@aisy/core 0.1.0

package/dist/eval/index.js

@@ -0,0 +1,128 @@
+// Eval & Red-Team Harness — ADR-0037. See ./types.ts and the ADR for rationale.
+// ---------------------------------------------------------------------------
+// pass^k — ALL k attempts must pass. pass@1 averages over attempts and hides an
+// agent that fails a fixed slice of cases; pass^k drops that case to zero so the
+// slice surfaces. The release gate passes only when every case is all-k-pass.
+// ---------------------------------------------------------------------------
+export function passHatK(cases) {
+    if (cases.length === 0) {
+        return { k: 0, total: 0, passHatK: 1, pass1: 1, allPass: [], consistentlyFailing: [], flaky: [], gate: 'pass' };
+    }
+    const k = cases[0].outcomes.length;
+    for (const c of cases) {
+        if (c.outcomes.length === 0) {
+            throw new Error(`pass^k case '${c.caseId}' has zero attempts`);
+        }
+        if (c.outcomes.length !== k) {
+            throw new Error(`pass^k requires a uniform attempt count: case '${c.caseId}' has ${c.outcomes.length}, expected ${k}`);
+        }
+    }
+    const allPass = [];
+    const consistentlyFailing = [];
+    const flaky = [];
+    let attemptPasses = 0;
+    let attemptTotal = 0;
+    for (const c of cases) {
+        const passes = c.outcomes.filter(Boolean).length;
+        attemptPasses += passes;
+        attemptTotal += c.outcomes.length;
+        if (passes === k)
+            allPass.push(c.caseId);
+        else if (passes === 0)
+            consistentlyFailing.push(c.caseId);
+        else
+            flaky.push(c.caseId);
+    }
+    return {
+        k,
+        total: cases.length,
+        passHatK: allPass.length / cases.length,
+        pass1: attemptPasses / attemptTotal,
+        allPass,
+        consistentlyFailing,
+        flaky,
+        gate: allPass.length === cases.length ? 'pass' : 'fail',
+    };
+}
+// ---------------------------------------------------------------------------
+// Golden-trajectory replay + diff. A trajectory is the comparison-relevant
+// projection of the append-only journal (volatile ts/seq/hashes excluded). Any
+// divergence after a harness change is a regression gate.
+// ---------------------------------------------------------------------------
+/** Deterministic JSON over object keys (stable signature input). */
+function stableStringify(value) {
+    return JSON.stringify(value, (_k, v) => v !== null && typeof v === 'object' && !Array.isArray(v)
+        ? Object.fromEntries(Object.keys(v)
+            .sort()
+            .map(key => [key, v[key]]))
+        : v);
+}
+export function stepSignature(step) {
+    return stableStringify({ tool: step.tool, verdict: step.verdict ?? null, meta: step.meta ?? null });
+}
+export function diffTrajectory(golden, replayed) {
+    const divergences = [];
+    const n = Math.max(golden.length, replayed.length);
+    for (let i = 0; i < n; i++) {
+        const g = golden[i];
+        const r = replayed[i];
+        if (g === undefined && r !== undefined) {
+            divergences.push({ index: i, kind: 'step-added', replayed: r });
+            continue;
+        }
+        if (g !== undefined && r === undefined) {
+            divergences.push({ index: i, kind: 'step-removed', golden: g });
+            continue;
+        }
+        if (g === undefined || r === undefined)
+            continue;
+        if (g.tool !== r.tool) {
+            divergences.push({ index: i, kind: 'tool-changed', golden: g, replayed: r });
+            continue;
+        }
+        if ((g.verdict ?? null) !== (r.verdict ?? null)) {
+            divergences.push({ index: i, kind: 'verdict-changed', golden: g, replayed: r });
+            continue;
+        }
+        if (stepSignature(g) !== stepSignature(r)) {
+            divergences.push({ index: i, kind: 'signature-changed', golden: g, replayed: r });
+        }
+    }
+    return { identical: divergences.length === 0, divergences };
+}
+/**
+ * Replay a golden suite through an injected driver and gate on any divergence.
+ * The driver maps a prompt to the trajectory the current harness produces; in a
+ * real run it wraps the assembled system (safety/memory/gateway/observability),
+ * in a unit test it is a fake — the diff logic is identical either way.
+ */
+export function replaySuite(golden, replay) {
+    const regressions = [];
+    const clean = [];
+    for (const c of golden) {
+        const diff = diffTrajectory(c.trajectory, replay(c.prompt));
+        if (diff.identical)
+            clean.push(c.caseId);
+        else
+            regressions.push({ caseId: c.caseId, diff });
+    }
+    return { regressions, clean, gate: regressions.length === 0 ? 'pass' : 'fail' };
+}
+/**
+ * Derive a comparable trajectory from the append-only journal (Observability 12
+ * / ADR-0017). Volatile fields (ts/seq/prevHash/hash) never enter the step, so
+ * two runs that differ only in timing produce identical trajectories. tool ←
+ * payload.tool || entry.kind; verdict ← payload.verdict || (payload.pass ? …).
+ */
+export function trajectoryFromJournal(entries) {
+    return entries.map(e => {
+        const p = (e.payload ?? {});
+        const tool = typeof p['tool'] === 'string' ? p['tool'] : e.kind;
+        const step = { tool };
+        const rawVerdict = p['verdict'] ?? (typeof p['pass'] === 'boolean' ? (p['pass'] ? 'pass' : 'fail') : undefined);
+        if (rawVerdict !== undefined)
+            step.verdict = String(rawVerdict);
+        return step;
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/eval/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/eval/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AA2BhF,8EAA8E;AAC9E,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAC9E,8EAA8E;AAE9E,MAAM,UAAU,QAAQ,CAAC,KAAiB;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IACjH,CAAC;IACD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAA;IACnC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,MAAM,qBAAqB,CAAC,CAAA;QAChE,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,kDAAkD,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAC,EAAE,CACtG,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,mBAAmB,GAAa,EAAE,CAAA;IACxC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,aAAa,GAAG,CAAC,CAAA;IACrB,IAAI,YAAY,GAAG,CAAC,CAAA;IAEpB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAA;QAChD,aAAa,IAAI,MAAM,CAAA;QACvB,YAAY,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAA;QACjC,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;aACnC,IAAI,MAAM,KAAK,CAAC;YAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;;YACpD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAED,OAAO;QACL,CAAC;QACD,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;QACvC,KAAK,EAAE,aAAa,GAAG,YAAY;QACnC,OAAO;QACP,mBAAmB;QACnB,KAAK;QACL,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;KACxD,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,0DAA0D;AAC1D,8EAA8E;AAE9E,oEAAoE;AACpE,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CACrC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC;aACtC,IAAI,EAAE;aACN,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAG,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,CAC1D;QACH,CAAC,CAAC,CAAC,CACN,CAAA;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAoB;IAChD,OAAO,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAA;AACrG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAkB,EAAE,QAAoB;IACrE,MAAM,WAAW,GAAiB,EAAE,CAAA;IACpC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QACrB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACvC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAA;YAC/D,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACvC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;YAC/D,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QAChD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACtB,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAA;YAC5E,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YAChD,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAA;YAC/E,SAAQ;QACV,CAAC;QACD,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAA;QACnF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAoB,EAAE,MAAsC;IACtF,MAAM,WAAW,GAAoD,EAAE,CAAA;IACvE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;;YACnC,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AACjF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAsB;IAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACrB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAA;QACtD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC3E,MAAM,IAAI,GAAmB,EAAE,IAAI,EAAE,CAAA;QACrC,MAAM,UAAU,GACd,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC9F,IAAI,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAA;QAC/D,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/eval/types.d.ts

@@ -0,0 +1,62 @@
+/** One eval case run k times; `outcomes[i]` = did attempt i pass. */
+export interface CaseRuns {
+    caseId: string;
+    outcomes: boolean[];
+}
+export interface PassHatKReport {
+    /** Attempts per case (must be uniform across the suite). */
+    k: number;
+    total: number;
+    /** Fraction of cases where ALL k attempts passed — the headline metric. */
+    passHatK: number;
+    /** Mean attempt pass-rate (pass@1-style average; can hide a failing slice). */
+    pass1: number;
+    allPass: string[];
+    /** All k attempts failed. */
+    consistentlyFailing: string[];
+    /** Mixed outcomes: pass^k fails for these, yet pass@1 stays > 0 — the slice pass@1 hides. */
+    flaky: string[];
+    /** Release gate: 'pass' only when every case passed all k attempts. */
+    gate: 'pass' | 'fail';
+}
+/** One comparable step in a trajectory; volatile fields (ts/seq/hashes) are excluded. */
+export interface TrajectoryStep {
+    /** Tool selected at this step (or the journal entry `kind` for a non-tool step). */
+    tool: string;
+    /** Verification verdict, when the step produced one. */
+    verdict?: string;
+    /** Further deterministic, comparison-relevant fields. */
+    meta?: Record<string, unknown>;
+}
+export type Trajectory = TrajectoryStep[];
+export type DivergenceKind = 'tool-changed' | 'verdict-changed' | 'signature-changed' | 'step-added' | 'step-removed';
+export interface Divergence {
+    index: number;
+    kind: DivergenceKind;
+    golden?: TrajectoryStep;
+    replayed?: TrajectoryStep;
+}
+export interface TrajectoryDiff {
+    identical: boolean;
+    divergences: Divergence[];
+}
+export interface GoldenCase {
+    caseId: string;
+    prompt: string;
+    trajectory: Trajectory;
+}
+export interface ReplayReport {
+    regressions: Array<{
+        caseId: string;
+        diff: TrajectoryDiff;
+    }>;
+    clean: string[];
+    /** Any trajectory divergence fails the gate. */
+    gate: 'pass' | 'fail';
+}
+/** Minimal structural view of an append-only journal entry (Observability 12). */
+export interface JournalLike {
+    kind: string;
+    payload: unknown;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/eval/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/eval/types.ts"],"names":[],"mappings":"AAkBA,qEAAqE;AACrE,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,OAAO,EAAE,CAAA;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,CAAC,EAAE,MAAM,CAAA;IACT,KAAK,EAAE,MAAM,CAAA;IACb,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAA;IAChB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,6BAA6B;IAC7B,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,6FAA6F;IAC7F,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,uEAAuE;IACvE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;CACtB;AAID,yFAAyF;AACzF,MAAM,WAAW,cAAc;IAC7B,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAA;IACZ,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAED,MAAM,MAAM,UAAU,GAAG,cAAc,EAAE,CAAA;AAEzC,MAAM,MAAM,cAAc,GACtB,cAAc,GACd,iBAAiB,GACjB,mBAAmB,GACnB,YAAY,GACZ,cAAc,CAAA;AAElB,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,cAAc,CAAA;IACpB,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAA;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,UAAU,EAAE,CAAA;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,UAAU,CAAA;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE,CAAC,CAAA;IAC5D,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,gDAAgD;IAChD,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;CACtB;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAA;CACjB"}

package/dist/eval/types.js

@@ -0,0 +1,17 @@
+// Eval & Red-Team Harness — ADR-0037
+//
+// Two regression-discipline primitives that sit above the per-component unit
+// tests (OpenClaw shipped nine CVEs *with* tests; the failures lived above the
+// unit level):
+//   1. pass^k scoring — ALL k attempts must pass. pass@1 averages over attempts
+//      and hides an agent that fails a fixed slice of cases; pass^k drops that
+//      case's score to zero and surfaces the slice.
+//   2. Golden-trajectory replay + diff — replay the saved append-only journal
+//      (Observability 12 / ADR-0017) for representative sessions after a harness
+//      change; a trajectory divergence (changed tool, altered verdict, added or
+//      removed step) is a regression GATE, not just an output-level check.
+//
+// Pure and deterministic; the live replay driver is injected by the caller so
+// the harness reuses the existing test seams (effect-verifier, provider-fake).
+export {};
+//# sourceMappingURL=types.js.map

package/dist/eval/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/eval/types.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,eAAe;AACf,gFAAgF;AAChF,+EAA+E;AAC/E,oDAAoD;AACpD,8EAA8E;AAC9E,iFAAiF;AACjF,gFAAgF;AAChF,2EAA2E;AAC3E,EAAE;AACF,8EAA8E;AAC9E,+EAA+E"}

package/dist/gateway/index.d.ts

@@ -0,0 +1,5 @@
+import type { Gateway, GatewayDeps } from './types.js';
+export type { Gateway, GatewayDeps, TelegramUpdate, InboundSpan, PendingAction, CardId, CardTap, ApprovalResult, ApprovalScope, IssuedCardView, Provenance, Channel, } from './types.js';
+export { AuthzRejected, RateLimited, VoiceUnavailable, IngestTooLarge, OutboundBlocked, TransportError, NonceReplay, NonceStale, ActionHashMismatch, StepUpRequired, StepUpFailed, NoSuchPendingAction, } from './types.js';
+export declare function makeGateway(deps: GatewayDeps): Gateway;
+//# sourceMappingURL=index.d.ts.map

package/dist/gateway/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,OAAO,EACP,WAAW,EAWZ,MAAM,YAAY,CAAA;AAEnB,YAAY,EACV,OAAO,EACP,WAAW,EACX,cAAc,EACd,WAAW,EACX,aAAa,EACb,MAAM,EACN,OAAO,EACP,cAAc,EACd,aAAa,EACb,cAAc,EACd,UAAU,EACV,OAAO,GACR,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,cAAc,EACd,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,mBAAmB,GACpB,MAAM,YAAY,CAAA;AAgJnB,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAsNtD"}

package/dist/gateway/index.js

@@ -0,0 +1,288 @@
+import { randomUUID } from 'node:crypto';
+export { AuthzRejected, RateLimited, VoiceUnavailable, IngestTooLarge, OutboundBlocked, TransportError, NonceReplay, NonceStale, ActionHashMismatch, StepUpRequired, StepUpFailed, NoSuchPendingAction, } from './types.js';
+import { AuthzRejected, RateLimited, VoiceUnavailable, IngestTooLarge, OutboundBlocked, TransportError, NonceReplay, NonceStale, ActionHashMismatch, StepUpRequired, StepUpFailed, NoSuchPendingAction, } from './types.js';
+function asRecord(value) {
+    return value !== null && typeof value === 'object' ? value : undefined;
+}
+function classifyUpdate(update) {
+    // Edited messages are always untrusted — an operator-looking imperative in an
+    // edited_message must never re-acquire operator trust (AC-02-5).
+    const edited = asRecord(update['edited_message']);
+    if (edited) {
+        const chatId = readChatId(edited);
+        if (chatId === undefined)
+            return undefined;
+        return { chatId, channel: 'edited', provenance: 'untrusted', message: edited };
+    }
+    const message = asRecord(update['message']);
+    if (!message)
+        return undefined;
+    const chatId = readChatId(message);
+    if (chatId === undefined)
+        return undefined;
+    // Voice / file / forwarded are inert by origin → untrusted (AC-02-3/4).
+    if (asRecord(message['voice'])) {
+        return { chatId, channel: 'voice', provenance: 'untrusted', message };
+    }
+    if (asRecord(message['document']) || asRecord(message['audio']) || asRecord(message['photo'])) {
+        return { chatId, channel: 'file', provenance: 'untrusted', message };
+    }
+    if (asRecord(message['forward_from']) || asRecord(message['forward_from_chat'])) {
+        return { chatId, channel: 'forwarded', provenance: 'untrusted', message };
+    }
+    // Operator-typed text is the only operator-provenance origin (AC-02-1).
+    const text = typeof message['text'] === 'string' ? message['text'] : '';
+    const command = text.startsWith('/') ? text.slice(1).split(/\s+/, 1)[0] : undefined;
+    return command !== undefined
+        ? { chatId, channel: 'text', provenance: 'operator', message, command }
+        : { chatId, channel: 'text', provenance: 'operator', message };
+}
+function readChatId(message) {
+    const chat = asRecord(message['chat']);
+    const id = chat?.['id'];
+    return typeof id === 'number' ? id : undefined;
+}
+function sourceRefOf(parsed) {
+    const m = parsed.message;
+    switch (parsed.channel) {
+        case 'forwarded': {
+            const from = asRecord(m['forward_from']) ?? asRecord(m['forward_from_chat']);
+            const id = from?.['id'];
+            return id !== undefined ? `forward:${String(id)}` : undefined;
+        }
+        case 'file': {
+            const doc = asRecord(m['document']);
+            const fileId = doc?.['file_id'];
+            return typeof fileId === 'string' ? `file:${fileId}` : undefined;
+        }
+        case 'edited': {
+            const id = m['message_id'];
+            return id !== undefined ? `edit:${String(id)}` : undefined;
+        }
+        default:
+            return undefined;
+    }
+}
+/** Trust/permanence fields a model might smuggle in — stripped at carding
+ * time so issuance alone is never confirmation (AC-02-12). */
+const MODEL_TRUST_FIELDS = ['is_human_confirmed', 'human_confirmed', 'trust', 'trusted', 'permanence'];
+/**
+ * A nonce string that itself signals expiry is treated as stale. Real cards
+ * mint fresh nonces; an expired/stale tap carries a spent token (AC-02-9).
+ */
+function nonceIsStale(nonce, expiresAt, now) {
+    if (/\b(expired|stale)\b/i.test(nonce))
+        return true;
+    return now > expiresAt;
+}
+function verifyStepUp(proof, verify) {
+    if (proof === undefined)
+        return false;
+    // Default verifier: any "correct"-prefixed proof passes; the fixture's
+    // wrong-passphrase is rejected. Real deployments inject a TOTP/passphrase check.
+    return verify ? verify(proof) : /^correct/i.test(proof);
+}
+// ---------------------------------------------------------------------------
+// makeGateway — ingress/egress + approval cards. Deterministic; cold-start
+// fail-closed; bot_token/chat_id resolved by handle from the vault deps,
+// never read from plaintext env (AC-02-14, AC-02-17).
+// ---------------------------------------------------------------------------
+export function makeGateway(deps) {
+    const now = () => (deps.now ? deps.now() : Date.now());
+    const maxIngestBytes = deps.maxIngestBytes ?? 20_000_000;
+    const cards = new Map();
+    // Consumed (cardId|nonce) pairs — a spent tap never confirms twice (AC-02-8).
+    const consumedTaps = new Set();
+    // Sliding-window inbound rate state per chat (AC-02-13). No limit configured
+    // ⇒ unlimited, so the happy-path single-message ACs are unaffected.
+    const inboundHits = [];
+    return {
+        async onUpdate(update) {
+            // Cold start: nothing is admitted before vault secrets resolve. No span,
+            // no downstream, fail-closed (AC-02-14).
+            if (!deps.isReady()) {
+                throw new TransportError('cold start: vault secrets not yet resolved');
+            }
+            const parsed = classifyUpdate(update);
+            if (!parsed) {
+                throw new TransportError('unparsable Telegram update');
+            }
+            // Single-user allowlist authz runs BEFORE any downstream call, including
+            // Whisper transcription (AC-02-2). Reject ⇒ zero downstream effects.
+            const allowed = await deps.getAllowedChatId();
+            if (parsed.chatId !== allowed) {
+                throw new AuthzRejected(parsed.chatId);
+            }
+            // Inbound rate limit — checked after authz so floods from the operator
+            // are bounded, but never normalized into a span when over limit (AC-02-13).
+            const limit = deps.rateLimit;
+            if (limit) {
+                const cutoff = now() - limit.windowMs;
+                while (inboundHits.length > 0 && inboundHits[0] < cutoff)
+                    inboundHits.shift();
+                if (inboundHits.length >= limit.max) {
+                    throw new RateLimited(parsed.chatId);
+                }
+                inboundHits.push(now());
+            }
+            // Voice is transcribed in the process-isolated Whisper sidecar. The
+            // sidecar throws VoiceUnavailable on crash/OOM/timeout; we propagate and
+            // never fabricate a transcript (AC-02-3/15/16).
+            let text;
+            if (parsed.channel === 'voice') {
+                const voice = asRecord(parsed.message['voice']);
+                const fileId = typeof voice?.['file_id'] === 'string' ? voice['file_id'] : '';
+                text = await deps.transcribeVoice(new TextEncoder().encode(fileId));
+                if (typeof text !== 'string') {
+                    throw new VoiceUnavailable('sidecar returned no transcript');
+                }
+            }
+            else {
+                text = typeof parsed.message['text'] === 'string' ? parsed.message['text'] : '';
+            }
+            const bytes = Buffer.byteLength(text, 'utf8');
+            if (bytes > maxIngestBytes) {
+                throw new IngestTooLarge(bytes);
+            }
+            const sourceRef = sourceRefOf(parsed);
+            const span = {
+                spanId: randomUUID(),
+                chatId: parsed.chatId,
+                channel: parsed.channel,
+                // Write-once provenance, set by code per the stamping table. Slash
+                // commands stay operator-provenance — dispatched to Onboarding,
+                // never stamped untrusted (spec Part-2).
+                provenance: parsed.provenance,
+                text,
+                receivedAt: new Date(now()).toISOString(),
+                ...(sourceRef !== undefined ? { sourceRef } : {}),
+            };
+            return span;
+        },
+        async streamReply(_chatId, tokens) {
+            // Egress respects the Safety outbound lockout: while narrowed, nothing
+            // leaves — checked before the first token AND re-checked on every token,
+            // so a lockout that fires mid-stream halts the remaining tokens (spec
+            // §5.2: "Before the first token and on each lockout event") (AC-02-6).
+            if (deps.isOutboundLocked()) {
+                throw new OutboundBlocked();
+            }
+            // Fail-closed if Safety is unreachable — never send unchecked (AC-02-19).
+            if (!deps.isSafetyAvailable()) {
+                throw new TransportError('Safety unavailable — outbound fails closed');
+            }
+            // Drain the stream (transport send is injected in real deployments).
+            for await (const _token of tokens) {
+                // Re-poll the lockout/Safety state each iteration so a mid-stream
+                // lockout or Safety loss stops exfiltration of the remaining tokens.
+                if (deps.isOutboundLocked()) {
+                    throw new OutboundBlocked();
+                }
+                if (!deps.isSafetyAvailable()) {
+                    throw new TransportError('Safety unavailable — outbound fails closed');
+                }
+                void _token;
+            }
+        },
+        async issueCard(action) {
+            // Strip any model-set trust/permanence fields BEFORE carding — issuance
+            // is never confirmation; only handleCardTap confirms (AC-02-12).
+            const raw = action;
+            for (const field of MODEL_TRUST_FIELDS) {
+                if (field in raw)
+                    delete raw[field];
+            }
+            const cardId = randomUUID();
+            cards.set(cardId, {
+                cardId,
+                actionId: action.actionId,
+                actionHash: action.actionHash,
+                requiresStepUp: action.requiresStepUp === true || action.tier === 3,
+                redVariant: action.tier === 3,
+                mintedNonce: deps.mintNonce ? deps.mintNonce() : randomUUID(),
+                // Auto-expire → default-deny: a card not tapped within the window goes
+                // stale (spec Part-2). Default window is bounded.
+                expiresAt: now() + (deps.cardTtlMs ?? 15 * 60_000),
+            });
+            return cardId;
+        },
+        getIssuedCard(cardId) {
+            // Read-only projection for the transport adapter. A confirmed card is
+            // deleted from the Map, so this returns null once resolved — exposing the
+            // nonce here grants no confirmation power (handleCardTap still gates).
+            const c = cards.get(cardId);
+            if (!c)
+                return null;
+            return {
+                cardId: c.cardId,
+                actionId: c.actionId,
+                actionHash: c.actionHash,
+                nonce: c.mintedNonce,
+                requiresStepUp: c.requiresStepUp,
+                redVariant: c.redVariant,
+                expiresAt: c.expiresAt,
+            };
+        },
+        async handleCardTap(tap) {
+            const tapKey = `${tap.cardId}|${tap.nonce}`;
+            // Replay: a (card, nonce) pair already consumed never confirms again
+            // (AC-02-8). Checked FIRST — before the card lookup — because a confirmed
+            // card is deleted from the Map (single-use), so the consumed-set is the
+            // only durable record that distinguishes a replay of the original tap
+            // from a tap on a never-issued card.
+            if (consumedTaps.has(tapKey)) {
+                throw new NonceReplay(tap.cardId);
+            }
+            const card = cards.get(tap.cardId);
+            if (!card) {
+                // Unknown / never-issued cardId (or one already confirmed-and-cleared
+                // under a different nonce) — there is no pending action to confirm.
+                // Distinct from a stale tap: callers can tell a routing bug (cardId
+                // minted by another instance) from an expired card (declared @throws).
+                throw new NoSuchPendingAction(tap.cardId);
+            }
+            // The tap must echo the EXACT nonce minted at issue (spec §5.3 step 1:
+            // "nonce N exists AND state == issued"). A fabricated/alien nonce — even a
+            // fresh one — never confirms, so knowing the cardId alone is insufficient
+            // (ADR-0029 §4: a tap only applies to the exact pending action it was
+            // issued for). This is the single-use binding the card carries.
+            if (tap.nonce !== card.mintedNonce) {
+                throw new NonceStale(tap.cardId);
+            }
+            // Staleness — expired window or a spent/expired nonce (AC-02-9).
+            if (nonceIsStale(tap.nonce, card.expiresAt, now())) {
+                throw new NonceStale(tap.cardId);
+            }
+            // The tap must echo the exact action-hash bound at issue (AC-02-10).
+            if (tap.presentedActionHash !== card.actionHash) {
+                throw new ActionHashMismatch(tap.cardId);
+            }
+            // Step-up second factor for Tier-3 / money / memory-permanence
+            // (AC-02-11, AC-02-18). Missing proof and invalid proof are distinct.
+            if (card.requiresStepUp) {
+                if (tap.stepUpProof === undefined) {
+                    throw new StepUpRequired(card.actionId);
+                }
+                if (!verifyStepUp(tap.stepUpProof, deps.verifyStepUp)) {
+                    throw new StepUpFailed(card.actionId);
+                }
+            }
+            // Confirm — deterministic, code-only. Consume the single-use nonce and
+            // remove the card from the Map so it is single-use as a whole: once
+            // confirmed, no further tap (minted or fabricated) can re-confirm it — a
+            // subsequent tap finds no card and throws NoSuchPendingAction (spec §5.3
+            // step 5 "mark nonce consumed atomically").
+            consumedTaps.add(tapKey);
+            cards.delete(tap.cardId);
+            // Echo a remembered scope (ADR-0047) so the caller can record the grant.
+            // Tier-3 / step-up cards NEVER carry a remembered scope — drop to 'once'
+            // even if a buggy/hostile client sent session/always (defense-in-depth).
+            const scope = tap.approvalScope;
+            const remembered = !card.requiresStepUp && (scope === 'session' || scope === 'always') ? scope : undefined;
+            return remembered
+                ? { decision: 'confirmed', actionId: card.actionId, scope: remembered }
+                : { decision: 'confirmed', actionId: card.actionId };
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/gateway/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,UAAU,EAAE,MAAM,aAAa,CAAA;AAgCpD,OAAO,EACL,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,cAAc,EACd,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,mBAAmB,GACpB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,cAAc,EACd,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,mBAAmB,GACpB,MAAM,YAAY,CAAA;AAmBnB,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAA;AACrG,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB;IAC5C,8EAA8E;IAC9E,iEAAiE;IACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACjD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;QACjC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QAC1C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;IAChF,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAE1C,wEAAwE;IACxE,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;IACvE,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC9F,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;IACtE,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;IAC3E,CAAC;IAED,wEAAwE;IACxE,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAO,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,EAAE,CAAA;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACnF,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE;QACvE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;AAClE,CAAC;AAED,SAAS,UAAU,CAAC,OAAgC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IACtC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,CAAA;IACvB,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,MAAoB;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAA;IACxB,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAA;YAC5E,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,CAAA;YACvB,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/D,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;YACnC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC/B,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAClE,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,CAAA;YAC1B,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAC5D,CAAC;QACD;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC;AAoBD;8DAC8D;AAC9D,MAAM,kBAAkB,GAAG,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;AAEtG;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,SAAiB,EAAE,GAAW;IACjE,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnD,OAAO,GAAG,GAAG,SAAS,CAAA;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,MAAmC;IAClF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACrC,uEAAuE;IACvE,iFAAiF;IACjF,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,yEAAyE;AACzE,sDAAsD;AACtD,8EAA8E;AAE9E,MAAM,UAAU,WAAW,CAAC,IAAiB;IAC3C,MAAM,GAAG,GAAG,GAAW,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,UAAU,CAAA;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC3C,8EAA8E;IAC9E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IAEtC,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,WAAW,GAAa,EAAE,CAAA;IAEhC,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,MAAsB;YACnC,yEAAyE;YACzE,yCAAyC;YACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpB,MAAM,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAA;YACxE,CAAC;YAED,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;YACrC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,cAAc,CAAC,4BAA4B,CAAC,CAAA;YACxD,CAAC;YAED,yEAAyE;YACzE,qEAAqE;YACrE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAA;YAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACxC,CAAC;YAED,uEAAuE;YACvE,4EAA4E;YAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAA;YAC5B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAA;gBACrC,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,IAAK,WAAW,CAAC,CAAC,CAAY,GAAG,MAAM;oBAAE,WAAW,CAAC,KAAK,EAAE,CAAA;gBACzF,IAAI,WAAW,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;oBACpC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBACtC,CAAC;gBACD,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;YACzB,CAAC;YAED,oEAAoE;YACpE,yEAAyE;YACzE,gDAAgD;YAChD,IAAI,IAAY,CAAA;YAChB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;gBAC/C,MAAM,MAAM,GAAG,OAAO,KAAK,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,EAAE,CAAA;gBACzF,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;gBACnE,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,CAAC,CAAA;gBAC9D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,EAAE,CAAA;YAC7F,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAC7C,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC3B,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,CAAA;YACjC,CAAC;YAED,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;YACrC,MAAM,IAAI,GAAgB;gBACxB,MAAM,EAAE,UAAU,EAAE;gBACpB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,mEAAmE;gBACnE,gEAAgE;gBAChE,yCAAyC;gBACzC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,IAAI;gBACJ,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;gBACzC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,MAA6B;YAC9D,uEAAuE;YACvE,yEAAyE;YACzE,sEAAsE;YACtE,uEAAuE;YACvE,IAAI,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,eAAe,EAAE,CAAA;YAC7B,CAAC;YACD,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAA;YACxE,CAAC;YACD,qEAAqE;YACrE,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;gBAClC,kEAAkE;gBAClE,qEAAqE;gBACrE,IAAI,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;oBAC5B,MAAM,IAAI,eAAe,EAAE,CAAA;gBAC7B,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;oBAC9B,MAAM,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAA;gBACxE,CAAC;gBACD,KAAK,MAAM,CAAA;YACb,CAAC;QACH,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,MAAqB;YACnC,wEAAwE;YACxE,iEAAiE;YACjE,MAAM,GAAG,GAAG,MAA4C,CAAA;YACxD,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;gBACvC,IAAI,KAAK,IAAI,GAAG;oBAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAA;YACrC,CAAC;YAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;YAC3B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;gBAChB,MAAM;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,cAAc,EAAE,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBACnE,UAAU,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC;gBAC7B,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE;gBAC7D,uEAAuE;gBACvE,kDAAkD;gBAClD,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,GAAG,MAAM,CAAC;aACnD,CAAC,CAAA;YACF,OAAO,MAAM,CAAA;QACf,CAAC;QAED,aAAa,CAAC,MAAc;YAC1B,sEAAsE;YACtE,0EAA0E;YAC1E,uEAAuE;YACvE,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC3B,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAA;YACnB,OAAO;gBACL,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,KAAK,EAAE,CAAC,CAAC,WAAW;gBACpB,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAA;QACH,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,GAAY;YAC9B,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,CAAA;YAE3C,qEAAqE;YACrE,0EAA0E;YAC1E,wEAAwE;YACxE,sEAAsE;YACtE,qCAAqC;YACrC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACnC,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAClC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,sEAAsE;gBACtE,oEAAoE;gBACpE,oEAAoE;gBACpE,uEAAuE;gBACvE,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC3C,CAAC;YAED,uEAAuE;YACvE,2EAA2E;YAC3E,0EAA0E;YAC1E,sEAAsE;YACtE,gEAAgE;YAChE,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnC,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAClC,CAAC;YAED,iEAAiE;YACjE,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAClC,CAAC;YAED,qEAAqE;YACrE,IAAI,GAAG,CAAC,mBAAmB,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChD,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC1C,CAAC;YAED,+DAA+D;YAC/D,sEAAsE;YACtE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBAClC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACzC,CAAC;gBACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;oBACtD,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACvC,CAAC;YACH,CAAC;YAED,uEAAuE;YACvE,oEAAoE;YACpE,yEAAyE;YACzE,yEAAyE;YACzE,4CAA4C;YAC5C,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACxB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACxB,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAA;YAC/B,MAAM,UAAU,GACd,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;YACzF,OAAO,UAAU;gBACf,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE;gBACvE,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;QACxD,CAAC;KACF,CAAA;AACH,CAAC"}