@sourcey/catalog-verifier 1.1.4 → 1.1.6

package/dist/modules/evidence-operations/src/evidence-authority-materialization.d.ts

@@ -0,0 +1,53 @@
+import type { AttestedCapture } from "provenry/capture/attestation";
+import { type Digest } from "provenry/primitives";
+import type { CatalogEvent } from "../../../contracts/events/src/index.js";
+import { evidenceAuthorityBundleManifestSchema } from "../../../contracts/evidence/src/index.js";
+import { type validateSignerRegistry } from "../../authority/src/index.js";
+import { type EvidenceCatalogView } from "./evidence-authority.js";
+export interface EvidenceAuthorityEventSigner {
+    signCatalogEvent(input: {
+        readonly purpose: "catalog-evidence";
+        readonly core: Omit<CatalogEvent, "event_id" | "protected">;
+        readonly eventId: Digest;
+        readonly signerRegistryDigest: Digest;
+    }): Promise<{
+        readonly protected: CatalogEvent["protected"];
+    }>;
+}
+export interface EvidenceAuthorityMaterializationContext {
+    readonly catalog: EvidenceCatalogView;
+    readonly prospectiveRevisionDigests: ReadonlySet<string>;
+    readonly targetRegistry: ReturnType<typeof validateSignerRegistry>;
+    readonly targetSequence: number;
+    readonly registryDigest: Digest;
+    readonly policy: {
+        readonly evidenceEventIssuerId: string;
+    };
+    readonly evidenceEventSigner: EvidenceAuthorityEventSigner;
+}
+/**
+ * Turn one reviewed evidence proposal into a signed immutable authority bundle.
+ * Hosts provide exact Catalog context, the attested capture the review read and
+ * the evidence event signer; the semantic materialization remains owned by
+ * Catalog and shared by CLI and production.
+ */
+export declare function createEvidenceAuthorityBundleFromProjection(input: {
+    readonly context: EvidenceAuthorityMaterializationContext;
+    readonly reviewProposal: unknown;
+    readonly reviewDecision: unknown;
+    /** The capture's start, attempt and attestation, proved here against the target registry. */
+    readonly attestedCapture: AttestedCapture;
+    readonly capturePolicy: unknown;
+    readonly revision: unknown;
+    readonly authorityEntityRevision: unknown;
+    readonly authorityProgramRevision: unknown;
+    readonly captureBytes: Uint8Array;
+    readonly normalizedBytes: Uint8Array;
+    readonly materializedAt: string;
+}): Promise<{
+    readonly proposalDigest: Digest;
+    readonly bundleDigest: Digest;
+    readonly manifest: ReturnType<typeof evidenceAuthorityBundleManifestSchema.parse>;
+    readonly files: ReadonlyMap<string, Buffer>;
+}>;
+//# sourceMappingURL=evidence-authority-materialization.d.ts.map

package/dist/modules/evidence-operations/src/evidence-authority-materialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-authority-materialization.d.ts","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/evidence-authority-materialization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAEL,KAAK,MAAM,EAKZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EAEL,qCAAqC,EAEtC,MAAM,0CAA0C,CAAC;AAMlD,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAGnG,OAAO,EAGL,KAAK,mBAAmB,EAGzB,MAAM,yBAAyB,CAAC;AAIjC,MAAM,WAAW,4BAA4B;IAC3C,gBAAgB,CAAC,KAAK,EAAE;QACtB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;QACrC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC;QAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;KACvC,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;KAAE,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,0BAA0B,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC;IACnE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,QAAQ,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;CAC5D;AAED;;;;;GAKG;AACH,wBAAsB,2CAA2C,CAAC,KAAK,EAAE;IACvE,QAAQ,CAAC,OAAO,EAAE,uCAAuC,CAAC;IAC1D,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,6FAA6F;IAC7F,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,GAAG,OAAO,CAAC;IACV,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,qCAAqC,CAAC,KAAK,CAAC,CAAC;IAClF,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C,CAAC,CAuGD"}

package/dist/modules/evidence-operations/src/evidence-authority-materialization.js

@@ -0,0 +1,161 @@
+import { compareCanonicalStrings, digest, digestPathSegment, prettyJson, sha256Bytes, } from "provenry/primitives";
+import { evidenceAuthorityBundleCoreSchema, evidenceAuthorityBundleManifestSchema, evidenceReviewDecisionSchema, } from "../../../contracts/evidence/src/index.js";
+import { entityRevisionSchema, programRevisionSchema, } from "../../../contracts/revisions/src/index.js";
+import { validateProtectedEvent } from "../../authority/src/index.js";
+import { releasedCaptureRecordFiles, verifyReleasedAttestedCaptures } from "./attested-capture.js";
+import { capturePolicyDefinitionSchema } from "./configuration.js";
+import { createEvidenceCatalogProposal, evidenceCatalogProposalRevisionDigests, validateEvidenceCatalogProposal, } from "./evidence-authority.js";
+import { parseEvidenceRevision } from "./evidence-revision.js";
+import { evidenceReviewProposalSchema } from "./submission-verifier.js";
+/**
+ * Turn one reviewed evidence proposal into a signed immutable authority bundle.
+ * Hosts provide exact Catalog context, the attested capture the review read and
+ * the evidence event signer; the semantic materialization remains owned by
+ * Catalog and shared by CLI and production.
+ */
+export async function createEvidenceAuthorityBundleFromProjection(input) {
+    const { context } = input;
+    const reviewProposal = evidenceReviewProposalSchema.parse(input.reviewProposal);
+    const reviewDecision = evidenceReviewDecisionSchema.parse(input.reviewDecision);
+    const capturePolicy = capturePolicyDefinitionSchema.parse(input.capturePolicy);
+    if (digest(capturePolicy) !== reviewProposal.capture_policy_digest) {
+        throw new Error("Capture policy bytes do not match the reviewed policy digest.");
+    }
+    const revision = parseEvidenceRevision(input.revision);
+    const authorityRevision = entityRevisionSchema.parse(input.authorityEntityRevision);
+    const authorityProgramRevision = programRevisionSchema
+        .nullable()
+        .parse(input.authorityProgramRevision);
+    const proved = await verifyReleasedAttestedCaptures({
+        starts: [input.attestedCapture.start],
+        attempts: [input.attestedCapture.attempt],
+        attestations: [input.attestedCapture.attestation],
+        judgedBy: () => ({ registry: context.targetRegistry, sequence: context.targetSequence }),
+    });
+    const attestedCapture = proved.get(input.attestedCapture.attestation.attestation_digest);
+    if (!attestedCapture)
+        throw new Error("The reviewed capture's attestation is not proved.");
+    const proposal = createEvidenceCatalogProposal({
+        reviewProposal,
+        reviewDecision,
+        attestedCapture,
+        captureBytes: input.captureBytes,
+        normalizedBytes: input.normalizedBytes,
+        revision,
+        authorityEntityRevision: authorityRevision,
+        authorityProgramRevision,
+        materializedAt: input.materializedAt,
+        policy: context.policy,
+    });
+    validateEvidenceCatalogProposal({
+        proposal,
+        attestedCapture,
+        captureBytes: input.captureBytes,
+        normalizedBytes: input.normalizedBytes,
+        catalog: context.catalog,
+        prospectiveRevisionDigests: context.prospectiveRevisionDigests,
+        policy: context.policy,
+    });
+    const existingEvents = new Map(context.catalog.existingEvents.map((event) => [event.event_id, event]));
+    const events = await Promise.all(proposal.event_intents.map(async (intent) => {
+        const existing = existingEvents.get(intent.event_id);
+        if (existing)
+            return existing;
+        const signed = await context.evidenceEventSigner.signCatalogEvent({
+            purpose: "catalog-evidence",
+            core: intent.core,
+            eventId: intent.event_id,
+            signerRegistryDigest: context.registryDigest,
+        });
+        return {
+            ...intent.core,
+            event_id: intent.event_id,
+            protected: signed.protected,
+        };
+    }));
+    for (const event of events) {
+        validateProtectedEvent(event, context.targetRegistry, context.targetSequence);
+    }
+    if (events.some((event) => event.protected.key_id === attestedCapture.attestation.protected.key_id)) {
+        throw new Error("Capture attestations and evidence events require distinct signing keys.");
+    }
+    const existingObservations = new Map(context.catalog.existingObservations.map((observation) => [
+        observation.observation_id,
+        observation,
+    ]));
+    const observations = proposal.observations.map((observation) => existingObservations.get(observation.observation_id) ?? observation);
+    const files = authorityBundleFiles({
+        proposal,
+        attestedCapture,
+        observations,
+        events,
+        captureBytes: input.captureBytes,
+        normalizedBytes: input.normalizedBytes,
+        capturePolicy,
+        revision,
+        authorityRevision,
+        authorityProgramRevision,
+        targetSequence: context.targetSequence,
+    });
+    const manifest = evidenceAuthorityBundleManifestSchema.parse(JSON.parse((files.get("manifest.json") ?? Buffer.alloc(0)).toString("utf8")));
+    return {
+        proposalDigest: proposal.proposal_digest,
+        bundleDigest: manifest.bundle_digest,
+        manifest,
+        files,
+    };
+}
+function authorityBundleFiles(input) {
+    const files = new Map();
+    files.set("authority/proposal.json", Buffer.from(prettyJson(input.proposal)));
+    files.set("authority/review-decision.json", Buffer.from(prettyJson(input.proposal.review_decision)));
+    files.set("authority/capture-policy.json", Buffer.from(prettyJson(input.capturePolicy)));
+    files.set(`captures/${digestPathSegment(input.proposal.review_proposal.submission.capture.digest)}`, Buffer.from(input.captureBytes));
+    files.set(`evidence/normalized/${digestPathSegment(input.proposal.review_proposal.submission.normalization.object_digest)}`, Buffer.from(input.normalizedBytes));
+    for (const [path, bytes] of releasedCaptureRecordFiles([input.attestedCapture])) {
+        files.set(path, bytes);
+    }
+    const revisions = uniqueRevisions([
+        input.revision,
+        input.authorityRevision,
+        ...(input.authorityProgramRevision ? [input.authorityProgramRevision] : []),
+    ]);
+    for (const revision of revisions) {
+        files.set(`revisions/${digestPathSegment(revision.revision_digest)}.json`, Buffer.from(prettyJson(revision)));
+    }
+    for (const observation of input.observations) {
+        files.set(`observations/${digestPathSegment(observation.observation_id)}.json`, Buffer.from(prettyJson(observation)));
+    }
+    for (const event of input.events) {
+        files.set(`events/${digestPathSegment(event.event_id)}.json`, Buffer.from(prettyJson(event)));
+    }
+    const objects = declarations(files);
+    const core = evidenceAuthorityBundleCoreSchema.parse({
+        bundle_contract: "sourcey.evidence-authority-bundle/v1alpha1",
+        proposal_digest: input.proposal.proposal_digest,
+        review_decision_digest: input.proposal.review_decision.decision_digest,
+        base_release_id: input.proposal.review_proposal.base_release_id,
+        capture_attestation_digest: input.attestedCapture.attestation.attestation_digest,
+        revision_digests: evidenceCatalogProposalRevisionDigests(input.proposal),
+        observation_ids: input.observations
+            .map((observation) => observation.observation_id)
+            .sort(compareCanonicalStrings),
+        event_ids: input.events.map((event) => event.event_id).sort(compareCanonicalStrings),
+        release_inclusion: "pending",
+        objects,
+    });
+    files.set("manifest.json", Buffer.from(prettyJson(evidenceAuthorityBundleManifestSchema.parse({
+        ...core,
+        bundle_digest: digest(core),
+    }))));
+    return files;
+}
+function declarations(files) {
+    return Object.fromEntries([...files.entries()]
+        .sort(([left], [right]) => compareCanonicalStrings(left, right))
+        .map(([path, bytes]) => [path, { sha256: sha256Bytes(bytes), bytes: bytes.byteLength }]));
+}
+function uniqueRevisions(revisions) {
+    return [...new Map(revisions.map((revision) => [revision.revision_digest, revision])).values()];
+}
+//# sourceMappingURL=evidence-authority-materialization.js.map

package/dist/modules/evidence-operations/src/evidence-authority-materialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-authority-materialization.js","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/evidence-authority-materialization.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uBAAuB,EAEvB,MAAM,EACN,iBAAiB,EACjB,UAAU,EACV,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,iCAAiC,EACjC,qCAAqC,EACrC,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAA+B,MAAM,8BAA8B,CAAC;AACnG,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACnG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACL,6BAA6B,EAG7B,sCAAsC,EACtC,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAyB,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AAqBxE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAAC,KAajE;IAMC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,cAAc,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,cAAc,CAAC,qBAAqB,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpF,MAAM,wBAAwB,GAAG,qBAAqB;SACnD,QAAQ,EAAE;SACV,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC;QAClD,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC;QACrC,QAAQ,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC;QACzC,YAAY,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC;QACjD,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;KACzF,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IACzF,IAAI,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,6BAA6B,CAAC;QAC7C,cAAc;QACd,cAAc;QACd,eAAe;QACf,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ;QACR,uBAAuB,EAAE,iBAAiB;QAC1C,wBAAwB;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,+BAA+B,CAAC;QAC9B,QAAQ;QACR,eAAe;QACf,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;QAC9D,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAChE,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,QAAkB;YAClC,oBAAoB,EAAE,OAAO,CAAC,cAAc;SAC7C,CAAC,CAAC;QACH,OAAO;YACL,GAAG,MAAM,CAAC,IAAI;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;SACZ,CAAC;IACpB,CAAC,CAAC,CACH,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAChF,CAAC;IACD,IACE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,eAAe,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,EAC/F,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACxD,WAAW,CAAC,cAAc;QAC1B,WAAW;KACZ,CAAC,CACH,CAAC;IACF,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAC5C,CAAC,WAAW,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,WAAW,CACrF,CAAC;IACF,MAAM,KAAK,GAAG,oBAAoB,CAAC;QACjC,QAAQ;QACR,eAAe;QACf,YAAY;QACZ,MAAM;QACN,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,aAAa;QACb,QAAQ;QACR,iBAAiB;QACjB,wBAAwB;QACxB,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,qCAAqC,CAAC,KAAK,CAC1D,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC7E,CAAC;IACF,OAAO;QACL,cAAc,EAAE,QAAQ,CAAC,eAAyB;QAClD,YAAY,EAAE,QAAQ,CAAC,aAAuB;QAC9C,QAAQ;QACR,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAY7B;IACC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9E,KAAK,CAAC,GAAG,CACP,gCAAgC,EAChC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CACxD,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACzF,KAAK,CAAC,GAAG,CACP,YAAY,iBAAiB,CAC3B,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,MAAgB,CACnE,EAAE,EACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAChC,CAAC;IACF,KAAK,CAAC,GAAG,CACP,uBAAuB,iBAAiB,CACtC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,CAAC,aAAuB,CAChF,EAAE,EACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CACnC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,0BAA0B,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAChF,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC;QAChC,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,iBAAiB;QACvB,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC,CAAC;IACH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,GAAG,CACP,aAAa,iBAAiB,CAAC,QAAQ,CAAC,eAAyB,CAAC,OAAO,EACzE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAClC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,KAAK,CAAC,GAAG,CACP,gBAAgB,iBAAiB,CAAC,WAAW,CAAC,cAAwB,CAAC,OAAO,EAC9E,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CACrC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,KAAK,CAAC,GAAG,CACP,UAAU,iBAAiB,CAAC,KAAK,CAAC,QAAkB,CAAC,OAAO,EAC5D,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAC/B,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,iCAAiC,CAAC,KAAK,CAAC;QACnD,eAAe,EAAE,4CAA4C;QAC7D,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,eAAe;QAC/C,sBAAsB,EAAE,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,eAAe;QACtE,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,eAAe;QAC/D,0BAA0B,EAAE,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,kBAAkB;QAChF,gBAAgB,EAAE,sCAAsC,CAAC,KAAK,CAAC,QAAQ,CAAC;QACxE,eAAe,EAAE,KAAK,CAAC,YAAY;aAChC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC;aAChD,IAAI,CAAC,uBAAuB,CAAC;QAChC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;QACpF,iBAAiB,EAAE,SAAS;QAC5B,OAAO;KACR,CAAC,CAAC;IACH,KAAK,CAAC,GAAG,CACP,eAAe,EACf,MAAM,CAAC,IAAI,CACT,UAAU,CACR,qCAAqC,CAAC,KAAK,CAAC;QAC1C,GAAG,IAAI;QACP,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC;KAC5B,CAAC,CACH,CACF,CACF,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAkC;IACtD,OAAO,MAAM,CAAC,WAAW,CACvB,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACjB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,SAAsC;IAC7D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAClG,CAAC"}