@vorionsys/platform-core 0.1.0

package/dist/intent-gateway/policy-composer.js

@@ -0,0 +1,418 @@
+/**
+ * POLICY COMPOSER
+ * @packageDocumentation
+ */
+import { createLogger } from "../common/logger.js";
+const logger = createLogger({ component: "policy-composer" });
+export const CRYPTO_SUITE_STRICTNESS = {
+    standard: 0,
+    "fips-140-2": 1,
+    "sm-national": 2,
+    "post-quantum": 3,
+    "cnsa-2.0": 4,
+};
+const ENFORCEMENT_ORDER = {
+    advisory: 0,
+    required: 1,
+    mandatory: 2,
+    blocking: 3,
+};
+function c(id, type, rule, enforcement, bundleId, jurisdiction, value) {
+    return {
+        id,
+        type,
+        rule,
+        enforcement,
+        sourceBundleId: bundleId,
+        sourceJurisdiction: jurisdiction,
+        value,
+    };
+}
+function createBuiltinBundles() {
+    return [
+        {
+            id: "global-default",
+            name: "Global Default",
+            jurisdictions: ["GLOBAL"],
+            priority: 0,
+            constraints: [
+                c("global-retention", "retention", "Min 365-day retention", "required", "global-default", "GLOBAL", 365),
+                c("global-crypto", "crypto", "Standard crypto", "required", "global-default", "GLOBAL", "standard"),
+                c("global-consent", "consent", "Implicit consent", "required", "global-default", "GLOBAL", "implicit"),
+                c("global-escalation", "escalation", "Flag for review", "required", "global-default", "GLOBAL", "flag-review"),
+                c("global-trust", "trust-level", "Min trust T2", "required", "global-default", "GLOBAL", 2),
+                c("global-proof", "proof-anchoring", "Database proof", "required", "global-default", "GLOBAL", "database"),
+                c("global-external", "external-services", "External allowed", "advisory", "global-default", "GLOBAL", true),
+            ],
+        },
+        {
+            id: "eu-gdpr",
+            name: "EU GDPR",
+            jurisdictions: ["EU"],
+            priority: 10,
+            constraints: [
+                c("eu-retention", "retention", "GDPR: 5yr retention", "mandatory", "eu-gdpr", "EU", 1825),
+                c("eu-consent", "consent", "GDPR: Explicit granular", "mandatory", "eu-gdpr", "EU", "explicit-granular"),
+                c("eu-residency", "data-residency", "GDPR: EU data residency", "mandatory", "eu-gdpr", "EU", "eu-west"),
+                c("eu-proof", "proof-anchoring", "GDPR: Merkle tree", "required", "eu-gdpr", "EU", "merkle-tree"),
+                c("eu-trust", "trust-level", "GDPR: Min trust T3", "required", "eu-gdpr", "EU", 3),
+                c("eu-processing", "processing-restriction", "GDPR: Purpose limitation", "mandatory", "eu-gdpr", "EU", "purpose-limitation"),
+                c("eu-audit", "audit-requirement", "GDPR: Full audit trail", "mandatory", "eu-gdpr", "EU", "full-audit-trail"),
+            ],
+        },
+        {
+            id: "eu-ai-act",
+            name: "EU AI Act",
+            jurisdictions: ["EU"],
+            priority: 15,
+            constraints: [
+                c("euai-escalation", "escalation", "AI Act: Block and escalate", "mandatory", "eu-ai-act", "EU", "block-escalate"),
+                c("euai-audit", "audit-requirement", "AI Act: AI system audit", "mandatory", "eu-ai-act", "EU", "ai-system-audit"),
+                c("euai-processing", "processing-restriction", "AI Act: Risk assessment", "mandatory", "eu-ai-act", "EU", "risk-assessment-required"),
+            ],
+        },
+        {
+            id: "us-federal",
+            name: "US Federal",
+            jurisdictions: ["US", "US-FED"],
+            priority: 10,
+            constraints: [
+                c("usfed-retention", "retention", "US Fed: 7yr retention", "mandatory", "us-federal", "US-FED", 2555),
+                c("usfed-crypto", "crypto", "US Fed: FIPS 140-2", "mandatory", "us-federal", "US-FED", "fips-140-2"),
+                c("usfed-proof", "proof-anchoring", "US Fed: TSA RFC 3161", "required", "us-federal", "US-FED", "tsa-rfc3161"),
+                c("usfed-trust", "trust-level", "US Fed: Min trust T4", "mandatory", "us-federal", "US-FED", 4),
+                c("usfed-escalation", "escalation", "US Fed: Block and escalate", "mandatory", "us-federal", "US-FED", "block-escalate"),
+                c("usfed-residency", "data-residency", "US Fed: US Gov regions", "mandatory", "us-federal", "US-FED", "us-gov-east"),
+            ],
+        },
+        {
+            id: "us-defense",
+            name: "US Defense/CMMC",
+            jurisdictions: ["US-DOD"],
+            priority: 20,
+            constraints: [
+                c("usdod-retention", "retention", "DoD: 10yr retention", "blocking", "us-defense", "US-DOD", 3650),
+                c("usdod-crypto", "crypto", "DoD: CNSA 2.0", "blocking", "us-defense", "US-DOD", "cnsa-2.0"),
+                c("usdod-proof", "proof-anchoring", "DoD: Hardware HSM", "blocking", "us-defense", "US-DOD", "hardware-hsm"),
+                c("usdod-trust", "trust-level", "DoD: Min trust T6", "blocking", "us-defense", "US-DOD", 6),
+                c("usdod-escalation", "escalation", "DoD: Hard block", "blocking", "us-defense", "US-DOD", "hard-block"),
+                c("usdod-external", "external-services", "DoD: No external", "blocking", "us-defense", "US-DOD", false),
+                c("usdod-residency", "data-residency", "DoD: DoD facilities", "blocking", "us-defense", "US-DOD", "us-gov-west"),
+                c("usdod-clearance", "security-clearance", "DoD: Secret clearance", "blocking", "us-defense", "US-DOD", "secret"),
+                c("usdod-consent", "consent", "DoD: Dual consent", "mandatory", "us-defense", "US-DOD", "dual-consent"),
+            ],
+        },
+        {
+            id: "hipaa",
+            name: "HIPAA",
+            jurisdictions: ["US", "US-FED"],
+            priority: 12,
+            constraints: [
+                c("hipaa-retention", "retention", "HIPAA: 6yr PHI retention", "mandatory", "hipaa", "US", 2190),
+                c("hipaa-consent", "consent", "HIPAA: Opt-in PHI", "mandatory", "hipaa", "US", "opt-in"),
+                c("hipaa-audit", "audit-requirement", "HIPAA: PHI access audit", "mandatory", "hipaa", "US", "phi-access-audit"),
+                c("hipaa-access", "access-control", "HIPAA: RBAC for PHI", "mandatory", "hipaa", "US", "rbac-phi"),
+                c("hipaa-processing", "processing-restriction", "HIPAA: Minimum necessary", "mandatory", "hipaa", "US", "minimum-necessary"),
+            ],
+        },
+        {
+            id: "soc2",
+            name: "SOC 2 Type II",
+            jurisdictions: ["US", "GLOBAL"],
+            priority: 8,
+            constraints: [
+                c("soc2-retention", "retention", "SOC 2: 1yr retention", "required", "soc2", "US", 365),
+                c("soc2-access", "access-control", "SOC 2: Logical access", "required", "soc2", "US", "logical-access"),
+                c("soc2-audit", "audit-requirement", "SOC 2: Change mgmt audit", "required", "soc2", "US", "change-management-audit"),
+                c("soc2-escalation", "escalation", "SOC 2: Flag for review", "required", "soc2", "US", "flag-review"),
+            ],
+        },
+    ];
+}
+export class PolicyComposer {
+    bundles = new Map();
+    constructor() {
+        for (const b of createBuiltinBundles())
+            this.bundles.set(b.id, b);
+    }
+    get bundleCount() {
+        return this.bundles.size;
+    }
+    get registeredBundleIds() {
+        return Array.from(this.bundles.keys());
+    }
+    registerBundle(bundle) {
+        if (this.bundles.has(bundle.id))
+            logger.warn({ bundleId: bundle.id }, "Overwriting bundle");
+        this.bundles.set(bundle.id, bundle);
+        logger.info({ bundleId: bundle.id, priority: bundle.priority }, "Bundle registered");
+    }
+    compose(ctx, additionalBundleIds) {
+        const applicable = this.selectApplicable(ctx, additionalBundleIds);
+        if (applicable.length === 0) {
+            const g = this.bundles.get("global-default");
+            if (g)
+                applicable.push(g);
+        }
+        applicable.sort((a, b) => a.priority - b.priority);
+        const all = [];
+        for (const b of applicable)
+            all.push(...b.constraints);
+        const grouped = new Map();
+        for (const co of all) {
+            const g = grouped.get(co.type) ?? [];
+            g.push(co);
+            grouped.set(co.type, g);
+        }
+        const resolved = [];
+        const rConflicts = [];
+        const uConflicts = [];
+        for (const [type, cons] of grouped.entries()) {
+            const r = this.resolveGroup(type, cons, applicable);
+            resolved.push(...r.resolved);
+            rConflicts.push(...r.resolvedConflicts);
+            uConflicts.push(...r.unresolvedConflicts);
+        }
+        const isValid = uConflicts.every((co) => co.severity !== "critical");
+        return {
+            constraints: resolved,
+            sourceBundles: applicable.map((b) => b.id),
+            resolvedConflicts: rConflicts,
+            unresolvedConflicts: uConflicts,
+            isValid,
+            composedAt: Date.now(),
+        };
+    }
+    selectApplicable(ctx, ids) {
+        const sel = [];
+        const used = new Set();
+        for (const [id, b] of this.bundles) {
+            if (b.jurisdictions.some((j) => j === "GLOBAL" || ctx.primaryJurisdictions.includes(j)) &&
+                !used.has(id)) {
+                sel.push(b);
+                used.add(id);
+            }
+        }
+        if (ids)
+            for (const id of ids) {
+                if (!used.has(id)) {
+                    const b = this.bundles.get(id);
+                    if (b) {
+                        sel.push(b);
+                        used.add(id);
+                    }
+                }
+            }
+        return sel;
+    }
+    resolveGroup(type, cons, bundles) {
+        if (cons.length <= 1)
+            return {
+                resolved: cons,
+                resolvedConflicts: [],
+                unresolvedConflicts: [],
+            };
+        switch (type) {
+            case "retention":
+            case "trust-level":
+                return this.byMax(type, cons);
+            case "crypto":
+                return this.byCrypto(cons);
+            case "consent":
+                return this.byStrictness(type, cons, {
+                    implicit: 0,
+                    "opt-out": 1,
+                    "opt-in": 2,
+                    "explicit-granular": 3,
+                    "dual-consent": 4,
+                });
+            case "escalation":
+                return this.byStrictness(type, cons, {
+                    "log-only": 0,
+                    "flag-review": 1,
+                    "block-escalate": 2,
+                    "hard-block": 3,
+                });
+            case "proof-anchoring":
+                return this.byStrictness(type, cons, {
+                    database: 0,
+                    "merkle-tree": 1,
+                    "blockchain-l2": 2,
+                    "tsa-rfc3161": 3,
+                    "hardware-hsm": 4,
+                });
+            case "security-clearance":
+                return this.byStrictness(type, cons, {
+                    none: 0,
+                    public: 0,
+                    confidential: 1,
+                    secret: 2,
+                    "top-secret": 3,
+                });
+            case "data-residency":
+                return this.dataResidency(cons);
+            case "external-services":
+                return this.extServices(cons);
+            case "access-control":
+            case "processing-restriction":
+            case "audit-requirement":
+                return this.additive(cons);
+            default:
+                return this.byPriority(type, cons, bundles);
+        }
+    }
+    byMax(type, cons) {
+        const vals = cons.map((co) => ({
+            co,
+            n: typeof co.value === "number" ? co.value : 0,
+        }));
+        const max = vals.reduce((m, v) => (v.n > m.n ? v : m));
+        const conflict = new Set(vals.map((v) => v.n)).size > 1;
+        return {
+            resolved: [max.co],
+            resolvedConflicts: conflict
+                ? [
+                    {
+                        constraintType: type,
+                        constraints: cons,
+                        description: type + ": max=" + max.n,
+                        severity: "low",
+                    },
+                ]
+                : [],
+            unresolvedConflicts: [],
+        };
+    }
+    byCrypto(cons) {
+        const vals = cons.map((co) => ({
+            co,
+            s: CRYPTO_SUITE_STRICTNESS[co.value] ?? 0,
+        }));
+        const best = vals.reduce((m, v) => (v.s > m.s ? v : m));
+        const conflict = new Set(vals.map((v) => v.s)).size > 1;
+        return {
+            resolved: [best.co],
+            resolvedConflicts: conflict
+                ? [
+                    {
+                        constraintType: "crypto",
+                        constraints: cons,
+                        description: "Crypto: strictest=" + best.co.value,
+                        severity: "low",
+                    },
+                ]
+                : [],
+            unresolvedConflicts: [],
+        };
+    }
+    byStrictness(type, cons, map) {
+        const vals = cons.map((co) => ({ co, s: map[String(co.value)] ?? 0 }));
+        const best = vals.reduce((m, v) => (v.s > m.s ? v : m));
+        const conflict = new Set(vals.map((v) => v.s)).size > 1;
+        return {
+            resolved: [best.co],
+            resolvedConflicts: conflict
+                ? [
+                    {
+                        constraintType: type,
+                        constraints: cons,
+                        description: type + ": strictest=" + best.co.value,
+                        severity: "low",
+                    },
+                ]
+                : [],
+            unresolvedConflicts: [],
+        };
+    }
+    dataResidency(cons) {
+        const zones = new Set(cons.map((co) => String(co.value)));
+        if (zones.size <= 1)
+            return {
+                resolved: [cons[0]],
+                resolvedConflicts: [],
+                unresolvedConflicts: [],
+            };
+        const sorted = [...cons].sort((a, b) => (ENFORCEMENT_ORDER[b.enforcement] ?? 0) -
+            (ENFORCEMENT_ORDER[a.enforcement] ?? 0));
+        const blocking = sorted.some((co) => co.enforcement === "blocking" || co.enforcement === "mandatory");
+        if (blocking)
+            return {
+                resolved: [sorted[0]],
+                resolvedConflicts: [],
+                unresolvedConflicts: [
+                    {
+                        constraintType: "data-residency",
+                        constraints: cons,
+                        description: "Incompatible residency: " + [...zones].join(" vs "),
+                        severity: "critical",
+                    },
+                ],
+            };
+        return {
+            resolved: [sorted[0]],
+            resolvedConflicts: [
+                {
+                    constraintType: "data-residency",
+                    constraints: cons,
+                    description: "Residency resolved to " + sorted[0].value,
+                    severity: "medium",
+                },
+            ],
+            unresolvedConflicts: [],
+        };
+    }
+    extServices(cons) {
+        const blocked = cons.some((co) => co.value === false);
+        const winner = blocked ? cons.find((co) => co.value === false) : cons[0];
+        const conflict = new Set(cons.map((co) => co.value)).size > 1;
+        return {
+            resolved: [winner],
+            resolvedConflicts: conflict
+                ? [
+                    {
+                        constraintType: "external-services",
+                        constraints: cons,
+                        description: "External services: " + winner.value,
+                        severity: "low",
+                    },
+                ]
+                : [],
+            unresolvedConflicts: [],
+        };
+    }
+    additive(cons) {
+        const seen = new Set();
+        const unique = [];
+        for (const co of cons) {
+            const k = String(co.value);
+            if (!seen.has(k)) {
+                seen.add(k);
+                unique.push(co);
+            }
+        }
+        return {
+            resolved: unique,
+            resolvedConflicts: [],
+            unresolvedConflicts: [],
+        };
+    }
+    byPriority(type, cons, bundles) {
+        const pm = new Map(bundles.map((b) => [b.id, b.priority]));
+        const sorted = [...cons].sort((a, b) => (pm.get(b.sourceBundleId) ?? 0) - (pm.get(a.sourceBundleId) ?? 0));
+        return {
+            resolved: [sorted[0]],
+            resolvedConflicts: cons.length > 1
+                ? [
+                    {
+                        constraintType: type,
+                        constraints: cons,
+                        description: type + ": by priority=" + sorted[0].sourceBundleId,
+                        severity: "low",
+                    },
+                ]
+                : [],
+            unresolvedConflicts: [],
+        };
+    }
+}
+//# sourceMappingURL=policy-composer.js.map

package/dist/intent-gateway/policy-composer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-composer.js","sourceRoot":"","sources":["../../src/intent-gateway/policy-composer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAcnD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAU9D,MAAM,CAAC,MAAM,uBAAuB,GAAgC;IAClE,QAAQ,EAAE,CAAC;IACX,YAAY,EAAE,CAAC;IACf,aAAa,EAAE,CAAC;IAChB,cAAc,EAAE,CAAC;IACjB,UAAU,EAAE,CAAC;CACd,CAAC;AAEF,MAAM,iBAAiB,GAAqC;IAC1D,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,SAAS,CAAC,CACR,EAAU,EACV,IAA0B,EAC1B,IAAY,EACZ,WAA6B,EAC7B,QAAgB,EAChB,YAA0B,EAC1B,KAAc;IAEd,OAAO;QACL,EAAE;QACF,IAAI;QACJ,IAAI;QACJ,WAAW;QACX,cAAc,EAAE,QAAQ;QACxB,kBAAkB,EAAE,YAAY;QAChC,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO;QACL;YACE,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,gBAAgB;YACtB,aAAa,EAAE,CAAC,QAAQ,CAAC;YACzB,QAAQ,EAAE,CAAC;YACX,WAAW,EAAE;gBACX,CAAC,CACC,kBAAkB,EAClB,WAAW,EACX,uBAAuB,EACvB,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,GAAG,CACJ;gBACD,CAAC,CACC,eAAe,EACf,QAAQ,EACR,iBAAiB,EACjB,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,UAAU,CACX;gBACD,CAAC,CACC,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,UAAU,CACX;gBACD,CAAC,CACC,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,aAAa,CACd;gBACD,CAAC,CACC,cAAc,EACd,aAAa,EACb,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,CAAC,CACF;gBACD,CAAC,CACC,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,UAAU,CACX;gBACD,CAAC,CACC,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,IAAI,CACL;aACF;SACF;QACD;YACE,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,SAAS;YACf,aAAa,EAAE,CAAC,IAAI,CAAC;YACrB,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE;gBACX,CAAC,CACC,cAAc,EACd,WAAW,EACX,qBAAqB,EACrB,WAAW,EACX,SAAS,EACT,IAAI,EACJ,IAAI,CACL;gBACD,CAAC,CACC,YAAY,EACZ,SAAS,EACT,yBAAyB,EACzB,WAAW,EACX,SAAS,EACT,IAAI,EACJ,mBAAmB,CACpB;gBACD,CAAC,CACC,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,WAAW,EACX,SAAS,EACT,IAAI,EACJ,SAAS,CACV;gBACD,CAAC,CACC,UAAU,EACV,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,SAAS,EACT,IAAI,EACJ,aAAa,CACd;gBACD,CAAC,CACC,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,UAAU,EACV,SAAS,EACT,IAAI,EACJ,CAAC,CACF;gBACD,CAAC,CACC,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,WAAW,EACX,SAAS,EACT,IAAI,EACJ,oBAAoB,CACrB;gBACD,CAAC,CACC,UAAU,EACV,mBAAmB,EACnB,wBAAwB,EACxB,WAAW,EACX,SAAS,EACT,IAAI,EACJ,kBAAkB,CACnB;aACF;SACF;QACD;YACE,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,WAAW;YACjB,aAAa,EAAE,CAAC,IAAI,CAAC;YACrB,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE;gBACX,CAAC,CACC,iBAAiB,EACjB,YAAY,EACZ,4BAA4B,EAC5B,WAAW,EACX,WAAW,EACX,IAAI,EACJ,gBAAgB,CACjB;gBACD,CAAC,CACC,YAAY,EACZ,mBAAmB,EACnB,yBAAyB,EACzB,WAAW,EACX,WAAW,EACX,IAAI,EACJ,iBAAiB,CAClB;gBACD,CAAC,CACC,iBAAiB,EACjB,wBAAwB,EACxB,yBAAyB,EACzB,WAAW,EACX,WAAW,EACX,IAAI,EACJ,0BAA0B,CAC3B;aACF;SACF;QACD;YACE,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,YAAY;YAClB,aAAa,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC/B,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE;gBACX,CAAC,CACC,iBAAiB,EACjB,WAAW,EACX,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,IAAI,CACL;gBACD,CAAC,CACC,cAAc,EACd,QAAQ,EACR,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,YAAY,CACb;gBACD,CAAC,CACC,aAAa,EACb,iBAAiB,EACjB,sBAAsB,EACtB,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,aAAa,CACd;gBACD,CAAC,CACC,aAAa,EACb,aAAa,EACb,sBAAsB,EACtB,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,CAAC,CACF;gBACD,CAAC,CACC,kBAAkB,EAClB,YAAY,EACZ,4BAA4B,EAC5B,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,gBAAgB,CACjB;gBACD,CAAC,CACC,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACxB,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,aAAa,CACd;aACF;SACF;QACD;YACE,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,iBAAiB;YACvB,aAAa,EAAE,CAAC,QAAQ,CAAC;YACzB,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE;gBACX,CAAC,CACC,iBAAiB,EACjB,WAAW,EACX,qBAAqB,EACrB,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,IAAI,CACL;gBACD,CAAC,CACC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,UAAU,CACX;gBACD,CAAC,CACC,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,cAAc,CACf;gBACD,CAAC,CACC,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,CAAC,CACF;gBACD,CAAC,CACC,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,YAAY,CACb;gBACD,CAAC,CACC,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,KAAK,CACN;gBACD,CAAC,CACC,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,aAAa,CACd;gBACD,CAAC,CACC,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,QAAQ,CACT;gBACD,CAAC,CACC,eAAe,EACf,SAAS,EACT,mBAAmB,EACnB,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,cAAc,CACf;aACF;SACF;QACD;YACE,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,OAAO;YACb,aAAa,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC/B,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE;gBACX,CAAC,CACC,iBAAiB,EACjB,WAAW,EACX,0BAA0B,EAC1B,WAAW,EACX,OAAO,EACP,IAAI,EACJ,IAAI,CACL;gBACD,CAAC,CACC,eAAe,EACf,SAAS,EACT,mBAAmB,EACnB,WAAW,EACX,OAAO,EACP,IAAI,EACJ,QAAQ,CACT;gBACD,CAAC,CACC,aAAa,EACb,mBAAmB,EACnB,yBAAyB,EACzB,WAAW,EACX,OAAO,EACP,IAAI,EACJ,kBAAkB,CACnB;gBACD,CAAC,CACC,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,WAAW,EACX,OAAO,EACP,IAAI,EACJ,UAAU,CACX;gBACD,CAAC,CACC,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,WAAW,EACX,OAAO,EACP,IAAI,EACJ,mBAAmB,CACpB;aACF;SACF;QACD;YACE,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,eAAe;YACrB,aAAa,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC/B,QAAQ,EAAE,CAAC;YACX,WAAW,EAAE;gBACX,CAAC,CACC,gBAAgB,EAChB,WAAW,EACX,sBAAsB,EACtB,UAAU,EACV,MAAM,EACN,IAAI,EACJ,GAAG,CACJ;gBACD,CAAC,CACC,aAAa,EACb,gBAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,MAAM,EACN,IAAI,EACJ,gBAAgB,CACjB;gBACD,CAAC,CACC,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,EAC1B,UAAU,EACV,MAAM,EACN,IAAI,EACJ,yBAAyB,CAC1B;gBACD,CAAC,CACC,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,UAAU,EACV,MAAM,EACN,IAAI,EACJ,aAAa,CACd;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,cAAc;IACjB,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC5D;QACE,KAAK,MAAM,CAAC,IAAI,oBAAoB,EAAE;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IACD,IAAI,mBAAmB;QACrB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,cAAc,CAAC,MAA8B;QAC3C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAClD,mBAAmB,CACpB,CAAC;IACJ,CAAC;IAED,OAAO,CACL,GAAwB,EACxB,mBAA8B;QAE9B,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACnE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC7C,IAAI,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,GAAG,GAAuB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4C,CAAC;QACpE,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,QAAQ,GAAuB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACrE,OAAO;YACL,WAAW,EAAE,QAAQ;YACrB,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,iBAAiB,EAAE,UAAU;YAC7B,mBAAmB,EAAE,UAAU;YAC/B,OAAO;YACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACvB,CAAC;IACJ,CAAC;IAEO,gBAAgB,CACtB,GAAwB,EACxB,GAAc;QAEd,MAAM,GAAG,GAA6B,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,IACE,CAAC,CAAC,aAAa,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC9D;gBACD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EACb,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,GAAG;YACL,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAClB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC/B,IAAI,CAAC,EAAE,CAAC;wBACN,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBACZ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACf,CAAC;gBACH,CAAC;YACH,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,YAAY,CAClB,IAA0B,EAC1B,IAAwB,EACxB,OAAiC;QAOjC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAClB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,iBAAiB,EAAE,EAAE;gBACrB,mBAAmB,EAAE,EAAE;aACnB,CAAC;QACT,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,WAAW,CAAC;YACjB,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAChC,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7B,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE;oBACnC,QAAQ,EAAE,CAAC;oBACX,SAAS,EAAE,CAAC;oBACZ,QAAQ,EAAE,CAAC;oBACX,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;iBAClB,CAAC,CAAC;YACL,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE;oBACnC,UAAU,EAAE,CAAC;oBACb,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,YAAY,EAAE,CAAC;iBAChB,CAAC,CAAC;YACL,KAAK,iBAAiB;gBACpB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE;oBACnC,QAAQ,EAAE,CAAC;oBACX,aAAa,EAAE,CAAC;oBAChB,eAAe,EAAE,CAAC;oBAClB,aAAa,EAAE,CAAC;oBAChB,cAAc,EAAE,CAAC;iBAClB,CAAC,CAAC;YACL,KAAK,oBAAoB;gBACvB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE;oBACnC,IAAI,EAAE,CAAC;oBACP,MAAM,EAAE,CAAC;oBACT,YAAY,EAAE,CAAC;oBACf,MAAM,EAAE,CAAC;oBACT,YAAY,EAAE,CAAC;iBAChB,CAAC,CAAC;YACL,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,mBAAmB;gBACtB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAChC,KAAK,gBAAgB,CAAC;YACtB,KAAK,wBAAwB,CAAC;YAC9B,KAAK,mBAAmB;gBACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7B;gBACE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAA0B,EAAE,IAAwB;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7B,EAAE;YACF,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC/C,CAAC,CAAC,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACxD,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,iBAAiB,EAAE,QAAQ;gBACzB,CAAC,CAAC;oBACE;wBACE,cAAc,EAAE,IAAI;wBACpB,WAAW,EAAE,IAAI;wBACjB,WAAW,EAAE,IAAI,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC;wBACpC,QAAQ,EAAE,KAAyB;qBACpC;iBACF;gBACH,CAAC,CAAC,EAAE;YACN,mBAAmB,EAAE,EAAsB;SAC5C,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,IAAwB;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7B,EAAE;YACF,CAAC,EAAE,uBAAuB,CAAC,EAAE,CAAC,KAAoB,CAAC,IAAI,CAAC;SACzD,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACxD,OAAO;YACL,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,iBAAiB,EAAE,QAAQ;gBACzB,CAAC,CAAC;oBACE;wBACE,cAAc,EAAE,QAAgC;wBAChD,WAAW,EAAE,IAAI;wBACjB,WAAW,EAAE,oBAAoB,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK;wBACjD,QAAQ,EAAE,KAAyB;qBACpC;iBACF;gBACH,CAAC,CAAC,EAAE;YACN,mBAAmB,EAAE,EAAsB;SAC5C,CAAC;IACJ,CAAC;IAEO,YAAY,CAClB,IAA0B,EAC1B,IAAwB,EACxB,GAA2B;QAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACxD,OAAO;YACL,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,iBAAiB,EAAE,QAAQ;gBACzB,CAAC,CAAC;oBACE;wBACE,cAAc,EAAE,IAAI;wBACpB,WAAW,EAAE,IAAI;wBACjB,WAAW,EAAE,IAAI,GAAG,cAAc,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK;wBAClD,QAAQ,EAAE,KAAyB;qBACpC;iBACF;gBACH,CAAC,CAAC,EAAE;YACN,mBAAmB,EAAE,EAAsB;SAC5C,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,IAAwB;QAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC;YACjB,OAAO;gBACL,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,iBAAiB,EAAE,EAAsB;gBACzC,mBAAmB,EAAE,EAAsB;aAC5C,CAAC;QACJ,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAC1C,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAC1B,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,KAAK,UAAU,IAAI,EAAE,CAAC,WAAW,KAAK,WAAW,CACxE,CAAC;QACF,IAAI,QAAQ;YACV,OAAO;gBACL,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACrB,iBAAiB,EAAE,EAAsB;gBACzC,mBAAmB,EAAE;oBACnB;wBACE,cAAc,EAAE,gBAAwC;wBACxD,WAAW,EAAE,IAAI;wBACjB,WAAW,EAAE,0BAA0B,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;wBACjE,QAAQ,EAAE,UAA8B;qBACzC;iBACF;aACF,CAAC;QACJ,OAAO;YACL,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrB,iBAAiB,EAAE;gBACjB;oBACE,cAAc,EAAE,gBAAwC;oBACxD,WAAW,EAAE,IAAI;oBACjB,WAAW,EAAE,wBAAwB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK;oBACvD,QAAQ,EAAE,QAA4B;iBACvC;aACF;YACD,mBAAmB,EAAE,EAAsB;SAC5C,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,IAAwB;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,KAAK,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9D,OAAO;YACL,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,iBAAiB,EAAE,QAAQ;gBACzB,CAAC,CAAC;oBACE;wBACE,cAAc,EAAE,mBAA2C;wBAC3D,WAAW,EAAE,IAAI;wBACjB,WAAW,EAAE,qBAAqB,GAAG,MAAM,CAAC,KAAK;wBACjD,QAAQ,EAAE,KAAyB;qBACpC;iBACF;gBACH,CAAC,CAAC,EAAE;YACN,mBAAmB,EAAE,EAAsB;SAC5C,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,IAAwB;QACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAAuB,EAAE,CAAC;QACtC,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,MAAM;YAChB,iBAAiB,EAAE,EAAsB;YACzC,mBAAmB,EAAE,EAAsB;SAC5C,CAAC;IACJ,CAAC;IAEO,UAAU,CAChB,IAA0B,EAC1B,IAAwB,EACxB,OAAiC;QAEjC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CACpE,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrB,iBAAiB,EACf,IAAI,CAAC,MAAM,GAAG,CAAC;gBACb,CAAC,CAAC;oBACE;wBACE,cAAc,EAAE,IAAI;wBACpB,WAAW,EAAE,IAAI;wBACjB,WAAW,EAAE,IAAI,GAAG,gBAAgB,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc;wBAC/D,QAAQ,EAAE,KAAyB;qBACpC;iBACF;gBACH,CAAC,CAAC,EAAE;YACR,mBAAmB,EAAE,EAAsB;SAC5C,CAAC;IACJ,CAAC;CACF"}

package/dist/intent-gateway/regime-selector.d.ts

@@ -0,0 +1,26 @@
+import type { Jurisdiction, JurisdictionContext, ComposedPolicySet, GovernanceRegime, CryptoSuite, ProofAnchoringMethod, ConsentModel, EscalationMode, TrustLevel } from "./types.js";
+export declare function hasJurisdiction(ctx: JurisdictionContext, ...js: Jurisdiction[]): boolean;
+export declare function hasPolicyConstraint(ps: ComposedPolicySet, type: string): boolean;
+export declare function extractPolicyConstraintValue<T = unknown>(ps: ComposedPolicySet, type: string): T | undefined;
+export declare function resolveCryptoSuite(ctx: JurisdictionContext, ps: ComposedPolicySet): CryptoSuite;
+export declare function resolveProofAnchoring(ctx: JurisdictionContext, ps: ComposedPolicySet): ProofAnchoringMethod;
+export declare function resolveConsentModel(ctx: JurisdictionContext, ps: ComposedPolicySet): ConsentModel;
+export declare function resolveEscalationMode(ctx: JurisdictionContext, ps: ComposedPolicySet): EscalationMode;
+export declare function resolveAuditRetentionDays(ctx: JurisdictionContext, ps: ComposedPolicySet): number;
+export declare function resolveExternalServicesAllowed(ctx: JurisdictionContext, ps: ComposedPolicySet): boolean;
+export declare function resolveMinimumTrustLevel(ctx: JurisdictionContext, ps: ComposedPolicySet): TrustLevel;
+export declare function generateRegimeId(p: {
+    jurisdictions: Jurisdiction[];
+    cryptoSuite: CryptoSuite;
+    proofAnchoring: ProofAnchoringMethod;
+    consentModel: ConsentModel;
+    escalationMode: EscalationMode;
+    auditRetentionDays: number;
+    dataResidency: string;
+    externalServicesAllowed: boolean;
+    minimumTrustLevel: TrustLevel;
+}): string;
+export declare class RegimeSelector {
+    select(ctx: JurisdictionContext, ps: ComposedPolicySet): GovernanceRegime;
+}
+//# sourceMappingURL=regime-selector.d.ts.map

package/dist/intent-gateway/regime-selector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regime-selector.d.ts","sourceRoot":"","sources":["../../src/intent-gateway/regime-selector.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EACpB,YAAY,EACZ,cAAc,EACd,UAAU,EACX,MAAM,YAAY,CAAC;AAgCpB,wBAAgB,eAAe,CAC7B,GAAG,EAAE,mBAAmB,EACxB,GAAG,EAAE,EAAE,YAAY,EAAE,GACpB,OAAO,CAET;AAED,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,iBAAiB,EACrB,IAAI,EAAE,MAAM,GACX,OAAO,CAET;AAED,wBAAgB,4BAA4B,CAAC,CAAC,GAAG,OAAO,EACtD,EAAE,EAAE,iBAAiB,EACrB,IAAI,EAAE,MAAM,GACX,CAAC,GAAG,SAAS,CAEf;AAWD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,mBAAmB,EACxB,EAAE,EAAE,iBAAiB,GACpB,WAAW,CAOb;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,mBAAmB,EACxB,EAAE,EAAE,iBAAiB,GACpB,oBAAoB,CAUtB;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,mBAAmB,EACxB,EAAE,EAAE,iBAAiB,GACpB,YAAY,CAOd;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,mBAAmB,EACxB,EAAE,EAAE,iBAAiB,GACpB,cAAc,CAMhB;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,mBAAmB,EACxB,EAAE,EAAE,iBAAiB,GACpB,MAAM,CAOR;AAED,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,mBAAmB,EACxB,EAAE,EAAE,iBAAiB,GACpB,OAAO,CAIT;AAED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,mBAAmB,EACxB,EAAE,EAAE,iBAAiB,GACpB,UAAU,CAOZ;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE;IAClC,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,WAAW,EAAE,WAAW,CAAC;IACzB,cAAc,EAAE,oBAAoB,CAAC;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB,EAAE,OAAO,CAAC;IACjC,iBAAiB,EAAE,UAAU,CAAC;CAC/B,GAAG,MAAM,CAmBT;AAED,qBAAa,cAAc;IACzB,MAAM,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE,EAAE,iBAAiB,GAAG,gBAAgB;CAmD1E"}

package/dist/intent-gateway/regime-selector.js

@@ -0,0 +1,185 @@
+/**
+ * REGIME SELECTOR
+ * @packageDocumentation
+ */
+import { createHash } from "node:crypto";
+import { createLogger } from "../common/logger.js";
+const logger = createLogger({ component: "regime-selector" });
+const CRYPTO_STRICTNESS = {
+    standard: 0,
+    "fips-140-2": 1,
+    "sm-national": 2,
+    "post-quantum": 3,
+    "cnsa-2.0": 4,
+};
+const PROOF_STRICTNESS = {
+    database: 0,
+    "merkle-tree": 1,
+    "blockchain-l2": 2,
+    "tsa-rfc3161": 3,
+    "hardware-hsm": 4,
+};
+const CONSENT_STRICTNESS = {
+    implicit: 0,
+    "opt-out": 1,
+    "opt-in": 2,
+    "explicit-granular": 3,
+    "dual-consent": 4,
+};
+const ESCALATION_STRICTNESS = {
+    "log-only": 0,
+    "flag-review": 1,
+    "block-escalate": 2,
+    "hard-block": 3,
+};
+export function hasJurisdiction(ctx, ...js) {
+    return js.some((j) => ctx.primaryJurisdictions.includes(j));
+}
+export function hasPolicyConstraint(ps, type) {
+    return ps.constraints.some((c) => c.type === type);
+}
+export function extractPolicyConstraintValue(ps, type) {
+    return ps.constraints.find((c) => c.type === type)?.value;
+}
+function pickStrictest(defaults, pv, map) {
+    const all = pv ? [...defaults, pv] : defaults;
+    return all.reduce((s, c) => ((map[c] ?? 0) > (map[s] ?? 0) ? c : s));
+}
+export function resolveCryptoSuite(ctx, ps) {
+    const pv = extractPolicyConstraintValue(ps, "crypto");
+    const d = ["standard"];
+    if (hasJurisdiction(ctx, "US-DOD"))
+        d.push("cnsa-2.0");
+    else if (hasJurisdiction(ctx, "US-FED"))
+        d.push("fips-140-2");
+    else if (hasJurisdiction(ctx, "CN"))
+        d.push("sm-national");
+    return pickStrictest(d, pv, CRYPTO_STRICTNESS);
+}
+export function resolveProofAnchoring(ctx, ps) {
+    const pv = extractPolicyConstraintValue(ps, "proof-anchoring");
+    const d = ["database"];
+    if (hasJurisdiction(ctx, "US-DOD"))
+        d.push("hardware-hsm");
+    else if (hasJurisdiction(ctx, "US-FED"))
+        d.push("tsa-rfc3161");
+    else if (hasJurisdiction(ctx, "EU"))
+        d.push("merkle-tree");
+    return pickStrictest(d, pv, PROOF_STRICTNESS);
+}
+export function resolveConsentModel(ctx, ps) {
+    const pv = extractPolicyConstraintValue(ps, "consent");
+    const d = ["implicit"];
+    if (hasJurisdiction(ctx, "EU"))
+        d.push("explicit-granular");
+    else if (hasJurisdiction(ctx, "CA"))
+        d.push("opt-in");
+    else if (hasJurisdiction(ctx, "US"))
+        d.push("opt-out");
+    return pickStrictest(d, pv, CONSENT_STRICTNESS);
+}
+export function resolveEscalationMode(ctx, ps) {
+    const pv = extractPolicyConstraintValue(ps, "escalation");
+    const d = ["flag-review"];
+    if (hasJurisdiction(ctx, "US-DOD"))
+        d.push("hard-block");
+    else if (hasJurisdiction(ctx, "US-FED", "EU"))
+        d.push("block-escalate");
+    return pickStrictest(d, pv, ESCALATION_STRICTNESS);
+}
+export function resolveAuditRetentionDays(ctx, ps) {
+    const pv = extractPolicyConstraintValue(ps, "retention");
+    const d = [365];
+    if (hasJurisdiction(ctx, "EU"))
+        d.push(1825);
+    if (hasJurisdiction(ctx, "US-FED"))
+        d.push(2555);
+    if (hasJurisdiction(ctx, "US-DOD"))
+        d.push(3650);
+    return Math.max(...(pv ? [...d, pv] : d));
+}
+export function resolveExternalServicesAllowed(ctx, ps) {
+    if (hasJurisdiction(ctx, "US-DOD", "CN"))
+        return false;
+    const pv = extractPolicyConstraintValue(ps, "external-services");
+    return pv !== undefined ? pv : true;
+}
+export function resolveMinimumTrustLevel(ctx, ps) {
+    const pv = extractPolicyConstraintValue(ps, "trust-level");
+    const d = [2];
+    if (hasJurisdiction(ctx, "US-DOD"))
+        d.push(6);
+    else if (hasJurisdiction(ctx, "US-FED"))
+        d.push(4);
+    else if (hasJurisdiction(ctx, "EU"))
+        d.push(3);
+    return Math.max(...(pv !== undefined ? [...d, pv] : d));
+}
+export function generateRegimeId(p) {
+    const canonical = {
+        auditRetentionDays: p.auditRetentionDays,
+        consentModel: p.consentModel,
+        cryptoSuite: p.cryptoSuite,
+        dataResidency: p.dataResidency,
+        escalationMode: p.escalationMode,
+        externalServicesAllowed: p.externalServicesAllowed,
+        jurisdictions: [...p.jurisdictions].sort(),
+        minimumTrustLevel: p.minimumTrustLevel,
+        proofAnchoring: p.proofAnchoring,
+    };
+    return ("regime-" +
+        createHash("sha256")
+            .update(JSON.stringify(canonical))
+            .digest("hex")
+            .substring(0, 16));
+}
+export class RegimeSelector {
+    select(ctx, ps) {
+        const cs = resolveCryptoSuite(ctx, ps);
+        const pa = resolveProofAnchoring(ctx, ps);
+        const cm = resolveConsentModel(ctx, ps);
+        const em = resolveEscalationMode(ctx, ps);
+        const ard = resolveAuditRetentionDays(ctx, ps);
+        const esa = resolveExternalServicesAllowed(ctx, ps);
+        const mtl = resolveMinimumTrustLevel(ctx, ps);
+        const rid = generateRegimeId({
+            jurisdictions: ctx.primaryJurisdictions,
+            cryptoSuite: cs,
+            proofAnchoring: pa,
+            consentModel: cm,
+            escalationMode: em,
+            auditRetentionDays: ard,
+            dataResidency: ctx.dataResidency,
+            externalServicesAllowed: esa,
+            minimumTrustLevel: mtl,
+        });
+        const nameParts = ctx.primaryJurisdictions.length === 1
+            ? ctx.primaryJurisdictions[0]
+            : "Multi(" + ctx.primaryJurisdictions.join("+") + ")";
+        const name = ctx.industry !== "general" ? nameParts + "-" + ctx.industry : nameParts;
+        const regime = {
+            regimeId: rid,
+            name: name || "default",
+            jurisdictions: ctx.primaryJurisdictions,
+            policyNamespaces: ps.sourceBundles,
+            cryptoSuite: cs,
+            proofAnchoring: pa,
+            auditRetentionDays: ard,
+            consentModel: cm,
+            escalationMode: em,
+            dataResidency: ctx.dataResidency,
+            externalServicesAllowed: esa,
+            minimumTrustLevel: mtl,
+            conformityAssessmentRequired: hasJurisdiction(ctx, "EU"),
+            transparencyRequired: hasJurisdiction(ctx, "EU", "CA", "UK"),
+            metadata: {},
+        };
+        if (hasJurisdiction(ctx, "US-DOD"))
+            regime.fedrampImpactLevel = "high";
+        else if (hasJurisdiction(ctx, "US-FED"))
+            regime.fedrampImpactLevel = "moderate";
+        logger.info({ regimeId: rid, name, cryptoSuite: cs, minimumTrustLevel: mtl }, "Regime assembled");
+        return regime;
+    }
+}
+//# sourceMappingURL=regime-selector.js.map