@veraanchor/verifier 0.0.0-stage → 0.1.0

package/dist/cli/commandV1.js

@@ -0,0 +1,440 @@
+import { randomUUID } from "node:crypto";
+import { constants } from "node:fs";
+import { link, lstat, open, realpath, unlink } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { sourceV1Path } from "../profiles/sourceV1Helpers.js";
+import { assessPortableVerificationPolicyV1, triangulateDatasetWithPolicyV1, triangulateIngestWithPolicyV1, verifyIngestWithPolicyV1, triangulateExecutionWithPolicyV1, verifyDatasetWithPolicyV1, verifyExecutionWithPolicyV1, verifyExecutionStandardsWithPolicyV1 } from "../policy/evaluateV1.js";
+import { validatePortableVerificationReportV1 } from "../reports/validationV1.js";
+const CLI_SCHEMA = "va.verifier-cli-result.v1";
+const MAX_JSON_BYTES = 2 * 1024 * 1024;
+const MAX_SOURCE_BYTES = 1024 * 1024 * 1024;
+const MAX_FILES = 256;
+const COMMANDS = {
+    "verify dataset": ["bundle", "sources", "source-root", "intent", "policy", "receipt",
+        "mode", "explorer-url", "mirror-url", "report-out"],
+    "verify execution": ["evidence", "intent", "policy", "verification-material",
+        "mode", "explorer-url", "mirror-url", "report-out"],
+    "verify ingest": ["bundle", "material", "source-root", "intent", "policy", "receipt",
+        "anchor-request-id", "mode", "explorer-url", "mirror-url", "report-out"],
+    "verify standards": ["evidence", "intent", "policy", "verification-material",
+        "mirror-url", "report-out"],
+    "report validate": ["report"],
+    "policy assess": ["report", "policy"],
+};
+class CliInputError extends Error {
+}
+function plainObject(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === null || prototype === Object.prototype;
+}
+function parseArgs(argv) {
+    const command = `${argv[0] ?? ""} ${argv[1] ?? ""}`;
+    if (!Object.hasOwn(COMMANDS, command))
+        throw new CliInputError("Unsupported command");
+    const allowed = COMMANDS[command];
+    const options = Object.create(null);
+    for (let i = 2; i < argv.length; i += 2) {
+        const flag = argv[i];
+        const value = argv[i + 1];
+        if (!flag?.startsWith("--") || !value || value.startsWith("--") || !allowed.includes(flag.slice(2))) {
+            throw new CliInputError("Unexpected option or missing value");
+        }
+        const key = flag.slice(2);
+        if (Object.hasOwn(options, key))
+            throw new CliInputError("Duplicate option");
+        options[key] = value;
+    }
+    const required = command === "verify dataset" ? ["bundle", "sources", "source-root", "intent", "policy"] :
+        command === "verify execution" ? ["evidence", "intent", "policy"] :
+            command === "verify ingest" ? ["bundle", "material", "intent", "policy"] :
+                command === "verify standards" ? ["evidence", "intent", "policy"] :
+                    command === "report validate" ? ["report"] : ["report", "policy"];
+    if (required.some((key) => !Object.hasOwn(options, key)))
+        throw new CliInputError("Missing required option");
+    return { command, options };
+}
+function option(options, name) {
+    const selected = options[name];
+    if (!selected)
+        throw new CliInputError("Missing required option");
+    return selected;
+}
+/** Only bounded, regular local files may supply JSON metadata. */
+async function readJson(path) {
+    const filename = resolve(path);
+    const stat = await lstat(filename);
+    if (!stat.isFile() || stat.size > MAX_JSON_BYTES)
+        throw new CliInputError("Invalid JSON input file");
+    const handle = await open(filename, constants.O_RDONLY | (process.platform === "win32" ? 0 : constants.O_NOFOLLOW));
+    try {
+        const opened = await handle.stat();
+        if (!opened.isFile() || opened.size > MAX_JSON_BYTES)
+            throw new CliInputError("Invalid JSON input file");
+        const bytes = await handle.readFile();
+        if (bytes.byteLength > MAX_JSON_BYTES)
+            throw new CliInputError("JSON input exceeds size limit");
+        return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    }
+    finally {
+        await handle.close();
+    }
+}
+function checkIntent(value, kind) {
+    if (!plainObject(value) || !plainObject(value.subject) || value.subject.kind !== kind ||
+        typeof value.subject.id !== "string" || !Array.isArray(value.expected)) {
+        throw new CliInputError("Invalid independent verification intent");
+    }
+    return value;
+}
+function checkPolicy(value) {
+    if (!plainObject(value) || !plainObject(value.subject) || !Array.isArray(value.required_checks)) {
+        throw new CliInputError("Invalid independent verification policy");
+    }
+    return value;
+}
+function sameSubject(intent, policy) {
+    if (policy.subject.kind !== intent.subject.kind || policy.subject.id !== intent.subject.id ||
+        policy.subject.hedera_network !== intent.subject.hedera_network) {
+        throw new CliInputError("Independent intent does not match policy subject");
+    }
+}
+/** No source path can escape the explicit root or traverse a symbolic link. */
+async function sourceFile(root, relativePath) {
+    const name = sourceV1Path(relativePath, 1024);
+    const filename = join(root, ...name.split("/"));
+    const pathRelative = relative(root, filename);
+    if (isAbsolute(pathRelative) || pathRelative === ".." || pathRelative.startsWith(`..${sep}`)) {
+        throw new CliInputError("Source escapes specified root");
+    }
+    let part = root;
+    const segments = name.split("/");
+    for (const [index, segment] of segments.entries()) {
+        part = join(part, segment);
+        const stat = await lstat(part);
+        if (stat.isSymbolicLink() || (index < segments.length - 1 ? !stat.isDirectory() : !stat.isFile())) {
+            throw new CliInputError("Source must be a regular file under the specified root");
+        }
+    }
+    const actual = await realpath(filename);
+    const inside = relative(root, actual);
+    if (isAbsolute(inside) || inside === ".." || inside.startsWith(`..${sep}`)) {
+        throw new CliInputError("Source escapes specified root");
+    }
+    return filename;
+}
+async function* sourceStream(root, relativePath, budget) {
+    const filename = await sourceFile(root, relativePath);
+    const handle = await open(filename, constants.O_RDONLY | (process.platform === "win32" ? 0 : constants.O_NOFOLLOW));
+    try {
+        const stat = await handle.stat();
+        if (!stat.isFile() || stat.size > MAX_SOURCE_BYTES)
+            throw new CliInputError("Source file exceeds limit");
+        for await (const chunk of handle.createReadStream({ autoClose: false })) {
+            if (chunk.byteLength > budget.remaining)
+                throw new RangeError("Total source bytes exceed limit");
+            budget.remaining -= chunk.byteLength;
+            yield chunk;
+        }
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** Shared bounded local file loader for Dataset and Ingest source material. */
+async function sourcePaths(sourceRoot, paths) {
+    const rootArg = resolve(sourceRoot);
+    const rootStat = await lstat(rootArg);
+    if (!rootStat.isDirectory() || rootStat.isSymbolicLink())
+        throw new CliInputError("Invalid source root");
+    const root = await realpath(rootArg);
+    if (!Array.isArray(paths) || paths.length < 1 || paths.length > MAX_FILES) {
+        throw new CliInputError("Source paths must be a nonempty bounded array");
+    }
+    const files = [];
+    const unique = new Set();
+    const budget = { remaining: MAX_SOURCE_BYTES };
+    let total = 0;
+    for (const candidate of paths) {
+        const path_rel = sourceV1Path(candidate, 1024);
+        const identity = process.platform === "win32" ? path_rel.toLowerCase() : path_rel;
+        if (unique.has(identity))
+            throw new CliInputError("Duplicate source path");
+        unique.add(identity);
+        const filename = await sourceFile(root, path_rel);
+        const stat = await lstat(filename);
+        if (stat.size > MAX_SOURCE_BYTES - total)
+            throw new CliInputError("Total source bytes exceed limit");
+        total += stat.size;
+        files.push({ path_rel, source: sourceStream(root, path_rel, budget) });
+    }
+    return files;
+}
+async function datasetSources(options) {
+    const manifest = await readJson(option(options, "sources"));
+    if (!plainObject(manifest) || Object.keys(manifest).length !== 1 || !Array.isArray(manifest.paths)) {
+        throw new CliInputError("Sources manifest must contain a bounded paths array");
+    }
+    return sourcePaths(option(options, "source-root"), manifest.paths);
+}
+/** The CLI descriptor contains local paths, never source bytes, user URLs, or trusted commitments. */
+async function ingestMaterial(options) {
+    const descriptor = await readJson(option(options, "material"));
+    if (!plainObject(descriptor))
+        throw new CliInputError("Invalid Ingest material descriptor");
+    const exact = (keys) => {
+        if (Object.keys(descriptor).some((key) => !keys.includes(key))) {
+            throw new CliInputError("Unknown Ingest material field");
+        }
+    };
+    if (descriptor.kind === "json") {
+        exact(["kind", "value"]);
+        if (!Object.hasOwn(descriptor, "value") || options["source-root"]) {
+            throw new CliInputError("Inline JSON material requires a value and no source root");
+        }
+        return { kind: "json", value: descriptor.value };
+    }
+    if (descriptor.kind === "text") {
+        exact(["kind", "text", "media_type"]);
+        if (typeof descriptor.text !== "string" || options["source-root"] ||
+            (descriptor.media_type !== undefined && descriptor.media_type !== null &&
+                (typeof descriptor.media_type !== "string" || !descriptor.media_type.trim() ||
+                    descriptor.media_type.length > 256 || descriptor.media_type.trim() !== descriptor.media_type))) {
+            throw new CliInputError("Invalid inline text material");
+        }
+        return { kind: "text", text: descriptor.text,
+            ...(descriptor.media_type === undefined || descriptor.media_type === null ? {} : { media_type: descriptor.media_type }) };
+    }
+    if (descriptor.kind === "file") {
+        exact(["kind", "path_rel"]);
+        const path_rel = sourceV1Path(descriptor.path_rel, 1024);
+        if (path_rel.includes("/"))
+            throw new CliInputError("Single-file Ingest requires a basename");
+        const files = await sourcePaths(option(options, "source-root"), [path_rel]);
+        return { kind: "file", file: files[0] };
+    }
+    if (descriptor.kind === "file_set") {
+        exact(["kind", "paths"]);
+        return { kind: "file_set", files: await sourcePaths(option(options, "source-root"), descriptor.paths) };
+    }
+    throw new CliInputError("Unsupported Ingest material kind");
+}
+/** Public Core anchor identity is separate from the independently selected Ingest source key. */
+function ingestAnchor(options, mode) {
+    const id = options["anchor-request-id"];
+    if (mode === "offline") {
+        if (id !== undefined)
+            throw new CliInputError("Offline Ingest cannot select a public anchor");
+        return null;
+    }
+    if (!id || !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(id)) {
+        throw new CliInputError("Public Ingest requires an independently selected Core anchor request UUID");
+    }
+    return id.toLowerCase();
+}
+/** Resolver endpoints are operator-controlled arguments, never fields from evidence.
+ * The resolvers independently enforce URL, transport and response bounds. */
+function endpoint(value, kind) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new CliInputError("Invalid resolver endpoint");
+    }
+    const loopback = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]";
+    const pathname = kind === "explorer" ? url.pathname.replace(/\/$/, "") : url.pathname;
+    if ((url.protocol !== "https:" && !(loopback && url.protocol === "http:")) ||
+        url.username || url.password || url.search || url.hash ||
+        (kind === "explorer" ? pathname !== "" && pathname !== "/v1" : pathname !== "/api/v1")) {
+        throw new CliInputError("Resolver endpoint requires HTTPS and a supported API root (HTTP loopback permitted)");
+    }
+    return value;
+}
+/** Offline is the default. A public run requires explicit operator-selected
+ * endpoints and a network-scoped relying-party policy, never producer metadata. */
+function verificationMode(options, intent, policy, reportKinds) {
+    const mode = options.mode ?? "offline";
+    if (mode !== "offline" && mode !== "public")
+        throw new CliInputError("Unsupported verification mode");
+    if (mode === "offline") {
+        if (options["explorer-url"] || options["mirror-url"] || policy.report_kind !== reportKinds.offline) {
+            throw new CliInputError("Offline verification does not accept public resolver options or policies");
+        }
+        return { mode };
+    }
+    const network = intent.subject.hedera_network;
+    if (policy.report_kind !== reportKinds.public || (network !== "mainnet" && network !== "testnet") ||
+        !options["explorer-url"]) {
+        throw new CliInputError("Public verification requires explicit network, public policy and Explorer origin");
+    }
+    const explorer = {
+        base_url: endpoint(options["explorer-url"], "explorer"),
+    };
+    const config = options["mirror-url"] ? {
+        explorer, mirror: { base_urls: { [network]: endpoint(options["mirror-url"], "mirror") } },
+    } : { explorer };
+    return { mode, config };
+}
+function statusCode(decision) {
+    return decision === "allow" || decision === "valid" ? 0 : decision === "review" ? 2 : 1;
+}
+/** Persist a complete standalone report with exclusive creation, not a CLI envelope.
+ * Linking a fully flushed sibling file avoids partial or overwritten reports. */
+async function saveReport(path, report) {
+    if (validatePortableVerificationReportV1(report).status !== "valid") {
+        throw new Error("Verifier produced an invalid portable report");
+    }
+    const serialized = `${JSON.stringify(report)}\n`;
+    if (Buffer.byteLength(serialized, "utf8") > MAX_JSON_BYTES) {
+        throw new Error("Verifier report exceeds output size limit");
+    }
+    const destination = resolve(path);
+    const staging = join(dirname(destination), `.va-verifier-${randomUUID()}.tmp`);
+    let created = false;
+    try {
+        const handle = await open(staging, "wx", 0o600);
+        created = true;
+        try {
+            await handle.writeFile(serialized, "utf8");
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        try {
+            // link() rejects an existing destination, including an existing symlink.
+            // Staging in the same directory guarantees a complete final file on success.
+            await link(staging, destination);
+        }
+        catch (error) {
+            if (error.code === "EEXIST") {
+                throw new CliInputError("Report output already exists");
+            }
+            throw error;
+        }
+    }
+    finally {
+        if (created)
+            await unlink(staging).catch(() => undefined);
+    }
+}
+/** CLI adapter only. Never accepts a caller flag claiming a report was SDK-verified. */
+export async function runVerifierCliV1(argv, emit) {
+    try {
+        const { command, options } = parseArgs(argv);
+        let result;
+        let code;
+        if (command === "report validate") {
+            result = validatePortableVerificationReportV1(await readJson(option(options, "report")));
+            code = statusCode(result && typeof result === "object" && "status" in result && result.status === "valid" ? "valid" : "invalid");
+        }
+        else if (command === "policy assess") {
+            const policy = checkPolicy(await readJson(option(options, "policy")));
+            const decision = assessPortableVerificationPolicyV1(await readJson(option(options, "report")), policy);
+            result = decision;
+            code = statusCode(decision.decision);
+        }
+        else if (command === "verify standards") {
+            const intent = checkIntent(await readJson(option(options, "intent")), "execution");
+            const policy = checkPolicy(await readJson(option(options, "policy")));
+            sameSubject(intent, policy);
+            const network = intent.subject.hedera_network;
+            const scope = policy.execution_scope;
+            if ((network !== "testnet" && network !== "mainnet") ||
+                policy.report_kind !== "independent_standards" ||
+                scope?.profile !== "sage-standards-v1" || scope.expected_program !== "sage" ||
+                (scope.requested_result_id !== null && typeof scope.requested_result_id !== "string")) {
+                throw new CliInputError("Independent SAGE standards require a network-scoped standards policy and exact SAGE execution scope");
+            }
+            // Only configured Mirror REST observations are used. HCS-1 decoding is
+            // handled by the bounded native Zstd adapter in the existing SDK kernel.
+            const config = options["mirror-url"] ? {
+                base_urls: { [network]: endpoint(options["mirror-url"], "mirror") },
+            } : {};
+            const input = {
+                intent, evidence: await readJson(option(options, "evidence")),
+                profile: "sage-standards-v1", expected_program: "sage",
+                ...(scope.requested_result_id === null ? {} : { result_id: scope.requested_result_id }),
+                ...(options["verification-material"] ? {
+                    verification_material: await readJson(options["verification-material"]),
+                } : {}),
+            };
+            const workflow = await verifyExecutionStandardsWithPolicyV1(config, input, {}, policy);
+            result = workflow;
+            code = statusCode(workflow.policy.decision);
+        }
+        else if (command === "verify execution") {
+            const intent = checkIntent(await readJson(option(options, "intent")), "execution");
+            const policy = checkPolicy(await readJson(option(options, "policy")));
+            sameSubject(intent, policy);
+            if (!policy.execution_scope)
+                throw new CliInputError("Execution policy scope required");
+            const selected = verificationMode(options, intent, policy, { offline: "execution", public: "execution_triangulation" });
+            const scope = policy.execution_scope;
+            const input = {
+                intent, evidence: await readJson(option(options, "evidence")), profile: scope.profile,
+                ...(scope.expected_program === null ? {} : { expected_program: scope.expected_program }),
+                ...(scope.requested_result_id === null ? {} : { result_id: scope.requested_result_id }),
+                ...(options["verification-material"] ? { verification_material: await readJson(options["verification-material"]) } : {}),
+            };
+            const workflow = selected.mode === "public"
+                ? await triangulateExecutionWithPolicyV1(selected.config, input, policy)
+                : verifyExecutionWithPolicyV1(input, policy);
+            result = workflow;
+            code = statusCode(workflow.policy.decision);
+        }
+        else if (command === "verify ingest") {
+            const intent = checkIntent(await readJson(option(options, "intent")), "ingest");
+            const policy = checkPolicy(await readJson(option(options, "policy")));
+            sameSubject(intent, policy);
+            const selected = verificationMode(options, intent, policy, { offline: "verification", public: "public_triangulation" });
+            const anchor_request_id = ingestAnchor(options, selected.mode);
+            const bundle = await readJson(option(options, "bundle"));
+            const material = await ingestMaterial(options);
+            const input = { bundle, material, intent,
+                ...(options.receipt ? { receipt: await readJson(options.receipt) } : {}) };
+            if (selected.mode === "public") {
+                if (anchor_request_id === null)
+                    throw new CliInputError("Missing Core anchor request ID");
+                const workflow = await triangulateIngestWithPolicyV1(selected.config, { ...input, anchor_request_id }, policy);
+                result = workflow;
+                code = statusCode(workflow.policy.decision);
+            }
+            else {
+                const workflow = await verifyIngestWithPolicyV1(input, policy);
+                result = workflow;
+                code = statusCode(workflow.policy.decision);
+            }
+        }
+        else {
+            const intent = checkIntent(await readJson(option(options, "intent")), "dataset");
+            const policy = checkPolicy(await readJson(option(options, "policy")));
+            sameSubject(intent, policy);
+            const selected = verificationMode(options, intent, policy, { offline: "verification", public: "public_triangulation" });
+            const bundle = await readJson(option(options, "bundle"));
+            const files = await datasetSources(options);
+            const input = { bundle, files, intent,
+                ...(options.receipt ? { receipt: await readJson(options.receipt) } : {}) };
+            const workflow = selected.mode === "public"
+                ? await triangulateDatasetWithPolicyV1(selected.config, input, policy)
+                : await verifyDatasetWithPolicyV1(input, policy);
+            result = workflow;
+            code = statusCode(workflow.policy.decision);
+        }
+        if (options["report-out"] !== undefined) {
+            // Only verification commands allow this option; imported reports never acquire authority.
+            await saveReport(options["report-out"], result.report);
+        }
+        emit(JSON.stringify({ schema_version: CLI_SCHEMA, command, result }));
+        return code;
+    }
+    catch (error) {
+        // Never echo attacker-controlled filenames, response bodies, source text or credentials.
+        const badInput = error instanceof CliInputError || error instanceof TypeError || error instanceof SyntaxError || error instanceof RangeError;
+        emit(JSON.stringify({ schema_version: CLI_SCHEMA, error: { code: badInput ? "CLI_INPUT_INVALID" : "CLI_OPERATION_FAILED" } }));
+        return badInput ? 64 : 70;
+    }
+}
+//# sourceMappingURL=commandV1.js.map

package/dist/cli/commandV1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandV1.js","sourceRoot":"","sources":["../../src/cli/commandV1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE9E,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAI9D,OAAO,EAAE,kCAAkC,EAAE,8BAA8B,EACzE,6BAA6B,EAAE,wBAAwB,EACvD,gCAAgC,EAAE,yBAAyB,EAAE,2BAA2B,EACxF,oCAAoC,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAGlF,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAC/C,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5C,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,QAAQ,GAAG;IACf,gBAAgB,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS;QAClF,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC;IACrD,kBAAkB,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,uBAAuB;QAC1E,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC;IACrD,eAAe,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS;QAClF,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC;IAC1E,kBAAkB,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,uBAAuB;QAC1E,YAAY,EAAE,YAAY,CAAC;IAC7B,iBAAiB,EAAE,CAAC,QAAQ,CAAC;IAC7B,eAAe,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B,CAAC;AAMX,MAAM,aAAc,SAAQ,KAAK;CAAG;AAEpC,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,IAAuB;IACxC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAa,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,CAAC,CAAC;IACtF,MAAM,OAAO,GAAsB,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;IACtF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,aAAa,CAAC,oCAAoC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxG,OAAO,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;YACnE,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC1E,OAAO,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACjE,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;IAC7G,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,MAAM,CAAC,OAAgB,EAAE,IAAY;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;QAAE,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACpH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,cAAc;YAAE,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,UAAU,GAAG,cAAc;YAAE,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAY,CAAC;IACxF,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAwC;IAC3E,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI;QACjF,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAsC,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAwC,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,MAA0B,EAAE,MAA4B;IAC3E,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE;QACtF,MAAM,CAAC,OAAO,CAAC,cAAc,KAAK,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACpE,MAAM,IAAI,aAAa,CAAC,kDAAkD,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,YAAoB;IAC1D,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,aAAa,CAAC,wDAAwD,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,YAAY,CAAC,IAAY,EAAE,YAAoB,EAAE,MAA6B;IAC5F,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACpH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB;YAAE,MAAM,IAAI,aAAa,CAAC,2BAA2B,CAAC,CAAC;QACzG,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACxE,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,UAAU,CAAC,iCAAiC,CAAC,CAAC;YACjG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,WAAW,CAAC,UAAkB,EAAE,KAAc;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC1E,MAAM,IAAI,aAAa,CAAC,+CAA+C,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAmE,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClF,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,GAAG,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,iCAAiC,CAAC,CAAC;QACrG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAgB;IAC5C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,aAAa,CAAC,qDAAqD,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,sGAAsG;AACtG,KAAK,UAAU,cAAc,CAAC,OAAgB;IAC5C,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,oCAAoC,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,CAAC,IAAuB,EAAQ,EAAE;QAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC;IACF,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/B,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,aAAa,CAAC,0DAA0D,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/B,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QACtC,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC;YAC7D,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI;gBACtE,CAAC,OAAO,UAAU,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE;oBACzE,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,aAAa,CAAC,8BAA8B,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI;YAC1C,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;IAC9H,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/B,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACnC,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1G,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAC;AAC9D,CAAC;AAED,iGAAiG;AACjG,SAAS,YAAY,CAAC,OAAgB,EAAE,IAA0B;IAChE,MAAM,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,EAAE,KAAK,SAAS;YAAE,MAAM,IAAI,aAAa,CAAC,8CAA8C,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,EAAE,IAAI,CAAC,4EAA4E,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,aAAa,CAAC,2EAA2E,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC;AAC1B,CAAC;AAED;6EAC6E;AAC7E,SAAS,QAAQ,CAAC,KAAa,EAAE,IAA2B;IAC1D,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,2BAA2B,CAAC,CAAC;IAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC1G,MAAM,QAAQ,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACtF,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACtE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QACtD,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,aAAa,CAAC,qFAAqF,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;mFACmF;AACnF,SAAS,gBAAgB,CAAC,OAAgB,EAAE,MAA0B,EAAE,MAA4B,EAClG,WAA4H;IAE5H,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;IACvC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAC;IACtG,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;YACnG,MAAM,IAAI,aAAa,CAAC,0EAA0E,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;IAC9C,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,MAAM,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC;QAC7F,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CAAC,kFAAkF,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,QAAQ,GAA4C;QACxD,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC;KACxD,CAAC;IACF,MAAM,MAAM,GAAgC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE;KAC1F,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;IACjB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,QAA2D;IAC7E,OAAO,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;iFACiF;AACjF,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,MAAoC;IAC1E,IAAI,oCAAoC,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;IACjD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,gBAAgB,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC;YACH,yEAAyE;YACzE,6EAA6E;YAC7E,MAAM,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,IAAI,aAAa,CAAC,8BAA8B,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAuB,EAAE,IAAa;IAC3E,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,MAAe,CAAC;QACpB,IAAI,IAAY,CAAC;QACjB,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;YAClC,MAAM,GAAG,oCAAoC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACzF,IAAI,GAAG,UAAU,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnI,CAAC;aAAM,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,kCAAkC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACvG,MAAM,GAAG,QAAQ,CAAC;YAClB,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;YACnF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC;YACrC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC;gBAChD,MAAM,CAAC,WAAW,KAAK,uBAAuB;gBAC9C,KAAK,EAAE,OAAO,KAAK,mBAAmB,IAAI,KAAK,CAAC,gBAAgB,KAAK,MAAM;gBAC3E,CAAC,KAAK,CAAC,mBAAmB,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,aAAa,CAAC,qGAAqG,CAAC,CAAC;YACjI,CAAC;YACD,uEAAuE;YACvE,yEAAyE;YACzE,MAAM,MAAM,GAA+D,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACjG,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,EAAE;aACpE,CAAC,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,KAAK,GAAqB;gBAC9B,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBAC7D,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM;gBACtD,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC;gBACvF,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;oBACrC,qBAAqB,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAkE;iBACzI,CAAC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,oCAAoC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;YACvF,MAAM,GAAG,QAAQ,CAAC;YAClB,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;YACnF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,eAAe;gBAAE,MAAM,IAAI,aAAa,CAAC,iCAAiC,CAAC,CAAC;YACxF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EACvD,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC;YACrC,MAAM,KAAK,GAAqB;gBAC9B,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;gBACrF,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBACxF,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC;gBACvF,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAkE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1L,CAAC;YACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBACzC,CAAC,CAAC,MAAM,gCAAgC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;gBACxE,CAAC,CAAC,2BAA2B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,GAAG,QAAQ,CAAC;YAClB,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAChF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EACvD,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC/D,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;gBACtC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7E,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/B,IAAI,iBAAiB,KAAK,IAAI;oBAAE,MAAM,IAAI,aAAa,CAAC,gCAAgC,CAAC,CAAC;gBAC1F,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,KAAK,EAAE,iBAAiB,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC/G,MAAM,GAAG,QAAQ,CAAC;gBAClB,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC/D,MAAM,GAAG,QAAQ,CAAC;gBAClB,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EACvD,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;gBACnC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7E,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBACzC,CAAC,CAAC,MAAM,8BAA8B,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;gBACtE,CAAC,CAAC,MAAM,yBAAyB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,GAAG,QAAQ,CAAC;YAClB,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;YACxC,0FAA0F;YAC1F,MAAM,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,EAAG,MAAuC,CAAC,MAAM,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yFAAyF;QACzF,MAAM,QAAQ,GAAG,KAAK,YAAY,aAAa,IAAI,KAAK,YAAY,SAAS,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,UAAU,CAAC;QAC7I,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/H,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { runVerifierCliV1 } from "./cli/commandV1.js";
+void runVerifierCliV1(process.argv.slice(2), (line) => process.stdout.write(`${line}\n`))
+    .then((code) => { process.exitCode = code; });
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,KAAK,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;KACtF,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/contracts/verification.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Shared structural contracts for read-only verification.
+ * Pre-release: these types are not a runtime validator or a verification claim.
+ */
+export type HederaNetwork = "mainnet" | "testnet";
+export type VerificationSubjectKind = "artifact" | "dataset" | "ingest" | "evidence_package" | "merkle_anchor" | "merkle_root" | "merkle_leaf" | "execution" | "result";
+/** Network is required by network-bound profiles, not by content-only evidence. */
+export type VerificationSubject = Readonly<{
+    kind: VerificationSubjectKind;
+    id: string;
+    hedera_network?: HederaNetwork;
+}>;
+/**
+ * Explicit commitment families. Never substitute one hashing/framing contract
+ * for another merely because both produce SHA3-512 digests.
+ */
+export type ExpectedCommitment = Readonly<{
+    key: string;
+    kind: "digest";
+    contract: "raw-sha3-512" | "core-canonical-json";
+    digest: string;
+}> | Readonly<{
+    key: string;
+    kind: "digest";
+    contract: "hf-contract-v1";
+    material: "json" | "utf8" | "raw";
+    domain: string;
+    digest: string;
+}> | Readonly<{
+    key: string;
+    kind: "merkle-root";
+    tree_alg: "binary-sorted" | "binary-sorted-v2" | "hf-dataset-v1" | "hf-ingest-v1";
+    root_hash: string;
+    leaf_count: number;
+}>;
+/** Expectations must be supplied by the caller or explicitly trusted context. */
+export type VerificationIntent = Readonly<{
+    subject: VerificationSubject;
+    expected: readonly ExpectedCommitment[];
+}>;
+export type VerificationFactValue = string | number | boolean | null;
+export type VerificationFact = Readonly<{
+    key: string;
+    state: "available";
+    value: VerificationFactValue;
+}> | Readonly<{
+    key: string;
+    state: "unavailable" | "not_applicable";
+    reason_code?: string | null;
+}>;
+/** Source designation is provenance metadata, not proof of source authenticity. */
+export type VerificationObservation = Readonly<{
+    id: string;
+    subject: VerificationSubject;
+    source: "provided_evidence" | "public_record" | "hedera_mirror" | "local_computation";
+    resolver_id?: string;
+    observed_at?: string | null;
+    facts: readonly VerificationFact[];
+}>;
+/** Check outcomes are distinct from evidence consistency and policy decisions. */
+export type VerificationOutcome = "pass" | "fail" | "indeterminate" | "unsupported" | "skipped";
+/** Findings carry no timestamps or raw source payloads. */
+export type VerificationFinding = Readonly<{
+    check_id: string;
+    outcome: VerificationOutcome;
+    reason_code: string | null;
+    observation_ids: readonly string[];
+}>;
+/** Relationship consistency is not an overall verification or policy verdict. */
+export type EvidenceConsistency = "consistent" | "conflict" | "incomplete";
+/** No aggregate success flag until profile-specific required checks are defined. */
+export type VerificationReport = Readonly<{
+    intent: VerificationIntent;
+    findings: readonly VerificationFinding[];
+    observations: readonly VerificationObservation[];
+}>;
+//# sourceMappingURL=verification.d.ts.map

package/dist/contracts/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../src/contracts/verification.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAElD,MAAM,MAAM,uBAAuB,GAC/B,UAAU,GACV,SAAS,GACT,QAAQ,GACR,kBAAkB,GAClB,eAAe,GACf,aAAa,GACb,aAAa,GACb,WAAW,GACX,QAAQ,CAAC;AAEb,mFAAmF;AACnF,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,CAAC,EAAE,aAAa,CAAC;CAChC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAC1B,QAAQ,CAAC;IACP,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,cAAc,GAAG,qBAAqB,CAAC;IACjD,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,QAAQ,CAAC;IACP,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,QAAQ,CAAC;IACP,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,eAAe,GAAG,kBAAkB,GAAG,eAAe,GAAG,cAAc,CAAC;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC,CAAC;AAEP,iFAAiF;AACjF,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,QAAQ,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAErE,MAAM,MAAM,gBAAgB,GACxB,QAAQ,CAAC;IACP,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,qBAAqB,CAAC;CAC9B,CAAC,GACF,QAAQ,CAAC;IACP,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,aAAa,GAAG,gBAAgB,CAAC;IACxC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC,CAAC;AAEP,mFAAmF;AACnF,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EACF,mBAAmB,GACnB,eAAe,GACf,eAAe,GACf,mBAAmB,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACpC,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,MAAM,GACN,eAAe,GACf,aAAa,GACb,SAAS,CAAC;AAEd,2DAA2D;AAC3D,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,UAAU,GAAG,YAAY,CAAC;AAE3E,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACzC,YAAY,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAClD,CAAC,CAAC"}

package/dist/contracts/verification.js

@@ -0,0 +1,6 @@
+/**
+ * Shared structural contracts for read-only verification.
+ * Pre-release: these types are not a runtime validator or a verification claim.
+ */
+export {};
+//# sourceMappingURL=verification.js.map

package/dist/contracts/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../src/contracts/verification.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/crypto/sha3.d.ts

@@ -0,0 +1,15 @@
+import type { VerificationOutcome } from "../contracts/verification.js";
+export type DigestVerificationResult = Readonly<{
+    outcome: Extract<VerificationOutcome, "pass" | "fail">;
+    reason_code: string | null;
+    expected_digest: string;
+    computed_digest: string;
+}>;
+export declare function normalizeSha3_512Digest(value: unknown): string;
+/** SHA3-512 over exact bytes. No JSON canonicalization or domain framing. */
+export declare function sha3_512Hex(bytes: Uint8Array): string;
+export declare function verifySha3_512Bytes(input: Readonly<{
+    bytes: Uint8Array;
+    expected_digest: string;
+}>): DigestVerificationResult;
+//# sourceMappingURL=sha3.d.ts.map

package/dist/crypto/sha3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha3.d.ts","sourceRoot":"","sources":["../../src/crypto/sha3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAIxE,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,OAAO,EAAE,OAAO,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACvD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAK9D;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAKrD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC;IAClD,KAAK,EAAE,UAAU,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,GAAG,wBAAwB,CAU5B"}

package/dist/crypto/sha3.js

@@ -0,0 +1,27 @@
+import { createHash } from "node:crypto";
+const DIGEST_RE = /^[0-9a-f]{128}$/i;
+export function normalizeSha3_512Digest(value) {
+    if (typeof value !== "string" || !DIGEST_RE.test(value)) {
+        throw new TypeError("SHA3-512 digest must contain exactly 128 hex characters");
+    }
+    return value.toLowerCase();
+}
+/** SHA3-512 over exact bytes. No JSON canonicalization or domain framing. */
+export function sha3_512Hex(bytes) {
+    if (!(bytes instanceof Uint8Array)) {
+        throw new TypeError("SHA3-512 input must be Uint8Array");
+    }
+    return createHash("sha3-512").update(bytes).digest("hex");
+}
+export function verifySha3_512Bytes(input) {
+    const expected = normalizeSha3_512Digest(input.expected_digest);
+    const computed = sha3_512Hex(input.bytes);
+    const matches = computed === expected;
+    return Object.freeze({
+        outcome: matches ? "pass" : "fail",
+        reason_code: matches ? null : "DIGEST_MISMATCH",
+        expected_digest: expected,
+        computed_digest: computed,
+    });
+}
+//# sourceMappingURL=sha3.js.map