@vurb/core 3.2.0

package/dist/introspection/ContractDiff.js

@@ -0,0 +1,466 @@
+// ============================================================================
+// Diff Engine
+// ============================================================================
+const SEVERITY_ORDER = {
+    BREAKING: 3,
+    RISKY: 2,
+    SAFE: 1,
+    COSMETIC: 0,
+};
+/**
+ * Compute the semantic diff between two snapshots of a tool contract.
+ *
+ * @param before - Previous contract snapshot
+ * @param after  - Current contract snapshot
+ * @returns Classified, sorted list of deltas
+ */
+export function diffContracts(before, after) {
+    const deltas = [];
+    // Surface diff
+    diffSurface(before, after, deltas);
+    // Action-level diff
+    diffActions(before, after, deltas);
+    // Behavior diff
+    diffBehavior(before.behavior, after.behavior, deltas);
+    // Token Economics diff
+    diffTokenEconomics(before.tokenEconomics, after.tokenEconomics, deltas);
+    // Entitlements diff
+    diffEntitlements(before.entitlements, after.entitlements, deltas);
+    // Sort by severity (BREAKING first)
+    deltas.sort((a, b) => SEVERITY_ORDER[b.severity] - SEVERITY_ORDER[a.severity]);
+    const maxSeverity = deltas.length > 0
+        ? deltas[0].severity
+        : 'COSMETIC';
+    const digestChanged = before.behavior.egressSchemaDigest !== after.behavior.egressSchemaDigest
+        || before.behavior.systemRulesFingerprint !== after.behavior.systemRulesFingerprint;
+    return {
+        toolName: after.surface.name,
+        deltas,
+        maxSeverity,
+        digestChanged,
+        isBackwardsCompatible: maxSeverity !== 'BREAKING',
+    };
+}
+/**
+ * Diff tool surfaces but exclude actions (handled separately).
+ * @internal
+ */
+function diffSurface(before, after, out) {
+    if (before.surface.name !== after.surface.name) {
+        out.push({
+            category: 'surface',
+            field: 'name',
+            severity: 'BREAKING',
+            description: 'Tool name changed',
+            before: before.surface.name,
+            after: after.surface.name,
+        });
+    }
+    if (before.surface.description !== after.surface.description) {
+        out.push({
+            category: 'surface',
+            field: 'description',
+            severity: 'COSMETIC',
+            description: 'Tool description changed',
+            before: before.surface.description ?? null,
+            after: after.surface.description ?? null,
+        });
+    }
+    if (before.surface.inputSchemaDigest !== after.surface.inputSchemaDigest) {
+        out.push({
+            category: 'surface',
+            field: 'inputSchemaDigest',
+            severity: 'BREAKING',
+            description: 'Input schema changed — previously calibrated LLM arguments may fail',
+            before: before.surface.inputSchemaDigest,
+            after: after.surface.inputSchemaDigest,
+        });
+    }
+    // Tags
+    const removedTags = before.surface.tags.filter(t => !after.surface.tags.includes(t));
+    const addedTags = after.surface.tags.filter(t => !before.surface.tags.includes(t));
+    if (removedTags.length > 0 || addedTags.length > 0) {
+        out.push({
+            category: 'surface',
+            field: 'tags',
+            severity: removedTags.length > 0 ? 'SAFE' : 'COSMETIC',
+            description: `Tags changed: ${removedTags.length > 0 ? `removed [${removedTags.join(', ')}]` : ''} ${addedTags.length > 0 ? `added [${addedTags.join(', ')}]` : ''}`.trim(),
+            before: JSON.stringify(before.surface.tags),
+            after: JSON.stringify(after.surface.tags),
+        });
+    }
+}
+/**
+ * Diff action-level contracts. Detects added, removed, and modified actions.
+ * @internal
+ */
+function diffActions(before, after, out) {
+    const beforeKeys = new Set(Object.keys(before.surface.actions));
+    const afterKeys = new Set(Object.keys(after.surface.actions));
+    // Removed actions → BREAKING
+    for (const key of beforeKeys) {
+        if (!afterKeys.has(key)) {
+            out.push({
+                category: 'surface.action',
+                field: `actions.${key}`,
+                severity: 'BREAKING',
+                description: `Action "${key}" was removed`,
+                before: key,
+                after: null,
+            });
+        }
+    }
+    // Added actions → SAFE
+    for (const key of afterKeys) {
+        if (!beforeKeys.has(key)) {
+            out.push({
+                category: 'surface.action',
+                field: `actions.${key}`,
+                severity: 'SAFE',
+                description: `Action "${key}" was added`,
+                before: null,
+                after: key,
+            });
+        }
+    }
+    // Modified actions
+    for (const key of beforeKeys) {
+        if (afterKeys.has(key)) {
+            diffSingleAction(key, before.surface.actions[key], after.surface.actions[key], out);
+        }
+    }
+}
+/**
+ * Diff a single action's contract fields.
+ * @internal
+ */
+function diffSingleAction(actionKey, before, after, out) {
+    if (before.destructive !== after.destructive) {
+        out.push({
+            category: 'surface.action',
+            field: `actions.${actionKey}.destructive`,
+            severity: 'BREAKING',
+            description: `Action "${actionKey}" destructive flag changed: ${before.destructive} → ${after.destructive}`,
+            before: String(before.destructive),
+            after: String(after.destructive),
+        });
+    }
+    if (before.idempotent !== after.idempotent) {
+        out.push({
+            category: 'surface.action',
+            field: `actions.${actionKey}.idempotent`,
+            severity: 'RISKY',
+            description: `Action "${actionKey}" idempotent flag changed`,
+            before: String(before.idempotent),
+            after: String(after.idempotent),
+        });
+    }
+    if (before.readOnly !== after.readOnly) {
+        out.push({
+            category: 'surface.action',
+            field: `actions.${actionKey}.readOnly`,
+            severity: 'BREAKING',
+            description: `Action "${actionKey}" readOnly flag changed: ${before.readOnly} → ${after.readOnly}`,
+            before: String(before.readOnly),
+            after: String(after.readOnly),
+        });
+    }
+    // Required fields
+    const removedFields = before.requiredFields.filter(f => !after.requiredFields.includes(f));
+    const addedFields = after.requiredFields.filter(f => !before.requiredFields.includes(f));
+    if (removedFields.length > 0) {
+        out.push({
+            category: 'surface.action',
+            field: `actions.${actionKey}.requiredFields`,
+            severity: 'SAFE',
+            description: `Action "${actionKey}" no longer requires: [${removedFields.join(', ')}]`,
+            before: JSON.stringify(before.requiredFields),
+            after: JSON.stringify(after.requiredFields),
+        });
+    }
+    if (addedFields.length > 0) {
+        out.push({
+            category: 'surface.action',
+            field: `actions.${actionKey}.requiredFields`,
+            severity: 'BREAKING',
+            description: `Action "${actionKey}" now requires new fields: [${addedFields.join(', ')}]`,
+            before: JSON.stringify(before.requiredFields),
+            after: JSON.stringify(after.requiredFields),
+        });
+    }
+    // Presenter change
+    if (before.presenterName !== after.presenterName) {
+        out.push({
+            category: 'surface.action',
+            field: `actions.${actionKey}.presenterName`,
+            severity: before.presenterName && !after.presenterName ? 'BREAKING' : 'RISKY',
+            description: `Action "${actionKey}" Presenter changed: ${before.presenterName ?? 'none'} → ${after.presenterName ?? 'none'}`,
+            before: before.presenterName ?? null,
+            after: after.presenterName ?? null,
+        });
+    }
+    if (before.inputSchemaDigest !== after.inputSchemaDigest) {
+        out.push({
+            category: 'surface.action',
+            field: `actions.${actionKey}.inputSchemaDigest`,
+            severity: 'RISKY',
+            description: `Action "${actionKey}" input schema changed`,
+            before: before.inputSchemaDigest,
+            after: after.inputSchemaDigest,
+        });
+    }
+}
+/**
+ * Diff behavioral contracts.
+ * @internal
+ */
+function diffBehavior(before, after, out) {
+    // Egress schema
+    if (before.egressSchemaDigest !== after.egressSchemaDigest) {
+        out.push({
+            category: 'behavior.egress',
+            field: 'egressSchemaDigest',
+            severity: 'BREAKING',
+            description: 'Presenter egress schema changed — LLM response parsing may break',
+            before: before.egressSchemaDigest,
+            after: after.egressSchemaDigest,
+        });
+    }
+    // System rules
+    if (before.systemRulesFingerprint !== after.systemRulesFingerprint) {
+        out.push({
+            category: 'behavior.rules',
+            field: 'systemRulesFingerprint',
+            severity: 'BREAKING',
+            description: 'System rules changed — LLM behavioral calibration invalidated',
+            before: before.systemRulesFingerprint,
+            after: after.systemRulesFingerprint,
+        });
+    }
+    // Cognitive guardrails
+    if (before.cognitiveGuardrails.agentLimitMax !== after.cognitiveGuardrails.agentLimitMax) {
+        const severity = after.cognitiveGuardrails.agentLimitMax === null
+            ? 'RISKY' // Removed limit → risk of context flooding
+            : 'SAFE';
+        out.push({
+            category: 'behavior.guardrails',
+            field: 'agentLimitMax',
+            severity,
+            description: `Agent limit changed: ${before.cognitiveGuardrails.agentLimitMax ?? 'unlimited'} → ${after.cognitiveGuardrails.agentLimitMax ?? 'unlimited'}`,
+            before: String(before.cognitiveGuardrails.agentLimitMax),
+            after: String(after.cognitiveGuardrails.agentLimitMax),
+        });
+    }
+    if (before.cognitiveGuardrails.egressMaxBytes !== after.cognitiveGuardrails.egressMaxBytes) {
+        const severity = after.cognitiveGuardrails.egressMaxBytes === null
+            ? 'RISKY' // Removed cap → risk of payload inflation
+            : 'SAFE';
+        out.push({
+            category: 'behavior.guardrails',
+            field: 'egressMaxBytes',
+            severity,
+            description: `Egress max bytes changed: ${before.cognitiveGuardrails.egressMaxBytes ?? 'unlimited'} → ${after.cognitiveGuardrails.egressMaxBytes ?? 'unlimited'}`,
+            before: String(before.cognitiveGuardrails.egressMaxBytes),
+            after: String(after.cognitiveGuardrails.egressMaxBytes),
+        });
+    }
+    // Middleware chain
+    const beforeMw = before.middlewareChain.join(',');
+    const afterMw = after.middlewareChain.join(',');
+    if (beforeMw !== afterMw) {
+        out.push({
+            category: 'behavior.middleware',
+            field: 'middlewareChain',
+            severity: 'RISKY',
+            description: 'Middleware chain changed — execution semantics may differ',
+            before: beforeMw || null,
+            after: afterMw || null,
+        });
+    }
+    // State sync
+    if (before.stateSyncFingerprint !== after.stateSyncFingerprint) {
+        out.push({
+            category: 'behavior.stateSync',
+            field: 'stateSyncFingerprint',
+            severity: 'RISKY',
+            description: 'State sync policy changed',
+            before: before.stateSyncFingerprint,
+            after: after.stateSyncFingerprint,
+        });
+    }
+    // Affordance topology
+    const beforeAffordances = before.affordanceTopology.join(',');
+    const afterAffordances = after.affordanceTopology.join(',');
+    if (beforeAffordances !== afterAffordances) {
+        out.push({
+            category: 'behavior.affordances',
+            field: 'affordanceTopology',
+            severity: 'RISKY',
+            description: 'Affordance topology changed — suggested action navigation graph differs',
+            before: beforeAffordances || null,
+            after: afterAffordances || null,
+        });
+    }
+    // Concurrency
+    if (before.concurrencyFingerprint !== after.concurrencyFingerprint) {
+        out.push({
+            category: 'behavior.stateSync',
+            field: 'concurrencyFingerprint',
+            severity: 'RISKY',
+            description: 'Concurrency configuration changed',
+            before: before.concurrencyFingerprint,
+            after: after.concurrencyFingerprint,
+        });
+    }
+    // Embedded presenters
+    const beforePresenters = before.embeddedPresenters.join(',');
+    const afterPresenters = after.embeddedPresenters.join(',');
+    if (beforePresenters !== afterPresenters) {
+        out.push({
+            category: 'behavior.egress',
+            field: 'embeddedPresenters',
+            severity: 'RISKY',
+            description: 'Embedded Presenter set changed — response composition differs',
+            before: beforePresenters || null,
+            after: afterPresenters || null,
+        });
+    }
+}
+/**
+ * Diff token economics profiles.
+ * @internal
+ */
+function diffTokenEconomics(before, after, out) {
+    if (before.inflationRisk !== after.inflationRisk) {
+        const escalated = SEVERITY_ORDER[riskToSeverity(after.inflationRisk)]
+            > SEVERITY_ORDER[riskToSeverity(before.inflationRisk)];
+        out.push({
+            category: 'tokenEconomics',
+            field: 'inflationRisk',
+            severity: escalated ? 'BREAKING' : 'SAFE',
+            description: `Cognitive overload risk changed: ${before.inflationRisk} → ${after.inflationRisk}`,
+            before: before.inflationRisk,
+            after: after.inflationRisk,
+        });
+    }
+    if (before.unboundedCollection !== after.unboundedCollection) {
+        out.push({
+            category: 'tokenEconomics',
+            field: 'unboundedCollection',
+            severity: after.unboundedCollection ? 'RISKY' : 'SAFE',
+            description: `Unbounded collection flag: ${before.unboundedCollection} → ${after.unboundedCollection}`,
+            before: String(before.unboundedCollection),
+            after: String(after.unboundedCollection),
+        });
+    }
+}
+/**
+ * Map inflation risk to comparable severity.
+ * @internal
+ */
+function riskToSeverity(risk) {
+    switch (risk) {
+        case 'critical': return 'BREAKING';
+        case 'high': return 'RISKY';
+        case 'medium': return 'SAFE';
+        case 'low': return 'COSMETIC';
+    }
+}
+/**
+ * Diff handler entitlements.
+ * @internal
+ */
+function diffEntitlements(before, after, out) {
+    const entitlementFlags = ['filesystem', 'network', 'subprocess', 'crypto', 'codeEvaluation'];
+    for (const flag of entitlementFlags) {
+        if (!before[flag] && after[flag]) {
+            out.push({
+                category: 'entitlements',
+                field: flag,
+                severity: 'BREAKING',
+                description: `Handler gained "${flag}" entitlement — blast radius expanded`,
+                before: 'false',
+                after: 'true',
+            });
+        }
+        else if (before[flag] && !after[flag]) {
+            out.push({
+                category: 'entitlements',
+                field: flag,
+                severity: 'SAFE',
+                description: `Handler lost "${flag}" entitlement — blast radius reduced`,
+                before: 'true',
+                after: 'false',
+            });
+        }
+    }
+}
+// ============================================================================
+// Diff Formatting
+// ============================================================================
+/**
+ * Format a diff result as a human-readable report.
+ *
+ * Designed for both terminal output and injection into
+ * LLM correction prompts (Self-Healing Context).
+ */
+export function formatDiffReport(result) {
+    if (result.deltas.length === 0) {
+        return `[${result.toolName}] No contract changes detected.`;
+    }
+    const lines = [
+        `[${result.toolName}] Contract diff: ${result.deltas.length} change(s), max severity: ${result.maxSeverity}`,
+        '',
+    ];
+    for (const delta of result.deltas) {
+        lines.push(`  [${delta.severity}] ${delta.field}: ${delta.description}`);
+        lines.push(`         ${formatArrow(delta)}`);
+    }
+    return lines.join('\n');
+}
+/**
+ * Format deltas as XML for injection into LLM correction prompts.
+ * Compatible with ValidationErrorFormatter's XML format.
+ */
+export function formatDeltasAsXml(deltas) {
+    if (deltas.length === 0)
+        return '';
+    const lines = ['<contract_changes>'];
+    for (const delta of deltas) {
+        lines.push(`  <change severity="${escapeXml(delta.severity)}" field="${escapeXml(delta.field)}">`);
+        lines.push(`    <description>${escapeXml(delta.description)}</description>`);
+        if (delta.before !== null)
+            lines.push(`    <before>${escapeXml(delta.before)}</before>`);
+        if (delta.after !== null)
+            lines.push(`    <after>${escapeXml(delta.after)}</after>`);
+        lines.push('  </change>');
+    }
+    lines.push('</contract_changes>');
+    return lines.join('\n');
+}
+// ============================================================================
+// Utility
+// ============================================================================
+function truncate(s, maxLen) {
+    return s.length > maxLen ? s.slice(0, maxLen - 3) + '...' : s;
+}
+/**
+ * Format the before→after arrow for a contract delta.
+ * @internal
+ */
+function formatArrow(delta) {
+    if (delta.before !== null && delta.after !== null) {
+        return `${truncate(delta.before, 40)} → ${truncate(delta.after, 40)}`;
+    }
+    return delta.after !== null
+        ? `(added) ${truncate(delta.after, 40)}`
+        : `(removed) ${truncate(delta.before, 40)}`;
+}
+function escapeXml(s) {
+    return s
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;');
+}
+//# sourceMappingURL=ContractDiff.js.map

package/dist/introspection/ContractDiff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContractDiff.js","sourceRoot":"","sources":["../../src/introspection/ContractDiff.ts"],"names":[],"mappings":"AAyFA,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,cAAc,GAAkC;IAClD,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACd,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CACzB,MAAoB,EACpB,KAAmB;IAEnB,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,eAAe;IACf,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAEnC,oBAAoB;IACpB,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAEnC,gBAAgB;IAChB,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEtD,uBAAuB;IACvB,kBAAkB,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAExE,oBAAoB;IACpB,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAElE,oCAAoC;IACpC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE/E,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,QAAQ;QACrB,CAAC,CAAC,UAA2B,CAAC;IAElC,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,kBAAkB,KAAK,KAAK,CAAC,QAAQ,CAAC,kBAAkB;WACvF,MAAM,CAAC,QAAQ,CAAC,sBAAsB,KAAK,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAExF,OAAO;QACH,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;QAC5B,MAAM;QACN,WAAW;QACX,aAAa;QACb,qBAAqB,EAAE,WAAW,KAAK,UAAU;KACpD,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAChB,MAAoB,EACpB,KAAmB,EACnB,GAAoB;IAEpB,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,mBAAmB;YAChC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YAC3B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;SAC5B,CAAC,CAAC;IACP,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,0BAA0B;YACvC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI;YAC1C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI;SAC3C,CAAC,CAAC;IACP,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,KAAK,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,qEAAqE;YAClF,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,iBAAiB;YACxC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;SACzC,CAAC,CAAC;IACP,CAAC;IAED,OAAO;IACP,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU;YACtD,WAAW,EAAE,iBAAiB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE;YAC3K,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAC3C,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAChB,MAAoB,EACpB,KAAmB,EACnB,GAAoB;IAEpB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAE9D,6BAA6B;IAC7B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC;gBACL,QAAQ,EAAE,gBAAgB;gBAC1B,KAAK,EAAE,WAAW,GAAG,EAAE;gBACvB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,WAAW,GAAG,eAAe;gBAC1C,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,uBAAuB;IACvB,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC;gBACL,QAAQ,EAAE,gBAAgB;gBAC1B,KAAK,EAAE,WAAW,GAAG,EAAE;gBACvB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,WAAW,GAAG,aAAa;gBACxC,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,GAAG;aACb,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,gBAAgB,CACZ,GAAG,EACH,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAE,EAC5B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAE,EAC3B,GAAG,CACN,CAAC;QACN,CAAC;IACL,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CACrB,SAAiB,EACjB,MAAsB,EACtB,KAAqB,EACrB,GAAoB;IAEpB,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,WAAW,SAAS,cAAc;YACzC,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,WAAW,SAAS,+BAA+B,MAAM,CAAC,WAAW,MAAM,KAAK,CAAC,WAAW,EAAE;YAC3G,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;YAClC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;SACnC,CAAC,CAAC;IACP,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,WAAW,SAAS,aAAa;YACxC,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,WAAW,SAAS,2BAA2B;YAC5D,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;SAClC,CAAC,CAAC;IACP,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,WAAW,SAAS,WAAW;YACtC,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,WAAW,SAAS,4BAA4B,MAAM,CAAC,QAAQ,MAAM,KAAK,CAAC,QAAQ,EAAE;YAClG,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;SAChC,CAAC,CAAC;IACP,CAAC;IAED,kBAAkB;IAClB,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,WAAW,SAAS,iBAAiB;YAC5C,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,WAAW,SAAS,0BAA0B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACtF,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;YAC7C,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC;SAC9C,CAAC,CAAC;IACP,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,WAAW,SAAS,iBAAiB;YAC5C,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,WAAW,SAAS,+BAA+B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACzF,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;YAC7C,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC;SAC9C,CAAC,CAAC;IACP,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,WAAW,SAAS,gBAAgB;YAC3C,QAAQ,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;YAC7E,WAAW,EAAE,WAAW,SAAS,wBAAwB,MAAM,CAAC,aAAa,IAAI,MAAM,MAAM,KAAK,CAAC,aAAa,IAAI,MAAM,EAAE;YAC5H,MAAM,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;YACpC,KAAK,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;SACrC,CAAC,CAAC;IACP,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,WAAW,SAAS,oBAAoB;YAC/C,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,WAAW,SAAS,wBAAwB;YACzD,MAAM,EAAE,MAAM,CAAC,iBAAiB;YAChC,KAAK,EAAE,KAAK,CAAC,iBAAiB;SACjC,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CACjB,MAAoB,EACpB,KAAmB,EACnB,GAAoB;IAEpB,gBAAgB;IAChB,IAAI,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,iBAAiB;YAC3B,KAAK,EAAE,oBAAoB;YAC3B,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,kEAAkE;YAC/E,MAAM,EAAE,MAAM,CAAC,kBAAkB;YACjC,KAAK,EAAE,KAAK,CAAC,kBAAkB;SAClC,CAAC,CAAC;IACP,CAAC;IAED,eAAe;IACf,IAAI,MAAM,CAAC,sBAAsB,KAAK,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,wBAAwB;YAC/B,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,+DAA+D;YAC5E,MAAM,EAAE,MAAM,CAAC,sBAAsB;YACrC,KAAK,EAAE,KAAK,CAAC,sBAAsB;SACtC,CAAC,CAAC;IACP,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,mBAAmB,CAAC,aAAa,KAAK,KAAK,CAAC,mBAAmB,CAAC,aAAa,EAAE,CAAC;QACvF,MAAM,QAAQ,GAAkB,KAAK,CAAC,mBAAmB,CAAC,aAAa,KAAK,IAAI;YAC5E,CAAC,CAAC,OAAO,CAAC,2CAA2C;YACrD,CAAC,CAAC,MAAM,CAAC;QACb,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,qBAAqB;YAC/B,KAAK,EAAE,eAAe;YACtB,QAAQ;YACR,WAAW,EAAE,wBAAwB,MAAM,CAAC,mBAAmB,CAAC,aAAa,IAAI,WAAW,MAAM,KAAK,CAAC,mBAAmB,CAAC,aAAa,IAAI,WAAW,EAAE;YAC1J,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC;YACxD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,aAAa,CAAC;SACzD,CAAC,CAAC;IACP,CAAC;IAED,IAAI,MAAM,CAAC,mBAAmB,CAAC,cAAc,KAAK,KAAK,CAAC,mBAAmB,CAAC,cAAc,EAAE,CAAC;QACzF,MAAM,QAAQ,GAAkB,KAAK,CAAC,mBAAmB,CAAC,cAAc,KAAK,IAAI;YAC7E,CAAC,CAAC,OAAO,CAAC,0CAA0C;YACpD,CAAC,CAAC,MAAM,CAAC;QACb,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,qBAAqB;YAC/B,KAAK,EAAE,gBAAgB;YACvB,QAAQ;YACR,WAAW,EAAE,6BAA6B,MAAM,CAAC,mBAAmB,CAAC,cAAc,IAAI,WAAW,MAAM,KAAK,CAAC,mBAAmB,CAAC,cAAc,IAAI,WAAW,EAAE;YACjK,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC;YACzD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC;SAC1D,CAAC,CAAC;IACP,CAAC;IAED,mBAAmB;IACnB,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,qBAAqB;YAC/B,KAAK,EAAE,iBAAiB;YACxB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,2DAA2D;YACxE,MAAM,EAAE,QAAQ,IAAI,IAAI;YACxB,KAAK,EAAE,OAAO,IAAI,IAAI;SACzB,CAAC,CAAC;IACP,CAAC;IAED,aAAa;IACb,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,oBAAoB;YAC9B,KAAK,EAAE,sBAAsB;YAC7B,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,2BAA2B;YACxC,MAAM,EAAE,MAAM,CAAC,oBAAoB;YACnC,KAAK,EAAE,KAAK,CAAC,oBAAoB;SACpC,CAAC,CAAC;IACP,CAAC;IAED,sBAAsB;IACtB,MAAM,iBAAiB,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,gBAAgB,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,iBAAiB,KAAK,gBAAgB,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,sBAAsB;YAChC,KAAK,EAAE,oBAAoB;YAC3B,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,yEAAyE;YACtF,MAAM,EAAE,iBAAiB,IAAI,IAAI;YACjC,KAAK,EAAE,gBAAgB,IAAI,IAAI;SAClC,CAAC,CAAC;IACP,CAAC;IAED,cAAc;IACd,IAAI,MAAM,CAAC,sBAAsB,KAAK,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,oBAAoB;YAC9B,KAAK,EAAE,wBAAwB;YAC/B,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,mCAAmC;YAChD,MAAM,EAAE,MAAM,CAAC,sBAAsB;YACrC,KAAK,EAAE,KAAK,CAAC,sBAAsB;SACtC,CAAC,CAAC;IACP,CAAC;IAED,sBAAsB;IACtB,MAAM,gBAAgB,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,gBAAgB,KAAK,eAAe,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,iBAAiB;YAC3B,KAAK,EAAE,oBAAoB;YAC3B,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,+DAA+D;YAC5E,MAAM,EAAE,gBAAgB,IAAI,IAAI;YAChC,KAAK,EAAE,eAAe,IAAI,IAAI;SACjC,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CACvB,MAA6B,EAC7B,KAA4B,EAC5B,GAAoB;IAEpB,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;cAC/D,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;QAE3D,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;YACzC,WAAW,EAAE,oCAAoC,MAAM,CAAC,aAAa,MAAM,KAAK,CAAC,aAAa,EAAE;YAChG,MAAM,EAAE,MAAM,CAAC,aAAa;YAC5B,KAAK,EAAE,KAAK,CAAC,aAAa;SAC7B,CAAC,CAAC;IACP,CAAC;IAED,IAAI,MAAM,CAAC,mBAAmB,KAAK,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE,gBAAgB;YAC1B,KAAK,EAAE,qBAAqB;YAC5B,QAAQ,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YACtD,WAAW,EAAE,8BAA8B,MAAM,CAAC,mBAAmB,MAAM,KAAK,CAAC,mBAAmB,EAAE;YACtG,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAC1C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC;SAC3C,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,IAA4C;IAChE,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;QACnC,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC;QAC5B,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC;QAC7B,KAAK,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC;IAClC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CACrB,MAA2B,EAC3B,KAA0B,EAC1B,GAAoB;IAEpB,MAAM,gBAAgB,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAU,CAAC;IAEtG,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC;gBACL,QAAQ,EAAE,cAAc;gBACxB,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,mBAAmB,IAAI,uCAAuC;gBAC3E,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,MAAM;aAChB,CAAC,CAAC;QACP,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC;gBACL,QAAQ,EAAE,cAAc;gBACxB,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,iBAAiB,IAAI,sCAAsC;gBACxE,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,OAAO;aACjB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA0B;IACvD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,MAAM,CAAC,QAAQ,iCAAiC,CAAC;IAChE,CAAC;IAED,MAAM,KAAK,GAAa;QACpB,IAAI,MAAM,CAAC,QAAQ,oBAAoB,MAAM,CAAC,MAAM,CAAC,MAAM,6BAA6B,MAAM,CAAC,WAAW,EAAE;QAC5G,EAAE;KACL,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAgC;IAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAa,CAAC,oBAAoB,CAAC,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnG,KAAK,CAAC,IAAI,CAAC,oBAAoB,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACzF,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrF,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,SAAS,QAAQ,CAAC,CAAS,EAAE,MAAc;IACvC,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,KAAoB;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,KAAK,IAAI;QACvB,CAAC,CAAC,WAAW,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE;QACxC,CAAC,CAAC,aAAa,QAAQ,CAAC,KAAK,CAAC,MAAO,EAAE,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IACxB,OAAO,CAAC;SACH,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACjC,CAAC"}

package/dist/introspection/CryptoAttestation.d.ts

@@ -0,0 +1,143 @@
+import type { ServerDigest } from './BehaviorDigest.js';
+/**
+ * Configuration for zero-trust attestation.
+ *
+ * Passed to `AttachOptions.zeroTrust` in ServerAttachment.
+ */
+export interface ZeroTrustConfig {
+    /**
+     * The signing strategy to use.
+     * - `'hmac'` — HMAC-SHA256 with a shared secret (built-in)
+     * - A custom `AttestationSigner` for external KMS integration
+     */
+    readonly signer: 'hmac' | AttestationSigner;
+    /**
+     * For `'hmac'` mode: the shared secret.
+     * Read from environment in production (never hardcode).
+     */
+    readonly secret?: string;
+    /**
+     * Expected server digest hash from a known-good build.
+     * When set, runtime verification will fail-fast if the
+     * re-computed digest doesn't match.
+     */
+    readonly expectedDigest?: string;
+    /**
+     * Whether to fail-fast on attestation failure.
+     * Default: `true` in production, `false` in development.
+     */
+    readonly failOnMismatch?: boolean;
+    /**
+     * Whether to expose the attestation in MCP capabilities.
+     * Default: `true`.
+     */
+    readonly exposeCapability?: boolean;
+}
+/**
+ * Pluggable signer interface for external KMS integration.
+ *
+ * Implementations should be stateless and async-safe.
+ * The `sign()` method receives the canonical digest string
+ * and returns a signature (hex-encoded or base64).
+ */
+export interface AttestationSigner {
+    /** Human-readable name (e.g., 'sigstore', 'aws-kms') */
+    readonly name: string;
+    /** Sign a digest string */
+    sign(digest: string): Promise<string>;
+    /** Verify a digest against a signature */
+    verify(digest: string, signature: string): Promise<boolean>;
+}
+/**
+ * Result of an attestation operation.
+ */
+export interface AttestationResult {
+    /** Whether the attestation was successful */
+    readonly valid: boolean;
+    /** The computed digest */
+    readonly computedDigest: string;
+    /** The expected digest (if configured) */
+    readonly expectedDigest: string | null;
+    /** The signature (if signing was performed) */
+    readonly signature: string | null;
+    /** Signer identity */
+    readonly signerName: string;
+    /** ISO-8601 timestamp of attestation */
+    readonly attestedAt: string;
+    /** Human-readable error message, if invalid */
+    readonly error: string | null;
+}
+/**
+ * Capability structure exposed via MCP `server.capabilities`.
+ *
+ * Clients can inspect this to verify the server's behavioral
+ * identity before trusting tool responses.
+ */
+export interface VurbTrustCapability {
+    /** Current server behavioral digest */
+    readonly serverDigest: string;
+    /** Attestation signature (if signed) */
+    readonly signature: string | null;
+    /** Signer identity */
+    readonly signerName: string;
+    /** ISO-8601 timestamp of last attestation */
+    readonly attestedAt: string;
+    /** Number of tools covered by the attestation */
+    readonly toolCount: number;
+    /** Whether the attestation passed verification */
+    readonly verified: boolean;
+}
+/**
+ * Create an HMAC-SHA256 signer from a shared secret.
+ *
+ * @param secret - The shared secret (should be ≥32 bytes)
+ * @returns An `AttestationSigner` using HMAC-SHA256
+ */
+export declare function createHmacSigner(secret: string): AttestationSigner;
+/**
+ * Sign a server digest and produce an attestation result.
+ *
+ * @param serverDigest - The server's behavioral digest
+ * @param config - Zero-trust configuration
+ * @returns Attestation result with signature
+ */
+export declare function attestServerDigest(serverDigest: ServerDigest, config: ZeroTrustConfig): Promise<AttestationResult>;
+/**
+ * Verify a previously signed attestation.
+ *
+ * @param serverDigest - The current server digest
+ * @param signature - The signature to verify
+ * @param config - Zero-trust configuration
+ * @returns Attestation result with verification status
+ */
+export declare function verifyAttestation(serverDigest: ServerDigest, signature: string, config: ZeroTrustConfig): Promise<AttestationResult>;
+/**
+ * Runtime capability pinning — check that the current digest
+ * matches what was attested at build time.
+ *
+ * Designed to be called once at server startup in the `attach()` flow.
+ *
+ * @param currentDigest - Re-computed server digest
+ * @param config - Zero-trust configuration
+ * @returns Attestation result
+ * @throws If `failOnMismatch` is true and the digest doesn't match
+ */
+export declare function verifyCapabilityPin(currentDigest: ServerDigest, config: ZeroTrustConfig): Promise<AttestationResult>;
+/**
+ * Build the `vurbTrust` capability object for MCP exposure.
+ *
+ * @param attestation - A completed attestation result
+ * @param toolCount - Number of tools in the registry
+ * @returns Capability structure for `server.capabilities`
+ */
+export declare function buildTrustCapability(attestation: AttestationResult, toolCount: number): VurbTrustCapability;
+/**
+ * Error thrown when zero-trust attestation fails with failOnMismatch.
+ *
+ * Carries the full `AttestationResult` for programmatic inspection.
+ */
+export declare class AttestationError extends Error {
+    readonly attestation: AttestationResult;
+    constructor(message: string, attestation: AttestationResult);
+}
+//# sourceMappingURL=CryptoAttestation.d.ts.map

package/dist/introspection/CryptoAttestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoAttestation.d.ts","sourceRoot":"","sources":["../../src/introspection/CryptoAttestation.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,YAAY,EAAwB,MAAM,qBAAqB,CAAC;AAe9E;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAAC;IAE5C;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAElC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACvC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAC9B,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2BAA2B;IAC3B,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,0CAA0C;IAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAC9B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,0BAA0B;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,sBAAsB;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAChC,uCAAuC;IACvC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,sBAAsB;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC9B;AAMD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAWlE;AAMD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACpC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,eAAe,GACxB,OAAO,CAAC,iBAAiB,CAAC,CA4B5B;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACnC,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,eAAe,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAc5B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CACrC,aAAa,EAAE,YAAY,EAC3B,MAAM,EAAE,eAAe,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAW5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAChC,WAAW,EAAE,iBAAiB,EAC9B,SAAS,EAAE,MAAM,GAClB,mBAAmB,CASrB;AAMD;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACvC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;gBAE5B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB;CAK9D"}