@twin.org/rights-management-plugins 0.0.3-next.26 → 0.0.3-next.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (20) hide show
  1. package/dist/es/policyArbiters/defaultPolicyArbiter.js +60 -6
  2. package/dist/es/policyArbiters/defaultPolicyArbiter.js.map +1 -1
  3. package/dist/es/policyExecutionActions/loggingPolicyExecutionAction.js.map +1 -1
  4. package/dist/es/policyInformationSources/identityPolicyInformationSource.js.map +1 -1
  5. package/dist/es/policyInformationSources/staticPolicyInformationSource.js.map +1 -1
  6. package/dist/es/policyObligationEnforcers/passThroughPolicyObligationEnforcer.js.map +1 -1
  7. package/dist/types/policyArbiters/defaultPolicyArbiter.d.ts +6 -0
  8. package/dist/types/policyExecutionActions/loggingPolicyExecutionAction.d.ts +2 -3
  9. package/dist/types/policyInformationSources/identityPolicyInformationSource.d.ts +2 -3
  10. package/dist/types/policyInformationSources/staticPolicyInformationSource.d.ts +2 -3
  11. package/dist/types/policyObligationEnforcers/passThroughPolicyObligationEnforcer.d.ts +2 -3
  12. package/docs/changelog.md +44 -0
  13. package/docs/examples.md +29 -0
  14. package/docs/reference/classes/DefaultPolicyArbiter.md +10 -0
  15. package/docs/reference/classes/IdentityPolicyInformationSource.md +1 -1
  16. package/docs/reference/classes/LoggingPolicyExecutionAction.md +1 -1
  17. package/docs/reference/classes/PassThroughPolicyObligationEnforcer.md +1 -1
  18. package/docs/reference/classes/StaticPolicyInformationSource.md +1 -1
  19. package/locales/en.json +2 -1
  20. package/package.json +2 -2
package/dist/es/policyArbiters/defaultPolicyArbiter.js CHANGED
@@ -1,8 +1,8 @@
1
1
  // Copyright 2025 IOTA Stiftung.
2
2
  // SPDX-License-Identifier: Apache-2.0.
3
- import { ArrayHelper, Coerce, ComponentFactory, GeneralError, Guards, Is, ObjectHelper } from "@twin.org/core";
3
+ import { ArrayHelper, Coerce, ComponentFactory, GeneralError, Guards, Is, ObjectHelper, StringHelper } from "@twin.org/core";
4
4
  import { JsonPathHelper } from "@twin.org/data-json-path";
5
- import { OdrlPolicyHelper, PolicyDecision, PolicyObligationEnforcerFactory } from "@twin.org/rights-management-models";
5
+ import { OdrlPolicyHelper, OdrlProfiles, PolicyDecision, PolicyObligationEnforcerFactory } from "@twin.org/rights-management-models";
6
6
  import { OdrlConflictStrategyType, OdrlLogicalConstraintType, OdrlOperatorType, OdrlTypes } from "@twin.org/standards-w3c-odrl";
7
7
  /**
8
8
  * Default Policy Arbiter.
@@ -12,6 +12,12 @@ export class DefaultPolicyArbiter {
12
12
  * The class name of the Default Policy Arbiter.
13
13
  */
14
14
  static CLASS_NAME = "DefaultPolicyArbiter";
15
+ /**
16
+ * ODRL profiles whose custom vocabulary this arbiter understands and supports.
17
+ * Any policy declaring a profile not in this set will be rejected.
18
+ * Add a new entry here when support for an additional profile is implemented.
19
+ */
20
+ static SUPPORTED_PROFILES = new Set([OdrlProfiles.Twin]);
15
21
  /**
16
22
  * Default maximum inheritance depth.
17
23
  * @internal
@@ -58,6 +64,26 @@ export class DefaultPolicyArbiter {
58
64
  Coerce.integer(options?.config?.maxInheritanceDepth) ??
59
65
  DefaultPolicyArbiter._DEFAULT_MAX_INHERITANCE_DEPTH;
60
66
  }
67
+ /**
68
+ * Normalises a profile IRI for comparison against the supported-profiles allowlist.
69
+ * Per RFC 3986: scheme and host are case-insensitive (the URL constructor folds them to
70
+ * lowercase automatically); a trailing slash on the terminal path segment is treated as
71
+ * equivalent to its absence; repeated slashes in the path are collapsed to a single slash.
72
+ * Non-URL strings are returned unchanged.
73
+ * @param iri The IRI to normalise.
74
+ * @returns The normalised IRI.
75
+ * @internal
76
+ */
77
+ static normalizeProfileIri(iri) {
78
+ try {
79
+ const url = new URL(iri);
80
+ const pathname = url.pathname.replace(/\/+/g, "/");
81
+ return `${url.protocol}//${url.host}${StringHelper.trimTrailingSlashes(pathname)}`;
82
+ }
83
+ catch {
84
+ return iri;
85
+ }
86
+ }
61
87
  /**
62
88
  * Returns the class name of the component.
63
89
  * @returns The class name of the component.
@@ -77,10 +103,29 @@ export class DefaultPolicyArbiter {
77
103
  Guards.object(DefaultPolicyArbiter.CLASS_NAME, "agreement", agreement);
78
104
  // ODRL policy profiles extend the vocabulary with additional semantics (e.g. custom
79
105
  // operators, left operands). Without profile-aware evaluation logic the arbiter
80
- // cannot guarantee correctness, so any policy that declares a profile is rejected.
81
- if (Is.notEmpty(agreement.profile)) {
106
+ // cannot guarantee correctness, so any policy that declares an unknown profile is
107
+ // rejected. The TWIN platform profile is explicitly supported.
108
+ //
109
+ // Empty-string profile values (e.g. from over-eager schema defaults or serialization
110
+ // round-trips) are treated as "no profile declared" and filtered out before comparison.
111
+ //
112
+ // Profile IRIs are normalized before lookup: scheme and host are case-folded to
113
+ // lowercase and a trailing slash on the last path segment is stripped. This accepts
114
+ // common IRI variants (HTTPS://, uppercase host, trailing slash) instead of silently
115
+ // rejecting valid policies authored by IRI-aware tooling.
116
+ //
117
+ // `every` (conjunction) is intentional: a policy declaring ["TWIN", "unknown"] is
118
+ // rejected — the arbiter refuses to evaluate rules from a profile whose semantics it
119
+ // does not understand, even if other declared profiles are known.
120
+ const declaredProfiles = ArrayHelper.fromObjectOrArray(agreement.profile ?? [])
121
+ .filter(p => Is.stringValue(p))
122
+ .map(p => DefaultPolicyArbiter.normalizeProfileIri(p));
123
+ if (Is.arrayValue(declaredProfiles) &&
124
+ !declaredProfiles.every(p => DefaultPolicyArbiter.SUPPORTED_PROFILES.has(p))) {
125
+ const unsupportedProfile = declaredProfiles.find(p => !DefaultPolicyArbiter.SUPPORTED_PROFILES.has(p));
82
126
  throw new GeneralError(DefaultPolicyArbiter.CLASS_NAME, "policyProfileNotSupported", {
83
- policyId: OdrlPolicyHelper.getUid(agreement) ?? ""
127
+ policyId: OdrlPolicyHelper.getUid(agreement) ?? "",
128
+ unsupportedProfile
84
129
  });
85
130
  }
86
131
  await this._logging.log({
@@ -359,8 +404,17 @@ export class DefaultPolicyArbiter {
359
404
  const mergedPermissions = ArrayHelper.fromObjectOrArray(policy.permission ?? []).map(permission => this.applyPolicyDefaultsToRule(policy, permission));
360
405
  const mergedProhibitions = ArrayHelper.fromObjectOrArray(policy.prohibition ?? []).map(prohibition => this.applyPolicyDefaultsToRule(policy, prohibition));
361
406
  const mergedObligations = ArrayHelper.fromObjectOrArray(policy.obligation ?? []).map(obligation => this.applyPolicyDefaultsToRule(policy, obligation));
362
- // Merge rules from each inherited policy
407
+ // Merge rules from each inherited policy, applying the same profile guard as the
408
+ // top-level policy. A parent that declares an unsupported profile may carry rules
409
+ // whose semantics the arbiter cannot guarantee, so it is rejected.
363
410
  for (const inheritedPolicy of inheritedPolicies) {
411
+ const inheritedProfiles = ArrayHelper.fromObjectOrArray(inheritedPolicy.profile ?? [])
412
+ .filter(p => Is.stringValue(p))
413
+ .map(p => DefaultPolicyArbiter.normalizeProfileIri(p));
414
+ if (Is.arrayValue(inheritedProfiles) &&
415
+ !inheritedProfiles.every(p => DefaultPolicyArbiter.SUPPORTED_PROFILES.has(p))) {
416
+ throw new GeneralError(DefaultPolicyArbiter.CLASS_NAME, "inheritedPolicyProfileNotSupported", { policyId: OdrlPolicyHelper.getUid(inheritedPolicy) ?? "" });
417
+ }
364
418
  if (Is.stringValue(inheritedPolicy.conflict)) {
365
419
  conflictStrategies.add(inheritedPolicy.conflict);
366
420
  }
package/dist/es/policyArbiters/defaultPolicyArbiter.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"defaultPolicyArbiter.js","sourceRoot":"","sources":["../../../src/policyArbiters/defaultPolicyArbiter.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EACN,WAAW,EACX,MAAM,EACN,gBAAgB,EAChB,YAAY,EACZ,MAAM,EACN,EAAE,EACF,YAAY,EACZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG1D,OAAO,EACN,gBAAgB,EAChB,cAAc,EACd,+BAA+B,EAI/B,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EAEN,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,EAChB,SAAS,EAaT,MAAM,8BAA8B,CAAC;AAGtC;;GAEG;AACH,MAAM,OAAO,oBAAoB;IAChC;;OAEG;IACI,MAAM,CAAU,UAAU,0BAA0C;IAE3E;;;OAGG;IACK,MAAM,CAAU,8BAA8B,GAAG,EAAE,CAAC;IAE5D;;;OAGG;IACK,MAAM,CAAU,uBAAuB,GAAG,OAAO,CAAC;IAE1D;;;OAGG;IACK,MAAM,CAAU,qBAAqB,GAAG,UAAU,CAAC;IAE3D;;;OAGG;IACK,MAAM,CAAU,wBAAwB,GAAG,aAAa,CAAC;IAEjE;;;OAGG;IACc,QAAQ,CAAoB;IAE7C;;;OAGG;IACc,0BAA0B,CAAsC;IAEjF;;;OAGG;IACc,oBAAoB,CAAS;IAE9C;;;OAGG;IACH,YAAY,OAAiD;QAC5D,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CACnC,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAC1C,CAAC;QAEF,IAAI,CAAC,0BAA0B,GAAG,gBAAgB,CAAC,GAAG,CACrD,OAAO,EAAE,sCAAsC,IAAI,6BAA6B,CAChF,CAAC;QAEF,IAAI,CAAC,oBAAoB;YACxB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC;gBACpD,oBAAoB,CAAC,8BAA8B,CAAC;IACtD,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,oBAAoB,CAAC,UAAU,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,MAAM,CAClB,SAAsC,EACtC,WAAiD,EACjD,IAAQ,EACR,MAAgC;QAEhC,MAAM,CAAC,MAAM,CACZ,oBAAoB,CAAC,UAAU,eAE/B,SAAS,CACT,CAAC;QAEF,oFAAoF;QACpF,gFAAgF;QAChF,mFAAmF;QACnF,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,2BAA2B,EAAE;gBACpF,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;aAClD,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACvB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,oBAAoB,CAAC,UAAU;YACvC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE;gBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;aAClD;SACD,CAAC,CAAC;QAEH,wCAAwC;QACxC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG;YACnB,CAAC,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,EAAE,CAAC,EAC/F,IAAI;YACL,CAAC,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,wBAAwB,EAAE,CAAC,EAClG,WAAW;SACZ,CAAC;QAEF,4DAA4D;QAC5D,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAChE,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,WAAW,CACX,CAAC;QAEF,yDAAyD;QACzD,wFAAwF;QACxF,gGAAgG;QAChG,gGAAgG;QAChG,MAAM,YAAY,GAKd,MAAM,CAAC,MAAM,CAAC,IAAI,CAKrB,CAAC;QAEF,MAAM,WAAW,GAAG,WAAW,CAAC,iBAAiB,CAAC,cAAc,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACnF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACtC,MAAM,eAAe,GAAG,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACjF,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;gBAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC/E,IACC,MAAM,IAAI,CAAC,kBAAkB,CAC5B,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,cAAc,CAAC,WAAW,EAC1B,WAAW,EACX,MAAM,EACN,cAAc,CAAC,MAAM,CACrB,EACA,CAAC;oBACF,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBAChC,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,CAAC,iBAAiB,CACjD,cAAc,CAAC,WAAW,IAAI,EAAE,CAChC,CAAC;QACF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACxC,MAAM,eAAe,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAClF,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;gBAC9C,IACC,MAAM,IAAI,CAAC,mBAAmB,CAC7B,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,cAAc,CAAC,WAAW,EAC1B,WAAW,EACX,MAAM,EACN,cAAc,CAAC,MAAM,CACrB,EACA,CAAC;oBACF,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;oBAC/E,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBACjC,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,gBAAgB,GAAG,cAAc,CAAC,QAAQ,IAAI,wBAAwB,CAAC,OAAO,CAAC;QACrF,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,6DAA6D;YAC7D,OAAO,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5D,IAAI,QAAwB,CAAC;YAC7B,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;gBACzD,QAAQ,gBAAgB,EAAE,CAAC;oBAC1B,KAAK,wBAAwB,CAAC,IAAI;wBACjC,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC;wBAClC,MAAM;oBACP,KAAK,wBAAwB,CAAC,QAAQ,CAAC;oBACvC,KAAK,wBAAwB,CAAC,OAAO,CAAC;oBACtC;wBACC,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;wBACjC,MAAM;gBACR,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC;YACrF,CAAC;YAED,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC3B,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;YAClC,CAAC;YAED,SAAS,CAAC,IAAI,CAAC;gBACd,QAAQ;gBACR,MAAM;aACN,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACK,wBAAwB,CAAC,MAAgC;QAChE,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAC3C,WAAW,CAAC,iBAAiB,CAAkB,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CACvE,CAAC;QACF,MAAM,oBAAoB,GAAG,IAAI,CAAC,WAAW,CAC5C,WAAW,CAAC,iBAAiB,CAAmB,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CACzE,CAAC;QACF,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAC3C,WAAW,CAAC,iBAAiB,CAAY,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CACjE,CAAC;QAEF,OAAO;YACN,GAAG,MAAM;YACT,UAAU,EAAE,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;YAC5E,WAAW,EAAE,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;YAC/E,UAAU,EAAE,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;SAC5E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAsB,KAAU;QAClD,MAAM,QAAQ,GAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACK,UAAU,CAAsB,IAAO;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAmC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAmC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAqC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAqC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE7F,MAAM,QAAQ,GAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAClC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;wBAClC,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;wBAC/B,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;wBAC3B,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;wBAC3B,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC;wBAC/B,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC;wBAC/B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC3B,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAI,KAAoB;QACjD,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,SAAS,CAAC,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAC7B,YAKC,EACD,MAAc;QAKd,IAAI,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,GAAG;gBACP,iBAAiB,EAAE,KAAK;gBACxB,kBAAkB,EAAE,KAAK;aACzB,CAAC;YACF,YAAY,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,mBAAmB,CAChC,MAAgC,EAChC,iBAAuC,EACvC,iBAAuC,EACvC,WAA6B,EAC7B,iBAA+D,EAC/D,WAA0C,EAC1C,MAAgC,EAChC,cAAuB;QAEvB,IACC,CAAC,IAAI,CAAC,yBAAyB,CAC9B,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,CACX,EACA,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,kEAAkE;QAClE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC;QACd,CAAC;QAED,+DAA+D;QAC/D,MAAM,WAAW,GAAG;YACnB,GAAG,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,CAAC;YAC9D,GAAG,iBAAiB;SACpB,CAAC;QACF,IACC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAC/D,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,uBAAuB,GAAG,IAAI,CAAC,0BAA0B,CAC9D,IAAI,CAAC,4BAA4B,CAChC,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,MAAM,CAAC,EACnD,cAAc,CACd,EACD,WAAW,EACX,IAAI,CACJ,CAAC;QACF,MAAM,eAAe,GAAG,uBAAuB,CAAC,KAAK,CAAC;QAEtD,MAAM,QAAQ,GAAG,WAAW,CAAC,iBAAiB,CAAY,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;gBAC7E,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,qEAAqE;QACrE,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,yBAAyB,CACtC,iBAAuC,EACvC,iBAAuC,EACvC,MAAgC,EAChC,WAA0C;QAE1C,MAAM,WAAW,GAAG,WAAW,CAAC,iBAAiB,CAAY,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACtF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACtC,IACC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAC9B,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,EACN,UAAU,EACV,WAAW,CACX,CAAC,EACD,CAAC;gBACF,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,kBAAkB,CAC/B,iBAAuC,EACvC,iBAAuC,EACvC,MAAgC,EAChC,UAAqB,EACrB,WAA0C;QAE1C,IACC,CAAC,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAC7F,CAAC;YACF,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACxE,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,CAC7D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EACnC,WAAW,EACX,IAAI,CACJ,CAAC;QACF,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC;QACrD,MAAM,WAAW,GAAG;YACnB,GAAG,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC;YAC7D,GAAG,WAAW;SACd,CAAC;QAEF,IACC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAC/D,CAAC;YACF,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,sBAAsB,CACnC,MAAgC;QAEhC,MAAM,gBAAgB,GAAa,EAAE,CAAC;QACtC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA4B,CAAC;QAC/D,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,kDAAkD;QAClD,MAAM,iBAAiB,GAAsB,WAAW,CAAC,iBAAiB,CACzE,MAAM,CAAC,UAAU,IAAI,EAAE,CACvB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAExE,MAAM,kBAAkB,GAAuB,WAAW,CAAC,iBAAiB,CAC3E,MAAM,CAAC,WAAW,IAAI,EAAE,CACxB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QAE1E,MAAM,iBAAiB,GAAgB,WAAW,CAAC,iBAAiB,CACnE,MAAM,CAAC,UAAU,IAAI,EAAE,CACvB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAExE,yCAAyC;QACzC,KAAK,MAAM,eAAe,IAAI,iBAAiB,EAAE,CAAC;YACjD,IAAI,EAAE,CAAC,WAAW,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,oBAAoB,GAAG,WAAW,CAAC,iBAAiB,CAAC,eAAe,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAC7F,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,iBAAiB,CAAC,IAAI,CACrB,GAAG,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CACxC,IAAI,CAAC,yBAAyB,CAAC,eAAe,EAAE,UAAU,CAAC,CAC3D,CACD,CAAC;YACH,CAAC;YAED,MAAM,qBAAqB,GAAG,WAAW,CAAC,iBAAiB,CAC1D,eAAe,CAAC,WAAW,IAAI,EAAE,CACjC,CAAC;YACF,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,kBAAkB,CAAC,IAAI,CACtB,GAAG,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAC1C,IAAI,CAAC,yBAAyB,CAAC,eAAe,EAAE,WAAW,CAAC,CAC5D,CACD,CAAC;YACH,CAAC;YAED,MAAM,oBAAoB,GAAG,WAAW,CAAC,iBAAiB,CAAC,eAAe,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAC7F,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,iBAAiB,CAAC,IAAI,CACrB,GAAG,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CACxC,IAAI,CAAC,yBAAyB,CAAC,eAAe,EAAE,UAAU,CAAC,CAC3D,CACD,CAAC;YACH,CAAC;QACF,CAAC;QAED,IAAI,cAAoD,CAAC;QACzD,IAAI,kBAAkB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnC,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACxC,cAAc,GAAG,wBAAwB,CAAC,OAAO,CAAC;QACnD,CAAC;QAED,wCAAwC;QACxC,OAAO;YACN,GAAG,MAAM;YACT,QAAQ,EAAE,cAAc;YACxB,UAAU,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YACxE,WAAW,EAAE,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;YAC3E,UAAU,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,wBAAwB,CACrC,MAAgC,EAChC,gBAA0B,EAC1B,YAAoB;QAEpB,MAAM,iBAAiB,GAA+B,EAAE,CAAC;QAEzD,mDAAmD;QACnD,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,iBAAiB,CAAC;QAC1B,CAAC;QAED,MAAM,cAAc,GAAG,WAAW,CAAC,iBAAiB,CAAS,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAEvF,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,YAAY,GAAG,CAAC,CAAC;YACnC,IAAI,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC3C,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,EAAE;oBACtF,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;oBAC/C,aAAa;oBACb,mBAAmB,EAAE,IAAI,CAAC,oBAAoB;iBAC9C,CAAC,CAAC;YACJ,CAAC;YAED,iCAAiC;YACjC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,EAAE;oBACtF,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;oBAC/C,aAAa;iBACb,CAAC,CAAC;YACJ,CAAC;YAED,0CAA0C;YAC1C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACjF,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,yBAAyB,EAAE;oBAClF,aAAa;iBACb,CAAC,CAAC;YACJ,CAAC;YAED,8BAA8B;YAC9B,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAErC,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAExC,uDAAuD;YACvD,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC9D,eAAe,EACf,gBAAgB,EAChB,SAAS,CACT,CAAC;YACF,iBAAiB,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACK,yBAAyB,CAChC,MAAgC,EAChC,IAAO;QAEP,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3E,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3E,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACnE,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAEnE,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,eAAe,GAAG,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,eAAe,GAAG,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpE,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACxD,aAAa,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACjE,aAAa;gBACZ,WAAW,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;oBAC7C,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACxD,aAAa,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACjE,aAAa;gBACZ,WAAW,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;oBAC7C,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;QAE3C,IAAI,aAAa,IAAI,aAAa,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO;YACN,GAAG,IAAI;YACP,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,MAAM;SACN,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,yBAAyB,CAChC,IAAe,EACf,iBAAuC,EACvC,iBAAuC,EACvC,WAA0C;QAE1C,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpE,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IACC,eAAe,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAC/E,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IACC,eAAe,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAC/E,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;OAOG;IACK,uBAAuB,CAAC,KAAoD;QAInF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAiD,EAAE,CAAC;QAErE,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC3D,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;YAClC,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3B,CAAC;iBAAM,IAAI,EAAE,CAAC,MAAM,CAAa,UAAU,CAAC,EAAE,CAAC;gBAC9C,kDAAkD;gBAClD,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;gBACxF,CAAC;gBACD,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;gBACxF,CAAC;gBACD,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACpC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;gBACpF,CAAC;gBAED,IAAI,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,eAAe,EAAE,CAAC;oBACxE,MAAM,oBAAoB,GAAG,UAAkC,CAAC;oBAChE,IAAI,EAAE,CAAC,WAAW,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;wBACjD,MAAM,IAAI,YAAY,CACrB,oBAAoB,CAAC,UAAU,EAC/B,mCAAmC,EACnC;4BACC,MAAM,EAAE,oBAAoB,CAAC,MAAM,IAAI,EAAE;yBACzC,CACD,CAAC;oBACH,CAAC;oBAED,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC3F,CAAC;qBAAM,CAAC;oBACP,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACpD,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC7B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxB,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,QAAQ;YACR,WAAW;SACX,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CACxB,YAAkC,EAClC,iBAAuC;QAEvC,sEAAsE;QACtE,IAAI,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,mEAAmE;QACnE,IAAI,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACd,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACxC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;;;;;OAUG;IACK,kBAAkB,CACzB,WAAgC,EAChC,eAAoD,EACpD,WAA0C;QAE1C,iEAAiE;QACjE,IAAI,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,+DAA+D;QAC/D,6DAA6D;QAC7D,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,iBAAiB,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC;YACnD,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAE5C,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,eAAe,GAAG,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAEzE,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAAE,CAAC;gBAChF,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,yBAAyB,CAChC,UAAiD,EACjD,iBAAyB,EACzB,WAA0C;QAE1C,oEAAoE;QACpE,IAAI,YAAgC,CAAC;QACrC,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,YAAY,GAAG,UAAU,CAAC;QAC3B,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,CAAc,UAAU,CAAC,EAAE,CAAC;YAC/C,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACxF,CAAC;QAED,wFAAwF;QACxF,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,IAAI,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,YAAY,KAAK,iBAAiB,EAAE,CAAC;YACxE,cAAc;YACd,MAAM,GAAG,IAAI,CAAC;QACf,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,CAAc,UAAU,CAAC,EAAE,CAAC;YAC/C,qEAAqE;YACrE,wFAAwF;YACxF,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;gBAC1F,MAAM,GAAG,IAAI,CAAC;YACf,CAAC;YAED,sEAAsE;YACtE,+DAA+D;YAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAmC,CAAC,EAAE,CAAC;gBACzF,MAAM,GAAG,IAAI,CAAC;YACf,CAAC;QACF,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,KAAK,CAAC;QACd,CAAC;QAED,sFAAsF;QACtF,6FAA6F;QAC7F,IAAI,EAAE,CAAC,MAAM,CAAc,UAAU,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9E,MAAM,WAAW,GAAG,WAAW,CAAC,iBAAiB,CAChD,UAAU,CAAC,UAAU,IAAI,EAAE,CAC3B,CAAC;YACF,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,UAAoD,EAAE,EAAE,CACjF,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAChD,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,kBAAkB,CAC/B,iBAAuC,EACvC,iBAAuC,EACvC,MAAgC,EAChC,UAA2B,EAC3B,iBAA+D,EAC/D,WAA0C,EAC1C,MAAgC,EAChC,cAAuB;QAEvB,IACC,CAAC,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAC7F,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,iEAAiE;QACjE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC;QACd,CAAC;QAED,qEAAqE;QACrE,MAAM,WAAW,GAAG;YACnB,GAAG,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC;YAC7D,GAAG,iBAAiB;SACpB,CAAC;QACF,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,CAC7D,IAAI,CAAC,4BAA4B,CAChC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,MAAM,CAAC,EAClD,cAAc,CACd,EACD,WAAW,EACX,IAAI,CACJ,CAAC;QACF,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC;QACrD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;QACvF,CAAC;QAED,iEAAiE;QACjE,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAE7F,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,uBAAuB,CACpC,MAAgC,EAChC,UAA2B,EAC3B,WAA0C,EAC1C,eAAyB;QAEzB,MAAM,MAAM,GAAG,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,WAAW,CACxB,MAAgC,EAChC,IAAe,EACf,WAA0C,EAC1C,eAAyB;QAEzB,MAAM,aAAa,GAAG,+BAA+B,CAAC,KAAK,EAAE,CAAC;QAC9D,MAAM,WAAW,GAAG,WAAW,CAC9B,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,wBAAwB,EAAE,CAC9C,CAAC;QAErD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;QAC5F,CAAC;QAED,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,+BAA+B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACnE,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,CAAC,iBAAiB,CAAY,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QACtF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACxC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;gBAClF,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;OAOG;IACK,0BAA0B,CACjC,QAA4B,EAC5B,WAA0C,EAC1C,eAAwB,KAAK;QAE7B,6EAA6E;QAC7E,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxB,OAAO;gBACN,MAAM,EAAE,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,EAAE;gBACtG,MAAM,EACL,WAAW,CACV,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,EAAE,CAC9F;gBACF,MAAM,EAAE,GAAG;gBACX,KAAK,EACJ,WAAW,CACV,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,EAAE,CAC9F;aACF,CAAC;QACH,CAAC;QAED,kHAAkH;QAClH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9E,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAEjD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,wBAAwB,EAAE;wBACjF,MAAM,EAAE,QAAQ;qBAChB,CAAC,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnB,OAAO;wBACN,MAAM;wBACN,MAAM;wBACN,MAAM;qBACN,CAAC;gBACH,CAAC;gBAED,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,wBAAwB,EAAE;wBACjF,MAAM,EAAE,QAAQ;qBAChB,CAAC,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACN,MAAM;oBACN,MAAM;oBACN,MAAM;oBACN,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;iBAC1E,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,wBAAwB,EAAE;YACjF,MAAM,EAAE,QAAQ;SAChB,CAAC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAC,MAA2B;QAC9C,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;OAOG;IACK,0BAA0B,CAAC,MAA2B;QAC7D,MAAM,GAAG,GAAG,WAAW,CAAC,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3B,IACC,EAAE,CAAC,MAAM,CAAuB,WAAW,CAAC;gBAC5C,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,eAAe;gBACnE,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,EACjC,CAAC;gBACF,OAAO,WAAW,CAAC,MAAM,CAAC;YAC3B,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACK,4BAA4B,CACnC,YAAgC,EAChC,cAAkC;QAElC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,cAAc,KAAK,GAAG,EAAE,CAAC;YAC/D,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,IAAI,cAAc,EAAE,CAAC;IACrE,CAAC;IAED;;;;;;;;OAQG;IACK,iBAAiB,CACxB,IAAe,EACf,WAA0C;QAK1C,MAAM,GAAG,GAAG,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO;gBACN,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,EAAE;aACf,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAE3B,IAAI,EAAE,CAAC,MAAM,CAAa,WAAW,CAAC,EAAE,CAAC;YACxC,kDAAkD;YAClD,IAAI,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;YACpF,CAAC;YAED,IACC,EAAE,CAAC,MAAM,CAAuB,WAAW,CAAC;gBAC5C,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,eAAe,EAClE,CAAC;gBACF,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,YAAY,CACrB,oBAAoB,CAAC,UAAU,EAC/B,mCAAmC,EACnC;wBACC,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE;qBAChC,CACD,CAAC;gBACH,CAAC;gBAED,IAAI,YAAkF,CAAC;gBACvF,IAAI,CAAC;oBACJ,YAAY,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACjF,CAAC;gBAAC,MAAM,CAAC;oBACR,MAAM,IAAI,YAAY,CACrB,oBAAoB,CAAC,UAAU,EAC/B,mCAAmC,EACnC;wBACC,MAAM,EAAE,WAAW,CAAC,MAAM;qBAC1B,CACD,CAAC;gBACH,CAAC;gBAED,OAAO;oBACN,MAAM,EAAE,YAAY,CAAC,MAAM;oBAC3B,WAAW,EAAE,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,CAAC;iBACxE,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7F,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,wBAAwB,EAAE;gBACjF,MAAM,EAAE,EAAE;aACV,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE5E,OAAO;YACN,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,WAAW,EAAE,EAAE;SACf,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,0BAA0B,CACjC,IAAe,EACf,WAA0C;QAK1C,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAEjE,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,cAAc,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CACnD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAC5C,WAAW,CACX,CAAC;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,cAAc,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;YACzF,OAAO;gBACN,MAAM,EAAE,UAAU;gBAClB,WAAW,EAAE,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CACxD,IAAI,CAAC,kCAAkC,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CACtF;aACD,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,4BAA4B,CACnC,IAAe,EACf,cAGC;QAED,IAAI,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAuB,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACd,CAAC;QAED,OAAO,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,eAAe,CAAC;IAC3E,CAAC;IAED;;;;;;;OAOG;IACK,kCAAkC,CACzC,UAAoD,EACpD,YAAoB,EACpB,UAAkB;QAElB,MAAM,iBAAiB,GAAG,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACxE,IAAI,iBAAiB,EAAE,CAAC;YACvB,OAAO;gBACN,GAAG,UAAU;gBACb,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACtE,IAAI,CAAC,kCAAkC,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,CACvE;aACyB,CAAC;QAC7B,CAAC;QAED,MAAM,iBAAiB,GAAG,UAA6B,CAAC;QACxD,OAAO;YACN,GAAG,iBAAiB;YACpB,WAAW,EAAE,IAAI,CAAC,+BAA+B,CAChD,iBAAiB,CAAC,WAAW,EAC7B,YAAY,EACZ,UAAU,CACwB;YACnC,YAAY,EAAE,IAAI,CAAC,+BAA+B,CACjD,iBAAiB,CAAC,YAAY,EAC9B,YAAY,EACZ,UAAU,CACV;SACD,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,+BAA+B,CACtC,OAAkF,EAClF,YAAoB,EACpB,UAAkB;QAElB,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,GAAG,CAAC;YAC/G,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/C,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;YACpF,CAAC;YACD,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,IAAI,EAAE,CAAC,MAAM,CAA0C,OAAO,CAAC,EAAE,CAAC;YACjE,MAAM,YAAY,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YACpC,IACC,YAAY,CAAC,OAAO,CAAC;gBACpB,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,EAAE;gBAC/F,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EACrC,CAAC;gBACF,YAAY,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAChD,YAAY,CAAC,QAAQ,CAAC,EACtB,YAAY,EACZ,UAAU,CACV,CAAC;YACH,CAAC;YACD,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACK,mBAAmB,CAAC,SAAiB,EAAE,YAAoB,EAAE,UAAkB;QACtF,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,2BAA2B,CAAC,IAAY;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;OAOG;IACK,kBAAkB,CACzB,UAAoD,EACpD,WAA0C;QAE1C,MAAM,iBAAiB,GAAG,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACxE,IAAI,iBAAiB,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QACvE,CAAC;QAED,iDAAiD;QACjD,MAAM,iBAAiB,GAAG,UAA6B,CAAC;QAExD,mFAAmF;QACnF,uDAAuD;QACvD,IAAI,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;QAC9F,CAAC;QAED,qFAAqF;QACrF,sFAAsF;QACtF,IAAI,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;QAC3F,CAAC;QAED,qFAAqF;QACrF,4CAA4C;QAC5C,IAAI,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;QACvF,CAAC;QAED,8EAA8E;QAC9E,6CAA6C;QAC7C,IAAI,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QACzF,CAAC;QAED,yCAAyC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAC3F,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAE/F,oEAAoE;QACpE,OAAO,aAAa,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACK,4BAA4B,CAAC,UAAoD;QAMxF,MAAM,iBAAiB,GAAG,UAAoC,CAAC;QAC/D,MAAM,SAAS,GAAgC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACxF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,kCAAkC,CAAC,KAAK,CAAC,CAAC;gBACnE,IAAI,CAAC,0CAA0C,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;gBACvE,OAAO;oBACN,QAAQ;oBACR,WAAW;iBACX,CAAC;YACH,CAAC;QACF,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACK,kCAAkC,CACzC,GAAY;QAEZ,IAAI,UAAU,GAAG,GAAG,CAAC;QACrB,IACC,EAAE,CAAC,MAAM,CAAgC,UAAU,CAAC;YACpD,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EACjC,CAAC;YACF,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;aACtD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAgD,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;;OAQG;IACK,0CAA0C,CACjD,WAAyD,EACzD,QAAmC;QAEnC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;QAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAEvD,iDAAiD;YACjD,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,YAAY,CACrB,oBAAoB,CAAC,UAAU,EAC/B,mCAAmC,EACnC;wBACC,QAAQ;wBACR,UAAU;wBACV,KAAK,EAAE,CAAC;qBACR,CACD,CAAC;gBACH,CAAC;gBACD,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACjC,CAAC;QACF,CAAC;IACF,CAAC;IAED;;;;;;OAMG;IACK,yBAAyB,CAChC,iBAGC,EACD,WAA0C;QAE1C,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC;QACpD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,QAAQ,QAAQ,EAAE,CAAC;YAClB,KAAK,yBAAyB,CAAC,GAAG;gBACjC,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;YAC9E,KAAK,yBAAyB,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC5C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAChC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;wBACjD,OAAO,KAAK,CAAC;oBACd,CAAC;gBACF,CAAC;gBACD,OAAO,IAAI,CAAC;YACb,CAAC;YACD,KAAK,yBAAyB,CAAC,EAAE;gBAChC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;YAC7E,KAAK,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAChC,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;wBAChD,SAAS,IAAI,CAAC,CAAC;wBACf,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;4BACnB,OAAO,KAAK,CAAC;wBACd,CAAC;oBACF,CAAC;gBACF,CAAC;gBACD,OAAO,SAAS,KAAK,CAAC,CAAC;YACxB,CAAC;YACD;gBACC,OAAO,KAAK,CAAC;QACf,CAAC;IACF,CAAC;IAED;;;;;;;;;;OAUG;IACK,uBAAuB,CAC9B,kBAA0B,EAC1B,YAAqB,EACrB,WAA0C;QAE1C,IAAI,cAAkC,CAAC;QAEvC,IAAI,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC;YAClB,CAAC;YAED,cAAc,GAAG,GAAG,kBAAkB,IAAI,YAAY,EAAE,CAAC;QAC1D,CAAC;aAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,cAAc,GAAG,kBAAkB,CAAC;QACrC,CAAC;aAAM,CAAC;YACP,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,gEAAgE;QAChE,IAAI,kBAAkB,CAAC,UAAU,CAAC,oBAAoB,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC9E,OAAO;gBACN,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM;aACzB,CAAC;QACH,CAAC;IACF,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAC5B,OAAkF,EAClF,WAA0C;QAE1C,+EAA+E;QAC/E,wEAAwE;QACxE,IAAI,QAA4B,CAAC;QACjC,IAAI,WAAoB,CAAC;QACzB,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAC3E,IAAI,MAAM,EAAE,CAAC;gBACZ,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBAC3B,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,CAAC;QACF,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,CAA0C,OAAO,CAAC,EAAE,CAAC;YACxE,iEAAiE;YACjE,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;gBACtE,IAAI,MAAM,EAAE,CAAC;oBACZ,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAC3B,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACP,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBACjD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC7B,OAAO,QAAQ,CAAC;oBACjB,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,iCAAiC;QACjC,IAAI,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC9D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,aAAa;gBACb,OAAO,SAAS,CAAC;YAClB,CAAC;iBAAM,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,2CAA2C;gBAC3C,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3B,CAAC;YAED,4CAA4C;YAC5C,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,gDAAgD;QAChD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB,CAAC,QAA0B,EAAE,IAAa,EAAE,KAAc;QACjF,kFAAkF;QAClF,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAE7D,QAAQ,QAAQ,EAAE,CAAC;YAClB,KAAK,gBAAgB,CAAC,EAAE;gBACvB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,KAAK,gBAAgB,CAAC,GAAG;gBACxB,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACpE,KAAK,gBAAgB,CAAC,EAAE;gBACvB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7E,KAAK,gBAAgB,CAAC,IAAI;gBACzB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9E,KAAK,gBAAgB,CAAC,EAAE;gBACvB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7E,KAAK,gBAAgB,CAAC,IAAI;gBACzB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9E,KAAK,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC/B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;oBAC1B,MAAM,WAAW,GAChB,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS;wBACvE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;wBACX,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBACtB,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC3E,CAAC,CAAC,CAAC;YACJ,CAAC;YACD,KAAK,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC/B,OAAO,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1F,CAAC;YACD,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACzF,CAAC;YACD,KAAK,gBAAgB,CAAC,SAAS;gBAC9B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,KAAK,gBAAgB,CAAC,WAAW;gBAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9E,KAAK,gBAAgB,CAAC,GAAG,CAAC;YAC1B,KAAK,gBAAgB,CAAC,OAAO,CAAC;YAC9B,KAAK,gBAAgB,CAAC,QAAQ;gBAC7B,+EAA+E;gBAC/E,mEAAmE;gBACnE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE;gBACC,OAAO,KAAK,CAAC;QACf,CAAC;IACF,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CACrB,IAAa,EACb,KAAc,EACd,OAA0C;QAE1C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,OAAO,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACzD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,kEAAkE;QAClE,6DAA6D;QAC7D,mEAAmE;QACnE,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CAAC,KAAc,EAAE,IAAY;QACjD,IACC;YACC,YAAY;YACZ,sBAAsB;YACtB,WAAW;YACX,YAAY;YACZ,WAAW;YACX,cAAc;SACd,CAAC,QAAQ,CAAC,IAAI,CAAC,EACf,CAAC;YACF,4BAA4B;YAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;aAAM,IACN;YACC,aAAa;YACb,aAAa;YACb,WAAW;YACX,YAAY;YACZ,UAAU;YACV,SAAS;YACT,WAAW;YACX,UAAU;SACV,CAAC,QAAQ,CAAC,IAAI,CAAC,EACf,CAAC;YACF,4BAA4B;YAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,4BAA4B;YAC5B,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,4BAA4B;YAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC","sourcesContent":["// Copyright 2025 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport {\n\tArrayHelper,\n\tCoerce,\n\tComponentFactory,\n\tGeneralError,\n\tGuards,\n\tIs,\n\tObjectHelper\n} from \"@twin.org/core\";\nimport type { IJsonLdNodeObject } from \"@twin.org/data-json-ld\";\nimport { JsonPathHelper } from \"@twin.org/data-json-path\";\nimport type { ILoggingComponent } from \"@twin.org/logging-models\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\tOdrlPolicyHelper,\n\tPolicyDecision,\n\tPolicyObligationEnforcerFactory,\n\ttype IPolicyAdministrationPointComponent,\n\ttype IPolicyArbiter,\n\ttype IPolicyDecision\n} from \"@twin.org/rights-management-models\";\nimport type {\n\tIDataspaceProtocolAgreement,\n\tIDataspaceProtocolPolicy\n} from \"@twin.org/standards-dataspace-protocol\";\nimport {\n\ttype IOdrlAssetCollection,\n\tOdrlConflictStrategyType,\n\tOdrlLogicalConstraintType,\n\tOdrlOperatorType,\n\tOdrlTypes,\n\ttype IOdrlAction,\n\ttype IOdrlAsset,\n\ttype IOdrlConstraint,\n\ttype IOdrlDuty,\n\ttype IOdrlLogicalConstraint,\n\ttype IOdrlLogicalConstraintOperand,\n\ttype IOdrlParty,\n\ttype IOdrlPartyCollection,\n\ttype IOdrlPermission,\n\ttype IOdrlProhibition,\n\ttype IOdrlRule,\n\ttype OdrlActionType\n} from \"@twin.org/standards-w3c-odrl\";\nimport type { IDefaultPolicyArbiterConstructorOptions } from \"../models/IDefaultPolicyArbiterConstructorOptions.js\";\n\n/**\n * Default Policy Arbiter.\n */\nexport class DefaultPolicyArbiter implements IPolicyArbiter {\n\t/**\n\t * The class name of the Default Policy Arbiter.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<DefaultPolicyArbiter>();\n\n\t/**\n\t * Default maximum inheritance depth.\n\t * @internal\n\t */\n\tprivate static readonly _DEFAULT_MAX_INHERITANCE_DEPTH = 10;\n\n\t/**\n\t * TWIN prefix operations.\n\t * @internal\n\t */\n\tprivate static readonly _TWIN_PREFIX_OPERATIONS = \"twin:\";\n\n\t/**\n\t * TWIN prefix JSONPath.\n\t * @internal\n\t */\n\tprivate static readonly _TWIN_PREFIX_JSONPATH = \"jsonpath\";\n\n\t/**\n\t * TWIN prefix information.\n\t * @internal\n\t */\n\tprivate static readonly _TWIN_PREFIX_INFORMATION = \"information\";\n\n\t/**\n\t * The logging component.\n\t * @internal\n\t */\n\tprivate readonly _logging: ILoggingComponent;\n\n\t/**\n\t * The policy administration point component.\n\t * @internal\n\t */\n\tprivate readonly _policyAdministrationPoint: IPolicyAdministrationPointComponent;\n\n\t/**\n\t * The maximum depth to traverse when resolving inherited policies.\n\t * @internal\n\t */\n\tprivate readonly _maxInheritanceDepth: number;\n\n\t/**\n\t * Create a new instance of DefaultPolicyArbiter.\n\t * @param options The options for the default policy arbiter.\n\t */\n\tconstructor(options?: IDefaultPolicyArbiterConstructorOptions) {\n\t\tthis._logging = ComponentFactory.get<ILoggingComponent>(\n\t\t\toptions?.loggingComponentType ?? \"logging\"\n\t\t);\n\n\t\tthis._policyAdministrationPoint = ComponentFactory.get<IPolicyAdministrationPointComponent>(\n\t\t\toptions?.policyAdministrationPointComponentType ?? \"policy-administration-point\"\n\t\t);\n\n\t\tthis._maxInheritanceDepth =\n\t\t\tCoerce.integer(options?.config?.maxInheritanceDepth) ??\n\t\t\tDefaultPolicyArbiter._DEFAULT_MAX_INHERITANCE_DEPTH;\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn DefaultPolicyArbiter.CLASS_NAME;\n\t}\n\n\t/**\n\t * Makes decisions regarding policy access to data.\n\t * @param agreement The agreement to evaluate.\n\t * @param information Information provided by the requester to determine if a policy can be created.\n\t * @param data The data to make a decision on.\n\t * @param action Optional action to make a decision on, if not provided, the arbiter will evaluate all actions in the agreement.\n\t * @returns The decisions about access to the data.\n\t */\n\tpublic async decide<D = unknown>(\n\t\tagreement: IDataspaceProtocolAgreement,\n\t\tinformation?: { [id: string]: IJsonLdNodeObject },\n\t\tdata?: D,\n\t\taction?: OdrlActionType | string\n\t): Promise<IPolicyDecision[]> {\n\t\tGuards.object<IDataspaceProtocolAgreement>(\n\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\tnameof(agreement),\n\t\t\tagreement\n\t\t);\n\n\t\t// ODRL policy profiles extend the vocabulary with additional semantics (e.g. custom\n\t\t// operators, left operands). Without profile-aware evaluation logic the arbiter\n\t\t// cannot guarantee correctness, so any policy that declares a profile is rejected.\n\t\tif (Is.notEmpty(agreement.profile)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"policyProfileNotSupported\", {\n\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(agreement) ?? \"\"\n\t\t\t});\n\t\t}\n\n\t\tawait this._logging.log({\n\t\t\tlevel: \"info\",\n\t\t\tsource: DefaultPolicyArbiter.CLASS_NAME,\n\t\t\tts: Date.now(),\n\t\t\tmessage: \"decidingPolicy\",\n\t\t\tdata: {\n\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(agreement) ?? \"\"\n\t\t\t}\n\t\t});\n\n\t\t// Resolve and merge inherited policies.\n\t\tconst mergedPolicy = await this.mergeInheritedPolicies(agreement);\n\t\tconst expandedPolicy = this.expandCompactPolicyRules(mergedPolicy);\n\t\tconst dataSources = {\n\t\t\t[`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}`]:\n\t\t\t\tdata,\n\t\t\t[`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_INFORMATION}`]:\n\t\t\t\tinformation\n\t\t};\n\n\t\t// Extract agreement parties once for use in rule evaluation\n\t\tconst agreementAssigner = OdrlPolicyHelper.getPartyIds(agreement.assigner);\n\t\tconst agreementAssignee = OdrlPolicyHelper.getPartyIds(agreement.assignee);\n\t\tconst obligationsFulfilled = await this.evaluatePolicyObligations(\n\t\t\tagreementAssigner,\n\t\t\tagreementAssignee,\n\t\t\texpandedPolicy,\n\t\t\tdataSources\n\t\t);\n\n\t\t// ODRL-style rule evaluation grouped by decision target:\n\t\t// - Permission rules authorize if ANY applicable permission on the same target matches.\n\t\t// - Default to denied when no permission applies on a target (closed-world for access control).\n\t\t// - Conflict strategy controls how applicable permissions/prohibitions are resolved per target.\n\t\tconst targetStates: {\n\t\t\t[target: string]: {\n\t\t\t\tpermissionApplies: boolean;\n\t\t\t\tprohibitionApplies: boolean;\n\t\t\t};\n\t\t} = Object.create(null) as {\n\t\t\t[target: string]: {\n\t\t\t\tpermissionApplies: boolean;\n\t\t\t\tprohibitionApplies: boolean;\n\t\t\t};\n\t\t};\n\n\t\tconst permissions = ArrayHelper.fromObjectOrArray(expandedPolicy.permission ?? []);\n\t\tfor (const permission of permissions) {\n\t\t\tconst decisionTargets = this.resolveRuleDecisionTargets(permission, dataSources);\n\t\t\tfor (const decisionTarget of decisionTargets) {\n\t\t\t\tconst state = this.getOrCreateTargetState(targetStates, decisionTarget.target);\n\t\t\t\tif (\n\t\t\t\t\tawait this.evaluatePermission(\n\t\t\t\t\t\tagreementAssigner,\n\t\t\t\t\t\tagreementAssignee,\n\t\t\t\t\t\texpandedPolicy,\n\t\t\t\t\t\tpermission,\n\t\t\t\t\t\tdecisionTarget.refinements,\n\t\t\t\t\t\tdataSources,\n\t\t\t\t\t\taction,\n\t\t\t\t\t\tdecisionTarget.target\n\t\t\t\t\t)\n\t\t\t\t) {\n\t\t\t\t\tstate.permissionApplies = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst prohibitions = ArrayHelper.fromObjectOrArray<IOdrlProhibition>(\n\t\t\texpandedPolicy.prohibition ?? []\n\t\t);\n\t\tfor (const prohibition of prohibitions) {\n\t\t\tconst decisionTargets = this.resolveRuleDecisionTargets(prohibition, dataSources);\n\t\t\tfor (const decisionTarget of decisionTargets) {\n\t\t\t\tif (\n\t\t\t\t\tawait this.evaluateProhibition(\n\t\t\t\t\t\texpandedPolicy,\n\t\t\t\t\t\tagreementAssigner,\n\t\t\t\t\t\tagreementAssignee,\n\t\t\t\t\t\tprohibition,\n\t\t\t\t\t\tdecisionTarget.refinements,\n\t\t\t\t\t\tdataSources,\n\t\t\t\t\t\taction,\n\t\t\t\t\t\tdecisionTarget.target\n\t\t\t\t\t)\n\t\t\t\t) {\n\t\t\t\t\tconst state = this.getOrCreateTargetState(targetStates, decisionTarget.target);\n\t\t\t\t\tstate.prohibitionApplies = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst conflictStrategy = expandedPolicy.conflict ?? OdrlConflictStrategyType.Invalid;\n\t\tif (Object.keys(targetStates).length === 0) {\n\t\t\t// Closed-world fallback when the policy has no rules at all.\n\t\t\treturn [{ decision: PolicyDecision.Denied, target: \"$\" }];\n\t\t}\n\n\t\tconst decisions: IPolicyDecision[] = [];\n\t\tfor (const [target, state] of Object.entries(targetStates)) {\n\t\t\tlet decision: PolicyDecision;\n\t\t\tif (state.permissionApplies && state.prohibitionApplies) {\n\t\t\t\tswitch (conflictStrategy) {\n\t\t\t\t\tcase OdrlConflictStrategyType.Perm:\n\t\t\t\t\t\tdecision = PolicyDecision.Granted;\n\t\t\t\t\t\tbreak;\n\t\t\t\t\tcase OdrlConflictStrategyType.Prohibit:\n\t\t\t\t\tcase OdrlConflictStrategyType.Invalid:\n\t\t\t\t\tdefault:\n\t\t\t\t\t\tdecision = PolicyDecision.Denied;\n\t\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tdecision = state.permissionApplies ? PolicyDecision.Granted : PolicyDecision.Denied;\n\t\t\t}\n\n\t\t\tif (!obligationsFulfilled) {\n\t\t\t\tdecision = PolicyDecision.Denied;\n\t\t\t}\n\n\t\t\tdecisions.push({\n\t\t\t\tdecision,\n\t\t\t\ttarget\n\t\t\t});\n\t\t}\n\n\t\treturn decisions;\n\t}\n\n\t/**\n\t * Expand compact/compound policy rule forms into atomic rules.\n\t * ODRL 2.7 allows compact forms where rule properties can be arrays.\n\t * Evaluation in this arbiter is performed on expanded atomic rules.\n\t * @param policy The policy to expand.\n\t * @returns A policy with expanded rule arrays.\n\t * @internal\n\t */\n\tprivate expandCompactPolicyRules(policy: IDataspaceProtocolPolicy): IDataspaceProtocolPolicy {\n\t\tconst expandedPermissions = this.expandRules(\n\t\t\tArrayHelper.fromObjectOrArray<IOdrlPermission>(policy.permission ?? [])\n\t\t);\n\t\tconst expandedProhibitions = this.expandRules(\n\t\t\tArrayHelper.fromObjectOrArray<IOdrlProhibition>(policy.prohibition ?? [])\n\t\t);\n\t\tconst expandedObligations = this.expandRules(\n\t\t\tArrayHelper.fromObjectOrArray<IOdrlDuty>(policy.obligation ?? [])\n\t\t);\n\n\t\treturn {\n\t\t\t...policy,\n\t\t\tpermission: expandedPermissions.length > 0 ? expandedPermissions : undefined,\n\t\t\tprohibition: expandedProhibitions.length > 0 ? expandedProhibitions : undefined,\n\t\t\tobligation: expandedObligations.length > 0 ? expandedObligations : undefined\n\t\t};\n\t}\n\n\t/**\n\t * Expand a rule list into atomic rules.\n\t * @param rules The rules to expand.\n\t * @returns Expanded atomic rules.\n\t * @internal\n\t */\n\tprivate expandRules<T extends IOdrlRule>(rules: T[]): T[] {\n\t\tconst expanded: T[] = [];\n\t\tfor (const rule of rules) {\n\t\t\texpanded.push(...this.expandRule(rule));\n\t\t}\n\n\t\treturn expanded;\n\t}\n\n\t/**\n\t * Expand a single compact/compound rule into atomic rules.\n\t * @param rule The rule to expand.\n\t * @returns Expanded atomic rules.\n\t * @internal\n\t */\n\tprivate expandRule<T extends IOdrlRule>(rule: T): T[] {\n\t\tconst targets = this.normalizeRuleField<NonNullable<IOdrlRule[\"target\"]>>(rule.target);\n\t\tconst actions = this.normalizeRuleField<NonNullable<IOdrlRule[\"action\"]>>(rule.action);\n\t\tconst assigners = this.normalizeRuleField<NonNullable<IOdrlRule[\"assigner\"]>>(rule.assigner);\n\t\tconst assignees = this.normalizeRuleField<NonNullable<IOdrlRule[\"assignee\"]>>(rule.assignee);\n\n\t\tconst expanded: T[] = [];\n\t\tfor (const target of targets) {\n\t\t\tfor (const action of actions) {\n\t\t\t\tfor (const assigner of assigners) {\n\t\t\t\t\tfor (const assignee of assignees) {\n\t\t\t\t\t\tconst atomicRule = { ...rule };\n\t\t\t\t\t\tatomicRule.target = target;\n\t\t\t\t\t\tatomicRule.action = action;\n\t\t\t\t\t\tatomicRule.assigner = assigner;\n\t\t\t\t\t\tatomicRule.assignee = assignee;\n\t\t\t\t\t\texpanded.push(atomicRule);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn expanded;\n\t}\n\n\t/**\n\t * Normalize a potentially compact rule field into an array for expansion.\n\t * @param value The field value.\n\t * @returns Normalized values (or a single undefined when not provided).\n\t * @internal\n\t */\n\tprivate normalizeRuleField<T>(value: T | undefined): (T | undefined)[] {\n\t\tif (Is.undefined(value)) {\n\t\t\treturn [undefined];\n\t\t}\n\n\t\tconst values = ArrayHelper.fromObjectOrArray(value);\n\t\treturn values.length > 0 ? values : [undefined];\n\t}\n\n\t/**\n\t * Get an existing target state or create an initial state if it doesn't exist.\n\t * @param targetStates The dictionary of target states.\n\t * @param target The target key.\n\t * @returns The target state.\n\t * @internal\n\t */\n\tprivate getOrCreateTargetState(\n\t\ttargetStates: {\n\t\t\t[target: string]: {\n\t\t\t\tpermissionApplies: boolean;\n\t\t\t\tprohibitionApplies: boolean;\n\t\t\t};\n\t\t},\n\t\ttarget: string\n\t): {\n\t\tpermissionApplies: boolean;\n\t\tprohibitionApplies: boolean;\n\t} {\n\t\tlet state = targetStates[target];\n\t\tif (Is.undefined(state)) {\n\t\t\tstate = {\n\t\t\t\tpermissionApplies: false,\n\t\t\t\tprohibitionApplies: false\n\t\t\t};\n\t\t\ttargetStates[target] = state;\n\t\t}\n\n\t\treturn state;\n\t}\n\n\t/**\n\t * Evaluate whether a prohibition applies.\n\t * @param policy The policy containing the prohibition.\n\t * @param agreementAssigner The assigner ID from the agreement.\n\t * @param agreementAssignee The assignee ID from the agreement.\n\t * @param prohibition The prohibition to evaluate.\n\t * @param targetRefinements Additional constraints from target refinement.\n\t * @param dataSources The operand lookup sources.\n\t * @param action Optional action to check against the prohibition's applicable actions.\n\t * @returns True if the prohibition applies.\n\t * @internal\n\t */\n\tprivate async evaluateProhibition(\n\t\tpolicy: IDataspaceProtocolPolicy,\n\t\tagreementAssigner: string[] | undefined,\n\t\tagreementAssignee: string[] | undefined,\n\t\tprohibition: IOdrlProhibition,\n\t\ttargetRefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[],\n\t\tdataSources: { [prefix: string]: unknown },\n\t\taction?: OdrlActionType | string,\n\t\tdecisionTarget?: string\n\t): Promise<boolean> {\n\t\tif (\n\t\t\t!this.isRuleApplicableToParties(\n\t\t\t\tprohibition,\n\t\t\t\tagreementAssigner,\n\t\t\t\tagreementAssignee,\n\t\t\t\tdataSources\n\t\t\t)\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// Check if the prohibition's action(s) match the requested action\n\t\tif (!this.isActionApplicable(prohibition.action, action, dataSources)) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// ODRL semantics: a rule without constraints is unconditional.\n\t\tconst constraints = [\n\t\t\t...ArrayHelper.fromObjectOrArray(prohibition.constraint ?? []),\n\t\t\t...targetRefinements\n\t\t];\n\t\tif (\n\t\t\tconstraints.length > 0 &&\n\t\t\t!constraints.every(c => this.evaluateConstraint(c, dataSources))\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\n\t\tconst prohibitionTargetLookup = this.tryResolveTargetDataSource(\n\t\t\tthis.buildRuleDataContextTargetId(\n\t\t\t\tthis.getRuleDataContextTargetId(prohibition.target),\n\t\t\t\tdecisionTarget\n\t\t\t),\n\t\t\tdataSources,\n\t\t\ttrue\n\t\t);\n\t\tconst ruleDataContext = prohibitionTargetLookup.value;\n\n\t\tconst remedies = ArrayHelper.fromObjectOrArray<IOdrlDuty>(prohibition.remedy ?? []);\n\t\tif (remedies.length === 0) {\n\t\t\treturn true;\n\t\t}\n\n\t\tfor (const remedy of remedies) {\n\t\t\tif (!(await this.enforceDuty(policy, remedy, dataSources, ruleDataContext))) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t}\n\n\t\t// Remedies satisfied: prohibition is treated as no longer infringed.\n\t\treturn false;\n\t}\n\n\t/**\n\t * Evaluate all policy-level obligations.\n\t * @param agreementAssigner The assigner ID from the agreement.\n\t * @param agreementAssignee The assignee ID from the agreement.\n\t * @param policy The policy containing obligations.\n\t * @param dataSources The operand lookup sources.\n\t * @returns True if all applicable obligations are fulfilled.\n\t * @internal\n\t */\n\tprivate async evaluatePolicyObligations(\n\t\tagreementAssigner: string[] | undefined,\n\t\tagreementAssignee: string[] | undefined,\n\t\tpolicy: IDataspaceProtocolPolicy,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): Promise<boolean> {\n\t\tconst obligations = ArrayHelper.fromObjectOrArray<IOdrlDuty>(policy.obligation ?? []);\n\t\tfor (const obligation of obligations) {\n\t\t\tif (\n\t\t\t\t!(await this.evaluateObligation(\n\t\t\t\t\tagreementAssigner,\n\t\t\t\t\tagreementAssignee,\n\t\t\t\t\tpolicy,\n\t\t\t\t\tobligation,\n\t\t\t\t\tdataSources\n\t\t\t\t))\n\t\t\t) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t}\n\n\t\treturn true;\n\t}\n\n\t/**\n\t * Evaluate whether a policy-level obligation is fulfilled.\n\t * @param agreementAssigner The assigner ID from the agreement.\n\t * @param agreementAssignee The assignee ID from the agreement.\n\t * @param policy The policy containing the obligation.\n\t * @param obligation The obligation to evaluate.\n\t * @param dataSources The operand lookup sources.\n\t * @returns True if the obligation is not applicable or is fulfilled.\n\t * @internal\n\t */\n\tprivate async evaluateObligation(\n\t\tagreementAssigner: string[] | undefined,\n\t\tagreementAssignee: string[] | undefined,\n\t\tpolicy: IDataspaceProtocolPolicy,\n\t\tobligation: IOdrlDuty,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): Promise<boolean> {\n\t\tif (\n\t\t\t!this.isRuleApplicableToParties(obligation, agreementAssigner, agreementAssignee, dataSources)\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\n\t\tconst { refinements } = this.resolveRuleTarget(obligation, dataSources);\n\t\tconst obligationTargetLookup = this.tryResolveTargetDataSource(\n\t\t\tthis.getTargetId(obligation.target),\n\t\t\tdataSources,\n\t\t\ttrue\n\t\t);\n\t\tconst ruleDataContext = obligationTargetLookup.value;\n\t\tconst constraints = [\n\t\t\t...ArrayHelper.fromObjectOrArray(obligation.constraint ?? []),\n\t\t\t...refinements\n\t\t];\n\n\t\tif (\n\t\t\tconstraints.length > 0 &&\n\t\t\t!constraints.every(c => this.evaluateConstraint(c, dataSources))\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\n\t\treturn this.enforceDuty(policy, obligation, dataSources, ruleDataContext);\n\t}\n\n\t/**\n\t * Merge inherited policies into the current policy.\n\t * Inherited policies' permissions, prohibitions, and obligations are combined with the current policy's rules.\n\t * @param policy The policy to evaluate.\n\t * @returns A new policy with merged rules from all ancestors.\n\t * @internal\n\t */\n\tprivate async mergeInheritedPolicies(\n\t\tpolicy: IDataspaceProtocolPolicy\n\t): Promise<IDataspaceProtocolPolicy> {\n\t\tconst visitedPolicyIds: string[] = [];\n\t\tvisitedPolicyIds.push(OdrlPolicyHelper.getUid(policy) ?? \"\");\n\t\tconst inheritedPolicies = await this.resolveInheritedPolicies(policy, visitedPolicyIds, 0);\n\t\tconst conflictStrategies = new Set<OdrlConflictStrategyType>();\n\t\tif (Is.stringValue(policy.conflict)) {\n\t\t\tconflictStrategies.add(policy.conflict);\n\t\t}\n\n\t\t// Start with copies of the current policy's rules\n\t\tconst mergedPermissions: IOdrlPermission[] = ArrayHelper.fromObjectOrArray(\n\t\t\tpolicy.permission ?? []\n\t\t).map(permission => this.applyPolicyDefaultsToRule(policy, permission));\n\n\t\tconst mergedProhibitions: IOdrlProhibition[] = ArrayHelper.fromObjectOrArray(\n\t\t\tpolicy.prohibition ?? []\n\t\t).map(prohibition => this.applyPolicyDefaultsToRule(policy, prohibition));\n\n\t\tconst mergedObligations: IOdrlDuty[] = ArrayHelper.fromObjectOrArray(\n\t\t\tpolicy.obligation ?? []\n\t\t).map(obligation => this.applyPolicyDefaultsToRule(policy, obligation));\n\n\t\t// Merge rules from each inherited policy\n\t\tfor (const inheritedPolicy of inheritedPolicies) {\n\t\t\tif (Is.stringValue(inheritedPolicy.conflict)) {\n\t\t\t\tconflictStrategies.add(inheritedPolicy.conflict);\n\t\t\t}\n\t\t\tconst inheritedPermissions = ArrayHelper.fromObjectOrArray(inheritedPolicy.permission ?? []);\n\t\t\tif (inheritedPermissions.length > 0) {\n\t\t\t\tmergedPermissions.push(\n\t\t\t\t\t...inheritedPermissions.map(permission =>\n\t\t\t\t\t\tthis.applyPolicyDefaultsToRule(inheritedPolicy, permission)\n\t\t\t\t\t)\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst inheritedProhibitions = ArrayHelper.fromObjectOrArray(\n\t\t\t\tinheritedPolicy.prohibition ?? []\n\t\t\t);\n\t\t\tif (inheritedProhibitions.length > 0) {\n\t\t\t\tmergedProhibitions.push(\n\t\t\t\t\t...inheritedProhibitions.map(prohibition =>\n\t\t\t\t\t\tthis.applyPolicyDefaultsToRule(inheritedPolicy, prohibition)\n\t\t\t\t\t)\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst inheritedObligations = ArrayHelper.fromObjectOrArray(inheritedPolicy.obligation ?? []);\n\t\t\tif (inheritedObligations.length > 0) {\n\t\t\t\tmergedObligations.push(\n\t\t\t\t\t...inheritedObligations.map(obligation =>\n\t\t\t\t\t\tthis.applyPolicyDefaultsToRule(inheritedPolicy, obligation)\n\t\t\t\t\t)\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\tlet mergedConflict: OdrlConflictStrategyType | undefined;\n\t\tif (conflictStrategies.size === 1) {\n\t\t\tmergedConflict = Array.from(conflictStrategies)[0];\n\t\t} else if (conflictStrategies.size > 1) {\n\t\t\tmergedConflict = OdrlConflictStrategyType.Invalid;\n\t\t}\n\n\t\t// Return a new policy with merged rules\n\t\treturn {\n\t\t\t...policy,\n\t\t\tconflict: mergedConflict,\n\t\t\tpermission: mergedPermissions.length > 0 ? mergedPermissions : undefined,\n\t\t\tprohibition: mergedProhibitions.length > 0 ? mergedProhibitions : undefined,\n\t\t\tobligation: mergedObligations.length > 0 ? mergedObligations : undefined\n\t\t};\n\t}\n\n\t/**\n\t * Resolve inherited policies by their UIDs from the Policy Administration Point.\n\t * Policies can inherit from other policies via the inheritFrom property.\n\t * @param policy The policy that may have inheritFrom references.\n\t * @param visitedPolicyIds Array of policy UIDs already visited in this inheritance chain.\n\t * @returns Array of inherited policies fetched from the PAP.\n\t * @internal\n\t */\n\tprivate async resolveInheritedPolicies(\n\t\tpolicy: IDataspaceProtocolPolicy,\n\t\tvisitedPolicyIds: string[],\n\t\tcurrentDepth: number\n\t): Promise<IDataspaceProtocolPolicy[]> {\n\t\tconst inheritedPolicies: IDataspaceProtocolPolicy[] = [];\n\n\t\t// If policy has no inheritFrom, return empty array\n\t\tif (Is.empty(policy.inheritFrom)) {\n\t\t\treturn inheritedPolicies;\n\t\t}\n\n\t\tconst inheritFromIds = ArrayHelper.fromObjectOrArray<string>(policy.inheritFrom) ?? [];\n\n\t\tfor (const inheritFromId of inheritFromIds) {\n\t\t\tconst nextDepth = currentDepth + 1;\n\t\t\tif (nextDepth > this._maxInheritanceDepth) {\n\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"maxInheritanceDepthExceeded\", {\n\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\tinheritFromId,\n\t\t\t\t\tmaxInheritanceDepth: this._maxInheritanceDepth\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Check for circular inheritance\n\t\t\tif (visitedPolicyIds.includes(inheritFromId)) {\n\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"circularInheritanceDetected\", {\n\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\tinheritFromId\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Fetch the inherited policy from the PAP\n\t\t\tconst inheritedPolicy = await this._policyAdministrationPoint.get(inheritFromId);\n\t\t\tif (Is.empty(inheritedPolicy)) {\n\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"inheritedPolicyNotFound\", {\n\t\t\t\t\tinheritFromId\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Mark this policy as visited\n\t\t\tvisitedPolicyIds.push(inheritFromId);\n\n\t\t\tinheritedPolicies.push(inheritedPolicy);\n\n\t\t\t// Recursively resolve inherited policies of the parent\n\t\t\tconst grandparentPolicies = await this.resolveInheritedPolicies(\n\t\t\t\tinheritedPolicy,\n\t\t\t\tvisitedPolicyIds,\n\t\t\t\tnextDepth\n\t\t\t);\n\t\t\tinheritedPolicies.push(...grandparentPolicies);\n\t\t}\n\n\t\treturn inheritedPolicies;\n\t}\n\n\t/**\n\t * Apply policy-level default values (assigner, assignee, target, action) to rules that don't override them.\n\t * @param policy The policy providing defaults.\n\t * @param rule The rule to apply defaults to.\n\t * @returns The rule with policy-level defaults applied.\n\t * @internal\n\t */\n\tprivate applyPolicyDefaultsToRule<T extends IOdrlRule>(\n\t\tpolicy: IDataspaceProtocolPolicy,\n\t\trule: T\n\t): T {\n\t\tconst assigner = Is.empty(rule.assigner) ? policy.assigner : rule.assigner;\n\t\tconst assignee = Is.empty(rule.assignee) ? policy.assignee : rule.assignee;\n\t\tconst target = Is.empty(rule.target) ? policy.target : rule.target;\n\t\tconst action = Is.empty(rule.action) ? policy.action : rule.action;\n\n\t\tconst assignerIds = OdrlPolicyHelper.getPartyIds(assigner);\n\t\tconst ruleAssignerIds = OdrlPolicyHelper.getPartyIds(rule.assigner);\n\t\tconst assigneeIds = OdrlPolicyHelper.getPartyIds(assignee);\n\t\tconst ruleAssigneeIds = OdrlPolicyHelper.getPartyIds(rule.assignee);\n\n\t\tlet assignerEqual = false;\n\t\tif (Is.empty(assignerIds) && Is.empty(ruleAssignerIds)) {\n\t\t\tassignerEqual = true;\n\t\t} else if (!Is.empty(assignerIds) && !Is.empty(ruleAssignerIds)) {\n\t\t\tassignerEqual =\n\t\t\t\tassignerIds.length === ruleAssignerIds.length &&\n\t\t\t\tassignerIds.every(id => ruleAssignerIds.includes(id));\n\t\t}\n\n\t\tlet assigneeEqual = false;\n\t\tif (Is.empty(assigneeIds) && Is.empty(ruleAssigneeIds)) {\n\t\t\tassigneeEqual = true;\n\t\t} else if (!Is.empty(assigneeIds) && !Is.empty(ruleAssigneeIds)) {\n\t\t\tassigneeEqual =\n\t\t\t\tassigneeIds.length === ruleAssigneeIds.length &&\n\t\t\t\tassigneeIds.every(id => ruleAssigneeIds.includes(id));\n\t\t}\n\n\t\tconst targetEqual = target === rule.target;\n\t\tconst actionEqual = action === rule.action;\n\n\t\tif (assignerEqual && assigneeEqual && targetEqual && actionEqual) {\n\t\t\treturn rule;\n\t\t}\n\n\t\treturn {\n\t\t\t...rule,\n\t\t\tassigner,\n\t\t\tassignee,\n\t\t\ttarget,\n\t\t\taction\n\t\t};\n\t}\n\n\t/**\n\t * Determine whether a rule applies to the agreement parties based on assigner/assignee.\n\t * @param rule The rule to evaluate.\n\t * @param agreementAssigner The assigner ID from the agreement.\n\t * @param agreementAssignee The assignee ID from the agreement.\n\t * @returns True if the rule is applicable to the agreement parties.\n\t * @internal\n\t */\n\tprivate isRuleApplicableToParties(\n\t\trule: IOdrlRule,\n\t\tagreementAssigner: string[] | undefined,\n\t\tagreementAssignee: string[] | undefined,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): boolean {\n\t\tconst assignerContext = this.resolveRulePartyContext(rule.assigner);\n\t\tconst assigneeContext = this.resolveRulePartyContext(rule.assignee);\n\n\t\tif (!this.isPartyApplicable(assignerContext.partyIds, agreementAssigner)) {\n\t\t\treturn false;\n\t\t}\n\n\t\tif (\n\t\t\tassignerContext.refinements.length > 0 &&\n\t\t\t!assignerContext.refinements.every(c => this.evaluateConstraint(c, dataSources))\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\n\t\tif (!this.isPartyApplicable(assigneeContext.partyIds, agreementAssignee)) {\n\t\t\treturn false;\n\t\t}\n\n\t\tif (\n\t\t\tassigneeContext.refinements.length > 0 &&\n\t\t\t!assigneeContext.refinements.every(c => this.evaluateConstraint(c, dataSources))\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\n\t\treturn true;\n\t}\n\n\t/**\n\t * Resolve rule party identifiers and refinements.\n\t * PartyCollection source values are currently not supported for party matching.\n\t * @param party The rule party value.\n\t * @returns Resolved party identifiers and refinement constraints.\n\t * @throws GeneralError if PartyCollection source has a value.\n\t * @internal\n\t */\n\tprivate resolveRulePartyContext(party: IOdrlRule[\"assigner\"] | IOdrlRule[\"assignee\"]): {\n\t\tpartyIds: string[];\n\t\trefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t} {\n\t\tconst partyIds: string[] = [];\n\t\tconst refinements: (IOdrlConstraint | IOdrlLogicalConstraint)[] = [];\n\n\t\tconst parties = ArrayHelper.fromObjectOrArray(party ?? []);\n\t\tfor (const partyEntry of parties) {\n\t\t\tif (Is.stringValue(partyEntry)) {\n\t\t\t\tpartyIds.push(partyEntry);\n\t\t\t} else if (Is.object<IOdrlParty>(partyEntry)) {\n\t\t\t\t// Guard against unsupported ODRL party properties\n\t\t\t\tif (Is.notEmpty(partyEntry.assignerOf)) {\n\t\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"partyAssignerOfNotSupported\");\n\t\t\t\t}\n\t\t\t\tif (Is.notEmpty(partyEntry.assigneeOf)) {\n\t\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"partyAssigneeOfNotSupported\");\n\t\t\t\t}\n\t\t\t\tif (Is.notEmpty(partyEntry.partOf)) {\n\t\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"partyPartOfNotSupported\");\n\t\t\t\t}\n\n\t\t\t\tif (OdrlPolicyHelper.getType(partyEntry) === OdrlTypes.PartyCollection) {\n\t\t\t\t\tconst partyCollectionEntry = partyEntry as IOdrlPartyCollection;\n\t\t\t\t\tif (Is.stringValue(partyCollectionEntry.source)) {\n\t\t\t\t\t\tthrow new GeneralError(\n\t\t\t\t\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\t\t\t\t\t\"partyCollectionSourceNotSupported\",\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tsource: partyCollectionEntry.source ?? \"\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\n\t\t\t\t\trefinements.push(...ArrayHelper.fromObjectOrArray(partyCollectionEntry.refinement ?? []));\n\t\t\t\t} else {\n\t\t\t\t\tconst partyId = OdrlPolicyHelper.getUid(partyEntry);\n\t\t\t\t\tif (Is.stringValue(partyId)) {\n\t\t\t\t\t\tpartyIds.push(partyId);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tpartyIds,\n\t\t\trefinements\n\t\t};\n\t}\n\n\t/**\n\t * Determine whether a rule party constraint applies to the agreement parties.\n\t * Rule party is treated as a constraint: if specified, it must match at least one agreement party.\n\t * @param rulePartyIds The party ids specified on the rule (if any).\n\t * @param agreementPartyIds The party ids extracted from the agreement.\n\t * @returns True if the rule party constraint is satisfied.\n\t * @internal\n\t */\n\tprivate isPartyApplicable(\n\t\trulePartyIds: string[] | undefined,\n\t\tagreementPartyIds: string[] | undefined\n\t): boolean {\n\t\t// No party specified on rule means it applies to any agreement party.\n\t\tif (Is.empty(rulePartyIds)) {\n\t\t\treturn true;\n\t\t}\n\n\t\t// Rule specifies party/parties, but agreement doesn't provide any.\n\t\tif (Is.empty(agreementPartyIds)) {\n\t\t\treturn false;\n\t\t}\n\n\t\tfor (const rulePartyId of rulePartyIds) {\n\t\t\tif (agreementPartyIds.includes(rulePartyId)) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t}\n\n\t\treturn false;\n\t}\n\n\t/**\n\t * Determine whether a rule's action(s) match the requested action.\n\t * Supports exact match, includedIn hierarchy, and implies relationships.\n\t * If no action is specified in the rule, it applies to all actions (action-agnostic).\n\t * If an action is specified in the rule and a specific action is requested, they must match.\n\t * If an action is specified in the rule but no specific action is requested, the rule applies (general evaluation).\n\t * @param ruleActions The actions defined in the rule (can be string, object, or array).\n\t * @param requestedAction The action being requested (optional).\n\t * @returns True if the rule's action(s) apply.\n\t * @internal\n\t */\n\tprivate isActionApplicable(\n\t\truleActions: IOdrlRule[\"action\"],\n\t\trequestedAction: OdrlActionType | string | undefined,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): boolean {\n\t\t// If the rule has no action specified, it applies to all actions\n\t\tif (Is.empty(ruleActions)) {\n\t\t\treturn true;\n\t\t}\n\n\t\t// If the rule has actions but no specific action is requested,\n\t\t// the rule applies (we're evaluating permissions in general)\n\t\tif (Is.empty(requestedAction)) {\n\t\t\treturn true;\n\t\t}\n\n\t\tconst requestedActionId = Is.string(requestedAction)\n\t\t\t? requestedAction\n\t\t\t: OdrlPolicyHelper.getUid(requestedAction);\n\n\t\tif (!Is.stringValue(requestedActionId)) {\n\t\t\treturn false;\n\t\t}\n\n\t\tconst ruleActionArray = ArrayHelper.fromObjectOrArray(ruleActions) ?? [];\n\n\t\tfor (const ruleAction of ruleActionArray) {\n\t\t\tif (this.ruleActionCoversRequested(ruleAction, requestedActionId, dataSources)) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t}\n\n\t\treturn false;\n\t}\n\n\t/**\n\t * Determine whether a single rule action covers a requested action.\n\t * Covers exact match plus ODRL action hierarchy semantics.\n\t * - includedIn: the rule action is a sub-action of a broader parent.\n\t * A rule naming the narrower action also covers requests for the parent.\n\t * E.g. rule action \"print\" with includedIn \"reproduce\" covers a request for \"reproduce\".\n\t * - implies: the rule action entails another action.\n\t * A rule granting action X also covers action Y when X implies Y.\n\t * E.g. rule action \"distribute\" implying \"reproduce\" covers a request for \"reproduce\".\n\t * @param ruleAction The action specified in the rule.\n\t * @param requestedActionId The requested action identifier.\n\t * @returns True if the rule action covers the requested action.\n\t * @internal\n\t */\n\tprivate ruleActionCoversRequested(\n\t\truleAction: OdrlActionType | string | IOdrlAction,\n\t\trequestedActionId: string,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): boolean {\n\t\t// Extract the rule action ID — support both @id and rdf:value forms\n\t\tlet ruleActionId: string | undefined;\n\t\tif (Is.string(ruleAction)) {\n\t\t\truleActionId = ruleAction;\n\t\t} else if (Is.object<IOdrlAction>(ruleAction)) {\n\t\t\truleActionId = ruleAction[\"rdf:value\"]?.[\"@id\"] ?? OdrlPolicyHelper.getUid(ruleAction);\n\t\t}\n\n\t\t// Determine whether this rule action covers the requested action via any semantic path.\n\t\tlet covers = false;\n\n\t\tif (Is.stringValue(ruleActionId) && ruleActionId === requestedActionId) {\n\t\t\t// Exact match\n\t\t\tcovers = true;\n\t\t} else if (Is.object<IOdrlAction>(ruleAction)) {\n\t\t\t// includedIn: rule action A includedIn B means A is a sub-type of B.\n\t\t\t// A rule that names the narrower action A with includedIn B also covers requests for B.\n\t\t\tif (Is.stringValue(ruleAction.includedIn) && ruleAction.includedIn === requestedActionId) {\n\t\t\t\tcovers = true;\n\t\t\t}\n\n\t\t\t// implies: rule action A implies B means exercising A also entails B.\n\t\t\t// A rule granting A therefore also grants each implied action.\n\t\t\tif (!covers && (ruleAction.implies ?? []).includes(requestedActionId as OdrlActionType)) {\n\t\t\t\tcovers = true;\n\t\t\t}\n\t\t}\n\n\t\tif (!covers) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// If the action specifies refinements, all must be satisfied for the action to apply.\n\t\t// Refinements constrain the manner in which the action is exercised (e.g. print count <= 5).\n\t\tif (Is.object<IOdrlAction>(ruleAction) && Is.notEmpty(ruleAction.refinement)) {\n\t\t\tconst refinements = ArrayHelper.fromObjectOrArray<IOdrlConstraint | IOdrlLogicalConstraint>(\n\t\t\t\truleAction.refinement ?? []\n\t\t\t);\n\t\t\treturn refinements.every((refinement: IOdrlConstraint | IOdrlLogicalConstraint) =>\n\t\t\t\tthis.evaluateConstraint(refinement, dataSources)\n\t\t\t);\n\t\t}\n\n\t\treturn true;\n\t}\n\n\t/**\n\t * Apply a permission and create decisions based on that information.\n\t * @param agreementAssigner The assigner ID from the agreement.\n\t * @param agreementAssignee The assignee ID from the agreement.\n\t * @param policy The policy containing the permission.\n\t * @param permission The permission to apply.\n\t * @param targetRefinements Additional constraints from target refinement.\n\t * @param dataSources The operand lookup sources.\n\t * @returns True if the permission applies.\n\t * @internal\n\t */\n\tprivate async evaluatePermission(\n\t\tagreementAssigner: string[] | undefined,\n\t\tagreementAssignee: string[] | undefined,\n\t\tpolicy: IDataspaceProtocolPolicy,\n\t\tpermission: IOdrlPermission,\n\t\ttargetRefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[],\n\t\tdataSources: { [prefix: string]: unknown },\n\t\taction?: OdrlActionType | string,\n\t\tdecisionTarget?: string\n\t): Promise<boolean> {\n\t\tif (\n\t\t\t!this.isRuleApplicableToParties(permission, agreementAssigner, agreementAssignee, dataSources)\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// Check if the permission's action(s) match the requested action\n\t\tif (!this.isActionApplicable(permission.action, action, dataSources)) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// ODRL semantics: a Permission without constraints is unconditional.\n\t\tconst constraints = [\n\t\t\t...ArrayHelper.fromObjectOrArray(permission.constraint ?? []),\n\t\t\t...targetRefinements\n\t\t];\n\t\tconst permissionTargetLookup = this.tryResolveTargetDataSource(\n\t\t\tthis.buildRuleDataContextTargetId(\n\t\t\t\tthis.getRuleDataContextTargetId(permission.target),\n\t\t\t\tdecisionTarget\n\t\t\t),\n\t\t\tdataSources,\n\t\t\ttrue\n\t\t);\n\t\tconst ruleDataContext = permissionTargetLookup.value;\n\t\tif (constraints.length === 0) {\n\t\t\treturn this.enforcePermissionDuties(policy, permission, dataSources, ruleDataContext);\n\t\t}\n\n\t\t// All constraints must be satisfied for the permission to apply.\n\t\tconst constraintsSatisfied = constraints.every(c => this.evaluateConstraint(c, dataSources));\n\n\t\tif (!constraintsSatisfied) {\n\t\t\treturn false;\n\t\t}\n\n\t\treturn this.enforcePermissionDuties(policy, permission, dataSources, ruleDataContext);\n\t}\n\n\t/**\n\t * Enforce duties attached to a permission.\n\t * @param policy The policy being evaluated.\n\t * @param permission The permission being evaluated.\n\t * @param dataSources The operand lookup sources.\n\t * @param ruleDataContext The target-scoped data context passed to enforcers.\n\t * @returns True if all duties are enforced or none are present.\n\t * @internal\n\t */\n\tprivate async enforcePermissionDuties(\n\t\tpolicy: IDataspaceProtocolPolicy,\n\t\tpermission: IOdrlPermission,\n\t\tdataSources: { [prefix: string]: unknown },\n\t\truleDataContext?: unknown\n\t): Promise<boolean> {\n\t\tconst duties = ArrayHelper.fromObjectOrArray(permission.duty ?? []);\n\t\tif (duties.length === 0) {\n\t\t\treturn true;\n\t\t}\n\n\t\tfor (const duty of duties) {\n\t\t\tconst enforced = await this.enforceDuty(policy, duty, dataSources, ruleDataContext);\n\t\t\tif (!enforced) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t}\n\n\t\treturn true;\n\t}\n\n\t/**\n\t * Enforce a single duty using registered obligation enforcers.\n\t * @param policy The policy being evaluated.\n\t * @param duty The duty to enforce.\n\t * @param dataSources The operand lookup sources.\n\t * @param ruleDataContext The target-scoped data context passed to enforcers.\n\t * @returns True if any enforcer succeeds.\n\t * @internal\n\t */\n\tprivate async enforceDuty(\n\t\tpolicy: IDataspaceProtocolPolicy,\n\t\tduty: IOdrlDuty,\n\t\tdataSources: { [prefix: string]: unknown },\n\t\truleDataContext?: unknown\n\t): Promise<boolean> {\n\t\tconst enforcerNames = PolicyObligationEnforcerFactory.names();\n\t\tconst information = dataSources[\n\t\t\t`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_INFORMATION}`\n\t\t] as { [id: string]: IJsonLdNodeObject } | undefined;\n\n\t\tif (enforcerNames.length === 0) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"noObligationEnforcersRegistered\");\n\t\t}\n\n\t\tfor (const enforcerName of enforcerNames) {\n\t\t\tconst enforcer = PolicyObligationEnforcerFactory.get(enforcerName);\n\t\t\tif (await enforcer.enforce(policy, duty, information, ruleDataContext)) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t}\n\n\t\tconst consequences = ArrayHelper.fromObjectOrArray<IOdrlDuty>(duty.consequence ?? []);\n\t\tif (consequences.length === 0) {\n\t\t\treturn false;\n\t\t}\n\n\t\tfor (const consequence of consequences) {\n\t\t\tif (!(await this.enforceDuty(policy, consequence, dataSources, ruleDataContext))) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t}\n\n\t\treturn true;\n\t}\n\n\t/**\n\t * Resolve a target string to a matching datasource prefix and remaining target value.\n\t * @param targetId The target identifier to resolve.\n\t * @param dataSources The available lookup sources.\n\t * @param resolveValue True to resolve an item from the target path/key.\n\t * @returns The matching prefix, source, remaining target and optional resolved value.\n\t * @internal\n\t */\n\tprivate tryResolveTargetDataSource(\n\t\ttargetId: string | undefined,\n\t\tdataSources: { [prefix: string]: unknown },\n\t\tresolveValue: boolean = false\n\t): { prefix: string; source: unknown; target: string; value?: unknown } {\n\t\t// If there is no target id, default to the entire \"twin:jsonpath\" datasource\n\t\tif (Is.empty(targetId)) {\n\t\t\treturn {\n\t\t\t\tprefix: `${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}`,\n\t\t\t\tsource:\n\t\t\t\t\tdataSources[\n\t\t\t\t\t\t`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}`\n\t\t\t\t\t],\n\t\t\t\ttarget: \"$\",\n\t\t\t\tvalue:\n\t\t\t\t\tdataSources[\n\t\t\t\t\t\t`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}`\n\t\t\t\t\t]\n\t\t\t};\n\t\t}\n\n\t\t// Otherwise lookup the target id prefix in the datasources and return the remaining suffix as the target path/key\n\t\tconst prefixes = Object.keys(dataSources).sort((a, b) => b.length - a.length);\n\t\tfor (const prefix of prefixes) {\n\t\t\tif (targetId.startsWith(`${prefix}:`)) {\n\t\t\t\tconst source = dataSources[prefix];\n\t\t\t\tconst target = targetId.slice(prefix.length + 1);\n\n\t\t\t\tif (!target.startsWith(\"$\")) {\n\t\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"ruleTargetNotSupported\", {\n\t\t\t\t\t\ttarget: targetId\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\tif (!resolveValue) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tprefix,\n\t\t\t\t\t\tsource,\n\t\t\t\t\t\ttarget\n\t\t\t\t\t};\n\t\t\t\t}\n\n\t\t\t\tconst matches = JsonPathHelper.query(target, source);\n\t\t\t\tif (matches.length === 0) {\n\t\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"ruleTargetNotSupported\", {\n\t\t\t\t\t\ttarget: targetId\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\treturn {\n\t\t\t\t\tprefix,\n\t\t\t\t\tsource,\n\t\t\t\t\ttarget,\n\t\t\t\t\tvalue: matches.length === 1 ? matches[0].value : matches.map(m => m.value)\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"ruleTargetNotSupported\", {\n\t\t\ttarget: targetId\n\t\t});\n\t}\n\n\t/**\n\t * Extract the target id from the permission.\n\t * @param target The permission target.\n\t * @returns The information key, or undefined when the target is not an information reference.\n\t * @internal\n\t */\n\tprivate getTargetId(target: IOdrlRule[\"target\"]): string | undefined {\n\t\tif (Is.undefined(target)) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tif (Is.array(target) && target.length > 1) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"multipleTargetsNotSupported\");\n\t\t}\n\n\t\tconst arr = ArrayHelper.fromObjectOrArray(target ?? []);\n\t\tif (arr.length === 0) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\treturn Is.string(arr[0]) ? arr[0] : OdrlPolicyHelper.getUid(arr[0]);\n\t}\n\n\t/**\n\t * Resolve the target identifier used for rule data context lookup.\n\t * For AssetCollection targets the `source` property is used because the collection has no `uid`.\n\t * Falls back to `getTargetId` for all other target forms.\n\t * @param target The rule target field value.\n\t * @returns The prefixed target string for data context resolution.\n\t * @internal\n\t */\n\tprivate getRuleDataContextTargetId(target: IOdrlRule[\"target\"]): string | undefined {\n\t\tconst arr = ArrayHelper.fromObjectOrArray(target ?? []);\n\t\tif (arr.length === 1) {\n\t\t\tconst firstTarget = arr[0];\n\t\t\tif (\n\t\t\t\tIs.object<IOdrlAssetCollection>(firstTarget) &&\n\t\t\t\tOdrlPolicyHelper.getType(firstTarget) === OdrlTypes.AssetCollection &&\n\t\t\t\tIs.stringValue(firstTarget.source)\n\t\t\t) {\n\t\t\t\treturn firstTarget.source;\n\t\t\t}\n\t\t}\n\t\treturn this.getTargetId(target);\n\t}\n\n\t/**\n\t * Build a concrete prefixed target id for rule data-context lookup.\n\t * @param baseTargetId The original prefixed target id from the rule.\n\t * @param decisionTarget The concrete decision JSONPath target.\n\t * @returns The concrete prefixed target id.\n\t * @internal\n\t */\n\tprivate buildRuleDataContextTargetId(\n\t\tbaseTargetId: string | undefined,\n\t\tdecisionTarget: string | undefined\n\t): string | undefined {\n\t\tif (!Is.stringValue(decisionTarget) || decisionTarget === \"$\") {\n\t\t\treturn baseTargetId;\n\t\t}\n\n\t\tif (!Is.stringValue(baseTargetId)) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst pathStartIndex = baseTargetId.indexOf(\":$\");\n\t\tif (pathStartIndex < 0) {\n\t\t\treturn baseTargetId;\n\t\t}\n\n\t\treturn `${baseTargetId.slice(0, pathStartIndex)}:${decisionTarget}`;\n\t}\n\n\t/**\n\t * Resolve a rule target into a policy-decision JSONPath target and extracted refinements.\n\t * For AssetCollection targets, `source` is treated as the decision target and `refinement`\n\t * constraints are applied as additional rule constraints.\n\t * @param rule The rule to resolve the target for.\n\t * @returns The decision target and target refinements.\n\t * @throws GeneralError if target is invalid or unsupported.\n\t * @internal\n\t */\n\tprivate resolveRuleTarget(\n\t\trule: IOdrlRule,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): {\n\t\ttarget: string;\n\t\trefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t} {\n\t\tconst arr = ArrayHelper.fromObjectOrArray(rule.target ?? []);\n\t\tif (arr.length === 0) {\n\t\t\treturn {\n\t\t\t\ttarget: \"$\",\n\t\t\t\trefinements: []\n\t\t\t};\n\t\t}\n\n\t\tif (arr.length > 1) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"multipleTargetsNotSupported\");\n\t\t}\n\n\t\tconst firstTarget = arr[0];\n\n\t\tif (Is.object<IOdrlAsset>(firstTarget)) {\n\t\t\t// Guard against unsupported ODRL asset properties\n\t\t\tif (Is.notEmpty(firstTarget.hasPolicy)) {\n\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"assetHasPolicyNotSupported\");\n\t\t\t}\n\t\t\tif (Is.notEmpty(firstTarget.partOf)) {\n\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"assetPartOfNotSupported\");\n\t\t\t}\n\n\t\t\tif (\n\t\t\t\tIs.object<IOdrlAssetCollection>(firstTarget) &&\n\t\t\t\tOdrlPolicyHelper.getType(firstTarget) === OdrlTypes.AssetCollection\n\t\t\t) {\n\t\t\t\tif (!Is.stringValue(firstTarget.source)) {\n\t\t\t\t\tthrow new GeneralError(\n\t\t\t\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\t\t\t\t\"assetCollectionSourceNotSupported\",\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsource: firstTarget.source ?? \"\"\n\t\t\t\t\t\t}\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tlet sourceLookup: { prefix: string; source: unknown; target: string; value?: unknown };\n\t\t\t\ttry {\n\t\t\t\t\tsourceLookup = this.tryResolveTargetDataSource(firstTarget.source, dataSources);\n\t\t\t\t} catch {\n\t\t\t\t\tthrow new GeneralError(\n\t\t\t\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\t\t\t\t\"assetCollectionSourceNotSupported\",\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsource: firstTarget.source\n\t\t\t\t\t\t}\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\treturn {\n\t\t\t\t\ttarget: sourceLookup.target,\n\t\t\t\t\trefinements: ArrayHelper.fromObjectOrArray(firstTarget.refinement ?? [])\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\tconst targetId = Is.string(firstTarget) ? firstTarget : OdrlPolicyHelper.getUid(firstTarget);\n\t\tif (!Is.stringValue(targetId)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"ruleTargetNotSupported\", {\n\t\t\t\ttarget: \"\"\n\t\t\t});\n\t\t}\n\n\t\tconst targetLookup = this.tryResolveTargetDataSource(targetId, dataSources);\n\n\t\treturn {\n\t\t\ttarget: targetLookup.target,\n\t\t\trefinements: []\n\t\t};\n\t}\n\n\t/**\n\t * Resolve decision targets for a rule.\n\t * AssetCollection wildcard targets with refinements are expanded to per-item targets.\n\t * @param rule The rule being evaluated.\n\t * @param dataSources The operand lookup sources.\n\t * @returns The decision targets and scoped refinements.\n\t * @internal\n\t */\n\tprivate resolveRuleDecisionTargets(\n\t\trule: IOdrlRule,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): {\n\t\ttarget: string;\n\t\trefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t}[] {\n\t\tconst resolvedTarget = this.resolveRuleTarget(rule, dataSources);\n\n\t\tif (!this.shouldExpandToPerItemTargets(rule, resolvedTarget)) {\n\t\t\treturn [resolvedTarget];\n\t\t}\n\n\t\tconst sourceLookup = this.tryResolveTargetDataSource(\n\t\t\tthis.getRuleDataContextTargetId(rule.target),\n\t\t\tdataSources\n\t\t);\n\t\tconst matches = JsonPathHelper.query(sourceLookup.target, sourceLookup.source);\n\t\tif (matches.length === 0) {\n\t\t\treturn [resolvedTarget];\n\t\t}\n\n\t\treturn matches.map(match => {\n\t\t\tconst itemTarget = this.normalizeDecisionTargetPath(match.path ?? resolvedTarget.target);\n\t\t\treturn {\n\t\t\t\ttarget: itemTarget,\n\t\t\t\trefinements: resolvedTarget.refinements.map(refinement =>\n\t\t\t\t\tthis.rewriteRefinementForDecisionTarget(refinement, resolvedTarget.target, itemTarget)\n\t\t\t\t)\n\t\t\t};\n\t\t});\n\t}\n\n\t/**\n\t * Determine if a rule should be expanded to per-item targets.\n\t * @param rule The rule.\n\t * @param resolvedTarget The resolved target details.\n\t * @returns True if the rule should emit per-item decisions.\n\t * @internal\n\t */\n\tprivate shouldExpandToPerItemTargets(\n\t\trule: IOdrlRule,\n\t\tresolvedTarget: {\n\t\t\ttarget: string;\n\t\t\trefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t\t}\n\t): boolean {\n\t\tif (resolvedTarget.refinements.length === 0 || !resolvedTarget.target.includes(\"[*]\")) {\n\t\t\treturn false;\n\t\t}\n\n\t\tconst targets = ArrayHelper.fromObjectOrArray(rule.target ?? []);\n\t\tif (targets.length !== 1 || !Is.object<IOdrlAssetCollection>(targets[0])) {\n\t\t\treturn false;\n\t\t}\n\n\t\treturn OdrlPolicyHelper.getType(targets[0]) === OdrlTypes.AssetCollection;\n\t}\n\n\t/**\n\t * Rewrite a refinement so wildcard paths are scoped to a concrete item target.\n\t * @param refinement The refinement to rewrite.\n\t * @param sourceTarget The wildcard source target.\n\t * @param itemTarget The concrete item target.\n\t * @returns The rewritten refinement.\n\t * @internal\n\t */\n\tprivate rewriteRefinementForDecisionTarget(\n\t\trefinement: IOdrlConstraint | IOdrlLogicalConstraint,\n\t\tsourceTarget: string,\n\t\titemTarget: string\n\t): IOdrlConstraint | IOdrlLogicalConstraint {\n\t\tconst logicalConstraint = this.getLogicalConstraintOperands(refinement);\n\t\tif (logicalConstraint) {\n\t\t\treturn {\n\t\t\t\t...refinement,\n\t\t\t\t[logicalConstraint.operator]: logicalConstraint.constraints.map(item =>\n\t\t\t\t\tthis.rewriteRefinementForDecisionTarget(item, sourceTarget, itemTarget)\n\t\t\t\t)\n\t\t\t} as IOdrlLogicalConstraint;\n\t\t}\n\n\t\tconst regularConstraint = refinement as IOdrlConstraint;\n\t\treturn {\n\t\t\t...regularConstraint,\n\t\t\tleftOperand: this.rewriteOperandForDecisionTarget(\n\t\t\t\tregularConstraint.leftOperand,\n\t\t\t\tsourceTarget,\n\t\t\t\titemTarget\n\t\t\t) as IOdrlConstraint[\"leftOperand\"],\n\t\t\trightOperand: this.rewriteOperandForDecisionTarget(\n\t\t\t\tregularConstraint.rightOperand,\n\t\t\t\tsourceTarget,\n\t\t\t\titemTarget\n\t\t\t)\n\t\t};\n\t}\n\n\t/**\n\t * Rewrite JSONPath-based operands from wildcard source to concrete item target.\n\t * @param operand The operand to rewrite.\n\t * @param sourceTarget The wildcard source target.\n\t * @param itemTarget The concrete item target.\n\t * @returns The rewritten operand.\n\t * @internal\n\t */\n\tprivate rewriteOperandForDecisionTarget(\n\t\toperand: IOdrlConstraint[\"leftOperand\"] | IOdrlConstraint[\"rightOperand\"] | string,\n\t\tsourceTarget: string,\n\t\titemTarget: string\n\t): IOdrlConstraint[\"leftOperand\"] | IOdrlConstraint[\"rightOperand\"] | string {\n\t\tif (Is.stringValue(operand)) {\n\t\t\tconst prefix = `${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}:`;\n\t\t\tif (operand.startsWith(prefix)) {\n\t\t\t\tconst valuePath = operand.slice(prefix.length);\n\t\t\t\treturn `${prefix}${this.rewriteWildcardPath(valuePath, sourceTarget, itemTarget)}`;\n\t\t\t}\n\t\t\treturn operand;\n\t\t}\n\n\t\tif (Is.object<{ \"@type\": unknown; \"@value\": unknown }>(operand)) {\n\t\t\tconst typedOperand = { ...operand };\n\t\t\tif (\n\t\t\t\ttypedOperand[\"@type\"] ===\n\t\t\t\t\t`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}` &&\n\t\t\t\tIs.stringValue(typedOperand[\"@value\"])\n\t\t\t) {\n\t\t\t\ttypedOperand[\"@value\"] = this.rewriteWildcardPath(\n\t\t\t\t\ttypedOperand[\"@value\"],\n\t\t\t\t\tsourceTarget,\n\t\t\t\t\titemTarget\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn typedOperand;\n\t\t}\n\n\t\treturn operand;\n\t}\n\n\t/**\n\t * Rewrite wildcard source JSONPath segments to a concrete item JSONPath.\n\t * @param valuePath The operand path.\n\t * @param sourceTarget The wildcard source path.\n\t * @param itemTarget The concrete item path.\n\t * @returns The rewritten path.\n\t * @internal\n\t */\n\tprivate rewriteWildcardPath(valuePath: string, sourceTarget: string, itemTarget: string): string {\n\t\tif (!sourceTarget.includes(\"[*]\") || !valuePath.includes(\"[*]\")) {\n\t\t\treturn valuePath;\n\t\t}\n\n\t\tif (valuePath.startsWith(sourceTarget)) {\n\t\t\treturn `${itemTarget}${valuePath.slice(sourceTarget.length)}`;\n\t\t}\n\n\t\treturn valuePath;\n\t}\n\n\t/**\n\t * Normalize JSONPath strings to dot notation for stable decision targets.\n\t * @param path The JSONPath to normalize.\n\t * @returns The normalized path.\n\t * @internal\n\t */\n\tprivate normalizeDecisionTargetPath(path: string): string {\n\t\treturn path.replace(/\\['([^']+)']/g, \".$1\");\n\t}\n\n\t/**\n\t * Evaluate a single ODRL constraint against the available context.\n\t * Supports logical constraint composition through nested refinements.\n\t * @param constraint The constraint to evaluate.\n\t * @param dataSources The operand lookup sources.\n\t * @returns True if the constraint is satisfied.\n\t * @internal\n\t */\n\tprivate evaluateConstraint(\n\t\tconstraint: IOdrlConstraint | IOdrlLogicalConstraint,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): boolean {\n\t\tconst logicalConstraint = this.getLogicalConstraintOperands(constraint);\n\t\tif (logicalConstraint) {\n\t\t\treturn this.evaluateLogicalConstraint(logicalConstraint, dataSources);\n\t\t}\n\n\t\t// Must be a regular constraint beyond this point\n\t\tconst regularConstraint = constraint as IOdrlConstraint;\n\n\t\t// rightOperandReference is not supported — it requires an external IRI lookup that\n\t\t// is outside the scope of the local evaluation engine.\n\t\tif (Is.notEmpty(regularConstraint.rightOperandReference)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"rightOperandReferenceNotSupported\");\n\t\t}\n\n\t\t// dataType specifies how the rightOperand value should be coerced before comparison.\n\t\t// Without dataType-aware coercion logic the comparison may produce incorrect results.\n\t\tif (Is.notEmpty(regularConstraint.dataType)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"constraintDataTypeNotSupported\");\n\t\t}\n\n\t\t// unit specifies the measurement unit for the right operand (e.g. currency, length).\n\t\t// Unit-aware comparison is not implemented.\n\t\tif (Is.notEmpty(regularConstraint.unit)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"constraintUnitNotSupported\");\n\t\t}\n\n\t\t// status represents a state-based evaluation operand (e.g. odrl:policyUsage).\n\t\t// State-based evaluation is not implemented.\n\t\tif (Is.notEmpty(regularConstraint.status)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"constraintStatusNotSupported\");\n\t\t}\n\n\t\t// Evaluate the main constraint condition\n\t\tconst leftValue = this.calculateOperandValue(regularConstraint.leftOperand, dataSources);\n\t\tconst rightValue = this.calculateOperandValue(regularConstraint.rightOperand, dataSources);\n\t\tconst mainSatisfied = this.evaluateOperator(regularConstraint.operator, leftValue, rightValue);\n\n\t\t// If main constraint is not satisfied, the overall constraint fails\n\t\treturn mainSatisfied;\n\t}\n\n\t/**\n\t * Extract logical constraint operands when present.\n\t * @param constraint The constraint to inspect.\n\t * @returns The logical operator and its operands, or undefined when not logical.\n\t * @throws GeneralError if logical constraint operands are not unique.\n\t * @internal\n\t */\n\tprivate getLogicalConstraintOperands(constraint: IOdrlConstraint | IOdrlLogicalConstraint):\n\t\t| {\n\t\t\t\toperator: OdrlLogicalConstraintType;\n\t\t\t\tconstraints: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t\t }\n\t\t| undefined {\n\t\tconst logicalConstraint = constraint as IOdrlLogicalConstraint;\n\t\tconst operators: OdrlLogicalConstraintType[] = Object.values(OdrlLogicalConstraintType);\n\t\tfor (const operator of operators) {\n\t\t\tconst value = logicalConstraint[operator];\n\t\t\tif (!Is.undefined(value)) {\n\t\t\t\tconst constraints = this.normalizeLogicalConstraintOperands(value);\n\t\t\t\tthis.validateLogicalConstraintOperandUniqueness(constraints, operator);\n\t\t\t\treturn {\n\t\t\t\t\toperator,\n\t\t\t\t\tconstraints\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn undefined;\n\t}\n\n\t/**\n\t * Normalize logical constraint operands into a constraint array.\n\t * Handles both IOdrlConstraint and IOdrlLogicalConstraint types.\n\t * @param raw The raw operand value.\n\t * @returns The constraint array.\n\t * @internal\n\t */\n\tprivate normalizeLogicalConstraintOperands(\n\t\traw: unknown\n\t): (IOdrlConstraint | IOdrlLogicalConstraint)[] {\n\t\tlet normalized = raw;\n\t\tif (\n\t\t\tIs.object<IOdrlLogicalConstraintOperand>(normalized) &&\n\t\t\t!Is.undefined(normalized[\"@list\"])\n\t\t) {\n\t\t\tnormalized = normalized[\"@list\"];\n\t\t}\n\n\t\treturn (ArrayHelper.fromObjectOrArray(normalized) ?? [])\n\t\t\t.filter(item => Is.object(item))\n\t\t\t.map(item => item as IOdrlConstraint | IOdrlLogicalConstraint);\n\t}\n\n\t/**\n\t * Validate that all operands in a logical constraint are unique.\n\t * ODRL spec 2.5.2 requires that all operand values MUST be unique Constraint instances.\n\t * Uniqueness is checked by uid property and id property.\n\t * @param constraints The constraint operands to validate.\n\t * @param operator The logical operator type (for error messaging).\n\t * @throws GeneralError if duplicate constraints are found.\n\t * @internal\n\t */\n\tprivate validateLogicalConstraintOperandUniqueness(\n\t\tconstraints: (IOdrlConstraint | IOdrlLogicalConstraint)[],\n\t\toperator: OdrlLogicalConstraintType\n\t): void {\n\t\tconst seenIdentifiers = new Set<string>();\n\n\t\tfor (let i = 0; i < constraints.length; i++) {\n\t\t\tconst constraint = constraints[i];\n\t\t\tconst identifier = OdrlPolicyHelper.getUid(constraint);\n\n\t\t\t// If we have an identifier, check for duplicates\n\t\t\tif (Is.stringValue(identifier)) {\n\t\t\t\tif (seenIdentifiers.has(identifier)) {\n\t\t\t\t\tthrow new GeneralError(\n\t\t\t\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\t\t\t\t\"logicalConstraintOperandNotUnique\",\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\toperator,\n\t\t\t\t\t\t\tidentifier,\n\t\t\t\t\t\t\tindex: i\n\t\t\t\t\t\t}\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tseenIdentifiers.add(identifier);\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Evaluate a logical constraint operator against its operands.\n\t * @param logicalConstraint The operator and operand list.\n\t * @param dataSources The operand lookup sources.\n\t * @returns True if the logical constraint is satisfied.\n\t * @internal\n\t */\n\tprivate evaluateLogicalConstraint(\n\t\tlogicalConstraint: {\n\t\t\toperator: OdrlLogicalConstraintType;\n\t\t\tconstraints: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t\t},\n\t\tdataSources: { [prefix: string]: unknown }\n\t): boolean {\n\t\tconst { operator, constraints } = logicalConstraint;\n\t\tif (constraints.length === 0) {\n\t\t\treturn false;\n\t\t}\n\n\t\tswitch (operator) {\n\t\t\tcase OdrlLogicalConstraintType.And:\n\t\t\t\treturn constraints.every(item => this.evaluateConstraint(item, dataSources));\n\t\t\tcase OdrlLogicalConstraintType.AndSequence: {\n\t\t\t\tfor (const item of constraints) {\n\t\t\t\t\tif (!this.evaluateConstraint(item, dataSources)) {\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase OdrlLogicalConstraintType.Or:\n\t\t\t\treturn constraints.some(item => this.evaluateConstraint(item, dataSources));\n\t\t\tcase OdrlLogicalConstraintType.Xone: {\n\t\t\t\tlet satisfied = 0;\n\t\t\t\tfor (const item of constraints) {\n\t\t\t\t\tif (this.evaluateConstraint(item, dataSources)) {\n\t\t\t\t\t\tsatisfied += 1;\n\t\t\t\t\t\tif (satisfied > 1) {\n\t\t\t\t\t\t\treturn false;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn satisfied === 1;\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn false;\n\t\t}\n\t}\n\n\t/**\n\t * Resolve a prefixed operand to its source object and JSONPath expression.\n\t * Prefix matching is dictionary-driven so additional operand namespaces can be\n\t * added in one place by extending the lookup sources map.\n\t * @param operandTypeOrValue The string operand value or typed operand namespace.\n\t * @param operandValue The JSONPath expression.\n\t * @param dataSources The available lookup sources.\n\t * @returns The resolved source and JSONPath, or undefined when not namespaced.\n\t * @throws GeneralError if a twin: prefixed operand doesn't resolve to any available datasource key.\n\t * @internal\n\t */\n\tprivate tryResolveOperandLookup(\n\t\toperandTypeOrValue: string,\n\t\toperandValue: unknown,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): { source: unknown; jsonPath: string } | undefined {\n\t\tlet lookupTargetId: string | undefined;\n\n\t\tif (dataSources[operandTypeOrValue]) {\n\t\t\tif (!Is.stringValue(operandValue)) {\n\t\t\t\treturn undefined;\n\t\t\t}\n\n\t\t\tlookupTargetId = `${operandTypeOrValue}:${operandValue}`;\n\t\t} else if (operandTypeOrValue.includes(\":\")) {\n\t\t\tlookupTargetId = operandTypeOrValue;\n\t\t} else {\n\t\t\treturn undefined;\n\t\t}\n\n\t\t// Delegate prefixed path matching to shared datasource resolver\n\t\tif (operandTypeOrValue.startsWith(DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS)) {\n\t\t\tconst resolved = this.tryResolveTargetDataSource(lookupTargetId, dataSources);\n\t\t\treturn {\n\t\t\t\tsource: resolved.source,\n\t\t\t\tjsonPath: resolved.target\n\t\t\t};\n\t\t}\n\t}\n\n\t/**\n\t * Calculate an operand value.\n\t * @param operand The operand.\n\t * @param dataSources The available prefixed operand sources.\n\t * @returns The resolved operand value.\n\t * @internal\n\t */\n\tprivate calculateOperandValue(\n\t\toperand: IOdrlConstraint[\"leftOperand\"] | IOdrlConstraint[\"rightOperand\"] | string,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): unknown {\n\t\t// Treat prefixed operands as selectors against a namespaced source dictionary.\n\t\t// Examples: twin:jsonpath:$.field, twin:information:$.credentials.level\n\t\tlet jsonPath: string | undefined;\n\t\tlet operandRoot: unknown;\n\t\tif (Is.stringValue(operand)) {\n\t\t\tconst lookup = this.tryResolveOperandLookup(operand, operand, dataSources);\n\t\t\tif (lookup) {\n\t\t\t\tjsonPath = lookup.jsonPath;\n\t\t\t\toperandRoot = lookup.source;\n\t\t\t}\n\t\t} else if (Is.object<{ \"@type\": unknown; \"@value\": unknown }>(operand)) {\n\t\t\t// Is this an object { \"@value\": \"18\", \"@type\": \"xsd:integer\" } ?\n\t\t\tconst value = operand[\"@value\"];\n\t\t\tconst type = operand[\"@type\"];\n\t\t\tif (Is.stringValue(type)) {\n\t\t\t\tconst lookup = this.tryResolveOperandLookup(type, value, dataSources);\n\t\t\t\tif (lookup) {\n\t\t\t\t\tjsonPath = lookup.jsonPath;\n\t\t\t\t\toperandRoot = lookup.source;\n\t\t\t\t} else {\n\t\t\t\t\tconst xsdValue = this.coerceXsdType(value, type);\n\t\t\t\t\tif (!Is.undefined(xsdValue)) {\n\t\t\t\t\t\treturn xsdValue;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\t// We have a JSON Path to resolve\n\t\tif (Is.stringValue(jsonPath)) {\n\t\t\tconst jsonPaths = JsonPathHelper.query(jsonPath, operandRoot);\n\t\t\tif (jsonPaths.length === 0) {\n\t\t\t\t// No matches\n\t\t\t\treturn undefined;\n\t\t\t} else if (jsonPaths.length === 1) {\n\t\t\t\t// Single match - return the value directly\n\t\t\t\treturn jsonPaths[0].value;\n\t\t\t}\n\n\t\t\t// Multiple matches - return array of values\n\t\t\treturn jsonPaths.map(p => p.value);\n\t\t}\n\n\t\t// Not JSON Path or object value so return as is\n\t\treturn operand;\n\t}\n\n\t/**\n\t * Evaluate an ODRL operator against resolved operands.\n\t * @param operator The operator.\n\t * @param left The resolved left operand.\n\t * @param right The resolved right operand.\n\t * @returns True if the comparison is satisfied.\n\t * @internal\n\t */\n\tprivate evaluateOperator(operator: OdrlOperatorType, left: unknown, right: unknown): boolean {\n\t\t// Handle array/collection left values (e.g. JSONPath returning multiple matches).\n\t\tconst leftValues = ArrayHelper.fromObjectOrArray(left ?? []);\n\n\t\tswitch (operator) {\n\t\t\tcase OdrlOperatorType.Eq:\n\t\t\t\treturn leftValues.some(v => ObjectHelper.equal(v, right, false));\n\t\t\tcase OdrlOperatorType.Neq:\n\t\t\t\treturn leftValues.every(v => !ObjectHelper.equal(v, right, false));\n\t\t\tcase OdrlOperatorType.Gt:\n\t\t\t\treturn leftValues.some(v => this.compareOrdered(v, right, (a, b) => a > b));\n\t\t\tcase OdrlOperatorType.Gteq:\n\t\t\t\treturn leftValues.some(v => this.compareOrdered(v, right, (a, b) => a >= b));\n\t\t\tcase OdrlOperatorType.Lt:\n\t\t\t\treturn leftValues.some(v => this.compareOrdered(v, right, (a, b) => a < b));\n\t\t\tcase OdrlOperatorType.Lteq:\n\t\t\t\treturn leftValues.some(v => this.compareOrdered(v, right, (a, b) => a <= b));\n\t\t\tcase OdrlOperatorType.IsAnyOf: {\n\t\t\t\treturn leftValues.some(v => {\n\t\t\t\t\tconst stringValue =\n\t\t\t\t\t\ttypeof v === \"string\" || typeof v === \"number\" || typeof v === \"boolean\"\n\t\t\t\t\t\t\t? String(v)\n\t\t\t\t\t\t\t: JSON.stringify(v);\n\t\t\t\t\treturn (ArrayHelper.fromObjectOrArray(right) ?? []).includes(stringValue);\n\t\t\t\t});\n\t\t\t}\n\t\t\tcase OdrlOperatorType.IsAllOf: {\n\t\t\t\treturn ObjectHelper.equal(leftValues, ArrayHelper.fromObjectOrArray(right) ?? [], false);\n\t\t\t}\n\t\t\tcase OdrlOperatorType.IsNoneOf: {\n\t\t\t\treturn leftValues.every(v => !(ArrayHelper.fromObjectOrArray(right) ?? []).includes(v));\n\t\t\t}\n\t\t\tcase OdrlOperatorType.LocTimeEq:\n\t\t\t\treturn leftValues.some(v => ObjectHelper.equal(v, right, false));\n\t\t\tcase OdrlOperatorType.LocTimeGteq:\n\t\t\t\treturn leftValues.some(v => this.compareOrdered(v, right, (a, b) => a >= b));\n\t\t\tcase OdrlOperatorType.IsA:\n\t\t\tcase OdrlOperatorType.HasPart:\n\t\t\tcase OdrlOperatorType.IsPartOf:\n\t\t\t\t// For now, treat these as simple equality/ordering semantics where meaningful.\n\t\t\t\t// Profiles can introduce richer semantics via additional arbiters.\n\t\t\t\treturn leftValues.some(v => ObjectHelper.equal(v, right, false));\n\t\t\tdefault:\n\t\t\t\treturn false;\n\t\t}\n\t}\n\n\t/**\n\t * Compare values with numeric/date/string coercion.\n\t * @param left The left value.\n\t * @param right The right value.\n\t * @param compare Comparison operator.\n\t * @returns True if ordered comparison passes.\n\t * @internal\n\t */\n\tprivate compareOrdered(\n\t\tleft: unknown,\n\t\tright: unknown,\n\t\tcompare: (a: number, b: number) => boolean\n\t): boolean {\n\t\tconst leftNum = Coerce.number(left);\n\t\tconst rightNum = Coerce.number(right);\n\t\tif (!Is.undefined(leftNum) && !Is.undefined(rightNum)) {\n\t\t\treturn compare(leftNum, rightNum);\n\t\t}\n\t\tconst leftDate = Coerce.dateTime(left);\n\t\tconst rightDate = Coerce.dateTime(right);\n\t\tif (!Is.undefined(leftDate) && !Is.undefined(rightDate)) {\n\t\t\treturn compare(leftDate.getTime(), rightDate.getTime());\n\t\t}\n\n\t\t// Only use string ordering when both operands are actual strings.\n\t\t// Avoid coercing other types into strings, as that can cause\n\t\t// unintended comparisons like 18 >= \"$.minAge\" evaluating to true.\n\t\tif (Is.string(left) && Is.string(right)) {\n\t\t\treturn compare(left.localeCompare(right), 0);\n\t\t}\n\n\t\treturn false;\n\t}\n\n\t/**\n\t * Coerce a value to a specific XSD type.\n\t * @param value The value to coerce.\n\t * @param type The XSD type.\n\t * @returns The coerced value, or undefined when coercion is not possible.\n\t * @internal\n\t */\n\tprivate coerceXsdType(value: unknown, type: string): unknown {\n\t\tif (\n\t\t\t[\n\t\t\t\t\"xsd:string\",\n\t\t\t\t\"xsd:normalizedString\",\n\t\t\t\t\"xsd:token\",\n\t\t\t\t\"xsd:anyURI\",\n\t\t\t\t\"xsd:QName\",\n\t\t\t\t\"xsd:NOTATION\"\n\t\t\t].includes(type)\n\t\t) {\n\t\t\t// Handle standard xsd types\n\t\t\treturn Coerce.string(value);\n\t\t} else if (\n\t\t\t[\n\t\t\t\t\"xsd:integer\",\n\t\t\t\t\"xsd:decimal\",\n\t\t\t\t\"xsd:float\",\n\t\t\t\t\"xsd:double\",\n\t\t\t\t\"xsd:long\",\n\t\t\t\t\"xsd:int\",\n\t\t\t\t\"xsd:short\",\n\t\t\t\t\"xsd:byte\"\n\t\t\t].includes(type)\n\t\t) {\n\t\t\t// Handle standard xsd types\n\t\t\treturn Coerce.number(value);\n\t\t} else if (type === \"xsd:boolean\") {\n\t\t\t// Handle standard xsd types\n\t\t\treturn Coerce.boolean(value);\n\t\t} else if ([\"xsd:date\", \"xsd:dateTime\", \"xsd:time\"].includes(type)) {\n\t\t\t// Handle standard xsd types\n\t\t\treturn Coerce.dateTime(value);\n\t\t}\n\t\treturn undefined;\n\t}\n}\n"]}
1
+ {"version":3,"file":"defaultPolicyArbiter.js","sourceRoot":"","sources":["../../../src/policyArbiters/defaultPolicyArbiter.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EACN,WAAW,EACX,MAAM,EACN,gBAAgB,EAChB,YAAY,EACZ,MAAM,EACN,EAAE,EACF,YAAY,EACZ,YAAY,EACZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG1D,OAAO,EACN,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,+BAA+B,EAK/B,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAEN,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,EAChB,SAAS,EAaT,MAAM,8BAA8B,CAAC;AAGtC;;GAEG;AACH,MAAM,OAAO,oBAAoB;IAChC;;OAEG;IACI,MAAM,CAAU,UAAU,0BAA0C;IAE3E;;;;OAIG;IACI,MAAM,CAAU,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAE9F;;;OAGG;IACK,MAAM,CAAU,8BAA8B,GAAG,EAAE,CAAC;IAE5D;;;OAGG;IACK,MAAM,CAAU,uBAAuB,GAAG,OAAO,CAAC;IAE1D;;;OAGG;IACK,MAAM,CAAU,qBAAqB,GAAG,UAAU,CAAC;IAE3D;;;OAGG;IACK,MAAM,CAAU,wBAAwB,GAAG,aAAa,CAAC;IAEjE;;;OAGG;IACc,QAAQ,CAAoB;IAE7C;;;OAGG;IACc,0BAA0B,CAAsC;IAEjF;;;OAGG;IACc,oBAAoB,CAAS;IAE9C;;;OAGG;IACH,YAAY,OAAiD;QAC5D,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CACnC,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAC1C,CAAC;QAEF,IAAI,CAAC,0BAA0B,GAAG,gBAAgB,CAAC,GAAG,CACrD,OAAO,EAAE,sCAAsC,IAAI,6BAA6B,CAChF,CAAC;QAEF,IAAI,CAAC,oBAAoB;YACxB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC;gBACpD,oBAAoB,CAAC,8BAA8B,CAAC;IACtD,CAAC;IAED;;;;;;;;;OASG;IACK,MAAM,CAAC,mBAAmB,CAAC,GAAW;QAC7C,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACnD,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,GAAG,CAAC;QACZ,CAAC;IACF,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,oBAAoB,CAAC,UAAU,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,MAAM,CAClB,SAAsC,EACtC,WAAiD,EACjD,IAAQ,EACR,MAAgC;QAEhC,MAAM,CAAC,MAAM,CACZ,oBAAoB,CAAC,UAAU,eAE/B,SAAS,CACT,CAAC;QAEF,oFAAoF;QACpF,gFAAgF;QAChF,kFAAkF;QAClF,+DAA+D;QAC/D,EAAE;QACF,qFAAqF;QACrF,wFAAwF;QACxF,EAAE;QACF,gFAAgF;QAChF,oFAAoF;QACpF,qFAAqF;QACrF,0DAA0D;QAC1D,EAAE;QACF,kFAAkF;QAClF,qFAAqF;QACrF,kEAAkE;QAClE,MAAM,gBAAgB,GAAG,WAAW,CAAC,iBAAiB,CAAS,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;aACrF,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IACC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAC/B,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAC3E,CAAC;YACF,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CACpD,CAAC;YACF,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,2BAA2B,EAAE;gBACpF,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;gBAClD,kBAAkB;aAClB,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACvB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,oBAAoB,CAAC,UAAU;YACvC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE;gBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;aAClD;SACD,CAAC,CAAC;QAEH,wCAAwC;QACxC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG;YACnB,CAAC,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,EAAE,CAAC,EAC/F,IAAI;YACL,CAAC,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,wBAAwB,EAAE,CAAC,EAClG,WAAW;SACZ,CAAC;QAEF,4DAA4D;QAC5D,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAChE,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,WAAW,CACX,CAAC;QAEF,yDAAyD;QACzD,wFAAwF;QACxF,gGAAgG;QAChG,gGAAgG;QAChG,MAAM,YAAY,GAKd,MAAM,CAAC,MAAM,CAAC,IAAI,CAKrB,CAAC;QAEF,MAAM,WAAW,GAAG,WAAW,CAAC,iBAAiB,CAAC,cAAc,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACnF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACtC,MAAM,eAAe,GAAG,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACjF,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;gBAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC/E,IACC,MAAM,IAAI,CAAC,kBAAkB,CAC5B,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,cAAc,CAAC,WAAW,EAC1B,WAAW,EACX,MAAM,EACN,cAAc,CAAC,MAAM,CACrB,EACA,CAAC;oBACF,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBAChC,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,CAAC,iBAAiB,CACjD,cAAc,CAAC,WAAW,IAAI,EAAE,CAChC,CAAC;QACF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACxC,MAAM,eAAe,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAClF,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;gBAC9C,IACC,MAAM,IAAI,CAAC,mBAAmB,CAC7B,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,cAAc,CAAC,WAAW,EAC1B,WAAW,EACX,MAAM,EACN,cAAc,CAAC,MAAM,CACrB,EACA,CAAC;oBACF,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;oBAC/E,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBACjC,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,gBAAgB,GAAG,cAAc,CAAC,QAAQ,IAAI,wBAAwB,CAAC,OAAO,CAAC;QACrF,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,6DAA6D;YAC7D,OAAO,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5D,IAAI,QAAwB,CAAC;YAC7B,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;gBACzD,QAAQ,gBAAgB,EAAE,CAAC;oBAC1B,KAAK,wBAAwB,CAAC,IAAI;wBACjC,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC;wBAClC,MAAM;oBACP,KAAK,wBAAwB,CAAC,QAAQ,CAAC;oBACvC,KAAK,wBAAwB,CAAC,OAAO,CAAC;oBACtC;wBACC,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;wBACjC,MAAM;gBACR,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC;YACrF,CAAC;YAED,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC3B,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;YAClC,CAAC;YAED,SAAS,CAAC,IAAI,CAAC;gBACd,QAAQ;gBACR,MAAM;aACN,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACK,wBAAwB,CAAC,MAA+B;QAC/D,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAC3C,WAAW,CAAC,iBAAiB,CAAkB,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CACvE,CAAC;QACF,MAAM,oBAAoB,GAAG,IAAI,CAAC,WAAW,CAC5C,WAAW,CAAC,iBAAiB,CAAmB,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CACzE,CAAC;QACF,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAC3C,WAAW,CAAC,iBAAiB,CAAY,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CACjE,CAAC;QAEF,OAAO;YACN,GAAG,MAAM;YACT,UAAU,EAAE,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;YAC5E,WAAW,EAAE,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;YAC/E,UAAU,EAAE,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;SAC5E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAsB,KAAU;QAClD,MAAM,QAAQ,GAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACK,UAAU,CAAsB,IAAO;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAmC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAmC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAqC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAqC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE7F,MAAM,QAAQ,GAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAClC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;wBAClC,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;wBAC/B,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;wBAC3B,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;wBAC3B,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC;wBAC/B,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC;wBAC/B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC3B,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAI,KAAoB;QACjD,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,SAAS,CAAC,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAC7B,YAKC,EACD,MAAc;QAKd,IAAI,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,GAAG;gBACP,iBAAiB,EAAE,KAAK;gBACxB,kBAAkB,EAAE,KAAK;aACzB,CAAC;YACF,YAAY,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,mBAAmB,CAChC,MAA+B,EAC/B,iBAAuC,EACvC,iBAAuC,EACvC,WAA6B,EAC7B,iBAA+D,EAC/D,WAA0C,EAC1C,MAAgC,EAChC,cAAuB;QAEvB,IACC,CAAC,IAAI,CAAC,yBAAyB,CAC9B,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,CACX,EACA,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,kEAAkE;QAClE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC;QACd,CAAC;QAED,+DAA+D;QAC/D,MAAM,WAAW,GAAG;YACnB,GAAG,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,CAAC;YAC9D,GAAG,iBAAiB;SACpB,CAAC;QACF,IACC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAC/D,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,uBAAuB,GAAG,IAAI,CAAC,0BAA0B,CAC9D,IAAI,CAAC,4BAA4B,CAChC,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,MAAM,CAAC,EACnD,cAAc,CACd,EACD,WAAW,EACX,IAAI,CACJ,CAAC;QACF,MAAM,eAAe,GAAG,uBAAuB,CAAC,KAAK,CAAC;QAEtD,MAAM,QAAQ,GAAG,WAAW,CAAC,iBAAiB,CAAY,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;gBAC7E,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,qEAAqE;QACrE,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,yBAAyB,CACtC,iBAAuC,EACvC,iBAAuC,EACvC,MAA+B,EAC/B,WAA0C;QAE1C,MAAM,WAAW,GAAG,WAAW,CAAC,iBAAiB,CAAY,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACtF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACtC,IACC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAC9B,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,EACN,UAAU,EACV,WAAW,CACX,CAAC,EACD,CAAC;gBACF,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,kBAAkB,CAC/B,iBAAuC,EACvC,iBAAuC,EACvC,MAA+B,EAC/B,UAAqB,EACrB,WAA0C;QAE1C,IACC,CAAC,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAC7F,CAAC;YACF,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACxE,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,CAC7D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EACnC,WAAW,EACX,IAAI,CACJ,CAAC;QACF,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC;QACrD,MAAM,WAAW,GAAG;YACnB,GAAG,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC;YAC7D,GAAG,WAAW;SACd,CAAC;QAEF,IACC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAC/D,CAAC;YACF,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,sBAAsB,CACnC,MAA+B;QAE/B,MAAM,gBAAgB,GAAa,EAAE,CAAC;QACtC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA4B,CAAC;QAC/D,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,kDAAkD;QAClD,MAAM,iBAAiB,GAAsB,WAAW,CAAC,iBAAiB,CACzE,MAAM,CAAC,UAAU,IAAI,EAAE,CACvB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAExE,MAAM,kBAAkB,GAAuB,WAAW,CAAC,iBAAiB,CAC3E,MAAM,CAAC,WAAW,IAAI,EAAE,CACxB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QAE1E,MAAM,iBAAiB,GAAgB,WAAW,CAAC,iBAAiB,CACnE,MAAM,CAAC,UAAU,IAAI,EAAE,CACvB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAExE,iFAAiF;QACjF,kFAAkF;QAClF,mEAAmE;QACnE,KAAK,MAAM,eAAe,IAAI,iBAAiB,EAAE,CAAC;YACjD,MAAM,iBAAiB,GAAG,WAAW,CAAC,iBAAiB,CAAS,eAAe,CAAC,OAAO,IAAI,EAAE,CAAC;iBAC5F,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IACC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBAChC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAC5E,CAAC;gBACF,MAAM,IAAI,YAAY,CACrB,oBAAoB,CAAC,UAAU,EAC/B,oCAAoC,EACpC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAC5D,CAAC;YACH,CAAC;YAED,IAAI,EAAE,CAAC,WAAW,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,oBAAoB,GAAG,WAAW,CAAC,iBAAiB,CAAC,eAAe,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAC7F,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,iBAAiB,CAAC,IAAI,CACrB,GAAG,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CACxC,IAAI,CAAC,yBAAyB,CAAC,eAAe,EAAE,UAAU,CAAC,CAC3D,CACD,CAAC;YACH,CAAC;YAED,MAAM,qBAAqB,GAAG,WAAW,CAAC,iBAAiB,CAC1D,eAAe,CAAC,WAAW,IAAI,EAAE,CACjC,CAAC;YACF,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,kBAAkB,CAAC,IAAI,CACtB,GAAG,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAC1C,IAAI,CAAC,yBAAyB,CAAC,eAAe,EAAE,WAAW,CAAC,CAC5D,CACD,CAAC;YACH,CAAC;YAED,MAAM,oBAAoB,GAAG,WAAW,CAAC,iBAAiB,CAAC,eAAe,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAC7F,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,iBAAiB,CAAC,IAAI,CACrB,GAAG,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CACxC,IAAI,CAAC,yBAAyB,CAAC,eAAe,EAAE,UAAU,CAAC,CAC3D,CACD,CAAC;YACH,CAAC;QACF,CAAC;QAED,IAAI,cAAoD,CAAC;QACzD,IAAI,kBAAkB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACnC,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACxC,cAAc,GAAG,wBAAwB,CAAC,OAAO,CAAC;QACnD,CAAC;QAED,wCAAwC;QACxC,OAAO;YACN,GAAG,MAAM;YACT,QAAQ,EAAE,cAAc;YACxB,UAAU,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YACxE,WAAW,EAAE,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;YAC3E,UAAU,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,wBAAwB,CACrC,MAA+B,EAC/B,gBAA0B,EAC1B,YAAoB;QAEpB,MAAM,iBAAiB,GAA8B,EAAE,CAAC;QAExD,mDAAmD;QACnD,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,iBAAiB,CAAC;QAC1B,CAAC;QAED,MAAM,cAAc,GAAG,WAAW,CAAC,iBAAiB,CAAS,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAEvF,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,YAAY,GAAG,CAAC,CAAC;YACnC,IAAI,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC3C,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,EAAE;oBACtF,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;oBAC/C,aAAa;oBACb,mBAAmB,EAAE,IAAI,CAAC,oBAAoB;iBAC9C,CAAC,CAAC;YACJ,CAAC;YAED,iCAAiC;YACjC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,EAAE;oBACtF,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;oBAC/C,aAAa;iBACb,CAAC,CAAC;YACJ,CAAC;YAED,0CAA0C;YAC1C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACjF,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,yBAAyB,EAAE;oBAClF,aAAa;iBACb,CAAC,CAAC;YACJ,CAAC;YAED,8BAA8B;YAC9B,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAErC,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAExC,uDAAuD;YACvD,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC9D,eAAe,EACf,gBAAgB,EAChB,SAAS,CACT,CAAC;YACF,iBAAiB,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACK,yBAAyB,CAChC,MAA+B,EAC/B,IAAO;QAEP,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3E,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3E,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACnE,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAEnE,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,eAAe,GAAG,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,eAAe,GAAG,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpE,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACxD,aAAa,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACjE,aAAa;gBACZ,WAAW,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;oBAC7C,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACxD,aAAa,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACjE,aAAa;gBACZ,WAAW,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;oBAC7C,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;QAE3C,IAAI,aAAa,IAAI,aAAa,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO;YACN,GAAG,IAAI;YACP,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,MAAM;SACN,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,yBAAyB,CAChC,IAAe,EACf,iBAAuC,EACvC,iBAAuC,EACvC,WAA0C;QAE1C,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpE,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IACC,eAAe,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAC/E,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IACC,eAAe,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAC/E,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;OAOG;IACK,uBAAuB,CAAC,KAAoD;QAInF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAiD,EAAE,CAAC;QAErE,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC3D,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;YAClC,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3B,CAAC;iBAAM,IAAI,EAAE,CAAC,MAAM,CAAa,UAAU,CAAC,EAAE,CAAC;gBAC9C,kDAAkD;gBAClD,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;gBACxF,CAAC;gBACD,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;gBACxF,CAAC;gBACD,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACpC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;gBACpF,CAAC;gBAED,IAAI,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,eAAe,EAAE,CAAC;oBACxE,MAAM,oBAAoB,GAAG,UAAkC,CAAC;oBAChE,IAAI,EAAE,CAAC,WAAW,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;wBACjD,MAAM,IAAI,YAAY,CACrB,oBAAoB,CAAC,UAAU,EAC/B,mCAAmC,EACnC;4BACC,MAAM,EAAE,oBAAoB,CAAC,MAAM,IAAI,EAAE;yBACzC,CACD,CAAC;oBACH,CAAC;oBAED,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC3F,CAAC;qBAAM,CAAC;oBACP,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACpD,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC7B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxB,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,QAAQ;YACR,WAAW;SACX,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CACxB,YAAkC,EAClC,iBAAuC;QAEvC,sEAAsE;QACtE,IAAI,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,mEAAmE;QACnE,IAAI,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACd,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACxC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;;;;;OAUG;IACK,kBAAkB,CACzB,WAAgC,EAChC,eAAoD,EACpD,WAA0C;QAE1C,iEAAiE;QACjE,IAAI,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,+DAA+D;QAC/D,6DAA6D;QAC7D,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,iBAAiB,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC;YACnD,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAE5C,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,eAAe,GAAG,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAEzE,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAAE,CAAC;gBAChF,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,yBAAyB,CAChC,UAAiD,EACjD,iBAAyB,EACzB,WAA0C;QAE1C,oEAAoE;QACpE,IAAI,YAAgC,CAAC;QACrC,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,YAAY,GAAG,UAAU,CAAC;QAC3B,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,CAAc,UAAU,CAAC,EAAE,CAAC;YAC/C,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACxF,CAAC;QAED,wFAAwF;QACxF,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,IAAI,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,YAAY,KAAK,iBAAiB,EAAE,CAAC;YACxE,cAAc;YACd,MAAM,GAAG,IAAI,CAAC;QACf,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,CAAc,UAAU,CAAC,EAAE,CAAC;YAC/C,qEAAqE;YACrE,wFAAwF;YACxF,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;gBAC1F,MAAM,GAAG,IAAI,CAAC;YACf,CAAC;YAED,sEAAsE;YACtE,+DAA+D;YAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAmC,CAAC,EAAE,CAAC;gBACzF,MAAM,GAAG,IAAI,CAAC;YACf,CAAC;QACF,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,KAAK,CAAC;QACd,CAAC;QAED,sFAAsF;QACtF,6FAA6F;QAC7F,IAAI,EAAE,CAAC,MAAM,CAAc,UAAU,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9E,MAAM,WAAW,GAAG,WAAW,CAAC,iBAAiB,CAChD,UAAU,CAAC,UAAU,IAAI,EAAE,CAC3B,CAAC;YACF,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,UAAoD,EAAE,EAAE,CACjF,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAChD,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,kBAAkB,CAC/B,iBAAuC,EACvC,iBAAuC,EACvC,MAA+B,EAC/B,UAA2B,EAC3B,iBAA+D,EAC/D,WAA0C,EAC1C,MAAgC,EAChC,cAAuB;QAEvB,IACC,CAAC,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAC7F,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,iEAAiE;QACjE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC;QACd,CAAC;QAED,qEAAqE;QACrE,MAAM,WAAW,GAAG;YACnB,GAAG,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC;YAC7D,GAAG,iBAAiB;SACpB,CAAC;QACF,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,CAC7D,IAAI,CAAC,4BAA4B,CAChC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,MAAM,CAAC,EAClD,cAAc,CACd,EACD,WAAW,EACX,IAAI,CACJ,CAAC;QACF,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC;QACrD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;QACvF,CAAC;QAED,iEAAiE;QACjE,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAE7F,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,uBAAuB,CACpC,MAA+B,EAC/B,UAA2B,EAC3B,WAA0C,EAC1C,eAAyB;QAEzB,MAAM,MAAM,GAAG,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,WAAW,CACxB,MAA+B,EAC/B,IAAe,EACf,WAA0C,EAC1C,eAAyB;QAEzB,MAAM,aAAa,GAAG,+BAA+B,CAAC,KAAK,EAAE,CAAC;QAC9D,MAAM,WAAW,GAAG,WAAW,CAC9B,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,wBAAwB,EAAE,CAC9C,CAAC;QAErD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;QAC5F,CAAC;QAED,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,+BAA+B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACnE,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,CAAC,iBAAiB,CAAY,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QACtF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACxC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;gBAClF,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;OAOG;IACK,0BAA0B,CACjC,QAA4B,EAC5B,WAA0C,EAC1C,eAAwB,KAAK;QAE7B,6EAA6E;QAC7E,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxB,OAAO;gBACN,MAAM,EAAE,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,EAAE;gBACtG,MAAM,EACL,WAAW,CACV,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,EAAE,CAC9F;gBACF,MAAM,EAAE,GAAG;gBACX,KAAK,EACJ,WAAW,CACV,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,EAAE,CAC9F;aACF,CAAC;QACH,CAAC;QAED,kHAAkH;QAClH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9E,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAEjD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,wBAAwB,EAAE;wBACjF,MAAM,EAAE,QAAQ;qBAChB,CAAC,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnB,OAAO;wBACN,MAAM;wBACN,MAAM;wBACN,MAAM;qBACN,CAAC;gBACH,CAAC;gBAED,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,wBAAwB,EAAE;wBACjF,MAAM,EAAE,QAAQ;qBAChB,CAAC,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACN,MAAM;oBACN,MAAM;oBACN,MAAM;oBACN,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;iBAC1E,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,wBAAwB,EAAE;YACjF,MAAM,EAAE,QAAQ;SAChB,CAAC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAC,MAA2B;QAC9C,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;OAOG;IACK,0BAA0B,CAAC,MAA2B;QAC7D,MAAM,GAAG,GAAG,WAAW,CAAC,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3B,IACC,EAAE,CAAC,MAAM,CAAuB,WAAW,CAAC;gBAC5C,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,eAAe;gBACnE,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,EACjC,CAAC;gBACF,OAAO,WAAW,CAAC,MAAM,CAAC;YAC3B,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACK,4BAA4B,CACnC,YAAgC,EAChC,cAAkC;QAElC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,cAAc,KAAK,GAAG,EAAE,CAAC;YAC/D,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,IAAI,cAAc,EAAE,CAAC;IACrE,CAAC;IAED;;;;;;;;OAQG;IACK,iBAAiB,CACxB,IAAe,EACf,WAA0C;QAK1C,MAAM,GAAG,GAAG,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO;gBACN,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,EAAE;aACf,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAE3B,IAAI,EAAE,CAAC,MAAM,CAAa,WAAW,CAAC,EAAE,CAAC;YACxC,kDAAkD;YAClD,IAAI,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;YACpF,CAAC;YAED,IACC,EAAE,CAAC,MAAM,CAAuB,WAAW,CAAC;gBAC5C,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,eAAe,EAClE,CAAC;gBACF,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,YAAY,CACrB,oBAAoB,CAAC,UAAU,EAC/B,mCAAmC,EACnC;wBACC,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE;qBAChC,CACD,CAAC;gBACH,CAAC;gBAED,IAAI,YAAkF,CAAC;gBACvF,IAAI,CAAC;oBACJ,YAAY,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACjF,CAAC;gBAAC,MAAM,CAAC;oBACR,MAAM,IAAI,YAAY,CACrB,oBAAoB,CAAC,UAAU,EAC/B,mCAAmC,EACnC;wBACC,MAAM,EAAE,WAAW,CAAC,MAAM;qBAC1B,CACD,CAAC;gBACH,CAAC;gBAED,OAAO;oBACN,MAAM,EAAE,YAAY,CAAC,MAAM;oBAC3B,WAAW,EAAE,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,CAAC;iBACxE,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7F,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,wBAAwB,EAAE;gBACjF,MAAM,EAAE,EAAE;aACV,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE5E,OAAO;YACN,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,WAAW,EAAE,EAAE;SACf,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,0BAA0B,CACjC,IAAe,EACf,WAA0C;QAK1C,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAEjE,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,cAAc,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CACnD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAC5C,WAAW,CACX,CAAC;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,cAAc,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;YACzF,OAAO;gBACN,MAAM,EAAE,UAAU;gBAClB,WAAW,EAAE,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CACxD,IAAI,CAAC,kCAAkC,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CACtF;aACD,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,4BAA4B,CACnC,IAAe,EACf,cAGC;QAED,IAAI,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAuB,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACd,CAAC;QAED,OAAO,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,eAAe,CAAC;IAC3E,CAAC;IAED;;;;;;;OAOG;IACK,kCAAkC,CACzC,UAAoD,EACpD,YAAoB,EACpB,UAAkB;QAElB,MAAM,iBAAiB,GAAG,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACxE,IAAI,iBAAiB,EAAE,CAAC;YACvB,OAAO;gBACN,GAAG,UAAU;gBACb,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACtE,IAAI,CAAC,kCAAkC,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,CACvE;aACyB,CAAC;QAC7B,CAAC;QAED,MAAM,iBAAiB,GAAG,UAA6B,CAAC;QACxD,OAAO;YACN,GAAG,iBAAiB;YACpB,WAAW,EAAE,IAAI,CAAC,+BAA+B,CAChD,iBAAiB,CAAC,WAAW,EAC7B,YAAY,EACZ,UAAU,CACwB;YACnC,YAAY,EAAE,IAAI,CAAC,+BAA+B,CACjD,iBAAiB,CAAC,YAAY,EAC9B,YAAY,EACZ,UAAU,CACV;SACD,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,+BAA+B,CACtC,OAAkF,EAClF,YAAoB,EACpB,UAAkB;QAElB,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,GAAG,CAAC;YAC/G,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/C,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;YACpF,CAAC;YACD,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,IAAI,EAAE,CAAC,MAAM,CAA0C,OAAO,CAAC,EAAE,CAAC;YACjE,MAAM,YAAY,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YACpC,IACC,YAAY,CAAC,OAAO,CAAC;gBACpB,GAAG,oBAAoB,CAAC,uBAAuB,GAAG,oBAAoB,CAAC,qBAAqB,EAAE;gBAC/F,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EACrC,CAAC;gBACF,YAAY,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAChD,YAAY,CAAC,QAAQ,CAAC,EACtB,YAAY,EACZ,UAAU,CACV,CAAC;YACH,CAAC;YACD,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACK,mBAAmB,CAAC,SAAiB,EAAE,YAAoB,EAAE,UAAkB;QACtF,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,2BAA2B,CAAC,IAAY;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;OAOG;IACK,kBAAkB,CACzB,UAAoD,EACpD,WAA0C;QAE1C,MAAM,iBAAiB,GAAG,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACxE,IAAI,iBAAiB,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QACvE,CAAC;QAED,iDAAiD;QACjD,MAAM,iBAAiB,GAAG,UAA6B,CAAC;QAExD,mFAAmF;QACnF,uDAAuD;QACvD,IAAI,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;QAC9F,CAAC;QAED,qFAAqF;QACrF,sFAAsF;QACtF,IAAI,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;QAC3F,CAAC;QAED,qFAAqF;QACrF,4CAA4C;QAC5C,IAAI,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;QACvF,CAAC;QAED,8EAA8E;QAC9E,6CAA6C;QAC7C,IAAI,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QACzF,CAAC;QAED,yCAAyC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAC3F,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAE/F,oEAAoE;QACpE,OAAO,aAAa,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACK,4BAA4B,CAAC,UAAoD;QAMxF,MAAM,iBAAiB,GAAG,UAAoC,CAAC;QAC/D,MAAM,SAAS,GAAgC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACxF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,kCAAkC,CAAC,KAAK,CAAC,CAAC;gBACnE,IAAI,CAAC,0CAA0C,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;gBACvE,OAAO;oBACN,QAAQ;oBACR,WAAW;iBACX,CAAC;YACH,CAAC;QACF,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACK,kCAAkC,CACzC,GAAY;QAEZ,IAAI,UAAU,GAAG,GAAG,CAAC;QACrB,IACC,EAAE,CAAC,MAAM,CAAgC,UAAU,CAAC;YACpD,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EACjC,CAAC;YACF,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;aACtD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAgD,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;;OAQG;IACK,0CAA0C,CACjD,WAAyD,EACzD,QAAmC;QAEnC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;QAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAEvD,iDAAiD;YACjD,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,YAAY,CACrB,oBAAoB,CAAC,UAAU,EAC/B,mCAAmC,EACnC;wBACC,QAAQ;wBACR,UAAU;wBACV,KAAK,EAAE,CAAC;qBACR,CACD,CAAC;gBACH,CAAC;gBACD,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACjC,CAAC;QACF,CAAC;IACF,CAAC;IAED;;;;;;OAMG;IACK,yBAAyB,CAChC,iBAGC,EACD,WAA0C;QAE1C,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC;QACpD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,QAAQ,QAAQ,EAAE,CAAC;YAClB,KAAK,yBAAyB,CAAC,GAAG;gBACjC,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;YAC9E,KAAK,yBAAyB,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC5C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAChC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;wBACjD,OAAO,KAAK,CAAC;oBACd,CAAC;gBACF,CAAC;gBACD,OAAO,IAAI,CAAC;YACb,CAAC;YACD,KAAK,yBAAyB,CAAC,EAAE;gBAChC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;YAC7E,KAAK,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAChC,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;wBAChD,SAAS,IAAI,CAAC,CAAC;wBACf,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;4BACnB,OAAO,KAAK,CAAC;wBACd,CAAC;oBACF,CAAC;gBACF,CAAC;gBACD,OAAO,SAAS,KAAK,CAAC,CAAC;YACxB,CAAC;YACD;gBACC,OAAO,KAAK,CAAC;QACf,CAAC;IACF,CAAC;IAED;;;;;;;;;;OAUG;IACK,uBAAuB,CAC9B,kBAA0B,EAC1B,YAAqB,EACrB,WAA0C;QAE1C,IAAI,cAAkC,CAAC;QAEvC,IAAI,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC;YAClB,CAAC;YAED,cAAc,GAAG,GAAG,kBAAkB,IAAI,YAAY,EAAE,CAAC;QAC1D,CAAC;aAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,cAAc,GAAG,kBAAkB,CAAC;QACrC,CAAC;aAAM,CAAC;YACP,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,gEAAgE;QAChE,IAAI,kBAAkB,CAAC,UAAU,CAAC,oBAAoB,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC9E,OAAO;gBACN,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM;aACzB,CAAC;QACH,CAAC;IACF,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAC5B,OAAkF,EAClF,WAA0C;QAE1C,+EAA+E;QAC/E,wEAAwE;QACxE,IAAI,QAA4B,CAAC;QACjC,IAAI,WAAoB,CAAC;QACzB,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAC3E,IAAI,MAAM,EAAE,CAAC;gBACZ,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBAC3B,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,CAAC;QACF,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,CAA0C,OAAO,CAAC,EAAE,CAAC;YACxE,iEAAiE;YACjE,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;gBACtE,IAAI,MAAM,EAAE,CAAC;oBACZ,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAC3B,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACP,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBACjD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC7B,OAAO,QAAQ,CAAC;oBACjB,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,iCAAiC;QACjC,IAAI,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC9D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,aAAa;gBACb,OAAO,SAAS,CAAC;YAClB,CAAC;iBAAM,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,2CAA2C;gBAC3C,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3B,CAAC;YAED,4CAA4C;YAC5C,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,gDAAgD;QAChD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB,CAAC,QAA0B,EAAE,IAAa,EAAE,KAAc;QACjF,kFAAkF;QAClF,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAE7D,QAAQ,QAAQ,EAAE,CAAC;YAClB,KAAK,gBAAgB,CAAC,EAAE;gBACvB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,KAAK,gBAAgB,CAAC,GAAG;gBACxB,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACpE,KAAK,gBAAgB,CAAC,EAAE;gBACvB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7E,KAAK,gBAAgB,CAAC,IAAI;gBACzB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9E,KAAK,gBAAgB,CAAC,EAAE;gBACvB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7E,KAAK,gBAAgB,CAAC,IAAI;gBACzB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9E,KAAK,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC/B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;oBAC1B,MAAM,WAAW,GAChB,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS;wBACvE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;wBACX,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBACtB,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC3E,CAAC,CAAC,CAAC;YACJ,CAAC;YACD,KAAK,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC/B,OAAO,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1F,CAAC;YACD,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACzF,CAAC;YACD,KAAK,gBAAgB,CAAC,SAAS;gBAC9B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,KAAK,gBAAgB,CAAC,WAAW;gBAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9E,KAAK,gBAAgB,CAAC,GAAG,CAAC;YAC1B,KAAK,gBAAgB,CAAC,OAAO,CAAC;YAC9B,KAAK,gBAAgB,CAAC,QAAQ;gBAC7B,+EAA+E;gBAC/E,mEAAmE;gBACnE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE;gBACC,OAAO,KAAK,CAAC;QACf,CAAC;IACF,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CACrB,IAAa,EACb,KAAc,EACd,OAA0C;QAE1C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,OAAO,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACzD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,kEAAkE;QAClE,6DAA6D;QAC7D,mEAAmE;QACnE,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CAAC,KAAc,EAAE,IAAY;QACjD,IACC;YACC,YAAY;YACZ,sBAAsB;YACtB,WAAW;YACX,YAAY;YACZ,WAAW;YACX,cAAc;SACd,CAAC,QAAQ,CAAC,IAAI,CAAC,EACf,CAAC;YACF,4BAA4B;YAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;aAAM,IACN;YACC,aAAa;YACb,aAAa;YACb,WAAW;YACX,YAAY;YACZ,UAAU;YACV,SAAS;YACT,WAAW;YACX,UAAU;SACV,CAAC,QAAQ,CAAC,IAAI,CAAC,EACf,CAAC;YACF,4BAA4B;YAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,4BAA4B;YAC5B,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,4BAA4B;YAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC","sourcesContent":["// Copyright 2025 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport {\n\tArrayHelper,\n\tCoerce,\n\tComponentFactory,\n\tGeneralError,\n\tGuards,\n\tIs,\n\tObjectHelper,\n\tStringHelper\n} from \"@twin.org/core\";\nimport type { IJsonLdNodeObject } from \"@twin.org/data-json-ld\";\nimport { JsonPathHelper } from \"@twin.org/data-json-path\";\nimport type { ILoggingComponent } from \"@twin.org/logging-models\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\tOdrlPolicyHelper,\n\tOdrlProfiles,\n\tPolicyDecision,\n\tPolicyObligationEnforcerFactory,\n\ttype IPolicyAdministrationPointComponent,\n\ttype IPolicyArbiter,\n\ttype IPolicyDecision,\n\ttype IRightsManagementPolicy\n} from \"@twin.org/rights-management-models\";\nimport type { IDataspaceProtocolAgreement } from \"@twin.org/standards-dataspace-protocol\";\nimport {\n\ttype IOdrlAssetCollection,\n\tOdrlConflictStrategyType,\n\tOdrlLogicalConstraintType,\n\tOdrlOperatorType,\n\tOdrlTypes,\n\ttype IOdrlAction,\n\ttype IOdrlAsset,\n\ttype IOdrlConstraint,\n\ttype IOdrlDuty,\n\ttype IOdrlLogicalConstraint,\n\ttype IOdrlLogicalConstraintOperand,\n\ttype IOdrlParty,\n\ttype IOdrlPartyCollection,\n\ttype IOdrlPermission,\n\ttype IOdrlProhibition,\n\ttype IOdrlRule,\n\ttype OdrlActionType\n} from \"@twin.org/standards-w3c-odrl\";\nimport type { IDefaultPolicyArbiterConstructorOptions } from \"../models/IDefaultPolicyArbiterConstructorOptions.js\";\n\n/**\n * Default Policy Arbiter.\n */\nexport class DefaultPolicyArbiter implements IPolicyArbiter {\n\t/**\n\t * The class name of the Default Policy Arbiter.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<DefaultPolicyArbiter>();\n\n\t/**\n\t * ODRL profiles whose custom vocabulary this arbiter understands and supports.\n\t * Any policy declaring a profile not in this set will be rejected.\n\t * Add a new entry here when support for an additional profile is implemented.\n\t */\n\tpublic static readonly SUPPORTED_PROFILES: ReadonlySet<string> = new Set([OdrlProfiles.Twin]);\n\n\t/**\n\t * Default maximum inheritance depth.\n\t * @internal\n\t */\n\tprivate static readonly _DEFAULT_MAX_INHERITANCE_DEPTH = 10;\n\n\t/**\n\t * TWIN prefix operations.\n\t * @internal\n\t */\n\tprivate static readonly _TWIN_PREFIX_OPERATIONS = \"twin:\";\n\n\t/**\n\t * TWIN prefix JSONPath.\n\t * @internal\n\t */\n\tprivate static readonly _TWIN_PREFIX_JSONPATH = \"jsonpath\";\n\n\t/**\n\t * TWIN prefix information.\n\t * @internal\n\t */\n\tprivate static readonly _TWIN_PREFIX_INFORMATION = \"information\";\n\n\t/**\n\t * The logging component.\n\t * @internal\n\t */\n\tprivate readonly _logging: ILoggingComponent;\n\n\t/**\n\t * The policy administration point component.\n\t * @internal\n\t */\n\tprivate readonly _policyAdministrationPoint: IPolicyAdministrationPointComponent;\n\n\t/**\n\t * The maximum depth to traverse when resolving inherited policies.\n\t * @internal\n\t */\n\tprivate readonly _maxInheritanceDepth: number;\n\n\t/**\n\t * Create a new instance of DefaultPolicyArbiter.\n\t * @param options The options for the default policy arbiter.\n\t */\n\tconstructor(options?: IDefaultPolicyArbiterConstructorOptions) {\n\t\tthis._logging = ComponentFactory.get<ILoggingComponent>(\n\t\t\toptions?.loggingComponentType ?? \"logging\"\n\t\t);\n\n\t\tthis._policyAdministrationPoint = ComponentFactory.get<IPolicyAdministrationPointComponent>(\n\t\t\toptions?.policyAdministrationPointComponentType ?? \"policy-administration-point\"\n\t\t);\n\n\t\tthis._maxInheritanceDepth =\n\t\t\tCoerce.integer(options?.config?.maxInheritanceDepth) ??\n\t\t\tDefaultPolicyArbiter._DEFAULT_MAX_INHERITANCE_DEPTH;\n\t}\n\n\t/**\n\t * Normalises a profile IRI for comparison against the supported-profiles allowlist.\n\t * Per RFC 3986: scheme and host are case-insensitive (the URL constructor folds them to\n\t * lowercase automatically); a trailing slash on the terminal path segment is treated as\n\t * equivalent to its absence; repeated slashes in the path are collapsed to a single slash.\n\t * Non-URL strings are returned unchanged.\n\t * @param iri The IRI to normalise.\n\t * @returns The normalised IRI.\n\t * @internal\n\t */\n\tprivate static normalizeProfileIri(iri: string): string {\n\t\ttry {\n\t\t\tconst url = new URL(iri);\n\t\t\tconst pathname = url.pathname.replace(/\\/+/g, \"/\");\n\t\t\treturn `${url.protocol}//${url.host}${StringHelper.trimTrailingSlashes(pathname)}`;\n\t\t} catch {\n\t\t\treturn iri;\n\t\t}\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn DefaultPolicyArbiter.CLASS_NAME;\n\t}\n\n\t/**\n\t * Makes decisions regarding policy access to data.\n\t * @param agreement The agreement to evaluate.\n\t * @param information Information provided by the requester to determine if a policy can be created.\n\t * @param data The data to make a decision on.\n\t * @param action Optional action to make a decision on, if not provided, the arbiter will evaluate all actions in the agreement.\n\t * @returns The decisions about access to the data.\n\t */\n\tpublic async decide<D = unknown>(\n\t\tagreement: IDataspaceProtocolAgreement,\n\t\tinformation?: { [id: string]: IJsonLdNodeObject },\n\t\tdata?: D,\n\t\taction?: OdrlActionType | string\n\t): Promise<IPolicyDecision[]> {\n\t\tGuards.object<IDataspaceProtocolAgreement>(\n\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\tnameof(agreement),\n\t\t\tagreement\n\t\t);\n\n\t\t// ODRL policy profiles extend the vocabulary with additional semantics (e.g. custom\n\t\t// operators, left operands). Without profile-aware evaluation logic the arbiter\n\t\t// cannot guarantee correctness, so any policy that declares an unknown profile is\n\t\t// rejected. The TWIN platform profile is explicitly supported.\n\t\t//\n\t\t// Empty-string profile values (e.g. from over-eager schema defaults or serialization\n\t\t// round-trips) are treated as \"no profile declared\" and filtered out before comparison.\n\t\t//\n\t\t// Profile IRIs are normalized before lookup: scheme and host are case-folded to\n\t\t// lowercase and a trailing slash on the last path segment is stripped. This accepts\n\t\t// common IRI variants (HTTPS://, uppercase host, trailing slash) instead of silently\n\t\t// rejecting valid policies authored by IRI-aware tooling.\n\t\t//\n\t\t// `every` (conjunction) is intentional: a policy declaring [\"TWIN\", \"unknown\"] is\n\t\t// rejected — the arbiter refuses to evaluate rules from a profile whose semantics it\n\t\t// does not understand, even if other declared profiles are known.\n\t\tconst declaredProfiles = ArrayHelper.fromObjectOrArray<string>(agreement.profile ?? [])\n\t\t\t.filter(p => Is.stringValue(p))\n\t\t\t.map(p => DefaultPolicyArbiter.normalizeProfileIri(p));\n\t\tif (\n\t\t\tIs.arrayValue(declaredProfiles) &&\n\t\t\t!declaredProfiles.every(p => DefaultPolicyArbiter.SUPPORTED_PROFILES.has(p))\n\t\t) {\n\t\t\tconst unsupportedProfile = declaredProfiles.find(\n\t\t\t\tp => !DefaultPolicyArbiter.SUPPORTED_PROFILES.has(p)\n\t\t\t);\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"policyProfileNotSupported\", {\n\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(agreement) ?? \"\",\n\t\t\t\tunsupportedProfile\n\t\t\t});\n\t\t}\n\n\t\tawait this._logging.log({\n\t\t\tlevel: \"info\",\n\t\t\tsource: DefaultPolicyArbiter.CLASS_NAME,\n\t\t\tts: Date.now(),\n\t\t\tmessage: \"decidingPolicy\",\n\t\t\tdata: {\n\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(agreement) ?? \"\"\n\t\t\t}\n\t\t});\n\n\t\t// Resolve and merge inherited policies.\n\t\tconst mergedPolicy = await this.mergeInheritedPolicies(agreement);\n\t\tconst expandedPolicy = this.expandCompactPolicyRules(mergedPolicy);\n\t\tconst dataSources = {\n\t\t\t[`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}`]:\n\t\t\t\tdata,\n\t\t\t[`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_INFORMATION}`]:\n\t\t\t\tinformation\n\t\t};\n\n\t\t// Extract agreement parties once for use in rule evaluation\n\t\tconst agreementAssigner = OdrlPolicyHelper.getPartyIds(agreement.assigner);\n\t\tconst agreementAssignee = OdrlPolicyHelper.getPartyIds(agreement.assignee);\n\t\tconst obligationsFulfilled = await this.evaluatePolicyObligations(\n\t\t\tagreementAssigner,\n\t\t\tagreementAssignee,\n\t\t\texpandedPolicy,\n\t\t\tdataSources\n\t\t);\n\n\t\t// ODRL-style rule evaluation grouped by decision target:\n\t\t// - Permission rules authorize if ANY applicable permission on the same target matches.\n\t\t// - Default to denied when no permission applies on a target (closed-world for access control).\n\t\t// - Conflict strategy controls how applicable permissions/prohibitions are resolved per target.\n\t\tconst targetStates: {\n\t\t\t[target: string]: {\n\t\t\t\tpermissionApplies: boolean;\n\t\t\t\tprohibitionApplies: boolean;\n\t\t\t};\n\t\t} = Object.create(null) as {\n\t\t\t[target: string]: {\n\t\t\t\tpermissionApplies: boolean;\n\t\t\t\tprohibitionApplies: boolean;\n\t\t\t};\n\t\t};\n\n\t\tconst permissions = ArrayHelper.fromObjectOrArray(expandedPolicy.permission ?? []);\n\t\tfor (const permission of permissions) {\n\t\t\tconst decisionTargets = this.resolveRuleDecisionTargets(permission, dataSources);\n\t\t\tfor (const decisionTarget of decisionTargets) {\n\t\t\t\tconst state = this.getOrCreateTargetState(targetStates, decisionTarget.target);\n\t\t\t\tif (\n\t\t\t\t\tawait this.evaluatePermission(\n\t\t\t\t\t\tagreementAssigner,\n\t\t\t\t\t\tagreementAssignee,\n\t\t\t\t\t\texpandedPolicy,\n\t\t\t\t\t\tpermission,\n\t\t\t\t\t\tdecisionTarget.refinements,\n\t\t\t\t\t\tdataSources,\n\t\t\t\t\t\taction,\n\t\t\t\t\t\tdecisionTarget.target\n\t\t\t\t\t)\n\t\t\t\t) {\n\t\t\t\t\tstate.permissionApplies = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst prohibitions = ArrayHelper.fromObjectOrArray<IOdrlProhibition>(\n\t\t\texpandedPolicy.prohibition ?? []\n\t\t);\n\t\tfor (const prohibition of prohibitions) {\n\t\t\tconst decisionTargets = this.resolveRuleDecisionTargets(prohibition, dataSources);\n\t\t\tfor (const decisionTarget of decisionTargets) {\n\t\t\t\tif (\n\t\t\t\t\tawait this.evaluateProhibition(\n\t\t\t\t\t\texpandedPolicy,\n\t\t\t\t\t\tagreementAssigner,\n\t\t\t\t\t\tagreementAssignee,\n\t\t\t\t\t\tprohibition,\n\t\t\t\t\t\tdecisionTarget.refinements,\n\t\t\t\t\t\tdataSources,\n\t\t\t\t\t\taction,\n\t\t\t\t\t\tdecisionTarget.target\n\t\t\t\t\t)\n\t\t\t\t) {\n\t\t\t\t\tconst state = this.getOrCreateTargetState(targetStates, decisionTarget.target);\n\t\t\t\t\tstate.prohibitionApplies = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst conflictStrategy = expandedPolicy.conflict ?? OdrlConflictStrategyType.Invalid;\n\t\tif (Object.keys(targetStates).length === 0) {\n\t\t\t// Closed-world fallback when the policy has no rules at all.\n\t\t\treturn [{ decision: PolicyDecision.Denied, target: \"$\" }];\n\t\t}\n\n\t\tconst decisions: IPolicyDecision[] = [];\n\t\tfor (const [target, state] of Object.entries(targetStates)) {\n\t\t\tlet decision: PolicyDecision;\n\t\t\tif (state.permissionApplies && state.prohibitionApplies) {\n\t\t\t\tswitch (conflictStrategy) {\n\t\t\t\t\tcase OdrlConflictStrategyType.Perm:\n\t\t\t\t\t\tdecision = PolicyDecision.Granted;\n\t\t\t\t\t\tbreak;\n\t\t\t\t\tcase OdrlConflictStrategyType.Prohibit:\n\t\t\t\t\tcase OdrlConflictStrategyType.Invalid:\n\t\t\t\t\tdefault:\n\t\t\t\t\t\tdecision = PolicyDecision.Denied;\n\t\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tdecision = state.permissionApplies ? PolicyDecision.Granted : PolicyDecision.Denied;\n\t\t\t}\n\n\t\t\tif (!obligationsFulfilled) {\n\t\t\t\tdecision = PolicyDecision.Denied;\n\t\t\t}\n\n\t\t\tdecisions.push({\n\t\t\t\tdecision,\n\t\t\t\ttarget\n\t\t\t});\n\t\t}\n\n\t\treturn decisions;\n\t}\n\n\t/**\n\t * Expand compact/compound policy rule forms into atomic rules.\n\t * ODRL 2.7 allows compact forms where rule properties can be arrays.\n\t * Evaluation in this arbiter is performed on expanded atomic rules.\n\t * @param policy The policy to expand.\n\t * @returns A policy with expanded rule arrays.\n\t * @internal\n\t */\n\tprivate expandCompactPolicyRules(policy: IRightsManagementPolicy): IRightsManagementPolicy {\n\t\tconst expandedPermissions = this.expandRules(\n\t\t\tArrayHelper.fromObjectOrArray<IOdrlPermission>(policy.permission ?? [])\n\t\t);\n\t\tconst expandedProhibitions = this.expandRules(\n\t\t\tArrayHelper.fromObjectOrArray<IOdrlProhibition>(policy.prohibition ?? [])\n\t\t);\n\t\tconst expandedObligations = this.expandRules(\n\t\t\tArrayHelper.fromObjectOrArray<IOdrlDuty>(policy.obligation ?? [])\n\t\t);\n\n\t\treturn {\n\t\t\t...policy,\n\t\t\tpermission: expandedPermissions.length > 0 ? expandedPermissions : undefined,\n\t\t\tprohibition: expandedProhibitions.length > 0 ? expandedProhibitions : undefined,\n\t\t\tobligation: expandedObligations.length > 0 ? expandedObligations : undefined\n\t\t};\n\t}\n\n\t/**\n\t * Expand a rule list into atomic rules.\n\t * @param rules The rules to expand.\n\t * @returns Expanded atomic rules.\n\t * @internal\n\t */\n\tprivate expandRules<T extends IOdrlRule>(rules: T[]): T[] {\n\t\tconst expanded: T[] = [];\n\t\tfor (const rule of rules) {\n\t\t\texpanded.push(...this.expandRule(rule));\n\t\t}\n\n\t\treturn expanded;\n\t}\n\n\t/**\n\t * Expand a single compact/compound rule into atomic rules.\n\t * @param rule The rule to expand.\n\t * @returns Expanded atomic rules.\n\t * @internal\n\t */\n\tprivate expandRule<T extends IOdrlRule>(rule: T): T[] {\n\t\tconst targets = this.normalizeRuleField<NonNullable<IOdrlRule[\"target\"]>>(rule.target);\n\t\tconst actions = this.normalizeRuleField<NonNullable<IOdrlRule[\"action\"]>>(rule.action);\n\t\tconst assigners = this.normalizeRuleField<NonNullable<IOdrlRule[\"assigner\"]>>(rule.assigner);\n\t\tconst assignees = this.normalizeRuleField<NonNullable<IOdrlRule[\"assignee\"]>>(rule.assignee);\n\n\t\tconst expanded: T[] = [];\n\t\tfor (const target of targets) {\n\t\t\tfor (const action of actions) {\n\t\t\t\tfor (const assigner of assigners) {\n\t\t\t\t\tfor (const assignee of assignees) {\n\t\t\t\t\t\tconst atomicRule = { ...rule };\n\t\t\t\t\t\tatomicRule.target = target;\n\t\t\t\t\t\tatomicRule.action = action;\n\t\t\t\t\t\tatomicRule.assigner = assigner;\n\t\t\t\t\t\tatomicRule.assignee = assignee;\n\t\t\t\t\t\texpanded.push(atomicRule);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn expanded;\n\t}\n\n\t/**\n\t * Normalize a potentially compact rule field into an array for expansion.\n\t * @param value The field value.\n\t * @returns Normalized values (or a single undefined when not provided).\n\t * @internal\n\t */\n\tprivate normalizeRuleField<T>(value: T | undefined): (T | undefined)[] {\n\t\tif (Is.undefined(value)) {\n\t\t\treturn [undefined];\n\t\t}\n\n\t\tconst values = ArrayHelper.fromObjectOrArray(value);\n\t\treturn values.length > 0 ? values : [undefined];\n\t}\n\n\t/**\n\t * Get an existing target state or create an initial state if it doesn't exist.\n\t * @param targetStates The dictionary of target states.\n\t * @param target The target key.\n\t * @returns The target state.\n\t * @internal\n\t */\n\tprivate getOrCreateTargetState(\n\t\ttargetStates: {\n\t\t\t[target: string]: {\n\t\t\t\tpermissionApplies: boolean;\n\t\t\t\tprohibitionApplies: boolean;\n\t\t\t};\n\t\t},\n\t\ttarget: string\n\t): {\n\t\tpermissionApplies: boolean;\n\t\tprohibitionApplies: boolean;\n\t} {\n\t\tlet state = targetStates[target];\n\t\tif (Is.undefined(state)) {\n\t\t\tstate = {\n\t\t\t\tpermissionApplies: false,\n\t\t\t\tprohibitionApplies: false\n\t\t\t};\n\t\t\ttargetStates[target] = state;\n\t\t}\n\n\t\treturn state;\n\t}\n\n\t/**\n\t * Evaluate whether a prohibition applies.\n\t * @param policy The policy containing the prohibition.\n\t * @param agreementAssigner The assigner ID from the agreement.\n\t * @param agreementAssignee The assignee ID from the agreement.\n\t * @param prohibition The prohibition to evaluate.\n\t * @param targetRefinements Additional constraints from target refinement.\n\t * @param dataSources The operand lookup sources.\n\t * @param action Optional action to check against the prohibition's applicable actions.\n\t * @returns True if the prohibition applies.\n\t * @internal\n\t */\n\tprivate async evaluateProhibition(\n\t\tpolicy: IRightsManagementPolicy,\n\t\tagreementAssigner: string[] | undefined,\n\t\tagreementAssignee: string[] | undefined,\n\t\tprohibition: IOdrlProhibition,\n\t\ttargetRefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[],\n\t\tdataSources: { [prefix: string]: unknown },\n\t\taction?: OdrlActionType | string,\n\t\tdecisionTarget?: string\n\t): Promise<boolean> {\n\t\tif (\n\t\t\t!this.isRuleApplicableToParties(\n\t\t\t\tprohibition,\n\t\t\t\tagreementAssigner,\n\t\t\t\tagreementAssignee,\n\t\t\t\tdataSources\n\t\t\t)\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// Check if the prohibition's action(s) match the requested action\n\t\tif (!this.isActionApplicable(prohibition.action, action, dataSources)) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// ODRL semantics: a rule without constraints is unconditional.\n\t\tconst constraints = [\n\t\t\t...ArrayHelper.fromObjectOrArray(prohibition.constraint ?? []),\n\t\t\t...targetRefinements\n\t\t];\n\t\tif (\n\t\t\tconstraints.length > 0 &&\n\t\t\t!constraints.every(c => this.evaluateConstraint(c, dataSources))\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\n\t\tconst prohibitionTargetLookup = this.tryResolveTargetDataSource(\n\t\t\tthis.buildRuleDataContextTargetId(\n\t\t\t\tthis.getRuleDataContextTargetId(prohibition.target),\n\t\t\t\tdecisionTarget\n\t\t\t),\n\t\t\tdataSources,\n\t\t\ttrue\n\t\t);\n\t\tconst ruleDataContext = prohibitionTargetLookup.value;\n\n\t\tconst remedies = ArrayHelper.fromObjectOrArray<IOdrlDuty>(prohibition.remedy ?? []);\n\t\tif (remedies.length === 0) {\n\t\t\treturn true;\n\t\t}\n\n\t\tfor (const remedy of remedies) {\n\t\t\tif (!(await this.enforceDuty(policy, remedy, dataSources, ruleDataContext))) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t}\n\n\t\t// Remedies satisfied: prohibition is treated as no longer infringed.\n\t\treturn false;\n\t}\n\n\t/**\n\t * Evaluate all policy-level obligations.\n\t * @param agreementAssigner The assigner ID from the agreement.\n\t * @param agreementAssignee The assignee ID from the agreement.\n\t * @param policy The policy containing obligations.\n\t * @param dataSources The operand lookup sources.\n\t * @returns True if all applicable obligations are fulfilled.\n\t * @internal\n\t */\n\tprivate async evaluatePolicyObligations(\n\t\tagreementAssigner: string[] | undefined,\n\t\tagreementAssignee: string[] | undefined,\n\t\tpolicy: IRightsManagementPolicy,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): Promise<boolean> {\n\t\tconst obligations = ArrayHelper.fromObjectOrArray<IOdrlDuty>(policy.obligation ?? []);\n\t\tfor (const obligation of obligations) {\n\t\t\tif (\n\t\t\t\t!(await this.evaluateObligation(\n\t\t\t\t\tagreementAssigner,\n\t\t\t\t\tagreementAssignee,\n\t\t\t\t\tpolicy,\n\t\t\t\t\tobligation,\n\t\t\t\t\tdataSources\n\t\t\t\t))\n\t\t\t) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t}\n\n\t\treturn true;\n\t}\n\n\t/**\n\t * Evaluate whether a policy-level obligation is fulfilled.\n\t * @param agreementAssigner The assigner ID from the agreement.\n\t * @param agreementAssignee The assignee ID from the agreement.\n\t * @param policy The policy containing the obligation.\n\t * @param obligation The obligation to evaluate.\n\t * @param dataSources The operand lookup sources.\n\t * @returns True if the obligation is not applicable or is fulfilled.\n\t * @internal\n\t */\n\tprivate async evaluateObligation(\n\t\tagreementAssigner: string[] | undefined,\n\t\tagreementAssignee: string[] | undefined,\n\t\tpolicy: IRightsManagementPolicy,\n\t\tobligation: IOdrlDuty,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): Promise<boolean> {\n\t\tif (\n\t\t\t!this.isRuleApplicableToParties(obligation, agreementAssigner, agreementAssignee, dataSources)\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\n\t\tconst { refinements } = this.resolveRuleTarget(obligation, dataSources);\n\t\tconst obligationTargetLookup = this.tryResolveTargetDataSource(\n\t\t\tthis.getTargetId(obligation.target),\n\t\t\tdataSources,\n\t\t\ttrue\n\t\t);\n\t\tconst ruleDataContext = obligationTargetLookup.value;\n\t\tconst constraints = [\n\t\t\t...ArrayHelper.fromObjectOrArray(obligation.constraint ?? []),\n\t\t\t...refinements\n\t\t];\n\n\t\tif (\n\t\t\tconstraints.length > 0 &&\n\t\t\t!constraints.every(c => this.evaluateConstraint(c, dataSources))\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\n\t\treturn this.enforceDuty(policy, obligation, dataSources, ruleDataContext);\n\t}\n\n\t/**\n\t * Merge inherited policies into the current policy.\n\t * Inherited policies' permissions, prohibitions, and obligations are combined with the current policy's rules.\n\t * @param policy The policy to evaluate.\n\t * @returns A new policy with merged rules from all ancestors.\n\t * @internal\n\t */\n\tprivate async mergeInheritedPolicies(\n\t\tpolicy: IRightsManagementPolicy\n\t): Promise<IRightsManagementPolicy> {\n\t\tconst visitedPolicyIds: string[] = [];\n\t\tvisitedPolicyIds.push(OdrlPolicyHelper.getUid(policy) ?? \"\");\n\t\tconst inheritedPolicies = await this.resolveInheritedPolicies(policy, visitedPolicyIds, 0);\n\t\tconst conflictStrategies = new Set<OdrlConflictStrategyType>();\n\t\tif (Is.stringValue(policy.conflict)) {\n\t\t\tconflictStrategies.add(policy.conflict);\n\t\t}\n\n\t\t// Start with copies of the current policy's rules\n\t\tconst mergedPermissions: IOdrlPermission[] = ArrayHelper.fromObjectOrArray(\n\t\t\tpolicy.permission ?? []\n\t\t).map(permission => this.applyPolicyDefaultsToRule(policy, permission));\n\n\t\tconst mergedProhibitions: IOdrlProhibition[] = ArrayHelper.fromObjectOrArray(\n\t\t\tpolicy.prohibition ?? []\n\t\t).map(prohibition => this.applyPolicyDefaultsToRule(policy, prohibition));\n\n\t\tconst mergedObligations: IOdrlDuty[] = ArrayHelper.fromObjectOrArray(\n\t\t\tpolicy.obligation ?? []\n\t\t).map(obligation => this.applyPolicyDefaultsToRule(policy, obligation));\n\n\t\t// Merge rules from each inherited policy, applying the same profile guard as the\n\t\t// top-level policy. A parent that declares an unsupported profile may carry rules\n\t\t// whose semantics the arbiter cannot guarantee, so it is rejected.\n\t\tfor (const inheritedPolicy of inheritedPolicies) {\n\t\t\tconst inheritedProfiles = ArrayHelper.fromObjectOrArray<string>(inheritedPolicy.profile ?? [])\n\t\t\t\t.filter(p => Is.stringValue(p))\n\t\t\t\t.map(p => DefaultPolicyArbiter.normalizeProfileIri(p));\n\t\t\tif (\n\t\t\t\tIs.arrayValue(inheritedProfiles) &&\n\t\t\t\t!inheritedProfiles.every(p => DefaultPolicyArbiter.SUPPORTED_PROFILES.has(p))\n\t\t\t) {\n\t\t\t\tthrow new GeneralError(\n\t\t\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\t\t\t\"inheritedPolicyProfileNotSupported\",\n\t\t\t\t\t{ policyId: OdrlPolicyHelper.getUid(inheritedPolicy) ?? \"\" }\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tif (Is.stringValue(inheritedPolicy.conflict)) {\n\t\t\t\tconflictStrategies.add(inheritedPolicy.conflict);\n\t\t\t}\n\t\t\tconst inheritedPermissions = ArrayHelper.fromObjectOrArray(inheritedPolicy.permission ?? []);\n\t\t\tif (inheritedPermissions.length > 0) {\n\t\t\t\tmergedPermissions.push(\n\t\t\t\t\t...inheritedPermissions.map(permission =>\n\t\t\t\t\t\tthis.applyPolicyDefaultsToRule(inheritedPolicy, permission)\n\t\t\t\t\t)\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst inheritedProhibitions = ArrayHelper.fromObjectOrArray(\n\t\t\t\tinheritedPolicy.prohibition ?? []\n\t\t\t);\n\t\t\tif (inheritedProhibitions.length > 0) {\n\t\t\t\tmergedProhibitions.push(\n\t\t\t\t\t...inheritedProhibitions.map(prohibition =>\n\t\t\t\t\t\tthis.applyPolicyDefaultsToRule(inheritedPolicy, prohibition)\n\t\t\t\t\t)\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst inheritedObligations = ArrayHelper.fromObjectOrArray(inheritedPolicy.obligation ?? []);\n\t\t\tif (inheritedObligations.length > 0) {\n\t\t\t\tmergedObligations.push(\n\t\t\t\t\t...inheritedObligations.map(obligation =>\n\t\t\t\t\t\tthis.applyPolicyDefaultsToRule(inheritedPolicy, obligation)\n\t\t\t\t\t)\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\tlet mergedConflict: OdrlConflictStrategyType | undefined;\n\t\tif (conflictStrategies.size === 1) {\n\t\t\tmergedConflict = Array.from(conflictStrategies)[0];\n\t\t} else if (conflictStrategies.size > 1) {\n\t\t\tmergedConflict = OdrlConflictStrategyType.Invalid;\n\t\t}\n\n\t\t// Return a new policy with merged rules\n\t\treturn {\n\t\t\t...policy,\n\t\t\tconflict: mergedConflict,\n\t\t\tpermission: mergedPermissions.length > 0 ? mergedPermissions : undefined,\n\t\t\tprohibition: mergedProhibitions.length > 0 ? mergedProhibitions : undefined,\n\t\t\tobligation: mergedObligations.length > 0 ? mergedObligations : undefined\n\t\t};\n\t}\n\n\t/**\n\t * Resolve inherited policies by their UIDs from the Policy Administration Point.\n\t * Policies can inherit from other policies via the inheritFrom property.\n\t * @param policy The policy that may have inheritFrom references.\n\t * @param visitedPolicyIds Array of policy UIDs already visited in this inheritance chain.\n\t * @returns Array of inherited policies fetched from the PAP.\n\t * @internal\n\t */\n\tprivate async resolveInheritedPolicies(\n\t\tpolicy: IRightsManagementPolicy,\n\t\tvisitedPolicyIds: string[],\n\t\tcurrentDepth: number\n\t): Promise<IRightsManagementPolicy[]> {\n\t\tconst inheritedPolicies: IRightsManagementPolicy[] = [];\n\n\t\t// If policy has no inheritFrom, return empty array\n\t\tif (Is.empty(policy.inheritFrom)) {\n\t\t\treturn inheritedPolicies;\n\t\t}\n\n\t\tconst inheritFromIds = ArrayHelper.fromObjectOrArray<string>(policy.inheritFrom) ?? [];\n\n\t\tfor (const inheritFromId of inheritFromIds) {\n\t\t\tconst nextDepth = currentDepth + 1;\n\t\t\tif (nextDepth > this._maxInheritanceDepth) {\n\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"maxInheritanceDepthExceeded\", {\n\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\tinheritFromId,\n\t\t\t\t\tmaxInheritanceDepth: this._maxInheritanceDepth\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Check for circular inheritance\n\t\t\tif (visitedPolicyIds.includes(inheritFromId)) {\n\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"circularInheritanceDetected\", {\n\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\tinheritFromId\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Fetch the inherited policy from the PAP\n\t\t\tconst inheritedPolicy = await this._policyAdministrationPoint.get(inheritFromId);\n\t\t\tif (Is.empty(inheritedPolicy)) {\n\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"inheritedPolicyNotFound\", {\n\t\t\t\t\tinheritFromId\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Mark this policy as visited\n\t\t\tvisitedPolicyIds.push(inheritFromId);\n\n\t\t\tinheritedPolicies.push(inheritedPolicy);\n\n\t\t\t// Recursively resolve inherited policies of the parent\n\t\t\tconst grandparentPolicies = await this.resolveInheritedPolicies(\n\t\t\t\tinheritedPolicy,\n\t\t\t\tvisitedPolicyIds,\n\t\t\t\tnextDepth\n\t\t\t);\n\t\t\tinheritedPolicies.push(...grandparentPolicies);\n\t\t}\n\n\t\treturn inheritedPolicies;\n\t}\n\n\t/**\n\t * Apply policy-level default values (assigner, assignee, target, action) to rules that don't override them.\n\t * @param policy The policy providing defaults.\n\t * @param rule The rule to apply defaults to.\n\t * @returns The rule with policy-level defaults applied.\n\t * @internal\n\t */\n\tprivate applyPolicyDefaultsToRule<T extends IOdrlRule>(\n\t\tpolicy: IRightsManagementPolicy,\n\t\trule: T\n\t): T {\n\t\tconst assigner = Is.empty(rule.assigner) ? policy.assigner : rule.assigner;\n\t\tconst assignee = Is.empty(rule.assignee) ? policy.assignee : rule.assignee;\n\t\tconst target = Is.empty(rule.target) ? policy.target : rule.target;\n\t\tconst action = Is.empty(rule.action) ? policy.action : rule.action;\n\n\t\tconst assignerIds = OdrlPolicyHelper.getPartyIds(assigner);\n\t\tconst ruleAssignerIds = OdrlPolicyHelper.getPartyIds(rule.assigner);\n\t\tconst assigneeIds = OdrlPolicyHelper.getPartyIds(assignee);\n\t\tconst ruleAssigneeIds = OdrlPolicyHelper.getPartyIds(rule.assignee);\n\n\t\tlet assignerEqual = false;\n\t\tif (Is.empty(assignerIds) && Is.empty(ruleAssignerIds)) {\n\t\t\tassignerEqual = true;\n\t\t} else if (!Is.empty(assignerIds) && !Is.empty(ruleAssignerIds)) {\n\t\t\tassignerEqual =\n\t\t\t\tassignerIds.length === ruleAssignerIds.length &&\n\t\t\t\tassignerIds.every(id => ruleAssignerIds.includes(id));\n\t\t}\n\n\t\tlet assigneeEqual = false;\n\t\tif (Is.empty(assigneeIds) && Is.empty(ruleAssigneeIds)) {\n\t\t\tassigneeEqual = true;\n\t\t} else if (!Is.empty(assigneeIds) && !Is.empty(ruleAssigneeIds)) {\n\t\t\tassigneeEqual =\n\t\t\t\tassigneeIds.length === ruleAssigneeIds.length &&\n\t\t\t\tassigneeIds.every(id => ruleAssigneeIds.includes(id));\n\t\t}\n\n\t\tconst targetEqual = target === rule.target;\n\t\tconst actionEqual = action === rule.action;\n\n\t\tif (assignerEqual && assigneeEqual && targetEqual && actionEqual) {\n\t\t\treturn rule;\n\t\t}\n\n\t\treturn {\n\t\t\t...rule,\n\t\t\tassigner,\n\t\t\tassignee,\n\t\t\ttarget,\n\t\t\taction\n\t\t};\n\t}\n\n\t/**\n\t * Determine whether a rule applies to the agreement parties based on assigner/assignee.\n\t * @param rule The rule to evaluate.\n\t * @param agreementAssigner The assigner ID from the agreement.\n\t * @param agreementAssignee The assignee ID from the agreement.\n\t * @returns True if the rule is applicable to the agreement parties.\n\t * @internal\n\t */\n\tprivate isRuleApplicableToParties(\n\t\trule: IOdrlRule,\n\t\tagreementAssigner: string[] | undefined,\n\t\tagreementAssignee: string[] | undefined,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): boolean {\n\t\tconst assignerContext = this.resolveRulePartyContext(rule.assigner);\n\t\tconst assigneeContext = this.resolveRulePartyContext(rule.assignee);\n\n\t\tif (!this.isPartyApplicable(assignerContext.partyIds, agreementAssigner)) {\n\t\t\treturn false;\n\t\t}\n\n\t\tif (\n\t\t\tassignerContext.refinements.length > 0 &&\n\t\t\t!assignerContext.refinements.every(c => this.evaluateConstraint(c, dataSources))\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\n\t\tif (!this.isPartyApplicable(assigneeContext.partyIds, agreementAssignee)) {\n\t\t\treturn false;\n\t\t}\n\n\t\tif (\n\t\t\tassigneeContext.refinements.length > 0 &&\n\t\t\t!assigneeContext.refinements.every(c => this.evaluateConstraint(c, dataSources))\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\n\t\treturn true;\n\t}\n\n\t/**\n\t * Resolve rule party identifiers and refinements.\n\t * PartyCollection source values are currently not supported for party matching.\n\t * @param party The rule party value.\n\t * @returns Resolved party identifiers and refinement constraints.\n\t * @throws GeneralError if PartyCollection source has a value.\n\t * @internal\n\t */\n\tprivate resolveRulePartyContext(party: IOdrlRule[\"assigner\"] | IOdrlRule[\"assignee\"]): {\n\t\tpartyIds: string[];\n\t\trefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t} {\n\t\tconst partyIds: string[] = [];\n\t\tconst refinements: (IOdrlConstraint | IOdrlLogicalConstraint)[] = [];\n\n\t\tconst parties = ArrayHelper.fromObjectOrArray(party ?? []);\n\t\tfor (const partyEntry of parties) {\n\t\t\tif (Is.stringValue(partyEntry)) {\n\t\t\t\tpartyIds.push(partyEntry);\n\t\t\t} else if (Is.object<IOdrlParty>(partyEntry)) {\n\t\t\t\t// Guard against unsupported ODRL party properties\n\t\t\t\tif (Is.notEmpty(partyEntry.assignerOf)) {\n\t\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"partyAssignerOfNotSupported\");\n\t\t\t\t}\n\t\t\t\tif (Is.notEmpty(partyEntry.assigneeOf)) {\n\t\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"partyAssigneeOfNotSupported\");\n\t\t\t\t}\n\t\t\t\tif (Is.notEmpty(partyEntry.partOf)) {\n\t\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"partyPartOfNotSupported\");\n\t\t\t\t}\n\n\t\t\t\tif (OdrlPolicyHelper.getType(partyEntry) === OdrlTypes.PartyCollection) {\n\t\t\t\t\tconst partyCollectionEntry = partyEntry as IOdrlPartyCollection;\n\t\t\t\t\tif (Is.stringValue(partyCollectionEntry.source)) {\n\t\t\t\t\t\tthrow new GeneralError(\n\t\t\t\t\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\t\t\t\t\t\"partyCollectionSourceNotSupported\",\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tsource: partyCollectionEntry.source ?? \"\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\n\t\t\t\t\trefinements.push(...ArrayHelper.fromObjectOrArray(partyCollectionEntry.refinement ?? []));\n\t\t\t\t} else {\n\t\t\t\t\tconst partyId = OdrlPolicyHelper.getUid(partyEntry);\n\t\t\t\t\tif (Is.stringValue(partyId)) {\n\t\t\t\t\t\tpartyIds.push(partyId);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tpartyIds,\n\t\t\trefinements\n\t\t};\n\t}\n\n\t/**\n\t * Determine whether a rule party constraint applies to the agreement parties.\n\t * Rule party is treated as a constraint: if specified, it must match at least one agreement party.\n\t * @param rulePartyIds The party ids specified on the rule (if any).\n\t * @param agreementPartyIds The party ids extracted from the agreement.\n\t * @returns True if the rule party constraint is satisfied.\n\t * @internal\n\t */\n\tprivate isPartyApplicable(\n\t\trulePartyIds: string[] | undefined,\n\t\tagreementPartyIds: string[] | undefined\n\t): boolean {\n\t\t// No party specified on rule means it applies to any agreement party.\n\t\tif (Is.empty(rulePartyIds)) {\n\t\t\treturn true;\n\t\t}\n\n\t\t// Rule specifies party/parties, but agreement doesn't provide any.\n\t\tif (Is.empty(agreementPartyIds)) {\n\t\t\treturn false;\n\t\t}\n\n\t\tfor (const rulePartyId of rulePartyIds) {\n\t\t\tif (agreementPartyIds.includes(rulePartyId)) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t}\n\n\t\treturn false;\n\t}\n\n\t/**\n\t * Determine whether a rule's action(s) match the requested action.\n\t * Supports exact match, includedIn hierarchy, and implies relationships.\n\t * If no action is specified in the rule, it applies to all actions (action-agnostic).\n\t * If an action is specified in the rule and a specific action is requested, they must match.\n\t * If an action is specified in the rule but no specific action is requested, the rule applies (general evaluation).\n\t * @param ruleActions The actions defined in the rule (can be string, object, or array).\n\t * @param requestedAction The action being requested (optional).\n\t * @returns True if the rule's action(s) apply.\n\t * @internal\n\t */\n\tprivate isActionApplicable(\n\t\truleActions: IOdrlRule[\"action\"],\n\t\trequestedAction: OdrlActionType | string | undefined,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): boolean {\n\t\t// If the rule has no action specified, it applies to all actions\n\t\tif (Is.empty(ruleActions)) {\n\t\t\treturn true;\n\t\t}\n\n\t\t// If the rule has actions but no specific action is requested,\n\t\t// the rule applies (we're evaluating permissions in general)\n\t\tif (Is.empty(requestedAction)) {\n\t\t\treturn true;\n\t\t}\n\n\t\tconst requestedActionId = Is.string(requestedAction)\n\t\t\t? requestedAction\n\t\t\t: OdrlPolicyHelper.getUid(requestedAction);\n\n\t\tif (!Is.stringValue(requestedActionId)) {\n\t\t\treturn false;\n\t\t}\n\n\t\tconst ruleActionArray = ArrayHelper.fromObjectOrArray(ruleActions) ?? [];\n\n\t\tfor (const ruleAction of ruleActionArray) {\n\t\t\tif (this.ruleActionCoversRequested(ruleAction, requestedActionId, dataSources)) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t}\n\n\t\treturn false;\n\t}\n\n\t/**\n\t * Determine whether a single rule action covers a requested action.\n\t * Covers exact match plus ODRL action hierarchy semantics.\n\t * - includedIn: the rule action is a sub-action of a broader parent.\n\t * A rule naming the narrower action also covers requests for the parent.\n\t * E.g. rule action \"print\" with includedIn \"reproduce\" covers a request for \"reproduce\".\n\t * - implies: the rule action entails another action.\n\t * A rule granting action X also covers action Y when X implies Y.\n\t * E.g. rule action \"distribute\" implying \"reproduce\" covers a request for \"reproduce\".\n\t * @param ruleAction The action specified in the rule.\n\t * @param requestedActionId The requested action identifier.\n\t * @returns True if the rule action covers the requested action.\n\t * @internal\n\t */\n\tprivate ruleActionCoversRequested(\n\t\truleAction: OdrlActionType | string | IOdrlAction,\n\t\trequestedActionId: string,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): boolean {\n\t\t// Extract the rule action ID — support both @id and rdf:value forms\n\t\tlet ruleActionId: string | undefined;\n\t\tif (Is.string(ruleAction)) {\n\t\t\truleActionId = ruleAction;\n\t\t} else if (Is.object<IOdrlAction>(ruleAction)) {\n\t\t\truleActionId = ruleAction[\"rdf:value\"]?.[\"@id\"] ?? OdrlPolicyHelper.getUid(ruleAction);\n\t\t}\n\n\t\t// Determine whether this rule action covers the requested action via any semantic path.\n\t\tlet covers = false;\n\n\t\tif (Is.stringValue(ruleActionId) && ruleActionId === requestedActionId) {\n\t\t\t// Exact match\n\t\t\tcovers = true;\n\t\t} else if (Is.object<IOdrlAction>(ruleAction)) {\n\t\t\t// includedIn: rule action A includedIn B means A is a sub-type of B.\n\t\t\t// A rule that names the narrower action A with includedIn B also covers requests for B.\n\t\t\tif (Is.stringValue(ruleAction.includedIn) && ruleAction.includedIn === requestedActionId) {\n\t\t\t\tcovers = true;\n\t\t\t}\n\n\t\t\t// implies: rule action A implies B means exercising A also entails B.\n\t\t\t// A rule granting A therefore also grants each implied action.\n\t\t\tif (!covers && (ruleAction.implies ?? []).includes(requestedActionId as OdrlActionType)) {\n\t\t\t\tcovers = true;\n\t\t\t}\n\t\t}\n\n\t\tif (!covers) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// If the action specifies refinements, all must be satisfied for the action to apply.\n\t\t// Refinements constrain the manner in which the action is exercised (e.g. print count <= 5).\n\t\tif (Is.object<IOdrlAction>(ruleAction) && Is.notEmpty(ruleAction.refinement)) {\n\t\t\tconst refinements = ArrayHelper.fromObjectOrArray<IOdrlConstraint | IOdrlLogicalConstraint>(\n\t\t\t\truleAction.refinement ?? []\n\t\t\t);\n\t\t\treturn refinements.every((refinement: IOdrlConstraint | IOdrlLogicalConstraint) =>\n\t\t\t\tthis.evaluateConstraint(refinement, dataSources)\n\t\t\t);\n\t\t}\n\n\t\treturn true;\n\t}\n\n\t/**\n\t * Apply a permission and create decisions based on that information.\n\t * @param agreementAssigner The assigner ID from the agreement.\n\t * @param agreementAssignee The assignee ID from the agreement.\n\t * @param policy The policy containing the permission.\n\t * @param permission The permission to apply.\n\t * @param targetRefinements Additional constraints from target refinement.\n\t * @param dataSources The operand lookup sources.\n\t * @returns True if the permission applies.\n\t * @internal\n\t */\n\tprivate async evaluatePermission(\n\t\tagreementAssigner: string[] | undefined,\n\t\tagreementAssignee: string[] | undefined,\n\t\tpolicy: IRightsManagementPolicy,\n\t\tpermission: IOdrlPermission,\n\t\ttargetRefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[],\n\t\tdataSources: { [prefix: string]: unknown },\n\t\taction?: OdrlActionType | string,\n\t\tdecisionTarget?: string\n\t): Promise<boolean> {\n\t\tif (\n\t\t\t!this.isRuleApplicableToParties(permission, agreementAssigner, agreementAssignee, dataSources)\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// Check if the permission's action(s) match the requested action\n\t\tif (!this.isActionApplicable(permission.action, action, dataSources)) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// ODRL semantics: a Permission without constraints is unconditional.\n\t\tconst constraints = [\n\t\t\t...ArrayHelper.fromObjectOrArray(permission.constraint ?? []),\n\t\t\t...targetRefinements\n\t\t];\n\t\tconst permissionTargetLookup = this.tryResolveTargetDataSource(\n\t\t\tthis.buildRuleDataContextTargetId(\n\t\t\t\tthis.getRuleDataContextTargetId(permission.target),\n\t\t\t\tdecisionTarget\n\t\t\t),\n\t\t\tdataSources,\n\t\t\ttrue\n\t\t);\n\t\tconst ruleDataContext = permissionTargetLookup.value;\n\t\tif (constraints.length === 0) {\n\t\t\treturn this.enforcePermissionDuties(policy, permission, dataSources, ruleDataContext);\n\t\t}\n\n\t\t// All constraints must be satisfied for the permission to apply.\n\t\tconst constraintsSatisfied = constraints.every(c => this.evaluateConstraint(c, dataSources));\n\n\t\tif (!constraintsSatisfied) {\n\t\t\treturn false;\n\t\t}\n\n\t\treturn this.enforcePermissionDuties(policy, permission, dataSources, ruleDataContext);\n\t}\n\n\t/**\n\t * Enforce duties attached to a permission.\n\t * @param policy The policy being evaluated.\n\t * @param permission The permission being evaluated.\n\t * @param dataSources The operand lookup sources.\n\t * @param ruleDataContext The target-scoped data context passed to enforcers.\n\t * @returns True if all duties are enforced or none are present.\n\t * @internal\n\t */\n\tprivate async enforcePermissionDuties(\n\t\tpolicy: IRightsManagementPolicy,\n\t\tpermission: IOdrlPermission,\n\t\tdataSources: { [prefix: string]: unknown },\n\t\truleDataContext?: unknown\n\t): Promise<boolean> {\n\t\tconst duties = ArrayHelper.fromObjectOrArray(permission.duty ?? []);\n\t\tif (duties.length === 0) {\n\t\t\treturn true;\n\t\t}\n\n\t\tfor (const duty of duties) {\n\t\t\tconst enforced = await this.enforceDuty(policy, duty, dataSources, ruleDataContext);\n\t\t\tif (!enforced) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t}\n\n\t\treturn true;\n\t}\n\n\t/**\n\t * Enforce a single duty using registered obligation enforcers.\n\t * @param policy The policy being evaluated.\n\t * @param duty The duty to enforce.\n\t * @param dataSources The operand lookup sources.\n\t * @param ruleDataContext The target-scoped data context passed to enforcers.\n\t * @returns True if any enforcer succeeds.\n\t * @internal\n\t */\n\tprivate async enforceDuty(\n\t\tpolicy: IRightsManagementPolicy,\n\t\tduty: IOdrlDuty,\n\t\tdataSources: { [prefix: string]: unknown },\n\t\truleDataContext?: unknown\n\t): Promise<boolean> {\n\t\tconst enforcerNames = PolicyObligationEnforcerFactory.names();\n\t\tconst information = dataSources[\n\t\t\t`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_INFORMATION}`\n\t\t] as { [id: string]: IJsonLdNodeObject } | undefined;\n\n\t\tif (enforcerNames.length === 0) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"noObligationEnforcersRegistered\");\n\t\t}\n\n\t\tfor (const enforcerName of enforcerNames) {\n\t\t\tconst enforcer = PolicyObligationEnforcerFactory.get(enforcerName);\n\t\t\tif (await enforcer.enforce(policy, duty, information, ruleDataContext)) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t}\n\n\t\tconst consequences = ArrayHelper.fromObjectOrArray<IOdrlDuty>(duty.consequence ?? []);\n\t\tif (consequences.length === 0) {\n\t\t\treturn false;\n\t\t}\n\n\t\tfor (const consequence of consequences) {\n\t\t\tif (!(await this.enforceDuty(policy, consequence, dataSources, ruleDataContext))) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t}\n\n\t\treturn true;\n\t}\n\n\t/**\n\t * Resolve a target string to a matching datasource prefix and remaining target value.\n\t * @param targetId The target identifier to resolve.\n\t * @param dataSources The available lookup sources.\n\t * @param resolveValue True to resolve an item from the target path/key.\n\t * @returns The matching prefix, source, remaining target and optional resolved value.\n\t * @internal\n\t */\n\tprivate tryResolveTargetDataSource(\n\t\ttargetId: string | undefined,\n\t\tdataSources: { [prefix: string]: unknown },\n\t\tresolveValue: boolean = false\n\t): { prefix: string; source: unknown; target: string; value?: unknown } {\n\t\t// If there is no target id, default to the entire \"twin:jsonpath\" datasource\n\t\tif (Is.empty(targetId)) {\n\t\t\treturn {\n\t\t\t\tprefix: `${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}`,\n\t\t\t\tsource:\n\t\t\t\t\tdataSources[\n\t\t\t\t\t\t`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}`\n\t\t\t\t\t],\n\t\t\t\ttarget: \"$\",\n\t\t\t\tvalue:\n\t\t\t\t\tdataSources[\n\t\t\t\t\t\t`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}`\n\t\t\t\t\t]\n\t\t\t};\n\t\t}\n\n\t\t// Otherwise lookup the target id prefix in the datasources and return the remaining suffix as the target path/key\n\t\tconst prefixes = Object.keys(dataSources).sort((a, b) => b.length - a.length);\n\t\tfor (const prefix of prefixes) {\n\t\t\tif (targetId.startsWith(`${prefix}:`)) {\n\t\t\t\tconst source = dataSources[prefix];\n\t\t\t\tconst target = targetId.slice(prefix.length + 1);\n\n\t\t\t\tif (!target.startsWith(\"$\")) {\n\t\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"ruleTargetNotSupported\", {\n\t\t\t\t\t\ttarget: targetId\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\tif (!resolveValue) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tprefix,\n\t\t\t\t\t\tsource,\n\t\t\t\t\t\ttarget\n\t\t\t\t\t};\n\t\t\t\t}\n\n\t\t\t\tconst matches = JsonPathHelper.query(target, source);\n\t\t\t\tif (matches.length === 0) {\n\t\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"ruleTargetNotSupported\", {\n\t\t\t\t\t\ttarget: targetId\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\treturn {\n\t\t\t\t\tprefix,\n\t\t\t\t\tsource,\n\t\t\t\t\ttarget,\n\t\t\t\t\tvalue: matches.length === 1 ? matches[0].value : matches.map(m => m.value)\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"ruleTargetNotSupported\", {\n\t\t\ttarget: targetId\n\t\t});\n\t}\n\n\t/**\n\t * Extract the target id from the permission.\n\t * @param target The permission target.\n\t * @returns The information key, or undefined when the target is not an information reference.\n\t * @internal\n\t */\n\tprivate getTargetId(target: IOdrlRule[\"target\"]): string | undefined {\n\t\tif (Is.undefined(target)) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tif (Is.array(target) && target.length > 1) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"multipleTargetsNotSupported\");\n\t\t}\n\n\t\tconst arr = ArrayHelper.fromObjectOrArray(target ?? []);\n\t\tif (arr.length === 0) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\treturn Is.string(arr[0]) ? arr[0] : OdrlPolicyHelper.getUid(arr[0]);\n\t}\n\n\t/**\n\t * Resolve the target identifier used for rule data context lookup.\n\t * For AssetCollection targets the `source` property is used because the collection has no `uid`.\n\t * Falls back to `getTargetId` for all other target forms.\n\t * @param target The rule target field value.\n\t * @returns The prefixed target string for data context resolution.\n\t * @internal\n\t */\n\tprivate getRuleDataContextTargetId(target: IOdrlRule[\"target\"]): string | undefined {\n\t\tconst arr = ArrayHelper.fromObjectOrArray(target ?? []);\n\t\tif (arr.length === 1) {\n\t\t\tconst firstTarget = arr[0];\n\t\t\tif (\n\t\t\t\tIs.object<IOdrlAssetCollection>(firstTarget) &&\n\t\t\t\tOdrlPolicyHelper.getType(firstTarget) === OdrlTypes.AssetCollection &&\n\t\t\t\tIs.stringValue(firstTarget.source)\n\t\t\t) {\n\t\t\t\treturn firstTarget.source;\n\t\t\t}\n\t\t}\n\t\treturn this.getTargetId(target);\n\t}\n\n\t/**\n\t * Build a concrete prefixed target id for rule data-context lookup.\n\t * @param baseTargetId The original prefixed target id from the rule.\n\t * @param decisionTarget The concrete decision JSONPath target.\n\t * @returns The concrete prefixed target id.\n\t * @internal\n\t */\n\tprivate buildRuleDataContextTargetId(\n\t\tbaseTargetId: string | undefined,\n\t\tdecisionTarget: string | undefined\n\t): string | undefined {\n\t\tif (!Is.stringValue(decisionTarget) || decisionTarget === \"$\") {\n\t\t\treturn baseTargetId;\n\t\t}\n\n\t\tif (!Is.stringValue(baseTargetId)) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst pathStartIndex = baseTargetId.indexOf(\":$\");\n\t\tif (pathStartIndex < 0) {\n\t\t\treturn baseTargetId;\n\t\t}\n\n\t\treturn `${baseTargetId.slice(0, pathStartIndex)}:${decisionTarget}`;\n\t}\n\n\t/**\n\t * Resolve a rule target into a policy-decision JSONPath target and extracted refinements.\n\t * For AssetCollection targets, `source` is treated as the decision target and `refinement`\n\t * constraints are applied as additional rule constraints.\n\t * @param rule The rule to resolve the target for.\n\t * @returns The decision target and target refinements.\n\t * @throws GeneralError if target is invalid or unsupported.\n\t * @internal\n\t */\n\tprivate resolveRuleTarget(\n\t\trule: IOdrlRule,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): {\n\t\ttarget: string;\n\t\trefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t} {\n\t\tconst arr = ArrayHelper.fromObjectOrArray(rule.target ?? []);\n\t\tif (arr.length === 0) {\n\t\t\treturn {\n\t\t\t\ttarget: \"$\",\n\t\t\t\trefinements: []\n\t\t\t};\n\t\t}\n\n\t\tif (arr.length > 1) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"multipleTargetsNotSupported\");\n\t\t}\n\n\t\tconst firstTarget = arr[0];\n\n\t\tif (Is.object<IOdrlAsset>(firstTarget)) {\n\t\t\t// Guard against unsupported ODRL asset properties\n\t\t\tif (Is.notEmpty(firstTarget.hasPolicy)) {\n\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"assetHasPolicyNotSupported\");\n\t\t\t}\n\t\t\tif (Is.notEmpty(firstTarget.partOf)) {\n\t\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"assetPartOfNotSupported\");\n\t\t\t}\n\n\t\t\tif (\n\t\t\t\tIs.object<IOdrlAssetCollection>(firstTarget) &&\n\t\t\t\tOdrlPolicyHelper.getType(firstTarget) === OdrlTypes.AssetCollection\n\t\t\t) {\n\t\t\t\tif (!Is.stringValue(firstTarget.source)) {\n\t\t\t\t\tthrow new GeneralError(\n\t\t\t\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\t\t\t\t\"assetCollectionSourceNotSupported\",\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsource: firstTarget.source ?? \"\"\n\t\t\t\t\t\t}\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tlet sourceLookup: { prefix: string; source: unknown; target: string; value?: unknown };\n\t\t\t\ttry {\n\t\t\t\t\tsourceLookup = this.tryResolveTargetDataSource(firstTarget.source, dataSources);\n\t\t\t\t} catch {\n\t\t\t\t\tthrow new GeneralError(\n\t\t\t\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\t\t\t\t\"assetCollectionSourceNotSupported\",\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsource: firstTarget.source\n\t\t\t\t\t\t}\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\treturn {\n\t\t\t\t\ttarget: sourceLookup.target,\n\t\t\t\t\trefinements: ArrayHelper.fromObjectOrArray(firstTarget.refinement ?? [])\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\tconst targetId = Is.string(firstTarget) ? firstTarget : OdrlPolicyHelper.getUid(firstTarget);\n\t\tif (!Is.stringValue(targetId)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"ruleTargetNotSupported\", {\n\t\t\t\ttarget: \"\"\n\t\t\t});\n\t\t}\n\n\t\tconst targetLookup = this.tryResolveTargetDataSource(targetId, dataSources);\n\n\t\treturn {\n\t\t\ttarget: targetLookup.target,\n\t\t\trefinements: []\n\t\t};\n\t}\n\n\t/**\n\t * Resolve decision targets for a rule.\n\t * AssetCollection wildcard targets with refinements are expanded to per-item targets.\n\t * @param rule The rule being evaluated.\n\t * @param dataSources The operand lookup sources.\n\t * @returns The decision targets and scoped refinements.\n\t * @internal\n\t */\n\tprivate resolveRuleDecisionTargets(\n\t\trule: IOdrlRule,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): {\n\t\ttarget: string;\n\t\trefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t}[] {\n\t\tconst resolvedTarget = this.resolveRuleTarget(rule, dataSources);\n\n\t\tif (!this.shouldExpandToPerItemTargets(rule, resolvedTarget)) {\n\t\t\treturn [resolvedTarget];\n\t\t}\n\n\t\tconst sourceLookup = this.tryResolveTargetDataSource(\n\t\t\tthis.getRuleDataContextTargetId(rule.target),\n\t\t\tdataSources\n\t\t);\n\t\tconst matches = JsonPathHelper.query(sourceLookup.target, sourceLookup.source);\n\t\tif (matches.length === 0) {\n\t\t\treturn [resolvedTarget];\n\t\t}\n\n\t\treturn matches.map(match => {\n\t\t\tconst itemTarget = this.normalizeDecisionTargetPath(match.path ?? resolvedTarget.target);\n\t\t\treturn {\n\t\t\t\ttarget: itemTarget,\n\t\t\t\trefinements: resolvedTarget.refinements.map(refinement =>\n\t\t\t\t\tthis.rewriteRefinementForDecisionTarget(refinement, resolvedTarget.target, itemTarget)\n\t\t\t\t)\n\t\t\t};\n\t\t});\n\t}\n\n\t/**\n\t * Determine if a rule should be expanded to per-item targets.\n\t * @param rule The rule.\n\t * @param resolvedTarget The resolved target details.\n\t * @returns True if the rule should emit per-item decisions.\n\t * @internal\n\t */\n\tprivate shouldExpandToPerItemTargets(\n\t\trule: IOdrlRule,\n\t\tresolvedTarget: {\n\t\t\ttarget: string;\n\t\t\trefinements: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t\t}\n\t): boolean {\n\t\tif (resolvedTarget.refinements.length === 0 || !resolvedTarget.target.includes(\"[*]\")) {\n\t\t\treturn false;\n\t\t}\n\n\t\tconst targets = ArrayHelper.fromObjectOrArray(rule.target ?? []);\n\t\tif (targets.length !== 1 || !Is.object<IOdrlAssetCollection>(targets[0])) {\n\t\t\treturn false;\n\t\t}\n\n\t\treturn OdrlPolicyHelper.getType(targets[0]) === OdrlTypes.AssetCollection;\n\t}\n\n\t/**\n\t * Rewrite a refinement so wildcard paths are scoped to a concrete item target.\n\t * @param refinement The refinement to rewrite.\n\t * @param sourceTarget The wildcard source target.\n\t * @param itemTarget The concrete item target.\n\t * @returns The rewritten refinement.\n\t * @internal\n\t */\n\tprivate rewriteRefinementForDecisionTarget(\n\t\trefinement: IOdrlConstraint | IOdrlLogicalConstraint,\n\t\tsourceTarget: string,\n\t\titemTarget: string\n\t): IOdrlConstraint | IOdrlLogicalConstraint {\n\t\tconst logicalConstraint = this.getLogicalConstraintOperands(refinement);\n\t\tif (logicalConstraint) {\n\t\t\treturn {\n\t\t\t\t...refinement,\n\t\t\t\t[logicalConstraint.operator]: logicalConstraint.constraints.map(item =>\n\t\t\t\t\tthis.rewriteRefinementForDecisionTarget(item, sourceTarget, itemTarget)\n\t\t\t\t)\n\t\t\t} as IOdrlLogicalConstraint;\n\t\t}\n\n\t\tconst regularConstraint = refinement as IOdrlConstraint;\n\t\treturn {\n\t\t\t...regularConstraint,\n\t\t\tleftOperand: this.rewriteOperandForDecisionTarget(\n\t\t\t\tregularConstraint.leftOperand,\n\t\t\t\tsourceTarget,\n\t\t\t\titemTarget\n\t\t\t) as IOdrlConstraint[\"leftOperand\"],\n\t\t\trightOperand: this.rewriteOperandForDecisionTarget(\n\t\t\t\tregularConstraint.rightOperand,\n\t\t\t\tsourceTarget,\n\t\t\t\titemTarget\n\t\t\t)\n\t\t};\n\t}\n\n\t/**\n\t * Rewrite JSONPath-based operands from wildcard source to concrete item target.\n\t * @param operand The operand to rewrite.\n\t * @param sourceTarget The wildcard source target.\n\t * @param itemTarget The concrete item target.\n\t * @returns The rewritten operand.\n\t * @internal\n\t */\n\tprivate rewriteOperandForDecisionTarget(\n\t\toperand: IOdrlConstraint[\"leftOperand\"] | IOdrlConstraint[\"rightOperand\"] | string,\n\t\tsourceTarget: string,\n\t\titemTarget: string\n\t): IOdrlConstraint[\"leftOperand\"] | IOdrlConstraint[\"rightOperand\"] | string {\n\t\tif (Is.stringValue(operand)) {\n\t\t\tconst prefix = `${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}:`;\n\t\t\tif (operand.startsWith(prefix)) {\n\t\t\t\tconst valuePath = operand.slice(prefix.length);\n\t\t\t\treturn `${prefix}${this.rewriteWildcardPath(valuePath, sourceTarget, itemTarget)}`;\n\t\t\t}\n\t\t\treturn operand;\n\t\t}\n\n\t\tif (Is.object<{ \"@type\": unknown; \"@value\": unknown }>(operand)) {\n\t\t\tconst typedOperand = { ...operand };\n\t\t\tif (\n\t\t\t\ttypedOperand[\"@type\"] ===\n\t\t\t\t\t`${DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS}${DefaultPolicyArbiter._TWIN_PREFIX_JSONPATH}` &&\n\t\t\t\tIs.stringValue(typedOperand[\"@value\"])\n\t\t\t) {\n\t\t\t\ttypedOperand[\"@value\"] = this.rewriteWildcardPath(\n\t\t\t\t\ttypedOperand[\"@value\"],\n\t\t\t\t\tsourceTarget,\n\t\t\t\t\titemTarget\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn typedOperand;\n\t\t}\n\n\t\treturn operand;\n\t}\n\n\t/**\n\t * Rewrite wildcard source JSONPath segments to a concrete item JSONPath.\n\t * @param valuePath The operand path.\n\t * @param sourceTarget The wildcard source path.\n\t * @param itemTarget The concrete item path.\n\t * @returns The rewritten path.\n\t * @internal\n\t */\n\tprivate rewriteWildcardPath(valuePath: string, sourceTarget: string, itemTarget: string): string {\n\t\tif (!sourceTarget.includes(\"[*]\") || !valuePath.includes(\"[*]\")) {\n\t\t\treturn valuePath;\n\t\t}\n\n\t\tif (valuePath.startsWith(sourceTarget)) {\n\t\t\treturn `${itemTarget}${valuePath.slice(sourceTarget.length)}`;\n\t\t}\n\n\t\treturn valuePath;\n\t}\n\n\t/**\n\t * Normalize JSONPath strings to dot notation for stable decision targets.\n\t * @param path The JSONPath to normalize.\n\t * @returns The normalized path.\n\t * @internal\n\t */\n\tprivate normalizeDecisionTargetPath(path: string): string {\n\t\treturn path.replace(/\\['([^']+)']/g, \".$1\");\n\t}\n\n\t/**\n\t * Evaluate a single ODRL constraint against the available context.\n\t * Supports logical constraint composition through nested refinements.\n\t * @param constraint The constraint to evaluate.\n\t * @param dataSources The operand lookup sources.\n\t * @returns True if the constraint is satisfied.\n\t * @internal\n\t */\n\tprivate evaluateConstraint(\n\t\tconstraint: IOdrlConstraint | IOdrlLogicalConstraint,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): boolean {\n\t\tconst logicalConstraint = this.getLogicalConstraintOperands(constraint);\n\t\tif (logicalConstraint) {\n\t\t\treturn this.evaluateLogicalConstraint(logicalConstraint, dataSources);\n\t\t}\n\n\t\t// Must be a regular constraint beyond this point\n\t\tconst regularConstraint = constraint as IOdrlConstraint;\n\n\t\t// rightOperandReference is not supported — it requires an external IRI lookup that\n\t\t// is outside the scope of the local evaluation engine.\n\t\tif (Is.notEmpty(regularConstraint.rightOperandReference)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"rightOperandReferenceNotSupported\");\n\t\t}\n\n\t\t// dataType specifies how the rightOperand value should be coerced before comparison.\n\t\t// Without dataType-aware coercion logic the comparison may produce incorrect results.\n\t\tif (Is.notEmpty(regularConstraint.dataType)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"constraintDataTypeNotSupported\");\n\t\t}\n\n\t\t// unit specifies the measurement unit for the right operand (e.g. currency, length).\n\t\t// Unit-aware comparison is not implemented.\n\t\tif (Is.notEmpty(regularConstraint.unit)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"constraintUnitNotSupported\");\n\t\t}\n\n\t\t// status represents a state-based evaluation operand (e.g. odrl:policyUsage).\n\t\t// State-based evaluation is not implemented.\n\t\tif (Is.notEmpty(regularConstraint.status)) {\n\t\t\tthrow new GeneralError(DefaultPolicyArbiter.CLASS_NAME, \"constraintStatusNotSupported\");\n\t\t}\n\n\t\t// Evaluate the main constraint condition\n\t\tconst leftValue = this.calculateOperandValue(regularConstraint.leftOperand, dataSources);\n\t\tconst rightValue = this.calculateOperandValue(regularConstraint.rightOperand, dataSources);\n\t\tconst mainSatisfied = this.evaluateOperator(regularConstraint.operator, leftValue, rightValue);\n\n\t\t// If main constraint is not satisfied, the overall constraint fails\n\t\treturn mainSatisfied;\n\t}\n\n\t/**\n\t * Extract logical constraint operands when present.\n\t * @param constraint The constraint to inspect.\n\t * @returns The logical operator and its operands, or undefined when not logical.\n\t * @throws GeneralError if logical constraint operands are not unique.\n\t * @internal\n\t */\n\tprivate getLogicalConstraintOperands(constraint: IOdrlConstraint | IOdrlLogicalConstraint):\n\t\t| {\n\t\t\t\toperator: OdrlLogicalConstraintType;\n\t\t\t\tconstraints: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t\t }\n\t\t| undefined {\n\t\tconst logicalConstraint = constraint as IOdrlLogicalConstraint;\n\t\tconst operators: OdrlLogicalConstraintType[] = Object.values(OdrlLogicalConstraintType);\n\t\tfor (const operator of operators) {\n\t\t\tconst value = logicalConstraint[operator];\n\t\t\tif (!Is.undefined(value)) {\n\t\t\t\tconst constraints = this.normalizeLogicalConstraintOperands(value);\n\t\t\t\tthis.validateLogicalConstraintOperandUniqueness(constraints, operator);\n\t\t\t\treturn {\n\t\t\t\t\toperator,\n\t\t\t\t\tconstraints\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn undefined;\n\t}\n\n\t/**\n\t * Normalize logical constraint operands into a constraint array.\n\t * Handles both IOdrlConstraint and IOdrlLogicalConstraint types.\n\t * @param raw The raw operand value.\n\t * @returns The constraint array.\n\t * @internal\n\t */\n\tprivate normalizeLogicalConstraintOperands(\n\t\traw: unknown\n\t): (IOdrlConstraint | IOdrlLogicalConstraint)[] {\n\t\tlet normalized = raw;\n\t\tif (\n\t\t\tIs.object<IOdrlLogicalConstraintOperand>(normalized) &&\n\t\t\t!Is.undefined(normalized[\"@list\"])\n\t\t) {\n\t\t\tnormalized = normalized[\"@list\"];\n\t\t}\n\n\t\treturn (ArrayHelper.fromObjectOrArray(normalized) ?? [])\n\t\t\t.filter(item => Is.object(item))\n\t\t\t.map(item => item as IOdrlConstraint | IOdrlLogicalConstraint);\n\t}\n\n\t/**\n\t * Validate that all operands in a logical constraint are unique.\n\t * ODRL spec 2.5.2 requires that all operand values MUST be unique Constraint instances.\n\t * Uniqueness is checked by uid property and id property.\n\t * @param constraints The constraint operands to validate.\n\t * @param operator The logical operator type (for error messaging).\n\t * @throws GeneralError if duplicate constraints are found.\n\t * @internal\n\t */\n\tprivate validateLogicalConstraintOperandUniqueness(\n\t\tconstraints: (IOdrlConstraint | IOdrlLogicalConstraint)[],\n\t\toperator: OdrlLogicalConstraintType\n\t): void {\n\t\tconst seenIdentifiers = new Set<string>();\n\n\t\tfor (let i = 0; i < constraints.length; i++) {\n\t\t\tconst constraint = constraints[i];\n\t\t\tconst identifier = OdrlPolicyHelper.getUid(constraint);\n\n\t\t\t// If we have an identifier, check for duplicates\n\t\t\tif (Is.stringValue(identifier)) {\n\t\t\t\tif (seenIdentifiers.has(identifier)) {\n\t\t\t\t\tthrow new GeneralError(\n\t\t\t\t\t\tDefaultPolicyArbiter.CLASS_NAME,\n\t\t\t\t\t\t\"logicalConstraintOperandNotUnique\",\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\toperator,\n\t\t\t\t\t\t\tidentifier,\n\t\t\t\t\t\t\tindex: i\n\t\t\t\t\t\t}\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tseenIdentifiers.add(identifier);\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Evaluate a logical constraint operator against its operands.\n\t * @param logicalConstraint The operator and operand list.\n\t * @param dataSources The operand lookup sources.\n\t * @returns True if the logical constraint is satisfied.\n\t * @internal\n\t */\n\tprivate evaluateLogicalConstraint(\n\t\tlogicalConstraint: {\n\t\t\toperator: OdrlLogicalConstraintType;\n\t\t\tconstraints: (IOdrlConstraint | IOdrlLogicalConstraint)[];\n\t\t},\n\t\tdataSources: { [prefix: string]: unknown }\n\t): boolean {\n\t\tconst { operator, constraints } = logicalConstraint;\n\t\tif (constraints.length === 0) {\n\t\t\treturn false;\n\t\t}\n\n\t\tswitch (operator) {\n\t\t\tcase OdrlLogicalConstraintType.And:\n\t\t\t\treturn constraints.every(item => this.evaluateConstraint(item, dataSources));\n\t\t\tcase OdrlLogicalConstraintType.AndSequence: {\n\t\t\t\tfor (const item of constraints) {\n\t\t\t\t\tif (!this.evaluateConstraint(item, dataSources)) {\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase OdrlLogicalConstraintType.Or:\n\t\t\t\treturn constraints.some(item => this.evaluateConstraint(item, dataSources));\n\t\t\tcase OdrlLogicalConstraintType.Xone: {\n\t\t\t\tlet satisfied = 0;\n\t\t\t\tfor (const item of constraints) {\n\t\t\t\t\tif (this.evaluateConstraint(item, dataSources)) {\n\t\t\t\t\t\tsatisfied += 1;\n\t\t\t\t\t\tif (satisfied > 1) {\n\t\t\t\t\t\t\treturn false;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn satisfied === 1;\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn false;\n\t\t}\n\t}\n\n\t/**\n\t * Resolve a prefixed operand to its source object and JSONPath expression.\n\t * Prefix matching is dictionary-driven so additional operand namespaces can be\n\t * added in one place by extending the lookup sources map.\n\t * @param operandTypeOrValue The string operand value or typed operand namespace.\n\t * @param operandValue The JSONPath expression.\n\t * @param dataSources The available lookup sources.\n\t * @returns The resolved source and JSONPath, or undefined when not namespaced.\n\t * @throws GeneralError if a twin: prefixed operand doesn't resolve to any available datasource key.\n\t * @internal\n\t */\n\tprivate tryResolveOperandLookup(\n\t\toperandTypeOrValue: string,\n\t\toperandValue: unknown,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): { source: unknown; jsonPath: string } | undefined {\n\t\tlet lookupTargetId: string | undefined;\n\n\t\tif (dataSources[operandTypeOrValue]) {\n\t\t\tif (!Is.stringValue(operandValue)) {\n\t\t\t\treturn undefined;\n\t\t\t}\n\n\t\t\tlookupTargetId = `${operandTypeOrValue}:${operandValue}`;\n\t\t} else if (operandTypeOrValue.includes(\":\")) {\n\t\t\tlookupTargetId = operandTypeOrValue;\n\t\t} else {\n\t\t\treturn undefined;\n\t\t}\n\n\t\t// Delegate prefixed path matching to shared datasource resolver\n\t\tif (operandTypeOrValue.startsWith(DefaultPolicyArbiter._TWIN_PREFIX_OPERATIONS)) {\n\t\t\tconst resolved = this.tryResolveTargetDataSource(lookupTargetId, dataSources);\n\t\t\treturn {\n\t\t\t\tsource: resolved.source,\n\t\t\t\tjsonPath: resolved.target\n\t\t\t};\n\t\t}\n\t}\n\n\t/**\n\t * Calculate an operand value.\n\t * @param operand The operand.\n\t * @param dataSources The available prefixed operand sources.\n\t * @returns The resolved operand value.\n\t * @internal\n\t */\n\tprivate calculateOperandValue(\n\t\toperand: IOdrlConstraint[\"leftOperand\"] | IOdrlConstraint[\"rightOperand\"] | string,\n\t\tdataSources: { [prefix: string]: unknown }\n\t): unknown {\n\t\t// Treat prefixed operands as selectors against a namespaced source dictionary.\n\t\t// Examples: twin:jsonpath:$.field, twin:information:$.credentials.level\n\t\tlet jsonPath: string | undefined;\n\t\tlet operandRoot: unknown;\n\t\tif (Is.stringValue(operand)) {\n\t\t\tconst lookup = this.tryResolveOperandLookup(operand, operand, dataSources);\n\t\t\tif (lookup) {\n\t\t\t\tjsonPath = lookup.jsonPath;\n\t\t\t\toperandRoot = lookup.source;\n\t\t\t}\n\t\t} else if (Is.object<{ \"@type\": unknown; \"@value\": unknown }>(operand)) {\n\t\t\t// Is this an object { \"@value\": \"18\", \"@type\": \"xsd:integer\" } ?\n\t\t\tconst value = operand[\"@value\"];\n\t\t\tconst type = operand[\"@type\"];\n\t\t\tif (Is.stringValue(type)) {\n\t\t\t\tconst lookup = this.tryResolveOperandLookup(type, value, dataSources);\n\t\t\t\tif (lookup) {\n\t\t\t\t\tjsonPath = lookup.jsonPath;\n\t\t\t\t\toperandRoot = lookup.source;\n\t\t\t\t} else {\n\t\t\t\t\tconst xsdValue = this.coerceXsdType(value, type);\n\t\t\t\t\tif (!Is.undefined(xsdValue)) {\n\t\t\t\t\t\treturn xsdValue;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\t// We have a JSON Path to resolve\n\t\tif (Is.stringValue(jsonPath)) {\n\t\t\tconst jsonPaths = JsonPathHelper.query(jsonPath, operandRoot);\n\t\t\tif (jsonPaths.length === 0) {\n\t\t\t\t// No matches\n\t\t\t\treturn undefined;\n\t\t\t} else if (jsonPaths.length === 1) {\n\t\t\t\t// Single match - return the value directly\n\t\t\t\treturn jsonPaths[0].value;\n\t\t\t}\n\n\t\t\t// Multiple matches - return array of values\n\t\t\treturn jsonPaths.map(p => p.value);\n\t\t}\n\n\t\t// Not JSON Path or object value so return as is\n\t\treturn operand;\n\t}\n\n\t/**\n\t * Evaluate an ODRL operator against resolved operands.\n\t * @param operator The operator.\n\t * @param left The resolved left operand.\n\t * @param right The resolved right operand.\n\t * @returns True if the comparison is satisfied.\n\t * @internal\n\t */\n\tprivate evaluateOperator(operator: OdrlOperatorType, left: unknown, right: unknown): boolean {\n\t\t// Handle array/collection left values (e.g. JSONPath returning multiple matches).\n\t\tconst leftValues = ArrayHelper.fromObjectOrArray(left ?? []);\n\n\t\tswitch (operator) {\n\t\t\tcase OdrlOperatorType.Eq:\n\t\t\t\treturn leftValues.some(v => ObjectHelper.equal(v, right, false));\n\t\t\tcase OdrlOperatorType.Neq:\n\t\t\t\treturn leftValues.every(v => !ObjectHelper.equal(v, right, false));\n\t\t\tcase OdrlOperatorType.Gt:\n\t\t\t\treturn leftValues.some(v => this.compareOrdered(v, right, (a, b) => a > b));\n\t\t\tcase OdrlOperatorType.Gteq:\n\t\t\t\treturn leftValues.some(v => this.compareOrdered(v, right, (a, b) => a >= b));\n\t\t\tcase OdrlOperatorType.Lt:\n\t\t\t\treturn leftValues.some(v => this.compareOrdered(v, right, (a, b) => a < b));\n\t\t\tcase OdrlOperatorType.Lteq:\n\t\t\t\treturn leftValues.some(v => this.compareOrdered(v, right, (a, b) => a <= b));\n\t\t\tcase OdrlOperatorType.IsAnyOf: {\n\t\t\t\treturn leftValues.some(v => {\n\t\t\t\t\tconst stringValue =\n\t\t\t\t\t\ttypeof v === \"string\" || typeof v === \"number\" || typeof v === \"boolean\"\n\t\t\t\t\t\t\t? String(v)\n\t\t\t\t\t\t\t: JSON.stringify(v);\n\t\t\t\t\treturn (ArrayHelper.fromObjectOrArray(right) ?? []).includes(stringValue);\n\t\t\t\t});\n\t\t\t}\n\t\t\tcase OdrlOperatorType.IsAllOf: {\n\t\t\t\treturn ObjectHelper.equal(leftValues, ArrayHelper.fromObjectOrArray(right) ?? [], false);\n\t\t\t}\n\t\t\tcase OdrlOperatorType.IsNoneOf: {\n\t\t\t\treturn leftValues.every(v => !(ArrayHelper.fromObjectOrArray(right) ?? []).includes(v));\n\t\t\t}\n\t\t\tcase OdrlOperatorType.LocTimeEq:\n\t\t\t\treturn leftValues.some(v => ObjectHelper.equal(v, right, false));\n\t\t\tcase OdrlOperatorType.LocTimeGteq:\n\t\t\t\treturn leftValues.some(v => this.compareOrdered(v, right, (a, b) => a >= b));\n\t\t\tcase OdrlOperatorType.IsA:\n\t\t\tcase OdrlOperatorType.HasPart:\n\t\t\tcase OdrlOperatorType.IsPartOf:\n\t\t\t\t// For now, treat these as simple equality/ordering semantics where meaningful.\n\t\t\t\t// Profiles can introduce richer semantics via additional arbiters.\n\t\t\t\treturn leftValues.some(v => ObjectHelper.equal(v, right, false));\n\t\t\tdefault:\n\t\t\t\treturn false;\n\t\t}\n\t}\n\n\t/**\n\t * Compare values with numeric/date/string coercion.\n\t * @param left The left value.\n\t * @param right The right value.\n\t * @param compare Comparison operator.\n\t * @returns True if ordered comparison passes.\n\t * @internal\n\t */\n\tprivate compareOrdered(\n\t\tleft: unknown,\n\t\tright: unknown,\n\t\tcompare: (a: number, b: number) => boolean\n\t): boolean {\n\t\tconst leftNum = Coerce.number(left);\n\t\tconst rightNum = Coerce.number(right);\n\t\tif (!Is.undefined(leftNum) && !Is.undefined(rightNum)) {\n\t\t\treturn compare(leftNum, rightNum);\n\t\t}\n\t\tconst leftDate = Coerce.dateTime(left);\n\t\tconst rightDate = Coerce.dateTime(right);\n\t\tif (!Is.undefined(leftDate) && !Is.undefined(rightDate)) {\n\t\t\treturn compare(leftDate.getTime(), rightDate.getTime());\n\t\t}\n\n\t\t// Only use string ordering when both operands are actual strings.\n\t\t// Avoid coercing other types into strings, as that can cause\n\t\t// unintended comparisons like 18 >= \"$.minAge\" evaluating to true.\n\t\tif (Is.string(left) && Is.string(right)) {\n\t\t\treturn compare(left.localeCompare(right), 0);\n\t\t}\n\n\t\treturn false;\n\t}\n\n\t/**\n\t * Coerce a value to a specific XSD type.\n\t * @param value The value to coerce.\n\t * @param type The XSD type.\n\t * @returns The coerced value, or undefined when coercion is not possible.\n\t * @internal\n\t */\n\tprivate coerceXsdType(value: unknown, type: string): unknown {\n\t\tif (\n\t\t\t[\n\t\t\t\t\"xsd:string\",\n\t\t\t\t\"xsd:normalizedString\",\n\t\t\t\t\"xsd:token\",\n\t\t\t\t\"xsd:anyURI\",\n\t\t\t\t\"xsd:QName\",\n\t\t\t\t\"xsd:NOTATION\"\n\t\t\t].includes(type)\n\t\t) {\n\t\t\t// Handle standard xsd types\n\t\t\treturn Coerce.string(value);\n\t\t} else if (\n\t\t\t[\n\t\t\t\t\"xsd:integer\",\n\t\t\t\t\"xsd:decimal\",\n\t\t\t\t\"xsd:float\",\n\t\t\t\t\"xsd:double\",\n\t\t\t\t\"xsd:long\",\n\t\t\t\t\"xsd:int\",\n\t\t\t\t\"xsd:short\",\n\t\t\t\t\"xsd:byte\"\n\t\t\t].includes(type)\n\t\t) {\n\t\t\t// Handle standard xsd types\n\t\t\treturn Coerce.number(value);\n\t\t} else if (type === \"xsd:boolean\") {\n\t\t\t// Handle standard xsd types\n\t\t\treturn Coerce.boolean(value);\n\t\t} else if ([\"xsd:date\", \"xsd:dateTime\", \"xsd:time\"].includes(type)) {\n\t\t\t// Handle standard xsd types\n\t\t\treturn Coerce.dateTime(value);\n\t\t}\n\t\treturn undefined;\n\t}\n}\n"]}
package/dist/es/policyExecutionActions/loggingPolicyExecutionAction.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"loggingPolicyExecutionAction.js","sourceRoot":"","sources":["../../../src/policyExecutionActions/loggingPolicyExecutionAction.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,EAGN,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,oCAAoC,CAAC;AAK5C;;GAEG;AACH,MAAM,OAAO,4BAA4B;IACxC;;OAEG;IACI,MAAM,CAAU,UAAU,kCAAkD;IAEnF;;;OAGG;IACc,QAAQ,CAAoB;IAE7C;;;OAGG;IACc,OAAO,CAAwB;IAEhD;;OAEG;IACc,YAAY,CAAU;IAEvC;;OAEG;IACc,cAAc,CAAU;IAEzC;;OAEG;IACc,iBAAiB,CAAU;IAE5C;;;OAGG;IACH,YAAY,OAAyD;QACpE,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CACnC,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAC1C,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI;YACzC,mBAAmB,CAAC,MAAM;YAC1B,mBAAmB,CAAC,KAAK;SACzB,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,IAAI,KAAK,CAAC;QAC1D,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,MAAM,EAAE,aAAa,IAAI,KAAK,CAAC;QAC9D,IAAI,CAAC,iBAAiB,GAAG,OAAO,EAAE,MAAM,EAAE,gBAAgB,IAAI,KAAK,CAAC;IACrE,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,4BAA4B,CAAC,UAAU,CAAC;IAChD,CAAC;IAED;;;OAGG;IACI,eAAe;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,OAAO,CACnB,MAAgC,EAChC,SAA4B,EAC5B,IAAmB,EACnB,MAA+B,EAC/B,KAA0B;QAE1B,MAAM,CAAC,UAAU,CAChB,4BAA4B,CAAC,UAAU,WAEvC,KAAK,EACL,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAClC,CAAC;QAEF,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,yEAAyE;YACzE,4EAA4E;YAC5E,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACtD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAElE,IAAI,KAAK,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;gBAC1C,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACvB,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,4BAA4B,CAAC,UAAU;oBAC/C,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;oBACd,OAAO,EAAE,4BAA4B;oBACrC,IAAI,EAAE;wBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;wBAC/C,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,SAAS;wBACjB,SAAS,EAAE,YAAY;wBACvB,MAAM;wBACN,KAAK;qBACL;iBACD,CAAC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACP,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACvB,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,4BAA4B,CAAC,UAAU;oBAC/C,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;oBACd,OAAO,EAAE,2BAA2B;oBACpC,IAAI,EAAE;wBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;wBAC/C,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,SAAS;wBACjB,SAAS,EAAE,YAAY;wBACvB,MAAM;wBACN,KAAK;qBACL;iBACD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC","sourcesContent":["// Copyright 2025 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { ComponentFactory, Guards, Is } from \"@twin.org/core\";\nimport type { ILoggingComponent } from \"@twin.org/logging-models\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\ttype IPolicyDecision,\n\ttype IPolicyExecutionAction,\n\tOdrlPolicyHelper,\n\tPolicyDecisionStage\n} from \"@twin.org/rights-management-models\";\nimport type { IDataspaceProtocolPolicy } from \"@twin.org/standards-dataspace-protocol\";\nimport type { OdrlActionType } from \"@twin.org/standards-w3c-odrl\";\nimport type { ILoggingPolicyExecutionActionConstructorOptions } from \"../models/ILoggingPolicyExecutionActionConstructorOptions.js\";\n\n/**\n * Logging Policy Execution Action to send decisions to logging.\n */\nexport class LoggingPolicyExecutionAction implements IPolicyExecutionAction {\n\t/**\n\t * The class name of the Logging Policy Execution Action.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<LoggingPolicyExecutionAction>();\n\n\t/**\n\t * The logging component.\n\t * @internal\n\t */\n\tprivate readonly _logging: ILoggingComponent;\n\n\t/**\n\t * The policy decision stages to log, if undefined defaults to all.\n\t * @internal\n\t */\n\tprivate readonly _stages: PolicyDecisionStage[];\n\n\t/**\n\t * Whether to include the data in the log.\n\t */\n\tprivate readonly _includeData: boolean;\n\n\t/**\n\t * Whether to include the policy in the log.\n\t */\n\tprivate readonly _includePolicy: boolean;\n\n\t/**\n\t * Whether to include the decisions in the log.\n\t */\n\tprivate readonly _includeDecisions: boolean;\n\n\t/**\n\t * Create a new instance of LoggingPolicyExecutionAction.\n\t * @param options The options for the logging policy execution action.\n\t */\n\tconstructor(options?: ILoggingPolicyExecutionActionConstructorOptions) {\n\t\tthis._logging = ComponentFactory.get<ILoggingComponent>(\n\t\t\toptions?.loggingComponentType ?? \"logging\"\n\t\t);\n\n\t\tthis._stages = options?.config?.stages ?? [\n\t\t\tPolicyDecisionStage.Before,\n\t\t\tPolicyDecisionStage.After\n\t\t];\n\t\tthis._includeData = options?.config?.includeData ?? false;\n\t\tthis._includePolicy = options?.config?.includePolicy ?? false;\n\t\tthis._includeDecisions = options?.config?.includeDecisions ?? false;\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn LoggingPolicyExecutionAction.CLASS_NAME;\n\t}\n\n\t/**\n\t * Which stages should the action be executed at.\n\t * @returns List of stages.\n\t */\n\tpublic supportedStages(): PolicyDecisionStage[] {\n\t\treturn this._stages;\n\t}\n\n\t/**\n\t * Execute function type for policy actions.\n\t * @param policy The policy that applied to the data.\n\t * @param decisions The decisions made by the PDP.\n\t * @param data The data to process.\n\t * @param action Optional action to make a decision on, if not provided, the arbiter will evaluate all actions in the agreement.\n\t * @param stage The stage of the policy decision.\n\t * @returns A promise that resolves when the action is complete.\n\t */\n\tpublic async execute<D = unknown>(\n\t\tpolicy: IDataspaceProtocolPolicy,\n\t\tdecisions: IPolicyDecision[],\n\t\tdata: D | undefined,\n\t\taction: OdrlActionType | string,\n\t\tstage: PolicyDecisionStage\n\t): Promise<void> {\n\t\tGuards.arrayOneOf(\n\t\t\tLoggingPolicyExecutionAction.CLASS_NAME,\n\t\t\tnameof(stage),\n\t\t\tstage,\n\t\t\tObject.values(PolicyDecisionStage)\n\t\t);\n\n\t\tif (this._stages.includes(stage)) {\n\t\t\t// Even if we don't have the options to include data or include policy we\n\t\t\t// still create dummy entries, as the logging string still has them embedded\n\t\t\tlet logData;\n\t\t\tif (!Is.empty(data)) {\n\t\t\t\tlogData = this._includeData ? data : \"{...}\";\n\t\t\t}\n\t\t\tconst logPolicy = this._includePolicy ? policy : \"{}\";\n\t\t\tconst logDecisions = this._includeDecisions ? decisions : \"[...]\";\n\n\t\t\tif (stage === PolicyDecisionStage.Before) {\n\t\t\t\tawait this._logging.log({\n\t\t\t\t\tlevel: \"info\",\n\t\t\t\t\tsource: LoggingPolicyExecutionAction.CLASS_NAME,\n\t\t\t\t\tts: Date.now(),\n\t\t\t\t\tmessage: \"policyActionExecutedBefore\",\n\t\t\t\t\tdata: {\n\t\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\t\tdata: logData,\n\t\t\t\t\t\tpolicy: logPolicy,\n\t\t\t\t\t\tdecisions: logDecisions,\n\t\t\t\t\t\taction,\n\t\t\t\t\t\tstage\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t} else {\n\t\t\t\tawait this._logging.log({\n\t\t\t\t\tlevel: \"info\",\n\t\t\t\t\tsource: LoggingPolicyExecutionAction.CLASS_NAME,\n\t\t\t\t\tts: Date.now(),\n\t\t\t\t\tmessage: \"policyActionExecutedAfter\",\n\t\t\t\t\tdata: {\n\t\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\t\tdata: logData,\n\t\t\t\t\t\tpolicy: logPolicy,\n\t\t\t\t\t\tdecisions: logDecisions,\n\t\t\t\t\t\taction,\n\t\t\t\t\t\tstage\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n}\n"]}
1
+ {"version":3,"file":"loggingPolicyExecutionAction.js","sourceRoot":"","sources":["../../../src/policyExecutionActions/loggingPolicyExecutionAction.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,EAIN,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,oCAAoC,CAAC;AAI5C;;GAEG;AACH,MAAM,OAAO,4BAA4B;IACxC;;OAEG;IACI,MAAM,CAAU,UAAU,kCAAkD;IAEnF;;;OAGG;IACc,QAAQ,CAAoB;IAE7C;;;OAGG;IACc,OAAO,CAAwB;IAEhD;;OAEG;IACc,YAAY,CAAU;IAEvC;;OAEG;IACc,cAAc,CAAU;IAEzC;;OAEG;IACc,iBAAiB,CAAU;IAE5C;;;OAGG;IACH,YAAY,OAAyD;QACpE,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CACnC,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAC1C,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI;YACzC,mBAAmB,CAAC,MAAM;YAC1B,mBAAmB,CAAC,KAAK;SACzB,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,IAAI,KAAK,CAAC;QAC1D,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,MAAM,EAAE,aAAa,IAAI,KAAK,CAAC;QAC9D,IAAI,CAAC,iBAAiB,GAAG,OAAO,EAAE,MAAM,EAAE,gBAAgB,IAAI,KAAK,CAAC;IACrE,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,4BAA4B,CAAC,UAAU,CAAC;IAChD,CAAC;IAED;;;OAGG;IACI,eAAe;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,OAAO,CACnB,MAA+B,EAC/B,SAA4B,EAC5B,IAAmB,EACnB,MAA+B,EAC/B,KAA0B;QAE1B,MAAM,CAAC,UAAU,CAChB,4BAA4B,CAAC,UAAU,WAEvC,KAAK,EACL,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAClC,CAAC;QAEF,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,yEAAyE;YACzE,4EAA4E;YAC5E,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACtD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAElE,IAAI,KAAK,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;gBAC1C,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACvB,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,4BAA4B,CAAC,UAAU;oBAC/C,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;oBACd,OAAO,EAAE,4BAA4B;oBACrC,IAAI,EAAE;wBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;wBAC/C,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,SAAS;wBACjB,SAAS,EAAE,YAAY;wBACvB,MAAM;wBACN,KAAK;qBACL;iBACD,CAAC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACP,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACvB,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,4BAA4B,CAAC,UAAU;oBAC/C,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;oBACd,OAAO,EAAE,2BAA2B;oBACpC,IAAI,EAAE;wBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;wBAC/C,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,SAAS;wBACjB,SAAS,EAAE,YAAY;wBACvB,MAAM;wBACN,KAAK;qBACL;iBACD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC","sourcesContent":["// Copyright 2025 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { ComponentFactory, Guards, Is } from \"@twin.org/core\";\nimport type { ILoggingComponent } from \"@twin.org/logging-models\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\ttype IPolicyDecision,\n\ttype IPolicyExecutionAction,\n\ttype IRightsManagementPolicy,\n\tOdrlPolicyHelper,\n\tPolicyDecisionStage\n} from \"@twin.org/rights-management-models\";\nimport type { OdrlActionType } from \"@twin.org/standards-w3c-odrl\";\nimport type { ILoggingPolicyExecutionActionConstructorOptions } from \"../models/ILoggingPolicyExecutionActionConstructorOptions.js\";\n\n/**\n * Logging Policy Execution Action to send decisions to logging.\n */\nexport class LoggingPolicyExecutionAction implements IPolicyExecutionAction {\n\t/**\n\t * The class name of the Logging Policy Execution Action.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<LoggingPolicyExecutionAction>();\n\n\t/**\n\t * The logging component.\n\t * @internal\n\t */\n\tprivate readonly _logging: ILoggingComponent;\n\n\t/**\n\t * The policy decision stages to log, if undefined defaults to all.\n\t * @internal\n\t */\n\tprivate readonly _stages: PolicyDecisionStage[];\n\n\t/**\n\t * Whether to include the data in the log.\n\t */\n\tprivate readonly _includeData: boolean;\n\n\t/**\n\t * Whether to include the policy in the log.\n\t */\n\tprivate readonly _includePolicy: boolean;\n\n\t/**\n\t * Whether to include the decisions in the log.\n\t */\n\tprivate readonly _includeDecisions: boolean;\n\n\t/**\n\t * Create a new instance of LoggingPolicyExecutionAction.\n\t * @param options The options for the logging policy execution action.\n\t */\n\tconstructor(options?: ILoggingPolicyExecutionActionConstructorOptions) {\n\t\tthis._logging = ComponentFactory.get<ILoggingComponent>(\n\t\t\toptions?.loggingComponentType ?? \"logging\"\n\t\t);\n\n\t\tthis._stages = options?.config?.stages ?? [\n\t\t\tPolicyDecisionStage.Before,\n\t\t\tPolicyDecisionStage.After\n\t\t];\n\t\tthis._includeData = options?.config?.includeData ?? false;\n\t\tthis._includePolicy = options?.config?.includePolicy ?? false;\n\t\tthis._includeDecisions = options?.config?.includeDecisions ?? false;\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn LoggingPolicyExecutionAction.CLASS_NAME;\n\t}\n\n\t/**\n\t * Which stages should the action be executed at.\n\t * @returns List of stages.\n\t */\n\tpublic supportedStages(): PolicyDecisionStage[] {\n\t\treturn this._stages;\n\t}\n\n\t/**\n\t * Execute function type for policy actions.\n\t * @param policy The policy that applied to the data.\n\t * @param decisions The decisions made by the PDP.\n\t * @param data The data to process.\n\t * @param action Optional action to make a decision on, if not provided, the arbiter will evaluate all actions in the agreement.\n\t * @param stage The stage of the policy decision.\n\t * @returns A promise that resolves when the action is complete.\n\t */\n\tpublic async execute<D = unknown>(\n\t\tpolicy: IRightsManagementPolicy,\n\t\tdecisions: IPolicyDecision[],\n\t\tdata: D | undefined,\n\t\taction: OdrlActionType | string,\n\t\tstage: PolicyDecisionStage\n\t): Promise<void> {\n\t\tGuards.arrayOneOf(\n\t\t\tLoggingPolicyExecutionAction.CLASS_NAME,\n\t\t\tnameof(stage),\n\t\t\tstage,\n\t\t\tObject.values(PolicyDecisionStage)\n\t\t);\n\n\t\tif (this._stages.includes(stage)) {\n\t\t\t// Even if we don't have the options to include data or include policy we\n\t\t\t// still create dummy entries, as the logging string still has them embedded\n\t\t\tlet logData;\n\t\t\tif (!Is.empty(data)) {\n\t\t\t\tlogData = this._includeData ? data : \"{...}\";\n\t\t\t}\n\t\t\tconst logPolicy = this._includePolicy ? policy : \"{}\";\n\t\t\tconst logDecisions = this._includeDecisions ? decisions : \"[...]\";\n\n\t\t\tif (stage === PolicyDecisionStage.Before) {\n\t\t\t\tawait this._logging.log({\n\t\t\t\t\tlevel: \"info\",\n\t\t\t\t\tsource: LoggingPolicyExecutionAction.CLASS_NAME,\n\t\t\t\t\tts: Date.now(),\n\t\t\t\t\tmessage: \"policyActionExecutedBefore\",\n\t\t\t\t\tdata: {\n\t\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\t\tdata: logData,\n\t\t\t\t\t\tpolicy: logPolicy,\n\t\t\t\t\t\tdecisions: logDecisions,\n\t\t\t\t\t\taction,\n\t\t\t\t\t\tstage\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t} else {\n\t\t\t\tawait this._logging.log({\n\t\t\t\t\tlevel: \"info\",\n\t\t\t\t\tsource: LoggingPolicyExecutionAction.CLASS_NAME,\n\t\t\t\t\tts: Date.now(),\n\t\t\t\t\tmessage: \"policyActionExecutedAfter\",\n\t\t\t\t\tdata: {\n\t\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\t\tdata: logData,\n\t\t\t\t\t\tpolicy: logPolicy,\n\t\t\t\t\t\tdecisions: logDecisions,\n\t\t\t\t\t\taction,\n\t\t\t\t\t\tstage\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n}\n"]}
package/dist/es/policyInformationSources/identityPolicyInformationSource.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"identityPolicyInformationSource.js","sourceRoot":"","sources":["../../../src/policyInformationSources/identityPolicyInformationSource.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAA0B,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAI9E,OAAO,EAEN,gBAAgB,EAChB,2BAA2B,EAC3B,MAAM,oCAAoC,CAAC;AAK5C;;GAEG;AACH,MAAM,OAAO,+BAA+B;IAC3C;;OAEG;IACI,MAAM,CAAU,UAAU,qCAAqD;IAEtF;;;OAGG;IACc,QAAQ,CAAqB;IAE9C;;;OAGG;IACc,iBAAiB,CAA6B;IAE/D;;;OAGG;IACH,YAAY,OAA4D;QACvE,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAC3C,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAC1C,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,gBAAgB,CAAC,GAAG,CAC5C,OAAO,EAAE,6BAA6B,IAAI,mBAAmB,CAC7D,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,+BAA+B,CAAC,UAAU,CAAC;IACnD,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,QAAQ,CACpB,MAA4C,EAC5C,UAAuC,EACvC,IAAQ,EACR,MAAgC;QAEhC,MAAM,CAAC,UAAU,CAChB,+BAA+B,CAAC,UAAU,gBAE1C,UAAU,EACV,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAC1C,CAAC;QAEF,MAAM,WAAW,GAAwC,EAAE,CAAC;QAE5D,IAAI,EAAE,CAAC,MAAM,CAA2B,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,EAAE,CAAC;YAEf,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;YAED,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACJ,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;wBACxB,KAAK,EAAE,MAAM;wBACb,MAAM,EAAE,+BAA+B,CAAC,UAAU;wBAClD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;wBACd,OAAO,EAAE,oBAAoB;wBAC7B,IAAI,EAAE;4BACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;4BAC/C,EAAE;yBACF;qBACD,CAAC,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;oBAC/D,WAAW,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;wBACxB,KAAK,EAAE,OAAO;wBACd,MAAM,EAAE,+BAA+B,CAAC,UAAU;wBAClD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;wBACd,OAAO,EAAE,yBAAyB;wBAClC,IAAI,EAAE;4BACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;4BAC/C,EAAE;yBACF;wBACD,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;qBAC/B,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,WAAW,CAAC;IACpB,CAAC","sourcesContent":["// Copyright 2025 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { BaseError, ComponentFactory, Guards, Is } from \"@twin.org/core\";\nimport { type IJsonLdNodeObject, JsonLdHelper } from \"@twin.org/data-json-ld\";\nimport type { IIdentityResolverComponent } from \"@twin.org/identity-models\";\nimport type { ILoggingComponent } from \"@twin.org/logging-models\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\ttype IPolicyInformationSource,\n\tOdrlPolicyHelper,\n\tPolicyInformationAccessMode\n} from \"@twin.org/rights-management-models\";\nimport type { IDataspaceProtocolPolicy } from \"@twin.org/standards-dataspace-protocol\";\nimport type { OdrlActionType } from \"@twin.org/standards-w3c-odrl\";\nimport type { IIdentityPolicyInformationSourceConstructorOptions } from \"../models/IIdentityPolicyInformationSourceConstructorOptions.js\";\n\n/**\n * Policy information source which retrieves the identity information.\n */\nexport class IdentityPolicyInformationSource implements IPolicyInformationSource {\n\t/**\n\t * The class name of the Identity Policy Information Source.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<IdentityPolicyInformationSource>();\n\n\t/**\n\t * The logging component.\n\t * @internal\n\t */\n\tprivate readonly _logging?: ILoggingComponent;\n\n\t/**\n\t * The identity resolver component.\n\t * @internal\n\t */\n\tprivate readonly _identityResolver: IIdentityResolverComponent;\n\n\t/**\n\t * Create a new instance of IdentityPolicyInformationSource.\n\t * @param options The options for the logging policy source.\n\t */\n\tconstructor(options?: IIdentityPolicyInformationSourceConstructorOptions) {\n\t\tthis._logging = ComponentFactory.getIfExists<ILoggingComponent>(\n\t\t\toptions?.loggingComponentType ?? \"logging\"\n\t\t);\n\t\tthis._identityResolver = ComponentFactory.get(\n\t\t\toptions?.identityResolverComponentType ?? \"identity-resolver\"\n\t\t);\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn IdentityPolicyInformationSource.CLASS_NAME;\n\t}\n\n\t/**\n\t * Retrieve information from the sources.\n\t * @param policy The policy to retrieve information for if available.\n\t * @param accessMode The access mode to use for the retrieval.\n\t * @param data The data to process.\n\t * @param action The action that was evaluated.\n\t * @returns The objects containing relevant information or undefined if nothing relevant is found.\n\t */\n\tpublic async retrieve<D = unknown>(\n\t\tpolicy: IDataspaceProtocolPolicy | undefined,\n\t\taccessMode: PolicyInformationAccessMode,\n\t\tdata?: D,\n\t\taction?: OdrlActionType | string\n\t): Promise<{ [id: string]: IJsonLdNodeObject } | undefined> {\n\t\tGuards.arrayOneOf(\n\t\t\tIdentityPolicyInformationSource.CLASS_NAME,\n\t\t\tnameof(accessMode),\n\t\t\taccessMode,\n\t\t\tObject.values(PolicyInformationAccessMode)\n\t\t);\n\n\t\tconst information: { [id: string]: IJsonLdNodeObject } = {};\n\n\t\tif (Is.object<IDataspaceProtocolPolicy>(policy)) {\n\t\t\tconst ids = [];\n\n\t\t\tif (Is.stringValue(policy.assignee)) {\n\t\t\t\tids.push(policy.assignee);\n\t\t\t}\n\t\t\tif (Is.stringValue(policy.assigner)) {\n\t\t\t\tids.push(policy.assigner);\n\t\t\t}\n\n\t\t\tfor (const id of ids) {\n\t\t\t\ttry {\n\t\t\t\t\tawait this._logging?.log({\n\t\t\t\t\t\tlevel: \"info\",\n\t\t\t\t\t\tsource: IdentityPolicyInformationSource.CLASS_NAME,\n\t\t\t\t\t\tts: Date.now(),\n\t\t\t\t\t\tmessage: \"identityRetrieving\",\n\t\t\t\t\t\tdata: {\n\t\t\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\t\t\tid\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t\tconst idDoc = await this._identityResolver.identityResolve(id);\n\t\t\t\t\tinformation[id] = JsonLdHelper.toNodeObject(idDoc);\n\t\t\t\t} catch (err) {\n\t\t\t\t\tawait this._logging?.log({\n\t\t\t\t\t\tlevel: \"error\",\n\t\t\t\t\t\tsource: IdentityPolicyInformationSource.CLASS_NAME,\n\t\t\t\t\t\tts: Date.now(),\n\t\t\t\t\t\tmessage: \"identityRetrievalFailed\",\n\t\t\t\t\t\tdata: {\n\t\t\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\t\t\tid\n\t\t\t\t\t\t},\n\t\t\t\t\t\terror: BaseError.fromError(err)\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn information;\n\t}\n}\n"]}
1
+ {"version":3,"file":"identityPolicyInformationSource.js","sourceRoot":"","sources":["../../../src/policyInformationSources/identityPolicyInformationSource.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAA0B,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAI9E,OAAO,EAGN,gBAAgB,EAChB,2BAA2B,EAC3B,MAAM,oCAAoC,CAAC;AAI5C;;GAEG;AACH,MAAM,OAAO,+BAA+B;IAC3C;;OAEG;IACI,MAAM,CAAU,UAAU,qCAAqD;IAEtF;;;OAGG;IACc,QAAQ,CAAqB;IAE9C;;;OAGG;IACc,iBAAiB,CAA6B;IAE/D;;;OAGG;IACH,YAAY,OAA4D;QACvE,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAC3C,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAC1C,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,gBAAgB,CAAC,GAAG,CAC5C,OAAO,EAAE,6BAA6B,IAAI,mBAAmB,CAC7D,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,+BAA+B,CAAC,UAAU,CAAC;IACnD,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,QAAQ,CACpB,MAA2C,EAC3C,UAAuC,EACvC,IAAQ,EACR,MAAgC;QAEhC,MAAM,CAAC,UAAU,CAChB,+BAA+B,CAAC,UAAU,gBAE1C,UAAU,EACV,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAC1C,CAAC;QAEF,MAAM,WAAW,GAAwC,EAAE,CAAC;QAE5D,IAAI,EAAE,CAAC,MAAM,CAA0B,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,EAAE,CAAC;YAEf,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;YAED,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACJ,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;wBACxB,KAAK,EAAE,MAAM;wBACb,MAAM,EAAE,+BAA+B,CAAC,UAAU;wBAClD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;wBACd,OAAO,EAAE,oBAAoB;wBAC7B,IAAI,EAAE;4BACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;4BAC/C,EAAE;yBACF;qBACD,CAAC,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;oBAC/D,WAAW,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;wBACxB,KAAK,EAAE,OAAO;wBACd,MAAM,EAAE,+BAA+B,CAAC,UAAU;wBAClD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;wBACd,OAAO,EAAE,yBAAyB;wBAClC,IAAI,EAAE;4BACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;4BAC/C,EAAE;yBACF;wBACD,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;qBAC/B,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,WAAW,CAAC;IACpB,CAAC","sourcesContent":["// Copyright 2025 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { BaseError, ComponentFactory, Guards, Is } from \"@twin.org/core\";\nimport { type IJsonLdNodeObject, JsonLdHelper } from \"@twin.org/data-json-ld\";\nimport type { IIdentityResolverComponent } from \"@twin.org/identity-models\";\nimport type { ILoggingComponent } from \"@twin.org/logging-models\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\ttype IPolicyInformationSource,\n\ttype IRightsManagementPolicy,\n\tOdrlPolicyHelper,\n\tPolicyInformationAccessMode\n} from \"@twin.org/rights-management-models\";\nimport type { OdrlActionType } from \"@twin.org/standards-w3c-odrl\";\nimport type { IIdentityPolicyInformationSourceConstructorOptions } from \"../models/IIdentityPolicyInformationSourceConstructorOptions.js\";\n\n/**\n * Policy information source which retrieves the identity information.\n */\nexport class IdentityPolicyInformationSource implements IPolicyInformationSource {\n\t/**\n\t * The class name of the Identity Policy Information Source.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<IdentityPolicyInformationSource>();\n\n\t/**\n\t * The logging component.\n\t * @internal\n\t */\n\tprivate readonly _logging?: ILoggingComponent;\n\n\t/**\n\t * The identity resolver component.\n\t * @internal\n\t */\n\tprivate readonly _identityResolver: IIdentityResolverComponent;\n\n\t/**\n\t * Create a new instance of IdentityPolicyInformationSource.\n\t * @param options The options for the logging policy source.\n\t */\n\tconstructor(options?: IIdentityPolicyInformationSourceConstructorOptions) {\n\t\tthis._logging = ComponentFactory.getIfExists<ILoggingComponent>(\n\t\t\toptions?.loggingComponentType ?? \"logging\"\n\t\t);\n\t\tthis._identityResolver = ComponentFactory.get(\n\t\t\toptions?.identityResolverComponentType ?? \"identity-resolver\"\n\t\t);\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn IdentityPolicyInformationSource.CLASS_NAME;\n\t}\n\n\t/**\n\t * Retrieve information from the sources.\n\t * @param policy The policy to retrieve information for if available.\n\t * @param accessMode The access mode to use for the retrieval.\n\t * @param data The data to process.\n\t * @param action The action that was evaluated.\n\t * @returns The objects containing relevant information or undefined if nothing relevant is found.\n\t */\n\tpublic async retrieve<D = unknown>(\n\t\tpolicy: IRightsManagementPolicy | undefined,\n\t\taccessMode: PolicyInformationAccessMode,\n\t\tdata?: D,\n\t\taction?: OdrlActionType | string\n\t): Promise<{ [id: string]: IJsonLdNodeObject } | undefined> {\n\t\tGuards.arrayOneOf(\n\t\t\tIdentityPolicyInformationSource.CLASS_NAME,\n\t\t\tnameof(accessMode),\n\t\t\taccessMode,\n\t\t\tObject.values(PolicyInformationAccessMode)\n\t\t);\n\n\t\tconst information: { [id: string]: IJsonLdNodeObject } = {};\n\n\t\tif (Is.object<IRightsManagementPolicy>(policy)) {\n\t\t\tconst ids = [];\n\n\t\t\tif (Is.stringValue(policy.assignee)) {\n\t\t\t\tids.push(policy.assignee);\n\t\t\t}\n\t\t\tif (Is.stringValue(policy.assigner)) {\n\t\t\t\tids.push(policy.assigner);\n\t\t\t}\n\n\t\t\tfor (const id of ids) {\n\t\t\t\ttry {\n\t\t\t\t\tawait this._logging?.log({\n\t\t\t\t\t\tlevel: \"info\",\n\t\t\t\t\t\tsource: IdentityPolicyInformationSource.CLASS_NAME,\n\t\t\t\t\t\tts: Date.now(),\n\t\t\t\t\t\tmessage: \"identityRetrieving\",\n\t\t\t\t\t\tdata: {\n\t\t\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\t\t\tid\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t\tconst idDoc = await this._identityResolver.identityResolve(id);\n\t\t\t\t\tinformation[id] = JsonLdHelper.toNodeObject(idDoc);\n\t\t\t\t} catch (err) {\n\t\t\t\t\tawait this._logging?.log({\n\t\t\t\t\t\tlevel: \"error\",\n\t\t\t\t\t\tsource: IdentityPolicyInformationSource.CLASS_NAME,\n\t\t\t\t\t\tts: Date.now(),\n\t\t\t\t\t\tmessage: \"identityRetrievalFailed\",\n\t\t\t\t\t\tdata: {\n\t\t\t\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\t\t\t\tid\n\t\t\t\t\t\t},\n\t\t\t\t\t\terror: BaseError.fromError(err)\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn information;\n\t}\n}\n"]}
package/dist/es/policyInformationSources/staticPolicyInformationSource.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"staticPolicyInformationSource.js","sourceRoot":"","sources":["../../../src/policyInformationSources/staticPolicyInformationSource.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAI9D,OAAO,EACN,gBAAgB,EAChB,2BAA2B,EAE3B,MAAM,oCAAoC,CAAC;AAM5C;;GAEG;AACH,MAAM,OAAO,6BAA6B;IACzC;;OAEG;IACI,MAAM,CAAU,UAAU,mCAAmD;IAEpF;;;OAGG;IACc,QAAQ,CAAqB;IAE9C;;;OAGG;IACc,YAAY,CAAmC;IAEhE;;;OAGG;IACH,YAAY,OAA0D;QACrE,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAC3C,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAC1C,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC;IACxD,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,6BAA6B,CAAC,UAAU,CAAC;IACjD,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,QAAQ,CACpB,MAA4C,EAC5C,UAAuC,EACvC,IAAQ,EACR,MAAgC;QAEhC,MAAM,CAAC,UAAU,CAChB,6BAA6B,CAAC,UAAU,gBAExC,UAAU,EACV,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAC1C,CAAC;QAEF,IAAI,WAAW,GAAwC,EAAE,CAAC;QAE1D,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;YACxB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,6BAA6B,CAAC,UAAU;YAChD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE;gBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC/C,UAAU;aACV;SACD,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtC,IACC,IAAI,CAAC,UAAU,KAAK,UAAU;gBAC9B,UAAU,KAAK,2BAA2B,CAAC,GAAG;gBAC9C,IAAI,CAAC,UAAU,KAAK,2BAA2B,CAAC,GAAG,EAClD,CAAC;gBACF,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;gBACzC,IACC,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;oBAC7B,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC3E,CAAC;oBACF,WAAW,GAAG;wBACb,GAAG,WAAW;wBACd,GAAG,IAAI,CAAC,OAAO;qBACf,CAAC;gBACH,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;YACxB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,6BAA6B,CAAC,UAAU;YAChD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,OAAO,EAAE,iBAAiB;YAC1B,IAAI,EAAE;gBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC/C,UAAU;gBACV,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM;aAC1C;SACD,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,CAAC;IAED;;;OAGG;IACI,cAAc,CAAC,IAAoC;QACzD,MAAM,CAAC,UAAU,CAChB,6BAA6B,CAAC,UAAU,qBAExC,IAAI,CAAC,UAAU,EACf,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAC1C,CAAC;QACF,MAAM,CAAC,WAAW,CACjB,6BAA6B,CAAC,UAAU,kBAExC,IAAI,CAAC,OAAO,CACZ,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC","sourcesContent":["// Copyright 2025 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { ComponentFactory, Guards, Is } from \"@twin.org/core\";\nimport type { IJsonLdNodeObject } from \"@twin.org/data-json-ld\";\nimport type { ILoggingComponent } from \"@twin.org/logging-models\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\tOdrlPolicyHelper,\n\tPolicyInformationAccessMode,\n\ttype IPolicyInformationSource\n} from \"@twin.org/rights-management-models\";\nimport type { IDataspaceProtocolPolicy } from \"@twin.org/standards-dataspace-protocol\";\nimport type { OdrlActionType } from \"@twin.org/standards-w3c-odrl\";\nimport type { IStaticPolicyInformationSource } from \"../models/IStaticPolicyInformationSource.js\";\nimport type { IStaticPolicyInformationSourceConstructorOptions } from \"../models/IStaticPolicyInformationSourceConstructorOptions.js\";\n\n/**\n * Policy information source which retrieves static information.\n */\nexport class StaticPolicyInformationSource implements IPolicyInformationSource {\n\t/**\n\t * The class name of the Static Policy Information Source.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<StaticPolicyInformationSource>();\n\n\t/**\n\t * The logging component.\n\t * @internal\n\t */\n\tprivate readonly _logging?: ILoggingComponent;\n\n\t/**\n\t * The information sources.\n\t * @internal\n\t */\n\tprivate readonly _information: IStaticPolicyInformationSource[];\n\n\t/**\n\t * Create a new instance of StaticPolicyInformationSource.\n\t * @param options The options for the logging policy source.\n\t */\n\tconstructor(options?: IStaticPolicyInformationSourceConstructorOptions) {\n\t\tthis._logging = ComponentFactory.getIfExists<ILoggingComponent>(\n\t\t\toptions?.loggingComponentType ?? \"logging\"\n\t\t);\n\t\tthis._information = options?.config?.information ?? [];\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn StaticPolicyInformationSource.CLASS_NAME;\n\t}\n\n\t/**\n\t * Retrieve information from the sources.\n\t * @param policy The policy to retrieve information for if available.\n\t * @param accessMode The access mode to use for the retrieval.\n\t * @param data The data to process.\n\t * @param action The action to get any additional information for.\n\t * @returns The objects containing relevant information or undefined if nothing relevant is found.\n\t */\n\tpublic async retrieve<D = unknown>(\n\t\tpolicy: IDataspaceProtocolPolicy | undefined,\n\t\taccessMode: PolicyInformationAccessMode,\n\t\tdata?: D,\n\t\taction?: OdrlActionType | string\n\t): Promise<{ [id: string]: IJsonLdNodeObject } | undefined> {\n\t\tGuards.arrayOneOf(\n\t\t\tStaticPolicyInformationSource.CLASS_NAME,\n\t\t\tnameof(accessMode),\n\t\t\taccessMode,\n\t\t\tObject.values(PolicyInformationAccessMode)\n\t\t);\n\n\t\tlet information: { [id: string]: IJsonLdNodeObject } = {};\n\n\t\tawait this._logging?.log({\n\t\t\tlevel: \"info\",\n\t\t\tsource: StaticPolicyInformationSource.CLASS_NAME,\n\t\t\tts: Date.now(),\n\t\t\tmessage: \"staticRetrieving\",\n\t\t\tdata: {\n\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\taccessMode\n\t\t\t}\n\t\t});\n\n\t\tfor (const info of this._information) {\n\t\t\tif (\n\t\t\t\tinfo.accessMode === accessMode ||\n\t\t\t\taccessMode === PolicyInformationAccessMode.Any ||\n\t\t\t\tinfo.accessMode === PolicyInformationAccessMode.Any\n\t\t\t) {\n\t\t\t\tconst matchLocators = info.matchLocators;\n\t\t\t\tif (\n\t\t\t\t\t!Is.arrayValue(matchLocators) ||\n\t\t\t\t\tmatchLocators.some(locator => OdrlPolicyHelper.matchPolicy(policy, locator))\n\t\t\t\t) {\n\t\t\t\t\tinformation = {\n\t\t\t\t\t\t...information,\n\t\t\t\t\t\t...info.objects\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tawait this._logging?.log({\n\t\t\tlevel: \"info\",\n\t\t\tsource: StaticPolicyInformationSource.CLASS_NAME,\n\t\t\tts: Date.now(),\n\t\t\tmessage: \"staticRetrieved\",\n\t\t\tdata: {\n\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\taccessMode,\n\t\t\t\titemCount: Object.keys(information).length\n\t\t\t}\n\t\t});\n\n\t\treturn Object.keys(information).length > 0 ? information : undefined;\n\t}\n\n\t/**\n\t * Add static policy information.\n\t * @param info The static policy information to add.\n\t */\n\tpublic addInformation(info: IStaticPolicyInformationSource): void {\n\t\tGuards.arrayOneOf<string>(\n\t\t\tStaticPolicyInformationSource.CLASS_NAME,\n\t\t\tnameof(info.accessMode),\n\t\t\tinfo.accessMode,\n\t\t\tObject.values(PolicyInformationAccessMode)\n\t\t);\n\t\tGuards.objectValue<{ [id: string]: IJsonLdNodeObject }>(\n\t\t\tStaticPolicyInformationSource.CLASS_NAME,\n\t\t\tnameof(info.objects),\n\t\t\tinfo.objects\n\t\t);\n\t\tthis._information.push(info);\n\t}\n}\n"]}
1
+ {"version":3,"file":"staticPolicyInformationSource.js","sourceRoot":"","sources":["../../../src/policyInformationSources/staticPolicyInformationSource.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAI9D,OAAO,EACN,gBAAgB,EAChB,2BAA2B,EAG3B,MAAM,oCAAoC,CAAC;AAK5C;;GAEG;AACH,MAAM,OAAO,6BAA6B;IACzC;;OAEG;IACI,MAAM,CAAU,UAAU,mCAAmD;IAEpF;;;OAGG;IACc,QAAQ,CAAqB;IAE9C;;;OAGG;IACc,YAAY,CAAmC;IAEhE;;;OAGG;IACH,YAAY,OAA0D;QACrE,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAC3C,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAC1C,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC;IACxD,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,6BAA6B,CAAC,UAAU,CAAC;IACjD,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,QAAQ,CACpB,MAA2C,EAC3C,UAAuC,EACvC,IAAQ,EACR,MAAgC;QAEhC,MAAM,CAAC,UAAU,CAChB,6BAA6B,CAAC,UAAU,gBAExC,UAAU,EACV,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAC1C,CAAC;QAEF,IAAI,WAAW,GAAwC,EAAE,CAAC;QAE1D,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;YACxB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,6BAA6B,CAAC,UAAU;YAChD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE;gBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC/C,UAAU;aACV;SACD,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtC,IACC,IAAI,CAAC,UAAU,KAAK,UAAU;gBAC9B,UAAU,KAAK,2BAA2B,CAAC,GAAG;gBAC9C,IAAI,CAAC,UAAU,KAAK,2BAA2B,CAAC,GAAG,EAClD,CAAC;gBACF,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;gBACzC,IACC,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;oBAC7B,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC3E,CAAC;oBACF,WAAW,GAAG;wBACb,GAAG,WAAW;wBACd,GAAG,IAAI,CAAC,OAAO;qBACf,CAAC;gBACH,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;YACxB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,6BAA6B,CAAC,UAAU;YAChD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,OAAO,EAAE,iBAAiB;YAC1B,IAAI,EAAE;gBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC/C,UAAU;gBACV,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM;aAC1C;SACD,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,CAAC;IAED;;;OAGG;IACI,cAAc,CAAC,IAAoC;QACzD,MAAM,CAAC,UAAU,CAChB,6BAA6B,CAAC,UAAU,qBAExC,IAAI,CAAC,UAAU,EACf,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAC1C,CAAC;QACF,MAAM,CAAC,WAAW,CACjB,6BAA6B,CAAC,UAAU,kBAExC,IAAI,CAAC,OAAO,CACZ,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC","sourcesContent":["// Copyright 2025 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { ComponentFactory, Guards, Is } from \"@twin.org/core\";\nimport type { IJsonLdNodeObject } from \"@twin.org/data-json-ld\";\nimport type { ILoggingComponent } from \"@twin.org/logging-models\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\tOdrlPolicyHelper,\n\tPolicyInformationAccessMode,\n\ttype IPolicyInformationSource,\n\ttype IRightsManagementPolicy\n} from \"@twin.org/rights-management-models\";\nimport type { OdrlActionType } from \"@twin.org/standards-w3c-odrl\";\nimport type { IStaticPolicyInformationSource } from \"../models/IStaticPolicyInformationSource.js\";\nimport type { IStaticPolicyInformationSourceConstructorOptions } from \"../models/IStaticPolicyInformationSourceConstructorOptions.js\";\n\n/**\n * Policy information source which retrieves static information.\n */\nexport class StaticPolicyInformationSource implements IPolicyInformationSource {\n\t/**\n\t * The class name of the Static Policy Information Source.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<StaticPolicyInformationSource>();\n\n\t/**\n\t * The logging component.\n\t * @internal\n\t */\n\tprivate readonly _logging?: ILoggingComponent;\n\n\t/**\n\t * The information sources.\n\t * @internal\n\t */\n\tprivate readonly _information: IStaticPolicyInformationSource[];\n\n\t/**\n\t * Create a new instance of StaticPolicyInformationSource.\n\t * @param options The options for the logging policy source.\n\t */\n\tconstructor(options?: IStaticPolicyInformationSourceConstructorOptions) {\n\t\tthis._logging = ComponentFactory.getIfExists<ILoggingComponent>(\n\t\t\toptions?.loggingComponentType ?? \"logging\"\n\t\t);\n\t\tthis._information = options?.config?.information ?? [];\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn StaticPolicyInformationSource.CLASS_NAME;\n\t}\n\n\t/**\n\t * Retrieve information from the sources.\n\t * @param policy The policy to retrieve information for if available.\n\t * @param accessMode The access mode to use for the retrieval.\n\t * @param data The data to process.\n\t * @param action The action to get any additional information for.\n\t * @returns The objects containing relevant information or undefined if nothing relevant is found.\n\t */\n\tpublic async retrieve<D = unknown>(\n\t\tpolicy: IRightsManagementPolicy | undefined,\n\t\taccessMode: PolicyInformationAccessMode,\n\t\tdata?: D,\n\t\taction?: OdrlActionType | string\n\t): Promise<{ [id: string]: IJsonLdNodeObject } | undefined> {\n\t\tGuards.arrayOneOf(\n\t\t\tStaticPolicyInformationSource.CLASS_NAME,\n\t\t\tnameof(accessMode),\n\t\t\taccessMode,\n\t\t\tObject.values(PolicyInformationAccessMode)\n\t\t);\n\n\t\tlet information: { [id: string]: IJsonLdNodeObject } = {};\n\n\t\tawait this._logging?.log({\n\t\t\tlevel: \"info\",\n\t\t\tsource: StaticPolicyInformationSource.CLASS_NAME,\n\t\t\tts: Date.now(),\n\t\t\tmessage: \"staticRetrieving\",\n\t\t\tdata: {\n\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\taccessMode\n\t\t\t}\n\t\t});\n\n\t\tfor (const info of this._information) {\n\t\t\tif (\n\t\t\t\tinfo.accessMode === accessMode ||\n\t\t\t\taccessMode === PolicyInformationAccessMode.Any ||\n\t\t\t\tinfo.accessMode === PolicyInformationAccessMode.Any\n\t\t\t) {\n\t\t\t\tconst matchLocators = info.matchLocators;\n\t\t\t\tif (\n\t\t\t\t\t!Is.arrayValue(matchLocators) ||\n\t\t\t\t\tmatchLocators.some(locator => OdrlPolicyHelper.matchPolicy(policy, locator))\n\t\t\t\t) {\n\t\t\t\t\tinformation = {\n\t\t\t\t\t\t...information,\n\t\t\t\t\t\t...info.objects\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tawait this._logging?.log({\n\t\t\tlevel: \"info\",\n\t\t\tsource: StaticPolicyInformationSource.CLASS_NAME,\n\t\t\tts: Date.now(),\n\t\t\tmessage: \"staticRetrieved\",\n\t\t\tdata: {\n\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\",\n\t\t\t\taccessMode,\n\t\t\t\titemCount: Object.keys(information).length\n\t\t\t}\n\t\t});\n\n\t\treturn Object.keys(information).length > 0 ? information : undefined;\n\t}\n\n\t/**\n\t * Add static policy information.\n\t * @param info The static policy information to add.\n\t */\n\tpublic addInformation(info: IStaticPolicyInformationSource): void {\n\t\tGuards.arrayOneOf<string>(\n\t\t\tStaticPolicyInformationSource.CLASS_NAME,\n\t\t\tnameof(info.accessMode),\n\t\t\tinfo.accessMode,\n\t\t\tObject.values(PolicyInformationAccessMode)\n\t\t);\n\t\tGuards.objectValue<{ [id: string]: IJsonLdNodeObject }>(\n\t\t\tStaticPolicyInformationSource.CLASS_NAME,\n\t\t\tnameof(info.objects),\n\t\t\tinfo.objects\n\t\t);\n\t\tthis._information.push(info);\n\t}\n}\n"]}
package/dist/es/policyObligationEnforcers/passThroughPolicyObligationEnforcer.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"passThroughPolicyObligationEnforcer.js","sourceRoot":"","sources":["../../../src/policyObligationEnforcers/passThroughPolicyObligationEnforcer.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAI1D,OAAO,EACN,gBAAgB,EAEhB,MAAM,oCAAoC,CAAC;AAK5C;;GAEG;AACH,MAAM,OAAO,mCAAmC;IAC/C;;OAEG;IACI,MAAM,CAAU,UAAU,yCAAyD;IAE1F;;;OAGG;IACc,QAAQ,CAAoB;IAE7C;;;OAGG;IACH,YAAY,OAAgE;QAC3E,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CACnC,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAC1C,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,mCAAmC,CAAC,UAAU,CAAC;IACvD,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,OAAO,CACnB,MAAgC,EAChC,IAAe,EACf,WAAiD,EACjD,IAAQ,EACR,MAAgC;QAEhC,MAAM,CAAC,MAAM,CACZ,mCAAmC,CAAC,UAAU,YAE9C,MAAM,CACN,CAAC;QACF,MAAM,CAAC,MAAM,CAAY,mCAAmC,CAAC,UAAU,UAAgB,IAAI,CAAC,CAAC;QAE7F,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACvB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,mCAAmC,CAAC,UAAU;YACtD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE;gBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;aAC/C;SACD,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACb,CAAC","sourcesContent":["// Copyright 2025 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { ComponentFactory, Guards } from \"@twin.org/core\";\nimport type { IJsonLdNodeObject } from \"@twin.org/data-json-ld\";\nimport type { ILoggingComponent } from \"@twin.org/logging-models\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\tOdrlPolicyHelper,\n\ttype IPolicyObligationEnforcer\n} from \"@twin.org/rights-management-models\";\nimport type { IDataspaceProtocolPolicy } from \"@twin.org/standards-dataspace-protocol\";\nimport type { OdrlActionType, IOdrlDuty } from \"@twin.org/standards-w3c-odrl\";\nimport type { IPassThroughPolicyObligationEnforcerConstructorOptions } from \"../models/IPassThroughPolicyObligationEnforcerConstructorOptions.js\";\n\n/**\n * Pass Through Policy Obligation Enforcer.\n */\nexport class PassThroughPolicyObligationEnforcer implements IPolicyObligationEnforcer {\n\t/**\n\t * The class name of the Pass Through Policy Obligation Enforcer.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<PassThroughPolicyObligationEnforcer>();\n\n\t/**\n\t * The logging component.\n\t * @internal\n\t */\n\tprivate readonly _logging: ILoggingComponent;\n\n\t/**\n\t * Create a new instance of Pass Through Policy Obligation Enforcer.\n\t * @param options The options for the pass through policy obligation enforcer.\n\t */\n\tconstructor(options?: IPassThroughPolicyObligationEnforcerConstructorOptions) {\n\t\tthis._logging = ComponentFactory.get<ILoggingComponent>(\n\t\t\toptions?.loggingComponentType ?? \"logging\"\n\t\t);\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn PassThroughPolicyObligationEnforcer.CLASS_NAME;\n\t}\n\n\t/**\n\t * Enforces obligations regarding policy access to data.\n\t * @param policy The policy to evaluate.\n\t * @param duty The duty to enforce.\n\t * @param information Information provided by the requester to determine if a policy can be created.\n\t * @param data The data to make a decision on.\n\t * @param action Optional action to make a decision on, if not provided, the enforcer will evaluate all actions in the duty.\n\t * @returns Whether the obligations were successfully enforced.\n\t */\n\tpublic async enforce<D = unknown>(\n\t\tpolicy: IDataspaceProtocolPolicy,\n\t\tduty: IOdrlDuty,\n\t\tinformation?: { [id: string]: IJsonLdNodeObject },\n\t\tdata?: D,\n\t\taction?: OdrlActionType | string\n\t): Promise<boolean> {\n\t\tGuards.object<IDataspaceProtocolPolicy>(\n\t\t\tPassThroughPolicyObligationEnforcer.CLASS_NAME,\n\t\t\tnameof(policy),\n\t\t\tpolicy\n\t\t);\n\t\tGuards.object<IOdrlDuty>(PassThroughPolicyObligationEnforcer.CLASS_NAME, nameof(duty), duty);\n\n\t\tawait this._logging.log({\n\t\t\tlevel: \"info\",\n\t\t\tsource: PassThroughPolicyObligationEnforcer.CLASS_NAME,\n\t\t\tts: Date.now(),\n\t\t\tmessage: \"enforcingDuty\",\n\t\t\tdata: {\n\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\"\n\t\t\t}\n\t\t});\n\n\t\treturn true;\n\t}\n}\n"]}
1
+ {"version":3,"file":"passThroughPolicyObligationEnforcer.js","sourceRoot":"","sources":["../../../src/policyObligationEnforcers/passThroughPolicyObligationEnforcer.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAI1D,OAAO,EACN,gBAAgB,EAGhB,MAAM,oCAAoC,CAAC;AAI5C;;GAEG;AACH,MAAM,OAAO,mCAAmC;IAC/C;;OAEG;IACI,MAAM,CAAU,UAAU,yCAAyD;IAE1F;;;OAGG;IACc,QAAQ,CAAoB;IAE7C;;;OAGG;IACH,YAAY,OAAgE;QAC3E,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CACnC,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAC1C,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,SAAS;QACf,OAAO,mCAAmC,CAAC,UAAU,CAAC;IACvD,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,OAAO,CACnB,MAA+B,EAC/B,IAAe,EACf,WAAiD,EACjD,IAAQ,EACR,MAAgC;QAEhC,MAAM,CAAC,MAAM,CACZ,mCAAmC,CAAC,UAAU,YAE9C,MAAM,CACN,CAAC;QACF,MAAM,CAAC,MAAM,CAAY,mCAAmC,CAAC,UAAU,UAAgB,IAAI,CAAC,CAAC;QAE7F,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACvB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,mCAAmC,CAAC,UAAU;YACtD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE;gBACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;aAC/C;SACD,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACb,CAAC","sourcesContent":["// Copyright 2025 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { ComponentFactory, Guards } from \"@twin.org/core\";\nimport type { IJsonLdNodeObject } from \"@twin.org/data-json-ld\";\nimport type { ILoggingComponent } from \"@twin.org/logging-models\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\tOdrlPolicyHelper,\n\ttype IPolicyObligationEnforcer,\n\ttype IRightsManagementPolicy\n} from \"@twin.org/rights-management-models\";\nimport type { OdrlActionType, IOdrlDuty } from \"@twin.org/standards-w3c-odrl\";\nimport type { IPassThroughPolicyObligationEnforcerConstructorOptions } from \"../models/IPassThroughPolicyObligationEnforcerConstructorOptions.js\";\n\n/**\n * Pass Through Policy Obligation Enforcer.\n */\nexport class PassThroughPolicyObligationEnforcer implements IPolicyObligationEnforcer {\n\t/**\n\t * The class name of the Pass Through Policy Obligation Enforcer.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<PassThroughPolicyObligationEnforcer>();\n\n\t/**\n\t * The logging component.\n\t * @internal\n\t */\n\tprivate readonly _logging: ILoggingComponent;\n\n\t/**\n\t * Create a new instance of Pass Through Policy Obligation Enforcer.\n\t * @param options The options for the pass through policy obligation enforcer.\n\t */\n\tconstructor(options?: IPassThroughPolicyObligationEnforcerConstructorOptions) {\n\t\tthis._logging = ComponentFactory.get<ILoggingComponent>(\n\t\t\toptions?.loggingComponentType ?? \"logging\"\n\t\t);\n\t}\n\n\t/**\n\t * Returns the class name of the component.\n\t * @returns The class name of the component.\n\t */\n\tpublic className(): string {\n\t\treturn PassThroughPolicyObligationEnforcer.CLASS_NAME;\n\t}\n\n\t/**\n\t * Enforces obligations regarding policy access to data.\n\t * @param policy The policy to evaluate.\n\t * @param duty The duty to enforce.\n\t * @param information Information provided by the requester to determine if a policy can be created.\n\t * @param data The data to make a decision on.\n\t * @param action Optional action to make a decision on, if not provided, the enforcer will evaluate all actions in the duty.\n\t * @returns Whether the obligations were successfully enforced.\n\t */\n\tpublic async enforce<D = unknown>(\n\t\tpolicy: IRightsManagementPolicy,\n\t\tduty: IOdrlDuty,\n\t\tinformation?: { [id: string]: IJsonLdNodeObject },\n\t\tdata?: D,\n\t\taction?: OdrlActionType | string\n\t): Promise<boolean> {\n\t\tGuards.object<IRightsManagementPolicy>(\n\t\t\tPassThroughPolicyObligationEnforcer.CLASS_NAME,\n\t\t\tnameof(policy),\n\t\t\tpolicy\n\t\t);\n\t\tGuards.object<IOdrlDuty>(PassThroughPolicyObligationEnforcer.CLASS_NAME, nameof(duty), duty);\n\n\t\tawait this._logging.log({\n\t\t\tlevel: \"info\",\n\t\t\tsource: PassThroughPolicyObligationEnforcer.CLASS_NAME,\n\t\t\tts: Date.now(),\n\t\t\tmessage: \"enforcingDuty\",\n\t\t\tdata: {\n\t\t\t\tpolicyId: OdrlPolicyHelper.getUid(policy) ?? \"\"\n\t\t\t}\n\t\t});\n\n\t\treturn true;\n\t}\n}\n"]}
package/dist/types/policyArbiters/defaultPolicyArbiter.d.ts CHANGED
@@ -11,6 +11,12 @@ export declare class DefaultPolicyArbiter implements IPolicyArbiter {
11
11
  * The class name of the Default Policy Arbiter.
12
12
  */
13
13
  static readonly CLASS_NAME: string;
14
+ /**
15
+ * ODRL profiles whose custom vocabulary this arbiter understands and supports.
16
+ * Any policy declaring a profile not in this set will be rejected.
17
+ * Add a new entry here when support for an additional profile is implemented.
18
+ */
19
+ static readonly SUPPORTED_PROFILES: ReadonlySet<string>;
14
20
  /**
15
21
  * Create a new instance of DefaultPolicyArbiter.
16
22
  * @param options The options for the default policy arbiter.
package/dist/types/policyExecutionActions/loggingPolicyExecutionAction.d.ts CHANGED
@@ -1,5 +1,4 @@
1
- import { type IPolicyDecision, type IPolicyExecutionAction, PolicyDecisionStage } from "@twin.org/rights-management-models";
2
- import type { IDataspaceProtocolPolicy } from "@twin.org/standards-dataspace-protocol";
1
+ import { type IPolicyDecision, type IPolicyExecutionAction, type IRightsManagementPolicy, PolicyDecisionStage } from "@twin.org/rights-management-models";
3
2
  import type { OdrlActionType } from "@twin.org/standards-w3c-odrl";
4
3
  import type { ILoggingPolicyExecutionActionConstructorOptions } from "../models/ILoggingPolicyExecutionActionConstructorOptions.js";
5
4
  /**
@@ -46,5 +45,5 @@ export declare class LoggingPolicyExecutionAction implements IPolicyExecutionAct
46
45
  * @param stage The stage of the policy decision.
47
46
  * @returns A promise that resolves when the action is complete.
48
47
  */
49
- execute<D = unknown>(policy: IDataspaceProtocolPolicy, decisions: IPolicyDecision[], data: D | undefined, action: OdrlActionType | string, stage: PolicyDecisionStage): Promise<void>;
48
+ execute<D = unknown>(policy: IRightsManagementPolicy, decisions: IPolicyDecision[], data: D | undefined, action: OdrlActionType | string, stage: PolicyDecisionStage): Promise<void>;
50
49
  }
package/dist/types/policyInformationSources/identityPolicyInformationSource.d.ts CHANGED
@@ -1,6 +1,5 @@
1
1
  import { type IJsonLdNodeObject } from "@twin.org/data-json-ld";
2
- import { type IPolicyInformationSource, PolicyInformationAccessMode } from "@twin.org/rights-management-models";
3
- import type { IDataspaceProtocolPolicy } from "@twin.org/standards-dataspace-protocol";
2
+ import { type IPolicyInformationSource, type IRightsManagementPolicy, PolicyInformationAccessMode } from "@twin.org/rights-management-models";
4
3
  import type { OdrlActionType } from "@twin.org/standards-w3c-odrl";
5
4
  import type { IIdentityPolicyInformationSourceConstructorOptions } from "../models/IIdentityPolicyInformationSourceConstructorOptions.js";
6
5
  /**
@@ -29,7 +28,7 @@ export declare class IdentityPolicyInformationSource implements IPolicyInformati
29
28
  * @param action The action that was evaluated.
30
29
  * @returns The objects containing relevant information or undefined if nothing relevant is found.
31
30
  */
32
- retrieve<D = unknown>(policy: IDataspaceProtocolPolicy | undefined, accessMode: PolicyInformationAccessMode, data?: D, action?: OdrlActionType | string): Promise<{
31
+ retrieve<D = unknown>(policy: IRightsManagementPolicy | undefined, accessMode: PolicyInformationAccessMode, data?: D, action?: OdrlActionType | string): Promise<{
33
32
  [id: string]: IJsonLdNodeObject;
34
33
  } | undefined>;
35
34
  }
package/dist/types/policyInformationSources/staticPolicyInformationSource.d.ts CHANGED
@@ -1,6 +1,5 @@
1
1
  import type { IJsonLdNodeObject } from "@twin.org/data-json-ld";
2
- import { PolicyInformationAccessMode, type IPolicyInformationSource } from "@twin.org/rights-management-models";
3
- import type { IDataspaceProtocolPolicy } from "@twin.org/standards-dataspace-protocol";
2
+ import { PolicyInformationAccessMode, type IPolicyInformationSource, type IRightsManagementPolicy } from "@twin.org/rights-management-models";
4
3
  import type { OdrlActionType } from "@twin.org/standards-w3c-odrl";
5
4
  import type { IStaticPolicyInformationSource } from "../models/IStaticPolicyInformationSource.js";
6
5
  import type { IStaticPolicyInformationSourceConstructorOptions } from "../models/IStaticPolicyInformationSourceConstructorOptions.js";
@@ -30,7 +29,7 @@ export declare class StaticPolicyInformationSource implements IPolicyInformation
30
29
  * @param action The action to get any additional information for.
31
30
  * @returns The objects containing relevant information or undefined if nothing relevant is found.
32
31
  */
33
- retrieve<D = unknown>(policy: IDataspaceProtocolPolicy | undefined, accessMode: PolicyInformationAccessMode, data?: D, action?: OdrlActionType | string): Promise<{
32
+ retrieve<D = unknown>(policy: IRightsManagementPolicy | undefined, accessMode: PolicyInformationAccessMode, data?: D, action?: OdrlActionType | string): Promise<{
34
33
  [id: string]: IJsonLdNodeObject;
35
34
  } | undefined>;
36
35
  /**
package/dist/types/policyObligationEnforcers/passThroughPolicyObligationEnforcer.d.ts CHANGED
@@ -1,6 +1,5 @@
1
1
  import type { IJsonLdNodeObject } from "@twin.org/data-json-ld";
2
- import { type IPolicyObligationEnforcer } from "@twin.org/rights-management-models";
3
- import type { IDataspaceProtocolPolicy } from "@twin.org/standards-dataspace-protocol";
2
+ import { type IPolicyObligationEnforcer, type IRightsManagementPolicy } from "@twin.org/rights-management-models";
4
3
  import type { OdrlActionType, IOdrlDuty } from "@twin.org/standards-w3c-odrl";
5
4
  import type { IPassThroughPolicyObligationEnforcerConstructorOptions } from "../models/IPassThroughPolicyObligationEnforcerConstructorOptions.js";
6
5
  /**
@@ -30,7 +29,7 @@ export declare class PassThroughPolicyObligationEnforcer implements IPolicyOblig
30
29
  * @param action Optional action to make a decision on, if not provided, the enforcer will evaluate all actions in the duty.
31
30
  * @returns Whether the obligations were successfully enforced.
32
31
  */
33
- enforce<D = unknown>(policy: IDataspaceProtocolPolicy, duty: IOdrlDuty, information?: {
32
+ enforce<D = unknown>(policy: IRightsManagementPolicy, duty: IOdrlDuty, information?: {
34
33
  [id: string]: IJsonLdNodeObject;
35
34
  }, data?: D, action?: OdrlActionType | string): Promise<boolean>;
36
35
  }
package/docs/changelog.md CHANGED
@@ -1,5 +1,49 @@
1
1
  # Changelog
2
2
 
3
+ ## [0.0.3-next.28](https://github.com/twinfoundation/rights-management/compare/rights-management-plugins-v0.0.3-next.27...rights-management-plugins-v0.0.3-next.28) (2026-04-09)
4
+
5
+
6
+ ### Features
7
+
8
+ * add EcosystemPolicy typed getter across PAP stack ([#114](https://github.com/twinfoundation/rights-management/issues/114)) ([2a8e941](https://github.com/twinfoundation/rights-management/commit/2a8e941bbea229fb74f81dc869ce1f85c66c300d))
9
+
10
+
11
+ ### Dependencies
12
+
13
+ * The following workspace dependencies were updated
14
+ * dependencies
15
+ * @twin.org/rights-management-models bumped from 0.0.3-next.27 to 0.0.3-next.28
16
+ * devDependencies
17
+ * @twin.org/rights-management-pap-service bumped from 0.0.3-next.27 to 0.0.3-next.28
18
+ * @twin.org/rights-management-pdp-service bumped from 0.0.3-next.27 to 0.0.3-next.28
19
+ * @twin.org/rights-management-pep-service bumped from 0.0.3-next.27 to 0.0.3-next.28
20
+ * @twin.org/rights-management-pip-service bumped from 0.0.3-next.27 to 0.0.3-next.28
21
+ * @twin.org/rights-management-pmp-service bumped from 0.0.3-next.27 to 0.0.3-next.28
22
+ * @twin.org/rights-management-pnp-service bumped from 0.0.3-next.27 to 0.0.3-next.28
23
+ * @twin.org/rights-management-pxp-service bumped from 0.0.3-next.27 to 0.0.3-next.28
24
+
25
+ ## [0.0.3-next.27](https://github.com/twinfoundation/rights-management/compare/rights-management-plugins-v0.0.3-next.26...rights-management-plugins-v0.0.3-next.27) (2026-03-31)
26
+
27
+
28
+ ### Miscellaneous Chores
29
+
30
+ * **rights-management-plugins:** Synchronize repo versions
31
+
32
+
33
+ ### Dependencies
34
+
35
+ * The following workspace dependencies were updated
36
+ * dependencies
37
+ * @twin.org/rights-management-models bumped from 0.0.3-next.26 to 0.0.3-next.27
38
+ * devDependencies
39
+ * @twin.org/rights-management-pap-service bumped from 0.0.3-next.26 to 0.0.3-next.27
40
+ * @twin.org/rights-management-pdp-service bumped from 0.0.3-next.26 to 0.0.3-next.27
41
+ * @twin.org/rights-management-pep-service bumped from 0.0.3-next.26 to 0.0.3-next.27
42
+ * @twin.org/rights-management-pip-service bumped from 0.0.3-next.26 to 0.0.3-next.27
43
+ * @twin.org/rights-management-pmp-service bumped from 0.0.3-next.26 to 0.0.3-next.27
44
+ * @twin.org/rights-management-pnp-service bumped from 0.0.3-next.26 to 0.0.3-next.27
45
+ * @twin.org/rights-management-pxp-service bumped from 0.0.3-next.26 to 0.0.3-next.27
46
+
3
47
  ## [0.0.3-next.26](https://github.com/twinfoundation/rights-management/compare/rights-management-plugins-v0.0.3-next.25...rights-management-plugins-v0.0.3-next.26) (2026-03-27)
4
48
 
5
49
 
package/docs/examples.md CHANGED
@@ -176,6 +176,35 @@ console.log(arbiter.className()); // DefaultPolicyArbiter
176
176
  console.log(decisions[0].decision); // granted
177
177
  ```
178
178
 
179
+ ```typescript
180
+ import { DefaultPolicyArbiter } from '@twin.org/rights-management-plugins';
181
+ import { OdrlPolicyType, OdrlProfiles } from '@twin.org/standards-w3c-odrl';
182
+
183
+ const arbiter = new DefaultPolicyArbiter();
184
+
185
+ // EcosystemPolicy with the TWIN profile — the arbiter evaluates its obligations directly.
186
+ const ecosystemDecisions = await arbiter.decide(
187
+ {
188
+ '@id': 'urn:rights-management:ecosystem-policy-1',
189
+ '@type': OdrlPolicyType.EcosystemPolicy,
190
+ profile: OdrlProfiles.Twin,
191
+ assigner: 'did:example:publisher',
192
+ obligation: [
193
+ {
194
+ action: 'inform',
195
+ assignee: 'did:example:border-agency',
196
+ target: 'urn:twin:asset:consignment:abc123'
197
+ }
198
+ ]
199
+ },
200
+ {},
201
+ { consignment: 'abc123' },
202
+ 'inform'
203
+ );
204
+
205
+ console.log(ecosystemDecisions[0].decision); // granted
206
+ ```
207
+
179
208
  ## PassThroughPolicyArbiter
180
209
 
181
210
  ```typescript
package/docs/reference/classes/DefaultPolicyArbiter.md CHANGED
@@ -34,6 +34,16 @@ The options for the default policy arbiter.
34
34
 
35
35
  The class name of the Default Policy Arbiter.
36
36
 
37
+ ***
38
+
39
+ ### SUPPORTED\_PROFILES {#supported_profiles}
40
+
41
+ > `readonly` `static` **SUPPORTED\_PROFILES**: `ReadonlySet`\<`string`\>
42
+
43
+ ODRL profiles whose custom vocabulary this arbiter understands and supports.
44
+ Any policy declaring a profile not in this set will be rejected.
45
+ Add a new entry here when support for an additional profile is implemented.
46
+
37
47
  ## Methods
38
48
 
39
49
  ### className() {#classname}
package/docs/reference/classes/IdentityPolicyInformationSource.md CHANGED
@@ -70,7 +70,7 @@ Retrieve information from the sources.
70
70
 
71
71
  ##### policy
72
72
 
73
- `IDataspaceProtocolPolicy` \| `undefined`
73
+ `IRightsManagementPolicy` \| `undefined`
74
74
 
75
75
  The policy to retrieve information for if available.
76
76
 
package/docs/reference/classes/LoggingPolicyExecutionAction.md CHANGED
@@ -88,7 +88,7 @@ Execute function type for policy actions.
88
88
 
89
89
  ##### policy
90
90
 
91
- `IDataspaceProtocolPolicy`
91
+ `IRightsManagementPolicy`
92
92
 
93
93
  The policy that applied to the data.
94
94
 
package/docs/reference/classes/PassThroughPolicyObligationEnforcer.md CHANGED
@@ -70,7 +70,7 @@ Enforces obligations regarding policy access to data.
70
70
 
71
71
  ##### policy
72
72
 
73
- `IDataspaceProtocolPolicy`
73
+ `IRightsManagementPolicy`
74
74
 
75
75
  The policy to evaluate.
76
76
 
package/docs/reference/classes/StaticPolicyInformationSource.md CHANGED
@@ -70,7 +70,7 @@ Retrieve information from the sources.
70
70
 
71
71
  ##### policy
72
72
 
73
- `IDataspaceProtocolPolicy` \| `undefined`
73
+ `IRightsManagementPolicy` \| `undefined`
74
74
 
75
75
  The policy to retrieve information for if available.
76
76
 
package/locales/en.json CHANGED
@@ -22,7 +22,8 @@
22
22
  "constraintDataTypeNotSupported": "Constraint dataType is not supported. Value coercion based on dataType is not implemented.",
23
23
  "constraintUnitNotSupported": "Constraint unit is not supported. Unit-aware comparison is not implemented.",
24
24
  "constraintStatusNotSupported": "Constraint status is not supported. State-based evaluation is not implemented.",
25
- "policyProfileNotSupported": "Policy \"{policyId}\" declares a profile. Profile-specific semantics are not supported."
25
+ "policyProfileNotSupported": "Policy \"{policyId}\" declares unsupported profile \"{unsupportedProfile}\". Only known profiles are supported.",
26
+ "inheritedPolicyProfileNotSupported": "Inherited policy \"{policyId}\" declares an unsupported profile. All policies in the inheritFrom chain must declare only supported profiles."
26
27
  },
27
28
  "defaultPolicyEnforcementProcessor": {
28
29
  "targetNotJsonPath": "The policy decision target \"{target}\" is not a valid JSON-path string, it should be a minimum of $.",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@twin.org/rights-management-plugins",
3
- "version": "0.0.3-next.26",
3
+ "version": "0.0.3-next.28",
4
4
  "description": "Plugin implementations for extending rights management behaviour across components.",
5
5
  "repository": {
6
6
  "type": "git",
@@ -24,7 +24,7 @@
24
24
  "@twin.org/data-json-path": "next",
25
25
  "@twin.org/logging-models": "next",
26
26
  "@twin.org/nameof": "next",
27
- "@twin.org/rights-management-models": "0.0.3-next.26",
27
+ "@twin.org/rights-management-models": "0.0.3-next.28",
28
28
  "@twin.org/standards-w3c-odrl": "next"
29
29
  },
30
30
  "main": "./dist/es/index.js",