agentcert 0.2.7 → 0.4.0

package/dist/vendor/onegent-runtime/sandbox-adapter-kit.d.ts

@@ -0,0 +1,45 @@
+import { type SandboxCertificationCheck, type SandboxCertificationReport, type SandboxSeed, type SandboxSystem, type SandboxTenantInput } from "./sandbox-harness.js";
+import type { LocalActionAdapter } from "./types.js";
+export declare const SANDBOX_ADAPTER_CONFORMANCE_SCHEMA_VERSION: "agentcert.sandbox_adapter_conformance.v0.2";
+export interface SandboxSystemAdapterHandlers {
+    createTenant(input: SandboxTenantInput): void | Promise<void>;
+    deleteTenant(tenantId: string): void | Promise<void>;
+    resetTenant(tenantId: string): void | Promise<void>;
+    seedTenant(tenantId: string, seed: SandboxSeed): void | Promise<void>;
+    hasTenant(tenantId: string): boolean | Promise<boolean>;
+    snapshotTenant(tenantId: string): SandboxSeed | Promise<SandboxSeed>;
+    adapterForTenant(tenantId: string): LocalActionAdapter;
+}
+export interface SandboxSystemAdapterDefinition {
+    name: string;
+    allowedTargetSystems: string[];
+    handlers: SandboxSystemAdapterHandlers;
+}
+export interface SandboxAdapterConformanceReport {
+    schemaVersion: typeof SANDBOX_ADAPTER_CONFORMANCE_SCHEMA_VERSION;
+    kind: "agentcert.sandbox_adapter_conformance";
+    implementation: string;
+    generatedAt: string;
+    verdict: {
+        passed: boolean;
+        score: number;
+    };
+    summary: {
+        passed: number;
+        failed: number;
+        total: number;
+    };
+    checks: SandboxCertificationCheck[];
+    certification?: SandboxCertificationReport;
+    disclaimer: string;
+}
+export interface SandboxAdapterConformanceOptions {
+    system: SandboxSystem;
+    implementation?: string;
+    targetSystem?: string;
+    now?: () => Date;
+}
+export declare function createSandboxSystemAdapter(definition: SandboxSystemAdapterDefinition): SandboxSystem;
+export declare function runSandboxAdapterConformanceSuite(options: SandboxAdapterConformanceOptions): Promise<SandboxAdapterConformanceReport>;
+export declare function writeSandboxAdapterConformanceReport(report: SandboxAdapterConformanceReport, filePath: string): Promise<string>;
+//# sourceMappingURL=sandbox-adapter-kit.d.ts.map

package/dist/vendor/onegent-runtime/sandbox-adapter-kit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-adapter-kit.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/sandbox-adapter-kit.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,eAAO,MAAM,0CAA0C,EAAG,4CAAqD,CAAC;AAEhH,MAAM,WAAW,4BAA4B;IAC3C,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAAC;CACxD;AAED,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,QAAQ,EAAE,4BAA4B,CAAC;CACxC;AAED,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,OAAO,0CAA0C,CAAC;IACjE,IAAI,EAAE,uCAAuC,CAAC;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACpC,aAAa,CAAC,EAAE,0BAA0B,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,aAAa,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,8BAA8B,GAAG,aAAa,CA8BpG;AAED,wBAAsB,iCAAiC,CACrD,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,+BAA+B,CAAC,CAmF1C;AAED,wBAAsB,oCAAoC,CACxD,MAAM,EAAE,+BAA+B,EACvC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAMjB"}

package/dist/vendor/onegent-runtime/sandbox-adapter-kit.js

@@ -0,0 +1,148 @@
+import { randomUUID } from "node:crypto";
+import { chmod, mkdir, writeFile } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { isDeepStrictEqual } from "node:util";
+import { createSandboxCertificationHarness, runSandboxCertificationSuite, validateSyntheticSandboxSeed, } from "./sandbox-harness.js";
+export const SANDBOX_ADAPTER_CONFORMANCE_SCHEMA_VERSION = "agentcert.sandbox_adapter_conformance.v0.2";
+export function createSandboxSystemAdapter(definition) {
+    const name = definition.name.trim();
+    if (!name)
+        throw new Error("Sandbox adapter name is required.");
+    const allowedTargetSystems = normalizeTargets(definition.allowedTargetSystems);
+    const handlers = definition.handlers;
+    for (const method of ["createTenant", "deleteTenant", "resetTenant", "seedTenant", "hasTenant", "snapshotTenant", "adapterForTenant"]) {
+        if (typeof handlers[method] !== "function")
+            throw new Error(`Sandbox adapter handler ${method} is required.`);
+    }
+    return {
+        name,
+        safety: Object.freeze({
+            mode: "sandbox",
+            networkAccess: false,
+            syntheticDataOnly: true,
+            allowedTargetSystems: Object.freeze(allowedTargetSystems),
+        }),
+        createTenant: (input) => {
+            if (input.synthetic !== true)
+                throw new Error("Sandbox adapter tenants must declare synthetic: true.");
+            return handlers.createTenant({
+                ...input,
+                ...(input.seed ? { seed: validateSyntheticSandboxSeed(input.seed) } : {}),
+            });
+        },
+        deleteTenant: (tenantId) => handlers.deleteTenant(tenantId),
+        resetTenant: (tenantId) => handlers.resetTenant(tenantId),
+        seedTenant: (tenantId, seed) => handlers.seedTenant(tenantId, validateSyntheticSandboxSeed(seed)),
+        hasTenant: (tenantId) => handlers.hasTenant(tenantId),
+        snapshotTenant: (tenantId) => handlers.snapshotTenant(tenantId),
+        adapterForTenant: (tenantId) => handlers.adapterForTenant(tenantId),
+    };
+}
+export async function runSandboxAdapterConformanceSuite(options) {
+    const now = options.now ?? (() => new Date());
+    const implementation = options.implementation?.trim() || options.system.name;
+    const targetSystem = options.targetSystem ?? options.system.safety.allowedTargetSystems[0];
+    const checks = [];
+    let certification;
+    await check(checks, "adapter-contract", "The adapter declares the complete synthetic, network-denied SandboxSystem contract.", async () => {
+        if (!options.system.name.trim())
+            throw new Error("Adapter name is required.");
+        if (options.system.safety.mode !== "sandbox" || options.system.safety.networkAccess !== false || options.system.safety.syntheticDataOnly !== true) {
+            throw new Error("Adapter safety must be sandbox, network-denied, and synthetic-only.");
+        }
+        normalizeTargets([...options.system.safety.allowedTargetSystems]);
+        return { targetSystems: [...options.system.safety.allowedTargetSystems] };
+    });
+    await check(checks, "core-certification-v0.1", "The adapter passes the active ten-control Sandbox Certification Harness v0.1 suite.", async () => {
+        certification = await runSandboxCertificationSuite({
+            system: options.system,
+            implementation,
+            targetSystem,
+            now,
+        });
+        if (!certification.verdict.passed) {
+            throw new Error(`${certification.summary.failed} core certification control(s) failed.`);
+        }
+        return { score: certification.verdict.score, controls: certification.summary.total };
+    });
+    await check(checks, "tenant-lifecycle", "Create, inspect, seed, reset, and delete remain isolated behind the tenant lifecycle contract.", async () => {
+        const suffix = randomUUID().slice(0, 8);
+        const tenantId = `adapter-lifecycle-${suffix}`;
+        const harness = createSandboxCertificationHarness({ system: options.system, autoCleanup: false, now });
+        try {
+            await harness.createTenant({ id: tenantId, synthetic: true, seed: { record: { state: "seed" } } });
+            const initial = await harness.snapshotTenant(tenantId);
+            if (!isDeepStrictEqual(initial, { record: { state: "seed" } }))
+                throw new Error("Initial tenant snapshot did not match the seed.");
+            await harness.seedTenant(tenantId, { record: { state: "replacement" } });
+            await harness.resetTenant(tenantId);
+            const reset = await harness.snapshotTenant(tenantId);
+            if (!isDeepStrictEqual(reset, { record: { state: "replacement" } }))
+                throw new Error("Tenant reset did not restore the replacement seed.");
+            await harness.deleteTenant(tenantId);
+            if (await options.system.hasTenant(tenantId))
+                throw new Error("Deleted tenant remains accessible.");
+            return { tenantDeleted: true };
+        }
+        finally {
+            await harness.close();
+        }
+    });
+    await check(checks, "temporary-tenant-cleanup", "Expired tenant leases are removed deterministically from the underlying sandbox.", async () => {
+        let current = new Date("2030-01-01T00:00:00.000Z");
+        const tenantId = `adapter-expiry-${randomUUID().slice(0, 8)}`;
+        const harness = createSandboxCertificationHarness({
+            system: options.system,
+            tenantTtlMs: 1_000,
+            maxTenantTtlMs: 5_000,
+            autoCleanup: false,
+            now: () => current,
+        });
+        try {
+            const lease = await harness.createTenant({ id: tenantId, synthetic: true, seed: { record: { state: "temporary" } } });
+            current = new Date(current.getTime() + 1_001);
+            const removed = await harness.cleanupExpiredTenants();
+            if (!removed.includes(tenantId) || await options.system.hasTenant(tenantId))
+                throw new Error("Expired tenant was not deleted.");
+            return { expiresAt: lease.expiresAt, removed: true };
+        }
+        finally {
+            await harness.close();
+        }
+    });
+    const passed = checks.filter((item) => item.status === "passed").length;
+    const failed = checks.length - passed;
+    return {
+        schemaVersion: SANDBOX_ADAPTER_CONFORMANCE_SCHEMA_VERSION,
+        kind: "agentcert.sandbox_adapter_conformance",
+        implementation,
+        generatedAt: now().toISOString(),
+        verdict: { passed: failed === 0, score: Math.round((passed / checks.length) * 100) },
+        summary: { passed, failed, total: checks.length },
+        checks,
+        ...(certification ? { certification } : {}),
+        disclaimer: "Conformance covers the AgentCert synthetic sandbox adapter contract. It does not authorize production access or certify vendor-side controls.",
+    };
+}
+export async function writeSandboxAdapterConformanceReport(report, filePath) {
+    const absolutePath = resolve(filePath);
+    await mkdir(dirname(absolutePath), { recursive: true });
+    await writeFile(absolutePath, `${JSON.stringify(report, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
+    await chmod(absolutePath, 0o600);
+    return absolutePath;
+}
+async function check(checks, id, message, operation) {
+    try {
+        const evidence = await operation();
+        checks.push({ id, status: "passed", message, ...(evidence ? { evidence } : {}) });
+    }
+    catch (error) {
+        checks.push({ id, status: "failed", message: error instanceof Error ? error.message : String(error) });
+    }
+}
+function normalizeTargets(input) {
+    const targets = [...new Set(input.map((item) => item.trim()).filter(Boolean))];
+    if (targets.length === 0)
+        throw new Error("Sandbox adapters require at least one allowed target system.");
+    return targets;
+}

package/dist/vendor/onegent-runtime/sandbox-harness.d.ts

@@ -0,0 +1,167 @@
+import type { ActionAuditPacket, ActionExecutionReceipt, ActionExecutionSummary, CreateActionIntentInput, LocalActionAdapter, VerificationResult } from "./types.js";
+export declare const SANDBOX_CERTIFICATION_SCHEMA_VERSION: "agentcert.sandbox_certification.v0.1";
+export declare const SANDBOX_RUN_SCHEMA_VERSION: "agentcert.sandbox_run.v0.1";
+export type SandboxSeed = Record<string, Record<string, unknown>>;
+export interface SandboxTenantInput {
+    id: string;
+    synthetic: true;
+    displayName?: string;
+    seed?: SandboxSeed;
+    ttlMs?: number;
+}
+export interface SandboxTenantLease {
+    tenantId: string;
+    createdAt: string;
+    expiresAt: string;
+}
+export interface SandboxSystemSafety {
+    readonly mode: "sandbox";
+    readonly networkAccess: false;
+    readonly syntheticDataOnly: true;
+    readonly allowedTargetSystems: readonly string[];
+}
+export interface SandboxSystem {
+    name: string;
+    safety: SandboxSystemSafety;
+    createTenant(input: SandboxTenantInput): void | Promise<void>;
+    deleteTenant(tenantId: string): void | Promise<void>;
+    resetTenant(tenantId: string): void | Promise<void>;
+    seedTenant(tenantId: string, seed: SandboxSeed): void | Promise<void>;
+    hasTenant(tenantId: string): boolean | Promise<boolean>;
+    snapshotTenant(tenantId: string): SandboxSeed | Promise<SandboxSeed>;
+    adapterForTenant(tenantId: string): LocalActionAdapter;
+}
+export interface InMemorySandboxSystemOptions {
+    name?: string;
+    allowedTargetSystems: string[];
+}
+export interface SandboxExecutionLimits {
+    readonly maxActionsPerRun: number;
+    readonly maxAmountPerAction: number;
+    readonly maxTotalAmountPerRun: number;
+}
+export interface SandboxKillSwitchState {
+    enabled: boolean;
+    reason?: string;
+    changedAt: string;
+}
+export type SandboxRejectionCode = "ACTION_LIMIT_EXCEEDED" | "AMOUNT_LIMIT_EXCEEDED" | "APPROVAL_REJECTED" | "APPROVAL_REQUIRED" | "GLOBAL_KILL_SWITCH" | "IDEMPOTENCY_CONFLICT" | "IDEMPOTENCY_REQUIRED" | "INVALID_AMOUNT" | "NETWORK_DENIED" | "PRODUCTION_DENIED" | "RUN_AMOUNT_LIMIT_EXCEEDED" | "TARGET_NOT_ALLOWED" | "TENANT_KILL_SWITCH" | "TENANT_MISMATCH";
+export interface SandboxApprovalDecision {
+    approved: boolean;
+    reviewerId: string;
+    comment?: string;
+}
+export interface SandboxActionOptions {
+    approval?: SandboxApprovalDecision;
+    rollbackAfterVerification?: boolean;
+    rollbackReason?: string;
+}
+export type SandboxActionStatus = "verified" | "rolled_back" | "rejected" | "failed" | "rollback_failed";
+export interface SandboxActionResult {
+    idempotencyKey: string;
+    actionIntentId?: string;
+    status: SandboxActionStatus;
+    rejectionCode?: SandboxRejectionCode;
+    message: string;
+    startedAt: string;
+    completedAt: string;
+    execution?: ActionExecutionSummary;
+    verification?: VerificationResult;
+    rollback?: ActionExecutionReceipt;
+    auditPacket?: ActionAuditPacket;
+}
+export interface SandboxRunSummary {
+    attempted: number;
+    verified: number;
+    rolledBack: number;
+    rejected: number;
+    failed: number;
+    totalApprovedAmount: number;
+}
+export interface SandboxRunReport {
+    schemaVersion: typeof SANDBOX_RUN_SCHEMA_VERSION;
+    kind: "agentcert.sandbox_run";
+    runId: string;
+    tenantId: string;
+    system: string;
+    startedAt: string;
+    completedAt: string;
+    safe: boolean;
+    syntheticData: true;
+    networkAccess: false;
+    allowedTargetSystems: string[];
+    limits: SandboxExecutionLimits;
+    summary: SandboxRunSummary;
+    actions: SandboxActionResult[];
+    disclaimer: string;
+}
+export interface SandboxRun {
+    readonly runId: string;
+    readonly tenantId: string;
+    executeAction(input: CreateActionIntentInput, options?: SandboxActionOptions): Promise<SandboxActionResult>;
+    complete(): SandboxRunReport;
+}
+export interface SandboxHarnessOptions {
+    system?: SandboxSystem;
+    allowedTargetSystems?: string[];
+    limits?: Partial<SandboxExecutionLimits>;
+    tenantTtlMs?: number;
+    maxTenantTtlMs?: number;
+    cleanupIntervalMs?: number;
+    autoCleanup?: boolean;
+    now?: () => Date;
+}
+export interface SandboxCertificationHarness {
+    readonly limits: SandboxExecutionLimits;
+    createTenant(input: SandboxTenantInput): Promise<SandboxTenantLease>;
+    deleteTenant(tenantId: string): Promise<void>;
+    tenantLease(tenantId: string): SandboxTenantLease | undefined;
+    renewTenant(tenantId: string, ttlMs?: number): Promise<SandboxTenantLease>;
+    cleanupExpiredTenants(): Promise<string[]>;
+    seedTenant(tenantId: string, seed: SandboxSeed): Promise<void>;
+    resetTenant(tenantId: string): Promise<void>;
+    snapshotTenant(tenantId: string): Promise<SandboxSeed>;
+    startRun(input: {
+        tenantId: string;
+        runId?: string;
+    }): Promise<SandboxRun>;
+    setGlobalKillSwitch(enabled: boolean, reason?: string): SandboxKillSwitchState;
+    setTenantKillSwitch(tenantId: string, enabled: boolean, reason?: string): SandboxKillSwitchState;
+    close(): Promise<void>;
+}
+export interface SandboxCertificationCheck {
+    id: string;
+    status: "passed" | "failed";
+    message: string;
+    evidence?: Record<string, unknown>;
+}
+export interface SandboxCertificationReport {
+    schemaVersion: typeof SANDBOX_CERTIFICATION_SCHEMA_VERSION;
+    kind: "agentcert.sandbox_certification";
+    implementation: string;
+    generatedAt: string;
+    verdict: {
+        passed: boolean;
+        score: number;
+    };
+    summary: {
+        passed: number;
+        failed: number;
+        total: number;
+    };
+    checks: SandboxCertificationCheck[];
+    runIds: string[];
+    disclaimer: string;
+}
+export interface SandboxCertificationSuiteOptions {
+    system?: SandboxSystem;
+    implementation?: string;
+    targetSystem?: string;
+    now?: () => Date;
+}
+export declare function createInMemorySandboxSystem(options: InMemorySandboxSystemOptions): SandboxSystem;
+export declare function createSandboxCertificationHarness(options: SandboxHarnessOptions): SandboxCertificationHarness;
+export declare function runSandboxCertificationSuite(options?: SandboxCertificationSuiteOptions): Promise<SandboxCertificationReport>;
+export declare function writeSandboxReport(report: SandboxRunReport | SandboxCertificationReport, filePath: string): Promise<string>;
+export declare function validateSyntheticSandboxSeed(input: SandboxSeed): SandboxSeed;
+//# sourceMappingURL=sandbox-harness.d.ts.map

package/dist/vendor/onegent-runtime/sandbox-harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-harness.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/sandbox-harness.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAElB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,oCAAoC,EAAG,sCAA+C,CAAC;AACpG,eAAO,MAAM,0BAA0B,EAAG,4BAAqC,CAAC;AAEhF,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAElE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;IAC5B,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAAC;CACxD;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,oBAAoB,GAC5B,uBAAuB,GACvB,uBAAuB,GACvB,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,GACpB,sBAAsB,GACtB,sBAAsB,GACtB,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,2BAA2B,GAC3B,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,iBAAiB,CAAC;AAEzG,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,OAAO,0BAA0B,CAAC;IACjD,IAAI,EAAE,uBAAuB,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,EAAE,IAAI,CAAC;IACpB,aAAa,EAAE,KAAK,CAAC;IACrB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,KAAK,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5G,QAAQ,IAAI,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrE,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC9D,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC3E,qBAAqB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3E,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,sBAAsB,CAAC;IAC/E,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,sBAAsB,CAAC;IACjG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,OAAO,oCAAoC,CAAC;IAC3D,IAAI,EAAE,iCAAiC,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AA4BD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,4BAA4B,GAAG,aAAa,CAkFhG;AAGD,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,qBAAqB,GAAG,2BAA2B,CA+I7G;AA8LD,wBAAsB,4BAA4B,CAChD,OAAO,GAAE,gCAAqC,GAC7C,OAAO,CAAC,0BAA0B,CAAC,CA2IrC;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,0BAA0B,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMjI;AA+FD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,WAAW,GAAG,WAAW,CAE5E"}