@sourcey/catalog-verifier 1.1.36 → 1.2.0

package/dist/modules/evidence-operations/src/submission-verifier.js

@@ -1,388 +0,0 @@
-import { TextDecoder } from "node:util";
-import { canonicalJson, digest, IDENTIFIER_PATTERN, sha256Bytes, } from "provenry/primitives";
-import { z } from "zod";
-import { sourceyEvidenceCaptureMethodVersion } from "../../../contracts/capture/src/method-names.js";
-import { sourceyCaptureMethodRegistry } from "../../../contracts/capture/src/methods.js";
-import { EVIDENCE_LOCATORS_PER_ASSERTION_LIMIT, evidenceAssertionSchema, evidenceCaptureDeclarationSchema, evidenceDerivationRuleSchema, evidenceProofKindSchema, evidenceReceiptSubjectSchema, evidenceSourceStandingSchema, } from "../../../contracts/evidence/src/index.js";
-import { catalogRevisionContracts, } from "../../../contracts/revisions/src/index.js";
-import { evidenceNormalizerSchema, normalizeEvidenceCapture } from "./evidence-normalization.js";
-import { hostnameWithinEntityDomains } from "./source-authority.js";
-export { EVIDENCE_NORMALIZER, EVIDENCE_NORMALIZER_TOOLCHAIN, evidenceNormalizerSchema, normalizeEvidenceCapture, } from "./evidence-normalization.js";
-const digestSchema = z.string().regex(/^sha256:[a-f0-9]{64}$/);
-const pointerSchema = z.string().regex(/^\/(?:[^~/]|~0|~1)+(?:\/(?:[^~/]|~0|~1)+)*$/);
-const utf8 = new TextDecoder("utf-8", { fatal: true });
-const EVIDENCE_SUBMISSION_LIMITS = {
-    captureBytes: 10 * 1024 * 1024,
-    normalizedBytes: 5 * 1024 * 1024,
-    assertions: 128,
-    locatorsPerAssertion: EVIDENCE_LOCATORS_PER_ASSERTION_LIMIT,
-    redirects: 5,
-};
-const evidenceSubmissionCaptureSchema = evidenceCaptureDeclarationSchema;
-const evidenceSubmissionNormalizationSchema = evidenceNormalizerSchema
-    .extend({ object_digest: digestSchema })
-    .strict();
-export const evidenceSubmissionSchema = z
-    .object({
-    submission_contract: z.literal("sourcey.evidence-submission/v1alpha1"),
-    base_revision_digest: digestSchema,
-    capture: evidenceSubmissionCaptureSchema,
-    normalization: evidenceSubmissionNormalizationSchema,
-    assertions: z.array(evidenceAssertionSchema).min(1).max(EVIDENCE_SUBMISSION_LIMITS.assertions),
-})
-    .strict();
-const reviewValueSchema = z
-    .object({
-    start_byte: z.number().int().nonnegative(),
-    end_byte: z.number().int().positive(),
-    value_digest: digestSchema,
-    text: z.string().min(1),
-})
-    .strict();
-const evidenceReviewProposalCoreSchema = z
-    .object({
-    proposal_contract: z.literal("sourcey.evidence-review-proposal/v1alpha1"),
-    operation_id: digestSchema,
-    job_id: digestSchema,
-    target_id: z.string().regex(IDENTIFIER_PATTERN),
-    base_release_id: digestSchema,
-    capture_policy_digest: digestSchema,
-    coverage_policy_digest: digestSchema,
-    subject: evidenceReceiptSubjectSchema,
-    authority_entity_revision_digest: digestSchema,
-    authority_program_revision_digest: digestSchema.nullable(),
-    submission: evidenceSubmissionSchema,
-    review_projection: z
-        .object({
-        source_standing: evidenceSourceStandingSchema,
-        assertions: z.array(z
-            .object({
-            path: pointerSchema,
-            polarity: z.enum(["supports", "contradicts"]),
-            proof_kind: evidenceProofKindSchema,
-            derivation_rule: evidenceDerivationRuleSchema.nullable(),
-            values: z.array(reviewValueSchema).min(1),
-        })
-            .strict()),
-    })
-        .strict(),
-})
-    .strict()
-    .superRefine((value, context) => {
-    const requiresProgramAuthority = value.subject.subject_type === "offer" && value.subject.program_id !== undefined;
-    if (requiresProgramAuthority !== (value.authority_program_revision_digest !== null)) {
-        context.addIssue({
-            code: "custom",
-            path: ["authority_program_revision_digest"],
-            message: requiresProgramAuthority
-                ? "Program-backed Offer review proposals require the exact authority Program revision."
-                : "Only Program-backed Offer review proposals may carry an authority Program revision.",
-        });
-    }
-});
-export const evidenceReviewProposalSchema = evidenceReviewProposalCoreSchema
-    .extend({ proposal_digest: digestSchema })
-    .strict();
-/**
- * Validates the self-contained proposal envelope at a persistence or provider
- * boundary. This intentionally does not claim that the referenced evidence is
- * true; the offline verifier below performs that stronger check from the exact
- * capture, normalized, and revision bytes.
- */
-export function validateEvidenceReviewProposalEnvelope(proposal) {
-    const parsed = evidenceReviewProposalSchema.parse(proposal);
-    const { proposal_digest: proposalDigest, ...core } = parsed;
-    if (digest(evidenceReviewProposalCoreSchema.parse(core)) !== proposalDigest) {
-        throw new Error("Evidence review proposal digest does not match its canonical core.");
-    }
-    return parsed;
-}
-/**
- * The one local-byte verification kernel used by proposal preparation and CI.
- * It has no network, filesystem, provider, signing, or mutation dependency.
- */
-export function verifyEvidenceSubmission(input) {
-    const submission = evidenceSubmissionSchema.parse(input.submission);
-    assertRevisionContentAddressed(input.revision, "subject");
-    assertRevisionContentAddressed(input.authorityEntityRevision, "authority entity");
-    if (input.authorityProgramRevision) {
-        assertRevisionContentAddressed(input.authorityProgramRevision, "authority program");
-    }
-    if (submission.base_revision_digest !== input.revision.revision_digest) {
-        throw new Error("Evidence submission targets a different base revision.");
-    }
-    assertRevisionAuthorityBindings(input);
-    const verifiedCapture = verifyEvidenceCaptureObjects({
-        capture: submission.capture,
-        normalization: submission.normalization,
-        captureBytes: input.captureBytes,
-        normalizedBytes: input.normalizedBytes,
-    });
-    const assertions = verifyEvidenceAssertions({
-        assertions: submission.assertions,
-        normalizedBytes: input.normalizedBytes,
-        revision: input.revision,
-    });
-    return {
-        submission,
-        sourceStanding: deriveSourceStanding(submission.capture, input.authorityEntityRevision),
-        normalizedBytes: verifiedCapture.normalizedBytes,
-        assertions,
-    };
-}
-/**
- * The one byte-level capture verifier used before claim matching and again
- * when accepted matches enter ordinary evidence authority.
- */
-export function verifyEvidenceCaptureObjects(input) {
-    const capture = evidenceSubmissionCaptureSchema.parse(input.capture);
-    const normalization = evidenceSubmissionNormalizationSchema.parse(input.normalization);
-    if (input.captureBytes.byteLength > EVIDENCE_SUBMISSION_LIMITS.captureBytes) {
-        throw new Error("Evidence capture exceeds the verifier byte limit.");
-    }
-    if (input.normalizedBytes.byteLength > EVIDENCE_SUBMISSION_LIMITS.normalizedBytes) {
-        throw new Error("Evidence normalized object exceeds the verifier byte limit.");
-    }
-    if (sha256Bytes(input.captureBytes) !== capture.digest) {
-        throw new Error("Evidence capture bytes do not match the submission digest.");
-    }
-    assertCaptureUrls(capture);
-    assertRedirectChain(capture);
-    const normalized = normalizeEvidenceCapture({
-        bytes: input.captureBytes,
-        mediaType: capture.media_type,
-    });
-    if (normalized.digest !== normalization.object_digest ||
-        sha256Bytes(input.normalizedBytes) !== normalization.object_digest ||
-        Buffer.compare(Buffer.from(normalized.bytes), Buffer.from(input.normalizedBytes)) !== 0) {
-        throw new Error("Evidence normalized bytes do not reproduce the declared object.");
-    }
-    return { capture, normalization, normalizedBytes: normalized.bytes };
-}
-function assertRevisionContentAddressed(revision, label) {
-    const { revision_digest: revisionDigest, ...core } = revision;
-    if (digest(core) !== revisionDigest) {
-        throw new Error(`Evidence ${label} revision is not content-addressed correctly.`);
-    }
-}
-function assertRevisionAuthorityBindings(input) {
-    if (input.revision.entity_id !== input.authorityEntityRevision.entity_id) {
-        throw new Error("Evidence submission authority entity does not own the revision.");
-    }
-    if (input.revision.revision_contract === catalogRevisionContracts.offer) {
-        if (input.revision.program_id === undefined) {
-            if (input.authorityProgramRevision !== null) {
-                throw new Error("A standalone Offer cannot carry an authority Program revision.");
-            }
-        }
-        else if (!input.authorityProgramRevision ||
-            input.authorityProgramRevision.entity_id !== input.revision.entity_id ||
-            input.authorityProgramRevision.program_id !== input.revision.program_id) {
-            throw new Error("Evidence submission authority Program does not own the Program-backed Offer revision.");
-        }
-    }
-    else if (input.authorityProgramRevision !== null) {
-        throw new Error("Only Program-backed Offer evidence may carry a Program authority.");
-    }
-}
-function revisionSubject(revision) {
-    if (revision.revision_contract === catalogRevisionContracts.offer) {
-        return {
-            subject_type: "offer",
-            entity_id: revision.entity_id,
-            ...(revision.program_id === undefined ? {} : { program_id: revision.program_id }),
-            offer_id: revision.offer_id,
-            revision_digest: revision.revision_digest,
-        };
-    }
-    if (revision.revision_contract === catalogRevisionContracts.program) {
-        return {
-            subject_type: "program",
-            entity_id: revision.entity_id,
-            program_id: revision.program_id,
-            revision_digest: revision.revision_digest,
-        };
-    }
-    return {
-        subject_type: "entity",
-        entity_id: revision.entity_id,
-        revision_digest: revision.revision_digest,
-    };
-}
-export function verifyEvidenceAssertions(input) {
-    const paths = new Set();
-    return input.assertions.map((assertion) => {
-        if (paths.has(assertion.path)) {
-            throw new Error(`Evidence submission repeats path ${assertion.path}.`);
-        }
-        paths.add(assertion.path);
-        if (!pointerExists(input.revision.content, assertion.path)) {
-            throw new Error(`Evidence assertion targets missing revision path ${assertion.path}.`);
-        }
-        const values = assertion.locators.map((locator) => {
-            const { start_byte: start, end_byte: end } = locator;
-            if (end <= start || end > input.normalizedBytes.byteLength) {
-                throw new Error(`Evidence locator for ${assertion.path} is outside normalized bytes.`);
-            }
-            const located = input.normalizedBytes.slice(start, end);
-            if (sha256Bytes(located) !== locator.value_digest) {
-                throw new Error(`Evidence locator digest for ${assertion.path} does not match.`);
-            }
-            const text = utf8.decode(located);
-            if (!text.trim())
-                throw new Error(`Evidence locator for ${assertion.path} is empty.`);
-            return {
-                valueDigest: locator.value_digest,
-                text,
-            };
-        });
-        return {
-            path: assertion.path,
-            polarity: assertion.polarity,
-            proofKind: assertion.proof_kind,
-            derivationRule: assertion.derivation_rule,
-            values,
-        };
-    });
-}
-export function prepareEvidenceReviewProposal(input) {
-    const verified = verifyEvidenceSubmission(input);
-    const core = evidenceReviewProposalCoreSchema.parse({
-        proposal_contract: "sourcey.evidence-review-proposal/v1alpha1",
-        operation_id: input.operationId,
-        job_id: input.jobId,
-        target_id: input.targetId,
-        base_release_id: input.baseReleaseId,
-        capture_policy_digest: input.capturePolicyDigest,
-        coverage_policy_digest: input.coveragePolicyDigest,
-        subject: revisionSubject(input.revision),
-        authority_entity_revision_digest: input.authorityEntityRevision.revision_digest,
-        authority_program_revision_digest: input.authorityProgramRevision?.revision_digest ?? null,
-        submission: verified.submission,
-        review_projection: {
-            source_standing: verified.sourceStanding,
-            assertions: verified.assertions.map((assertion, assertionIndex) => ({
-                path: assertion.path,
-                polarity: assertion.polarity,
-                proof_kind: assertion.proofKind,
-                derivation_rule: assertion.derivationRule,
-                values: assertion.values.map((value, valueIndex) => {
-                    const locator = verified.submission.assertions[assertionIndex]?.locators[valueIndex];
-                    if (!locator)
-                        throw new Error("Verified evidence locator projection is incomplete.");
-                    return {
-                        start_byte: locator.start_byte,
-                        end_byte: locator.end_byte,
-                        value_digest: value.valueDigest,
-                        text: value.text,
-                    };
-                }),
-            })),
-        },
-    });
-    return evidenceReviewProposalSchema.parse({
-        ...core,
-        proposal_digest: digest(core),
-    });
-}
-export function verifyEvidenceReviewProposal(input) {
-    const proposal = validateEvidenceReviewProposalEnvelope(input.proposal);
-    if (input.expectedBaseReleaseId !== undefined &&
-        proposal.base_release_id !== input.expectedBaseReleaseId) {
-        throw new Error("Evidence review proposal targets a different base release.");
-    }
-    const expected = prepareEvidenceReviewProposal({
-        operationId: proposal.operation_id,
-        jobId: proposal.job_id,
-        targetId: proposal.target_id,
-        baseReleaseId: proposal.base_release_id,
-        capturePolicyDigest: proposal.capture_policy_digest,
-        coveragePolicyDigest: proposal.coverage_policy_digest,
-        submission: proposal.submission,
-        captureBytes: input.captureBytes,
-        normalizedBytes: input.normalizedBytes,
-        revision: input.revision,
-        authorityEntityRevision: input.authorityEntityRevision,
-        authorityProgramRevision: input.authorityProgramRevision,
-    });
-    if (canonicalJson(expected) !== canonicalJson(proposal)) {
-        throw new Error("Evidence review proposal is not the deterministic proof projection.");
-    }
-    return proposal;
-}
-export function deriveSourceStanding(capture, authorityEntityRevision) {
-    const capabilities = sourceyCaptureMethodRegistry.require(capture.method, sourceyEvidenceCaptureMethodVersion).capabilities;
-    const historical = capabilities.includes("history-only");
-    const manual = capabilities.includes("manual-review");
-    const live = capabilities.includes("live-source");
-    if (Number(historical) + Number(manual) + Number(live) !== 1) {
-        throw new Error(`Capture method ${capture.method} has no unique source-standing capability.`);
-    }
-    const comparedUrl = historical ? capture.subject_source_url : capture.final_url;
-    const hostname = new URL(comparedUrl).hostname.toLowerCase().replace(/\.$/, "");
-    const retrievedAt = Date.parse(capture.retrieved_at);
-    const firstParty = hostnameWithinEntityDomains(hostname, authorityEntityRevision.content.domains, retrievedAt);
-    if (historical) {
-        return firstParty ? "archived-first-party" : "archived-third-party";
-    }
-    if (manual) {
-        return firstParty ? "manual-first-party" : "manual-third-party";
-    }
-    return firstParty ? "live-first-party" : "live-third-party";
-}
-export function validateEvidenceCaptureDeclaration(capture) {
-    assertCaptureUrls(capture);
-    assertRedirectChain(capture);
-    return capture;
-}
-function assertCaptureUrls(capture) {
-    const urls = [
-        capture.subject_source_url,
-        capture.requested_url,
-        capture.final_url,
-        ...capture.redirect_chain.flatMap((redirect) => [redirect.from, redirect.to]),
-    ];
-    for (const value of urls) {
-        const url = new URL(value);
-        if (url.username || url.password || url.hash) {
-            throw new Error("Evidence capture URLs cannot contain credentials or fragments.");
-        }
-    }
-}
-function assertRedirectChain(capture) {
-    if (capture.redirect_chain.length === 0) {
-        if (capture.requested_url !== capture.final_url) {
-            assertHeadlessSameOriginNavigation(capture, capture.requested_url);
-        }
-        return;
-    }
-    let expected = capture.requested_url;
-    const visited = new Set([expected]);
-    for (const redirect of capture.redirect_chain) {
-        if (redirect.from !== expected || visited.has(redirect.to)) {
-            throw new Error("Evidence redirect chain is discontinuous or cyclic.");
-        }
-        visited.add(redirect.to);
-        expected = redirect.to;
-    }
-    if (expected !== capture.final_url) {
-        assertHeadlessSameOriginNavigation(capture, expected);
-    }
-}
-function assertHeadlessSameOriginNavigation(capture, lastTransportUrl) {
-    if (capture.method !== "headless" ||
-        new URL(lastTransportUrl).origin !== new URL(capture.final_url).origin) {
-        throw new Error("Evidence capture changed URL without a complete redirect or same-origin headless navigation.");
-    }
-}
-function pointerExists(value, pointer) {
-    let current = value;
-    for (const encoded of pointer.slice(1).split("/")) {
-        const segment = encoded.replaceAll("~1", "/").replaceAll("~0", "~");
-        if (typeof current !== "object" || current === null || !(segment in current))
-            return false;
-        current = current[segment];
-    }
-    return true;
-}
-//# sourceMappingURL=submission-verifier.js.map

package/dist/modules/evidence-operations/src/submission-verifier.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"submission-verifier.js","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/submission-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EACL,aAAa,EAEb,MAAM,EACN,kBAAkB,EAClB,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,EACL,qCAAqC,EAKrC,uBAAuB,EACvB,gCAAgC,EAChC,4BAA4B,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,wBAAwB,GAIzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACjG,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAEpE,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AAErC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACtF,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAEvD,MAAM,0BAA0B,GAAG;IACjC,YAAY,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC9B,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAChC,UAAU,EAAE,GAAG;IACf,oBAAoB,EAAE,qCAAqC;IAC3D,SAAS,EAAE,CAAC;CACJ,CAAC;AAEX,MAAM,+BAA+B,GAAG,gCAAgC,CAAC;AAEzE,MAAM,qCAAqC,GAAG,wBAAwB;KACnE,MAAM,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;KACvC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC;IACtE,oBAAoB,EAAE,YAAY;IAClC,OAAO,EAAE,+BAA+B;IACxC,aAAa,EAAE,qCAAqC;IACpD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,UAAU,CAAC;CAC/F,CAAC;KACD,MAAM,EAAE,CAAC;AAyBZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,YAAY;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,gCAAgC,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,2CAA2C,CAAC;IACzE,YAAY,EAAE,YAAY;IAC1B,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC/C,eAAe,EAAE,YAAY;IAC7B,qBAAqB,EAAE,YAAY;IACnC,sBAAsB,EAAE,YAAY;IACpC,OAAO,EAAE,4BAA4B;IACrC,gCAAgC,EAAE,YAAY;IAC9C,iCAAiC,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC1D,UAAU,EAAE,wBAAwB;IACpC,iBAAiB,EAAE,CAAC;SACjB,MAAM,CAAC;QACN,eAAe,EAAE,4BAA4B;QAC7C,UAAU,EAAE,CAAC,CAAC,KAAK,CACjB,CAAC;aACE,MAAM,CAAC;YACN,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAC7C,UAAU,EAAE,uBAAuB;YACnC,eAAe,EAAE,4BAA4B,CAAC,QAAQ,EAAE;YACxD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;SAC1C,CAAC;aACD,MAAM,EAAE,CACZ;KACF,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,wBAAwB,GAC5B,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC;IACnF,IAAI,wBAAwB,KAAK,CAAC,KAAK,CAAC,iCAAiC,KAAK,IAAI,CAAC,EAAE,CAAC;QACpF,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,mCAAmC,CAAC;YAC3C,OAAO,EAAE,wBAAwB;gBAC/B,CAAC,CAAC,qFAAqF;gBACvF,CAAC,CAAC,qFAAqF;SAC1F,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,4BAA4B,GAAG,gCAAgC;KACzE,MAAM,CAAC,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;KACzC,MAAM,EAAE,CAAC;AAIZ;;;;;GAKG;AACH,MAAM,UAAU,sCAAsC,CAAC,QAAiB;IACtE,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAC5D,IAAI,MAAM,CAAC,gCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAOxC;IACC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpE,8BAA8B,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1D,8BAA8B,CAAC,KAAK,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;QACnC,8BAA8B,CAAC,KAAK,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,UAAU,CAAC,oBAAoB,KAAK,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,eAAe,GAAG,4BAA4B,CAAC;QACnD,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,wBAAwB,CAAC;QAC1C,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,cAAc,EAAE,oBAAoB,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,uBAAuB,CAAC;QACvF,eAAe,EAAE,eAAe,CAAC,eAAe;QAChD,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAK5C;IAKC,MAAM,OAAO,GAAG,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,GAAG,0BAA0B,CAAC,YAAY,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,CAAC,UAAU,GAAG,0BAA0B,CAAC,eAAe,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,UAAU,GAAG,wBAAwB,CAAC;QAC1C,KAAK,EAAE,KAAK,CAAC,YAAY;QACzB,SAAS,EAAE,OAAO,CAAC,UAAU;KAC9B,CAAC,CAAC;IACH,IACE,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,aAAa;QACjD,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,aAAa,CAAC,aAAa;QAClE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EACvF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAyB,EAAE,KAAa;IAC9E,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;IAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,+CAA+C,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,KAIxC;IACC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,uBAAuB,CAAC,SAAS,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,KAAK,wBAAwB,CAAC,KAAK,EAAE,CAAC;QACxE,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,wBAAwB,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;aAAM,IACL,CAAC,KAAK,CAAC,wBAAwB;YAC/B,KAAK,CAAC,wBAAwB,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS;YACrE,KAAK,CAAC,wBAAwB,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,CAAC,UAAU,EACvE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAyB;IAChD,IAAI,QAAQ,CAAC,iBAAiB,KAAK,wBAAwB,CAAC,KAAK,EAAE,CAAC;QAClE,OAAO;YACL,YAAY,EAAE,OAAgB;YAC9B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;YACjF,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,eAAe,EAAE,QAAQ,CAAC,eAAe;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,iBAAiB,KAAK,wBAAwB,CAAC,OAAO,EAAE,CAAC;QACpE,OAAO;YACL,YAAY,EAAE,SAAkB;YAChC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,eAAe,EAAE,QAAQ,CAAC,eAAe;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,YAAY,EAAE,QAAiB;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,eAAe,EAAE,QAAQ,CAAC,eAAe;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAA6B,EAAE;QACnE,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,oDAAoD,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YAChD,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;YACrD,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC;gBAC3D,MAAM,IAAI,KAAK,CAAC,wBAAwB,SAAS,CAAC,IAAI,+BAA+B,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxD,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,+BAA+B,SAAS,CAAC,IAAI,kBAAkB,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,SAAS,CAAC,IAAI,YAAY,CAAC,CAAC;YACtF,OAAO;gBACL,WAAW,EAAE,OAAO,CAAC,YAAsB;gBAC3C,IAAI;aACL,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,SAAS,EAAE,SAAS,CAAC,UAAU;YAC/B,cAAc,EAAE,SAAS,CAAC,eAAe;YACzC,MAAM;SACP,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAa7C;IACC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,gCAAgC,CAAC,KAAK,CAAC;QAClD,iBAAiB,EAAE,2CAA2C;QAC9D,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,MAAM,EAAE,KAAK,CAAC,KAAK;QACnB,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,eAAe,EAAE,KAAK,CAAC,aAAa;QACpC,qBAAqB,EAAE,KAAK,CAAC,mBAAmB;QAChD,sBAAsB,EAAE,KAAK,CAAC,oBAAoB;QAClD,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;QACxC,gCAAgC,EAAE,KAAK,CAAC,uBAAuB,CAAC,eAAe;QAC/E,iCAAiC,EAAE,KAAK,CAAC,wBAAwB,EAAE,eAAe,IAAI,IAAI;QAC1F,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,iBAAiB,EAAE;YACjB,eAAe,EAAE,QAAQ,CAAC,cAAc;YACxC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;gBAClE,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,UAAU,EAAE,SAAS,CAAC,SAAS;gBAC/B,eAAe,EAAE,SAAS,CAAC,cAAc;gBACzC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;oBACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;oBACrF,IAAI,CAAC,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;oBACrF,OAAO;wBACL,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,YAAY,EAAE,KAAK,CAAC,WAAW;wBAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB,CAAC;gBACJ,CAAC,CAAC;aACH,CAAC,CAAC;SACJ;KACF,CAAC,CAAC;IACH,OAAO,4BAA4B,CAAC,KAAK,CAAC;QACxC,GAAG,IAAI;QACP,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAQ5C;IACC,MAAM,QAAQ,GAAG,sCAAsC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxE,IACE,KAAK,CAAC,qBAAqB,KAAK,SAAS;QACzC,QAAQ,CAAC,eAAe,KAAK,KAAK,CAAC,qBAAqB,EACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,QAAQ,GAAG,6BAA6B,CAAC;QAC7C,WAAW,EAAE,QAAQ,CAAC,YAAsB;QAC5C,KAAK,EAAE,QAAQ,CAAC,MAAgB;QAChC,QAAQ,EAAE,QAAQ,CAAC,SAAS;QAC5B,aAAa,EAAE,QAAQ,CAAC,eAAyB;QACjD,mBAAmB,EAAE,QAAQ,CAAC,qBAA+B;QAC7D,oBAAoB,EAAE,QAAQ,CAAC,sBAAgC;QAC/D,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;KACzD,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAGC,EACD,uBAAyF;IAEzF,MAAM,YAAY,GAAG,4BAA4B,CAAC,OAAO,CACvD,OAAO,CAAC,MAAM,EACd,mCAAmC,CACpC,CAAC,YAAY,CAAC;IACf,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,kBAAkB,OAAO,CAAC,MAAM,4CAA4C,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAChF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,2BAA2B,CAC5C,QAAQ,EACR,uBAAuB,CAAC,OAAO,CAAC,OAAO,EACvC,WAAW,CACZ,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAClE,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAAsC;IAEtC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAsC;IAC/D,MAAM,IAAI,GAAG;QACX,OAAO,CAAC,kBAAkB;QAC1B,OAAO,CAAC,aAAa;QACrB,OAAO,CAAC,SAAS;QACjB,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;KAC9E,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAsC;IACjE,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;YAChD,kCAAkC,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpC,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC9C,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzB,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACnC,kCAAkC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC,CACzC,OAAsC,EACtC,gBAAwB;IAExB,IACE,OAAO,CAAC,MAAM,KAAK,UAAU;QAC7B,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EACtE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,OAAe;IACpD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3F,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/modules/evidence-operations/src/url-canonicalization.d.ts

@@ -1,3 +0,0 @@
-/** The narrow direct-HTTP redirect authority shared by scan and PR evidence capture. */
-export declare function evidenceHttpAllowedHosts(input: string): string[];
-//# sourceMappingURL=url-canonicalization.d.ts.map

package/dist/modules/evidence-operations/src/url-canonicalization.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-canonicalization.d.ts","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/url-canonicalization.ts"],"names":[],"mappings":"AAEA,wFAAwF;AACxF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAGhE"}

package/dist/modules/evidence-operations/src/url-canonicalization.js

@@ -1,7 +0,0 @@
-import { canonicalizePublicHttpsUrl } from "../../catalog-primitives/src/index.js";
-/** The narrow direct-HTTP redirect authority shared by scan and PR evidence capture. */
-export function evidenceHttpAllowedHosts(input) {
-    const hostname = new URL(canonicalizePublicHttpsUrl(input, { fragment: "remove" })).hostname;
-    return [hostname, hostname.startsWith("www.") ? hostname.slice(4) : `www.${hostname}`].sort();
-}
-//# sourceMappingURL=url-canonicalization.js.map

package/dist/modules/evidence-operations/src/url-canonicalization.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"url-canonicalization.js","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/url-canonicalization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAEnF,wFAAwF;AACxF,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,0BAA0B,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7F,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAChG,CAAC"}

package/dist/modules/projection-identity/src/index.d.ts

@@ -1,14 +0,0 @@
-import { type Digest } from "provenry/primitives";
-import type { CompiledEntity, CompiledOffer, CompiledProgram, PolicyCore } from "../../../contracts/artifact/src/index.js";
-/**
- * Canonical semantic fingerprints for public Catalog projections. Release
- * construction, immutable artifact verification, and public readback all call
- * this one owner so a projection rule cannot drift between producers and
- * consumers.
- */
-export declare function catalogEntityProjectionDigest(entity: CompiledEntity): Digest;
-export declare function catalogProgramProjectionDigest(program: CompiledProgram): Digest;
-export declare function catalogOfferProjectionDigest(offer: CompiledOffer): Digest;
-/** Hash normative policy text, excluding the compiled revision identifier. */
-export declare function catalogPolicyRevisionDigest(policy: PolicyCore): Digest;
-//# sourceMappingURL=index.d.ts.map

package/dist/modules/projection-identity/src/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../modules/projection-identity/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAU,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,eAAe,EACf,UAAU,EACX,MAAM,0CAA0C,CAAC;AAGlD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAG5E;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAE/E;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAEzE;AAED,8EAA8E;AAC9E,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAEtE"}

package/dist/modules/projection-identity/src/index.js

@@ -1,23 +0,0 @@
-import { digest } from "provenry/primitives";
-import { policyCoreSchema } from "../../../contracts/artifact/src/index.js";
-/**
- * Canonical semantic fingerprints for public Catalog projections. Release
- * construction, immutable artifact verification, and public readback all call
- * this one owner so a projection rule cannot drift between producers and
- * consumers.
- */
-export function catalogEntityProjectionDigest(entity) {
-    const { programs: _programs, offers: _offers, ...projection } = entity;
-    return digest(projection);
-}
-export function catalogProgramProjectionDigest(program) {
-    return digest(program);
-}
-export function catalogOfferProjectionDigest(offer) {
-    return digest(offer);
-}
-/** Hash normative policy text, excluding the compiled revision identifier. */
-export function catalogPolicyRevisionDigest(policy) {
-    return digest(policyCoreSchema.strip().parse(policy));
-}
-//# sourceMappingURL=index.js.map

package/dist/modules/projection-identity/src/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../modules/projection-identity/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAO1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAsB;IAClE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;IACvE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAwB;IACrE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAoB;IAC/D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,2BAA2B,CAAC,MAAkB;IAC5D,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/modules/provenance/src/evidence-bindings.d.ts

@@ -1,11 +0,0 @@
-import type { CatalogEvent } from "../../../contracts/events/src/index.js";
-import { type EvidenceAssertion } from "../../../contracts/evidence/src/index.js";
-import type { Observation } from "../../../contracts/observations/src/index.js";
-type EvidenceBindingEvent = Omit<CatalogEvent, "protected">;
-export declare function assertEvidenceBindingClosure(input: {
-    readonly events: readonly EvidenceBindingEvent[];
-    readonly observations: ReadonlyMap<string, Observation>;
-}): void;
-export declare function evidenceAssertions(event: EvidenceBindingEvent): readonly EvidenceAssertion[];
-export {};
-//# sourceMappingURL=evidence-bindings.d.ts.map

package/dist/modules/provenance/src/evidence-bindings.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence-bindings.d.ts","sourceRoot":"","sources":["../../../../modules/provenance/src/evidence-bindings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAEhF,KAAK,oBAAoB,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAE5D,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACzD,GAAG,IAAI,CA2CP;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,GAAG,SAAS,iBAAiB,EAAE,CAI5F"}

package/dist/modules/provenance/src/evidence-bindings.js

@@ -1,49 +0,0 @@
-import { evidenceAssertionSchema, } from "../../../contracts/evidence/src/index.js";
-export function assertEvidenceBindingClosure(input) {
-    for (const event of input.events) {
-        if (event.kind !== "evidence.bound")
-            continue;
-        const observationId = payloadString(event, "observation_id");
-        const observation = input.observations.get(observationId);
-        if (!observation) {
-            throw new Error(`Evidence event ${event.event_id} targets missing observation ${observationId}.`);
-        }
-        const assertions = evidenceAssertions(event);
-        if (assertions.length === 0) {
-            throw new Error(`Evidence event ${event.event_id} lacks exact proof assertions.`);
-        }
-        if (!observation.capture?.normalized_object) {
-            throw new Error(`Evidence event ${event.event_id} lacks normalized evidence.`);
-        }
-        if (payloadString(event, "normalized_object_digest") !==
-            observation.capture.normalized_object.digest) {
-            throw new Error(`Evidence event ${event.event_id} targets the wrong normalized evidence object.`);
-        }
-        if (new Set(assertions.map((assertion) => assertion.path)).size !== assertions.length) {
-            throw new Error(`Evidence event ${event.event_id} repeats an asserted path.`);
-        }
-        const expectedPolarity = observation.outcome === "supports-candidate"
-            ? "supports"
-            : observation.outcome === "contradicts-candidate"
-                ? "contradicts"
-                : null;
-        if (!expectedPolarity ||
-            assertions.some((assertion) => assertion.polarity !== expectedPolarity)) {
-            throw new Error(`Evidence event ${event.event_id} assertions do not match its observation outcome.`);
-        }
-    }
-}
-export function evidenceAssertions(event) {
-    if (event.kind !== "evidence.bound")
-        return [];
-    const assertions = event.payload.assertions;
-    return Array.isArray(assertions) ? evidenceAssertionSchema.array().parse(assertions) : [];
-}
-function payloadString(event, key) {
-    const value = event.payload[key];
-    if (typeof value !== "string") {
-        throw new Error(`Event ${event.event_id} payload.${key} is not a string.`);
-    }
-    return value;
-}
-//# sourceMappingURL=evidence-bindings.js.map

package/dist/modules/provenance/src/evidence-bindings.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence-bindings.js","sourceRoot":"","sources":["../../../../modules/provenance/src/evidence-bindings.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,uBAAuB,GACxB,MAAM,0CAA0C,CAAC;AAKlD,MAAM,UAAU,4BAA4B,CAAC,KAG5C;IACC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,SAAS;QAC9C,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,CAAC,QAAQ,gCAAgC,aAAa,GAAG,CACjF,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,gCAAgC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,6BAA6B,CAAC,CAAC;QACjF,CAAC;QACD,IACE,aAAa,CAAC,KAAK,EAAE,0BAA0B,CAAC;YAChD,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAC5C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,CAAC,QAAQ,gDAAgD,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,4BAA4B,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,gBAAgB,GACpB,WAAW,CAAC,OAAO,KAAK,oBAAoB;YAC1C,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,WAAW,CAAC,OAAO,KAAK,uBAAuB;gBAC/C,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,IAAI,CAAC;QACb,IACE,CAAC,gBAAgB;YACjB,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,gBAAgB,CAAC,EACvE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,CAAC,QAAQ,mDAAmD,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAI,KAAK,CAAC,OAAmC,CAAC,UAAU,CAAC;IACzE,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CAAC,KAA2B,EAAE,GAAW;IAC7D,MAAM,KAAK,GAAI,KAAK,CAAC,OAAmC,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,QAAQ,YAAY,GAAG,mBAAmB,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/modules/provenance/src/evidence-coverage.d.ts

@@ -1,36 +0,0 @@
-import { type EvidenceAssertion } from "../../../contracts/evidence/src/index.js";
-import type { CoverageRequirement } from "../../../contracts/policies/src/index.js";
-interface EvidenceCoverageDiagnostic {
-    readonly path: string;
-    readonly status: "covered" | "uncovered";
-    readonly proof_kinds: CoverageRequirement["proof_kinds"];
-    readonly guidance: string;
-}
-/**
- * Policy roots describe material claims when the corresponding field is
- * present. Required revision fields are always applicable; optional public
- * facts enter the claim graph only when the revision publishes them.
- */
-export declare function applicableEvidenceCoverageRequirements(content: unknown, requirements: readonly CoverageRequirement[]): CoverageRequirement[];
-/**
- * Returns the smallest exact paths an extractor must consider to prove a
- * policy field. Objects expand to their complete leaf closure while ordinary
- * arrays remain atomic because evidence for one item cannot prove that a list
- * is exhaustive. Eligibility rule arrays are the exception: each declared
- * criterion is independently provable, so sources may compose the complete
- * rule set without any source claiming criteria it does not contain.
- */
-export declare function evidenceCoverageCandidateRequirements(content: unknown, requirements: readonly CoverageRequirement[]): CoverageRequirement[];
-/**
- * True when the asserted paths prove the whole required value: either an
- * assertion covers the value directly, or every child of an object is
- * covered. This lets independent captures compose without weakening any
- * individual assertion or changing the public coverage policy.
- */
-export declare function evidenceRequirementIsCovered(content: unknown, requirement: CoverageRequirement, assertions: readonly EvidenceAssertion[]): boolean;
-export declare function evaluateEvidenceCoverage(content: unknown, requirements: readonly CoverageRequirement[], assertions: readonly EvidenceAssertion[]): EvidenceCoverageDiagnostic[];
-export declare function evidencePathsOverlap(left: string, right: string): boolean;
-export declare function evidenceAssertionSatisfiesRequirement(assertion: EvidenceAssertion, requirement: CoverageRequirement): boolean;
-export declare function valueAtEvidencePointer(value: unknown, pointer: string): unknown;
-export {};
-//# sourceMappingURL=evidence-coverage.d.ts.map

package/dist/modules/provenance/src/evidence-coverage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence-coverage.d.ts","sourceRoot":"","sources":["../../../../modules/provenance/src/evidence-coverage.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAEpF,UAAU,0BAA0B;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,SAAS,mBAAmB,EAAE,GAC3C,mBAAmB,EAAE,CAEvB;AAED;;;;;;;GAOG;AACH,wBAAgB,qCAAqC,CACnD,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,SAAS,mBAAmB,EAAE,GAC3C,mBAAmB,EAAE,CAQvB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,mBAAmB,EAChC,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,OAAO,CAUT;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,SAAS,mBAAmB,EAAE,EAC5C,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,0BAA0B,EAAE,CAS9B;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzE;AAED,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,iBAAiB,EAC5B,WAAW,EAAE,mBAAmB,GAC/B,OAAO,CAST;AAkCD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAU/E"}