@primust/verifier 1.0.0

package/dist/scoped.js

@@ -0,0 +1,582 @@
+/**
+ * Reference TypeScript verifier for the `scoped_certificates` VPEC section.
+ *
+ * Ported from verifier-py/src/primust_verify/scoped.py. Validates the
+ * top-level `scoped_certificates` array + matching
+ * `scoped_certificates_commitment` emitted by the SDK's
+ * `primust.scoped.bundle` module (SCOPED_CERT_SPEC_v27 §14).
+ *
+ * Trust-chain scope:
+ *   1. Every entry carries a known `certificate_type` discriminator.
+ *   2. Every entry has the required structural fields for its type.
+ *   3. The array is in canonical order: lexicographic by
+ *      (certificate_type, canonical_sha256(payload)).
+ *   4. The declared commitment byte-matches the recomputed Merkle root
+ *      over the ordered canonical-JSON leaves. Empty bundle uses the
+ *      well-known `sha256(canonical({scoped_certificates: []}))`.
+ *
+ * SI-3 (VPEC verifiability): this module's output MUST agree with the
+ * Python reference (`primust_verify.scoped`) byte-for-byte across the
+ * shared fixture corpus at
+ * packages/verifier-py/tests/fixtures/scoped_v1/. The conformance runner
+ * in scripts/scoped_conformance.py gates that in CI.
+ */
+import { createHash } from "node:crypto";
+import { buildMerkleRoot, canonicalJson, canonicalJsonString, } from "./bounded-trace";
+// ── Per-certificate-type strict schema (mirrors verifier-py/scoped.py) ──
+//
+// Mirrors primust.scoped.schemas.py structurally. Zero SDK dep: schema
+// values are duplicated into this file so the verifier package stays
+// self-contained. When the SDK schemas change, update this table AND
+// primust_verify/scoped.py in lockstep — the scoped_conformance.py CI
+// gate catches drift via shared fixtures.
+// ── Helpers ──
+function canonicalSha256(obj) {
+    const h = createHash("sha256");
+    h.update(canonicalJson(obj));
+    return "sha256:" + h.digest("hex");
+}
+const HASH_RE = /^sha256:[0-9a-f]{64}$/;
+function isCommitment(s) {
+    return typeof s === "string" && HASH_RE.test(s);
+}
+const SURFACE_SCHEMA = {
+    required: {
+        kind: { enum: ["field", "field_group", "document", "process", "workflow_step"] },
+        id: { type: "string" },
+    },
+    optional: {
+        path: { type: "string", nullable: true },
+    },
+};
+const SUPPORT_REF_SCHEMA = {
+    required: {
+        doc_id: { type: "string" },
+        span_commitment: { type: "string", pattern: "commitment" },
+    },
+    optional: {},
+};
+const SHADOW_RESULT_SCHEMA = {
+    required: {
+        shadow_id: { type: "string" },
+        result: { enum: ["certified", "not_certified", "abstain"] },
+    },
+    optional: {
+        shadow_type: {
+            enum: ["quantized", "distilled", "architecture_diverse", "base"],
+            nullable: true,
+        },
+        score: { type: "number", nullable: true },
+    },
+};
+const RETRIEVAL_REF_SCHEMA = {
+    required: {
+        chunk_id: { type: "string" },
+        span_commitment: { type: "string", pattern: "commitment" },
+    },
+    optional: {},
+};
+const NAMED_SCHEMAS = {
+    _surface: SURFACE_SCHEMA,
+    _support_ref: SUPPORT_REF_SCHEMA,
+    _shadow_result: SHADOW_RESULT_SCHEMA,
+    _retrieval_ref: RETRIEVAL_REF_SCHEMA,
+};
+const CERTIFICATE_LEVELS = [
+    "scoped_weak",
+    "scoped_moderate",
+    "scoped_strong",
+    "scoped_asymptotic",
+    "bounded_agreement",
+];
+const ARTIFACT_SCHEMAS = {
+    local_manifold: {
+        required: {
+            certificate_type: { literal: "local_manifold" },
+            certificate_level: { enum: CERTIFICATE_LEVELS },
+            calibration_epoch: { type: "string" },
+            localizer_id: { type: "string" },
+            manifold_id: { type: "string" },
+            neighborhood_commitment: { type: "string", pattern: "commitment" },
+            local_threshold: { type: "number", min: 0.0, max: 1.0 },
+            surface: { schema: "_surface" },
+            result: { enum: ["certified", "not_certified", "abstain"] },
+        },
+        optional: {
+            fallback_to_global: { type: "boolean" },
+            signature: { type: "string", nullable: true },
+        },
+    },
+    hierarchical_output: {
+        required: {
+            certificate_type: { literal: "hierarchical_output" },
+            hierarchy_id: { type: "string" },
+            certified_paths: {
+                type: "array",
+                items: {
+                    type: "array",
+                    items: { type: "array", items: { type: "string" } },
+                },
+            },
+            uncertified_paths: {
+                type: "array",
+                items: {
+                    type: "array",
+                    items: { type: "array", items: { type: "string" } },
+                },
+            },
+        },
+        optional: {
+            uncertified_remainder: { type: "object", nullable: true },
+            signature: { type: "string", nullable: true },
+        },
+    },
+    model_continuity: {
+        required: {
+            certificate_type: { literal: "model_continuity" },
+            service_id: { type: "string" },
+            continuity_epoch: { type: "string" },
+            envelope_id: { type: "string" },
+            continuity_state: {
+                enum: [
+                    "within_envelope",
+                    "outside_envelope",
+                    "epoch_change",
+                    "insufficient_probes",
+                ],
+            },
+            probe_suite_id: { type: "string" },
+            probe_suite_commitment: { type: "string", pattern: "commitment" },
+            probe_response_commitment: { type: "string", pattern: "commitment" },
+        },
+        optional: {
+            signature: { type: "string", nullable: true },
+        },
+    },
+    retrieval_grounding: {
+        required: {
+            certificate_type: { literal: "retrieval_grounding" },
+            surface: { schema: "_surface" },
+            support_set: { type: "array", items: { schema: "_support_ref" } },
+            grounded: { type: "boolean" },
+        },
+        optional: {
+            per_stage_fn_bounds: {
+                type: "array",
+                items: { type: "number", min: 0.0, max: 1.0 },
+                nullable: true,
+            },
+            aggregation_model: { type: "string", nullable: true },
+            signature: { type: "string", nullable: true },
+        },
+    },
+    workflow_composition: {
+        required: {
+            certificate_type: { literal: "workflow_composition" },
+            workflow_id: { type: "string" },
+            step_vpec_ids: { type: "array", items: { type: "string" } },
+            hard_relevant_steps: { type: "array", items: { type: "string" } },
+            composition_rule: { literal: "weakest_link_hard" },
+            composed_result: { enum: CERTIFICATE_LEVELS },
+        },
+        optional: {
+            informational_summary: { type: "object", nullable: true },
+            signature: { type: "string", nullable: true },
+        },
+    },
+    proof_of_absence: {
+        required: {
+            certificate_type: { literal: "proof_of_absence" },
+            surface: { schema: "_surface" },
+            absence_class: {
+                enum: [
+                    "no_phi",
+                    "no_restricted_identifier",
+                    "no_prohibited_financial_claim",
+                ],
+            },
+            result: { type: "boolean" },
+        },
+        optional: {
+            detector_family: { type: "string", nullable: true },
+            per_stage_fn_bounds: {
+                type: "array",
+                items: { type: "number", min: 0.0, max: 1.0 },
+                nullable: true,
+            },
+            signature: { type: "string", nullable: true },
+        },
+    },
+    calibration_epoch: {
+        required: {
+            certificate_type: { literal: "calibration_epoch" },
+            calibration_epoch: { type: "string" },
+            drift_state: { enum: ["stable", "drifting", "break"] },
+            source_mix: { type: "object" },
+        },
+        optional: {
+            parent_epoch: { type: "string", nullable: true },
+            signature: { type: "string", nullable: true },
+        },
+    },
+    shadow_committee: {
+        required: {
+            certificate_type: { literal: "shadow_committee" },
+            committee_rule: { type: "string" },
+            shadow_results: { type: "array", items: { schema: "_shadow_result" } },
+            committee_result: { enum: ["certified", "not_certified", "abstain"] },
+        },
+        optional: {
+            disagreement: { type: "boolean" },
+        },
+    },
+    decision_context: {
+        required: {
+            certificate_type: { literal: "decision_context" },
+            primitive_type: { literal: "DCE" },
+            scope: { type: "string" },
+            capture_mode: {
+                enum: [
+                    "reasoning_block",
+                    "planner_output",
+                    "prompt_and_output_binding",
+                    "declared_context_only",
+                ],
+            },
+            rationale_commitment: { type: "string", pattern: "commitment" },
+            context_commitment: { type: "string", pattern: "commitment" },
+            source_binding: { type: "string" },
+            proof_level_achieved: { enum: ["execution", "witnessed", "attestation"] },
+            scope_disclosure: { type: "string" },
+        },
+        optional: {
+            retrieval_references: { type: "array", items: { schema: "_retrieval_ref" } },
+            tool_output_commitments: {
+                type: "array",
+                items: { type: "string", pattern: "commitment" },
+            },
+            intent_declaration_ids: { type: "array", items: { type: "string" } },
+            constraints: { type: "array", items: { type: "string" } },
+        },
+    },
+    temporal_comparison: {
+        required: {
+            certificate_type: { literal: "temporal_comparison" },
+            pack_a_id: { type: "string" },
+            pack_b_id: { type: "string" },
+            pack_a_commitment: { type: "string", pattern: "commitment" },
+            pack_b_commitment: { type: "string", pattern: "commitment" },
+            pack_a_period_start: { type: "string" },
+            pack_a_period_end: { type: "string" },
+            pack_b_period_start: { type: "string" },
+            pack_b_period_end: { type: "string" },
+            checks_added: { type: "array", items: { type: "string" } },
+            checks_removed: { type: "array", items: { type: "string" } },
+            checks_retained_count: { type: "integer" },
+            coverage_changes_count: { type: "integer" },
+            performance_changes_count: { type: "integer" },
+            redaction_consistent: { type: "boolean" },
+            diff_commitment: { type: "string", pattern: "commitment" },
+        },
+        optional: {
+            redaction_profile_a: { type: "string", nullable: true },
+            redaction_profile_b: { type: "string", nullable: true },
+            signature: { type: "string", nullable: true },
+        },
+    },
+};
+function isPlainObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function checkValue(value, spec) {
+    if (spec.nullable && value === null)
+        return null;
+    if ("literal" in spec && spec.literal !== undefined) {
+        if (value !== spec.literal)
+            return `expected literal ${JSON.stringify(spec.literal)}, got ${JSON.stringify(value)}`;
+        return null;
+    }
+    if (spec.enum) {
+        if (!spec.enum.includes(value)) {
+            return `value ${JSON.stringify(value)} not in enum ${JSON.stringify(spec.enum)}`;
+        }
+        return null;
+    }
+    if (spec.schema) {
+        const sub = NAMED_SCHEMAS[spec.schema];
+        return checkObject(value, sub);
+    }
+    switch (spec.type) {
+        case "string":
+            if (typeof value !== "string")
+                return `expected string, got ${typeof value}`;
+            if (spec.pattern === "commitment" && !isCommitment(value)) {
+                return "expected sha256:[64-hex] commitment";
+            }
+            return null;
+        case "number":
+            if (typeof value !== "number" || Number.isNaN(value))
+                return `expected number, got ${typeof value}`;
+            if (spec.min !== undefined && value < spec.min)
+                return `value ${value} below minimum ${spec.min}`;
+            if (spec.max !== undefined && value > spec.max)
+                return `value ${value} above maximum ${spec.max}`;
+            return null;
+        case "integer":
+            if (typeof value !== "number" || !Number.isInteger(value))
+                return `expected integer, got ${typeof value}`;
+            return null;
+        case "boolean":
+            if (typeof value !== "boolean")
+                return `expected boolean, got ${typeof value}`;
+            return null;
+        case "object":
+            if (!isPlainObject(value))
+                return `expected object, got ${Array.isArray(value) ? "array" : typeof value}`;
+            return null;
+        case "array":
+            if (!Array.isArray(value))
+                return `expected array, got ${typeof value}`;
+            if (spec.items) {
+                for (let i = 0; i < value.length; i++) {
+                    const err = checkValue(value[i], spec.items);
+                    if (err)
+                        return `[${i}]: ${err}`;
+                }
+            }
+            return null;
+    }
+    return `unknown field spec`;
+}
+function checkObject(value, schema) {
+    if (!isPlainObject(value)) {
+        return `expected object, got ${Array.isArray(value) ? "array" : typeof value}`;
+    }
+    const known = new Set([...Object.keys(schema.required), ...Object.keys(schema.optional)]);
+    const extras = Object.keys(value).filter((k) => !known.has(k));
+    if (extras.length > 0) {
+        extras.sort();
+        return `unexpected extra fields: ${JSON.stringify(extras)}`;
+    }
+    for (const [name, spec] of Object.entries(schema.required)) {
+        if (!(name in value))
+            return `missing required field '${name}'`;
+        const err = checkValue(value[name], spec);
+        if (err)
+            return `${name}: ${err}`;
+    }
+    for (const [name, spec] of Object.entries(schema.optional)) {
+        if (name in value) {
+            const err = checkValue(value[name], spec);
+            if (err)
+                return `${name}: ${err}`;
+        }
+    }
+    return null;
+}
+function checkWorkflowCompositionSubset(entry) {
+    // WorkflowCompositionArtifact.hard_relevant_steps must be a subset of
+    // step_vpec_ids (mirrors the SDK's model_validator + Python verifier's
+    // _check_workflow_composition_subset). Without this an artifact can
+    // declare a "hard relevant" step that isn't in the step list —
+    // structurally impossible since weakest-link-hard cannot evaluate it.
+    const stepIds = entry.step_vpec_ids;
+    const hard = entry.hard_relevant_steps;
+    if (!Array.isArray(stepIds) || !Array.isArray(hard))
+        return null;
+    const stepSet = new Set(stepIds);
+    const extras = hard.filter((s) => !stepSet.has(s));
+    if (extras.length > 0) {
+        return `hard_relevant_steps must be a subset of step_vpec_ids; unknown step ids: ${JSON.stringify(extras)}`;
+    }
+    return null;
+}
+function checkSourceMix(value) {
+    // CalibrationEpoch.source_mix must be dict[str, float] summing to
+    // 1.0 ± 1e-6 with every value FINITE and NON-NEGATIVE (mirrors SDK
+    // Pydantic validator + the post-Phase-1-#3 review hardening). Without
+    // the finite/non-negative checks {"a": 1.2, "b": -0.2} would sum to
+    // 1.0 but represent an invalid distribution.
+    if (!isPlainObject(value))
+        return "source_mix is not an object";
+    let total = 0;
+    for (const [k, v] of Object.entries(value)) {
+        if (typeof k !== "string")
+            return "source_mix has non-string key";
+        if (typeof v !== "number" || Number.isNaN(v)) {
+            return `source_mix[${JSON.stringify(k)}] is not a number`;
+        }
+        if (!Number.isFinite(v)) {
+            return `source_mix[${JSON.stringify(k)}] is not finite`;
+        }
+        if (v < 0) {
+            return `source_mix[${JSON.stringify(k)}] is negative`;
+        }
+        total += v;
+    }
+    if (Math.abs(total - 1.0) > 1e-6)
+        return `source_mix sums to ${total}, expected 1.0`;
+    return null;
+}
+// ── Result type + reason codes ──
+export const SCOPED_REASONS = [
+    "ok",
+    "missing_section",
+    "malformed_section",
+    "missing_commitment",
+    "malformed_commitment",
+    "missing_discriminator",
+    "unknown_certificate_type",
+    "schema_validation_failed",
+    "ordering_violation",
+    "commitment_mismatch",
+];
+// ── Verification ──
+function emptyBundleCommitment() {
+    return canonicalSha256({ scoped_certificates: [] });
+}
+function validateEntry(entry) {
+    if (!isPlainObject(entry)) {
+        return {
+            ok: false,
+            reason: "schema_validation_failed",
+            details: { detail: "entry is not an object" },
+        };
+    }
+    const ct = entry.certificate_type;
+    if (typeof ct !== "string" || ct.length === 0) {
+        return { ok: false, reason: "missing_discriminator", details: {} };
+    }
+    const schema = ARTIFACT_SCHEMAS[ct];
+    if (!schema) {
+        return {
+            ok: false,
+            reason: "unknown_certificate_type",
+            details: { certificate_type: ct },
+        };
+    }
+    const err = checkObject(entry, schema);
+    if (err) {
+        return {
+            ok: false,
+            reason: "schema_validation_failed",
+            details: { certificate_type: ct, detail: err },
+        };
+    }
+    if (ct === "calibration_epoch") {
+        const smErr = checkSourceMix(entry.source_mix);
+        if (smErr) {
+            return {
+                ok: false,
+                reason: "schema_validation_failed",
+                details: { certificate_type: ct, detail: smErr },
+            };
+        }
+    }
+    if (ct === "workflow_composition") {
+        const subErr = checkWorkflowCompositionSubset(entry);
+        if (subErr) {
+            return {
+                ok: false,
+                reason: "schema_validation_failed",
+                details: { certificate_type: ct, detail: subErr },
+            };
+        }
+    }
+    return { ok: true, certificateType: ct };
+}
+export function verifyScopedCertificates(vpecLike) {
+    if (!("scoped_certificates" in vpecLike)) {
+        return { valid: false, reason: "missing_section", entry_count: 0, details: {} };
+    }
+    const entries = vpecLike.scoped_certificates;
+    if (!Array.isArray(entries)) {
+        // Present-but-not-an-array is a malformed section, NOT informational.
+        // Returning missing_section here would let a credential with
+        // `scoped_certificates: "not-an-array"` slip past verification.
+        return {
+            valid: false,
+            reason: "malformed_section",
+            entry_count: 0,
+            details: {
+                detail: "scoped_certificates is not an array",
+                got_type: typeof entries,
+            },
+        };
+    }
+    if (!("scoped_certificates_commitment" in vpecLike)) {
+        return {
+            valid: false,
+            reason: "missing_commitment",
+            entry_count: entries.length,
+            details: {},
+        };
+    }
+    const declared = vpecLike.scoped_certificates_commitment;
+    if (!isCommitment(declared)) {
+        return {
+            valid: false,
+            reason: "malformed_commitment",
+            entry_count: entries.length,
+            details: { declared },
+        };
+    }
+    // Per-entry structural validation + discriminator check.
+    const orderKeys = [];
+    for (let i = 0; i < entries.length; i++) {
+        const res = validateEntry(entries[i]);
+        if (!res.ok) {
+            return {
+                valid: false,
+                reason: res.reason,
+                entry_count: entries.length,
+                details: { index: i, ...res.details },
+            };
+        }
+        const payloadHash = canonicalSha256(entries[i]);
+        orderKeys.push([res.certificateType, payloadHash]);
+    }
+    // Canonical ordering check.
+    const sortedKeys = [...orderKeys].sort((a, b) => {
+        if (a[0] !== b[0])
+            return a[0] < b[0] ? -1 : 1;
+        if (a[1] !== b[1])
+            return a[1] < b[1] ? -1 : 1;
+        return 0;
+    });
+    for (let i = 0; i < orderKeys.length; i++) {
+        if (orderKeys[i][0] !== sortedKeys[i][0] || orderKeys[i][1] !== sortedKeys[i][1]) {
+            return {
+                valid: false,
+                reason: "ordering_violation",
+                entry_count: entries.length,
+                details: {
+                    index: i,
+                    got: orderKeys[i],
+                    expected: sortedKeys[i],
+                },
+            };
+        }
+    }
+    // Commitment recomputation.
+    let recomputed;
+    if (entries.length === 0) {
+        recomputed = emptyBundleCommitment();
+    }
+    else {
+        const leaves = entries.map((e) => canonicalJson(e));
+        recomputed = buildMerkleRoot(leaves);
+    }
+    if (recomputed !== declared) {
+        return {
+            valid: false,
+            reason: "commitment_mismatch",
+            entry_count: entries.length,
+            details: { declared, recomputed },
+        };
+    }
+    return { valid: true, reason: "ok", entry_count: entries.length, details: {} };
+}
+// Re-export canonical helpers for consumers that want to compose them.
+export { canonicalJson, canonicalJsonString, buildMerkleRoot };
+//# sourceMappingURL=scoped.js.map

package/dist/scoped.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped.js","sourceRoot":"","sources":["../src/scoped.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,eAAe,EACf,aAAa,EACb,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAEzB,2EAA2E;AAC3E,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,0CAA0C;AAE1C,gBAAgB;AAEhB,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,OAAO,GAAG,uBAAuB,CAAC;AAExC,SAAS,YAAY,CAAC,CAAU;IAC9B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAuBD,MAAM,cAAc,GAAiB;IACnC,QAAQ,EAAE;QACR,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE;QAChF,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KACvB;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;KACzC;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAiB;IACvC,QAAQ,EAAE;QACR,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;KAC3D;IACD,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,oBAAoB,GAAiB;IACzC,QAAQ,EAAE;QACR,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,EAAE;KAC5D;IACD,QAAQ,EAAE;QACR,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,CAAC;YAChE,QAAQ,EAAE,IAAI;SACf;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC1C;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAiB;IACzC,QAAQ,EAAE;QACR,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;KAC3D;IACD,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,aAAa,GAAiC;IAClD,QAAQ,EAAE,cAAc;IACxB,YAAY,EAAE,kBAAkB;IAChC,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;CACrC,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,aAAa;IACb,iBAAiB;IACjB,eAAe;IACf,mBAAmB;IACnB,mBAAmB;CACX,CAAC;AAEX,MAAM,gBAAgB,GAAiC;IACrD,cAAc,EAAE;QACd,QAAQ,EAAE;YACR,gBAAgB,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE;YAC/C,iBAAiB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;YAC/C,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,uBAAuB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;YAClE,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACvD,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;YAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,EAAE;SAC5D;QACD,QAAQ,EAAE;YACR,kBAAkB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACvC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;KACF;IACD,mBAAmB,EAAE;QACnB,QAAQ,EAAE;YACR,gBAAgB,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE;YACpD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,eAAe,EAAE;gBACf,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACpD;aACF;YACD,iBAAiB,EAAE;gBACjB,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACpD;aACF;SACF;QACD,QAAQ,EAAE;YACR,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;KACF;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE;YACR,gBAAgB,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;YACjD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,gBAAgB,EAAE;gBAChB,IAAI,EAAE;oBACJ,iBAAiB;oBACjB,kBAAkB;oBAClB,cAAc;oBACd,qBAAqB;iBACtB;aACF;YACD,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,sBAAsB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;YACjE,yBAAyB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;SACrE;QACD,QAAQ,EAAE;YACR,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;KACF;IACD,mBAAmB,EAAE;QACnB,QAAQ,EAAE;YACR,gBAAgB,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE;YACpD,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;YAC/B,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE;YACjE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC9B;QACD,QAAQ,EAAE;YACR,mBAAmB,EAAE;gBACnB,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;gBAC7C,QAAQ,EAAE,IAAI;aACf;YACD,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACrD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;KACF;IACD,oBAAoB,EAAE;QACpB,QAAQ,EAAE;YACR,gBAAgB,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;YACrD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC3D,mBAAmB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACjE,gBAAgB,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE;YAClD,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;SAC9C;QACD,QAAQ,EAAE;YACR,qBAAqB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;KACF;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE;YACR,gBAAgB,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;YACjD,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;YAC/B,aAAa,EAAE;gBACb,IAAI,EAAE;oBACJ,QAAQ;oBACR,0BAA0B;oBAC1B,+BAA+B;iBAChC;aACF;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC5B;QACD,QAAQ,EAAE;YACR,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACnD,mBAAmB,EAAE;gBACnB,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;gBAC7C,QAAQ,EAAE,IAAI;aACf;YACD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;KACF;IACD,iBAAiB,EAAE;QACjB,QAAQ,EAAE;YACR,gBAAgB,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE;YAClD,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE;YACtD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC/B;QACD,QAAQ,EAAE;YACR,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAChD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;KACF;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE;YACR,gBAAgB,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;YACjD,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE;YACtE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,EAAE;SACtE;QACD,QAAQ,EAAE;YACR,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAClC;KACF;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE;YACR,gBAAgB,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;YACjD,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAClC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,iBAAiB;oBACjB,gBAAgB;oBAChB,2BAA2B;oBAC3B,uBAAuB;iBACxB;aACF;YACD,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;YAC/D,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;YAC7D,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE;YACzE,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACrC;QACD,QAAQ,EAAE;YACR,oBAAoB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE;YAC5E,uBAAuB,EAAE;gBACvB,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;aACjD;YACD,sBAAsB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACpE,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SAC1D;KACF;IACD,mBAAmB,EAAE;QACnB,QAAQ,EAAE;YACR,gBAAgB,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE;YACpD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;YAC5D,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;YAC5D,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC1D,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC5D,qBAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC1C,sBAAsB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC3C,yBAAyB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9C,oBAAoB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACzC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;SAC3D;QACD,QAAQ,EAAE;YACR,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvD,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;KACF;CACF,CAAC;AAEF,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAe;IACjD,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO,oBAAoB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACpH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAc,CAAC,EAAE,CAAC;YACxC,OAAO,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,wBAAwB,OAAO,KAAK,EAAE,CAAC;YAC7E,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,OAAO,qCAAqC,CAAC;YAC/C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,OAAO,wBAAwB,OAAO,KAAK,EAAE,CAAC;YACpG,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,KAAK,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC;YAClG,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,KAAK,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC;YAClG,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,OAAO,yBAAyB,OAAO,KAAK,EAAE,CAAC;YAC1G,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,OAAO,yBAAyB,OAAO,KAAK,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBAAE,OAAO,wBAAwB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC;YAC1G,OAAO,IAAI,CAAC;QACd,KAAK,OAAO;YACV,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,uBAAuB,OAAO,KAAK,EAAE,CAAC;YACxE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC7C,IAAI,GAAG;wBAAE,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;gBACnC,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAoB;IACvD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,wBAAwB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,4BAA4B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,2BAA2B,IAAI,GAAG,CAAC;QAChE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG;YAAE,OAAO,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC;IACpC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,GAAG;gBAAE,OAAO,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,8BAA8B,CAAC,KAA8B;IACpE,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,+DAA+D;IAC/D,sEAAsE;IACtE,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,4EAA4E,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,kEAAkE;IAClE,mEAAmE;IACnE,sEAAsE;IACtE,oEAAoE;IACpE,6CAA6C;IAC7C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,6BAA6B,CAAC;IAChE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,+BAA+B,CAAC;QAClE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,OAAO,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,OAAO,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;QACxD,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,IAAI;QAAE,OAAO,sBAAsB,KAAK,gBAAgB,CAAC;IACrF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mCAAmC;AAEnC,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI;IACJ,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;IACtB,uBAAuB;IACvB,0BAA0B;IAC1B,0BAA0B;IAC1B,oBAAoB;IACpB,qBAAqB;CACb,CAAC;AAWX,qBAAqB;AAErB,SAAS,qBAAqB;IAC5B,OAAO,eAAe,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CACpB,KAAc;IAId,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE;SAC9C,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAClC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE;SAClC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;SAC/C,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,KAAK,mBAAmB,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,0BAA0B;gBAClC,OAAO,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;aACjD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,EAAE,KAAK,sBAAsB,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,0BAA0B;gBAClC,OAAO,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAiC;IAEjC,IAAI,CAAC,CAAC,qBAAqB,IAAI,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAClF,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,mBAAmB,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,sEAAsE;QACtE,6DAA6D;QAC7D,gEAAgE;QAChE,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,mBAAmB;YAC3B,WAAW,EAAE,CAAC;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,qCAAqC;gBAC7C,QAAQ,EAAE,OAAO,OAAO;aACzB;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,gCAAgC,IAAI,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,oBAAoB;YAC5B,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,8BAA8B,CAAC;IACzD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,sBAAsB;YAC9B,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE;SACtB,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,WAAW,EAAE,OAAO,CAAC,MAAM;gBAC3B,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE;aACtC,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,4BAA4B;IAC5B,MAAM,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC9C,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,oBAAoB;gBAC5B,WAAW,EAAE,OAAO,CAAC,MAAM;gBAC3B,OAAO,EAAE;oBACP,KAAK,EAAE,CAAC;oBACR,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;oBACjB,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;iBACxB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,UAAkB,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,UAAU,GAAG,qBAAqB,EAAE,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,qBAAqB;YAC7B,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;SAClC,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACjF,CAAC;AAED,uEAAuE;AACvE,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAE,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,60 @@
+/**
+ * primust-verify — Types for offline verifier.
+ */
+import type { ProofLevel, ProofDistribution, Coverage } from '@primust/artifact-core';
+export type RekorStatus = 'active' | 'not_found' | 'revoked' | 'unavailable' | 'skipped';
+/**
+ * Synchronous resolver that returns the parent VPEC's
+ * `commitment_root_poseidon2` (canonical "poseidon2:<hex>" form) for a
+ * given upstream VPEC envelope ID, or null if the parent's root is not
+ * locally available.
+ *
+ * Implementations typically wrap `SqliteStore.getUpstreamVpecRoot(vpecId)`.
+ * The verifier core deliberately avoids a SqliteStore dependency to
+ * preserve its zero-runtime-deps invariant — callers inject this resolver
+ * when they have local store context (CLI / dashboard verifier paths).
+ *
+ * Returning null is offline-tolerant: the verifier surfaces a warning
+ * (`upstream_vpec_proof_no_anchor_root_in_artifact`) rather than a hard
+ * mismatch, so cross-org chains still verify at boundaries.
+ */
+export type UpstreamRootResolver = (vpecId: string) => string | null | undefined;
+export interface VerifyOptions {
+    /** Reject test_mode: true artifacts. */
+    production?: boolean;
+    /** Skip Rekor check — fully offline mode. */
+    skip_network?: boolean;
+    /** Path to custom public key PEM (for enterprise self-hosting). */
+    trust_root?: string;
+}
+export interface VerificationResult {
+    vpec_id: string;
+    valid: boolean;
+    schema_version: string;
+    proof_level: ProofLevel | string;
+    proof_distribution: ProofDistribution | Record<string, unknown>;
+    org_id: string;
+    workflow_id: string;
+    process_context_hash: string | null;
+    partial: boolean;
+    test_mode: boolean;
+    signer_id: string;
+    kid: string;
+    signed_at: string;
+    timestamp_anchor_valid: boolean | null;
+    rekor_status: RekorStatus;
+    zk_proof_valid: boolean | null;
+    commitment_root_valid: boolean | null;
+    manifest_hashes: Record<string, string>;
+    gaps: Array<{
+        gap_id: string;
+        gap_type: string;
+        severity: string;
+    }>;
+    coverage: Coverage | Record<string, unknown>;
+    violations_present: boolean;
+    violation_count: number;
+    errors: string[];
+    warnings: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAY,MAAM,wBAAwB,CAAC;AAEhG,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;AAEzF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;AAEjF,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,UAAU,GAAG,MAAM,CAAC;IACjC,kBAAkB,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,OAAO,GAAG,IAAI,CAAC;IACvC,YAAY,EAAE,WAAW,CAAC;IAC1B,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,qBAAqB,EAAE,OAAO,GAAG,IAAI,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,kBAAkB,EAAE,OAAO,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}