@sourcey/catalog-verifier 1.1.35 → 1.2.0

package/dist/modules/evidence-operations/src/proof-graph.js

@@ -1,208 +0,0 @@
-import { compareInstants, digest, sha256Bytes } from "provenry/primitives";
-import { sourceyCaptureMethodRegistry } from "../../../contracts/capture/src/methods.js";
-import { evidenceReviewDecisionCoreSchema, evidenceReviewDecisionSchema, } from "../../../contracts/evidence/src/index.js";
-import { catalogRevisionContracts, entityRevisionSchema, } from "../../../contracts/revisions/src/index.js";
-import { assertAttestedObservationCapture } from "./attested-capture.js";
-import { EVIDENCE_NORMALIZER } from "./evidence-normalization.js";
-import { currentListingRevision } from "./retained-revision.js";
-import { deriveSourceStanding, normalizeEvidenceCapture, verifyEvidenceAssertions, } from "./submission-verifier.js";
-/**
- * Verifies the public evidence graph a release holds, from immutable local
- * bytes; this kernel performs no I/O. Evidence the release first includes is
- * proved: its normalized bytes reproduce from its capture with the current
- * profile, its assertions locate in them, and its capture is the one a Provenry
- * attestation the caller has verified (`verifyAttestedCaptures`) proves.
- * Evidence an earlier release first included is carried: that release proved
- * it, so here only its citations must resolve (lean-release-chain §3.1).
- */
-export function verifyEvidenceObjectGraph(input) {
-    const revisions = new Map(input.revisions.map((revision) => [revision.revision_digest, revision]));
-    const observations = new Map(input.observations.map((observation) => [observation.observation_id, observation]));
-    const carriedEventIds = input.carriedEventIds ?? new Set();
-    const usedAttestations = new Set();
-    // Carried evidence resolves its citations; nothing it rests on is proved again.
-    const carriedObservationIds = new Set();
-    for (const event of input.events) {
-        if (event.kind !== "evidence.bound" || !carriedEventIds.has(event.event_id))
-            continue;
-        const payload = event.payload;
-        for (const revisionDigest of [
-            event.subject.revision_digest,
-            payload.authority_entity_revision_digest,
-            payload.authority_program_revision_digest,
-        ]) {
-            if (typeof revisionDigest === "string" && !revisions.has(revisionDigest)) {
-                throw new Error(`Carried evidence event ${event.event_id} lacks its revision ${revisionDigest}.`);
-            }
-        }
-        const observationId = requiredString(payload.observation_id, "observation_id");
-        const observation = observations.get(observationId);
-        if (!observation) {
-            throw new Error(`Carried evidence event ${event.event_id} lacks its observation.`);
-        }
-        if (payload.normalized_object_digest !== undefined &&
-            payload.normalized_object_digest !== observation.capture?.normalized_object?.digest) {
-            throw new Error(`Carried evidence event ${event.event_id} names the wrong normalized object.`);
-        }
-        carriedObservationIds.add(observationId);
-        if (payload.capture_attestation_digest !== undefined) {
-            const attestationDigest = requiredString(payload.capture_attestation_digest, "capture_attestation_digest");
-            if (!input.attestedCaptures.has(attestationDigest)) {
-                throw new Error(`Carried evidence event ${event.event_id} lacks its capture attestation.`);
-            }
-            usedAttestations.add(attestationDigest);
-        }
-    }
-    for (const observation of input.observations) {
-        const capture = observation.capture;
-        if (capture?.availability !== "public")
-            continue;
-        const captureBytes = input.captures.get(capture.digest);
-        if (!captureBytes ||
-            captureBytes.byteLength !== capture.bytes ||
-            (!input.capturesProven && sha256Bytes(captureBytes) !== capture.digest)) {
-            throw new Error(`Observation ${observation.observation_id} lacks its public capture bytes.`);
-        }
-        if (!capture.normalized_object) {
-            throw new Error(`Observation ${observation.observation_id} lacks its normalized evidence declaration.`);
-        }
-        const normalizedBytes = input.normalizedObjects.get(capture.normalized_object.digest);
-        if (!normalizedBytes ||
-            normalizedBytes.byteLength !== capture.normalized_object.bytes ||
-            (!input.capturesProven && sha256Bytes(normalizedBytes) !== capture.normalized_object.digest)) {
-            throw new Error(`Observation ${observation.observation_id} lacks its normalized evidence bytes.`);
-        }
-        // The release that first included carried evidence normalized it.
-        if (carriedObservationIds.has(observation.observation_id))
-            continue;
-        if (capture.normalized_object.normalizer_contract !== EVIDENCE_NORMALIZER.normalizer_contract ||
-            capture.normalized_object.normalizer_id !== EVIDENCE_NORMALIZER.normalizer_id ||
-            capture.normalized_object.version !== EVIDENCE_NORMALIZER.version ||
-            capture.normalized_object.toolchain_digest !== EVIDENCE_NORMALIZER.toolchain_digest) {
-            throw new Error(`Observation ${observation.observation_id} is not normalized with the current profile.`);
-        }
-        const reproduced = normalizeEvidenceCapture({
-            bytes: captureBytes,
-            mediaType: capture.media_type,
-        });
-        if (reproduced.digest !== capture.normalized_object.digest ||
-            !bytesEqual(reproduced.bytes, normalizedBytes)) {
-            throw new Error(`Observation ${observation.observation_id} does not reproduce its normalized evidence.`);
-        }
-    }
-    for (const event of input.events) {
-        if (event.kind !== "evidence.bound" || carriedEventIds.has(event.event_id))
-            continue;
-        const revisionDigest = event.subject.revision_digest;
-        const retained = revisionDigest ? revisions.get(revisionDigest) : undefined;
-        if (!retained)
-            throw new Error(`Evidence event ${event.event_id} lacks its exact revision.`);
-        const revision = currentListingRevision(retained);
-        const payload = event.payload;
-        const observationId = requiredString(payload.observation_id, "observation_id");
-        const observation = observations.get(observationId);
-        if (!observation?.capture) {
-            throw new Error(`Evidence event ${event.event_id} lacks captured observation bytes.`);
-        }
-        if (!Array.isArray(payload.assertions)) {
-            throw new Error(`Evidence event ${event.event_id} lacks exact proof assertions.`);
-        }
-        if (!observation.capture.normalized_object) {
-            throw new Error(`Evidence event ${event.event_id} lacks a normalized evidence declaration.`);
-        }
-        const normalizedDigest = requiredString(payload.normalized_object_digest, "normalized_object_digest");
-        if (observation.capture.normalized_object.digest !== normalizedDigest) {
-            throw new Error(`Evidence event ${event.event_id} names the wrong normalized object.`);
-        }
-        const normalizedBytes = input.normalizedObjects.get(normalizedDigest);
-        if (!normalizedBytes) {
-            throw new Error(`Evidence event ${event.event_id} normalized bytes are unavailable.`);
-        }
-        verifyEvidenceAssertions({
-            assertions: payload.assertions,
-            normalizedBytes,
-            revision,
-        });
-        const authorityRevisionDigest = requiredString(payload.authority_entity_revision_digest, "authority_entity_revision_digest");
-        const authorityEntityRevision = revisions.get(authorityRevisionDigest);
-        if (authorityEntityRevision?.revision_contract !== catalogRevisionContracts.entity ||
-            authorityEntityRevision.entity_id !== revision.entity_id) {
-            throw new Error(`Evidence event ${event.event_id} lacks its authority entity revision.`);
-        }
-        const authorityProgramRevisionDigest = payload.authority_program_revision_digest;
-        if (revision.revision_contract === catalogRevisionContracts.offer &&
-            revision.program_id !== undefined) {
-            const programDigest = requiredString(authorityProgramRevisionDigest, "authority_program_revision_digest");
-            const authorityProgramRevision = revisions.get(programDigest);
-            if (authorityProgramRevision?.revision_contract !== catalogRevisionContracts.program ||
-                authorityProgramRevision.entity_id !== revision.entity_id ||
-                authorityProgramRevision.program_id !== revision.program_id) {
-                throw new Error(`Evidence event ${event.event_id} lacks its authority Program revision.`);
-            }
-        }
-        else if (authorityProgramRevisionDigest !== null) {
-            throw new Error(`Evidence event ${event.event_id} has an extraneous Program authority.`);
-        }
-        if (observation.method.name === "fixture") {
-            if (!input.allowFixtureEvidence ||
-                observation.capture.source_standing !== "live-first-party" ||
-                !new URL(observation.source_uri).hostname.endsWith(".example")) {
-                throw new Error(`Fixture evidence ${event.event_id} is not allowed.`);
-            }
-            continue;
-        }
-        if (!observation.capture.requested_uri ||
-            !observation.capture.final_uri ||
-            !observation.capture.redirect_chain ||
-            !observation.capture.source_standing) {
-            throw new Error(`Evidence event ${event.event_id} has incomplete capture provenance.`);
-        }
-        const method = observation.method.name;
-        sourceyCaptureMethodRegistry.require(method, observation.method.version);
-        const sourceStanding = deriveSourceStanding({
-            subject_source_url: observation.source_uri,
-            final_url: observation.capture.final_uri,
-            retrieved_at: observation.retrieved_at,
-            method: method,
-        }, {
-            content: {
-                domains: entityRevisionSchema.shape.content.shape.domains.parse(authorityEntityRevision.content?.domains),
-            },
-        });
-        if (sourceStanding !== observation.capture.source_standing) {
-            throw new Error(`Evidence event ${event.event_id} has incorrect source standing.`);
-        }
-        const attestationDigest = requiredString(payload.capture_attestation_digest, "capture_attestation_digest");
-        const captured = input.attestedCaptures.get(attestationDigest);
-        if (!captured) {
-            throw new Error(`Evidence event ${event.event_id} lacks its capture attestation.`);
-        }
-        usedAttestations.add(attestationDigest);
-        const decision = evidenceReviewDecisionSchema.parse(payload.review_decision);
-        const { decision_digest: decisionDigest, ...decisionCore } = decision;
-        if (digest(evidenceReviewDecisionCoreSchema.parse(decisionCore)) !== decisionDigest ||
-            decision.decision !== "approved" ||
-            compareInstants(decision.decided_at, event.occurred_at) > 0) {
-            throw new Error(`Evidence event ${event.event_id} lacks its exact approved review.`);
-        }
-        if (observation.capture.availability !== "public" ||
-            compareInstants(captured.attestation.signed_at, event.occurred_at) > 0) {
-            throw new Error(`Evidence event ${event.event_id} disagrees with its capture attestation.`);
-        }
-        assertAttestedObservationCapture(observation, captured);
-    }
-    for (const attestationDigest of input.attestedCaptures.keys()) {
-        if (!usedAttestations.has(attestationDigest)) {
-            throw new Error(`Capture attestation ${attestationDigest} is not bound by an evidence event.`);
-        }
-    }
-}
-function requiredString(value, name) {
-    if (typeof value !== "string")
-        throw new Error(`Evidence proof ${name} is not a string.`);
-    return value;
-}
-function bytesEqual(left, right) {
-    return (left.byteLength === right.byteLength && left.every((value, index) => value === right[index]));
-}
-//# sourceMappingURL=proof-graph.js.map

package/dist/modules/evidence-operations/src/proof-graph.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"proof-graph.js","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/proof-graph.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAe,MAAM,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAEzF,OAAO,EACL,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAgC,MAAM,wBAAwB,CAAC;AAC9F,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAgBzC;IACC,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CACnF,CAAC;IACF,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,IAAI,GAAG,EAAU,CAAC;IACnE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,gFAAgF;IAChF,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAU,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,SAAS;QACtF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;QACzD,KAAK,MAAM,cAAc,IAAI;YAC3B,KAAK,CAAC,OAAO,CAAC,eAAe;YAC7B,OAAO,CAAC,gCAAgC;YACxC,OAAO,CAAC,iCAAiC;SAC1C,EAAE,CAAC;YACF,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,CAAC,QAAQ,uBAAuB,cAAc,GAAG,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,CAAC,QAAQ,yBAAyB,CAAC,CAAC;QACrF,CAAC;QACD,IACE,OAAO,CAAC,wBAAwB,KAAK,SAAS;YAC9C,OAAO,CAAC,wBAAwB,KAAK,WAAW,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EACnF,CAAC;YACD,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,CAAC,QAAQ,qCAAqC,CAC9E,CAAC;QACJ,CAAC;QACD,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;YACrD,MAAM,iBAAiB,GAAG,cAAc,CACtC,OAAO,CAAC,0BAA0B,EAClC,4BAA4B,CAC7B,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,CAAC,QAAQ,iCAAiC,CAAC,CAAC;YAC7F,CAAC;YACD,gBAAgB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACpC,IAAI,OAAO,EAAE,YAAY,KAAK,QAAQ;YAAE,SAAS;QACjD,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAgB,CAAC,CAAC;QAClE,IACE,CAAC,YAAY;YACb,YAAY,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK;YACzC,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,WAAW,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,EACvE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,eAAe,WAAW,CAAC,cAAc,kCAAkC,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,eAAe,WAAW,CAAC,cAAc,6CAA6C,CACvF,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAgB,CAAC,CAAC;QAChG,IACE,CAAC,eAAe;YAChB,eAAe,CAAC,UAAU,KAAK,OAAO,CAAC,iBAAiB,CAAC,KAAK;YAC9D,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,WAAW,CAAC,eAAe,CAAC,KAAK,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAC5F,CAAC;YACD,MAAM,IAAI,KAAK,CACb,eAAe,WAAW,CAAC,cAAc,uCAAuC,CACjF,CAAC;QACJ,CAAC;QACD,kEAAkE;QAClE,IAAI,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC;YAAE,SAAS;QACpE,IACE,OAAO,CAAC,iBAAiB,CAAC,mBAAmB,KAAK,mBAAmB,CAAC,mBAAmB;YACzF,OAAO,CAAC,iBAAiB,CAAC,aAAa,KAAK,mBAAmB,CAAC,aAAa;YAC7E,OAAO,CAAC,iBAAiB,CAAC,OAAO,KAAK,mBAAmB,CAAC,OAAO;YACjE,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,KAAK,mBAAmB,CAAC,gBAAgB,EACnF,CAAC;YACD,MAAM,IAAI,KAAK,CACb,eAAe,WAAW,CAAC,cAAc,8CAA8C,CACxF,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,wBAAwB,CAAC;YAC1C,KAAK,EAAE,YAAY;YACnB,SAAS,EAAE,OAAO,CAAC,UAAU;SAC9B,CAAC,CAAC;QACH,IACE,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,MAAM;YACtD,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,EAC9C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,eAAe,WAAW,CAAC,cAAc,8CAA8C,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,SAAS;QACrF,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;QACrD,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,4BAA4B,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;QACzD,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,oCAAoC,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,gCAAgC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,2CAA2C,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,gBAAgB,GAAG,cAAc,CACrC,OAAO,CAAC,wBAAwB,EAChC,0BAA0B,CACjB,CAAC;QACZ,IAAI,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,qCAAqC,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,eAAe,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,oCAAoC,CAAC,CAAC;QACxF,CAAC;QACD,wBAAwB,CAAC;YACvB,UAAU,EAAE,OAAO,CAAC,UAEF;YAClB,eAAe;YACf,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,uBAAuB,GAAG,cAAc,CAC5C,OAAO,CAAC,gCAAgC,EACxC,kCAAkC,CACnC,CAAC;QACF,MAAM,uBAAuB,GAAG,SAAS,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACvE,IACE,uBAAuB,EAAE,iBAAiB,KAAK,wBAAwB,CAAC,MAAM;YAC9E,uBAAuB,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EACxD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,uCAAuC,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,8BAA8B,GAAG,OAAO,CAAC,iCAAiC,CAAC;QACjF,IACE,QAAQ,CAAC,iBAAiB,KAAK,wBAAwB,CAAC,KAAK;YAC7D,QAAQ,CAAC,UAAU,KAAK,SAAS,EACjC,CAAC;YACD,MAAM,aAAa,GAAG,cAAc,CAClC,8BAA8B,EAC9B,mCAAmC,CACpC,CAAC;YACF,MAAM,wBAAwB,GAAG,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC9D,IACE,wBAAwB,EAAE,iBAAiB,KAAK,wBAAwB,CAAC,OAAO;gBAChF,wBAAwB,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;gBACzD,wBAAwB,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAC3D,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,wCAAwC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;aAAM,IAAI,8BAA8B,KAAK,IAAI,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,uCAAuC,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1C,IACE,CAAC,KAAK,CAAC,oBAAoB;gBAC3B,WAAW,CAAC,OAAO,CAAC,eAAe,KAAK,kBAAkB;gBAC1D,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC9D,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,QAAQ,kBAAkB,CAAC,CAAC;YACxE,CAAC;YACD,SAAS;QACX,CAAC;QACD,IACE,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa;YAClC,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS;YAC9B,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc;YACnC,CAAC,WAAW,CAAC,OAAO,CAAC,eAAe,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,qCAAqC,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QACvC,4BAA4B,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,oBAAoB,CACzC;YACE,kBAAkB,EAAE,WAAW,CAAC,UAAU;YAC1C,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS;YACxC,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,MAAM,EAAE,MAAoD;SAC7D,EACD;YACE,OAAO,EAAE;gBACP,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAC5D,uBAA+D,CAAC,OAAO,EAAE,OAAO,CAClF;aACF;SACF,CACF,CAAC;QACF,IAAI,cAAc,KAAK,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,iCAAiC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,iBAAiB,GAAG,cAAc,CACtC,OAAO,CAAC,0BAA0B,EAClC,4BAA4B,CAC7B,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,iCAAiC,CAAC,CAAC;QACrF,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC7E,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,YAAY,EAAE,GAAG,QAAQ,CAAC;QACtE,IACE,MAAM,CAAC,gCAAgC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,cAAc;YAC/E,QAAQ,CAAC,QAAQ,KAAK,UAAU;YAChC,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAC3D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,mCAAmC,CAAC,CAAC;QACvF,CAAC;QACD,IACE,WAAW,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ;YAC7C,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EACtE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,0CAA0C,CAAC,CAAC;QAC9F,CAAC;QACD,gCAAgC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,iBAAiB,IAAI,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,uBAAuB,iBAAiB,qCAAqC,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,mBAAmB,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,KAAiB;IACrD,OAAO,CACL,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAC7F,CAAC;AACJ,CAAC"}

package/dist/modules/evidence-operations/src/retained-revision.d.ts

@@ -1,9 +0,0 @@
-import { type RevisionDocument } from "../../../contracts/api/src/index.js";
-import { type ListingRevision } from "../../../contracts/revisions/src/index.js";
-/** A revision a release admitted, as its exact bytes. */
-export type RetainedCatalogRevision = RevisionDocument;
-/** Reads a retained revision's contract and digest, and proves its bytes against the digest. */
-export declare function parseRetainedCatalogRevision(value: unknown): RetainedCatalogRevision;
-/** A retained listing revision read for its meaning; any other contract is refused. */
-export declare function currentListingRevision(revision: RetainedCatalogRevision): ListingRevision;
-//# sourceMappingURL=retained-revision.d.ts.map

package/dist/modules/evidence-operations/src/retained-revision.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"retained-revision.d.ts","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/retained-revision.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,gBAAgB,EAA0B,MAAM,qCAAqC,CAAC;AACpG,OAAO,EAGL,KAAK,eAAe,EAGrB,MAAM,2CAA2C,CAAC;AAEnD,yDAAyD;AACzD,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAEvD,gGAAgG;AAChG,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAcpF;AAED,uFAAuF;AACvF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,uBAAuB,GAAG,eAAe,CAWzF"}

package/dist/modules/evidence-operations/src/retained-revision.js

@@ -1,30 +0,0 @@
-import { digest } from "provenry/primitives";
-import { revisionDocumentSchema } from "../../../contracts/api/src/index.js";
-import { catalogRevisionContracts, entityRevisionSchema, offerRevisionSchema, programRevisionSchema, } from "../../../contracts/revisions/src/index.js";
-/** Reads a retained revision's contract and digest, and proves its bytes against the digest. */
-export function parseRetainedCatalogRevision(value) {
-    const parsed = revisionDocumentSchema.safeParse(value);
-    if (!parsed.success) {
-        const candidate = typeof value === "object" && value !== null ? value : {};
-        throw new Error(`Retained revision ${String(candidate.revision_digest ?? "unknown")} (${String(candidate.revision_contract ?? "unknown")}) does not use a released revision contract.`);
-    }
-    const { revision_digest: revisionDigest, ...core } = parsed.data;
-    if (digest(core) !== revisionDigest) {
-        throw new Error(`Retained revision ${revisionDigest} does not match its canonical core.`);
-    }
-    return parsed.data;
-}
-/** A retained listing revision read for its meaning; any other contract is refused. */
-export function currentListingRevision(revision) {
-    switch (revision.revision_contract) {
-        case catalogRevisionContracts.entity:
-            return entityRevisionSchema.parse(revision);
-        case catalogRevisionContracts.program:
-            return programRevisionSchema.parse(revision);
-        case catalogRevisionContracts.offer:
-            return offerRevisionSchema.parse(revision);
-        default:
-            throw new Error(`Revision ${revision.revision_digest} is not a listing revision.`);
-    }
-}
-//# sourceMappingURL=retained-revision.js.map

package/dist/modules/evidence-operations/src/retained-revision.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"retained-revision.js","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/retained-revision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAyB,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AACpG,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EAEpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,2CAA2C,CAAC;AAKnD,gGAAgG;AAChG,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,GACb,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CACb,qBAAqB,MAAM,CAAC,SAAS,CAAC,eAAe,IAAI,SAAS,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,iBAAiB,IAAI,SAAS,CAAC,8CAA8C,CACvK,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IACjE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,qBAAqB,cAAc,qCAAqC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,sBAAsB,CAAC,QAAiC;IACtE,QAAQ,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACnC,KAAK,wBAAwB,CAAC,MAAM;YAClC,OAAO,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,KAAK,wBAAwB,CAAC,OAAO;YACnC,OAAO,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,KAAK,wBAAwB,CAAC,KAAK;YACjC,OAAO,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C;YACE,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,CAAC,eAAe,6BAA6B,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/modules/evidence-operations/src/source-authority.d.ts

@@ -1,43 +0,0 @@
-import type { Domain, EntityRevision } from "../../../contracts/revisions/src/index.js";
-/**
- * Canonical-source authority for catalog evidence.
- *
- * A cited source may prove facts for a subject only when the party publishing
- * it controls those facts. The vendor's own domains always qualify. A third
- * party qualifies only when the subject's roles name that party's entity, the
- * channel-operator case: Pulley's perks page is canonical for the terms of a
- * perk Pulley grants, because the record says Pulley operates it. Directory
- * and aggregator listings match neither test and are inert; they never count
- * toward evidence coverage. Aggregators copy one another's numbers, so citing
- * them would join the chain of restated guesses this catalog exists to break.
- * (2026-08-12: 47 live offers were found carrying economics, eligibility, and
- * access sourced from an aggregator that neither operated nor published the
- * underlying programs.)
- */
-export declare function hostnameWithinEntityDomains(hostname: string, domains: readonly Domain[], retrievedAt: number): boolean;
-/**
- * The one Entity among a subject's canonical publishers whose current domains
- * serve a URL: canonical when exactly one does, ambiguous when several do,
- * and inert when none does.
- */
-export declare function resolveCanonicalPublisher(url: string, publishers: readonly EntityRevision[], at: number): {
-    readonly authority: "canonical";
-    readonly publisher: EntityRevision;
-} | {
-    readonly authority: "ambiguous" | "inert";
-    readonly publisher: null;
-};
-/**
- * Split a subject's cited sources into the canonical set worth capturing and
- * the inert hosts that cannot carry authority for it. Inert sources are not
- * captured at all: the capture allowlist pins each job to its cited host, so
- * a listing on the wrong host can never redirect its way into authority, and
- * skipping it avoids spending extraction effort on text that will not count.
- */
-export declare function partitionCanonicalEvidenceSources<Source extends {
-    readonly url: string;
-}>(sources: readonly Source[], canonicalDomains: readonly Domain[], retrievalInstant: number): {
-    readonly canonical: Source[];
-    readonly inertHosts: string[];
-};
-//# sourceMappingURL=source-authority.d.ts.map

package/dist/modules/evidence-operations/src/source-authority.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"source-authority.d.ts","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/source-authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAKxF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,WAAW,EAAE,MAAM,GAClB,OAAO,CAcT;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,SAAS,cAAc,EAAE,EACrC,EAAE,EAAE,MAAM,GAER;IAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,GAAG,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,CAQ1E;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAAC,MAAM,SAAS;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EACvF,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,gBAAgB,EAAE,SAAS,MAAM,EAAE,EACnC,gBAAgB,EAAE,MAAM,GACvB;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CA2BjE"}

package/dist/modules/evidence-operations/src/source-authority.js

@@ -1,77 +0,0 @@
-import { canonicalizePublicHttpsUrl } from "../../catalog-primitives/src/index.js";
-import { domainIsPublicSuffix } from "../../evidence-comparison/src/domains.js";
-import { evidenceHttpAllowedHosts } from "./url-canonicalization.js";
-/**
- * Canonical-source authority for catalog evidence.
- *
- * A cited source may prove facts for a subject only when the party publishing
- * it controls those facts. The vendor's own domains always qualify. A third
- * party qualifies only when the subject's roles name that party's entity, the
- * channel-operator case: Pulley's perks page is canonical for the terms of a
- * perk Pulley grants, because the record says Pulley operates it. Directory
- * and aggregator listings match neither test and are inert; they never count
- * toward evidence coverage. Aggregators copy one another's numbers, so citing
- * them would join the chain of restated guesses this catalog exists to break.
- * (2026-08-12: 47 live offers were found carrying economics, eligibility, and
- * access sourced from an aggregator that neither operated nor published the
- * underlying programs.)
- */
-export function hostnameWithinEntityDomains(hostname, domains, retrievedAt) {
-    const subject = hostname.toLowerCase().replace(/\.$/, "");
-    return domains.some((domain) => {
-        // A public suffix is shared by every party registered under it and grants no one authority.
-        if (domainIsPublicSuffix(domain.value))
-            return false;
-        if (Date.parse(domain.valid_from) > retrievedAt ||
-            (domain.valid_until !== undefined && Date.parse(domain.valid_until) <= retrievedAt)) {
-            return false;
-        }
-        const declared = domain.value.toLowerCase().replace(/\.$/, "");
-        return subject === declared || subject.endsWith(`.${declared}`);
-    });
-}
-/**
- * The one Entity among a subject's canonical publishers whose current domains
- * serve a URL: canonical when exactly one does, ambiguous when several do,
- * and inert when none does.
- */
-export function resolveCanonicalPublisher(url, publishers, at) {
-    const hostname = new URL(url).hostname;
-    const matches = publishers.filter((publisher) => hostnameWithinEntityDomains(hostname, publisher.content.domains, at));
-    const [only] = matches;
-    if (only && matches.length === 1)
-        return { authority: "canonical", publisher: only };
-    return { authority: matches.length > 1 ? "ambiguous" : "inert", publisher: null };
-}
-/**
- * Split a subject's cited sources into the canonical set worth capturing and
- * the inert hosts that cannot carry authority for it. Inert sources are not
- * captured at all: the capture allowlist pins each job to its cited host, so
- * a listing on the wrong host can never redirect its way into authority, and
- * skipping it avoids spending extraction effort on text that will not count.
- */
-export function partitionCanonicalEvidenceSources(sources, canonicalDomains, retrievalInstant) {
-    const canonical = [];
-    const inertHosts = new Set();
-    for (const source of sources) {
-        let candidates;
-        try {
-            candidates = evidenceHttpAllowedHosts(source.url);
-        }
-        catch {
-            // A URL the canonicalizer rejects (http://, credentials) cannot be
-            // judged here; pass it through so the capture attempt reports the
-            // precise transport error instead of a misleading authority one.
-            canonical.push(source);
-            continue;
-        }
-        if (candidates.some((host) => hostnameWithinEntityDomains(host, canonicalDomains, retrievalInstant))) {
-            canonical.push(source);
-        }
-        else {
-            inertHosts.add(new URL(canonicalizePublicHttpsUrl(source.url, { fragment: "remove" })).hostname);
-        }
-    }
-    return { canonical, inertHosts: [...inertHosts].sort() };
-}
-//# sourceMappingURL=source-authority.js.map

package/dist/modules/evidence-operations/src/source-authority.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"source-authority.js","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/source-authority.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAgB,EAChB,OAA0B,EAC1B,WAAmB;IAEnB,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAC7B,4FAA4F;QAC5F,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,IACE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,WAAW;YAC3C,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,EACnF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAW,EACX,UAAqC,EACrC,EAAU;IAIV,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACvC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAC9C,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CACrE,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IACvB,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrF,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAA0B,EAC1B,gBAAmC,EACnC,gBAAwB;IAExB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,UAA6B,CAAC;QAClC,IAAI,CAAC;YACH,UAAU,GAAG,wBAAwB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IACE,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB,2BAA2B,CAAC,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CACtE,EACD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CACZ,IAAI,GAAG,CAAC,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAC3D,CAAC"}