shield360 1.1.0 → 1.2.1

package/dist/agents/__tests__/agents.test.js

@@ -0,0 +1,529 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Agent passport verifier: every step and reason code of the contract, the
+ * receiver policy, the console policy, reports, the middleware and the inputs
+ * a passport can be read from. Keys are generated here; the network is mocked.
+ */
+const crypto_1 = require("crypto");
+const http_1 = require("http");
+const net_1 = require("net");
+const index_1 = require("../index");
+const passport_1 = require("../passport");
+const ISS = 'https://app.shield360.ai';
+const T0 = Date.UTC(2026, 9, 28, 12, 0, 0);
+function makeKey(kid = 'k1') {
+    const { privateKey, publicKey } = (0, crypto_1.generateKeyPairSync)('ed25519');
+    return { kid, privateKey, jwk: { ...publicKey.export({ format: 'jwk' }), kid, alg: 'EdDSA', use: 'sig' } };
+}
+const b64 = (v) => Buffer.from(JSON.stringify(v)).toString('base64url');
+function claims(over = {}) {
+    const iat = Math.floor(T0 / 1000);
+    return {
+        iss: ISS,
+        sub: 'agent:a1',
+        aud: 'api.servflo.ai',
+        iat,
+        exp: iat + 120,
+        jti: (0, crypto_1.randomUUID)(),
+        agent: { id: 'a1', name: 'Dispatch bot', purpose: 'Schedules jobs' },
+        operator: { id: 'org_1', name: 'Acme', domain: 'acme.com' },
+        scope: 'jobs.read invoices.write',
+        decision: { id: 'd1', policyVersion: 'pv1' },
+        ...over,
+    };
+}
+function passport(key, over = {}, header = {}) {
+    const h = b64({ alg: 'EdDSA', typ: 'shield360-agent+jwt', kid: key.kid, ...header });
+    const p = b64(claims(over));
+    const sig = (0, crypto_1.sign)(null, Buffer.from(`${h}.${p}`), key.privateKey).toString('base64url');
+    return `${h}.${p}.${sig}`;
+}
+const json = (body, status = 200) => new Response(JSON.stringify(body), { status, headers: { 'Content-Type': 'application/json' } });
+function net(keys) {
+    const n = { keys, decisions: [], fetch: jest.fn() };
+    n.fetch.mockImplementation(async (url, init = {}) => {
+        const u = new URL(url);
+        if (u.pathname === '/api/agent-passports/keys')
+            return json({ keys: n.keys.map((k) => k.jwk) });
+        if (u.pathname === '/api/agent-passports/verify') {
+            if (!n.verify)
+                throw new Error('no verify');
+            return n.verify(JSON.parse(String(init.body)));
+        }
+        if (u.pathname === '/api/inbound-agents/policy') {
+            if (!n.policy)
+                throw new Error('no policy');
+            return n.policy();
+        }
+        if (u.pathname === '/api/inbound-agents/decisions') {
+            n.decisions.push(JSON.parse(String(init.body)).decisions);
+            return json({ ok: true }, n.decisionStatus ?? 200);
+        }
+        throw new Error(`unexpected ${url}`);
+    });
+    return n;
+}
+let now = T0;
+let key;
+let n;
+function verifier(over = {}) {
+    return (0, index_1.agentVerifier)({ audience: 'api.servflo.ai', fetch: n.fetch, clock: () => now, ...over });
+}
+beforeEach(() => {
+    now = T0;
+    key = makeKey();
+    n = net([key]);
+    jest.spyOn(console, 'warn').mockImplementation(() => undefined);
+});
+afterEach(() => jest.restoreAllMocks());
+describe('a valid passport', () => {
+    it('verifies and carries the agent, operator, person and scopes', async () => {
+        const token = passport(key, { act: { sub: 'pairwiseId0123456789ab', domain: 'acme.com' } });
+        const r = await verifier().check(token);
+        expect(r).toMatchObject({
+            status: 'verified',
+            decision: 'allow',
+            blocked: false,
+            agent: { id: 'a1', name: 'Dispatch bot', purpose: 'Schedules jobs' },
+            operator: { id: 'org_1', name: 'Acme', domain: 'acme.com' },
+            onBehalfOf: { id: 'pairwiseId0123456789ab', domain: 'acme.com' },
+            scopes: ['jobs.read', 'invoices.write'],
+            issuer: ISS,
+            expiresAt: new Date(T0 + 120000).toISOString(),
+        });
+        expect(r.reason).toBeUndefined();
+        expect(r.passportId).toMatch(/^[0-9a-f-]{36}$/);
+        expect(JSON.stringify(r)).not.toContain(token);
+    });
+    it('fetches the key by kid once and caches it', async () => {
+        const v = verifier();
+        await v.check(passport(key));
+        await v.check(passport(key));
+        expect(n.fetch).toHaveBeenCalledTimes(1);
+        expect(n.fetch.mock.calls[0][0]).toBe(`${ISS}/api/agent-passports/keys?kid=k1`);
+    });
+    it('reads a passport without scope, decision or act domain (as the issuer emits them)', async () => {
+        const r = await verifier().check(passport(key, { scope: undefined, act: { sub: 'p1', domain: null } }));
+        expect(r).toMatchObject({ status: 'verified', scopes: [], onBehalfOf: { id: 'p1', domain: null } });
+    });
+    it('treats a 404 for an unknown kid as unknown_key', async () => {
+        n.fetch.mockImplementationOnce(async () => json({ err: 'unknown kid', keys: [] }, 404));
+        expect((await verifier().check(passport(key))).reason).toBe('unknown_key');
+    });
+    it('drops ill-formed scopes and keeps at most 32', async () => {
+        const many = Array.from({ length: 40 }, (_, i) => `s${i}`).join(' ');
+        const r = await verifier().check(passport(key, { scope: `bad/scope ${many}` }));
+        expect(r.scopes).toHaveLength(32);
+        expect(r.scopes).not.toContain('bad/scope');
+    });
+});
+describe('every failure reason, in order', () => {
+    const cases = [
+        ['not three parts', () => 'abc.def', 'malformed'],
+        ['bad base64', () => 'a$b.c.d', 'malformed'],
+        ['header not JSON', () => `bm90LWpzb24.${b64(claims())}.${'A'.repeat(86)}`, 'malformed'],
+        ['wrong typ', () => passport(key, {}, { typ: 'JWT' }), 'malformed'],
+        ['crit header', () => passport(key, {}, { crit: ['x'] }), 'malformed'],
+        ['missing claims', () => passport(key, { operator: undefined }), 'malformed'],
+        ['aud array', () => passport(key, { aud: ['api.servflo.ai'] }), 'malformed'],
+        ['huge token', () => 'a'.repeat(10000), 'malformed'],
+        ['alg none', () => passport(key, {}, { alg: 'none' }), 'unsupported_alg'],
+        ['alg RS256', () => passport(key, {}, { alg: 'RS256' }), 'unsupported_alg'],
+        ['untrusted issuer', () => passport(key, { iss: 'https://evil.example' }), 'untrusted_issuer'],
+        ['unknown kid', () => passport(makeKey('other'), {}), 'unknown_key'],
+        ['signed by another key', () => passport({ ...makeKey(), kid: 'k1' }), 'bad_signature'],
+        ['expired', () => passport(key, { iat: T0 / 1000 - 400, exp: T0 / 1000 - 61 }), 'expired'],
+        ['not yet valid', () => passport(key, { iat: T0 / 1000 + 61, exp: T0 / 1000 + 200 }), 'not_yet_valid'],
+        ['lifetime too long', () => passport(key, { exp: T0 / 1000 + 301 }), 'lifetime_too_long'],
+        ['wrong audience', () => passport(key, { aud: 'api.other.ai' }), 'wrong_audience'],
+    ];
+    it.each(cases)('%s', async (_name, make, reason) => {
+        const r = await verifier().check(make());
+        expect(r).toMatchObject({ status: 'invalid', decision: 'deny', blocked: false, reason });
+    });
+    it('is blocked only in enforce', async () => {
+        const r = await verifier({ policy: { mode: 'enforce' } }).check('x.y.z');
+        expect(r).toMatchObject({ status: 'invalid', decision: 'deny', blocked: true });
+    });
+    it('detects a tampered payload', async () => {
+        const [h, , s] = passport(key).split('.');
+        const r = await verifier().check(`${h}.${b64(claims({ operator: { id: 'org_2', name: 'X', domain: null } }))}.${s}`);
+        expect(r.reason).toBe('bad_signature');
+    });
+    it('never throws on hostile input', async () => {
+        const v = verifier();
+        const inputs = [undefined, null, 42, {}, [], { headers: null }, { headers: { [index_1.AGENT_HEADER]: 5 } }, '....', '\u0000.\u0000.\u0000', { get: () => { throw new Error('x'); } }];
+        for (const input of inputs)
+            await expect(v.check(input)).resolves.toBeDefined();
+    });
+});
+describe('time and skew', () => {
+    it('accepts within the skew and rejects past it', async () => {
+        const exp = T0 / 1000 + 10;
+        now = T0 + 69000; // exp + 59 s
+        expect((await verifier().check(passport(key, { exp }))).status).toBe('verified');
+        now = T0 + 71000; // exp + 61 s
+        expect((await verifier().check(passport(key, { exp }))).reason).toBe('expired');
+    });
+    it('honors a custom skew', async () => {
+        const r = await verifier({ clockSkewSeconds: 5 }).check(passport(key, { iat: T0 / 1000 + 30, exp: T0 / 1000 + 100 }));
+        expect(r.reason).toBe('not_yet_valid');
+    });
+});
+describe('keys', () => {
+    it('refetches an unknown kid at most once a minute per issuer', async () => {
+        const v = verifier();
+        const k2 = makeKey('k2');
+        await v.check(passport(k2));
+        await v.check(passport(k2));
+        expect(n.fetch).toHaveBeenCalledTimes(1);
+        n.keys.push(k2);
+        now += 61000;
+        expect((await v.check(passport(k2, { iat: now / 1000, exp: now / 1000 + 60 }))).status).toBe('verified');
+        expect(n.fetch).toHaveBeenCalledTimes(2);
+    });
+    it('refreshes after an hour and keeps a stale key when the refetch fails', async () => {
+        const v = verifier();
+        await v.check(passport(key));
+        now += 61 * 60000;
+        n.fetch.mockImplementationOnce(async () => {
+            throw new Error('down');
+        });
+        const r = await v.check(passport(key, { iat: now / 1000, exp: now / 1000 + 60 }));
+        expect(r.status).toBe('verified');
+        expect(n.fetch).toHaveBeenCalledTimes(2);
+    });
+    it('refuses a JWK that is not an Ed25519 public key', async () => {
+        n.keys = [{ ...key, jwk: { ...key.jwk, crv: 'X25519' } }];
+        expect((await verifier().check(passport(key))).reason).toBe('unknown_key');
+    });
+});
+describe('audience', () => {
+    it('matches a host against an origin and back, case-insensitively', async () => {
+        expect((await verifier().check(passport(key, { aud: 'https://API.servflo.ai' }))).status).toBe('verified');
+        expect((await verifier({ audience: 'https://api.servflo.ai' }).check(passport(key, { aud: 'api.servflo.ai' }))).status).toBe('verified');
+        expect((await verifier({ audience: ['mcp.servflo.ai', 'API.SERVFLO.AI'] }).check(passport(key))).status).toBe('verified');
+    });
+    it('refuses http origins, paths and other ports in the passport', () => {
+        expect((0, passport_1.audienceMatches)('http://api.servflo.ai', ['api.servflo.ai'])).toBe(false);
+        expect((0, passport_1.audienceMatches)('https://api.servflo.ai/x', ['api.servflo.ai'])).toBe(false);
+        expect((0, passport_1.audienceMatches)('https://api.servflo.ai:8443', ['api.servflo.ai'])).toBe(false);
+        expect((0, passport_1.audienceMatches)('https://api.servflo.ai:8443', ['https://api.servflo.ai:8443'])).toBe(true);
+        expect((0, passport_1.audienceMatches)('https://api.servflo.ai:8443', ['api.servflo.ai:8443'])).toBe(true);
+        // two origins must be identical
+        expect((0, passport_1.audienceMatches)('https://api.servflo.ai', ['http://api.servflo.ai'])).toBe(false);
+        expect((0, passport_1.audienceMatches)('https://api.servflo.ai', ['https://API.servflo.ai'])).toBe(true);
+    });
+});
+describe('replay', () => {
+    it('accepts a passport once', async () => {
+        const v = verifier();
+        const token = passport(key);
+        expect((await v.check(token)).status).toBe('verified');
+        expect(await v.check(token)).toMatchObject({ status: 'invalid', reason: 'replayed', decision: 'deny' });
+    });
+    it('uses a pluggable store and remembers until exp + skew', async () => {
+        const seen = jest.fn(async () => false);
+        await verifier({ replay: { seen } }).check(passport(key));
+        expect(seen).toHaveBeenCalledWith(expect.any(String), (T0 / 1000 + 120 + 60) * 1000);
+    });
+    it('denies when the store fails', async () => {
+        const store = { seen: async () => { throw new Error('redis down'); } };
+        expect((await verifier({ replay: store }).check(passport(key))).reason).toBe('replay_check_failed');
+    });
+    it('the memory store forgets expired ids and keeps under its cap', async () => {
+        let t = 0;
+        const s = new index_1.MemoryReplayStore({ maxEntries: 3, clock: () => t });
+        expect(await s.seen('a', 10)).toBe(false);
+        expect(await s.seen('a', 10)).toBe(true);
+        t = 11;
+        expect(await s.seen('a', 20)).toBe(false);
+        await s.seen('b', 100);
+        await s.seen('c', 100);
+        await s.seen('d', 100);
+        expect(s.size).toBeLessThanOrEqual(3);
+    });
+    it('does not record a passport that failed earlier steps', async () => {
+        const seen = jest.fn(async () => false);
+        await verifier({ replay: { seen } }).check(passport(key, { aud: 'elsewhere.ai' }));
+        expect(seen).not.toHaveBeenCalled();
+    });
+});
+describe('online check', () => {
+    it('posts the passport and audience and accepts a valid answer', async () => {
+        n.verify = () => json({ valid: true });
+        const token = passport(key);
+        const r = await verifier().check(token, { online: true });
+        expect(r.status).toBe('verified');
+        const call = n.fetch.mock.calls.find((c) => String(c[0]).endsWith('/verify'));
+        expect(JSON.parse(call[1].body)).toEqual({ passport: token, audience: 'api.servflo.ai' });
+    });
+    it.each(['revoked', 'unknown_passport'])('invalid with %s', async (reason) => {
+        n.verify = () => json({ valid: false, reason });
+        expect((await verifier().check(passport(key), { online: true })).reason).toBe(reason);
+    });
+    it('runs when the policy says online', async () => {
+        n.verify = () => json({ valid: false, reason: 'revoked' });
+        expect((await verifier({ policy: { online: true } }).check(passport(key))).reason).toBe('revoked');
+    });
+    it('an unreachable issuer does not deny by default', async () => {
+        const r = await verifier().check(passport(key), { online: true });
+        expect(r).toMatchObject({ status: 'verified', decision: 'allow', reason: 'issuer_unreachable' });
+    });
+    it('a 429 from the issuer is issuer_unreachable even with a valid-looking body', async () => {
+        n.verify = () => json({ valid: false, reason: 'revoked' }, 429);
+        expect((await verifier().check(passport(key), { online: true })).reason).toBe('issuer_unreachable');
+    });
+    it('an unreachable issuer denies when onlineFailure is deny', async () => {
+        n.verify = () => new Response('busy', { status: 503 });
+        const r = await verifier({ onlineFailure: 'deny' }).check(passport(key), { online: true });
+        expect(r).toMatchObject({ status: 'invalid', decision: 'deny', reason: 'issuer_unreachable' });
+    });
+});
+describe('receiver policy', () => {
+    it('observe never blocks; enforce blocks what it denies', async () => {
+        const o = await verifier({ policy: { operators: ['other.com'] } }).check(passport(key));
+        expect(o).toMatchObject({ status: 'verified', decision: 'deny', blocked: false, reason: 'operator_not_allowed' });
+        const e = await verifier({ policy: { operators: ['other.com'], mode: 'enforce' } }).check(passport(key));
+        expect(e).toMatchObject({ decision: 'deny', blocked: true });
+    });
+    it('requireAgent denies a call without a passport', async () => {
+        expect(await verifier().check({})).toMatchObject({ status: 'absent', decision: 'allow', blocked: false, reason: 'absent', scopes: [] });
+        expect(await verifier({ policy: { requireAgent: true, mode: 'enforce' } }).check({})).toMatchObject({ status: 'absent', decision: 'deny', blocked: true });
+    });
+    it('allows operators by id or by domain', async () => {
+        expect((await verifier({ policy: { operators: ['org_1'] } }).check(passport(key))).decision).toBe('allow');
+        expect((await verifier({ policy: { operators: ['ACME.com'] } }).check(passport(key))).decision).toBe('allow');
+        const noDomain = passport(key, { operator: { id: 'org_9', name: 'N', domain: null } });
+        expect((await verifier({ policy: { operators: ['acme.com'] } }).check(noDomain)).reason).toBe('operator_not_allowed');
+    });
+    it('requireOnBehalfOf needs act', async () => {
+        const v = verifier({ policy: { requireOnBehalfOf: true } });
+        expect((await v.check(passport(key))).reason).toBe('on_behalf_of_required');
+        expect((await v.check(passport(key, { act: { sub: 'p', domain: 'acme.com' } }))).decision).toBe('allow');
+    });
+});
+describe('policyFrom', () => {
+    const remote = { mode: 'enforce', requireAgent: true, operators: ['org_1'], requireOnBehalfOf: false, online: false, minAssurance: 'named' };
+    it('follows the console policy, sends the API key as a bearer token and caches 60 s', async () => {
+        n.policy = () => json(remote);
+        const v = verifier({ policyFrom: { apiKey: 'sk-test', baseUrl: 'https://console.example/' } });
+        expect(await v.policy()).toEqual(remote);
+        await v.policy();
+        const calls = n.fetch.mock.calls.filter((c) => String(c[0]).includes('/policy'));
+        expect(calls).toHaveLength(1);
+        expect(calls[0][0]).toBe('https://console.example/api/inbound-agents/policy');
+        expect(calls[0][1].headers.Authorization).toBe('Bearer sk-test');
+        now += 61000;
+        await v.policy();
+        await new Promise((r) => setImmediate(r));
+        expect(n.fetch.mock.calls.filter((c) => String(c[0]).includes('/policy'))).toHaveLength(2);
+    });
+    it('accepts { policy: {...} } and lets the local policy override fields', async () => {
+        n.policy = () => json({ policy: remote });
+        const v = verifier({ policyFrom: { apiKey: 'k' }, policy: { mode: 'observe' } });
+        expect(await v.policy()).toEqual({ ...remote, mode: 'observe' });
+    });
+    it('keeps the last good policy on failure, and the defaults when there never was one', async () => {
+        n.policy = () => json(remote);
+        const v = verifier({ policyFrom: { apiKey: 'k' } });
+        await v.policy();
+        n.policy = () => json({ error: 'x' }, 500);
+        now += 61000;
+        await v.policy();
+        await new Promise((r) => setImmediate(r));
+        expect(await v.policy()).toEqual(remote);
+        n.policy = () => {
+            throw new Error('down');
+        };
+        expect(await verifier({ policyFrom: { apiKey: 'k' }, policy: { operators: ['x'] } }).policy()).toEqual({
+            mode: 'observe',
+            requireAgent: false,
+            operators: ['x'],
+            requireOnBehalfOf: false,
+            online: false,
+            minAssurance: 'none',
+        });
+    });
+    it('ignores ill-typed fields', async () => {
+        n.policy = () => json({ mode: 'block-all', requireAgent: 'yes', operators: [1, 'ok'], minAssurance: 'high' });
+        expect(await verifier({ policyFrom: { apiKey: 'k' } }).policy()).toMatchObject({ mode: 'observe', requireAgent: false, operators: ['ok'], minAssurance: 'none' });
+    });
+});
+describe('report', () => {
+    it('batches results to the decision log without the passport', async () => {
+        const v = verifier({ report: { apiKey: 'rk', baseUrl: 'https://console.example' } });
+        const token = passport(key);
+        await v.check(token, { route: '/v1/jobs', method: 'post' });
+        await v.check('bad', { route: '/v1/jobs' });
+        await v.check({}); // absent and allowed: not reported
+        await v.flush();
+        expect(n.decisions).toHaveLength(1);
+        const [a, b] = n.decisions[0];
+        expect(a).toMatchObject({ status: 'verified', route: '/v1/jobs', method: 'POST', receiver: 'api.servflo.ai', at: new Date(T0).toISOString() });
+        expect(b).toMatchObject({ status: 'invalid', reason: 'malformed' });
+        expect(JSON.stringify(n.decisions)).not.toContain(token);
+        const call = n.fetch.mock.calls.find((c) => String(c[0]).endsWith('/decisions'));
+        expect(call[0]).toBe('https://console.example/api/inbound-agents/decisions');
+        expect(call[1].headers.Authorization).toBe('Bearer rk');
+        await v.close();
+    });
+    it('sends at most 100 per call and flushes at 100', async () => {
+        const v = verifier({ report: { apiKey: 'rk' } });
+        for (let i = 0; i < 250; i++)
+            await v.check('bad');
+        await v.flush();
+        expect(n.decisions.map((d) => d.length)).toEqual([100, 100, 50]);
+        await v.close();
+    });
+    it('never throws into the caller when delivery fails', async () => {
+        n.decisionStatus = 401;
+        const v = verifier({ report: { apiKey: 'rk' } });
+        await expect(v.check('bad')).resolves.toMatchObject({ status: 'invalid' });
+        await expect(v.flush()).resolves.toBeUndefined();
+        expect(console.warn).toHaveBeenCalled();
+        await v.close();
+    });
+});
+describe('inputs', () => {
+    it('reads a Fetch Request, Headers, a record, an IncomingMessage and an Express-style req', async () => {
+        const v = verifier();
+        const results = [];
+        results.push(await v.check(new Request('https://api.servflo.ai/x', { headers: { [index_1.AGENT_HEADER]: passport(key) } })));
+        results.push(await v.check(new Headers({ 'shield360-agent': passport(key) })));
+        results.push(await v.check({ 'SHIELD360-AGENT': passport(key) }));
+        const msg = new http_1.IncomingMessage(new net_1.Socket());
+        msg.headers['shield360-agent'] = passport(key);
+        results.push(await v.check(msg));
+        const token = passport(key);
+        results.push(await v.check({ headers: {}, get: (name) => (name.toLowerCase() === 'shield360-agent' ? token : undefined) }));
+        expect(results.map((r) => r.status)).toEqual(['verified', 'verified', 'verified', 'verified', 'verified']);
+    });
+    it('two passports in one call are malformed', async () => {
+        expect((await verifier().check({ 'shield360-agent': [passport(key), passport(key)] })).reason).toBe('malformed');
+        expect((await verifier().check(new Headers([[index_1.AGENT_HEADER, passport(key)], [index_1.AGENT_HEADER, passport(key)]]))).reason).toBe('malformed');
+    });
+});
+describe('middleware', () => {
+    function run(v, headers) {
+        const req = { method: 'GET', url: '/v1/jobs?token=secret', headers };
+        const res = { statusCode: 200, headers: {}, body: '', setHeader(k, val) { this.headers[k] = val; }, end(b) { this.body = b; } };
+        return new Promise((resolve) => {
+            v.middleware()(req, res, () => {
+                clearInterval(t);
+                resolve({ req, res, nextCalled: true });
+            });
+            const t = setInterval(() => {
+                if (res.body) {
+                    clearInterval(t);
+                    resolve({ req, res, nextCalled: false });
+                }
+            }, 1);
+        });
+    }
+    it('sets req.shield360Agent and calls next', async () => {
+        const { req, nextCalled } = await run(verifier(), { 'shield360-agent': passport(key) });
+        expect(nextCalled).toBe(true);
+        expect(req.shield360Agent.status).toBe('verified');
+    });
+    it('observe passes a bad passport through', async () => {
+        const { req, nextCalled } = await run(verifier(), { 'shield360-agent': 'bad' });
+        expect(nextCalled).toBe(true);
+        expect(req.shield360Agent).toMatchObject({ decision: 'deny', blocked: false });
+    });
+    it('answers 403 JSON when blocked', async () => {
+        const { res, nextCalled } = await run(verifier({ policy: { mode: 'enforce', requireAgent: true } }), {});
+        expect(nextCalled).toBe(false);
+        expect(res.statusCode).toBe(403);
+        expect(res.headers['Content-Type']).toContain('application/json');
+        expect(JSON.parse(res.body)).toEqual({ error: 'agent_not_allowed', reason: 'absent' });
+    });
+    it('reports the path without the query', async () => {
+        const v = verifier({ report: { apiKey: 'rk' } });
+        await run(v, { 'shield360-agent': 'bad' });
+        await v.flush();
+        expect(n.decisions[0][0].route).toBe('/v1/jobs');
+        await v.close();
+    });
+});
+describe('parsePassport', () => {
+    it('rejects a 63-byte signature', () => {
+        const [h, p] = passport(key).split('.');
+        expect((0, passport_1.parsePassport)(`${h}.${p}.${Buffer.alloc(63).toString('base64url')}`)).toEqual({ ok: false, reason: 'malformed' });
+    });
+});
+describe('assurance, mandates and the agent profile', () => {
+    const act = (over = {}) => ({ sub: 'pairwise0123456789abcd', domain: 'acme.com', ...over });
+    const mandate = { id: 'm1', expiresAt: '2026-11-28T12:00:00.000Z' };
+    it('passes the new claims through', async () => {
+        const agent = {
+            id: 'a1',
+            name: 'Dispatch bot',
+            status: 'enrolled',
+            environment: 'production',
+            risk: 'low',
+            owner: { domain: 'acme.com' },
+            reviewedAt: '2026-10-01T00:00:00.000Z',
+            enrolledAt: null,
+        };
+        const r = await verifier().check(passport(key, { agent, act: act({ assurance: 'delegated', mandate }) }));
+        expect(r.status).toBe('verified');
+        expect(r.agent).toEqual(agent);
+        expect(r.onBehalfOf).toEqual({ id: 'pairwise0123456789abcd', domain: 'acme.com', assurance: 'delegated', mandate });
+    });
+    it('treats act without assurance as named and an unknown assurance as unverified', async () => {
+        expect((await verifier().check(passport(key, { act: act() }))).onBehalfOf?.assurance).toBe('named');
+        expect((await verifier().check(passport(key, { act: act({ assurance: 'super' }) }))).onBehalfOf?.assurance).toBe('unverified');
+    });
+    it('drops ill-typed optional fields instead of failing', async () => {
+        const r = await verifier().check(passport(key, { agent: { id: 'a1', name: 'B', status: 'weird', risk: 5, owner: 'x' }, act: act({ mandate: { id: 1 } }) }));
+        expect(r.status).toBe('verified');
+        expect(r.agent).toEqual({ id: 'a1', name: 'B' });
+        expect(r.onBehalfOf?.mandate).toBeUndefined();
+    });
+    it.each([
+        ['none', undefined, 'allow'],
+        ['unverified', undefined, 'deny'],
+        ['unverified', 'unverified', 'allow'],
+        ['named', 'unverified', 'deny'],
+        ['named', null, 'allow'], // act without assurance is named
+        ['named', 'named', 'allow'],
+        ['delegated', 'named', 'deny'],
+        ['delegated', 'delegated', 'allow'],
+    ])('minAssurance %s with act assurance %s: %s', async (minAssurance, assurance, decision) => {
+        const claimsOver = assurance === undefined ? {} : { act: act(assurance === null ? {} : { assurance }) };
+        const r = await verifier({ policy: { minAssurance, mode: 'enforce' } }).check(passport(key, claimsOver));
+        expect(r.decision).toBe(decision);
+        if (decision === 'deny')
+            expect(r).toMatchObject({ reason: 'assurance_too_low', blocked: true, status: 'verified' });
+    });
+    it('keeps requireOnBehalfOf working alongside minAssurance', async () => {
+        const r = await verifier({ policy: { requireOnBehalfOf: true, minAssurance: 'delegated' } }).check(passport(key));
+        expect(r.reason).toBe('on_behalf_of_required');
+        const ok = await verifier({ policy: { requireOnBehalfOf: true } }).check(passport(key, { act: act({ assurance: 'unverified' }) }));
+        expect(ok.decision).toBe('allow');
+    });
+    it('lowers the assurance when the issuer says so online, and the policy sees the lower one', async () => {
+        n.verify = () => json({ valid: true, assurance: 'named', reason: 'mandate_revoked' });
+        const token = () => passport(key, { act: act({ assurance: 'delegated', mandate }) });
+        const r = await verifier().check(token(), { online: true });
+        expect(r).toMatchObject({ status: 'verified', decision: 'allow', reason: 'mandate_revoked', onBehalfOf: { assurance: 'named' } });
+        expect(r.onBehalfOf?.mandate).toBeUndefined();
+        const d = await verifier({ policy: { minAssurance: 'delegated' } }).check(token(), { online: true });
+        expect(d).toMatchObject({ decision: 'deny', reason: 'assurance_too_low' });
+    });
+    it('never raises the assurance online', async () => {
+        n.verify = () => json({ valid: true, assurance: 'delegated' });
+        const r = await verifier().check(passport(key, { act: act({ assurance: 'unverified' }) }), { online: true });
+        expect(r.onBehalfOf?.assurance).toBe('unverified');
+    });
+    it('reports the new fields', async () => {
+        const v = verifier({ report: { apiKey: 'rk' } });
+        await v.check(passport(key, { agent: { id: 'a1', name: 'B', risk: 'high' }, act: act({ assurance: 'delegated', mandate }) }));
+        await v.flush();
+        expect(n.decisions[0][0]).toMatchObject({ agent: { risk: 'high' }, onBehalfOf: { assurance: 'delegated', mandate } });
+        await v.close();
+    });
+});
+//# sourceMappingURL=agents.test.js.map

package/dist/agents/__tests__/agents.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.test.js","sourceRoot":"","sources":["../../../src/agents/__tests__/agents.test.ts"],"names":[],"mappings":";;AAAA;;;;GAIG;AACH,mCAA0E;AAC1E,+BAAuC;AACvC,6BAA6B;AAC7B,oCAAyH;AACzH,0CAA6D;AAE7D,MAAM,GAAG,GAAG,0BAA0B,CAAC;AACvC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAI3C,SAAS,OAAO,CAAC,GAAG,GAAG,IAAI;IACzB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAA,4BAAmB,EAAC,SAAS,CAAC,CAAC;IACjE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;AAC7G,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAEjF,SAAS,MAAM,CAAC,OAAgC,EAAE;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAClC,OAAO;QACL,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,UAAU;QACf,GAAG,EAAE,gBAAgB;QACrB,GAAG;QACH,GAAG,EAAE,GAAG,GAAG,GAAG;QACd,GAAG,EAAE,IAAA,mBAAU,GAAE;QACjB,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE;QACpE,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE;QAC3D,KAAK,EAAE,0BAA0B;QACjC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;QAC5C,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAS,EAAE,OAAgC,EAAE,EAAE,SAAkC,EAAE;IACnG,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACrF,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAW9I,SAAS,GAAG,CAAC,IAAY;IACvB,MAAM,CAAC,GAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAW,EAAE,OAAoB,EAAE,EAAE,EAAE;QACvE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,QAAQ,KAAK,2BAA2B;YAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,CAAC,QAAQ,KAAK,6BAA6B,EAAE,CAAC;YACjD,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,4BAA4B,EAAE,CAAC;YAChD,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,+BAA+B,EAAE,CAAC;YACnD,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,IAAI,GAAG,GAAG,EAAE,CAAC;AACb,IAAI,GAAS,CAAC;AACd,IAAI,CAAM,CAAC;AAEX,SAAS,QAAQ,CAAC,OAAsC,EAAE;IACxD,OAAO,IAAA,qBAAa,EAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAgC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AAC7H,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,EAAE,CAAC;IACT,GAAG,GAAG,OAAO,EAAE,CAAC;IAChB,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;AAExC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACtB,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACpE,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE;YAC3D,UAAU,EAAE,EAAE,EAAE,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE;YAChE,MAAM,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC;YACvC,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,MAAO,CAAC,CAAC,WAAW,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,kCAAkC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACxG,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACxF,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,MAAM,KAAK,GAA0C;QACnD,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;QACjD,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;QAC5C,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,eAAe,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,CAAC;QACxF,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,CAAC;QACnE,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC;QACtE,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,CAAC;QAC7E,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC;QAC5E,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAM,CAAC,EAAE,WAAW,CAAC;QACrD,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,CAAC;QACzE,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,iBAAiB,CAAC;QAC3E,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,CAAC,EAAE,kBAAkB,CAAC;QAC9F,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,aAAa,CAAC;QACpE,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,eAAe,CAAC;QACvF,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC;QAC1F,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,eAAe,CAAC;QACtG,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,mBAAmB,CAAC;QACzF,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,CAAC;KACnF,CAAC;IACF,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACjD,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzE,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,CAAC,CAAC,EAAE,AAAD,EAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrH,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,MAAM,GAAc,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,oBAAY,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzL,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,GAAG,GAAG,EAAE,GAAG,KAAM,CAAC,CAAC,aAAa;QAChC,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjF,GAAG,GAAG,EAAE,GAAG,KAAM,CAAC,CAAC,aAAa;QAChC,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACtH,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;IACpB,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,GAAG,IAAI,KAAM,CAAC;QACd,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,GAAG,IAAI,EAAE,GAAG,KAAM,CAAC;QACnB,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,IAAI,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3G,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzI,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5H,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,IAAA,0BAAe,EAAC,uBAAuB,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,CAAC,IAAA,0BAAe,EAAC,0BAA0B,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpF,MAAM,CAAC,IAAA,0BAAe,EAAC,6BAA6B,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvF,MAAM,CAAC,IAAA,0BAAe,EAAC,6BAA6B,EAAE,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnG,MAAM,CAAC,IAAA,0BAAe,EAAC,6BAA6B,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,gCAAgC;QAChC,MAAM,CAAC,IAAA,0BAAe,EAAC,wBAAwB,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,CAAC,IAAA,0BAAe,EAAC,wBAAwB,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,MAAM,CAAC,GAAG,IAAI,yBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC,GAAG,EAAE,CAAC;QACP,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC3E,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAClH,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACzG,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACxI,MAAM,CAAC,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7J,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3G,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9G,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACxH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC5E,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IAE7I,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjE,GAAG,IAAI,KAAM,CAAC;QACd,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3C,GAAG,IAAI,KAAM,CAAC;QACd,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEzC,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC;QACF,MAAM,CAAC,MAAM,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;YACrG,IAAI,EAAE,SAAS;YACf,YAAY,EAAE,KAAK;YACnB,SAAS,EAAE,CAAC,GAAG,CAAC;YAChB,iBAAiB,EAAE,KAAK;YACxB,MAAM,EAAE,KAAK;YACb,YAAY,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9G,MAAM,CAAC,MAAM,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACpK,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,mCAAmC;QACtD,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/I,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,CAAC,CAAC,cAAc,GAAG,GAAG,CAAC;QACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,oBAAY,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACrH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,sBAAe,CAAC,IAAI,YAAM,EAAE,CAAC,CAAC;QAC9C,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACpI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjH,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,oBAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,oBAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzI,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,SAAS,GAAG,CAAC,CAA8B,EAAE,OAA+B;QAC1E,MAAM,GAAG,GAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC;QAC1E,MAAM,GAAG,GAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAA4B,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,CAAS,EAAE,GAAW,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAS,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvL,OAAO,IAAI,OAAO,CAA8C,CAAC,OAAO,EAAE,EAAE;YAC1E,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;gBAC5B,aAAa,CAAC,CAAC,CAAC,CAAC;gBACjB,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,GAAmC,WAAW,CAAC,GAAG,EAAE;gBACzD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBACb,aAAa,CAAC,CAAC,CAAC,CAAC;oBACjB,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC,EAAE,CAAC,CAAC,CAAC;QACR,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACzG,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,IAAA,wBAAa,EAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3H,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,MAAM,GAAG,GAAG,CAAC,OAAgC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACrH,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAAC;IAEpE,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,KAAK,GAAG;YACZ,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,YAAY;YACzB,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;YAC7B,UAAU,EAAE,0BAA0B;YACtC,UAAU,EAAE,IAAI;SACjB,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1G,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpG,MAAM,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAC9B,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAC1H,CAAC;QACF,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;QAC5B,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC;QACjC,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC;QACrC,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC;QAC/B,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,iCAAiC;QAC3D,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;QAC3B,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC;QAC9B,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC;KAC3B,CAAC,CAAC,2CAA2C,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;QACnG,MAAM,UAAU,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACxG,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QACzG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,MAAM;YAAE,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAClH,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACnI,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAClI,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7G,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9H,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtH,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/agents/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * shield360/agents: verify the agents that call your API or MCP server.
+ *
+ *   import { agentVerifier, AGENT_HEADER } from 'shield360/agents';
+ *   const verifier = agentVerifier({ audience: 'api.example.com' });
+ *   const result = await verifier.check(request);
+ *
+ * Kept apart from tracing: importing this subpath loads no OpenTelemetry code.
+ */
+export { agentVerifier, readPassport } from './verifier';
+export type { AgentVerifier } from './verifier';
+export { MemoryReplayStore } from './replay';
+export type { MemoryReplayStoreOptions } from './replay';
+export { AGENT_HEADER, ASSURANCE_LEVELS, DEFAULT_ISSUERS, DEFAULT_POLICY, PASSPORT_TYP, assuranceRank } from './types';
+export type { AgentCheck, AgentCheckInput, AgentCheckOptions, AgentCheckReason, AgentIdentity, AgentMandate, AgentOnBehalfOf, AgentOperator, AgentPolicy, AgentVerifierOptions, Assurance, MinAssurance, ReplayStore, Shield360Connection, } from './types';