@agentguard-run/spend 0.11.0 → 0.12.0

package/dist/receipts/dag.js

@@ -0,0 +1,501 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signDagNode = signDagNode;
+exports.computeDagEntryHash = computeDagEntryHash;
+exports.msgHashForDecision = msgHashForDecision;
+exports.deriveTrustScore = deriveTrustScore;
+exports.deriveCapability = deriveCapability;
+exports.verifyReceiptDag = verifyReceiptDag;
+exports.gateCapability = gateCapability;
+exports.merkleRoot = merkleRoot;
+exports.compressReceiptDag = compressReceiptDag;
+exports.merkleInclusionProof = merkleInclusionProof;
+exports.verifyInclusion = verifyInclusion;
+exports.dagEnvelopeFromEntries = dagEnvelopeFromEntries;
+const ed = __importStar(require("@noble/ed25519"));
+const decision_log_1 = require("../decision-log");
+const DEFAULT_THRESHOLDS = {
+    READ_ONLY: { minTrust: 0.5, minDepth: 1 },
+    TRANSACT: { minTrust: 0.72, minDepth: 1 },
+    ADMIN: { minTrust: 0.82, minDepth: 2 },
+    ORCHESTRATE: { minTrust: 0.9, minDepth: 3 },
+};
+const DATA_PLANE_KEYS = /^(prompt|completion|messages|content|source|pii|raw|rawPrompt|rawCompletion|apiKey|secret)$/i;
+async function signDagNode(args) {
+    const decision = sanitizeMetadata(args.decision);
+    const parents = (args.parents ?? []).map(parentHash);
+    const unsigned = {
+        version: args.version ?? 2,
+        sequence: args.sequence,
+        decision,
+        workflowId: args.workflowId ?? stringOrNull(decision.workflowId) ?? stringOrNull(decision.workflow_id),
+        parents,
+        topology: args.topology ?? topologyForParentCount(parents.length),
+        msgHash: msgHashForDecision(decision),
+        trustScore: clampTrust(args.trustScore ?? deriveTrustScore(decision)),
+        blocked: args.blocked ?? decision.action === 'block',
+        capability: args.capability ?? deriveCapability(decision),
+        signerFingerprint: (0, decision_log_1.computeSignerFingerprint)(args.publicKey),
+        builderCode: args.builderCode ?? null,
+        timestamp: args.timestamp ?? stringOrNull(decision.timestamp) ?? new Date().toISOString(),
+    };
+    const entryHash = computeDagEntryHash(unsigned);
+    const signature = Buffer.from(await ed.signAsync(Buffer.from(entryHash, 'hex'), args.privateKey)).toString('hex');
+    return { ...unsigned, entryHash, signature };
+}
+function computeDagEntryHash(node) {
+    const { entryHash: _entryHash, signature: _signature, previousHash: _previousHash, legacyPreviousHash: _legacyPreviousHash, legacy: _legacy, ...payload } = node;
+    return (0, decision_log_1.sha256Hex)((0, decision_log_1.canonicalJson)(payload));
+}
+function msgHashForDecision(decision) {
+    assertMetadataOnly(decision);
+    return (0, decision_log_1.sha256Hex)((0, decision_log_1.canonicalJson)(decision)).slice(0, 16);
+}
+function deriveTrustScore(decision) {
+    const action = typeof decision.action === 'string' ? decision.action : '';
+    const entryType = typeof decision.entryType === 'string' ? decision.entryType : '';
+    const reasons = Array.isArray(decision.reasons) ? decision.reasons.map(String).join(' ').toLowerCase() : '';
+    if (action === 'block' || reasons.includes('blocked') || reasons.includes('cap reached'))
+        return 0.2;
+    if (entryType === 'settlement' && decision.partial === true)
+        return 0.55;
+    if (entryType === 'governance')
+        return 0.78;
+    if (entryType === 'outcome')
+        return decision.partial === true ? 0.62 : 0.88;
+    if (action === 'shadow')
+        return 0.74;
+    if (action === 'downgrade')
+        return 0.82;
+    if (action === 'allow')
+        return 0.94;
+    return 0.7;
+}
+function deriveCapability(decision) {
+    const raw = String(decision.capability ??
+        decision.capabilityClaim ??
+        decision.requiredCapability ??
+        (decision.outcomeReceipt?.metadata?.capability) ??
+        '').toLowerCase();
+    if (raw.includes('orchestrate'))
+        return 'ORCHESTRATE';
+    if (raw.includes('payment'))
+        return 'TRANSACT';
+    if (raw.includes('transaction') || raw.includes('transact'))
+        return 'TRANSACT';
+    if (raw.includes('admin') || raw.includes('data_write') || raw.includes('write'))
+        return 'ADMIN';
+    return 'READ_ONLY';
+}
+async function verifyReceiptDag(nodes, signerKeys) {
+    const inputs = Array.isArray(nodes) ? nodes : nodes.nodes;
+    if (inputs.length === 0)
+        return { valid: true, compositeTrust: 1, depth: 0, topologySummary: emptyTopologySummary() };
+    let normalized;
+    try {
+        normalized = inputs.map(normalizeDagNode);
+    }
+    catch (err) {
+        return failure(String(err.message || err));
+    }
+    const byHash = new Map();
+    for (const node of normalized) {
+        if (byHash.has(node.entryHash))
+            return failure('DUPLICATE_NODE_HASH');
+        byHash.set(node.entryHash, node);
+    }
+    const kahn = topologicalOrder(normalized, byHash);
+    if (!kahn.valid)
+        return failure(kahn.reason ?? 'CYCLE_DETECTED');
+    for (const node of normalized) {
+        const key = keyForNode(node, signerKeys);
+        if (!key)
+            return failure('SIGNER_KEY_NOT_FOUND');
+        const publicKey = normalizePublicKey(key);
+        if (node.legacy) {
+            const legacyOk = await (0, decision_log_1.verifyEntry)({
+                sequence: node.sequence,
+                decision: node.decision,
+                previousHash: node.legacyPreviousHash ?? decision_log_1.GENESIS_PREVIOUS_HASH,
+                entryHash: node.entryHash,
+                signature: node.signature,
+                signerFingerprint: node.signerFingerprint,
+            }, publicKey);
+            if (!legacyOk)
+                return failure('LEGACY_SIGNATURE_OR_HASH_INVALID');
+            continue;
+        }
+        assertMetadataOnly(node.decision);
+        const expectedHash = computeDagEntryHash(node);
+        if (expectedHash !== node.entryHash)
+            return failure('HASH_INVALID');
+        if ((0, decision_log_1.computeSignerFingerprint)(publicKey) !== node.signerFingerprint)
+            return failure('SIGNER_FINGERPRINT_MISMATCH');
+        const ok = await ed.verifyAsync(Buffer.from(node.signature, 'hex'), Buffer.from(node.entryHash, 'hex'), publicKey);
+        if (!ok)
+            return failure('SIGNATURE_INVALID');
+    }
+    const diamond = verifyDiamondCorrelation(normalized, byHash);
+    if (!diamond.valid)
+        return failure(diamond.reason ?? 'DIAMOND_ANCESTOR_MISMATCH');
+    const depths = computeDepths(kahn.order, byHash);
+    const maxDepth = Math.max(...Array.from(depths.values()), 1);
+    const topologySummary = summarizeTopology(normalized, byHash);
+    return {
+        valid: true,
+        compositeTrust: Math.min(...normalized.map((node) => node.trustScore)),
+        depth: maxDepth,
+        topologySummary,
+    };
+}
+function gateCapability(requestedLevel, dagVerificationResult, thresholds = {}) {
+    const merged = { ...DEFAULT_THRESHOLDS[requestedLevel], ...(thresholds[requestedLevel] ?? {}) };
+    const threshold = { minTrust: merged.minTrust ?? 0, minDepth: merged.minDepth ?? 0 };
+    if (!dagVerificationResult.valid) {
+        return {
+            granted: false,
+            requestedLevel,
+            compositeTrust: dagVerificationResult.compositeTrust,
+            depth: dagVerificationResult.depth,
+            reason: dagVerificationResult.reason ?? 'DAG_VERIFICATION_FAILED',
+        };
+    }
+    if (dagVerificationResult.compositeTrust < threshold.minTrust) {
+        return {
+            granted: false,
+            requestedLevel,
+            compositeTrust: dagVerificationResult.compositeTrust,
+            depth: dagVerificationResult.depth,
+            reason: 'TRUST_BELOW_THRESHOLD',
+        };
+    }
+    if (dagVerificationResult.depth < threshold.minDepth) {
+        return {
+            granted: false,
+            requestedLevel,
+            compositeTrust: dagVerificationResult.compositeTrust,
+            depth: dagVerificationResult.depth,
+            reason: 'DEPTH_BELOW_THRESHOLD',
+        };
+    }
+    return {
+        granted: true,
+        requestedLevel,
+        compositeTrust: dagVerificationResult.compositeTrust,
+        depth: dagVerificationResult.depth,
+    };
+}
+function merkleRoot(nodes) {
+    const leaves = nodes.map((node) => normalizeDagNode(node).entryHash).sort();
+    return merkleRootFromLeaves(leaves);
+}
+function compressReceiptDag(nodes, threshold = 10) {
+    return {
+        compressed: nodes.length > threshold,
+        root: merkleRoot(nodes),
+        nodeCount: nodes.length,
+    };
+}
+function merkleInclusionProof(nodes, node) {
+    let leaves = nodes.map((item) => normalizeDagNode(item).entryHash).sort();
+    const target = typeof node === 'string' ? node : normalizeDagNode(node).entryHash;
+    let index = leaves.indexOf(target);
+    if (index < 0)
+        throw new Error('Merkle target node not found');
+    const proof = [];
+    while (leaves.length > 1) {
+        if (leaves.length % 2 === 1)
+            leaves = [...leaves, leaves[leaves.length - 1]];
+        const siblingIndex = index % 2 === 0 ? index + 1 : index - 1;
+        proof.push({ siblingHash: leaves[siblingIndex], position: index % 2 === 0 ? 'right' : 'left' });
+        const next = [];
+        for (let i = 0; i < leaves.length; i += 2)
+            next.push(hashPair(leaves[i], leaves[i + 1]));
+        index = Math.floor(index / 2);
+        leaves = next;
+    }
+    return proof;
+}
+function verifyInclusion(node, proof, root) {
+    let hash = typeof node === 'string' ? node : normalizeDagNode(node).entryHash;
+    for (const step of proof) {
+        hash = step.position === 'left' ? hashPair(step.siblingHash, hash) : hashPair(hash, step.siblingHash);
+    }
+    return hash === root;
+}
+function dagEnvelopeFromEntries(entries, workflowId = null) {
+    const nodes = entries.map((entry) => normalizeDagNode(entry));
+    const rootId = nodes[nodes.length - 1]?.entryHash ?? decision_log_1.GENESIS_PREVIOUS_HASH;
+    return { nodes, rootId, workflowId };
+}
+function normalizeDagNode(input) {
+    const candidate = input;
+    if (candidate.legacy !== true && Array.isArray(candidate.parents) && candidate.msgHash && candidate.topology) {
+        return {
+            version: numberOr(candidate.version, 2),
+            sequence: candidate.sequence,
+            decision: sanitizeMetadata(candidate.decision),
+            workflowId: candidate.workflowId ?? null,
+            parents: [...candidate.parents],
+            topology: candidate.topology,
+            msgHash: candidate.msgHash,
+            trustScore: clampTrust(candidate.trustScore),
+            blocked: Boolean(candidate.blocked),
+            capability: candidate.capability ?? deriveCapability(candidate.decision),
+            entryHash: candidate.entryHash,
+            signature: candidate.signature,
+            signerFingerprint: candidate.signerFingerprint,
+            builderCode: candidate.builderCode ?? null,
+            timestamp: candidate.timestamp ?? new Date(0).toISOString(),
+            previousHash: candidate.previousHash,
+            legacyPreviousHash: null,
+            legacy: false,
+        };
+    }
+    const previousHash = candidate.previousHash ?? decision_log_1.GENESIS_PREVIOUS_HASH;
+    const parents = previousHash === decision_log_1.GENESIS_PREVIOUS_HASH ? [] : [previousHash];
+    const decision = sanitizeMetadata(candidate.decision);
+    return {
+        version: 1,
+        sequence: candidate.sequence,
+        decision,
+        workflowId: stringOrNull(decision.workflowId) ?? stringOrNull(decision.workflow_id),
+        parents,
+        topology: 'linear',
+        msgHash: msgHashForDecision(decision),
+        trustScore: deriveTrustScore(decision),
+        blocked: decision.action === 'block',
+        capability: deriveCapability(decision),
+        entryHash: candidate.entryHash,
+        signature: candidate.signature,
+        signerFingerprint: candidate.signerFingerprint,
+        timestamp: stringOrNull(decision.timestamp) ?? new Date(0).toISOString(),
+        previousHash,
+        legacyPreviousHash: previousHash,
+        legacy: true,
+    };
+}
+function topologicalOrder(nodes, byHash) {
+    const indegree = new Map();
+    const children = new Map();
+    for (const node of nodes) {
+        const parentRefs = node.parents.filter((parent) => parent !== decision_log_1.GENESIS_PREVIOUS_HASH);
+        for (const parent of parentRefs) {
+            if (!byHash.has(parent))
+                return { valid: false, order: [], reason: 'MISSING_PARENT' };
+            const list = children.get(parent) ?? [];
+            list.push(node.entryHash);
+            children.set(parent, list);
+        }
+        indegree.set(node.entryHash, parentRefs.length);
+    }
+    const queue = Array.from(indegree.entries()).filter(([, degree]) => degree === 0).map(([hash]) => hash);
+    const order = [];
+    while (queue.length) {
+        const current = queue.shift();
+        order.push(current);
+        for (const child of children.get(current) ?? []) {
+            const next = (indegree.get(child) ?? 0) - 1;
+            indegree.set(child, next);
+            if (next === 0)
+                queue.push(child);
+        }
+    }
+    if (order.length !== nodes.length)
+        return { valid: false, order, reason: 'CYCLE_DETECTED' };
+    return { valid: true, order };
+}
+function verifyDiamondCorrelation(nodes, byHash) {
+    for (const node of nodes) {
+        if (node.parents.length < 2)
+            continue;
+        const parentNodes = node.parents.map((parent) => byHash.get(parent)).filter(Boolean);
+        if (parentNodes.length < 2)
+            continue;
+        const ancestorSets = parentNodes.map((parent) => ancestorsOf(parent.entryHash, byHash));
+        const common = [...ancestorSets[0]].filter((hash) => ancestorSets.every((set) => set.has(hash)));
+        const isDiamond = node.topology === 'diamond' || common.length > 0;
+        if (!isDiamond)
+            continue;
+        if (!common.length)
+            return { valid: false, reason: 'DIAMOND_ANCESTOR_MISMATCH' };
+        const correlated = common.some((ancestorHash) => {
+            const ancestor = byHash.get(ancestorHash);
+            return ancestor ? parentNodes.every((parent) => correlatesToAncestor(parent, ancestor)) : false;
+        });
+        if (!correlated)
+            return { valid: false, reason: 'DIAMOND_MSGHASH_MISMATCH' };
+    }
+    return { valid: true };
+}
+function ancestorsOf(hash, byHash, seen = new Set()) {
+    const node = byHash.get(hash);
+    if (!node)
+        return seen;
+    for (const parent of node.parents) {
+        if (seen.has(parent))
+            continue;
+        seen.add(parent);
+        ancestorsOf(parent, byHash, seen);
+    }
+    return seen;
+}
+function correlatesToAncestor(node, ancestor) {
+    if (node.msgHash === ancestor.msgHash)
+        return true;
+    const flattened = flattenValues(node.decision);
+    return flattened.includes(ancestor.msgHash) || flattened.includes(ancestor.entryHash);
+}
+function flattenValues(value) {
+    if (value == null)
+        return [];
+    if (typeof value === 'string')
+        return [value];
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return [String(value)];
+    if (Array.isArray(value))
+        return value.flatMap(flattenValues);
+    if (typeof value === 'object')
+        return Object.values(value).flatMap(flattenValues);
+    return [];
+}
+function computeDepths(order, byHash) {
+    const depths = new Map();
+    for (const hash of order) {
+        const node = byHash.get(hash);
+        const parentDepth = node.parents.length
+            ? Math.max(0, ...node.parents.map((parent) => depths.get(parent) ?? 0))
+            : 0;
+        depths.set(hash, parentDepth + 1);
+    }
+    return depths;
+}
+function summarizeTopology(nodes, byHash) {
+    const childCounts = new Map();
+    for (const node of nodes) {
+        for (const parent of node.parents)
+            childCounts.set(parent, (childCounts.get(parent) ?? 0) + 1);
+    }
+    const summary = emptyTopologySummary();
+    for (const node of nodes) {
+        let topology = node.topology;
+        if (node.parents.length > 1) {
+            const parentNodes = node.parents.map((parent) => byHash.get(parent)).filter(Boolean);
+            const common = parentNodes.length > 1
+                ? [...ancestorsOf(parentNodes[0].entryHash, byHash)].filter((hash) => parentNodes.every((parent) => ancestorsOf(parent.entryHash, byHash).has(hash)))
+                : [];
+            topology = common.length ? 'diamond' : 'fan_in';
+        }
+        else if (childCounts.get(node.entryHash) > 1) {
+            topology = 'fan_out';
+        }
+        summary[topology] += 1;
+    }
+    return summary;
+}
+function emptyTopologySummary() {
+    return { linear: 0, fan_in: 0, fan_out: 0, diamond: 0 };
+}
+function failure(reason) {
+    return { valid: false, compositeTrust: 0, depth: 0, topologySummary: emptyTopologySummary(), reason };
+}
+function keyForNode(node, keys) {
+    if (typeof keys === 'string' || keys instanceof Uint8Array)
+        return keys;
+    return keys[node.signerFingerprint] ?? null;
+}
+function normalizePublicKey(key) {
+    if (key instanceof Uint8Array)
+        return key;
+    const clean = key.replace(/^0x/, '');
+    return Uint8Array.from(Buffer.from(clean, 'hex'));
+}
+function parentHash(parent) {
+    return typeof parent === 'string' ? parent : parent.entryHash;
+}
+function topologyForParentCount(count) {
+    if (count === 0 || count === 1)
+        return 'linear';
+    return 'fan_in';
+}
+function merkleRootFromLeaves(input) {
+    if (input.length === 0)
+        return (0, decision_log_1.sha256Hex)('');
+    let leaves = [...input].sort();
+    while (leaves.length > 1) {
+        if (leaves.length % 2 === 1)
+            leaves.push(leaves[leaves.length - 1]);
+        const next = [];
+        for (let i = 0; i < leaves.length; i += 2)
+            next.push(hashPair(leaves[i], leaves[i + 1]));
+        leaves = next;
+    }
+    return leaves[0];
+}
+function hashPair(left, right) {
+    return (0, decision_log_1.sha256Hex)(left + right);
+}
+function sanitizeMetadata(value) {
+    assertMetadataOnly(value);
+    return JSON.parse(JSON.stringify(value));
+}
+function assertMetadataOnly(value, path = 'decision') {
+    if (value == null)
+        return;
+    if (Array.isArray(value)) {
+        value.forEach((child, index) => assertMetadataOnly(child, `${path}[${index}]`));
+        return;
+    }
+    if (typeof value !== 'object')
+        return;
+    for (const [key, child] of Object.entries(value)) {
+        if (DATA_PLANE_KEYS.test(key)) {
+            throw new Error('DAG receipt metadata cannot include data-plane field: ' + path + '.' + key);
+        }
+        assertMetadataOnly(child, path + '.' + key);
+    }
+}
+function numberOr(value, fallback) {
+    return Number.isSafeInteger(value) ? value : fallback;
+}
+function stringOrNull(value) {
+    return typeof value === 'string' && value ? value : null;
+}
+function clampTrust(value) {
+    const numeric = typeof value === 'number' && Number.isFinite(value) ? value : 0;
+    return Math.max(0, Math.min(1, numeric));
+}
+//# sourceMappingURL=dag.js.map

package/dist/receipts/dag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag.js","sourceRoot":"","sources":["../../src/receipts/dag.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkFA,kCAmCC;AAED,kDAGC;AAED,gDAGC;AAED,4CAYC;AAED,4CAaC;AAED,4CA8DC;AAED,wCAwCC;AAED,gCAGC;AAED,gDAMC;AAED,oDAgBC;AAED,0CAMC;AAED,wDAIC;AAnTD,mDAAqC;AACrC,kDAAyH;AAmEzH,MAAM,kBAAkB,GAAuC;IAC7D,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE;IACzC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE;IACzC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE;IACtC,WAAW,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE;CAC5C,CAAC;AAEF,MAAM,eAAe,GAAG,8FAA8F,CAAC;AAOhH,KAAK,UAAU,WAAW,CAAC,IAcjC;IACC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAmC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC;QAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtG,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC;QACjE,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC;QACrC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO;QACpD,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC,QAAQ,CAAC;QACzD,iBAAiB,EAAE,IAAA,uCAAwB,EAAC,IAAI,CAAC,SAAS,CAAC;QAC3D,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC1F,CAAC;IACF,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClH,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC;AAED,SAAgB,mBAAmB,CAAC,IAA+E;IACjH,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,IAA+B,CAAC;IAC5L,OAAO,IAAA,wBAAS,EAAC,IAAA,4BAAa,EAAC,OAAO,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,kBAAkB,CAAC,QAAiC;IAClE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,OAAO,IAAA,wBAAS,EAAC,IAAA,4BAAa,EAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAgB,gBAAgB,CAAC,QAAiC;IAChE,MAAM,MAAM,GAAG,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,SAAS,GAAG,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5G,IAAI,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,GAAG,CAAC;IACrG,IAAI,SAAS,KAAK,YAAY,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzE,IAAI,SAAS,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,gBAAgB,CAAC,QAAiC;IAChE,MAAM,GAAG,GAAG,MAAM,CAChB,QAAQ,CAAC,UAAU;QACjB,QAAQ,CAAC,eAAe;QACxB,QAAQ,CAAC,kBAAkB;QAC3B,CAAG,QAAQ,CAAC,cAAsD,EAAE,QAAgD,EAAE,UAAU,CAAC;QACjI,EAAE,CACL,CAAC,WAAW,EAAE,CAAC;IAChB,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,aAAa,CAAC;IACtD,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/E,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjG,OAAO,WAAW,CAAC;AACrB,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,KAA6C,EAC7C,UAAqE;IAErE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,oBAAoB,EAAE,EAAE,CAAC;IAEtH,IAAI,UAA+B,CAAC;IACpC,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,OAAO,CAAC,MAAM,CAAE,GAAa,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC;IAEjE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,MAAM,IAAA,0BAAW,EAChC;gBACE,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAoC;gBACnD,YAAY,EAAE,IAAI,CAAC,kBAAkB,IAAI,oCAAqB;gBAC9D,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,EACD,SAAS,CACV,CAAC;YACF,IAAI,CAAC,QAAQ;gBAAE,OAAO,OAAO,CAAC,kCAAkC,CAAC,CAAC;YAClE,SAAS;QACX,CAAC;QACD,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,YAAY,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC;QACpE,IAAI,IAAA,uCAAwB,EAAC,SAAS,CAAC,KAAK,IAAI,CAAC,iBAAiB;YAAE,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAClH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;QACnH,IAAI,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,2BAA2B,CAAC,CAAC;IAElF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9D,OAAO;QACL,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtE,KAAK,EAAE,QAAQ;QACf,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAC5B,cAAsC,EACtC,qBAAmD,EACnD,aAAuC,EAAE;IAEzC,MAAM,MAAM,GAAG,EAAE,GAAG,kBAAkB,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAChG,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;IACrF,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,cAAc;YACd,cAAc,EAAE,qBAAqB,CAAC,cAAc;YACpD,KAAK,EAAE,qBAAqB,CAAC,KAAK;YAClC,MAAM,EAAE,qBAAqB,CAAC,MAAM,IAAI,yBAAyB;SAClE,CAAC;IACJ,CAAC;IACD,IAAI,qBAAqB,CAAC,cAAc,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC9D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,cAAc;YACd,cAAc,EAAE,qBAAqB,CAAC,cAAc;YACpD,KAAK,EAAE,qBAAqB,CAAC,KAAK;YAClC,MAAM,EAAE,uBAAuB;SAChC,CAAC;IACJ,CAAC;IACD,IAAI,qBAAqB,CAAC,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QACrD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,cAAc;YACd,cAAc,EAAE,qBAAqB,CAAC,cAAc;YACpD,KAAK,EAAE,qBAAqB,CAAC,KAAK;YAClC,MAAM,EAAE,uBAAuB;SAChC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,cAAc;QACd,cAAc,EAAE,qBAAqB,CAAC,cAAc;QACpD,KAAK,EAAE,qBAAqB,CAAC,KAAK;KACnC,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU,CAAC,KAAwB;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAwB,EAAE,SAAS,GAAG,EAAE;IACzE,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS;QACpC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC;QACvB,SAAS,EAAE,KAAK,CAAC,MAAM;KACxB,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAwB,EAAE,IAA8B;IAC3F,IAAI,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;IAClF,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC;QAC9E,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,CAAE,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACjG,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC;QAC3F,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,eAAe,CAAC,IAA8B,EAAE,KAAwB,EAAE,IAAY;IACpG,IAAI,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,IAAI,KAAK,IAAI,CAAC;AACvB,CAAC;AAED,SAAgB,sBAAsB,CAAC,OAAiC,EAAE,aAA4B,IAAI;IACxG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS,IAAI,oCAAqB,CAAC;IAC3E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAsB;IAC9C,MAAM,SAAS,GAAG,KAAyD,CAAC;IAC5E,IAAK,SAAkC,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvI,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,gBAAgB,CAAC,SAAS,CAAC,QAAmC,CAAC;YACzE,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI;YACxC,OAAO,EAAE,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;YAC5C,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;YACnC,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,gBAAgB,CAAC,SAAS,CAAC,QAAmC,CAAC;YACnG,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;YAC9C,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI;YAC1C,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAC3D,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,IAAI,oCAAqB,CAAC;IACrE,MAAM,OAAO,GAAG,YAAY,KAAK,oCAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAA8C,CAAC,CAAC;IAC5F,OAAO;QACL,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,QAAQ;QACR,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnF,OAAO;QACP,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC;QACrC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QACtC,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,OAAO;QACpC,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QACtC,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;QAC9C,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACxE,YAAY;QACZ,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA0B,EAAE,MAAsC;IAC1F,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,oCAAqB,CAAC,CAAC;QACrF,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;YACtF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1B,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACxG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5C,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1B,IAAI,IAAI,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC5F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,wBAAwB,CAAC,KAA0B,EAAE,MAAsC;IAClG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAwB,CAAC;QAC5G,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACrC,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClG,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QACjF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE;YAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAClG,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAsC,EAAE,OAAO,IAAI,GAAG,EAAU;IACjG,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAuB,EAAE,QAA2B;IAChF,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC7G,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,KAAe,EAAE,MAAsC;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;YACrC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA0B,EAAE,MAAsC;IAC3F,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,GAAoB,IAAI,CAAC,QAAQ,CAAC;QAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAwB,CAAC;YAC5G,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC;gBACnC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtJ,CAAC,CAAC,EAAE,CAAC;YACP,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClD,CAAC;aAAM,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAE,GAAG,CAAC,EAAE,CAAC;YAChD,QAAQ,GAAG,SAAS,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,oBAAoB,EAAE,EAAE,MAAM,EAAE,CAAC;AACxG,CAAC;AAED,SAAS,UAAU,CAAC,IAAoB,EAAE,IAA+D;IACvG,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,YAAY,UAAU;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAwB;IAClD,IAAI,GAAG,YAAY,UAAU;QAAE,OAAO,GAAG,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,UAAU,CAAC,MAAwD;IAC1E,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;AAChE,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAe;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAA,wBAAS,EAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,OAAO,IAAA,wBAAS,EAAC,IAAI,GAAG,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAoC,KAAQ;IACnE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,IAAI,GAAG,UAAU;IAC3D,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,kBAAkB,CAAC,KAAK,EAAE,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,QAAgB;IAChD,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/telemetry.js

@@ -43,7 +43,7 @@ const https = __importStar(require("https"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const crypto_1 = require("crypto");
-const AGENTGUARD_SPEND_VERSION = '0.11.0';
+const AGENTGUARD_SPEND_VERSION = '0.12.0';
 const STATE_DIR = path.join(os.homedir(), '.agentguard');
 const INSTALL_PATH = path.join(STATE_DIR, 'install.json');
 const BEACON_URL = 'https://agentguard.run/api/beacon';

package/docs/patents/CLAIM_MAPPING.md

@@ -0,0 +1,37 @@
+# DAG Receipt Tree Claim Mapping
+
+Internal reduction-to-practice mapping. Confirm claim scope with counsel before external assertion.
+
+## Claim 2: DAG Trust Attestation verification
+
+- TAT node fields: `ReceiptDagNode` defines version, timestamp, msgHash, trustScore, blocked, signerFingerprint, topology, parents, entryHash, and signature in `packages/agentguard-spend/src/receipts/dag.ts:8`.
+- Signature verification against signer keys: `verifyReceiptDag()` resolves the signer public key and verifies Ed25519 signatures in `packages/agentguard-spend/src/receipts/dag.ts:182`.
+- Kahn topological sort and cycle failure: `topologicalOrder()` computes in-degree, visits zero-parent nodes, and returns `CYCLE_DETECTED` in `packages/agentguard-spend/src/receipts/dag.ts:358`.
+- Diamond common-ancestor and msgHash correlation: `verifyDiamondCorrelation()` traverses parent ancestry and checks correlation values in `packages/agentguard-spend/src/receipts/dag.ts:386`.
+- Minimum-of-chain composite trust: `verifyReceiptDag()` returns `Math.min(...trustScore)` in `packages/agentguard-spend/src/receipts/dag.ts:215`.
+- Legacy linear chain compatibility: `normalizeDagNode()` maps `previousHash` to `parents` and preserves old entry verification in `packages/agentguard-spend/src/receipts/dag.ts:310`.
+
+Python mirror:
+
+- TAT node signing and canonical fields: `agentguard_spend/receipts/dag.py:45`.
+- Verification, topological sort, and composite trust: `agentguard_spend/receipts/dag.py:115` and `agentguard_spend/receipts/dag.py:236`.
+
+## Claim 3: Attestation-gated capability escalation
+
+- Capability levels are the ordered enum `READ_ONLY`, `TRANSACT`, `ADMIN`, `ORCHESTRATE` in `packages/agentguard-spend/src/receipts/dag.ts:6`.
+- Default trust and depth thresholds are defined in `packages/agentguard-spend/src/receipts/dag.ts:69`.
+- `gateCapability()` denies invalid DAGs, trust below threshold, or insufficient DAG depth before granting a requested capability in `packages/agentguard-spend/src/receipts/dag.ts:223`.
+- Python parity lives in `agentguard_spend/receipts/dag.py:165`.
+
+## Claim 7: Merkle compression and inclusion proofs
+
+- DAGs over the default threshold are compressed by `compressReceiptDag()` in `packages/agentguard-spend/src/receipts/dag.ts:270`.
+- Inclusion proofs are produced by `merkleInclusionProof()` in `packages/agentguard-spend/src/receipts/dag.ts:278`.
+- Inclusion proofs are verified by `verifyInclusion()` in `packages/agentguard-spend/src/receipts/dag.ts:296`.
+- Python parity lives in `agentguard_spend/receipts/dag.py:181`, `agentguard_spend/receipts/dag.py:185`, and `agentguard_spend/receipts/dag.py:202`.
+
+## Workflow and Reviewer Cascade practice points
+
+- Outcome runtime attaches a DAG envelope to signed outcome receipts when drafter, reviewer, or final signed entries exist in `packages/agentguard-spend/src/outcomes/runtime.ts:168`.
+- The DAG envelope uses only metadata signed entries. It excludes prompt, completion, source, and PII fields through the data-plane guard in `packages/agentguard-spend/src/receipts/dag.ts:514`.
+- The public verifier renders DAG topology, composite trust, depth, and capability status in `agentguard-site/verify/index.html`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentguard-run/spend",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "All terminology and labels used in AgentGuard materials are descriptive of software functionality only, not legal definitions or guarantees of compliance. Terms like receipt, audit log, evidence, audit trail, and attestation refer solely to cryptographically-signed records produced by the software. Full functional-use disclaimer in README.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -74,6 +74,11 @@
       "types": "./dist/byo/index.d.ts",
       "require": "./dist/byo/index.js",
       "default": "./dist/byo/index.js"
+    },
+    "./receipts/dag": {
+      "types": "./dist/receipts/dag.d.ts",
+      "require": "./dist/receipts/dag.js",
+      "default": "./dist/receipts/dag.js"
     }
   },
   "bin": {
@@ -105,7 +110,8 @@
     "src/verticals",
     "src/governance.ts",
     "src/byo",
-    "src/cli/byo.ts"
+    "src/cli/byo.ts",
+    "docs/patents/CLAIM_MAPPING.md"
   ],
   "scripts": {
     "build": "tsc",

package/src/outcomes/metadata-learning.ts

@@ -92,7 +92,7 @@ export function normalizeLearningMetadataRow(input: Record<string, unknown>): Le
     guardrail_tier: clean(input.guardrail_tier, 'unknown', 64),
     feedback_verdict: verdict,
     feedback_reason: reason,
-    timestamp: new Date(String(input.timestamp || Date.now())).toISOString(),
+    timestamp: normalizeTimestamp(input.timestamp),
   };
 }
 
@@ -133,6 +133,11 @@ export function revisionSuggestion(reasons: Record<string, number>): string {
   return ({ missing_citation: 'tighten cite-or-refuse instruction', wrong_format: 'make output schema stricter', wrong_category: 'add category examples', too_long: 'shorten answer format', missed_clause: 'expand clause watchlist', needs_review: 'lower reviewer cascade threshold', great: 'preserve current template' } as Record<string, string>)[top || ''] || 'keep collecting metadata';
 }
 
+function normalizeTimestamp(value: unknown) {
+  const time = value == null ? Date.now() : new Date(String(value)).getTime();
+  return new Date(Number.isFinite(time) ? time : Date.now()).toISOString();
+}
+
 function pick(a: LearningAggregate) { return { prompt_version: a.prompt_version, model_id: a.model_id, effort: a.effort, fit_score: fitScore(a) }; }
 function fitScore(a: LearningAggregate) { return round(a.pass_rate * 0.32 + a.mean_quality_score * 0.28 + a.feedback_distribution.accept_rate * 0.24 - a.feedback_distribution.reject_rate * 0.18 - a.escalation_rate * 0.08 - Math.min(0.12, a.mean_cost_cents / 2000) - Math.min(0.08, a.mean_latency_ms / 120000)); }
 function clean(value: unknown, fallback: any, max: number) { const raw = value == null ? fallback : String(value).toLowerCase().replace(/[^a-z0-9_./:-]/g, '_').slice(0, max); return raw || fallback; }

package/src/outcomes/runtime.ts

@@ -1,4 +1,5 @@
 import { randomUUID } from 'crypto';
+import { dagEnvelopeFromEntries } from '../receipts/dag';
 import { buildScopeKey } from '../policy';
 import { computeCallCents, inferProvider } from '../cost-table';
 import { recommend, type ModelRouteRecommendation } from '../router';
@@ -164,8 +165,12 @@ export async function executeOutcomeTask(options: ExecuteOutcomeTaskOptions): Pr
     posture,
     budgetTier,
   });
-  await receiptStore.append(receipt);
   const signedReceipt = await options.guard.recordOutcomeReceipt(receiptToMetadata(receipt));
+  if (signedReceipt.signed) {
+    const dagEntries = [drafter?.signed, reviewer?.signed, signedReceipt.signed].filter(Boolean) as NonNullable<ModelRunResult['signed']>[];
+    receipt.dag = dagEnvelopeFromEntries(dagEntries, receipt.scopeKey);
+  }
+  await receiptStore.append(receipt);
   return { receipt, signed: signedReceipt.signed, outputText, reviewerOutputText };
 }