@zhin.js/workroom 0.0.0 → 0.0.2

package/lib/data-governance/payload-vault-storage-handoff.js

@@ -0,0 +1,471 @@
+import { PayloadVaultIntegrityError } from './encrypted-file-payload-vault.js';
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from './canonical-value.js';
+export const PAYLOAD_VAULT_HANDOFF_MODEL = {
+    id: { type: 'text', primary: true, nullable: false },
+    handoff_id: { type: 'text', nullable: false },
+    project_id: { type: 'text', nullable: false },
+    source_vault_object_id: { type: 'text', nullable: false },
+    target_vault_object_id: { type: 'text', nullable: false },
+    receipt_digest: { type: 'text', nullable: false },
+    receipt_json: { type: 'text', nullable: false },
+};
+export class DatabasePayloadVaultHandoffRepository {
+    database;
+    model;
+    constructor(database, model) {
+        this.database = database;
+        this.model = model;
+    }
+    async read(handoffId) {
+        const id = required(handoffId, 'handoffId');
+        const rows = await this.model.select().where({ handoff_id: id });
+        if (rows.length === 0)
+            return undefined;
+        return parseRow(rows, id);
+    }
+    async create(receipt) {
+        assertReceipt(receipt);
+        try {
+            return await this.database.transaction(async (transaction) => {
+                const rows = await transaction.select('payload_vault_handoffs').where({
+                    handoff_id: receipt.handoffId,
+                });
+                if (rows.length > 0)
+                    return exactReplay(parseRow(rows, receipt.handoffId), receipt);
+                await transaction.insertMany('payload_vault_handoffs', [toRow(receipt)]);
+                return receipt;
+            }, { isolationLevel: 'SERIALIZABLE' });
+        }
+        catch (error) {
+            if (!isDatabaseCasLoser(error))
+                throw error;
+            const winner = await this.read(receipt.handoffId);
+            if (!winner)
+                throw new PayloadVaultIntegrityError('Payload Vault handoff CAS winner is absent');
+            return exactReplay(winner, receipt);
+        }
+    }
+}
+/** Trusted Root migration service. It never publishes either raw Vault port. */
+export class PayloadVaultFileToDatabaseHandoff {
+    #source;
+    #target;
+    #repository;
+    #authority;
+    #generation;
+    constructor(options) {
+        this.#source = options.source;
+        this.#target = options.target;
+        this.#repository = options.repository;
+        this.#authority = options.authority;
+        this.#generation = positive(options.generation, 'generation');
+    }
+    async migrate(input, signal) {
+        signal.throwIfAborted();
+        const sourceDescriptor = deepFreeze(structuredClone(input.sourceDescriptor));
+        const sourceDescriptorDigest = digest(sourceDescriptor);
+        assertSourceBinding(input.sourceHandle, sourceDescriptor, sourceDescriptorDigest);
+        const targetObjectId = required(input.targetObjectId, 'targetObjectId');
+        if (targetObjectId === sourceDescriptor.objectId) {
+            throw new PayloadVaultIntegrityError('Payload Vault handoff must mint a new object identity');
+        }
+        const targetDescriptor = deepFreeze({
+            ...sourceDescriptor,
+            objectId: targetObjectId,
+            kind: 'projection_payload',
+            lineage: {
+                sourceObjectIds: [sourceDescriptor.objectId],
+                transformRef: 'storage-handoff:file-to-database:v1',
+            },
+        });
+        const targetDescriptorDigest = digest(targetDescriptor);
+        const requestBody = deepFreeze({
+            version: 1,
+            action: 'copy_file_payload_to_database',
+            generation: this.#generation,
+            operationId: required(input.operationId, 'operationId'),
+            authenticatedPrincipalId: required(input.authenticatedPrincipalId, 'authenticatedPrincipalId'),
+            tenantId: sourceDescriptor.tenantId,
+            projectId: sourceDescriptor.projectId,
+            sourceHandleDigest: digest(input.sourceHandle),
+            sourceDescriptorDigest,
+            targetDescriptorDigest,
+        });
+        const request = deepFreeze({
+            ...requestBody,
+            digest: digest(requestBody),
+        });
+        const handoffId = `payload-vault-handoff:${request.digest.slice('sha256:'.length)}`;
+        const existing = await this.#repository.read(handoffId);
+        if (existing)
+            return existing;
+        const decision = await this.#authority.authorize(request);
+        if (!decision.approved || decision.requestDigest !== request.digest
+            || decision.principalId !== request.authenticatedPrincipalId
+            || decision.role !== 'data_steward'
+            || !await this.#authority.verify(request, decision)) {
+            throw new PayloadVaultIntegrityError('Payload Vault handoff is not authorized');
+        }
+        signal.throwIfAborted();
+        const payload = await this.#source.readExact({
+            handle: input.sourceHandle,
+            requestDigest: request.digest,
+            purpose: 'reconciliation',
+            principalId: request.authenticatedPrincipalId,
+            destinationId: 'payload-vault:file-to-database-handoff',
+        }, signal);
+        try {
+            const targetHandle = await this.#target.putDerived({
+                descriptor: targetDescriptor,
+                descriptorDigest: targetDescriptorDigest,
+                payload,
+            }, signal);
+            if (targetHandle.vaultObjectId === input.sourceHandle.vaultObjectId
+                || targetHandle.objectId !== targetObjectId
+                || targetHandle.payloadHash !== input.sourceHandle.payloadHash
+                || targetHandle.descriptorDigest !== targetDescriptorDigest) {
+                throw new PayloadVaultIntegrityError('Payload Vault handoff target binding is invalid');
+            }
+            const body = deepFreeze({
+                version: 1,
+                handoffId,
+                revision: 1,
+                status: 'copied_pending_consumer_cutover',
+                sourceHandle: structuredClone(input.sourceHandle),
+                targetHandle: structuredClone(targetHandle),
+                sourceDescriptorDigest,
+                targetDescriptorDigest,
+                supersedes: {
+                    vaultObjectId: input.sourceHandle.vaultObjectId,
+                    descriptorDigest: input.sourceHandle.descriptorDigest,
+                },
+                lineage: {
+                    sourceObjectId: sourceDescriptor.objectId,
+                    targetObjectId,
+                    transformRef: 'storage-handoff:file-to-database:v1',
+                },
+                authorityRequest: request,
+                authorityDecision: deepFreeze(structuredClone(decision)),
+            });
+            return await this.#repository.create(deepFreeze({ ...body, digest: digest(body) }));
+        }
+        finally {
+            payload.fill(0);
+        }
+    }
+}
+export function definePayloadVaultHandoffDatabaseModel(database) {
+    database.define('payload_vault_handoffs', PAYLOAD_VAULT_HANDOFF_MODEL);
+}
+export const PAYLOAD_VAULT_HANDOFF_RETIREMENT_MODEL = {
+    id: { type: 'text', primary: true, nullable: false },
+    handoff_id: { type: 'text', nullable: false },
+    source_vault_object_id: { type: 'text', nullable: false },
+    target_vault_object_id: { type: 'text', nullable: false },
+    proof_digest: { type: 'text', nullable: false },
+    proof_json: { type: 'text', nullable: false },
+};
+export class DatabasePayloadVaultRetirementRepository {
+    database;
+    model;
+    constructor(database, model) {
+        this.database = database;
+        this.model = model;
+    }
+    async read(handoffId) {
+        const id = required(handoffId, 'retirement handoffId');
+        const rows = await this.model.select().where({ handoff_id: id });
+        if (rows.length === 0)
+            return undefined;
+        return parseRetirementRow(rows, id);
+    }
+    async create(proof) {
+        assertRetirementProof(proof);
+        try {
+            return await this.database.transaction(async (transaction) => {
+                const rows = await transaction.select('payload_vault_handoff_retirements').where({
+                    handoff_id: proof.handoffId,
+                });
+                if (rows.length > 0)
+                    return exactRetirementReplay(parseRetirementRow(rows, proof.handoffId), proof);
+                await transaction.insertMany('payload_vault_handoff_retirements', [retirementRow(proof)]);
+                return proof;
+            }, { isolationLevel: 'SERIALIZABLE' });
+        }
+        catch (error) {
+            if (!isDatabaseCasLoser(error))
+                throw error;
+            const winner = await this.read(proof.handoffId);
+            if (!winner)
+                throw new PayloadVaultIntegrityError('Payload Vault retirement CAS winner is absent');
+            return exactRetirementReplay(winner, proof);
+        }
+    }
+}
+/**
+ * This proof is the only signal that a File source may be retired. Creating a
+ * DB copy alone is deliberately insufficient.
+ */
+export class PayloadVaultSourceRetirementGate {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async authorize(input, signal) {
+        signal.throwIfAborted();
+        const handoffId = required(input.handoffId, 'retirement handoffId');
+        const handoff = await this.options.handoffs.read(handoffId);
+        if (!handoff)
+            throw new PayloadVaultIntegrityError('Payload Vault handoff receipt is unavailable');
+        const existing = await this.options.retirements.read(handoffId);
+        if (existing) {
+            assertRetirementMatchesHandoff(existing, handoff);
+            return existing;
+        }
+        const consumerCutover = await this.options.consumers.resolve(handoff, signal);
+        assertCompleteConsumerCutover(consumerCutover, handoff);
+        const lifecycle = await this.options.lifecycle.resolve(handoff.sourceHandle, signal);
+        if (!lifecycle || lifecycle.version !== 1
+            || lifecycle.projectId !== handoff.sourceHandle.projectId
+            || lifecycle.objectId !== handoff.sourceHandle.objectId
+            || canonicalWorkroomJson(lifecycle.sourceHandle) !== canonicalWorkroomJson(handoff.sourceHandle)
+            || lifecycle.locationManifestDigest !== handoff.sourceHandle.locationManifestDigest
+            || !isDigest(lifecycle.stateDigest) || !isDigest(lifecycle.objectAuthorityDigest)
+            || !isDigest(lifecycle.purgeCompletionDigest)) {
+            throw new PayloadVaultIntegrityError('Payload Vault source purge completion is unavailable or stale');
+        }
+        const requestBody = deepFreeze({
+            version: 1,
+            action: 'authorize_file_payload_source_retirement',
+            operationId: required(input.operationId, 'retirement operationId'),
+            authenticatedPrincipalId: required(input.authenticatedPrincipalId, 'retirement principalId'),
+            handoffId,
+            handoffReceiptDigest: handoff.digest,
+            consumerCutoverDigest: consumerCutover.digest,
+            lifecycleStateDigest: lifecycle.stateDigest,
+            purgeCompletionDigest: lifecycle.purgeCompletionDigest,
+        });
+        const request = deepFreeze({ ...requestBody, digest: digest(requestBody) });
+        const decision = await this.options.authority.authorize(request);
+        if (!decision.approved || decision.requestDigest !== request.digest
+            || decision.principalId !== request.authenticatedPrincipalId
+            || decision.role !== 'data_steward'
+            || !await this.options.authority.verify(request, decision)) {
+            throw new PayloadVaultIntegrityError('Payload Vault source retirement is not authorized');
+        }
+        const body = deepFreeze({
+            version: 1,
+            handoffId,
+            sourceHandle: handoff.sourceHandle,
+            targetHandle: handoff.targetHandle,
+            consumerCutover,
+            lifecycleStateDigest: lifecycle.stateDigest,
+            purgeCompletionDigest: lifecycle.purgeCompletionDigest,
+            request,
+            decision: deepFreeze(structuredClone(decision)),
+        });
+        return await this.options.retirements.create(deepFreeze({ ...body, digest: digest(body) }));
+    }
+}
+export function definePayloadVaultRetirementDatabaseModel(database) {
+    database.define('payload_vault_handoff_retirements', PAYLOAD_VAULT_HANDOFF_RETIREMENT_MODEL);
+}
+function assertCompleteConsumerCutover(snapshot, handoff) {
+    if (!snapshot || snapshot.version !== 1 || snapshot.handoffId !== handoff.handoffId
+        || snapshot.targetVaultObjectId !== handoff.targetHandle.vaultObjectId
+        || !Number.isSafeInteger(snapshot.revision) || snapshot.revision < 1
+        || snapshot.digest !== digestWithoutAny(snapshot)) {
+        throw new PayloadVaultIntegrityError('Payload Vault consumer cutover authority is unavailable or stale');
+    }
+    const expected = uniqueDigests(snapshot.expectedConsumerDigests);
+    const switched = uniqueDigests(snapshot.switchedConsumerDigests);
+    if (expected.length === 0 || canonicalWorkroomJson(expected) !== canonicalWorkroomJson(switched)
+        || canonicalWorkroomJson(expected) !== canonicalWorkroomJson(snapshot.expectedConsumerDigests)
+        || canonicalWorkroomJson(switched) !== canonicalWorkroomJson(snapshot.switchedConsumerDigests)) {
+        throw new PayloadVaultIntegrityError('Payload Vault consumer cutover is incomplete');
+    }
+}
+function retirementRow(proof) {
+    return {
+        id: proof.handoffId,
+        handoff_id: proof.handoffId,
+        source_vault_object_id: proof.sourceHandle.vaultObjectId,
+        target_vault_object_id: proof.targetHandle.vaultObjectId,
+        proof_digest: proof.digest,
+        proof_json: canonicalWorkroomJson(proof),
+    };
+}
+function parseRetirementRow(rows, handoffId) {
+    if (rows.length !== 1)
+        throw new PayloadVaultIntegrityError('Payload Vault retirement row is duplicated');
+    const row = rows[0];
+    exactKeys(row, ['id', 'handoff_id', 'source_vault_object_id', 'target_vault_object_id',
+        'proof_digest', 'proof_json']);
+    if (row.id !== handoffId || row.handoff_id !== handoffId || typeof row.proof_json !== 'string') {
+        throw new PayloadVaultIntegrityError('Payload Vault retirement row identity drift');
+    }
+    let proof;
+    try {
+        proof = JSON.parse(row.proof_json);
+    }
+    catch (error) {
+        throw new PayloadVaultIntegrityError('Payload Vault retirement proof is malformed', { cause: error });
+    }
+    assertRetirementProof(proof);
+    if (row.proof_json !== canonicalWorkroomJson(proof) || row.proof_digest !== proof.digest
+        || row.source_vault_object_id !== proof.sourceHandle.vaultObjectId
+        || row.target_vault_object_id !== proof.targetHandle.vaultObjectId) {
+        throw new PayloadVaultIntegrityError('Payload Vault retirement row binding drift');
+    }
+    return deepFreeze(structuredClone(proof));
+}
+function assertRetirementProof(proof) {
+    const { digest: supplied, ...body } = proof;
+    assertCompleteConsumerCutover(proof.consumerCutover, {
+        handoffId: proof.handoffId,
+        targetHandle: proof.targetHandle,
+    });
+    if (proof.version !== 1 || proof.request.version !== 1
+        || proof.request.action !== 'authorize_file_payload_source_retirement'
+        || proof.request.handoffId !== proof.handoffId
+        || !isDigest(proof.request.handoffReceiptDigest)
+        || proof.request.consumerCutoverDigest !== proof.consumerCutover.digest
+        || proof.request.lifecycleStateDigest !== proof.lifecycleStateDigest
+        || proof.request.purgeCompletionDigest !== proof.purgeCompletionDigest
+        || !isDigest(proof.lifecycleStateDigest) || !isDigest(proof.purgeCompletionDigest)
+        || proof.request.digest !== digestWithoutAny(proof.request)
+        || proof.sourceHandle.vaultObjectId === proof.targetHandle.vaultObjectId
+        || proof.sourceHandle.payloadHash !== proof.targetHandle.payloadHash
+        || proof.decision.requestDigest !== proof.request.digest
+        || proof.decision.principalId !== proof.request.authenticatedPrincipalId
+        || proof.decision.role !== 'data_steward' || !isDigest(proof.decision.authorityDigest)
+        || !Number.isSafeInteger(proof.decision.decidedAt) || proof.decision.decidedAt < 0
+        || supplied !== digest(body)) {
+        throw new PayloadVaultIntegrityError('Payload Vault source retirement proof binding drift');
+    }
+}
+function assertRetirementMatchesHandoff(proof, handoff) {
+    if (proof.handoffId !== handoff.handoffId
+        || proof.request.handoffReceiptDigest !== handoff.digest
+        || canonicalWorkroomJson(proof.sourceHandle) !== canonicalWorkroomJson(handoff.sourceHandle)
+        || canonicalWorkroomJson(proof.targetHandle) !== canonicalWorkroomJson(handoff.targetHandle)) {
+        throw new PayloadVaultIntegrityError('Payload Vault source retirement/handoff binding drift');
+    }
+}
+function exactRetirementReplay(winner, candidate) {
+    if (canonicalWorkroomJson(winner) !== canonicalWorkroomJson(candidate)) {
+        throw new PayloadVaultIntegrityError('Payload Vault source retirement CAS replay drift');
+    }
+    return winner;
+}
+function uniqueDigests(values) {
+    if (!Array.isArray(values))
+        throw new PayloadVaultIntegrityError('Payload Vault consumer digests are invalid');
+    return [...new Set(values.map(value => {
+            if (!isDigest(value))
+                throw new PayloadVaultIntegrityError('Payload Vault consumer digest is invalid');
+            return value;
+        }))].sort();
+}
+function digestWithoutAny(value) {
+    const { digest: _digest, ...body } = value;
+    return digest(body);
+}
+function isDigest(value) {
+    return typeof value === 'string' && /^sha256:[a-f\d]{64}$/u.test(value);
+}
+function assertSourceBinding(handle, descriptor, descriptorDigest) {
+    if (handle.version !== 1 || handle.objectId !== descriptor.objectId
+        || handle.payloadHash !== descriptor.payloadHash || handle.tenantId !== descriptor.tenantId
+        || handle.projectId !== descriptor.projectId || handle.descriptorDigest !== descriptorDigest) {
+        throw new PayloadVaultIntegrityError('Payload Vault handoff source Descriptor binding is invalid');
+    }
+}
+function toRow(receipt) {
+    return {
+        id: receipt.handoffId,
+        handoff_id: receipt.handoffId,
+        project_id: receipt.sourceHandle.projectId,
+        source_vault_object_id: receipt.sourceHandle.vaultObjectId,
+        target_vault_object_id: receipt.targetHandle.vaultObjectId,
+        receipt_digest: receipt.digest,
+        receipt_json: canonicalWorkroomJson(receipt),
+    };
+}
+function parseRow(rows, handoffId) {
+    if (rows.length !== 1)
+        throw new PayloadVaultIntegrityError('Payload Vault handoff row is duplicated');
+    const row = rows[0];
+    exactKeys(row, ['id', 'handoff_id', 'project_id', 'source_vault_object_id',
+        'target_vault_object_id', 'receipt_digest', 'receipt_json']);
+    if (row.id !== handoffId || row.handoff_id !== handoffId || typeof row.receipt_json !== 'string') {
+        throw new PayloadVaultIntegrityError('Payload Vault handoff row identity drift');
+    }
+    let receipt;
+    try {
+        receipt = JSON.parse(row.receipt_json);
+    }
+    catch (error) {
+        throw new PayloadVaultIntegrityError('Payload Vault handoff receipt is malformed', { cause: error });
+    }
+    assertReceipt(receipt);
+    if (row.receipt_json !== canonicalWorkroomJson(receipt) || row.receipt_digest !== receipt.digest
+        || row.project_id !== receipt.sourceHandle.projectId
+        || row.source_vault_object_id !== receipt.sourceHandle.vaultObjectId
+        || row.target_vault_object_id !== receipt.targetHandle.vaultObjectId) {
+        throw new PayloadVaultIntegrityError('Payload Vault handoff row binding drift');
+    }
+    return deepFreeze(structuredClone(receipt));
+}
+function assertReceipt(receipt) {
+    const { digest: supplied, ...body } = receipt;
+    if (receipt.version !== 1 || receipt.revision !== 1
+        || receipt.status !== 'copied_pending_consumer_cutover'
+        || receipt.handoffId !== `payload-vault-handoff:${receipt.authorityRequest.digest.slice('sha256:'.length)}`
+        || receipt.authorityRequest.digest !== digestWithout(receipt.authorityRequest)
+        || receipt.authorityDecision.requestDigest !== receipt.authorityRequest.digest
+        || receipt.authorityDecision.principalId !== receipt.authorityRequest.authenticatedPrincipalId
+        || receipt.authorityDecision.role !== 'data_steward'
+        || receipt.sourceDescriptorDigest !== receipt.sourceHandle.descriptorDigest
+        || receipt.targetDescriptorDigest !== receipt.targetHandle.descriptorDigest
+        || receipt.targetHandle.payloadHash !== receipt.sourceHandle.payloadHash
+        || receipt.targetHandle.vaultObjectId === receipt.sourceHandle.vaultObjectId
+        || receipt.supersedes.vaultObjectId !== receipt.sourceHandle.vaultObjectId
+        || receipt.supersedes.descriptorDigest !== receipt.sourceHandle.descriptorDigest
+        || supplied !== digest(body)) {
+        throw new PayloadVaultIntegrityError('Payload Vault handoff receipt binding drift');
+    }
+}
+function digestWithout(value) {
+    const { digest: _digest, ...body } = value;
+    return digest(body);
+}
+function exactReplay(winner, candidate) {
+    if (canonicalWorkroomJson(winner) !== canonicalWorkroomJson(candidate)) {
+        throw new PayloadVaultIntegrityError('Payload Vault handoff CAS replay drift');
+    }
+    return winner;
+}
+function exactKeys(value, keys) {
+    if (canonicalWorkroomJson(Object.keys(value).sort()) !== canonicalWorkroomJson([...keys].sort())) {
+        throw new PayloadVaultIntegrityError('Payload Vault handoff row shape drift');
+    }
+}
+function required(value, label) {
+    if (typeof value !== 'string' || value.trim() !== value || value.length === 0) {
+        throw new PayloadVaultIntegrityError(`Payload Vault handoff ${label} is invalid`);
+    }
+    return value;
+}
+function positive(value, label) {
+    if (!Number.isSafeInteger(value) || value < 1) {
+        throw new PayloadVaultIntegrityError(`Payload Vault handoff ${label} must be positive`);
+    }
+    return value;
+}
+function isDatabaseCasLoser(error) {
+    return error instanceof Error
+        && ('code' in error && ['23505', 'SQLITE_CONSTRAINT', 'ER_DUP_ENTRY'].includes(String(error.code))
+            || /unique|duplicate|constraint/iu.test(error.message));
+}
+//# sourceMappingURL=payload-vault-storage-handoff.js.map

package/lib/data-governance/payload-vault-storage-handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-vault-storage-handoff.js","sourceRoot":"","sources":["../../src/data-governance/payload-vault-storage-handoff.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,sBAAsB,CAAC;AAiF9B,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC7D,UAAU,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtD,UAAU,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtD,sBAAsB,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IAClE,sBAAsB,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IAClE,cAAc,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC1D,YAAY,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;CACzD,CAAC;AAEF,MAAM,OAAO,qCAAqC;IAErC;IACA;IAFX,YACW,QAAqC,EACrC,KAAuC;QADvC,aAAQ,GAAR,QAAQ,CAA6B;QACrC,UAAK,GAAL,KAAK,CAAkC;IAC/C,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAmC;QAC9C,aAAa,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAC,WAAW,EAAC,EAAE;gBACzD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC;oBACpE,UAAU,EAAE,OAAO,CAAC,SAAS;iBAC9B,CAAC,CAAC;gBACH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;gBACpF,MAAM,WAAW,CAAC,UAAU,CAAC,wBAAwB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACzE,OAAO,OAAO,CAAC;YACjB,CAAC,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,0BAA0B,CAAC,4CAA4C,CAAC,CAAC;YAChG,OAAO,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;CACF;AAUD,gFAAgF;AAChF,MAAM,OAAO,iCAAiC;IACnC,OAAO,CAAsC;IAC7C,OAAO,CAAuC;IAC9C,WAAW,CAAgC;IAC3C,UAAU,CAAmC;IAC7C,WAAW,CAAS;IAE7B,YAAY,OAAiD;QAC3D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAMZ,EAAE,MAAmB;QACrB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,gBAAgB,GAAG,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC7E,MAAM,sBAAsB,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACxD,mBAAmB,CAAC,KAAK,CAAC,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;QAClF,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACxE,IAAI,cAAc,KAAK,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,0BAA0B,CAAC,uDAAuD,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,gBAAgB,GAAG,UAAU,CAAiB;YAClD,GAAG,gBAAgB;YACnB,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE;gBACP,eAAe,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAC5C,YAAY,EAAE,qCAAqC;aACpD;SACF,CAAC,CAAC;QACH,MAAM,sBAAsB,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,UAAU,CAAC;YAC7B,OAAO,EAAE,CAAU;YACnB,MAAM,EAAE,+BAAwC;YAChD,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;YACvD,wBAAwB,EAAE,QAAQ,CAAC,KAAK,CAAC,wBAAwB,EAAE,0BAA0B,CAAC;YAC9F,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;YACnC,SAAS,EAAE,gBAAgB,CAAC,SAAS;YACrC,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;YAC9C,sBAAsB;YACtB,sBAAsB;SACvB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAsC;YAC9D,GAAG,WAAW;YACd,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,yBAAyB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACpF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM;eAC9D,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,wBAAwB;eACzD,QAAQ,CAAC,IAAI,KAAK,cAAc;eAChC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,0BAA0B,CAAC,yCAAyC,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC3C,MAAM,EAAE,KAAK,CAAC,YAAY;YAC1B,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,OAAO,EAAE,gBAAgB;YACzB,WAAW,EAAE,OAAO,CAAC,wBAAwB;YAC7C,aAAa,EAAE,wCAAwC;SACxD,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;gBACjD,UAAU,EAAE,gBAAgB;gBAC5B,gBAAgB,EAAE,sBAAsB;gBACxC,OAAO;aACR,EAAE,MAAM,CAAC,CAAC;YACX,IAAI,YAAY,CAAC,aAAa,KAAK,KAAK,CAAC,YAAY,CAAC,aAAa;mBAC9D,YAAY,CAAC,QAAQ,KAAK,cAAc;mBACxC,YAAY,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,CAAC,WAAW;mBAC3D,YAAY,CAAC,gBAAgB,KAAK,sBAAsB,EAAE,CAAC;gBAC9D,MAAM,IAAI,0BAA0B,CAAC,iDAAiD,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC;gBACtB,OAAO,EAAE,CAAU;gBACnB,SAAS;gBACT,QAAQ,EAAE,CAAU;gBACpB,MAAM,EAAE,iCAA0C;gBAClD,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC;gBACjD,YAAY,EAAE,eAAe,CAAC,YAAY,CAAC;gBAC3C,sBAAsB;gBACtB,sBAAsB;gBACtB,UAAU,EAAE;oBACV,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,aAAa;oBAC/C,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,gBAAgB;iBACtD;gBACD,OAAO,EAAE;oBACP,cAAc,EAAE,gBAAgB,CAAC,QAAQ;oBACzC,cAAc;oBACd,YAAY,EAAE,qCAA8C;iBAC7D;gBACD,gBAAgB,EAAE,OAAO;gBACzB,iBAAiB,EAAE,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;aACzD,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,sCAAsC,CACpD,QAAuE;IAEvE,QAAQ,CAAC,MAAM,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC;AACzE,CAAC;AA+ED,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,EAAE,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC7D,UAAU,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IACtD,sBAAsB,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IAClE,sBAAsB,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IAClE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;IACxD,UAAU,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;CACvD,CAAC;AAEF,MAAM,OAAO,wCAAwC;IAExC;IACA;IAFX,YACW,QAAqC,EACrC,KAAuC;QADvC,aAAQ,GAAR,QAAQ,CAA6B;QACrC,UAAK,GAAL,KAAK,CAAkC;IAC/C,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAwC;QACnD,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAC,WAAW,EAAC,EAAE;gBACzD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,KAAK,CAAC;oBAC/E,UAAU,EAAE,KAAK,CAAC,SAAS;iBAC5B,CAAC,CAAC;gBACH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;gBACpG,MAAM,WAAW,CAAC,UAAU,CAAC,mCAAmC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC1F,OAAO,KAAK,CAAC;YACf,CAAC,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,0BAA0B,CAAC,+CAA+C,CAAC,CAAC;YACnG,OAAO,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,gCAAgC;IACtB;IAArB,YAAqB,OAMnB;QANmB,YAAO,GAAP,OAAO,CAM1B;IAAG,CAAC;IAEN,KAAK,CAAC,SAAS,CAAC,KAId,EAAE,MAAmB;QACrB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,0BAA0B,CAAC,8CAA8C,CAAC,CAAC;QACnG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,QAAQ,EAAE,CAAC;YACb,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9E,6BAA6B,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACrF,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC;eACpC,SAAS,CAAC,SAAS,KAAK,OAAO,CAAC,YAAY,CAAC,SAAS;eACtD,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,YAAY,CAAC,QAAQ;eACpD,qBAAqB,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC;eAC7F,SAAS,CAAC,sBAAsB,KAAK,OAAO,CAAC,YAAY,CAAC,sBAAsB;eAChF,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,qBAAqB,CAAC;eAC9E,CAAC,QAAQ,CAAC,SAAS,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,0BAA0B,CAAC,+DAA+D,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,WAAW,GAAG,UAAU,CAAC;YAC7B,OAAO,EAAE,CAAU;YACnB,MAAM,EAAE,0CAAmD;YAC3D,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,wBAAwB,CAAC;YAClE,wBAAwB,EAAE,QAAQ,CAAC,KAAK,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;YAC5F,SAAS;YACT,oBAAoB,EAAE,OAAO,CAAC,MAAM;YACpC,qBAAqB,EAAE,eAAe,CAAC,MAAM;YAC7C,oBAAoB,EAAE,SAAS,CAAC,WAAW;YAC3C,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;SACvD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM;eAC9D,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,wBAAwB;eACzD,QAAQ,CAAC,IAAI,KAAK,cAAc;eAChC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,0BAA0B,CAAC,mDAAmD,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC;YACtB,OAAO,EAAE,CAAU;YACnB,SAAS;YACT,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,eAAe;YACf,oBAAoB,EAAE,SAAS,CAAC,WAAW;YAC3C,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;YACtD,OAAO;YACP,QAAQ,EAAE,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;SAChD,CAAC,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;CACF;AAED,MAAM,UAAU,yCAAyC,CACvD,QAAuE;IAEvE,QAAQ,CAAC,MAAM,CAAC,mCAAmC,EAAE,sCAAsC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,6BAA6B,CACpC,QAAyD,EACzD,OAAgF;IAEhF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;WAC9E,QAAQ,CAAC,mBAAmB,KAAK,OAAO,CAAC,YAAY,CAAC,aAAa;WACnE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,GAAG,CAAC;WACjE,QAAQ,CAAC,MAAM,KAAK,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,0BAA0B,CAAC,kEAAkE,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,QAAQ,CAAC;WAC3F,qBAAqB,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,QAAQ,CAAC,uBAAuB,CAAC;WAC3F,qBAAqB,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,0BAA0B,CAAC,8CAA8C,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAwC;IAC7D,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,SAAS;QACnB,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,sBAAsB,EAAE,KAAK,CAAC,YAAY,CAAC,aAAa;QACxD,sBAAsB,EAAE,KAAK,CAAC,YAAY,CAAC,aAAa;QACxD,YAAY,EAAE,KAAK,CAAC,MAAM;QAC1B,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAwC,EACxC,SAAiB;IAEjB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,0BAA0B,CAAC,4CAA4C,CAAC,CAAC;IAC1G,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IACrB,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,wBAAwB,EAAE,wBAAwB;QACpF,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC/F,MAAM,IAAI,0BAA0B,CAAC,6CAA6C,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,KAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAsC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,0BAA0B,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,UAAU,KAAK,qBAAqB,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM;WACnF,GAAG,CAAC,sBAAsB,KAAK,KAAK,CAAC,YAAY,CAAC,aAAa;WAC/D,GAAG,CAAC,sBAAsB,KAAK,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QACrE,MAAM,IAAI,0BAA0B,CAAC,4CAA4C,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAwC;IACrE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAC5C,6BAA6B,CAAC,KAAK,CAAC,eAAe,EAAE;QACnD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC;WACjD,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,0CAA0C;WACnE,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WAC3C,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC;WAC7C,KAAK,CAAC,OAAO,CAAC,qBAAqB,KAAK,KAAK,CAAC,eAAe,CAAC,MAAM;WACpE,KAAK,CAAC,OAAO,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB;WACjE,KAAK,CAAC,OAAO,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;WACnE,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC;WAC/E,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC;WACxD,KAAK,CAAC,YAAY,CAAC,aAAa,KAAK,KAAK,CAAC,YAAY,CAAC,aAAa;WACrE,KAAK,CAAC,YAAY,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,CAAC,WAAW;WACjE,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;WACrD,KAAK,CAAC,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,CAAC,wBAAwB;WACrE,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;WACnF,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC;WAC/E,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,0BAA0B,CAAC,qDAAqD,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAwC,EACxC,OAAmC;IAEnC,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;WACpC,KAAK,CAAC,OAAO,CAAC,oBAAoB,KAAK,OAAO,CAAC,MAAM;WACrD,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC;WACzF,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,0BAA0B,CAAC,uDAAuD,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAyC,EACzC,SAA4C;IAE5C,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,0BAA0B,CAAC,kDAAkD,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,MAAyB;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,0BAA0B,CAAC,4CAA4C,CAAC,CAAC;IAC/G,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,0BAA0B,CAAC,0CAA0C,CAAC,CAAC;YACvG,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAyC,KAAQ;IACxE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAgC,EAChC,UAA0B,EAC1B,gBAAwB;IAExB,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ;WAC9D,MAAM,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ;WACxF,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,IAAI,MAAM,CAAC,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;QAC/F,MAAM,IAAI,0BAA0B,CAAC,4DAA4D,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,OAAmC;IAChD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,SAAS;QACrB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS;QAC1C,sBAAsB,EAAE,OAAO,CAAC,YAAY,CAAC,aAAa;QAC1D,sBAAsB,EAAE,OAAO,CAAC,YAAY,CAAC,aAAa;QAC1D,cAAc,EAAE,OAAO,CAAC,MAAM;QAC9B,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,IAAwC,EACxC,SAAiB;IAEjB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,0BAA0B,CAAC,yCAAyC,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IACrB,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,wBAAwB;QACxE,wBAAwB,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACjG,MAAM,IAAI,0BAA0B,CAAC,0CAA0C,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,OAAmC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAA+B,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,0BAA0B,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,IAAI,GAAG,CAAC,YAAY,KAAK,qBAAqB,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,cAAc,KAAK,OAAO,CAAC,MAAM;WAC3F,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC,YAAY,CAAC,SAAS;WACjD,GAAG,CAAC,sBAAsB,KAAK,OAAO,CAAC,YAAY,CAAC,aAAa;WACjE,GAAG,CAAC,sBAAsB,KAAK,OAAO,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QACvE,MAAM,IAAI,0BAA0B,CAAC,yCAAyC,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,OAAmC;IACxD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC9C,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;WAC9C,OAAO,CAAC,MAAM,KAAK,iCAAiC;WACpD,OAAO,CAAC,SAAS,KAAK,yBAAyB,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;WACxG,OAAO,CAAC,gBAAgB,CAAC,MAAM,KAAK,aAAa,CAAC,OAAO,CAAC,gBAAgB,CAAC;WAC3E,OAAO,CAAC,iBAAiB,CAAC,aAAa,KAAK,OAAO,CAAC,gBAAgB,CAAC,MAAM;WAC3E,OAAO,CAAC,iBAAiB,CAAC,WAAW,KAAK,OAAO,CAAC,gBAAgB,CAAC,wBAAwB;WAC3F,OAAO,CAAC,iBAAiB,CAAC,IAAI,KAAK,cAAc;WACjD,OAAO,CAAC,sBAAsB,KAAK,OAAO,CAAC,YAAY,CAAC,gBAAgB;WACxE,OAAO,CAAC,sBAAsB,KAAK,OAAO,CAAC,YAAY,CAAC,gBAAgB;WACxE,OAAO,CAAC,YAAY,CAAC,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,WAAW;WACrE,OAAO,CAAC,YAAY,CAAC,aAAa,KAAK,OAAO,CAAC,YAAY,CAAC,aAAa;WACzE,OAAO,CAAC,UAAU,CAAC,aAAa,KAAK,OAAO,CAAC,YAAY,CAAC,aAAa;WACvE,OAAO,CAAC,UAAU,CAAC,gBAAgB,KAAK,OAAO,CAAC,YAAY,CAAC,gBAAgB;WAC7E,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,0BAA0B,CAAC,6CAA6C,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAA0C;IAC/D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAClB,MAAkC,EAClC,SAAqC;IAErC,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,0BAA0B,CAAC,wCAAwC,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAuB;IACxE,IAAI,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,qBAAqB,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,0BAA0B,CAAC,uCAAuC,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,KAAK,aAAa,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAa;IAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,KAAK,mBAAmB,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,KAAK;WACxB,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;eAC7F,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC"}

package/lib/data-governance.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Workroom data governance / payload vault / payload lifecycle authority.
+ *
+ * FROZEN: moved out of the package root entry (C4c). The default (legacy Kernel)
+ * assembly path in `@zhin.js/cli` still creates these modules; they are only
+ * not part of the root exports. The new Room core does not depend on them.
+ * New code must not depend on it.
+ */
+export * from './data-governance/data-governance.js';
+export * from './data-governance/disclosure-manifest.js';
+export * from './data-governance/database-payload-lifecycle-repository.js';
+export * from './data-governance/encrypted-database-payload-vault.js';
+export * from './data-governance/payload-vault-storage-handoff.js';
+export * from './data-governance/payload-hold-overdue-projection.js';
+export * from './data-governance/disclosure-authority.js';
+export * from './workroom-runtime/workroom-data-governance-authority-writer.js';
+export * from './workroom-runtime/workroom-data-governance-bootstrap.js';
+export * from './workroom-runtime/workroom-data-governance-composition.js';
+export * from './workroom-runtime/workroom-data-governance-root-provider.js';
+export * from './workroom-runtime/workroom-data-governance-runtime.js';
+export * from './workroom-runtime/workroom-data-governance-storage.js';
+export * from './workroom-runtime/workroom-data-lifecycle-composition.js';
+export * from './workroom-runtime/workroom-data-lifecycle-console.js';
+export * from './workroom-runtime/workroom-data-lifecycle-human-ingress.js';
+export * from './workroom-runtime/workroom-payload-processor-recall.js';
+//# sourceMappingURL=data-governance.d.ts.map

package/lib/data-governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-governance.d.ts","sourceRoot":"","sources":["../src/data-governance.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,cAAc,sCAAsC,CAAC;AACrD,cAAc,0CAA0C,CAAC;AACzD,cAAc,4DAA4D,CAAC;AAC3E,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,sDAAsD,CAAC;AACrE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,iEAAiE,CAAC;AAChF,cAAc,0DAA0D,CAAC;AACzE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,8DAA8D,CAAC;AAC7E,cAAc,wDAAwD,CAAC;AACvE,cAAc,wDAAwD,CAAC;AACvE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,uDAAuD,CAAC;AACtE,cAAc,6DAA6D,CAAC;AAC5E,cAAc,yDAAyD,CAAC"}

package/lib/data-governance.js

@@ -0,0 +1,26 @@
+/**
+ * Workroom data governance / payload vault / payload lifecycle authority.
+ *
+ * FROZEN: moved out of the package root entry (C4c). The default (legacy Kernel)
+ * assembly path in `@zhin.js/cli` still creates these modules; they are only
+ * not part of the root exports. The new Room core does not depend on them.
+ * New code must not depend on it.
+ */
+export * from './data-governance/data-governance.js';
+export * from './data-governance/disclosure-manifest.js';
+export * from './data-governance/database-payload-lifecycle-repository.js';
+export * from './data-governance/encrypted-database-payload-vault.js';
+export * from './data-governance/payload-vault-storage-handoff.js';
+export * from './data-governance/payload-hold-overdue-projection.js';
+export * from './data-governance/disclosure-authority.js';
+export * from './workroom-runtime/workroom-data-governance-authority-writer.js';
+export * from './workroom-runtime/workroom-data-governance-bootstrap.js';
+export * from './workroom-runtime/workroom-data-governance-composition.js';
+export * from './workroom-runtime/workroom-data-governance-root-provider.js';
+export * from './workroom-runtime/workroom-data-governance-runtime.js';
+export * from './workroom-runtime/workroom-data-governance-storage.js';
+export * from './workroom-runtime/workroom-data-lifecycle-composition.js';
+export * from './workroom-runtime/workroom-data-lifecycle-console.js';
+export * from './workroom-runtime/workroom-data-lifecycle-human-ingress.js';
+export * from './workroom-runtime/workroom-payload-processor-recall.js';
+//# sourceMappingURL=data-governance.js.map

package/lib/data-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-governance.js","sourceRoot":"","sources":["../src/data-governance.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,cAAc,sCAAsC,CAAC;AACrD,cAAc,0CAA0C,CAAC;AACzD,cAAc,4DAA4D,CAAC;AAC3E,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,sDAAsD,CAAC;AACrE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,iEAAiE,CAAC;AAChF,cAAc,0DAA0D,CAAC;AACzE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,8DAA8D,CAAC;AAC7E,cAAc,wDAAwD,CAAC;AACvE,cAAc,wDAAwD,CAAC;AACvE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,uDAAuD,CAAC;AACtE,cAAc,6DAA6D,CAAC;AAC5E,cAAc,yDAAyD,CAAC"}