@smartmemory/stratum 0.3.0

package/dist/guard/evidence.js

@@ -0,0 +1,475 @@
+/**
+ * Server-side evaluator for the four trusted guard-evidence builtins.
+ *
+ * This module intentionally handles only trusted predicates. Callers route
+ * `verified` and `judged` predicates to the judge backend before/after this
+ * evaluation; `evaluateEvidence` skips those tiers defensively for that split.
+ */
+import { spawn } from "node:child_process";
+import { realpath, stat } from "node:fs/promises";
+import { basename, dirname, isAbsolute, relative, resolve, sep } from "node:path";
+import { EvidenceParseError } from "./errors.js";
+export { EvidenceParseError } from "./errors.js";
+export const TRUSTED_BUILTINS = new Set([
+    "server_file_exists",
+    "git_commit_exists",
+    "command_exit_zero",
+    "verdict_receipt_clean",
+]);
+const DEFAULT_COMMAND_TIMEOUT_SECONDS = 120;
+const NO_WORKSPACE_ROOT_REASON = "no workspace_root registered for trusted file/command/git evidence";
+/** Match Python's opt-in command gate exactly. */
+export function commandsAllowed(env = process.env) {
+    return env.STRATUM_GUARD_ALLOW_COMMANDS === "1";
+}
+/** Match Python's `int(env or default)` fallback for malformed values. */
+export function commandTimeoutSeconds(env = process.env) {
+    const value = env.STRATUM_GUARD_CMD_TIMEOUT_S;
+    if (value === undefined || value.trim() === "")
+        return DEFAULT_COMMAND_TIMEOUT_SECONDS;
+    const parsed = Number(value);
+    return Number.isInteger(parsed) ? parsed : DEFAULT_COMMAND_TIMEOUT_SECONDS;
+}
+/** Enough of Python's `str.__repr__` for the evidence messages it exposes. */
+function pythonStringRepr(value) {
+    let encoded = "'";
+    for (let index = 0; index < value.length; index += 1) {
+        const char = value[index];
+        const code = char.charCodeAt(0);
+        if (char === "\\")
+            encoded += "\\\\";
+        else if (char === "'")
+            encoded += "\\'";
+        else if (char === "\n")
+            encoded += "\\n";
+        else if (char === "\r")
+            encoded += "\\r";
+        else if (char === "\t")
+            encoded += "\\t";
+        else if (code < 0x20 || code === 0x7f)
+            encoded += `\\x${code.toString(16).padStart(2, "0")}`;
+        else
+            encoded += char;
+    }
+    return `${encoded}'`;
+}
+function pythonStringListRepr(values) {
+    return `[${values.map(pythonStringRepr).join(", ")}]`;
+}
+function isIdentifierStart(char) {
+    return (char >= "A" && char <= "Z") || (char >= "a" && char <= "z") || char === "_";
+}
+function isWhitespace(char) {
+    return char === " " || char === "\t" || char === "\n" || char === "\r" || char === "\v" || char === "\f";
+}
+function isTrustedBuiltin(name) {
+    return TRUSTED_BUILTINS.has(name);
+}
+function isIdentifierPart(char) {
+    return isIdentifierStart(char) || (char >= "0" && char <= "9");
+}
+function isHex(char) {
+    return (char >= "0" && char <= "9") || (char >= "a" && char <= "f") || (char >= "A" && char <= "F");
+}
+/** Hand-rolled grammar for the deliberately tiny trusted-evidence language. */
+class PredicateStatementParser {
+    index = 0;
+    statement;
+    constructor(statement) { this.statement = statement; }
+    parse() {
+        this.skipWhitespace();
+        const name = this.parseIdentifier();
+        if (name === undefined)
+            this.singleCallError();
+        this.skipWhitespace();
+        if (this.current() !== "(")
+            this.singleCallError();
+        this.index += 1;
+        if (!isTrustedBuiltin(name)) {
+            throw new EvidenceParseError(`unknown trusted builtin ${pythonStringRepr(name)} in ${pythonStringRepr(this.statement)}`);
+        }
+        const args = [];
+        this.skipWhitespace();
+        if (this.current() !== ")") {
+            while (true) {
+                if (this.isKeywordArgument()) {
+                    throw new EvidenceParseError(`keyword args not allowed: ${pythonStringRepr(this.statement)}`);
+                }
+                args.push(this.parseLiteral());
+                this.skipWhitespace();
+                if (this.current() === ")")
+                    break;
+                if (this.current() !== ",")
+                    this.literalError();
+                this.index += 1;
+                this.skipWhitespace();
+                // Python accepts a trailing comma in a call.
+                if (this.current() === ")")
+                    break;
+            }
+        }
+        this.index += 1;
+        this.skipWhitespace();
+        if (this.index !== this.statement.length)
+            this.singleCallError();
+        return { name, args };
+    }
+    current() {
+        return this.statement[this.index];
+    }
+    skipWhitespace() {
+        while (this.current() !== undefined && isWhitespace(this.current()))
+            this.index += 1;
+    }
+    parseIdentifier() {
+        const first = this.current();
+        if (first === undefined || !isIdentifierStart(first))
+            return undefined;
+        const start = this.index;
+        this.index += 1;
+        while (this.current() !== undefined && isIdentifierPart(this.current()))
+            this.index += 1;
+        return this.statement.slice(start, this.index);
+    }
+    isKeywordArgument() {
+        const saved = this.index;
+        const name = this.parseIdentifier();
+        if (name === undefined)
+            return false;
+        this.skipWhitespace();
+        const keyword = this.current() === "=";
+        this.index = saved;
+        return keyword;
+    }
+    parseLiteral() {
+        const char = this.current();
+        if (char === "'" || char === '"')
+            return this.parseString();
+        if (char === "[")
+            return this.parseStringArray();
+        // Decision 4 deliberately accepts only strings and arrays of strings.
+        // Unlike Python's literal_eval, other literal forms fail closed as
+        // evidence_parse_error rather than being interpreted by this trusted DSL.
+        this.literalError();
+    }
+    parseStringArray() {
+        this.index += 1;
+        const values = [];
+        this.skipWhitespace();
+        if (this.current() !== "]") {
+            while (true) {
+                const char = this.current();
+                if (char !== "'" && char !== '"')
+                    this.literalError();
+                values.push(this.parseString());
+                this.skipWhitespace();
+                if (this.current() === "]")
+                    break;
+                if (this.current() !== ",")
+                    this.literalError();
+                this.index += 1;
+                this.skipWhitespace();
+                // Python accepts a trailing comma in a list literal.
+                if (this.current() === "]")
+                    break;
+            }
+        }
+        this.index += 1;
+        return values;
+    }
+    parseString() {
+        const quote = this.current();
+        if (quote !== "'" && quote !== '"')
+            this.literalError();
+        this.index += 1;
+        let value = "";
+        while (true) {
+            const char = this.current();
+            if (char === undefined || char === "\n" || char === "\r")
+                this.literalError();
+            if (char === quote) {
+                this.index += 1;
+                return value;
+            }
+            if (char !== "\\") {
+                value += char;
+                this.index += 1;
+                continue;
+            }
+            this.index += 1;
+            value += this.parseEscape();
+        }
+    }
+    parseEscape() {
+        const escaped = this.current();
+        if (escaped === undefined)
+            this.literalError();
+        this.index += 1;
+        const simple = {
+            a: "\u0007", b: "\b", f: "\f", n: "\n", r: "\r", t: "\t", v: "\v",
+            "\\": "\\", "'": "'", '"': '"',
+        };
+        const mapped = simple[escaped];
+        if (mapped !== undefined)
+            return mapped;
+        if (escaped === "\n")
+            return "";
+        if (escaped === "\r") {
+            if (this.current() === "\n")
+                this.index += 1;
+            return "";
+        }
+        if (escaped === "x")
+            return String.fromCodePoint(this.parseHexValue(2));
+        if (escaped === "u")
+            return String.fromCodePoint(this.parseHexValue(4));
+        if (escaped === "U") {
+            const codePoint = this.parseHexValue(8);
+            if (codePoint > 0x10ffff)
+                this.literalError();
+            return String.fromCodePoint(codePoint);
+        }
+        if (escaped >= "0" && escaped <= "7") {
+            let digits = escaped;
+            while (digits.length < 3) {
+                const next = this.current();
+                if (next === undefined || next < "0" || next > "7")
+                    break;
+                digits += next;
+                this.index += 1;
+            }
+            return String.fromCharCode(Number.parseInt(digits, 8));
+        }
+        // Python preserves unknown escape sequences (and emits a warning), rather
+        // than interpreting them as JavaScript escapes.
+        return `\\${escaped}`;
+    }
+    parseHexValue(length) {
+        const start = this.index;
+        for (let offset = 0; offset < length; offset += 1) {
+            const char = this.current();
+            if (char === undefined || !isHex(char))
+                this.literalError();
+            this.index += 1;
+        }
+        return Number.parseInt(this.statement.slice(start, this.index), 16);
+    }
+    singleCallError() {
+        throw new EvidenceParseError(`predicate must be a single call: ${pythonStringRepr(this.statement)}`);
+    }
+    literalError() {
+        throw new EvidenceParseError(`predicate args must be literals: ${pythonStringRepr(this.statement)}`);
+    }
+}
+/** Parse `name(literal, ...)` without evaluating arbitrary JavaScript. */
+export function parsePredicateStatement(statement) {
+    return new PredicateStatementParser(statement).parse();
+}
+export function statementIsTrusted(statement) {
+    try {
+        parsePredicateStatement(statement);
+        return true;
+    }
+    catch (error) {
+        if (error instanceof EvidenceParseError)
+            return false;
+        throw error;
+    }
+}
+export function statementUsesCommand(statement) {
+    try {
+        return parsePredicateStatement(statement).name === "command_exit_zero";
+    }
+    catch (error) {
+        if (error instanceof EvidenceParseError)
+            return false;
+        throw error;
+    }
+}
+function isInside(base, target) {
+    const path = relative(base, target);
+    return path === "" || (path !== ".." && !path.startsWith(`..${sep}`) && !isAbsolute(path));
+}
+/**
+ * Resolve a possibly-missing target as Python's `(base / rel).resolve()` does:
+ * resolve every extant parent symlink, then refuse a resolved target outside
+ * the resolved workspace base.
+ */
+async function resolveUnder(workspaceRoot, rel) {
+    let base;
+    try {
+        base = await realpath(workspaceRoot);
+    }
+    catch {
+        // Path.resolve(strict=False) still produces a usable lexical base when a
+        // registered root has disappeared; the later stat simply reports missing.
+        base = resolve(workspaceRoot);
+    }
+    let candidate;
+    try {
+        candidate = resolve(base, rel);
+    }
+    catch {
+        return undefined;
+    }
+    if (!isInside(base, candidate))
+        return undefined;
+    const suffix = [];
+    let existing = candidate;
+    while (true) {
+        try {
+            const realExisting = await realpath(existing);
+            const target = resolve(realExisting, ...suffix);
+            return isInside(base, target) ? target : undefined;
+        }
+        catch {
+            const parent = dirname(existing);
+            if (parent === existing)
+                return undefined;
+            suffix.unshift(basename(existing));
+            existing = parent;
+        }
+    }
+}
+async function evaluateServerFileExists(workspaceRoot, args) {
+    if (args.length !== 1 || typeof args[0] !== "string") {
+        return [false, "server_file_exists expects one string path"];
+    }
+    const rel = args[0];
+    const target = await resolveUnder(workspaceRoot, rel);
+    if (target === undefined)
+        return [false, `path escapes workspace_root: ${pythonStringRepr(rel)}`];
+    try {
+        const exists = (await stat(target)).isFile();
+        return [exists, `${rel} ${exists ? "exists" : "missing"}`];
+    }
+    catch {
+        return [false, `${rel} missing`];
+    }
+}
+async function runCommand(command, args, cwd, timeoutSeconds) {
+    return new Promise((resolveOutcome) => {
+        let settled = false;
+        let timedOut = false;
+        let timer;
+        const finish = (outcome) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timer !== undefined)
+                clearTimeout(timer);
+            resolveOutcome(outcome);
+        };
+        let child;
+        try {
+            child = spawn(command, args, { cwd, detached: true, stdio: "ignore" });
+        }
+        catch (error) {
+            finish({ kind: "error", error: error instanceof Error ? error.message : String(error) });
+            return;
+        }
+        timer = setTimeout(() => {
+            timedOut = true;
+            // Python's subprocess timeout path calls Popen.kill(), which is SIGKILL
+            // on POSIX. Kill the detached child's whole group so background
+            // descendants do not survive the timeout.
+            try {
+                if (child.pid === undefined)
+                    throw new Error("child has no pid");
+                process.kill(-child.pid, "SIGKILL");
+            }
+            catch (error) {
+                const code = error.code;
+                if (code === "ESRCH" || code === "EPERM") {
+                    try {
+                        child.kill("SIGKILL");
+                    }
+                    catch {
+                        // The child has already exited or cannot be signaled.
+                    }
+                }
+            }
+        }, Math.max(0, timeoutSeconds) * 1000);
+        child.once("error", (error) => finish({ kind: "error", error: error.message }));
+        child.once("close", (code) => finish(timedOut
+            ? { kind: "timeout", command: [command, ...args], timeoutSeconds }
+            : { kind: "exit", code }));
+    });
+}
+async function evaluateGitCommitExists(workspaceRoot, args) {
+    if (args.length !== 1 || typeof args[0] !== "string") {
+        return [false, "git_commit_exists expects one sha string"];
+    }
+    const sha = args[0];
+    const outcome = await runCommand("git", ["rev-parse", "--verify", "--quiet", `${sha}^{commit}`], workspaceRoot, 5);
+    if (outcome.kind === "error")
+        return [false, `git rev-parse failed: ${outcome.error}`];
+    if (outcome.kind === "timeout") {
+        return [false, `git rev-parse failed: Command ${pythonStringListRepr(outcome.command)} timed out after ${outcome.timeoutSeconds} seconds`];
+    }
+    const met = outcome.code === 0;
+    return [met, `commit ${sha.slice(0, 12)} ${met ? "present" : "absent"}`];
+}
+async function evaluateCommandExitZero(workspaceRoot, args) {
+    if (!commandsAllowed())
+        return [false, "command execution disabled (set STRATUM_GUARD_ALLOW_COMMANDS=1)"];
+    if (args.length !== 1 || !Array.isArray(args[0]) || !args[0].every((value) => typeof value === "string")) {
+        return [false, "command_exit_zero expects one list[str]"];
+    }
+    const command = args[0];
+    if (command.length === 0)
+        return [false, "empty command"];
+    const outcome = await runCommand(command[0], command.slice(1), workspaceRoot, commandTimeoutSeconds());
+    if (outcome.kind === "error")
+        return [false, `command failed: ${outcome.error}`];
+    if (outcome.kind === "timeout") {
+        return [false, `command failed: Command ${pythonStringListRepr(outcome.command)} timed out after ${outcome.timeoutSeconds} seconds`];
+    }
+    const met = outcome.code === 0;
+    return [met, `${command[0]} exited ${String(outcome.code)}`];
+}
+function evaluateVerdictReceiptClean(args, ledgerEntries) {
+    if (args.length !== 1 || typeof args[0] !== "string") {
+        return [false, "verdict_receipt_clean expects one digest string"];
+    }
+    const digest = args[0];
+    const met = ledgerEntries.some((entry) => entry.entry_digest === digest && (entry.outcome === "applied" || entry.outcome === "review_clean"));
+    return [met, met ? `receipt ${digest.slice(0, 12)} found (clean)` : `no clean receipt for ${digest.slice(0, 12)}`];
+}
+/**
+ * Evaluate only trusted builtins, with AND semantics. `verified`/`judged`
+ * predicates are deliberately omitted because the transition caller routes
+ * them to the judge backend (the Python evaluator is normally called with
+ * only trusted predicates as well).
+ */
+export async function evaluateEvidence(predicates, workspaceRoot, ledgerEntries) {
+    const perPredicate = [];
+    let met = true;
+    for (const predicate of predicates) {
+        if (predicate.type === "verified" || predicate.type === "judged")
+            continue;
+        const statement = typeof predicate.statement === "string" ? predicate.statement : "";
+        const { name, args } = parsePredicateStatement(statement);
+        let predicateMet;
+        let evidence;
+        if ((name === "server_file_exists" || name === "git_commit_exists" || name === "command_exit_zero") && !workspaceRoot) {
+            [predicateMet, evidence] = [false, NO_WORKSPACE_ROOT_REASON];
+        }
+        else if (name === "server_file_exists") {
+            [predicateMet, evidence] = await evaluateServerFileExists(workspaceRoot, args);
+        }
+        else if (name === "git_commit_exists") {
+            [predicateMet, evidence] = await evaluateGitCommitExists(workspaceRoot, args);
+        }
+        else if (name === "command_exit_zero") {
+            [predicateMet, evidence] = await evaluateCommandExitZero(workspaceRoot, args);
+        }
+        else {
+            [predicateMet, evidence] = evaluateVerdictReceiptClean(args, ledgerEntries);
+        }
+        perPredicate.push({ id: predicate.id, statement, met: predicateMet, evidence });
+        met = met && predicateMet;
+    }
+    return { met, perPredicate };
+}
+//# sourceMappingURL=evidence.js.map

package/dist/guard/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/guard/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IACtC,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,uBAAuB;CACf,CAAC,CAAC;AAIZ,MAAM,+BAA+B,GAAG,GAAG,CAAC;AAC5C,MAAM,wBAAwB,GAAG,oEAAoE,CAAC;AA2BtG,kDAAkD;AAClD,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,GAAG,CAAC,4BAA4B,KAAK,GAAG,CAAC;AAClD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,KAAK,GAAG,GAAG,CAAC,2BAA2B,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,+BAA+B,CAAC;IACvF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,+BAA+B,CAAC;AAC7E,CAAC;AAED,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,MAAM,CAAC;aAChC,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,KAAK,CAAC;aACnC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,KAAK,CAAC;aACpC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,KAAK,CAAC;aACpC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,KAAK,CAAC;aACpC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;;YACxF,OAAO,IAAI,IAAI,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,OAAO,GAAG,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAgB;IAC5C,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACxD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC;AACtF,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;AAC3G,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAsB,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC;AACtG,CAAC;AAED,+EAA+E;AAC/E,MAAM,wBAAwB;IACpB,KAAK,GAAG,CAAC,CAAC;IACD,SAAS,CAAS;IAEnC,YAAY,SAAiB,IAAI,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC;IAE9D,KAAK;QACH,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QAC/C,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG;YAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAEhB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,gBAAgB,CAAC,IAAI,CAAC,OAAO,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3H,CAAC;QAED,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,EAAE,CAAC;YAC3B,OAAO,IAAI,EAAE,CAAC;gBACZ,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;oBAC7B,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAChG,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;gBAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG;oBAAE,MAAM;gBAClC,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG;oBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;gBAChB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,6CAA6C;gBAC7C,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG;oBAAE,MAAM;YACpC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAEO,OAAO;QACb,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,EAAG,CAAC;YAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACxF,CAAC;IAEO,eAAe;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAG,CAAC;YAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAEO,iBAAiB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,YAAY;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5D,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjD,sEAAsE;QACtE,mEAAmE;QACnE,0EAA0E;QAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,EAAE,CAAC;YAC3B,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC5B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;oBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBAChC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG;oBAAE,MAAM;gBAClC,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG;oBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;gBAChB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,qDAAqD;gBACrD,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG;oBAAE,MAAM;YACpC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,WAAW;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QACxD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,IAAI,KAAK,GAAG,EAAE,CAAC;QAEf,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;gBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9E,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;gBAChB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,KAAK,IAAI,IAAI,CAAC;gBACd,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAChB,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,MAAM,MAAM,GAA2B;YACrC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI;YACjE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;SAC/B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,SAAS,GAAG,QAAQ;gBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9C,OAAO,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,OAAO,IAAI,GAAG,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;YACrC,IAAI,MAAM,GAAG,OAAO,CAAC;YACrB,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG;oBAAE,MAAM;gBAC1D,MAAM,IAAI,IAAI,CAAC;gBACf,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,0EAA0E;QAC1E,gDAAgD;QAChD,OAAO,KAAK,OAAO,EAAE,CAAC;IACxB,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5D,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAEO,eAAe;QACrB,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IAEO,YAAY;QAClB,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;CACF;AAED,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACvD,OAAO,IAAI,wBAAwB,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,CAAC;QACH,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,IAAI,CAAC;QACH,OAAO,uBAAuB,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,aAAqB,EAAE,GAAW;IAC5D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAEjD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,SAAS,CAAC;IACzB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,CAAC;YAChD,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnC,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,aAAqB,EAAE,IAAe;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,CAAC,KAAK,EAAE,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACtD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,EAAE,gCAAgC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7C,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAOD,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,IAAc,EAAE,GAAW,EAAE,cAAsB;IAC5F,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,KAAgD,CAAC;QACrD,MAAM,MAAM,GAAG,CAAC,OAAuB,EAAE,EAAE;YACzC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC,CAAC;QACF,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,QAAQ,GAAG,IAAI,CAAC;YAChB,wEAAwE;YACxE,gEAAgE;YAChE,0CAA0C;YAC1C,IAAI,CAAC;gBACH,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACjE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;gBACnD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;oBACzC,IAAI,CAAC;wBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACP,sDAAsD;oBACxD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ;YAC3C,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,cAAc,EAAE;YAClE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,aAAqB,EAAE,IAAe;IAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,CAAC,KAAK,EAAE,0CAA0C,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACnH,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,KAAK,EAAE,yBAAyB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,EAAE,iCAAiC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,OAAO,CAAC,cAAc,UAAU,CAAC,CAAC;IAC7I,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,aAAqB,EAAE,IAAe;IAC3E,IAAI,CAAC,eAAe,EAAE;QAAE,OAAO,CAAC,KAAK,EAAE,iEAAiE,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QACzG,OAAO,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAa,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACxG,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,KAAK,EAAE,mBAAmB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,EAAE,2BAA2B,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,OAAO,CAAC,cAAc,UAAU,CAAC,CAAC;IACvI,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAe,EAAE,aAAgC;IACpF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,CAAC,KAAK,EAAE,iDAAiD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC;IAC9I,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,wBAAwB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACrH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA+B,EAC/B,aAAwC,EACxC,aAAgC;IAEhC,MAAM,YAAY,GAAwB,EAAE,CAAC;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IAEf,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC3E,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAE1D,IAAI,YAAqB,CAAC;QAC1B,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC,IAAI,KAAK,oBAAoB,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtH,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACzC,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,MAAM,wBAAwB,CAAC,aAAc,EAAE,IAAI,CAAC,CAAC;QAClF,CAAC;aAAM,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACxC,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,MAAM,uBAAuB,CAAC,aAAc,EAAE,IAAI,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACxC,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,MAAM,uBAAuB,CAAC,aAAc,EAAE,IAAI,CAAC,CAAC;QACjF,CAAC;aAAM,CAAC;YACN,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,2BAA2B,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC9E,CAAC;QAED,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChF,GAAG,GAAG,GAAG,IAAI,YAAY,CAAC;IAC5B,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AAC/B,CAAC"}

package/dist/guard/fingerprint.js

@@ -0,0 +1,13 @@
+/** Byte-compatible guard policy checksum. */
+import { createHash } from "node:crypto";
+import { canonicalJson } from "./canonical.js";
+export function guardChecksum(graph, edgePredicates, terminal, stakes) {
+    const policy = {
+        graph: Object.fromEntries(Object.entries(graph).map(([key, targets]) => [key, [...targets]])),
+        edge_predicates: edgePredicates,
+        terminal: [...terminal].sort(),
+        stakes,
+    };
+    return createHash("sha256").update(canonicalJson(policy), "utf8").digest("hex");
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/guard/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../src/guard/fingerprint.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG/C,MAAM,UAAU,aAAa,CAC3B,KAAiB,EACjB,cAA8B,EAC9B,QAAkB,EAClB,MAA8B;IAE9B,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7F,eAAe,EAAE,cAAc;QAC/B,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE;QAC9B,MAAM;KACP,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC"}