@the-ai-company/cbio-node-runtime 0.39.0 → 1.0.0

package/dist/vault-core/defaults.js

@@ -0,0 +1,602 @@
+import * as crypto from "node:crypto";
+import { verifySignature } from "../protocol/crypto.js";
+import { VaultCoreError } from "./errors.js";
+function canonicalizeHttpTarget(targetUrl, method) {
+    let parsed;
+    try {
+        parsed = new URL(targetUrl);
+    }
+    catch {
+        throw new VaultCoreError("target normalization failed", "VAULT_DISPATCH_DENIED");
+    }
+    if (parsed.username || parsed.password) {
+        throw new VaultCoreError("target credentials not allowed", "VAULT_DISPATCH_DENIED");
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        throw new VaultCoreError("target scheme denied", "VAULT_DISPATCH_DENIED");
+    }
+    if (!parsed.hostname) {
+        throw new VaultCoreError("target hostname missing", "VAULT_DISPATCH_DENIED");
+    }
+    parsed.protocol = parsed.protocol.toLowerCase();
+    parsed.hostname = parsed.hostname.toLowerCase();
+    parsed.hash = "";
+    parsed.search = "";
+    if ((parsed.protocol === "https:" && parsed.port === "443") || (parsed.protocol === "http:" && parsed.port === "80")) {
+        parsed.port = "";
+    }
+    const path = parsed.pathname || "/";
+    parsed.pathname = path;
+    return {
+        origin: parsed.origin,
+        url: parsed.toString(),
+        method: method.toUpperCase(),
+        path,
+    };
+}
+function canonicalizeAllowedTarget(targetUrl) {
+    return canonicalizeHttpTarget(targetUrl, "GET").url;
+}
+function createDispatchBinding(request) {
+    return JSON.stringify({
+        requestId: request.requestId,
+        requestedAt: request.requestedAt,
+        agentId: request.agent.id,
+        capabilityId: request.capability.capabilityId,
+        secretAlias: request.secretAlias ?? null,
+        targetUrl: request.targetUrl,
+        method: request.method,
+        body: request.body ?? null,
+    });
+}
+function createOwnerWriteBinding(command) {
+    return JSON.stringify({
+        requestId: command.requestId,
+        requestedAt: command.requestedAt,
+        ownerId: command.owner.id,
+        alias: command.alias,
+        plaintext: command.plaintext,
+        targetBindings: command.targetBindings,
+    });
+}
+function createOwnerAuditBinding(request) {
+    return JSON.stringify({
+        requestId: request.requestId,
+        requestedAt: request.requestedAt,
+        ownerId: request.actor.id,
+        query: request.query,
+    });
+}
+function createOwnerRegisterAgentBinding(command) {
+    return JSON.stringify({
+        requestId: command.requestId,
+        requestedAt: command.requestedAt,
+        ownerId: command.owner.id,
+        agentIdentity: command.agentIdentity,
+    });
+}
+function createOwnerRegisterOwnerBinding(command) {
+    return JSON.stringify({
+        requestId: command.requestId,
+        requestedAt: command.requestedAt,
+        ownerId: command.owner.id,
+        ownerIdentity: command.ownerIdentity,
+    });
+}
+function createOwnerRegisterCustomFlowBinding(command) {
+    return JSON.stringify({
+        requestId: command.requestId,
+        requestedAt: command.requestedAt,
+        ownerId: command.owner.id,
+        flow: command.flow,
+    });
+}
+export class SystemClock {
+    nowIso() {
+        return new Date().toISOString();
+    }
+}
+export class RandomIdGenerator {
+    newSecretId() {
+        return { value: `secret_${crypto.randomUUID()}` };
+    }
+    newVersion() {
+        return { value: `v_${crypto.randomUUID()}` };
+    }
+    newAuditEntryId() {
+        return `audit_${crypto.randomUUID()}`;
+    }
+}
+export class InMemorySecretRepository {
+    _byAlias = new Map();
+    _byId = new Map();
+    async save(record) {
+        this._byAlias.set(record.alias.value, record);
+        this._byId.set(record.secretId.value, record);
+    }
+    async delete(secretId) {
+        const existing = this._byId.get(secretId.value);
+        if (!existing) {
+            return;
+        }
+        this._byId.delete(secretId.value);
+        this._byAlias.delete(existing.alias.value);
+    }
+    async getByAlias(alias) {
+        return this._byAlias.get(alias.value) ?? null;
+    }
+    async getById(secretId) {
+        return this._byId.get(secretId.value) ?? null;
+    }
+}
+export class InMemoryAuditLog {
+    _entries = [];
+    async append(entry) {
+        this._entries.push(entry);
+    }
+    async query(query) {
+        return this._entries.filter((entry) => {
+            if (query.actorId && entry.actor.id !== query.actorId)
+                return false;
+            if (query.secretAlias && entry.secretAlias !== query.secretAlias)
+                return false;
+            if (query.requestId && entry.requestId !== query.requestId)
+                return false;
+            if (query.since && entry.occurredAt < query.since)
+                return false;
+            return true;
+        });
+    }
+}
+export class InMemorySecretCustody {
+    _plaintextById = new Map();
+    async store(secretId, plaintext) {
+        this._plaintextById.set(secretId.value, plaintext);
+    }
+    async load(secretId) {
+        return this._plaintextById.get(secretId.value) ?? null;
+    }
+    async delete(secretId) {
+        this._plaintextById.delete(secretId.value);
+    }
+}
+export class InMemoryAgentIdentityRegistry {
+    _identities = new Map();
+    async register(identity) {
+        this._identities.set(`${identity.vaultId.value}:${identity.agentId}`, identity);
+    }
+    async get(vaultId, agentId) {
+        return this._identities.get(`${vaultId.value}:${agentId}`) ?? null;
+    }
+}
+export class InMemoryOwnerIdentityRegistry {
+    _identities = new Map();
+    async register(identity) {
+        this._identities.set(`${identity.vaultId.value}:${identity.ownerId}`, identity);
+    }
+    async get(vaultId, ownerId) {
+        return this._identities.get(`${vaultId.value}:${ownerId}`) ?? null;
+    }
+    async hasAny(vaultId) {
+        const prefix = `${vaultId.value}:`;
+        return Array.from(this._identities.keys()).some((key) => key.startsWith(prefix));
+    }
+}
+export class InMemoryCapabilityRevocationRegistry {
+    _versions = new Map();
+    revoke(vaultId, agentId, capabilityId) {
+        const key = `${vaultId.value}:${agentId}:${capabilityId}`;
+        const next = (this._versions.get(key) ?? 0) + 1;
+        this._versions.set(key, next);
+        return next;
+    }
+    get(vaultId, agentId, capabilityId) {
+        return this._versions.get(`${vaultId.value}:${agentId}:${capabilityId}`) ?? 0;
+    }
+}
+export class InMemoryCustomHttpFlowRegistry {
+    _flows = new Map();
+    async register(flow) {
+        this._flows.set(`${flow.vaultId.value}:${flow.flowId}`, flow);
+    }
+    async get(vaultId, flowId) {
+        return this._flows.get(`${vaultId.value}:${flowId}`) ?? null;
+    }
+}
+export class InMemoryRateLimitStore {
+    _buckets = new Map();
+    async consume(key, maxRequests, windowMs, nowMs) {
+        const current = this._buckets.get(key);
+        if (!current || nowMs >= current.resetAt) {
+            this._buckets.set(key, {
+                count: 1,
+                resetAt: nowMs + windowMs,
+            });
+            return;
+        }
+        if (current.count >= maxRequests) {
+            throw new VaultCoreError("capability rate limit exceeded", "VAULT_DISPATCH_DENIED");
+        }
+        current.count += 1;
+    }
+}
+export class DefaultPolicyEngine {
+    _options;
+    _rateLimitStore;
+    constructor(_options = {}) {
+        this._options = _options;
+        this._rateLimitStore = this._options.rateLimitStore ?? new InMemoryRateLimitStore();
+    }
+    validateRequestedAt(requestedAt, fieldName) {
+        const parsed = Date.parse(requestedAt);
+        if (Number.isNaN(parsed)) {
+            throw new VaultCoreError(`${fieldName} invalid`, "VAULT_WRITE_DENIED");
+        }
+    }
+    async isTrustedIssuer(issuerId) {
+        if (this._options.trustedIssuerIdResolver) {
+            return await this._options.trustedIssuerIdResolver(issuerId);
+        }
+        if (this._options.trustedIssuerIds) {
+            return this._options.trustedIssuerIds.includes(issuerId);
+        }
+        return false;
+    }
+    validateTargetBindings(bindings, code) {
+        if (bindings.length === 0) {
+            throw new VaultCoreError("target bindings required", code);
+        }
+        for (const binding of bindings) {
+            if (!binding.targetId?.trim()) {
+                throw new VaultCoreError("target binding id required", code);
+            }
+            if (binding.kind === "site") {
+                if (!binding.targetUrl) {
+                    throw new VaultCoreError("site target url required", code);
+                }
+                canonicalizeAllowedTarget(binding.targetUrl);
+            }
+            if (binding.methods?.length === 0) {
+                throw new VaultCoreError("empty target methods denied", code);
+            }
+            if (binding.paths?.length === 0) {
+                throw new VaultCoreError("empty target paths denied", code);
+            }
+        }
+    }
+    async assertCapabilityRateLimit(request) {
+        const rateLimit = request.capability.rateLimit;
+        if (!rateLimit) {
+            return;
+        }
+        if (!Number.isInteger(rateLimit.maxRequests) || rateLimit.maxRequests <= 0) {
+            throw new VaultCoreError("capability rate limit invalid", "VAULT_DISPATCH_DENIED");
+        }
+        if (!Number.isInteger(rateLimit.windowMs) || rateLimit.windowMs <= 0) {
+            throw new VaultCoreError("capability rate limit invalid", "VAULT_DISPATCH_DENIED");
+        }
+        const now = this._options.now?.().getTime() ?? Date.now();
+        const key = `${request.vaultId.value}:${request.agent.id}:${request.capability.capabilityId}`;
+        await this._rateLimitStore.consume(key, rateLimit.maxRequests, rateLimit.windowMs, now);
+    }
+    async authorizeWrite(command) {
+        if (!command.alias.trim()) {
+            throw new VaultCoreError("secret alias required", "VAULT_WRITE_DENIED");
+        }
+        if (!command.plaintext) {
+            throw new VaultCoreError("secret plaintext required", "VAULT_WRITE_DENIED");
+        }
+        this.validateRequestedAt(command.requestedAt, "requestedAt");
+        if (command.kind === "owner.write_secret") {
+            if (!command.owner.id.trim()) {
+                throw new VaultCoreError("owner id required", "VAULT_WRITE_DENIED");
+            }
+            this.validateTargetBindings(command.targetBindings, "VAULT_WRITE_DENIED");
+            return;
+        }
+        if (command.issuer.id !== command.issuerSiteId) {
+            throw new VaultCoreError("issuer identity mismatch", "VAULT_WRITE_DENIED");
+        }
+        if (!await this.isTrustedIssuer(command.issuer.id)) {
+            throw new VaultCoreError("trusted issuer required", "VAULT_WRITE_DENIED");
+        }
+        if (!command.targetBindings?.length) {
+            throw new VaultCoreError("trusted issuer target bindings required", "VAULT_WRITE_DENIED");
+        }
+        this.validateTargetBindings(command.targetBindings, "VAULT_WRITE_DENIED");
+    }
+    async authorizeDispatch(request, record) {
+        const now = this._options.now?.() ?? new Date();
+        const canonicalRequestTarget = canonicalizeHttpTarget(request.targetUrl, request.method);
+        if (request.capability.vaultId.value !== request.vaultId.value) {
+            throw new VaultCoreError("capability vault mismatch", "VAULT_DISPATCH_DENIED");
+        }
+        if (record && record.vaultId.value !== request.vaultId.value) {
+            throw new VaultCoreError("record vault mismatch", "VAULT_DISPATCH_DENIED");
+        }
+        if (request.capability.expiresAt) {
+            const expiresAt = Date.parse(request.capability.expiresAt);
+            if (Number.isNaN(expiresAt) || expiresAt < now.getTime()) {
+                throw new VaultCoreError("capability expired", "VAULT_DISPATCH_DENIED");
+            }
+        }
+        if (request.capability.agentId !== request.agent.id) {
+            throw new VaultCoreError("capability agent mismatch", "VAULT_DISPATCH_DENIED");
+        }
+        if (request.capability.operation !== "dispatch_http" && request.capability.operation !== "custom_http") {
+            throw new VaultCoreError("operation denied", "VAULT_DISPATCH_DENIED");
+        }
+        const issuedAt = Date.parse(request.capability.issuedAt);
+        if (Number.isNaN(issuedAt) || issuedAt > now.getTime()) {
+            throw new VaultCoreError("capability issuedAt invalid", "VAULT_DISPATCH_DENIED");
+        }
+        if (record) {
+            if (request.capability.secretIds?.length) {
+                if (!request.capability.secretIds.includes(record.secretId.value)) {
+                    throw new VaultCoreError("secret id denied", "VAULT_DISPATCH_DENIED");
+                }
+            }
+            else if (request.capability.secretAliases?.length && !request.capability.secretAliases.includes(record.alias.value)) {
+                throw new VaultCoreError("secret alias denied", "VAULT_DISPATCH_DENIED");
+            }
+        }
+        else {
+            if (request.capability.operation !== "custom_http") {
+                throw new VaultCoreError("secret alias required", "VAULT_DISPATCH_DENIED");
+            }
+            if (request.capability.secretIds?.length || request.capability.secretAliases?.length) {
+                throw new VaultCoreError("secret scope denied", "VAULT_DISPATCH_DENIED");
+            }
+        }
+        if (!request.capability.allowedTargets.some((target) => canonicalizeAllowedTarget(target) === canonicalRequestTarget.url)) {
+            throw new VaultCoreError("target denied", "VAULT_DISPATCH_DENIED");
+        }
+        if (!request.capability.allowedMethods.includes(canonicalRequestTarget.method)) {
+            throw new VaultCoreError("method denied", "VAULT_DISPATCH_DENIED");
+        }
+        if (request.capability.allowedPaths?.length && !request.capability.allowedPaths.includes(canonicalRequestTarget.path)) {
+            throw new VaultCoreError("path denied", "VAULT_DISPATCH_DENIED");
+        }
+        const currentRevocationVersion = this._options.capabilityRevocationRegistry
+            ? await this._options.capabilityRevocationRegistry.get(request.capability.vaultId, request.capability.agentId, request.capability.capabilityId)
+            : 0;
+        if ((request.capability.revocationVersion ?? 0) < currentRevocationVersion) {
+            throw new VaultCoreError("capability revoked", "VAULT_DISPATCH_DENIED");
+        }
+        if (record) {
+            const targetAllowed = record.targetBindings.some((binding) => {
+                if (binding.kind === "owner") {
+                    return binding.targetId === canonicalRequestTarget.url;
+                }
+                if (binding.targetUrl && canonicalizeAllowedTarget(binding.targetUrl) !== canonicalRequestTarget.url)
+                    return false;
+                if (binding.methods?.length && !binding.methods.includes(canonicalRequestTarget.method))
+                    return false;
+                if (binding.paths?.length && !binding.paths.includes(canonicalRequestTarget.path))
+                    return false;
+                return true;
+            });
+            if (!targetAllowed) {
+                throw new VaultCoreError("record target denied", "VAULT_DISPATCH_DENIED");
+            }
+        }
+        await this.assertCapabilityRateLimit(request);
+    }
+}
+export class SignatureAgentProofVerifier {
+    _maxSkewMs;
+    _now;
+    _agentIdentities;
+    constructor(agentIdentities, options = {}) {
+        this._agentIdentities = agentIdentities;
+        this._maxSkewMs = options.maxSkewMs ?? (5 * 60 * 1000);
+        this._now = options.now ?? (() => new Date());
+    }
+    async verify(request) {
+        if (request.proof.agentId !== request.agent.id) {
+            throw new VaultCoreError("proof agent mismatch", "VAULT_DISPATCH_DENIED");
+        }
+        if (request.proof.requestId !== request.requestId || request.proof.requestedAt !== request.requestedAt) {
+            throw new VaultCoreError("proof binding mismatch", "VAULT_DISPATCH_DENIED");
+        }
+        const requestedAt = Date.parse(request.requestedAt);
+        if (Number.isNaN(requestedAt) || Math.abs(this._now().getTime() - requestedAt) > this._maxSkewMs) {
+            throw new VaultCoreError("proof timestamp out of range", "VAULT_DISPATCH_DENIED");
+        }
+        const registeredIdentity = await this._agentIdentities.get(request.vaultId, request.agent.id);
+        if (!registeredIdentity) {
+            throw new VaultCoreError("agent identity not registered", "VAULT_DISPATCH_DENIED");
+        }
+        const binding = createDispatchBinding(request);
+        if (!verifySignature(registeredIdentity.publicKey, request.proof.signature, binding)) {
+            throw new VaultCoreError("invalid proof signature", "VAULT_DISPATCH_DENIED");
+        }
+    }
+}
+export class SignatureOwnerProofVerifier {
+    _maxSkewMs;
+    _now;
+    _ownerIdentities;
+    constructor(ownerIdentities, options = {}) {
+        this._ownerIdentities = ownerIdentities;
+        this._maxSkewMs = options.maxSkewMs ?? (5 * 60 * 1000);
+        this._now = options.now ?? (() => new Date());
+    }
+    async verifyBinding(ownerId, vaultId, requestedAt, signature, binding) {
+        const parsedRequestedAt = Date.parse(requestedAt);
+        if (Number.isNaN(parsedRequestedAt) || Math.abs(this._now().getTime() - parsedRequestedAt) > this._maxSkewMs) {
+            throw new VaultCoreError("owner proof timestamp out of range", "VAULT_AUDIT_DENIED");
+        }
+        const registeredIdentity = await this._ownerIdentities.get(vaultId, ownerId);
+        if (!registeredIdentity) {
+            throw new VaultCoreError("owner identity not registered", "VAULT_AUDIT_DENIED");
+        }
+        if (!verifySignature(registeredIdentity.publicKey, signature, binding)) {
+            throw new VaultCoreError("invalid owner proof signature", "VAULT_AUDIT_DENIED");
+        }
+    }
+    async verifyWrite(command) {
+        if (command.proof.ownerId !== command.owner.id) {
+            throw new VaultCoreError("owner proof identity mismatch", "VAULT_WRITE_DENIED");
+        }
+        if (command.proof.requestId !== command.requestId || command.proof.requestedAt !== command.requestedAt) {
+            throw new VaultCoreError("owner proof binding mismatch", "VAULT_WRITE_DENIED");
+        }
+        const binding = createOwnerWriteBinding(command);
+        try {
+            await this.verifyBinding(command.owner.id, command.vaultId, command.requestedAt, command.proof.signature, binding);
+        }
+        catch (error) {
+            if (error instanceof VaultCoreError && error.code === "VAULT_AUDIT_DENIED") {
+                throw new VaultCoreError(error.message, "VAULT_WRITE_DENIED");
+            }
+            throw error;
+        }
+    }
+    async verifyAudit(request) {
+        if (request.proof.ownerId !== request.actor.id) {
+            throw new VaultCoreError("owner proof identity mismatch", "VAULT_AUDIT_DENIED");
+        }
+        if (request.proof.requestId !== request.requestId || request.proof.requestedAt !== request.requestedAt) {
+            throw new VaultCoreError("owner proof binding mismatch", "VAULT_AUDIT_DENIED");
+        }
+        await this.verifyBinding(request.actor.id, request.vaultId, request.requestedAt, request.proof.signature, createOwnerAuditBinding(request));
+    }
+    async verifyRegisterAgentIdentity(command) {
+        if (command.proof.ownerId !== command.owner.id) {
+            throw new VaultCoreError("owner proof identity mismatch", "VAULT_IDENTITY_DENIED");
+        }
+        if (command.proof.requestId !== command.requestId || command.proof.requestedAt !== command.requestedAt) {
+            throw new VaultCoreError("owner proof binding mismatch", "VAULT_IDENTITY_DENIED");
+        }
+        try {
+            await this.verifyBinding(command.owner.id, command.vaultId, command.requestedAt, command.proof.signature, createOwnerRegisterAgentBinding(command));
+        }
+        catch (error) {
+            if (error instanceof VaultCoreError && error.code === "VAULT_AUDIT_DENIED") {
+                throw new VaultCoreError(error.message, "VAULT_IDENTITY_DENIED");
+            }
+            throw error;
+        }
+    }
+    async verifyRegisterOwnerIdentity(command) {
+        if (command.proof.ownerId !== command.owner.id) {
+            throw new VaultCoreError("owner proof identity mismatch", "VAULT_IDENTITY_DENIED");
+        }
+        if (command.proof.requestId !== command.requestId || command.proof.requestedAt !== command.requestedAt) {
+            throw new VaultCoreError("owner proof binding mismatch", "VAULT_IDENTITY_DENIED");
+        }
+        try {
+            await this.verifyBinding(command.owner.id, command.vaultId, command.requestedAt, command.proof.signature, createOwnerRegisterOwnerBinding(command));
+        }
+        catch (error) {
+            if (error instanceof VaultCoreError && error.code === "VAULT_AUDIT_DENIED") {
+                throw new VaultCoreError(error.message, "VAULT_IDENTITY_DENIED");
+            }
+            throw error;
+        }
+    }
+    async verifyRegisterCustomFlow(command) {
+        if (command.proof.ownerId !== command.owner.id) {
+            throw new VaultCoreError("owner proof identity mismatch", "VAULT_IDENTITY_DENIED");
+        }
+        if (command.proof.requestId !== command.requestId || command.proof.requestedAt !== command.requestedAt) {
+            throw new VaultCoreError("owner proof binding mismatch", "VAULT_IDENTITY_DENIED");
+        }
+        try {
+            await this.verifyBinding(command.owner.id, command.vaultId, command.requestedAt, command.proof.signature, createOwnerRegisterCustomFlowBinding(command));
+        }
+        catch (error) {
+            if (error instanceof VaultCoreError && error.code === "VAULT_AUDIT_DENIED") {
+                throw new VaultCoreError(error.message, "VAULT_IDENTITY_DENIED");
+            }
+            throw error;
+        }
+    }
+}
+export class InMemoryReplayGuard {
+    _seen = new Map();
+    _ttlMs;
+    _now;
+    constructor(options = {}) {
+        this._ttlMs = options.maxSkewMs ?? (5 * 60 * 1000);
+        this._now = options.now ?? (() => new Date());
+    }
+    async assertNotReplayed(request) {
+        const now = this._now().getTime();
+        for (const [key, seenAt] of this._seen.entries()) {
+            if (now - seenAt > this._ttlMs) {
+                this._seen.delete(key);
+            }
+        }
+        const replayKey = `${request.agent.id}:${request.requestId}`;
+        if (this._seen.has(replayKey)) {
+            throw new VaultCoreError("request replay detected", "VAULT_DISPATCH_DENIED");
+        }
+        this._seen.set(replayKey, now);
+    }
+}
+export class HttpDispatchExecutor {
+    _fetchImpl;
+    _authHeaderName;
+    _authPrefix;
+    constructor(_fetchImpl = fetch, _authHeaderName = "Authorization", _authPrefix = "Bearer ") {
+        this._fetchImpl = _fetchImpl;
+        this._authHeaderName = _authHeaderName;
+        this._authPrefix = _authPrefix;
+    }
+    async dispatch(instruction, secret) {
+        try {
+            const response = await this._fetchImpl(instruction.targetUrl, {
+                method: instruction.method,
+                headers: {
+                    ...(instruction.headers ?? {}),
+                    [this._authHeaderName]: `${this._authPrefix}${secret.plaintext}`,
+                },
+                body: instruction.body,
+            });
+            return {
+                vaultId: instruction.vaultId,
+                requestId: instruction.requestId,
+                status: response.ok ? "succeeded" : "failed",
+                targetUrl: instruction.targetUrl,
+                method: instruction.method,
+                responseStatus: response.status,
+                responseBody: await response.text(),
+                error: response.ok ? undefined : `HTTP_${response.status}`,
+            };
+        }
+        catch (error) {
+            return {
+                vaultId: instruction.vaultId,
+                requestId: instruction.requestId,
+                status: "failed",
+                targetUrl: instruction.targetUrl,
+                method: instruction.method,
+                error: error instanceof Error ? error.message : String(error),
+            };
+        }
+    }
+}
+export function createDefaultVaultCoreDependencies(options = {}) {
+    const agentIdentities = new InMemoryAgentIdentityRegistry();
+    const ownerIdentities = new InMemoryOwnerIdentityRegistry();
+    const vaultId = { value: options.vaultId ?? `vault_${crypto.randomUUID()}` };
+    return {
+        vaultId,
+        secrets: new InMemorySecretRepository(),
+        custody: new InMemorySecretCustody(),
+        policy: new DefaultPolicyEngine(options.policy),
+        audit: new InMemoryAuditLog(),
+        executor: new HttpDispatchExecutor(options.fetchImpl, options.authHeaderName, options.authPrefix),
+        agentIdentities,
+        ownerIdentities,
+        proofVerifier: new SignatureAgentProofVerifier(agentIdentities, options.proofVerifier),
+        ownerProofVerifier: new SignatureOwnerProofVerifier(ownerIdentities, options.proofVerifier),
+        customFlows: new InMemoryCustomHttpFlowRegistry(),
+        replayGuard: new InMemoryReplayGuard(options.proofVerifier),
+        clock: new SystemClock(),
+        ids: new RandomIdGenerator(),
+    };
+}
+//# sourceMappingURL=defaults.js.map

package/dist/vault-core/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/vault-core/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAoBxD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AA4C7C,SAAS,sBAAsB,CAAC,SAAiB,EAAE,MAAc;IAC/D,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,6BAA6B,EAAE,uBAAuB,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,cAAc,CAAC,gCAAgC,EAAE,uBAAuB,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,cAAc,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACrH,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAC;IACpC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;QAC5B,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,SAAiB;IAClD,OAAO,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC;AACtD,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAwB;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY;QAC7C,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAkG;IAElG,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA0B;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,+BAA+B,CAAC,OAA0C;IACjF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,+BAA+B,CAAC,OAA0C;IACjF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oCAAoC,CAAC,OAA2C;IACvF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,WAAW;IACtB,MAAM;QACJ,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IAC5B,WAAW;QACT,OAAO,EAAE,KAAK,EAAE,UAAU,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IAED,UAAU;QACR,OAAO,EAAE,KAAK,EAAE,KAAK,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC;IAC/C,CAAC;IAED,eAAe;QACb,OAAO,SAAS,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,wBAAwB;IAClB,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEzD,KAAK,CAAC,IAAI,CAAC,MAAoB;QAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAkB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAkB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAkB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAChD,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IACV,QAAQ,GAAiB,EAAE,CAAC;IAE7C,KAAK,CAAC,MAAM,CAAC,KAAiB;QAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpC,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YACpE,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;gBAAE,OAAO,KAAK,CAAC;YAC/E,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACzE,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,OAAO,qBAAqB;IACf,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE5D,KAAK,CAAC,KAAK,CAAC,QAAkB,EAAE,SAAiB;QAC/C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkB;QAC3B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAkB;QAC7B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,OAAO,6BAA6B;IACvB,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEtE,KAAK,CAAC,QAAQ,CAAC,QAA6B;QAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAgB,EAAE,OAAe;QACzC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC,IAAI,IAAI,CAAC;IACrE,CAAC;CACF;AAED,MAAM,OAAO,6BAA6B;IACvB,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEtE,KAAK,CAAC,QAAQ,CAAC,QAA6B;QAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAgB,EAAE,OAAe;QACzC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC,IAAI,IAAI,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC;QACnC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACnF,CAAC;CACF;AAED,MAAM,OAAO,oCAAoC;IAC9B,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEvD,MAAM,CAAC,OAAgB,EAAE,OAAe,EAAE,YAAoB;QAC5D,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,OAAgB,EAAE,OAAe,EAAE,YAAoB;QACzD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;CACF;AAED,MAAM,OAAO,8BAA8B;IACxB,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;IAEtE,KAAK,CAAC,QAAQ,CAAC,IAA8B;QAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAgB,EAAE,MAAc;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,IAAI,IAAI,CAAC;IAC/D,CAAC;CACF;AAED,MAAM,OAAO,sBAAsB;IAChB,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE/D,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,WAAmB,EAAE,QAAgB,EAAE,KAAa;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;gBACrB,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,KAAK,GAAG,QAAQ;aAC1B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,cAAc,CAAC,gCAAgC,EAAE,uBAAuB,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;IACrB,CAAC;CACF;AAED,MAAM,OAAO,mBAAmB;IAGD;IAFZ,eAAe,CAAiB;IAEjD,YAA6B,WAAuC,EAAE;QAAzC,aAAQ,GAAR,QAAQ,CAAiC;QACpE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,IAAI,sBAAsB,EAAE,CAAC;IACtF,CAAC;IAEO,mBAAmB,CAAC,WAAmB,EAAE,SAAiB;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,cAAc,CAAC,GAAG,SAAS,UAAU,EAAE,oBAAoB,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,QAAgB;QAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,uBAAuB,EAAE,CAAC;YAC1C,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,sBAAsB,CAAC,QAAuC,EAAE,IAAoD;QAC1H,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,cAAc,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,cAAc,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBACvB,MAAM,IAAI,cAAc,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;gBAC7D,CAAC;gBACD,yBAAyB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,cAAc,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,cAAc,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,OAAwB;QAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QAC9F,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAyD;QAC5E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,cAAc,CAAC,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7B,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/C,MAAM,IAAI,cAAc,CAAC,0BAA0B,EAAE,oBAAoB,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,cAAc,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,cAAc,CAAC,yCAAyC,EAAE,oBAAoB,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAwB,EAAE,MAA4B;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QAChD,MAAM,sBAAsB,GAAG,sBAAsB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/D,MAAM,IAAI,cAAc,CAAC,2BAA2B,EAAE,uBAAuB,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC7D,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBACzD,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,cAAc,CAAC,2BAA2B,EAAE,uBAAuB,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,KAAK,eAAe,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;YACvG,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,MAAM,IAAI,cAAc,CAAC,6BAA6B,EAAE,uBAAuB,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;gBACzC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClE,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtH,MAAM,IAAI,cAAc,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;gBACnD,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC;gBACrF,MAAM,IAAI,cAAc,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1H,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACtH,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,wBAAwB,GAAG,IAAI,CAAC,QAAQ,CAAC,4BAA4B;YACzE,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,GAAG,CACpD,OAAO,CAAC,UAAU,CAAC,OAAO,EAC1B,OAAO,CAAC,UAAU,CAAC,OAAO,EAC1B,OAAO,CAAC,UAAU,CAAC,YAAY,CAChC;YACD,CAAC,CAAC,CAAC,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,wBAAwB,EAAE,CAAC;YAC3E,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC3D,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC7B,OAAO,OAAO,CAAC,QAAQ,KAAK,sBAAsB,CAAC,GAAG,CAAC;gBACzD,CAAC;gBACD,IAAI,OAAO,CAAC,SAAS,IAAI,yBAAyB,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,sBAAsB,CAAC,GAAG;oBAAE,OAAO,KAAK,CAAC;gBACnH,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,MAAM,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACtG,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAChG,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,cAAc,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,OAAO,2BAA2B;IACrB,UAAU,CAAS;IACnB,IAAI,CAAa;IACjB,gBAAgB,CAAwB;IAEzD,YAAY,eAAsC,EAAE,UAA8C,EAAE;QAClG,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAwB;QACnC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,cAAc,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YACvG,MAAM,IAAI,cAAc,CAAC,wBAAwB,EAAE,uBAAuB,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACjG,MAAM,IAAI,cAAc,CAAC,8BAA8B,EAAE,uBAAuB,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,cAAc,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,2BAA2B;IACrB,UAAU,CAAS;IACnB,IAAI,CAAa;IACjB,gBAAgB,CAAwB;IAEzD,YAAY,eAAsC,EAAE,UAA8C,EAAE;QAClG,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,OAAgB,EAAE,WAAmB,EAAE,SAAiB,EAAE,OAAe;QACpH,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7G,MAAM,IAAI,cAAc,CAAC,oCAAoC,EAAE,oBAAoB,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7E,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,oBAAoB,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,oBAAoB,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAkG;QAClH,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,oBAAoB,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YACvG,MAAM,IAAI,cAAc,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC3E,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA0B;QAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,oBAAoB,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YACvG,MAAM,IAAI,cAAc,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,CACtB,OAAO,CAAC,KAAK,CAAC,EAAE,EAChB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,KAAK,CAAC,SAAS,EACvB,uBAAuB,CAAC,OAAO,CAAC,CACjC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,OAA0C;QAC1E,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YACvG,MAAM,IAAI,cAAc,CAAC,8BAA8B,EAAE,uBAAuB,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CACtB,OAAO,CAAC,KAAK,CAAC,EAAE,EAChB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,KAAK,CAAC,SAAS,EACvB,+BAA+B,CAAC,OAAO,CAAC,CACzC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC3E,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,OAA0C;QAC1E,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YACvG,MAAM,IAAI,cAAc,CAAC,8BAA8B,EAAE,uBAAuB,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CACtB,OAAO,CAAC,KAAK,CAAC,EAAE,EAChB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,KAAK,CAAC,SAAS,EACvB,+BAA+B,CAAC,OAAO,CAAC,CACzC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC3E,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAA2C;QACxE,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YACvG,MAAM,IAAI,cAAc,CAAC,8BAA8B,EAAE,uBAAuB,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CACtB,OAAO,CAAC,KAAK,CAAC,EAAE,EAChB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,KAAK,CAAC,SAAS,EACvB,oCAAoC,CAAC,OAAO,CAAC,CAC9C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC3E,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,mBAAmB;IACb,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClC,MAAM,CAAS;IACf,IAAI,CAAa;IAElC,YAAY,UAA8C,EAAE;QAC1D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAwB;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7D,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,cAAc,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,oBAAoB;IAEZ;IACA;IACA;IAHnB,YACmB,aAA2B,KAAK,EAChC,kBAAkB,eAAe,EACjC,cAAc,SAAS;QAFvB,eAAU,GAAV,UAAU,CAAsB;QAChC,oBAAe,GAAf,eAAe,CAAkB;QACjC,gBAAW,GAAX,WAAW,CAAY;IACvC,CAAC;IAEJ,KAAK,CAAC,QAAQ,CACZ,WAAgC,EAChC,MAAmD;QAEnD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC5D,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,OAAO,EAAE;oBACP,GAAG,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;oBAC9B,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,SAAS,EAAE;iBACjE;gBACD,IAAI,EAAE,WAAW,CAAC,IAAI;aACvB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;gBAC5C,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,cAAc,EAAE,QAAQ,CAAC,MAAM;gBAC/B,YAAY,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE;gBACnC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE;aAC3D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAYD,MAAM,UAAU,kCAAkC,CAChD,UAAqD,EAAE;IAiBvD,MAAM,eAAe,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAC5D,MAAM,eAAe,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC;IAC7E,OAAO;QACL,OAAO;QACP,OAAO,EAAE,IAAI,wBAAwB,EAAE;QACvC,OAAO,EAAE,IAAI,qBAAqB,EAAE;QACpC,MAAM,EAAE,IAAI,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;QAC/C,KAAK,EAAE,IAAI,gBAAgB,EAAE;QAC7B,QAAQ,EAAE,IAAI,oBAAoB,CAChC,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,UAAU,CACnB;QACD,eAAe;QACf,eAAe;QACf,aAAa,EAAE,IAAI,2BAA2B,CAAC,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC;QACtF,kBAAkB,EAAE,IAAI,2BAA2B,CAAC,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC;QAC3F,WAAW,EAAE,IAAI,8BAA8B,EAAE;QACjD,WAAW,EAAE,IAAI,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC;QAC3D,KAAK,EAAE,IAAI,WAAW,EAAE;QACxB,GAAG,EAAE,IAAI,iBAAiB,EAAE;KAC7B,CAAC;AACJ,CAAC"}

package/dist/vault-core/errors.d.ts

@@ -0,0 +1,4 @@
+export declare class VaultCoreError extends Error {
+    readonly code: "VAULT_SECRET_NOT_FOUND" | "VAULT_WRITE_DENIED" | "VAULT_IDENTITY_DENIED" | "VAULT_DISPATCH_DENIED" | "VAULT_AUDIT_DENIED" | "VAULT_AUDIT_FAILED";
+    constructor(message: string, code: "VAULT_SECRET_NOT_FOUND" | "VAULT_WRITE_DENIED" | "VAULT_IDENTITY_DENIED" | "VAULT_DISPATCH_DENIED" | "VAULT_AUDIT_DENIED" | "VAULT_AUDIT_FAILED");
+}

package/dist/vault-core/errors.js

@@ -0,0 +1,9 @@
+export class VaultCoreError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = "VaultCoreError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/vault-core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/vault-core/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,cAAe,SAAQ,KAAK;IAG5B;IAFX,YACE,OAAe,EACN,IAMe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QARN,SAAI,GAAJ,IAAI,CAMW;QAGxB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF"}