@vorionsys/platform-core 0.1.0

package/dist/a2a/trust-negotiation.js

@@ -0,0 +1,425 @@
+/**
+ * Trust Negotiation Service
+ *
+ * Handles trust verification and negotiation between agents for A2A communication.
+ * Verifies caller/callee trust requirements and generates trust proofs.
+ *
+ * @packageDocumentation
+ */
+import crypto from 'crypto';
+import { createLogger } from '../common/logger.js';
+import { DEFAULT_TRUST_REQUIREMENTS, TRUST_PROOF_VALIDITY_SEC, MAX_CHAIN_DEPTH, MAX_DELEGATION_CHAIN, } from './types.js';
+const logger = createLogger({ component: 'a2a-trust-negotiation' });
+// ============================================================================
+// Trust Negotiation Service
+// ============================================================================
+export class TrustNegotiationService {
+    signingKey;
+    trustProvider;
+    constructor(signingKey, trustProvider) {
+        this.signingKey = Buffer.from(signingKey, 'hex');
+        this.trustProvider = trustProvider;
+        logger.info('Trust negotiation service initialized');
+    }
+    // ==========================================================================
+    // Trust Verification
+    // ==========================================================================
+    /**
+     * Verify caller trust for an A2A invocation
+     */
+    async verifyCallerTrust(callerCarId, calleeCarId, trustContext, requirements = DEFAULT_TRUST_REQUIREMENTS) {
+        const warnings = [];
+        // 1. Verify caller exists and is active
+        const callerInfo = await this.trustProvider.getAgentTrust(callerCarId);
+        if (!callerInfo) {
+            return {
+                verified: false,
+                effectiveTier: 0,
+                effectiveScore: 0,
+                reason: 'Caller agent not found',
+                warnings,
+            };
+        }
+        if (callerInfo.state !== 'active' && !callerInfo.state.startsWith('T')) {
+            return {
+                verified: false,
+                effectiveTier: 0,
+                effectiveScore: 0,
+                reason: `Caller agent in invalid state: ${callerInfo.state}`,
+                warnings,
+            };
+        }
+        // 2. Verify trust context matches actual trust
+        if (trustContext.callerTier !== callerInfo.tier) {
+            warnings.push(`Trust context tier (${trustContext.callerTier}) differs from actual (${callerInfo.tier})`);
+        }
+        // 3. Verify trust proof if provided
+        if (trustContext.trustProof) {
+            const proofValid = await this.verifyTrustProof(trustContext.trustProof, callerCarId);
+            if (!proofValid) {
+                return {
+                    verified: false,
+                    effectiveTier: 0,
+                    effectiveScore: 0,
+                    reason: 'Invalid trust proof',
+                    warnings,
+                };
+            }
+        }
+        // 4. Calculate effective trust (considering delegation)
+        let effectiveTier = callerInfo.tier;
+        let effectiveScore = callerInfo.score;
+        let delegationUsed;
+        if (trustContext.delegation) {
+            const delegationResult = await this.verifyDelegation(trustContext.delegation, callerCarId, calleeCarId);
+            if (delegationResult.valid) {
+                // Delegation caps the effective tier
+                effectiveTier = Math.min(effectiveTier, delegationResult.maxTier);
+                delegationUsed = trustContext.delegation;
+                logger.debug({ callerCarId, effectiveTier }, 'Using delegation for trust');
+            }
+            else {
+                warnings.push(`Delegation invalid: ${delegationResult.reason}`);
+            }
+        }
+        // 5. Apply chain-of-trust floor
+        if (trustContext.callChain.length > 0) {
+            const chainFloor = this.calculateChainTrustFloor(trustContext.callChain);
+            effectiveTier = Math.min(effectiveTier, chainFloor.tier);
+            effectiveScore = Math.min(effectiveScore, chainFloor.score);
+        }
+        // 6. Check against requirements
+        if (effectiveTier < requirements.minTier) {
+            return {
+                verified: false,
+                effectiveTier,
+                effectiveScore,
+                reason: `Trust tier ${effectiveTier} below required ${requirements.minTier}`,
+                warnings,
+            };
+        }
+        if (requirements.minScore && effectiveScore < requirements.minScore) {
+            return {
+                verified: false,
+                effectiveTier,
+                effectiveScore,
+                reason: `Trust score ${effectiveScore} below required ${requirements.minScore}`,
+                warnings,
+            };
+        }
+        // 7. Check required capabilities
+        for (const cap of requirements.requiredCapabilities) {
+            if (!callerInfo.capabilities.includes(cap)) {
+                return {
+                    verified: false,
+                    effectiveTier,
+                    effectiveScore,
+                    reason: `Missing required capability: ${cap}`,
+                    warnings,
+                };
+            }
+        }
+        // 8. Check chain depth
+        const chainDepth = trustContext.callChain.length;
+        if (requirements.maxChainDepth && chainDepth >= requirements.maxChainDepth) {
+            return {
+                verified: false,
+                effectiveTier,
+                effectiveScore,
+                reason: `Chain depth ${chainDepth} exceeds maximum ${requirements.maxChainDepth}`,
+                warnings,
+            };
+        }
+        logger.debug({ callerCarId, calleeCarId, effectiveTier, effectiveScore, chainDepth }, 'Trust verification passed');
+        return {
+            verified: true,
+            effectiveTier,
+            effectiveScore,
+            warnings,
+            delegationUsed,
+        };
+    }
+    /**
+     * Verify a trust proof
+     */
+    async verifyTrustProof(proof, expectedCarId) {
+        // Check CAR ID matches
+        if (proof.carId !== expectedCarId) {
+            logger.warn({ proofCarId: proof.carId, expectedCarId }, 'Trust proof CAR ID mismatch');
+            return false;
+        }
+        // Check expiration
+        const expiresAt = new Date(proof.expiresAt);
+        if (expiresAt < new Date()) {
+            logger.warn({ expiresAt }, 'Trust proof expired');
+            return false;
+        }
+        // Verify signature (delegate to provider)
+        const valid = await this.trustProvider.validateTrustProof(proof);
+        if (!valid) {
+            logger.warn({ carId: proof.carId }, 'Trust proof signature invalid');
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Generate a trust proof for an agent
+     */
+    async generateTrustProof(carId) {
+        const agentInfo = await this.trustProvider.getAgentTrust(carId);
+        if (!agentInfo) {
+            return null;
+        }
+        const issuedAt = new Date();
+        const expiresAt = new Date(issuedAt.getTime() + TRUST_PROOF_VALIDITY_SEC * 1000);
+        const proof = {
+            carId,
+            tier: agentInfo.tier,
+            score: agentInfo.score,
+            issuedAt: issuedAt.toISOString(),
+            expiresAt: expiresAt.toISOString(),
+            registry: 'a3i', // Agent Anchor registry
+        };
+        // Sign the proof
+        const signature = this.signProof(proof);
+        return {
+            ...proof,
+            signature,
+        };
+    }
+    /**
+     * Sign a trust proof
+     */
+    signProof(proof) {
+        const payload = JSON.stringify(proof);
+        const hmac = crypto.createHmac('sha256', this.signingKey);
+        hmac.update(payload);
+        return hmac.digest('hex');
+    }
+    // ==========================================================================
+    // Delegation Verification
+    // ==========================================================================
+    /**
+     * Verify a delegation token
+     */
+    async verifyDelegation(delegation, delegateCarId, targetCarId) {
+        // Check delegate matches
+        if (delegation.delegate !== delegateCarId) {
+            return { valid: false, maxTier: 0, reason: 'Delegate CAR ID mismatch' };
+        }
+        // Check expiration
+        const expiresAt = new Date(delegation.expiresAt);
+        if (expiresAt < new Date()) {
+            return { valid: false, maxTier: 0, reason: 'Delegation expired' };
+        }
+        // Check uses remaining
+        if (delegation.usesRemaining === 0) {
+            return { valid: false, maxTier: 0, reason: 'Delegation uses exhausted' };
+        }
+        // Check constraints
+        if (delegation.constraints) {
+            const { allowedTargets, blockedTargets, timeRestrictions, rateLimit } = delegation.constraints;
+            // Check allowed targets
+            if (allowedTargets && !allowedTargets.includes(targetCarId)) {
+                return { valid: false, maxTier: 0, reason: 'Target not in allowed list' };
+            }
+            // Check blocked targets
+            if (blockedTargets && blockedTargets.includes(targetCarId)) {
+                return { valid: false, maxTier: 0, reason: 'Target in blocked list' };
+            }
+            // Check time restrictions
+            if (timeRestrictions) {
+                const now = new Date();
+                const hour = now.getUTCHours(); // Simplified - should use timezone
+                if (!timeRestrictions.allowedHours.includes(hour)) {
+                    return { valid: false, maxTier: 0, reason: 'Outside allowed hours' };
+                }
+            }
+        }
+        // Check delegation chain length
+        const chainLength = this.getDelegationChainLength(delegation);
+        if (chainLength > MAX_DELEGATION_CHAIN) {
+            return { valid: false, maxTier: 0, reason: 'Delegation chain too long' };
+        }
+        // Verify delegator trust
+        const delegatorInfo = await this.trustProvider.getAgentTrust(delegation.delegator);
+        if (!delegatorInfo || delegatorInfo.tier < delegation.maxTier) {
+            return { valid: false, maxTier: 0, reason: 'Delegator trust insufficient for granted tier' };
+        }
+        return { valid: true, maxTier: delegation.maxTier };
+    }
+    /**
+     * Get delegation chain length
+     */
+    getDelegationChainLength(delegation) {
+        if (!delegation.chain || delegation.chain.length === 0) {
+            return 1;
+        }
+        return 1 + Math.max(...delegation.chain.map((d) => this.getDelegationChainLength(d)));
+    }
+    // ==========================================================================
+    // Chain of Trust
+    // ==========================================================================
+    /**
+     * Calculate trust floor from call chain
+     */
+    calculateChainTrustFloor(chain) {
+        if (chain.length === 0) {
+            return { tier: 7, score: 1000 };
+        }
+        const minTier = Math.min(...chain.map((link) => link.tier));
+        const minScore = Math.min(...chain.map((link) => link.score));
+        return { tier: minTier, score: minScore };
+    }
+    /**
+     * Build chain context for nested call
+     */
+    buildChainContext(callerCarId, callerTier, callerScore, action, requestId, parentContext) {
+        const newLink = {
+            carId: callerCarId,
+            tier: callerTier,
+            score: callerScore,
+            action,
+            timestamp: new Date().toISOString(),
+            requestId,
+        };
+        if (parentContext) {
+            // Extend existing chain
+            return {
+                rootRequestId: parentContext.rootRequestId,
+                depth: parentContext.depth + 1,
+                maxDepth: parentContext.maxDepth,
+                trustFloor: Math.min(parentContext.trustFloor, callerTier),
+                chain: [...parentContext.chain, newLink],
+            };
+        }
+        // Start new chain
+        return {
+            rootRequestId: requestId,
+            depth: 1,
+            maxDepth: MAX_CHAIN_DEPTH,
+            trustFloor: callerTier,
+            chain: [newLink],
+        };
+    }
+    /**
+     * Validate chain context
+     */
+    validateChainContext(context) {
+        // Check depth
+        if (context.depth > context.maxDepth) {
+            return { valid: false, reason: `Chain depth ${context.depth} exceeds max ${context.maxDepth}` };
+        }
+        if (context.depth > MAX_CHAIN_DEPTH) {
+            return { valid: false, reason: `Chain depth ${context.depth} exceeds system max ${MAX_CHAIN_DEPTH}` };
+        }
+        // Check chain consistency
+        if (context.chain.length !== context.depth) {
+            return { valid: false, reason: 'Chain length does not match depth' };
+        }
+        // Check trust floor consistency
+        const calculatedFloor = this.calculateChainTrustFloor(context.chain);
+        if (calculatedFloor.tier !== context.trustFloor) {
+            return { valid: false, reason: 'Trust floor mismatch' };
+        }
+        return { valid: true };
+    }
+    // ==========================================================================
+    // Trust Negotiation
+    // ==========================================================================
+    /**
+     * Negotiate trust requirements between caller and callee
+     */
+    async negotiate(callerCarId, calleeCarId, callerRequirements, calleeRequirements) {
+        // Get both agents' trust info
+        const callerInfo = await this.trustProvider.getAgentTrust(callerCarId);
+        const calleeInfo = await this.trustProvider.getAgentTrust(calleeCarId);
+        if (!callerInfo || !calleeInfo) {
+            return {
+                success: false,
+                reason: 'One or both agents not found',
+            };
+        }
+        // Check if caller meets callee's requirements
+        if (callerInfo.tier < calleeRequirements.minTier) {
+            return {
+                success: false,
+                reason: `Caller tier ${callerInfo.tier} below callee requirement ${calleeRequirements.minTier}`,
+                counterProposal: {
+                    ...calleeRequirements,
+                    minTier: callerInfo.tier,
+                },
+            };
+        }
+        // Check if callee meets caller's requirements
+        if (calleeInfo.tier < callerRequirements.minTier) {
+            return {
+                success: false,
+                reason: `Callee tier ${calleeInfo.tier} below caller requirement ${callerRequirements.minTier}`,
+                counterProposal: {
+                    ...callerRequirements,
+                    minTier: calleeInfo.tier,
+                },
+            };
+        }
+        // Merge requirements (take stricter of each)
+        const agreedRequirements = {
+            minTier: Math.max(callerRequirements.minTier, calleeRequirements.minTier),
+            minScore: Math.max(callerRequirements.minScore || 0, calleeRequirements.minScore || 0) || undefined,
+            requiredCapabilities: [
+                ...new Set([
+                    ...callerRequirements.requiredCapabilities,
+                    ...calleeRequirements.requiredCapabilities,
+                ]),
+            ],
+            requiredAttestations: [
+                ...new Set([
+                    ...(callerRequirements.requiredAttestations || []),
+                    ...(calleeRequirements.requiredAttestations || []),
+                ]),
+            ],
+            maxChainDepth: Math.min(callerRequirements.maxChainDepth || MAX_CHAIN_DEPTH, calleeRequirements.maxChainDepth || MAX_CHAIN_DEPTH),
+            requireMtls: callerRequirements.requireMtls || calleeRequirements.requireMtls,
+        };
+        logger.info({ callerCarId, calleeCarId, agreedTier: agreedRequirements.minTier }, 'Trust negotiation successful');
+        return {
+            success: true,
+            agreedRequirements,
+        };
+    }
+    /**
+     * Build TrustContext for an A2A call
+     */
+    async buildTrustContext(callerCarId, delegation, parentChain) {
+        const callerInfo = await this.trustProvider.getAgentTrust(callerCarId);
+        if (!callerInfo) {
+            return null;
+        }
+        const trustProof = await this.generateTrustProof(callerCarId);
+        return {
+            callerTier: callerInfo.tier,
+            callerScore: callerInfo.score,
+            callerTenant: callerInfo.tenantId,
+            trustProof: trustProof || undefined,
+            delegation,
+            callChain: parentChain?.chain || [],
+        };
+    }
+}
+// ============================================================================
+// Factory Functions
+// ============================================================================
+let instance = null;
+export function createTrustNegotiationService(signingKey, trustProvider) {
+    if (!instance) {
+        instance = new TrustNegotiationService(signingKey, trustProvider);
+    }
+    return instance;
+}
+export function getTrustNegotiationService() {
+    if (!instance) {
+        throw new Error('TrustNegotiationService not initialized');
+    }
+    return instance;
+}
+//# sourceMappingURL=trust-negotiation.js.map

package/dist/a2a/trust-negotiation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-negotiation.js","sourceRoot":"","sources":["../../src/a2a/trust-negotiation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAQL,0BAA0B,EAC1B,wBAAwB,EACxB,eAAe,EACf,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAkEpE,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,MAAM,OAAO,uBAAuB;IAC1B,UAAU,CAAS;IACnB,aAAa,CAAoB;IAEzC,YAAY,UAAkB,EAAE,aAAgC;QAC9D,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAED,6EAA6E;IAC7E,qBAAqB;IACrB,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,WAAmB,EACnB,WAAmB,EACnB,YAA0B,EAC1B,eAAkC,0BAA0B;QAE5D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,wCAAwC;QACxC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,aAAa,EAAE,CAAC;gBAChB,cAAc,EAAE,CAAC;gBACjB,MAAM,EAAE,wBAAwB;gBAChC,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACvE,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,aAAa,EAAE,CAAC;gBAChB,cAAc,EAAE,CAAC;gBACjB,MAAM,EAAE,kCAAkC,UAAU,CAAC,KAAK,EAAE;gBAC5D,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,IAAI,YAAY,CAAC,UAAU,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,uBAAuB,YAAY,CAAC,UAAU,0BAA0B,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;QAC5G,CAAC;QAED,oCAAoC;QACpC,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACrF,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,aAAa,EAAE,CAAC;oBAChB,cAAc,EAAE,CAAC;oBACjB,MAAM,EAAE,qBAAqB;oBAC7B,QAAQ;iBACT,CAAC;YACJ,CAAC;QACH,CAAC;QAED,wDAAwD;QACxD,IAAI,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC;QACpC,IAAI,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC;QACtC,IAAI,cAA2C,CAAC;QAEhD,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAClD,YAAY,CAAC,UAAU,EACvB,WAAW,EACX,WAAW,CACZ,CAAC;YAEF,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC3B,qCAAqC;gBACrC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAClE,cAAc,GAAG,YAAY,CAAC,UAAU,CAAC;gBACzC,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,4BAA4B,CAAC,CAAC;YAC7E,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,uBAAuB,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,YAAY,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACzE,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YACzD,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QAED,gCAAgC;QAChC,IAAI,aAAa,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC;YACzC,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,aAAa;gBACb,cAAc;gBACd,MAAM,EAAE,cAAc,aAAa,mBAAmB,YAAY,CAAC,OAAO,EAAE;gBAC5E,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,IAAI,cAAc,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;YACpE,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,aAAa;gBACb,cAAc;gBACd,MAAM,EAAE,eAAe,cAAc,mBAAmB,YAAY,CAAC,QAAQ,EAAE;gBAC/E,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,oBAAoB,EAAE,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,aAAa;oBACb,cAAc;oBACd,MAAM,EAAE,gCAAgC,GAAG,EAAE;oBAC7C,QAAQ;iBACT,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC;QACjD,IAAI,YAAY,CAAC,aAAa,IAAI,UAAU,IAAI,YAAY,CAAC,aAAa,EAAE,CAAC;YAC3E,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,aAAa;gBACb,cAAc;gBACd,MAAM,EAAE,eAAe,UAAU,oBAAoB,YAAY,CAAC,aAAa,EAAE;gBACjF,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,EACvE,2BAA2B,CAC5B,CAAC;QAEF,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,aAAa;YACb,cAAc;YACd,QAAQ;YACR,cAAc;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAiB,EAAE,aAAqB;QAC7D,uBAAuB;QACvB,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,6BAA6B,CAAC,CAAC;YACvF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,mBAAmB;QACnB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,+BAA+B,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAa;QACpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,wBAAwB,GAAG,IAAI,CAAC,CAAC;QAEjF,MAAM,KAAK,GAAkC;YAC3C,KAAK;YACL,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;YAChC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,QAAQ,EAAE,KAAK,EAAE,wBAAwB;SAC1C,CAAC;QAEF,iBAAiB;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAExC,OAAO;YACL,GAAG,KAAK;YACR,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,KAAoC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,6EAA6E;IAC7E,0BAA0B;IAC1B,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,UAA2B,EAC3B,aAAqB,EACrB,WAAmB;QAEnB,yBAAyB;QACzB,IAAI,UAAU,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAC1E,CAAC;QAED,mBAAmB;QACnB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QACpE,CAAC;QAED,uBAAuB;QACvB,IAAI,UAAU,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QAC3E,CAAC;QAED,oBAAoB;QACpB,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3B,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC;YAE/F,wBAAwB;YACxB,IAAI,cAAc,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;YAC5E,CAAC;YAED,wBAAwB;YACxB,IAAI,cAAc,IAAI,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;YACxE,CAAC;YAED,0BAA0B;YAC1B,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,mCAAmC;gBACnE,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;gBACvE,CAAC;YACH,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,WAAW,GAAG,oBAAoB,EAAE,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QAC3E,CAAC;QAED,yBAAyB;QACzB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACnF,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;YAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;QAC/F,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,UAA2B;QAC1D,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,6EAA6E;IAC7E,iBAAiB;IACjB,6EAA6E;IAE7E;;OAEG;IACH,wBAAwB,CAAC,KAAkB;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAE9D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,WAAmB,EACnB,UAAkB,EAClB,WAAmB,EACnB,MAAc,EACd,SAAiB,EACjB,aAA4B;QAE5B,MAAM,OAAO,GAAc;YACzB,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,WAAW;YAClB,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS;SACV,CAAC;QAEF,IAAI,aAAa,EAAE,CAAC;YAClB,wBAAwB;YACxB,OAAO;gBACL,aAAa,EAAE,aAAa,CAAC,aAAa;gBAC1C,KAAK,EAAE,aAAa,CAAC,KAAK,GAAG,CAAC;gBAC9B,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC;gBAC1D,KAAK,EAAE,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC;aACzC,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,OAAO;YACL,aAAa,EAAE,SAAS;YACxB,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,eAAe;YACzB,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,CAAC,OAAO,CAAC;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAqB;QACxC,cAAc;QACd,IAAI,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,OAAO,CAAC,KAAK,gBAAgB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClG,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,GAAG,eAAe,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,OAAO,CAAC,KAAK,uBAAuB,eAAe,EAAE,EAAE,CAAC;QACxG,CAAC;QAED,0BAA0B;QAC1B,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QACvE,CAAC;QAED,gCAAgC;QAChC,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,eAAe,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;YAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAC1D,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,6EAA6E;IAC7E,oBAAoB;IACpB,6EAA6E;IAE7E;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,WAAmB,EACnB,kBAAqC,EACrC,kBAAqC;QAErC,8BAA8B;QAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAEvE,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,8BAA8B;aACvC,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,IAAI,UAAU,CAAC,IAAI,GAAG,kBAAkB,CAAC,OAAO,EAAE,CAAC;YACjD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,UAAU,CAAC,IAAI,6BAA6B,kBAAkB,CAAC,OAAO,EAAE;gBAC/F,eAAe,EAAE;oBACf,GAAG,kBAAkB;oBACrB,OAAO,EAAE,UAAU,CAAC,IAAI;iBACzB;aACF,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,IAAI,UAAU,CAAC,IAAI,GAAG,kBAAkB,CAAC,OAAO,EAAE,CAAC;YACjD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,UAAU,CAAC,IAAI,6BAA6B,kBAAkB,CAAC,OAAO,EAAE;gBAC/F,eAAe,EAAE;oBACf,GAAG,kBAAkB;oBACrB,OAAO,EAAE,UAAU,CAAC,IAAI;iBACzB;aACF,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,MAAM,kBAAkB,GAAsB;YAC5C,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC;YACzE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAChB,kBAAkB,CAAC,QAAQ,IAAI,CAAC,EAChC,kBAAkB,CAAC,QAAQ,IAAI,CAAC,CACjC,IAAI,SAAS;YACd,oBAAoB,EAAE;gBACpB,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,kBAAkB,CAAC,oBAAoB;oBAC1C,GAAG,kBAAkB,CAAC,oBAAoB;iBAC3C,CAAC;aACH;YACD,oBAAoB,EAAE;gBACpB,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,CAAC,kBAAkB,CAAC,oBAAoB,IAAI,EAAE,CAAC;oBAClD,GAAG,CAAC,kBAAkB,CAAC,oBAAoB,IAAI,EAAE,CAAC;iBACnD,CAAC;aACH;YACD,aAAa,EAAE,IAAI,CAAC,GAAG,CACrB,kBAAkB,CAAC,aAAa,IAAI,eAAe,EACnD,kBAAkB,CAAC,aAAa,IAAI,eAAe,CACpD;YACD,WAAW,EAAE,kBAAkB,CAAC,WAAW,IAAI,kBAAkB,CAAC,WAAW;SAC9E,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,CAAC,OAAO,EAAE,EACpE,8BAA8B,CAC/B,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,WAAmB,EACnB,UAA4B,EAC5B,WAA0B;QAE1B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAE9D,OAAO;YACL,UAAU,EAAE,UAAU,CAAC,IAAI;YAC3B,WAAW,EAAE,UAAU,CAAC,KAAK;YAC7B,YAAY,EAAE,UAAU,CAAC,QAAQ;YACjC,UAAU,EAAE,UAAU,IAAI,SAAS;YACnC,UAAU;YACV,SAAS,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;SACpC,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,IAAI,QAAQ,GAAmC,IAAI,CAAC;AAEpD,MAAM,UAAU,6BAA6B,CAC3C,UAAkB,EAClB,aAAgC;IAEhC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAI,uBAAuB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}