return isBoundedPositiveInteger(
+    artifact.rangeCount,
+    MAX_PROFILE_RANGE_COUNT
+  ) && isBoundedPositiveInteger(
+    expected.rangeCount,
+    MAX_PROFILE_RANGE_COUNT
+  ) && isBoundedPositiveInteger(
+    artifact.endpointCount,
+    MAX_PROFILE_ENDPOINT_COUNT
+  ) && isBoundedPositiveInteger(
+    expected.endpointCount,
+    MAX_PROFILE_ENDPOINT_COUNT
+  ) && artifact.endpointCount === artifact.rangeCount * 2 && expected.endpointCount === expected.rangeCount * 2 && isBoundedPositiveInteger(
+    artifact.codePointCount,
+    MAX_PROFILE_CODE_POINT_COUNT
+  ) && isBoundedPositiveInteger(
+    expected.codePointCount,
+    MAX_PROFILE_CODE_POINT_COUNT
+  );
+}
+function decodeCanonicalBase64Url(value) {
+  if (value.length === 0 || value.length > MAX_ENCODED_PAYLOAD_CHARACTERS || value.length % 4 === 1 || !BASE64URL_PATTERN.test(value)) {
+    return void 0;
+  }
+  const finalSextet = BASE64URL_ALPHABET.indexOf(value.at(-1) ?? "");
+  if (finalSextet < 0 || value.length % 4 === 2 && (finalSextet & 15) !== 0 || value.length % 4 === 3 && (finalSextet & 3) !== 0) {
+    return void 0;
+  }
+  const expectedByteCount = Math.floor(value.length * 6 / 8);
+  const output = new Uint8Array(expectedByteCount);
+  let outputIndex = 0;
+  let accumulator = 0;
+  let bitCount = 0;
+  for (const character of value) {
+    const sextet = BASE64URL_ALPHABET.indexOf(character);
+    if (sextet < 0) {
+      return void 0;
+    }
+    accumulator = accumulator << 6 | sextet;
+    bitCount += 6;
+    while (bitCount >= 8) {
+      bitCount -= 8;
+      output[outputIndex] = accumulator >> bitCount & 255;
+      outputIndex += 1;
+      accumulator &= (1 << bitCount) - 1;
+    }
+  }
+  if (outputIndex !== expectedByteCount || bitCount > 0 && accumulator !== 0) {
+    return void 0;
+  }
+  return output;
+}
+function decodeCanonicalEndpointDeltas(bytes, endpointCount) {
+  if (!isBoundedPositiveInteger(
+    endpointCount,
+    MAX_PROFILE_ENDPOINT_COUNT
+  ) || endpointCount % 2 !== 0) {
+    return void 0;
+  }
+  const endpoints = new Uint32Array(endpointCount);
+  let byteOffset = 0;
+  let previousEndpoint = 0;
+  for (let endpointIndex = 0; endpointIndex < endpointCount; endpointIndex += 1) {
+    let delta = 0;
+    let multiplier = 1;
+    let byteCount = 0;
+    while (true) {
+      if (byteOffset >= bytes.length || byteCount >= MAX_ULEB128_BYTES) {
+        return void 0;
+      }
+      const byte = bytes[byteOffset];
+      if (byte === void 0) {
+        return void 0;
+      }
+      byteOffset += 1;
+      byteCount += 1;
+      const payload = byte & 127;
+      delta += payload * multiplier;
+      if (!Number.isSafeInteger(delta)) {
+        return void 0;
+      }
+      if ((byte & 128) === 0) {
+        if (byteCount > 1 && payload === 0) {
+          return void 0;
+        }
+        break;
+      }
+      multiplier *= 128;
+    }
+    const endpoint = previousEndpoint + delta;
+    if (delta <= 0 || !Number.isSafeInteger(endpoint) || endpoint > MAX_UNICODE_ENDPOINT) {
+      return void 0;
+    }
+    endpoints[endpointIndex] = endpoint;
+    previousEndpoint = endpoint;
+  }
+  if (byteOffset !== bytes.length) {
+    return void 0;
+  }
+  return endpoints;
+}
+function hasExpectedRanges(endpoints, expected) {
+  let previousEnd = -1;
+  let codePointCount = 0;
+  for (let index = 0; index < endpoints.length; index += 2) {
+    const start = endpoints[index];
+    const end = endpoints[index + 1];
+    if (start === void 0 || end === void 0 || start <= previousEnd || end <= start || end > MAX_UNICODE_ENDPOINT) {
+      return false;
+    }
+    codePointCount += end - start;
+    previousEnd = end;
+  }
+  return codePointCount === expected.codePointCount;
+}
+function decodeFeedbackUnicodeProfileArtifact(value, expected) {
+  if (!isRecord(value) || !hasBoundedCounts(value, expected) || !hasExpectedMetadata(value, expected) || typeof value.payload !== "string") {
+    return void 0;
+  }
+  const bytes = decodeCanonicalBase64Url(value.payload);
+  if (bytes === void 0) {
+    return void 0;
+  }
+  const endpoints = decodeCanonicalEndpointDeltas(
+    bytes,
+    expected.endpointCount
+  );
+  return endpoints !== void 0 && hasExpectedRanges(endpoints, expected) ? endpoints : void 0;
+}
+
+// src/feedback-unicode-profile.ts
+var FEEDBACK_UNICODE_PROFILE_ID = "unicode-15.1.0-nfkc-v1";
+var FEEDBACK_UNICODE_PROFILE_ENDPOINT_SHA256 = "591e457524d6b4b988aa7c7687e76c95a78370fea38bbd1b09085be7fd935ef3";
+var MAX_UNICODE_CODE_POINT = 1114111;
+var HIGH_SURROGATE_START = 55296;
+var HIGH_SURROGATE_END = 56319;
+var LOW_SURROGATE_START = 56320;
+var LOW_SURROGATE_END = 57343;
+var UNASSIGNED_RANGE_ENDPOINTS = decodeFeedbackUnicodeProfileArtifact(
+  feedback_unicode_15_1_0_unassigned_default,
+  {
+    profileId: FEEDBACK_UNICODE_PROFILE_ID,
+    unicodeVersion: "15.1.0",
+    sourcePackage: "@unicode/unicode-15.1.0",
+    sourcePackageVersion: "1.6.17",
+    sourceProperty: "General_Category/Unassigned",
+    rangeEncoding: "flat-half-open-delta-uleb128-base64url-v1",
+    rangeCount: 707,
+    endpointCount: 1414,
+    codePointCount: 824718,
+    endpointSha256: FEEDBACK_UNICODE_PROFILE_ENDPOINT_SHA256
+  }
+);
+function isFeedbackUnicodeProfileUnassigned(codePoint) {
+  if (UNASSIGNED_RANGE_ENDPOINTS === void 0 || !Number.isInteger(codePoint) || codePoint < 0 || codePoint > MAX_UNICODE_CODE_POINT || codePoint >= HIGH_SURROGATE_START && codePoint <= LOW_SURROGATE_END) {
+    return true;
+  }
+  let lowerRange = 0;
+  let upperRange = UNASSIGNED_RANGE_ENDPOINTS.length / 2 - 1;
+  while (lowerRange <= upperRange) {
+    const rangeIndex = Math.floor((lowerRange + upperRange) / 2);
+    const start = UNASSIGNED_RANGE_ENDPOINTS[rangeIndex * 2];
+    const end = UNASSIGNED_RANGE_ENDPOINTS[rangeIndex * 2 + 1];
+    if (start === void 0 || end === void 0) {
+      return true;
+    }
+    if (codePoint < start) {
+      upperRange = rangeIndex - 1;
+    } else if (codePoint >= end) {
+      lowerRange = rangeIndex + 1;
+    } else {
+      return true;
+    }
+  }
+  return false;
+}
+function containsFeedbackUnicodeProfileUnsupportedText(text) {
+  if (typeof text !== "string") {
+    return true;
+  }
+  for (let index = 0; index < text.length; index += 1) {
+    const first = text.charCodeAt(index);
+    let codePoint = first;
+    if (first >= HIGH_SURROGATE_START && first <= HIGH_SURROGATE_END) {
+      const second = text.charCodeAt(index + 1);
+      if (!Number.isInteger(second) || second < LOW_SURROGATE_START || second > LOW_SURROGATE_END) {
+        return true;
+      }
+      codePoint = 65536 + (first - HIGH_SURROGATE_START << 10) + (second - LOW_SURROGATE_START);
+      index += 1;
+    } else if (first >= LOW_SURROGATE_START && first <= LOW_SURROGATE_END) {
+      return true;
+    }
+    if (isFeedbackUnicodeProfileUnassigned(codePoint)) {
+      return true;
+    }
+  }
+  return false;
+}
+
+export {
+  FEEDBACK_UNICODE_PROFILE_ID,
+  FEEDBACK_UNICODE_PROFILE_ENDPOINT_SHA256,
+  isFeedbackUnicodeProfileUnassigned,
+  containsFeedbackUnicodeProfileUnsupportedText
+};
+//# sourceMappingURL=chunk-6FE4FLKF.js.map

package/dist/chunk-6FE4FLKF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../unicode/feedback-unicode-15.1.0-unassigned.json","../src/feedback-unicode-profile.codec.ts","../src/feedback-unicode-profile.ts"],"sourcesContent":["{\n  \"profileId\": \"unicode-15.1.0-nfkc-v1\",\n  \"unicodeVersion\": \"15.1.0\",\n  \"sourcePackage\": \"@unicode/unicode-15.1.0\",\n  \"sourcePackageVersion\": \"1.6.17\",\n  \"sourceProperty\": \"General_Category/Unassigned\",\n  \"rangeEncoding\": \"flat-half-open-delta-uleb128-base64url-v1\",\n  \"rangeCount\": 707,\n  \"endpointCount\": 1414,\n  \"codePointCount\": 824718,\n  \"endpointSha256\": \"591e457524d6b4b988aa7c7687e76c95a78370fea38bbd1b09085be7fd935ef3\",\n  \"payload\": \"-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-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_HBLlDuQQHHwEKBFEBCgYeAgYKRgoKAQcBFQUTsAVbZUsEOQcRQAULAg74LwjWCSoJ50UEAQcBAgGjAg8BHQMCAQ4ECIwDhBJrBQ0DCQcKAgjcJC4CFwl0PPYBCicCwgEVRnoUDBQMVwkZhwFVAUcBAgIBAgICBAEMAQEBBwFBAQQCCAEHARwBBAEFAQEDBwHUAgKkAgK-BQ8FAQ_QCB8GBtUBBwERAgcBAgEFBT4hAXAtAw4CCgQCwAIfEToFAdADKuYFBwEEAQIBDwHFAQIQKUwECgQCkQZETD3CAQQBGwECAQECAQEKAQQBAQEBBgEEAQEBAQEBAwECAQECAQEBAQEBAQEBAQIBAQIEAQcBBAEEAQEBCgERBQMBBQERNAKOAiwEZAwPAg8BDwElCq4BOB0NLAQJBwIOBpoB2AcEEQMNA3cEXwYMBAEPDAQ4CAoGKAgeAgJO1AIMDgINAwkHLgEHCA4ECQcJB5MBATclCoYI4M0CILogBt4BAoItDrE6D-4EohOeBOILyyYF4CDRuCsBHmCAAfABkPwD_v8DAv7_AwI\"\n}\n","const BASE64URL_ALPHABET =\n  \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\";\nconst BASE64URL_PATTERN = /^[A-Za-z0-9_-]+$/;\nconst MAX_UNICODE_ENDPOINT = 0x110000;\nconst MAX_ENCODED_PAYLOAD_CHARACTERS = 8_192;\nconst MAX_ULEB128_BYTES = 5;\nconst MAX_PROFILE_RANGE_COUNT = 707;\nconst MAX_PROFILE_ENDPOINT_COUNT = MAX_PROFILE_RANGE_COUNT * 2;\nconst MAX_PROFILE_CODE_POINT_COUNT = MAX_UNICODE_ENDPOINT;\nconst ARTIFACT_KEYS = new Set([\n  \"profileId\",\n  \"unicodeVersion\",\n  \"sourcePackage\",\n  \"sourcePackageVersion\",\n  \"sourceProperty\",\n  \"rangeEncoding\",\n  \"rangeCount\",\n  \"endpointCount\",\n  \"codePointCount\",\n  \"endpointSha256\",\n  \"payload\",\n]);\n\nexport interface FeedbackUnicodeProfileExpectation {\n  readonly profileId: string;\n  readonly unicodeVersion: string;\n  readonly sourcePackage: string;\n  readonly sourcePackageVersion: string;\n  readonly sourceProperty: string;\n  readonly rangeEncoding: string;\n  readonly rangeCount: number;\n  readonly endpointCount: number;\n  readonly codePointCount: number;\n  readonly endpointSha256: string;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction hasExpectedMetadata(\n  artifact: Record<string, unknown>,\n  expected: FeedbackUnicodeProfileExpectation,\n): boolean {\n  return (\n    Object.keys(artifact).length === ARTIFACT_KEYS.size &&\n    Object.keys(artifact).every((key) => ARTIFACT_KEYS.has(key)) &&\n    artifact.profileId === expected.profileId &&\n    artifact.unicodeVersion === expected.unicodeVersion &&\n    artifact.sourcePackage === expected.sourcePackage &&\n    artifact.sourcePackageVersion === expected.sourcePackageVersion &&\n    artifact.sourceProperty === expected.sourceProperty &&\n    artifact.rangeEncoding === expected.rangeEncoding &&\n    artifact.rangeCount === expected.rangeCount &&\n    artifact.endpointCount === expected.endpointCount &&\n    artifact.codePointCount === expected.codePointCount &&\n    artifact.endpointSha256 === expected.endpointSha256\n  );\n}\n\nfunction isBoundedPositiveInteger(\n  value: unknown,\n  maximum: number,\n): value is number {\n  return (\n    typeof value === \"number\" &&\n    Number.isSafeInteger(value) &&\n    value > 0 &&\n    value <= maximum\n  );\n}\n\nfunction hasBoundedCounts(\n  artifact: Record<string, unknown>,\n  expected: FeedbackUnicodeProfileExpectation,\n): boolean {\n  return (\n    isBoundedPositiveInteger(\n      artifact.rangeCount,\n      MAX_PROFILE_RANGE_COUNT,\n    ) &&\n    isBoundedPositiveInteger(\n      expected.rangeCount,\n      MAX_PROFILE_RANGE_COUNT,\n    ) &&\n    isBoundedPositiveInteger(\n      artifact.endpointCount,\n      MAX_PROFILE_ENDPOINT_COUNT,\n    ) &&\n    isBoundedPositiveInteger(\n      expected.endpointCount,\n      MAX_PROFILE_ENDPOINT_COUNT,\n    ) &&\n    artifact.endpointCount === artifact.rangeCount * 2 &&\n    expected.endpointCount === expected.rangeCount * 2 &&\n    isBoundedPositiveInteger(\n      artifact.codePointCount,\n      MAX_PROFILE_CODE_POINT_COUNT,\n    ) &&\n    isBoundedPositiveInteger(\n      expected.codePointCount,\n      MAX_PROFILE_CODE_POINT_COUNT,\n    )\n  );\n}\n\nfunction decodeCanonicalBase64Url(value: string): Uint8Array | undefined {\n  if (\n    value.length === 0 ||\n    value.length > MAX_ENCODED_PAYLOAD_CHARACTERS ||\n    value.length % 4 === 1 ||\n    !BASE64URL_PATTERN.test(value)\n  ) {\n    return undefined;\n  }\n\n  const finalSextet = BASE64URL_ALPHABET.indexOf(value.at(-1) ?? \"\");\n  if (\n    finalSextet < 0 ||\n    (value.length % 4 === 2 && (finalSextet & 0b1111) !== 0) ||\n    (value.length % 4 === 3 && (finalSextet & 0b11) !== 0)\n  ) {\n    return undefined;\n  }\n\n  const expectedByteCount = Math.floor((value.length * 6) / 8);\n  const output = new Uint8Array(expectedByteCount);\n  let outputIndex = 0;\n  let accumulator = 0;\n  let bitCount = 0;\n\n  for (const character of value) {\n    const sextet = BASE64URL_ALPHABET.indexOf(character);\n    if (sextet < 0) {\n      return undefined;\n    }\n    accumulator = (accumulator << 6) | sextet;\n    bitCount += 6;\n    while (bitCount >= 8) {\n      bitCount -= 8;\n      output[outputIndex] = (accumulator >> bitCount) & 0xff;\n      outputIndex += 1;\n      accumulator &= (1 << bitCount) - 1;\n    }\n  }\n\n  if (\n    outputIndex !== expectedByteCount ||\n    (bitCount > 0 && accumulator !== 0)\n  ) {\n    return undefined;\n  }\n  return output;\n}\n\nfunction decodeCanonicalEndpointDeltas(\n  bytes: Uint8Array,\n  endpointCount: number,\n): Uint32Array | undefined {\n  if (\n    !isBoundedPositiveInteger(\n      endpointCount,\n      MAX_PROFILE_ENDPOINT_COUNT,\n    ) ||\n    endpointCount % 2 !== 0\n  ) {\n    return undefined;\n  }\n  const endpoints = new Uint32Array(endpointCount);\n  let byteOffset = 0;\n  let previousEndpoint = 0;\n\n  for (let endpointIndex = 0; endpointIndex < endpointCount; endpointIndex += 1) {\n    let delta = 0;\n    let multiplier = 1;\n    let byteCount = 0;\n\n    while (true) {\n      if (byteOffset >= bytes.length || byteCount >= MAX_ULEB128_BYTES) {\n        return undefined;\n      }\n      const byte = bytes[byteOffset];\n      if (byte === undefined) {\n        return undefined;\n      }\n      byteOffset += 1;\n      byteCount += 1;\n\n      const payload = byte & 0x7f;\n      delta += payload * multiplier;\n      if (!Number.isSafeInteger(delta)) {\n        return undefined;\n      }\n\n      if ((byte & 0x80) === 0) {\n        if (byteCount > 1 && payload === 0) {\n          return undefined;\n        }\n        break;\n      }\n      multiplier *= 128;\n    }\n\n    const endpoint = previousEndpoint + delta;\n    if (\n      delta <= 0 ||\n      !Number.isSafeInteger(endpoint) ||\n      endpoint > MAX_UNICODE_ENDPOINT\n    ) {\n      return undefined;\n    }\n    endpoints[endpointIndex] = endpoint;\n    previousEndpoint = endpoint;\n  }\n\n  if (byteOffset !== bytes.length) {\n    return undefined;\n  }\n  return endpoints;\n}\n\nfunction hasExpectedRanges(\n  endpoints: Uint32Array,\n  expected: FeedbackUnicodeProfileExpectation,\n): boolean {\n  let previousEnd = -1;\n  let codePointCount = 0;\n\n  for (let index = 0; index < endpoints.length; index += 2) {\n    const start = endpoints[index];\n    const end = endpoints[index + 1];\n    if (\n      start === undefined ||\n      end === undefined ||\n      start <= previousEnd ||\n      end <= start ||\n      end > MAX_UNICODE_ENDPOINT\n    ) {\n      return false;\n    }\n    codePointCount += end - start;\n    previousEnd = end;\n  }\n\n  return codePointCount === expected.codePointCount;\n}\n\n/**\n * Decodes and validates the checked-in Unicode profile artifact.\n *\n * This is an internal supply-boundary helper. It deliberately returns no\n * partial data: malformed base64url, non-shortest ULEB128, overflow, range\n * disorder, count mismatch, trailing bytes, or metadata drift all fail\n * closed.\n */\nexport function decodeFeedbackUnicodeProfileArtifact(\n  value: unknown,\n  expected: FeedbackUnicodeProfileExpectation,\n): Uint32Array | undefined {\n  if (\n    !isRecord(value) ||\n    !hasBoundedCounts(value, expected) ||\n    !hasExpectedMetadata(value, expected) ||\n    typeof value.payload !== \"string\"\n  ) {\n    return undefined;\n  }\n\n  const bytes = decodeCanonicalBase64Url(value.payload);\n  if (bytes === undefined) {\n    return undefined;\n  }\n  const endpoints = decodeCanonicalEndpointDeltas(\n    bytes,\n    expected.endpointCount,\n  );\n  return endpoints !== undefined && hasExpectedRanges(endpoints, expected)\n    ? endpoints\n    : undefined;\n}\n","import profileArtifact from \"../unicode/feedback-unicode-15.1.0-unassigned.json\" with {\n  type: \"json\",\n};\nimport { decodeFeedbackUnicodeProfileArtifact } from \"./feedback-unicode-profile.codec.js\";\n\n/** Canonical Unicode and normalization profile for transient feedback text. */\nexport const FEEDBACK_UNICODE_PROFILE_ID =\n  \"unicode-15.1.0-nfkc-v1\" as const;\n\n/**\n * SHA-256 of the flattened half-open range endpoints encoded as unsigned\n * 32-bit big-endian integers.\n */\nexport const FEEDBACK_UNICODE_PROFILE_ENDPOINT_SHA256 =\n  \"591e457524d6b4b988aa7c7687e76c95a78370fea38bbd1b09085be7fd935ef3\" as const;\n\nconst MAX_UNICODE_CODE_POINT = 0x10ffff;\nconst HIGH_SURROGATE_START = 0xd800;\nconst HIGH_SURROGATE_END = 0xdbff;\nconst LOW_SURROGATE_START = 0xdc00;\nconst LOW_SURROGATE_END = 0xdfff;\n\nconst UNASSIGNED_RANGE_ENDPOINTS = decodeFeedbackUnicodeProfileArtifact(\n  profileArtifact,\n  {\n    profileId: FEEDBACK_UNICODE_PROFILE_ID,\n    unicodeVersion: \"15.1.0\",\n    sourcePackage: \"@unicode/unicode-15.1.0\",\n    sourcePackageVersion: \"1.6.17\",\n    sourceProperty: \"General_Category/Unassigned\",\n    rangeEncoding: \"flat-half-open-delta-uleb128-base64url-v1\",\n    rangeCount: 707,\n    endpointCount: 1_414,\n    codePointCount: 824_718,\n    endpointSha256: FEEDBACK_UNICODE_PROFILE_ENDPOINT_SHA256,\n  },\n);\n\n/**\n * Reports whether a numeric code point is unsupported by the pinned feedback\n * profile.\n *\n * Unicode 15.1 `General_Category=Unassigned` values return `true`. Invalid\n * numeric values and surrogate code points also return `true` so validation\n * callers fail closed.\n */\nexport function isFeedbackUnicodeProfileUnassigned(\n  codePoint: number,\n): boolean {\n  if (\n    UNASSIGNED_RANGE_ENDPOINTS === undefined ||\n    !Number.isInteger(codePoint) ||\n    codePoint < 0 ||\n    codePoint > MAX_UNICODE_CODE_POINT ||\n    (codePoint >= HIGH_SURROGATE_START &&\n      codePoint <= LOW_SURROGATE_END)\n  ) {\n    return true;\n  }\n\n  let lowerRange = 0;\n  let upperRange = UNASSIGNED_RANGE_ENDPOINTS.length / 2 - 1;\n\n  while (lowerRange <= upperRange) {\n    const rangeIndex = Math.floor((lowerRange + upperRange) / 2);\n    const start = UNASSIGNED_RANGE_ENDPOINTS[rangeIndex * 2];\n    const end = UNASSIGNED_RANGE_ENDPOINTS[rangeIndex * 2 + 1];\n\n    if (start === undefined || end === undefined) {\n      return true;\n    }\n    if (codePoint < start) {\n      upperRange = rangeIndex - 1;\n    } else if (codePoint >= end) {\n      lowerRange = rangeIndex + 1;\n    } else {\n      return true;\n    }\n  }\n\n  return false;\n}\n\n/**\n * Reports whether text contains a Unicode 15.1-unassigned code point or a\n * lone UTF-16 surrogate.\n *\n * The scan uses code units deliberately so malformed strings cannot be\n * silently replaced or normalized before profile enforcement. Callers must\n * apply their own UTF-16 length bound before passing untrusted text; this\n * generic helper intentionally does not impose a product-specific limit.\n */\nexport function containsFeedbackUnicodeProfileUnsupportedText(\n  text: string,\n): boolean {\n  if (typeof text !== \"string\") {\n    return true;\n  }\n\n  for (let index = 0; index < text.length; index += 1) {\n    const first = text.charCodeAt(index);\n    let codePoint = first;\n\n    if (first >= HIGH_SURROGATE_START && first <= HIGH_SURROGATE_END) {\n      const second = text.charCodeAt(index + 1);\n      if (\n        !Number.isInteger(second) ||\n        second < LOW_SURROGATE_START ||\n        second > LOW_SURROGATE_END\n      ) {\n        return true;\n      }\n      codePoint =\n        0x10000 +\n        ((first - HIGH_SURROGATE_START) << 10) +\n        (second - LOW_SURROGATE_START);\n      index += 1;\n    } else if (first >= LOW_SURROGATE_START && first <= LOW_SURROGATE_END) {\n      return true;\n    }\n\n    if (isFeedbackUnicodeProfileUnassigned(codePoint)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n"],"mappings":";AAAA;AAAA,EACE,WAAa;AAAA,EACb,gBAAkB;AAAA,EAClB,eAAiB;AAAA,EACjB,sBAAwB;AAAA,EACxB,gBAAkB;AAAA,EAClB,eAAiB;AAAA,EACjB,YAAc;AAAA,EACd,eAAiB;AAAA,EACjB,gBAAkB;AAAA,EAClB,gBAAkB;AAAA,EAClB,SAAW;AACb;;;ACZA,IAAM,qBACJ;AACF,IAAM,oBAAoB;AAC1B,IAAM,uBAAuB;AAC7B,IAAM,iCAAiC;AACvC,IAAM,oBAAoB;AAC1B,IAAM,0BAA0B;AAChC,IAAM,6BAA6B,0BAA0B;AAC7D,IAAM,+BAA+B;AACrC,IAAM,gBAAgB,oBAAI,IAAI;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAeD,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,oBACP,UACA,UACS;AACT,SACE,OAAO,KAAK,QAAQ,EAAE,WAAW,cAAc,QAC/C,OAAO,KAAK,QAAQ,EAAE,MAAM,CAAC,QAAQ,cAAc,IAAI,GAAG,CAAC,KAC3D,SAAS,cAAc,SAAS,aAChC,SAAS,mBAAmB,SAAS,kBACrC,SAAS,kBAAkB,SAAS,iBACpC,SAAS,yBAAyB,SAAS,wBAC3C,SAAS,mBAAmB,SAAS,kBACrC,SAAS,kBAAkB,SAAS,iBACpC,SAAS,eAAe,SAAS,cACjC,SAAS,kBAAkB,SAAS,iBACpC,SAAS,mBAAmB,SAAS,kBACrC,SAAS,mBAAmB,SAAS;AAEzC;AAEA,SAAS,yBACP,OACA,SACiB;AACjB,SACE,OAAO,UAAU,YACjB,OAAO,cAAc,KAAK,KAC1B,QAAQ,KACR,SAAS;AAEb;AAEA,SAAS,iBACP,UACA,UACS;AACT,SACE;AAAA,IACE,SAAS;AAAA,IACT;AAAA,EACF,KACA;AAAA,IACE,SAAS;AAAA,IACT;AAAA,EACF,KACA;AAAA,IACE,SAAS;AAAA,IACT;AAAA,EACF,KACA;AAAA,IACE,SAAS;AAAA,IACT;AAAA,EACF,KACA,SAAS,kBAAkB,SAAS,aAAa,KACjD,SAAS,kBAAkB,SAAS,aAAa,KACjD;AAAA,IACE,SAAS;AAAA,IACT;AAAA,EACF,KACA;AAAA,IACE,SAAS;AAAA,IACT;AAAA,EACF;AAEJ;AAEA,SAAS,yBAAyB,OAAuC;AACvE,MACE,MAAM,WAAW,KACjB,MAAM,SAAS,kCACf,MAAM,SAAS,MAAM,KACrB,CAAC,kBAAkB,KAAK,KAAK,GAC7B;AACA,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,mBAAmB,QAAQ,MAAM,GAAG,EAAE,KAAK,EAAE;AACjE,MACE,cAAc,KACb,MAAM,SAAS,MAAM,MAAM,cAAc,QAAY,KACrD,MAAM,SAAS,MAAM,MAAM,cAAc,OAAU,GACpD;AACA,WAAO;AAAA,EACT;AAEA,QAAM,oBAAoB,KAAK,MAAO,MAAM,SAAS,IAAK,CAAC;AAC3D,QAAM,SAAS,IAAI,WAAW,iBAAiB;AAC/C,MAAI,cAAc;AAClB,MAAI,cAAc;AAClB,MAAI,WAAW;AAEf,aAAW,aAAa,OAAO;AAC7B,UAAM,SAAS,mBAAmB,QAAQ,SAAS;AACnD,QAAI,SAAS,GAAG;AACd,aAAO;AAAA,IACT;AACA,kBAAe,eAAe,IAAK;AACnC,gBAAY;AACZ,WAAO,YAAY,GAAG;AACpB,kBAAY;AACZ,aAAO,WAAW,IAAK,eAAe,WAAY;AAClD,qBAAe;AACf,sBAAgB,KAAK,YAAY;AAAA,IACnC;AAAA,EACF;AAEA,MACE,gBAAgB,qBACf,WAAW,KAAK,gBAAgB,GACjC;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,8BACP,OACA,eACyB;AACzB,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,KACA,gBAAgB,MAAM,GACtB;AACA,WAAO;AAAA,EACT;AACA,QAAM,YAAY,IAAI,YAAY,aAAa;AAC/C,MAAI,aAAa;AACjB,MAAI,mBAAmB;AAEvB,WAAS,gBAAgB,GAAG,gBAAgB,eAAe,iBAAiB,GAAG;AAC7E,QAAI,QAAQ;AACZ,QAAI,aAAa;AACjB,QAAI,YAAY;AAEhB,WAAO,MAAM;AACX,UAAI,cAAc,MAAM,UAAU,aAAa,mBAAmB;AAChE,eAAO;AAAA,MACT;AACA,YAAM,OAAO,MAAM,UAAU;AAC7B,UAAI,SAAS,QAAW;AACtB,eAAO;AAAA,MACT;AACA,oBAAc;AACd,mBAAa;AAEb,YAAM,UAAU,OAAO;AACvB,eAAS,UAAU;AACnB,UAAI,CAAC,OAAO,cAAc,KAAK,GAAG;AAChC,eAAO;AAAA,MACT;AAEA,WAAK,OAAO,SAAU,GAAG;AACvB,YAAI,YAAY,KAAK,YAAY,GAAG;AAClC,iBAAO;AAAA,QACT;AACA;AAAA,MACF;AACA,oBAAc;AAAA,IAChB;AAEA,UAAM,WAAW,mBAAmB;AACpC,QACE,SAAS,KACT,CAAC,OAAO,cAAc,QAAQ,KAC9B,WAAW,sBACX;AACA,aAAO;AAAA,IACT;AACA,cAAU,aAAa,IAAI;AAC3B,uBAAmB;AAAA,EACrB;AAEA,MAAI,eAAe,MAAM,QAAQ;AAC/B,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,kBACP,WACA,UACS;AACT,MAAI,cAAc;AAClB,MAAI,iBAAiB;AAErB,WAAS,QAAQ,GAAG,QAAQ,UAAU,QAAQ,SAAS,GAAG;AACxD,UAAM,QAAQ,UAAU,KAAK;AAC7B,UAAM,MAAM,UAAU,QAAQ,CAAC;AAC/B,QACE,UAAU,UACV,QAAQ,UACR,SAAS,eACT,OAAO,SACP,MAAM,sBACN;AACA,aAAO;AAAA,IACT;AACA,sBAAkB,MAAM;AACxB,kBAAc;AAAA,EAChB;AAEA,SAAO,mBAAmB,SAAS;AACrC;AAUO,SAAS,qCACd,OACA,UACyB;AACzB,MACE,CAAC,SAAS,KAAK,KACf,CAAC,iBAAiB,OAAO,QAAQ,KACjC,CAAC,oBAAoB,OAAO,QAAQ,KACpC,OAAO,MAAM,YAAY,UACzB;AACA,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,yBAAyB,MAAM,OAAO;AACpD,MAAI,UAAU,QAAW;AACvB,WAAO;AAAA,EACT;AACA,QAAM,YAAY;AAAA,IAChB;AAAA,IACA,SAAS;AAAA,EACX;AACA,SAAO,cAAc,UAAa,kBAAkB,WAAW,QAAQ,IACnE,YACA;AACN;;;ACjRO,IAAM,8BACX;AAMK,IAAM,2CACX;AAEF,IAAM,yBAAyB;AAC/B,IAAM,uBAAuB;AAC7B,IAAM,qBAAqB;AAC3B,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAE1B,IAAM,6BAA6B;AAAA,EACjC;AAAA,EACA;AAAA,IACE,WAAW;AAAA,IACX,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,sBAAsB;AAAA,IACtB,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,eAAe;AAAA,IACf,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,EAClB;AACF;AAUO,SAAS,mCACd,WACS;AACT,MACE,+BAA+B,UAC/B,CAAC,OAAO,UAAU,SAAS,KAC3B,YAAY,KACZ,YAAY,0BACX,aAAa,wBACZ,aAAa,mBACf;AACA,WAAO;AAAA,EACT;AAEA,MAAI,aAAa;AACjB,MAAI,aAAa,2BAA2B,SAAS,IAAI;AAEzD,SAAO,cAAc,YAAY;AAC/B,UAAM,aAAa,KAAK,OAAO,aAAa,cAAc,CAAC;AAC3D,UAAM,QAAQ,2BAA2B,aAAa,CAAC;AACvD,UAAM,MAAM,2BAA2B,aAAa,IAAI,CAAC;AAEzD,QAAI,UAAU,UAAa,QAAQ,QAAW;AAC5C,aAAO;AAAA,IACT;AACA,QAAI,YAAY,OAAO;AACrB,mBAAa,aAAa;AAAA,IAC5B,WAAW,aAAa,KAAK;AAC3B,mBAAa,aAAa;AAAA,IAC5B,OAAO;AACL,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAWO,SAAS,8CACd,MACS;AACT,MAAI,OAAO,SAAS,UAAU;AAC5B,WAAO;AAAA,EACT;AAEA,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,UAAM,QAAQ,KAAK,WAAW,KAAK;AACnC,QAAI,YAAY;AAEhB,QAAI,SAAS,wBAAwB,SAAS,oBAAoB;AAChE,YAAM,SAAS,KAAK,WAAW,QAAQ,CAAC;AACxC,UACE,CAAC,OAAO,UAAU,MAAM,KACxB,SAAS,uBACT,SAAS,mBACT;AACA,eAAO;AAAA,MACT;AACA,kBACE,SACE,QAAQ,wBAAyB,OAClC,SAAS;AACZ,eAAS;AAAA,IACX,WAAW,SAAS,uBAAuB,SAAS,mBAAmB;AACrE,aAAO;AAAA,IACT;AAEA,QAAI,mCAAmC,SAAS,GAAG;AACjD,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}