@tenova/swt3-ai 0.5.1 → 0.5.3

package/dist/merkle.d.ts

@@ -0,0 +1,107 @@
+/**
+ * SWT3 AI Witness SDK -- Merkle Tree + Tiered Accumulator.
+ *
+ * Inline port of libswt3 Merkle primitives (no external dependency)
+ * plus a tiered accumulator that computes session-level Merkle roots
+ * on each flush.
+ *
+ * Domain separation (SWT3:LEAF: / SWT3:NODE:) prevents second-preimage
+ * attacks. Fingerprints are sorted lexicographically before tree
+ * construction for determinism.
+ *
+ * Tiers:
+ *   Session root  -- computed per flush (SDK-side, this file)
+ *   Endpoint root -- computed per interval (server-side, daily_merkle_rollups)
+ *
+ * Spec: SWT3-SPEC-v1.0.md, Section 6.3 (Enclave Integrity)
+ * Patent pending.
+ */
+/** Hash a leaf node (a single fingerprint). Domain-separated. */
+export declare function hashLeaf(fingerprint: string): string;
+/** Hash an internal node (two child hashes). Domain-separated. */
+export declare function hashNode(left: string, right: string): string;
+/**
+ * Compute the Merkle root from a set of fingerprints.
+ * Sorted lexicographically for determinism.
+ */
+export declare function getMerkleRoot(fingerprints: string[]): string;
+/** A single step in a Merkle inclusion proof. */
+export interface MerkleProofStep {
+    hash: string;
+    position: "left" | "right";
+}
+/** Merkle inclusion proof for a single fingerprint. */
+export interface MerkleProof {
+    fingerprint: string;
+    leafHash: string;
+    root: string;
+    steps: MerkleProofStep[];
+}
+/**
+ * Generate a Merkle inclusion proof for a fingerprint.
+ * Returns null if the fingerprint is not in the set.
+ */
+export declare function getMerkleProof(fingerprints: string[], target: string): MerkleProof | null;
+/**
+ * Verify a Merkle inclusion proof. Requires only the fingerprint,
+ * proof steps, and claimed root -- no access to the full set needed.
+ */
+export declare function verifyMerkleProof(fingerprint: string, proof: MerkleProof): boolean;
+export interface SessionRoot {
+    root: string;
+    fingerprints: string[];
+    count: number;
+    timestamp: string;
+}
+export interface MerkleConfig {
+    enabled: boolean;
+    accumulatorInterval: number;
+}
+export interface MerkleAccumulatorOptions {
+    /** Directory for session root JSONL persistence. Default: $TMPDIR/swt3-merkle */
+    persistDir?: string;
+    /** Tenant ID for scoping persistence files. */
+    tenantId?: string;
+}
+/**
+ * Tiered Merkle Accumulator.
+ *
+ * Collects anchor fingerprints and computes a session-level Merkle root
+ * on each flush. Session roots are persisted to a JSONL file for
+ * crash recovery and auditor export.
+ *
+ * Usage:
+ *   const acc = new MerkleAccumulator({ tenantId: "ACME" });
+ *   acc.add("abc123def456");
+ *   acc.add("789012345678");
+ *   const root = acc.flush();  // computes + persists session root
+ */
+export declare class MerkleAccumulator {
+    private fingerprints;
+    private sessionRoots;
+    private persistPath;
+    constructor(options?: MerkleAccumulatorOptions);
+    /** Add a fingerprint to the current session batch. */
+    add(fingerprint: string): void;
+    /** Add multiple fingerprints. */
+    addMany(fingerprints: string[]): void;
+    /** Number of fingerprints in the current (unflushed) batch. */
+    get pending(): number;
+    /** All session roots computed so far. */
+    get roots(): SessionRoot[];
+    /**
+     * Compute the Merkle root for the current batch and persist it.
+     * Returns the session root entry, or null if the batch is empty.
+     */
+    flush(): SessionRoot | null;
+    /**
+     * Generate a Merkle proof for a fingerprint within a specific session root.
+     * If no root is specified, searches the most recent session.
+     */
+    prove(fingerprint: string, rootHash?: string): MerkleProof | null;
+    /** Reset the accumulator (clears pending fingerprints, keeps history). */
+    reset(): void;
+    /** Clear all state including history (for testing). */
+    clear(): void;
+}
+//# sourceMappingURL=merkle.d.ts.map

package/dist/merkle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAkBH,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,kEAAkE;AAClE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAmB5D;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EAAE,EACtB,MAAM,EAAE,MAAM,GACb,WAAW,GAAG,IAAI,CAwCpB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,WAAW,GACjB,OAAO,CAYT;AAID,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAID,MAAM,WAAW,wBAAwB;IACvC,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,WAAW,CAAgB;gBAEvB,OAAO,GAAE,wBAA6B;IAwBlD,sDAAsD;IACtD,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAI9B,iCAAiC;IACjC,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI;IAIrC,+DAA+D;IAC/D,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,yCAAyC;IACzC,IAAI,KAAK,IAAI,WAAW,EAAE,CAEzB;IAED;;;OAGG;IACH,KAAK,IAAI,WAAW,GAAG,IAAI;IAuB3B;;;OAGG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAajE,0EAA0E;IAC1E,KAAK,IAAI,IAAI;IAIb,uDAAuD;IACvD,KAAK,IAAI,IAAI;CAId"}

package/dist/merkle.js

@@ -0,0 +1,226 @@
+/**
+ * SWT3 AI Witness SDK -- Merkle Tree + Tiered Accumulator.
+ *
+ * Inline port of libswt3 Merkle primitives (no external dependency)
+ * plus a tiered accumulator that computes session-level Merkle roots
+ * on each flush.
+ *
+ * Domain separation (SWT3:LEAF: / SWT3:NODE:) prevents second-preimage
+ * attacks. Fingerprints are sorted lexicographically before tree
+ * construction for determinism.
+ *
+ * Tiers:
+ *   Session root  -- computed per flush (SDK-side, this file)
+ *   Endpoint root -- computed per interval (server-side, daily_merkle_rollups)
+ *
+ * Spec: SWT3-SPEC-v1.0.md, Section 6.3 (Enclave Integrity)
+ * Patent pending.
+ */
+import { createHash } from "node:crypto";
+import { appendFileSync, readFileSync, existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+// ── Domain Separators ────────────────────────────────────────────────
+const LEAF_PREFIX = "SWT3:LEAF:";
+const NODE_PREFIX = "SWT3:NODE:";
+// ── Merkle Primitives ────────────────────────────────────────────────
+function sha256(data) {
+    return createHash("sha256").update(data, "utf-8").digest("hex");
+}
+/** Hash a leaf node (a single fingerprint). Domain-separated. */
+export function hashLeaf(fingerprint) {
+    return sha256(LEAF_PREFIX + fingerprint);
+}
+/** Hash an internal node (two child hashes). Domain-separated. */
+export function hashNode(left, right) {
+    return sha256(NODE_PREFIX + left + ":" + right);
+}
+/**
+ * Compute the Merkle root from a set of fingerprints.
+ * Sorted lexicographically for determinism.
+ */
+export function getMerkleRoot(fingerprints) {
+    if (fingerprints.length === 0)
+        return "";
+    const sorted = [...fingerprints].sort();
+    let level = sorted.map(hashLeaf);
+    while (level.length > 1) {
+        const next = [];
+        for (let i = 0; i < level.length; i += 2) {
+            if (i + 1 < level.length) {
+                next.push(hashNode(level[i], level[i + 1]));
+            }
+            else {
+                next.push(level[i]);
+            }
+        }
+        level = next;
+    }
+    return level[0];
+}
+/**
+ * Generate a Merkle inclusion proof for a fingerprint.
+ * Returns null if the fingerprint is not in the set.
+ */
+export function getMerkleProof(fingerprints, target) {
+    if (fingerprints.length === 0)
+        return null;
+    const sorted = [...fingerprints].sort();
+    const targetIndex = sorted.indexOf(target);
+    if (targetIndex === -1)
+        return null;
+    let level = sorted.map(hashLeaf);
+    let index = targetIndex;
+    const steps = [];
+    while (level.length > 1) {
+        const next = [];
+        const nextIndex = Math.floor(index / 2);
+        for (let i = 0; i < level.length; i += 2) {
+            if (i + 1 < level.length) {
+                if (i === index || i + 1 === index) {
+                    if (index % 2 === 0) {
+                        steps.push({ hash: level[i + 1], position: "right" });
+                    }
+                    else {
+                        steps.push({ hash: level[i], position: "left" });
+                    }
+                }
+                next.push(hashNode(level[i], level[i + 1]));
+            }
+            else {
+                next.push(level[i]);
+            }
+        }
+        level = next;
+        index = nextIndex;
+    }
+    return {
+        fingerprint: target,
+        leafHash: hashLeaf(target),
+        root: level[0],
+        steps,
+    };
+}
+/**
+ * Verify a Merkle inclusion proof. Requires only the fingerprint,
+ * proof steps, and claimed root -- no access to the full set needed.
+ */
+export function verifyMerkleProof(fingerprint, proof) {
+    let current = hashLeaf(fingerprint);
+    for (const step of proof.steps) {
+        if (step.position === "left") {
+            current = hashNode(step.hash, current);
+        }
+        else {
+            current = hashNode(current, step.hash);
+        }
+    }
+    return current === proof.root;
+}
+/**
+ * Tiered Merkle Accumulator.
+ *
+ * Collects anchor fingerprints and computes a session-level Merkle root
+ * on each flush. Session roots are persisted to a JSONL file for
+ * crash recovery and auditor export.
+ *
+ * Usage:
+ *   const acc = new MerkleAccumulator({ tenantId: "ACME" });
+ *   acc.add("abc123def456");
+ *   acc.add("789012345678");
+ *   const root = acc.flush();  // computes + persists session root
+ */
+export class MerkleAccumulator {
+    fingerprints = [];
+    sessionRoots = [];
+    persistPath;
+    constructor(options = {}) {
+        if (options.persistDir || options.tenantId) {
+            const dir = options.persistDir ?? join(tmpdir(), "swt3-merkle");
+            mkdirSync(dir, { recursive: true, mode: 0o700 });
+            const safe = (options.tenantId ?? "default").replace(/[^a-zA-Z0-9_-]/g, "_");
+            this.persistPath = join(dir, `${safe}.roots.jsonl`);
+            // Load existing session roots
+            if (existsSync(this.persistPath)) {
+                const raw = readFileSync(this.persistPath, "utf-8");
+                for (const line of raw.split("\n")) {
+                    if (!line.trim())
+                        continue;
+                    try {
+                        this.sessionRoots.push(JSON.parse(line));
+                    }
+                    catch {
+                        // Corrupted line -- skip
+                    }
+                }
+            }
+        }
+        else {
+            this.persistPath = null;
+        }
+    }
+    /** Add a fingerprint to the current session batch. */
+    add(fingerprint) {
+        this.fingerprints.push(fingerprint);
+    }
+    /** Add multiple fingerprints. */
+    addMany(fingerprints) {
+        this.fingerprints.push(...fingerprints);
+    }
+    /** Number of fingerprints in the current (unflushed) batch. */
+    get pending() {
+        return this.fingerprints.length;
+    }
+    /** All session roots computed so far. */
+    get roots() {
+        return [...this.sessionRoots];
+    }
+    /**
+     * Compute the Merkle root for the current batch and persist it.
+     * Returns the session root entry, or null if the batch is empty.
+     */
+    flush() {
+        if (this.fingerprints.length === 0)
+            return null;
+        const fps = [...this.fingerprints];
+        const root = getMerkleRoot(fps);
+        const entry = {
+            root,
+            fingerprints: fps,
+            count: fps.length,
+            timestamp: new Date().toISOString(),
+        };
+        this.sessionRoots.push(entry);
+        this.fingerprints = [];
+        // Persist to JSONL
+        if (this.persistPath) {
+            appendFileSync(this.persistPath, JSON.stringify(entry) + "\n", "utf-8");
+        }
+        return entry;
+    }
+    /**
+     * Generate a Merkle proof for a fingerprint within a specific session root.
+     * If no root is specified, searches the most recent session.
+     */
+    prove(fingerprint, rootHash) {
+        const sessions = rootHash
+            ? this.sessionRoots.filter((s) => s.root === rootHash)
+            : this.sessionRoots.slice(-1);
+        for (const session of sessions) {
+            const proof = getMerkleProof(session.fingerprints, fingerprint);
+            if (proof)
+                return proof;
+        }
+        return null;
+    }
+    /** Reset the accumulator (clears pending fingerprints, keeps history). */
+    reset() {
+        this.fingerprints = [];
+    }
+    /** Clear all state including history (for testing). */
+    clear() {
+        this.fingerprints = [];
+        this.sessionRoots = [];
+    }
+}
+//# sourceMappingURL=merkle.js.map

package/dist/merkle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,wEAAwE;AAExE,MAAM,WAAW,GAAG,YAAY,CAAC;AACjC,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC,wEAAwE;AAExE,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CAAC,WAAmB;IAC1C,OAAO,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC,CAAC;AAC3C,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAa;IAClD,OAAO,MAAM,CAAC,WAAW,GAAG,IAAI,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,YAAsB;IAClD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAgBD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,YAAsB,EACtB,MAAc;IAEd,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,WAAW,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,KAAK,GAAG,WAAW,CAAC;IACxB,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;oBACnC,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;wBACpB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBACxD,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;oBACnD,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,KAAK,GAAG,IAAI,CAAC;QACb,KAAK,GAAG,SAAS,CAAC;IACpB,CAAC;IAED,OAAO;QACL,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACd,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAAmB,EACnB,KAAkB;IAElB,IAAI,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC;AAChC,CAAC;AA2BD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iBAAiB;IACpB,YAAY,GAAa,EAAE,CAAC;IAC5B,YAAY,GAAkB,EAAE,CAAC;IACjC,WAAW,CAAgB;IAEnC,YAAY,UAAoC,EAAE;QAChD,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC;YAChE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAC7E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,cAAc,CAAC,CAAC;YAEpD,8BAA8B;YAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBACpD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;wBAAE,SAAS;oBAC3B,IAAI,CAAC;wBACH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC,CAAC;oBAC1D,CAAC;oBAAC,MAAM,CAAC;wBACP,yBAAyB;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,GAAG,CAAC,WAAmB;QACrB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAED,iCAAiC;IACjC,OAAO,CAAC,YAAsB;QAC5B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,+DAA+D;IAC/D,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,yCAAyC;IACzC,IAAI,KAAK;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEhD,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAgB;YACzB,IAAI;YACJ,YAAY,EAAE,GAAG;YACjB,KAAK,EAAE,GAAG,CAAC,MAAM;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QAEvB,mBAAmB;QACnB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAmB,EAAE,QAAiB;QAC1C,MAAM,QAAQ,GAAG,QAAQ;YACvB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;YACtD,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAChE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,KAAK;QACH,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;IACzB,CAAC;IAED,uDAAuD;IACvD,KAAK;QACH,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/schema.d.ts

@@ -0,0 +1,18 @@
+/**
+ * SWT3 YAML schema validator.
+ *
+ * Validates a raw parsed YAML config against the SWT3 schema.
+ * Used by `swt3 doctor` and available as a public API for CI/CD.
+ */
+export interface ValidationError {
+    path: string;
+    message: string;
+    severity: "error" | "warning";
+}
+export interface ValidationResult {
+    valid: boolean;
+    errors: ValidationError[];
+    warnings: ValidationError[];
+}
+export declare function validateSchema(raw: Record<string, unknown>): ValidationResult;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAqGD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAqJ7E"}

package/dist/schema.js

@@ -0,0 +1,255 @@
+/**
+ * SWT3 YAML schema validator.
+ *
+ * Validates a raw parsed YAML config against the SWT3 schema.
+ * Used by `swt3 doctor` and available as a public API for CI/CD.
+ */
+const KNOWN_TOP_LEVEL = new Set([
+    "api_key", "api_key_env", "tenant_id", "clearing_level", "endpoint",
+    "buffer_size", "flush_interval", "max_retries", "latency_threshold_ms",
+    "guardrails_required", "guardrail_names", "factor_handoff", "factor_handoff_path",
+    "agent_id", "signing_key", "signing_key_env", "signing_key_id", "signing_key_version",
+    "cycle_id", "policy_version", "jurisdiction", "legal_basis", "purpose_class",
+    "on_flush", "gateway_mode", "wal_path", "replay_window",
+    "token_budget", "procedures", "strict",
+    "policy", "trust_mesh", "hardware", "density_policy", "mcp_policy",
+    "merkle", "profile", "extends",
+]);
+const VALID_POLICY_KEYS = new Set([
+    "require_signing", "min_clearing_level", "required_procedures",
+    "require_agent_id", "max_flush_interval", "require_jurisdiction",
+]);
+const VALID_TRUST_MESH_KEYS = new Set([
+    "mode", "min_trust_level", "require_signature", "freshness_window",
+    "trusted_tenants", "trusted_agents", "deny_agents", "deny_tenants",
+    "required_procedures", "signing_keys",
+]);
+const VALID_HARDWARE_KEYS = new Set([
+    "require_attestation", "attestation_freshness", "allowed_methods",
+]);
+const VALID_ATTESTATION_METHODS = new Set([
+    "tpm_2.0", "secure_enclave", "sgx", "sev", "trustzone", "nitro",
+]);
+const VALID_DENSITY_POLICY_KEYS = new Set([
+    "min_anchors_per_1000_tokens", "required_providers",
+    "max_chain_gap_seconds", "require_signing_key", "min_trust_level",
+]);
+const VALID_MCP_POLICY_KEYS = new Set([
+    "witnessed_tools", "exempt_tools", "require_trust_level",
+    "auto_witness", "block_on_failure",
+    "max_velocity", "max_chain_depth", "tool_allowlist", "tool_blocklist",
+    "fail_secure", "rules", "max_tokens_per_session",
+]);
+const VALID_MERKLE_KEYS = new Set(["enabled", "accumulator_interval"]);
+const SECTION_SCHEMAS = {
+    policy: VALID_POLICY_KEYS,
+    trust_mesh: VALID_TRUST_MESH_KEYS,
+    hardware: VALID_HARDWARE_KEYS,
+    density_policy: VALID_DENSITY_POLICY_KEYS,
+    mcp_policy: VALID_MCP_POLICY_KEYS,
+    merkle: VALID_MERKLE_KEYS,
+};
+function checkType(value, expected, path, errors) {
+    if (expected === "number" && typeof value !== "number") {
+        errors.push({ path, message: `expected number, got ${typeof value}`, severity: "error" });
+        return false;
+    }
+    if (expected === "boolean" && typeof value !== "boolean") {
+        errors.push({ path, message: `expected boolean, got ${typeof value}`, severity: "error" });
+        return false;
+    }
+    if (expected === "string" && typeof value !== "string") {
+        errors.push({ path, message: `expected string, got ${typeof value}`, severity: "error" });
+        return false;
+    }
+    if (expected === "string[]" && (!Array.isArray(value) || !value.every((v) => typeof v === "string"))) {
+        errors.push({ path, message: `expected string array`, severity: "error" });
+        return false;
+    }
+    return true;
+}
+function editDistance(a, b) {
+    const m = a.length, n = b.length;
+    const dp = Array.from({ length: m + 1 }, () => Array(n + 1).fill(0));
+    for (let i = 0; i <= m; i++)
+        dp[i][0] = i;
+    for (let j = 0; j <= n; j++)
+        dp[0][j] = j;
+    for (let i = 1; i <= m; i++) {
+        for (let j = 1; j <= n; j++) {
+            dp[i][j] = a[i - 1] === b[j - 1]
+                ? dp[i - 1][j - 1]
+                : 1 + Math.min(dp[i - 1][j], dp[i][j - 1], dp[i - 1][j - 1]);
+        }
+    }
+    return dp[m][n];
+}
+function suggestKey(key, validKeys) {
+    let best = null;
+    let bestDist = 3; // max distance to suggest
+    for (const valid of validKeys) {
+        const d = editDistance(key, valid);
+        if (d < bestDist) {
+            bestDist = d;
+            best = valid;
+        }
+    }
+    return best;
+}
+export function validateSchema(raw) {
+    const errors = [];
+    const warnings = [];
+    // Top-level key check with did-you-mean suggestions
+    for (const key of Object.keys(raw)) {
+        if (!KNOWN_TOP_LEVEL.has(key)) {
+            const suggestion = suggestKey(key, KNOWN_TOP_LEVEL);
+            const msg = suggestion
+                ? `unknown top-level key (did you mean "${suggestion}"?)`
+                : `unknown top-level key`;
+            errors.push({ path: key, message: msg, severity: "error" });
+        }
+    }
+    // clearing_level: must be 0-3
+    if ("clearing_level" in raw) {
+        const cl = raw.clearing_level;
+        if (typeof cl !== "number" || ![0, 1, 2, 3].includes(cl)) {
+            errors.push({ path: "clearing_level", message: "must be 0, 1, 2, or 3", severity: "error" });
+        }
+    }
+    // trust_mesh.mode enum
+    const tm = raw.trust_mesh;
+    if (tm && typeof tm === "object") {
+        if ("mode" in tm && !["strict", "permissive", "monitor"].includes(tm.mode)) {
+            errors.push({ path: "trust_mesh.mode", message: "must be strict, permissive, or monitor", severity: "error" });
+        }
+        if ("min_trust_level" in tm)
+            checkType(tm.min_trust_level, "number", "trust_mesh.min_trust_level", errors);
+        if ("require_signature" in tm)
+            checkType(tm.require_signature, "boolean", "trust_mesh.require_signature", errors);
+        if ("freshness_window" in tm)
+            checkType(tm.freshness_window, "number", "trust_mesh.freshness_window", errors);
+        if ("trusted_tenants" in tm)
+            checkType(tm.trusted_tenants, "string[]", "trust_mesh.trusted_tenants", errors);
+        if ("deny_agents" in tm)
+            checkType(tm.deny_agents, "string[]", "trust_mesh.deny_agents", errors);
+    }
+    // hardware.allowed_methods enum validation
+    const hw = raw.hardware;
+    if (hw && typeof hw === "object") {
+        if ("allowed_methods" in hw && Array.isArray(hw.allowed_methods)) {
+            for (const method of hw.allowed_methods) {
+                if (typeof method === "string" && !VALID_ATTESTATION_METHODS.has(method)) {
+                    const valid = [...VALID_ATTESTATION_METHODS].sort().join(", ");
+                    errors.push({
+                        path: "hardware.allowed_methods",
+                        message: `unknown attestation method "${method}". Valid: ${valid}`,
+                        severity: "error",
+                    });
+                }
+            }
+        }
+    }
+    // Section key validation
+    for (const [section, validKeys] of Object.entries(SECTION_SCHEMAS)) {
+        const sec = raw[section];
+        if (sec && typeof sec === "object" && !Array.isArray(sec)) {
+            for (const key of Object.keys(sec)) {
+                if (!validKeys.has(key)) {
+                    errors.push({ path: `${section}.${key}`, message: "unknown key", severity: "error" });
+                }
+            }
+        }
+    }
+    // MCP policy chain density validation
+    const mcp = raw.mcp_policy;
+    if (mcp && typeof mcp === "object") {
+        if ("max_velocity" in mcp) {
+            if (typeof mcp.max_velocity !== "string") {
+                errors.push({ path: "mcp_policy.max_velocity", message: "expected string", severity: "error" });
+            }
+            else if (!/^\d+\/\d+s$/.test(mcp.max_velocity)) {
+                errors.push({ path: "mcp_policy.max_velocity", message: 'must match "N/Xs" format (e.g., "4/30s")', severity: "error" });
+            }
+        }
+        if ("max_chain_depth" in mcp) {
+            if (typeof mcp.max_chain_depth !== "number") {
+                errors.push({ path: "mcp_policy.max_chain_depth", message: "expected number", severity: "error" });
+            }
+            else if (mcp.max_chain_depth < 1) {
+                errors.push({ path: "mcp_policy.max_chain_depth", message: "must be >= 1", severity: "error" });
+            }
+        }
+        if ("max_tokens_per_session" in mcp) {
+            if (typeof mcp.max_tokens_per_session !== "number") {
+                errors.push({ path: "mcp_policy.max_tokens_per_session", message: "expected number", severity: "error" });
+            }
+            else if (mcp.max_tokens_per_session < 1) {
+                errors.push({ path: "mcp_policy.max_tokens_per_session", message: "must be >= 1", severity: "error" });
+            }
+        }
+        if ("tool_allowlist" in mcp)
+            checkType(mcp.tool_allowlist, "string[]", "mcp_policy.tool_allowlist", errors);
+        if ("tool_blocklist" in mcp)
+            checkType(mcp.tool_blocklist, "string[]", "mcp_policy.tool_blocklist", errors);
+        if ("fail_secure" in mcp)
+            checkType(mcp.fail_secure, "boolean", "mcp_policy.fail_secure", errors);
+        if ("rules" in mcp) {
+            if (!Array.isArray(mcp.rules)) {
+                errors.push({ path: "mcp_policy.rules", message: "expected array", severity: "error" });
+            }
+            else {
+                for (let i = 0; i < mcp.rules.length; i++) {
+                    const rule = mcp.rules[i];
+                    const prefix = `mcp_policy.rules[${i}]`;
+                    if (!rule || typeof rule !== "object") {
+                        errors.push({ path: prefix, message: "expected object", severity: "error" });
+                        continue;
+                    }
+                    if (typeof rule.match !== "string") {
+                        errors.push({ path: `${prefix}.match`, message: "required string", severity: "error" });
+                    }
+                    if (typeof rule.action !== "string" || !["block", "log"].includes(rule.action)) {
+                        errors.push({ path: `${prefix}.action`, message: 'must be "block" or "log"', severity: "error" });
+                    }
+                    if (typeof rule.reason !== "string") {
+                        errors.push({ path: `${prefix}.reason`, message: "required string", severity: "error" });
+                    }
+                }
+            }
+        }
+    }
+    // Policy type checks
+    const pol = raw.policy;
+    if (pol && typeof pol === "object") {
+        if ("require_signing" in pol)
+            checkType(pol.require_signing, "boolean", "policy.require_signing", errors);
+        if ("min_clearing_level" in pol)
+            checkType(pol.min_clearing_level, "number", "policy.min_clearing_level", errors);
+        if ("require_agent_id" in pol)
+            checkType(pol.require_agent_id, "boolean", "policy.require_agent_id", errors);
+    }
+    // Numeric range validation
+    if ("buffer_size" in raw && typeof raw.buffer_size === "number" && raw.buffer_size < 1) {
+        errors.push({ path: "buffer_size", message: "must be >= 1", severity: "error" });
+    }
+    if ("flush_interval" in raw && typeof raw.flush_interval === "number" && raw.flush_interval < 0.1) {
+        errors.push({ path: "flush_interval", message: "must be >= 0.1", severity: "error" });
+    }
+    if ("max_retries" in raw && typeof raw.max_retries === "number" && raw.max_retries < 0) {
+        errors.push({ path: "max_retries", message: "must be >= 0", severity: "error" });
+    }
+    if (tm && typeof tm === "object") {
+        if ("min_trust_level" in tm && typeof tm.min_trust_level === "number" && (tm.min_trust_level < 0 || tm.min_trust_level > 4)) {
+            errors.push({ path: "trust_mesh.min_trust_level", message: "must be 0-4", severity: "error" });
+        }
+        if ("freshness_window" in tm && typeof tm.freshness_window === "number" && tm.freshness_window < 1) {
+            errors.push({ path: "trust_mesh.freshness_window", message: "must be >= 1", severity: "error" });
+        }
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+        warnings,
+    };
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU;IACnE,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAE,sBAAsB;IACtE,qBAAqB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,qBAAqB;IACjF,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,qBAAqB;IACrF,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe;IAC5E,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe;IACvD,cAAc,EAAE,YAAY,EAAE,QAAQ;IACtC,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY;IAClE,QAAQ,EAAE,SAAS,EAAE,SAAS;CAC/B,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,iBAAiB,EAAE,oBAAoB,EAAE,qBAAqB;IAC9D,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB;CACjE,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,MAAM,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,kBAAkB;IAClE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc;IAClE,qBAAqB,EAAE,cAAc;CACtC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,qBAAqB,EAAE,uBAAuB,EAAE,iBAAiB;CAClE,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO;CAChE,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,6BAA6B,EAAE,oBAAoB;IACnD,uBAAuB,EAAE,qBAAqB,EAAE,iBAAiB;CAClE,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,iBAAiB,EAAE,cAAc,EAAE,qBAAqB;IACxD,cAAc,EAAE,kBAAkB;IAClC,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB;IACrE,aAAa,EAAE,OAAO,EAAE,wBAAwB;CACjD,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAEvE,MAAM,eAAe,GAAgC;IACnD,MAAM,EAAE,iBAAiB;IACzB,UAAU,EAAE,qBAAqB;IACjC,QAAQ,EAAE,mBAAmB;IAC7B,cAAc,EAAE,yBAAyB;IACzC,UAAU,EAAE,qBAAqB;IACjC,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AAEF,SAAS,SAAS,CAAC,KAAc,EAAE,QAAgB,EAAE,IAAY,EAAE,MAAyB;IAC1F,IAAI,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,wBAAwB,OAAO,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,OAAO,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,wBAAwB,OAAO,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,GAAe,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC9B,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAClB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,SAAsB;IACrD,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,0BAA0B;IAC5C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;YAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,IAAI,GAAG,KAAK,CAAC;QAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAA4B;IACzD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,oDAAoD;IACpD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,UAAU;gBACpB,CAAC,CAAC,wCAAwC,UAAU,KAAK;gBACzD,CAAC,CAAC,uBAAuB,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,gBAAgB,IAAI,GAAG,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC;QAC9B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,MAAM,EAAE,GAAG,GAAG,CAAC,UAAiD,CAAC;IACjE,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,MAAM,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAc,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,wCAAwC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACjH,CAAC;QACD,IAAI,iBAAiB,IAAI,EAAE;YAAE,SAAS,CAAC,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,4BAA4B,EAAE,MAAM,CAAC,CAAC;QAC3G,IAAI,mBAAmB,IAAI,EAAE;YAAE,SAAS,CAAC,EAAE,CAAC,iBAAiB,EAAE,SAAS,EAAE,8BAA8B,EAAE,MAAM,CAAC,CAAC;QAClH,IAAI,kBAAkB,IAAI,EAAE;YAAE,SAAS,CAAC,EAAE,CAAC,gBAAgB,EAAE,QAAQ,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;QAC9G,IAAI,iBAAiB,IAAI,EAAE;YAAE,SAAS,CAAC,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,4BAA4B,EAAE,MAAM,CAAC,CAAC;QAC7G,IAAI,aAAa,IAAI,EAAE;YAAE,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC;IACnG,CAAC;IAED,2CAA2C;IAC3C,MAAM,EAAE,GAAG,GAAG,CAAC,QAA+C,CAAC;IAC/D,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,iBAAiB,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;YACjE,KAAK,MAAM,MAAM,IAAI,EAAE,CAAC,eAAe,EAAE,CAAC;gBACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzE,MAAM,KAAK,GAAG,CAAC,GAAG,yBAAyB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC/D,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,0BAA0B;wBAChC,OAAO,EAAE,+BAA+B,MAAM,aAAa,KAAK,EAAE;wBAClE,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAwC,CAAC;QAChE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,OAAO,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBACxF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,MAAM,GAAG,GAAG,GAAG,CAAC,UAAiD,CAAC;IAClE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,cAAc,IAAI,GAAG,EAAE,CAAC;YAC1B,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAClG,CAAC;iBAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,0CAA0C,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3H,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,IAAI,GAAG,EAAE,CAAC;YAC7B,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACrG,CAAC;iBAAM,IAAI,GAAG,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;QACD,IAAI,wBAAwB,IAAI,GAAG,EAAE,CAAC;YACpC,IAAI,OAAO,GAAG,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mCAAmC,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5G,CAAC;iBAAM,IAAI,GAAG,CAAC,sBAAsB,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mCAAmC,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QACD,IAAI,gBAAgB,IAAI,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC;QAC5G,IAAI,gBAAgB,IAAI,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC;QAC5G,IAAI,aAAa,IAAI,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC;QAClG,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1F,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAA4B,CAAC;oBACrD,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC;oBACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACtC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;wBAC7E,SAAS;oBACX,CAAC;oBACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACnC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC1F,CAAC;oBACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC/E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBACpG,CAAC;oBACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;wBACpC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC3F,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,GAAG,GAAG,GAAG,CAAC,MAA6C,CAAC;IAC9D,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,iBAAiB,IAAI,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC;QAC1G,IAAI,oBAAoB,IAAI,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC;QAClH,IAAI,kBAAkB,IAAI,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,yBAAyB,EAAE,MAAM,CAAC,CAAC;IAC/G,CAAC;IAED,2BAA2B;IAC3B,IAAI,aAAa,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,gBAAgB,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,GAAG,GAAG,EAAE,CAAC;QAClG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,aAAa,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,iBAAiB,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,eAAe,GAAG,CAAC,IAAI,EAAE,CAAC,eAAe,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5H,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,kBAAkB,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,gBAAgB,KAAK,QAAQ,IAAI,EAAE,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;YACnG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC"}