@aitne/daemon 0.1.0

package/dist/safety/audit.js

@@ -0,0 +1,324 @@
+import { createLogger } from "../logging.js";
+const logger = createLogger("audit");
+export function loadAuditEventRow(db, rowId) {
+    return db
+        .prepare(`SELECT id, event_id, action_type, trigger, model_used, cost_usd,
+              tokens_input, tokens_output, duration_ms, num_turns,
+              result, detail, started_at, completed_at, error
+       FROM agent_actions
+       WHERE id = ?`)
+        .get(rowId);
+}
+export class AuditLogger {
+    db;
+    options;
+    actionColumns;
+    hasCacheCreationTokensColumn;
+    hasCacheReadTokensColumn;
+    hasModelUsageJsonColumn;
+    hasBackendColumn;
+    hasCostSourceColumn;
+    hasContextUpdatedColumn;
+    hasAdvisorCallCountColumn;
+    constructor(db, options = {}) {
+        this.db = db;
+        this.options = options;
+        this.actionColumns = new Set(this.db.pragma("table_info(agent_actions)").map((column) => column.name));
+        this.hasCacheCreationTokensColumn =
+            this.actionColumns.has("cache_creation_tokens");
+        this.hasCacheReadTokensColumn = this.actionColumns.has("cache_read_tokens");
+        this.hasModelUsageJsonColumn = this.actionColumns.has("model_usage_json");
+        this.hasBackendColumn = this.actionColumns.has("backend");
+        this.hasCostSourceColumn = this.actionColumns.has("cost_source");
+        this.hasContextUpdatedColumn = this.actionColumns.has("context_updated");
+        this.hasAdvisorCallCountColumn =
+            this.actionColumns.has("advisor_call_count");
+    }
+    logAction(params) {
+        const { event, model, costUsd, usage, modelUsage, durationMs, numTurns, trigger, backend, costSource, contextUpdated = false, advisorCallCount = 0, dmFreshness, } = params;
+        try {
+            const modelUsageJson = Object.keys(modelUsage).length > 0
+                ? JSON.stringify(modelUsage)
+                : null;
+            const columns = [
+                "event_id",
+                "action_type",
+                "trigger",
+                "model_used",
+                "cost_usd",
+                "tokens_input",
+                "tokens_output",
+                "duration_ms",
+                "num_turns",
+                "result",
+                "started_at",
+                "completed_at",
+            ];
+            const values = [
+                event.correlationId,
+                event.type,
+                trigger,
+                model,
+                costUsd,
+                usage.inputTokens,
+                usage.outputTokens,
+                durationMs,
+                numTurns,
+                "success",
+            ];
+            if (this.hasCacheCreationTokensColumn) {
+                columns.splice(7, 0, "cache_creation_tokens");
+                values.splice(7, 0, usage.cacheCreationInputTokens);
+            }
+            if (this.hasCacheReadTokensColumn) {
+                // Applied schema always seeds cache_creation_tokens alongside
+                // cache_read_tokens; the `: 7` index branch is defensive against
+                // partially-migrated databases.
+                /* c8 ignore next */
+                const insertIndex = this.hasCacheCreationTokensColumn ? 8 : 7;
+                columns.splice(insertIndex, 0, "cache_read_tokens");
+                values.splice(insertIndex, 0, usage.cacheReadInputTokens);
+            }
+            if (this.hasModelUsageJsonColumn) {
+                const insertIndex = 7
+                    + Number(this.hasCacheCreationTokensColumn)
+                    + Number(this.hasCacheReadTokensColumn);
+                columns.splice(insertIndex, 0, "model_usage_json");
+                values.splice(insertIndex, 0, modelUsageJson);
+            }
+            if (this.hasBackendColumn) {
+                columns.splice(columns.length - 2, 0, "backend");
+                values.splice(values.length, 0, backend ?? "claude");
+            }
+            if (this.hasCostSourceColumn) {
+                columns.splice(columns.length - 2, 0, "cost_source");
+                values.splice(values.length, 0, costSource ?? "sdk");
+            }
+            if (this.hasContextUpdatedColumn) {
+                columns.splice(columns.length - 2, 0, "context_updated");
+                values.splice(values.length, 0, contextUpdated ? 1 : 0);
+            }
+            if (this.hasAdvisorCallCountColumn) {
+                columns.splice(columns.length - 2, 0, "advisor_call_count");
+                values.splice(values.length, 0, Math.max(0, advisorCallCount));
+            }
+            // STAGE-C-DM-FRESHNESS-PLAN §Task 4 — persist DM freshness telemetry
+            // into `detail`. Inserted only when supplied so non-DM rows stay
+            // empty and old readers ignore the field.
+            if (dmFreshness) {
+                columns.splice(columns.length - 2, 0, "detail");
+                values.splice(values.length, 0, JSON.stringify({
+                    dm_freshness: {
+                        resumed: dmFreshness.resumed,
+                        agent_log_lag_minutes: dmFreshness.agentLogLagMinutes,
+                        loud_writes_since_session_start: dmFreshness.loudWritesSinceSessionStart,
+                        quiet_writes_since_session_start: dmFreshness.quietWritesSinceSessionStart,
+                        refetched_today: dmFreshness.refetchedToday,
+                        trigger_matched: dmFreshness.triggerMatched,
+                    },
+                }));
+            }
+            const placeholders = columns
+                .map((column) => {
+                if (column === "started_at" || column === "completed_at") {
+                    return "datetime('now')";
+                }
+                if (column === "detail") {
+                    return "json(?)";
+                }
+                return "?";
+            })
+                .join(", ");
+            const insertResult = this.db
+                .prepare(`INSERT INTO agent_actions (${columns.join(", ")})
+           VALUES (${placeholders})`)
+                .run(...values);
+            this.emitInsertedRow(Number(insertResult.lastInsertRowid), event.type);
+        }
+        catch (err) {
+            logger.error({ err, event: event.type }, "Failed to log action");
+        }
+    }
+    logSkip(event, reason, trigger) {
+        try {
+            const insertResult = this.db
+                .prepare(`INSERT INTO agent_actions
+         (event_id, action_type, trigger, result, error, started_at)
+         VALUES (?, ?, ?, 'skipped', ?, datetime('now'))`)
+                .run(event.correlationId, event.type, trigger, reason);
+            this.emitInsertedRow(Number(insertResult.lastInsertRowid), event.type);
+        }
+        catch (err) {
+            logger.error({ err, event: event.type }, "Failed to log skip");
+        }
+        logger.info({ event: event.type, reason }, "Event skipped");
+    }
+    /**
+     * Chat-attachments Phase 1 — log a successful upload (inbound or outbound)
+     * to `agent_actions`. Shares the `agent_actions` table with agent-turn
+     * actions so the dashboard cost/events views can surface attachment
+     * activity alongside agent execution without a second table.
+     *
+     * Uses a minimal column set like `logSkip`/`logError`: no token/cost
+     * accounting (an upload is always zero-cost) and no model_used. The
+     * direction is encoded in `action_type` so cost queries that group by
+     * action_type bucket uploads separately from turns.
+     */
+    logAttachment(params) {
+        const actionType = `attachment.upload.${params.direction}`;
+        const trigger = params.direction === "inbound" ? "reactive" : "autonomous";
+        try {
+            const insertResult = this.db
+                .prepare(`INSERT INTO agent_actions
+             (event_id, action_type, trigger, result, detail, started_at, completed_at)
+           VALUES (?, ?, ?, 'success', ?, datetime('now'), datetime('now'))`)
+                .run(params.attachmentId, actionType, trigger, JSON.stringify({
+                mimeType: params.mimeType,
+                sizeBytes: params.sizeBytes,
+                provenance: params.provenance,
+                originalFilename: params.originalFilename,
+            }));
+            this.emitInsertedRow(Number(insertResult.lastInsertRowid), actionType);
+        }
+        catch (err) {
+            logger.error({ err, attachmentId: params.attachmentId, direction: params.direction }, "Failed to log attachment action");
+        }
+    }
+    logBangCommand(event, detail) {
+        const result = bangStatusToResult(detail.status);
+        // The interceptor injects `platform: event.platform` automatically so
+        // handlers don't have to repeat it (docs §6.6).
+        const merged = {
+            ...detail,
+            platform: event.platform,
+        };
+        try {
+            const insertResult = this.db
+                .prepare(`INSERT INTO agent_actions
+             (event_id, action_type, trigger, result, detail, started_at, completed_at)
+           VALUES (?, 'bang_command', 'reactive', ?, json(?), datetime('now'), datetime('now'))`)
+                .run(event.correlationId, result, JSON.stringify(merged));
+            this.emitInsertedRow(Number(insertResult.lastInsertRowid), "bang_command");
+        }
+        catch (err) {
+            logger.error({ err, command: detail.command, status: detail.status }, "Failed to log bang_command");
+        }
+    }
+    logError(event, error, trigger, 
+    /**
+     * Optional partial-run context the dispatcher recovers from the catch
+     * site (wall-clock duration) and from `BackendRouterHandledError`
+     * (backend / model / failure kind+code). Without this, the row is a
+     * black hole: the dashboard shows "Duration: 0ms" for a 60-second run
+     * that hit `max_budget_usd` because the row was written with no
+     * timing/backend/model info — see drift-effects regression
+     * 2026-05-04 (today_refresh hit the $0.10 cap; row 62 was unfilled).
+     *
+     * Tokens / cost / num_turns are intentionally NOT passed: an aborted
+     * SDK stream doesn't surface a usable AgentResult, so any value here
+     * would be a guess. duration_ms + backend + failure shape are
+     * recoverable and that's what we record.
+     */
+    context) {
+        try {
+            const columns = [
+                "event_id",
+                "action_type",
+                "trigger",
+                "result",
+                "error",
+                "started_at",
+                "completed_at",
+            ];
+            // Emitted as a SQL expression (datetime(...)) rather than a bound
+            // value — the placeholder map below special-cases these column names.
+            const values = [
+                event.correlationId,
+                event.type,
+                trigger,
+                "failed",
+                error.message,
+            ];
+            if (typeof context?.durationMs === "number" && context.durationMs >= 0) {
+                columns.splice(columns.length, 0, "duration_ms");
+                values.splice(values.length, 0, Math.round(context.durationMs));
+            }
+            if (context?.modelId) {
+                columns.splice(columns.length, 0, "model_used");
+                values.splice(values.length, 0, context.modelId);
+            }
+            if (this.hasBackendColumn && context?.backendId) {
+                columns.splice(columns.length, 0, "backend");
+                values.splice(values.length, 0, context.backendId);
+            }
+            if (context?.failureKind || context?.failureCode) {
+                columns.splice(columns.length, 0, "detail");
+                values.splice(values.length, 0, JSON.stringify({
+                    ...(context.failureKind ? { failureKind: context.failureKind } : {}),
+                    ...(context.failureCode ? { failureCode: context.failureCode } : {}),
+                }));
+            }
+            // Backdate started_at so the dashboard "Started" column reflects when
+            // the run actually began rather than when the catch fired. completed_at
+            // is "now" — the catch site IS end-of-run.
+            const backdateSeconds = context?.durationMs
+                ? Math.round(context.durationMs) / 1000
+                : 0;
+            const startedAtExpr = backdateSeconds > 0
+                ? `datetime('now', '-${backdateSeconds.toFixed(3)} seconds')`
+                : "datetime('now')";
+            const placeholders = columns
+                .map((column) => {
+                if (column === "started_at")
+                    return startedAtExpr;
+                if (column === "completed_at")
+                    return "datetime('now')";
+                if (column === "detail")
+                    return "json(?)";
+                return "?";
+            })
+                .join(", ");
+            const insertResult = this.db
+                .prepare(`INSERT INTO agent_actions (${columns.join(", ")})
+           VALUES (${placeholders})`)
+                .run(...values);
+            this.emitInsertedRow(Number(insertResult.lastInsertRowid), event.type);
+        }
+        catch (err) {
+            logger.error({ err, event: event.type }, "Failed to log error");
+        }
+        logger.error({ event: event.type, error: error.message }, "Event error");
+    }
+    emitInsertedRow(rowId, eventType) {
+        if (!this.options.onRowInserted || !Number.isFinite(rowId) || rowId <= 0) {
+            return;
+        }
+        try {
+            const row = loadAuditEventRow(this.db, rowId);
+            if (row) {
+                this.options.onRowInserted(row);
+            }
+        }
+        catch (err) {
+            logger.warn({ err, event: eventType, rowId }, "Failed to emit inserted audit row");
+        }
+    }
+}
+/**
+ * Map a `BangCommandDetail.status` to the `agent_actions.result` value
+ * permitted by the schema's CHECK constraint
+ * (`success | failed | partial | skipped | in_progress`). See docs/design/
+ * backlog/messaging-bang-commands.md §6.6 for the rationale.
+ */
+export function bangStatusToResult(status) {
+    switch (status) {
+        case "ok":
+            return "success";
+        case "unknown":
+            return "failed";
+        case "skipped":
+        case "paused_decline":
+            return "skipped";
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/safety/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/safety/audit.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;AAwBrC,MAAM,UAAU,iBAAiB,CAC/B,EAAqB,EACrB,KAAa;IAEb,OAAO,EAAE;SACN,OAAO,CACN;;;;oBAIc,CACf;SACA,GAAG,CAAC,KAAK,CAA8B,CAAC;AAC7C,CAAC;AAED,MAAM,OAAO,WAAW;IAWH;IACA;IAXF,aAAa,CAAc;IAC3B,4BAA4B,CAAU;IACtC,wBAAwB,CAAU;IAClC,uBAAuB,CAAU;IACjC,gBAAgB,CAAU;IAC1B,mBAAmB,CAAU;IAC7B,uBAAuB,CAAU;IACjC,yBAAyB,CAAU;IAEpD,YACmB,EAAqB,EACrB,UAA8B,EAAE;QADhC,OAAE,GAAF,EAAE,CAAmB;QACrB,YAAO,GAAP,OAAO,CAAyB;QAEjD,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CACzB,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAwB,CAAC,GAAG,CACrE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CACxB,CACF,CAAC;QACF,IAAI,CAAC,4BAA4B;YAC/B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAClD,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC5E,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC1E,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACzE,IAAI,CAAC,yBAAyB;YAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,CAAC,MA2BT;QACC,MAAM,EACJ,KAAK,EACL,KAAK,EACL,OAAO,EACP,KAAK,EACL,UAAU,EACV,UAAU,EACV,QAAQ,EACR,OAAO,EACP,OAAO,EACP,UAAU,EACV,cAAc,GAAG,KAAK,EACtB,gBAAgB,GAAG,CAAC,EACpB,WAAW,GACZ,GAAG,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;gBACvD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;gBAC5B,CAAC,CAAC,IAAI,CAAC;YAET,MAAM,OAAO,GAAG;gBACd,UAAU;gBACV,aAAa;gBACb,SAAS;gBACT,YAAY;gBACZ,UAAU;gBACV,cAAc;gBACd,eAAe;gBACf,aAAa;gBACb,WAAW;gBACX,QAAQ;gBACR,YAAY;gBACZ,cAAc;aACf,CAAC;YACF,MAAM,MAAM,GAA+B;gBACzC,KAAK,CAAC,aAAa;gBACnB,KAAK,CAAC,IAAI;gBACV,OAAO;gBACP,KAAK;gBACL,OAAO;gBACP,KAAK,CAAC,WAAW;gBACjB,KAAK,CAAC,YAAY;gBAClB,UAAU;gBACV,QAAQ;gBACR,SAAS;aACV,CAAC;YAEF,IAAI,IAAI,CAAC,4BAA4B,EAAE,CAAC;gBACtC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,uBAAuB,CAAC,CAAC;gBAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAClC,8DAA8D;gBAC9D,iEAAiE;gBACjE,gCAAgC;gBAChC,oBAAoB;gBACpB,MAAM,WAAW,GAAG,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9D,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;gBACpD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBACjC,MAAM,WAAW,GACf,CAAC;sBACC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC;sBACzC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAC1C,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;gBACnD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC1B,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;gBACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,QAAQ,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC7B,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;gBACrD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,IAAI,KAAK,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBACjC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBACzD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBACnC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;gBAC5D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,qEAAqE;YACrE,iEAAiE;YACjE,0CAA0C;YAC1C,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,MAAM,EACb,CAAC,EACD,IAAI,CAAC,SAAS,CAAC;oBACb,YAAY,EAAE;wBACZ,OAAO,EAAE,WAAW,CAAC,OAAO;wBAC5B,qBAAqB,EAAE,WAAW,CAAC,kBAAkB;wBACrD,+BAA+B,EAC7B,WAAW,CAAC,2BAA2B;wBACzC,gCAAgC,EAC9B,WAAW,CAAC,4BAA4B;wBAC1C,eAAe,EAAE,WAAW,CAAC,cAAc;wBAC3C,eAAe,EAAE,WAAW,CAAC,cAAc;qBAC5C;iBACF,CAAC,CACH,CAAC;YACJ,CAAC;YAED,MAAM,YAAY,GAAG,OAAO;iBACzB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;gBACd,IAAI,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;oBACzD,OAAO,iBAAiB,CAAC;gBAC3B,CAAC;gBACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACxB,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE;iBACzB,OAAO,CACN,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;qBACrC,YAAY,GAAG,CAC3B;iBACA,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;YAClB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAY,EAAE,MAAc,EAAE,OAAkC;QACtE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE;iBACzB,OAAO,CACN;;yDAE+C,CAChD;iBACA,GAAG,CACF,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,IAAI,EACV,OAAO,EACP,MAAM,CACP,CAAC;YACJ,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;;;;;OAUG;IACH,aAAa,CAAC,MAOb;QACC,MAAM,UAAU,GAAG,qBAAqB,MAAM,CAAC,SAAS,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE;iBACzB,OAAO,CACN;;4EAEkE,CACnE;iBACA,GAAG,CACF,MAAM,CAAC,YAAY,EACnB,UAAU,EACV,OAAO,EACP,IAAI,CAAC,SAAS,CAAC;gBACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;aAC1C,CAAC,CACH,CAAC;YACJ,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EACvE,iCAAiC,CAClC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,cAAc,CAAC,KAAmB,EAAE,MAAyB;QAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,sEAAsE;QACtE,gDAAgD;QAChD,MAAM,MAAM,GAA4B;YACtC,GAAG,MAAM;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE;iBACzB,OAAO,CACN;;gGAEsF,CACvF;iBACA,GAAG,CACF,KAAK,CAAC,aAAa,EACnB,MAAM,EACN,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CACvB,CAAC;YACJ,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EACvD,4BAA4B,CAC7B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,QAAQ,CACN,KAAY,EACZ,KAAY,EACZ,OAAkC;IAClC;;;;;;;;;;;;;OAaG;IACH,OAMC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG;gBACd,UAAU;gBACV,aAAa;gBACb,SAAS;gBACT,QAAQ;gBACR,OAAO;gBACP,YAAY;gBACZ,cAAc;aACf,CAAC;YACF,kEAAkE;YAClE,sEAAsE;YACtE,MAAM,MAAM,GAA+B;gBACzC,KAAK,CAAC,aAAa;gBACnB,KAAK,CAAC,IAAI;gBACV,OAAO;gBACP,QAAQ;gBACR,KAAK,CAAC,OAAO;aACd,CAAC;YAEF,IAAI,OAAO,OAAO,EAAE,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;gBACvE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;gBACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;gBACrB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;gBAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,IAAI,CAAC,gBAAgB,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;gBAChD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,OAAO,EAAE,WAAW,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;gBACjD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC5C,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,MAAM,EACb,CAAC,EACD,IAAI,CAAC,SAAS,CAAC;oBACb,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE,CAAC,CACH,CAAC;YACJ,CAAC;YAED,sEAAsE;YACtE,wEAAwE;YACxE,2CAA2C;YAC3C,MAAM,eAAe,GAAG,OAAO,EAAE,UAAU;gBACzC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI;gBACvC,CAAC,CAAC,CAAC,CAAC;YACN,MAAM,aAAa,GAAG,eAAe,GAAG,CAAC;gBACvC,CAAC,CAAC,qBAAqB,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;gBAC7D,CAAC,CAAC,iBAAiB,CAAC;YAEtB,MAAM,YAAY,GAAG,OAAO;iBACzB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;gBACd,IAAI,MAAM,KAAK,YAAY;oBAAE,OAAO,aAAa,CAAC;gBAClD,IAAI,MAAM,KAAK,cAAc;oBAAE,OAAO,iBAAiB,CAAC;gBACxD,IAAI,MAAM,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBAC1C,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE;iBACzB,OAAO,CACN,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;qBACrC,YAAY,GAAG,CAC3B;iBACA,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;YAClB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,qBAAqB,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;IAC3E,CAAC;IAEO,eAAe,CAAC,KAAa,EAAE,SAAiB;QACtD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACzE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAE9C,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAChC,mCAAmC,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAmC;IAEnC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,IAAI;YACP,OAAO,SAAS,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS,CAAC;QACf,KAAK,gBAAgB;YACnB,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/safety/integration-write-tracker.d.ts

@@ -0,0 +1,58 @@
+import type Database from "better-sqlite3";
+import { type IntegrationKey } from "@aitne/shared";
+/**
+ * Route-handler facade over the persistent `integration_writes` actor-
+ * attribution table (INTEGRATION-DRIFT-DETECTION-PLAN.md §4.2 + §11
+ * Phase 4). Wraps the primitive in `services/integrations/reconcile.ts`
+ * with two ergonomics every call site needs:
+ *
+ *  - **Default per-integration TTL** from `INTEGRATION_WRITE_TTL_MS`
+ *    (calendar 90 min, gmail 45 min, notion 90 min after the Phase 7 (c)
+ *    bump — §17.11 chose these so the mark outlives the slowest
+ *    reconcile cadence by ~1.5×; INTEGRATION-DRIFT-PHASE-7-PLAN.md §3.1
+ *    walks the math).
+ *  - **Default `nowIso = new Date().toISOString()`** so every route
+ *    handler does not have to forward a clock argument.
+ *
+ * The contract is intentionally narrow: the route handler that just
+ * mutated upstream calls this once per item id on a 2xx response, and
+ * the next reconcile diff inside the TTL window resolves
+ * `actor='agent'` for that item. Everything else (initial-snapshot
+ * suppression, sliding-window pruning, observation coalescing) lives
+ * downstream in reconcile / drift-effects.
+ *
+ * `AgentWriteTracker` (in-memory, path-keyed) and this table coexist:
+ * the in-memory tracker is consulted by file-system / Notion / direct-
+ * mode pollers that key by absolute path or `notion:<id>`; the persistent
+ * table is consulted by `reconcile()` over `(integration, item_id)`.
+ * Phase 4 wires both for direct-mode calendar writes — they target
+ * different consumers and the cost is one extra cheap SQL upsert.
+ */
+export interface MarkIntegrationWriteOptions {
+    /** Override the per-integration default. Pass when the caller knows
+     *  the next reconcile cadence is unusually long (e.g. a manual one-shot
+     *  sync). Falls back to `INTEGRATION_WRITE_TTL_MS[integration]` otherwise. */
+    ttlMs?: number;
+    /** Override the timestamp recorded as `written_at` / used to compute
+     *  `expires_at`. Tests use this for deterministic clock control; route
+     *  handlers should never need to. */
+    nowIso?: string;
+}
+/**
+ * Mark `(integration, itemId)` as agent-originated for the next
+ * `ttlMs` milliseconds (default per-integration). The next reconcile
+ * over a window containing `itemId` resolves the diff entry's actor
+ * to `'agent'` instead of `'user'`.
+ *
+ * Idempotent under concurrent writes — `(integration, item_id)` is the
+ * primary key and the SQL UPSERTs `written_at` / `expires_at` so the
+ * latest call wins.
+ *
+ * On failure (SQLite error, table missing in a stripped-down test
+ * harness), logs at warn and swallows. The route handler that called
+ * us has already returned 2xx upstream — losing an attribution mark
+ * causes one self-noticed observation, not data loss, and it is
+ * strictly preferable to surfacing a 500 to the user.
+ */
+export declare function markIntegrationWrite(db: Database.Database, integration: IntegrationKey, itemId: string, opts?: MarkIntegrationWriteOptions): void;
+//# sourceMappingURL=integration-write-tracker.d.ts.map

package/dist/safety/integration-write-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-write-tracker.d.ts","sourceRoot":"","sources":["../../src/safety/integration-write-tracker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AAMvB;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;kFAE8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;yCAEqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,WAAW,EAAE,cAAc,EAC3B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,2BAAgC,GACrC,IAAI,CA2BN"}

package/dist/safety/integration-write-tracker.js

@@ -0,0 +1,41 @@
+import { INTEGRATION_WRITE_TTL_MS, } from "@aitne/shared";
+import { markIntegrationWrite as markIntegrationWritePrimitive } from "../services/integrations/reconcile.js";
+import { createLogger } from "../logging.js";
+const logger = createLogger("integration-write-tracker");
+/**
+ * Mark `(integration, itemId)` as agent-originated for the next
+ * `ttlMs` milliseconds (default per-integration). The next reconcile
+ * over a window containing `itemId` resolves the diff entry's actor
+ * to `'agent'` instead of `'user'`.
+ *
+ * Idempotent under concurrent writes — `(integration, item_id)` is the
+ * primary key and the SQL UPSERTs `written_at` / `expires_at` so the
+ * latest call wins.
+ *
+ * On failure (SQLite error, table missing in a stripped-down test
+ * harness), logs at warn and swallows. The route handler that called
+ * us has already returned 2xx upstream — losing an attribution mark
+ * causes one self-noticed observation, not data loss, and it is
+ * strictly preferable to surfacing a 500 to the user.
+ */
+export function markIntegrationWrite(db, integration, itemId, opts = {}) {
+    if (typeof itemId !== "string" || itemId.length === 0) {
+        logger.debug({ integration }, "markIntegrationWrite skipped: empty itemId");
+        return;
+    }
+    const ttlMs = opts.ttlMs ?? INTEGRATION_WRITE_TTL_MS[integration];
+    const nowIso = opts.nowIso ?? new Date().toISOString();
+    try {
+        markIntegrationWritePrimitive(db, {
+            integration,
+            itemId,
+            ttlMs,
+            nowIso,
+        });
+        logger.debug({ integration, itemId, ttlMs }, "integration write marked");
+    }
+    catch (err) {
+        logger.warn({ err, integration, itemId }, "failed to mark integration write — next reconcile may attribute as user");
+    }
+}
+//# sourceMappingURL=integration-write-tracker.js.map

package/dist/safety/integration-write-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-write-tracker.js","sourceRoot":"","sources":["../../src/safety/integration-write-tracker.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,GAEzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,IAAI,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AAC9G,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC;AAyCzD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAClC,EAAqB,EACrB,WAA2B,EAC3B,MAAc,EACd,OAAoC,EAAE;IAEtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,EACf,4CAA4C,CAC7C,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,6BAA6B,CAAC,EAAE,EAAE;YAChC,WAAW;YACX,MAAM;YACN,KAAK;YACL,MAAM;SACP,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,EAC9B,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,EAC5B,yEAAyE,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/safety/risk-classifier.d.ts

@@ -0,0 +1,65 @@
+/**
+ * RiskTier — classifies the risk level of Daemon API operations.
+ *
+ * Convention: numeric enum → UPPER_CASE (EventPriority), string enum → PascalCase (RiskTier)
+ */
+export declare enum RiskTier {
+    /** Safe to execute autonomously without any notification */
+    Autonomous = "autonomous",
+    /**
+     * Contains personal data (email, calendar, notes, context files).
+     * Enforced by X-Read-Token or Bearer auth when `enforceReadToken=true`.
+     */
+    ReadSensitive = "read_sensitive",
+    /** Requires explicit user approval before execution */
+    Approve = "approve"
+}
+/**
+ * Find an *explicit* risk classification for a (method, path), without
+ * falling back to the default-Approve / default-Autonomous tiers.
+ *
+ * Returns the matched tier when an entry in `API_RISK` covers the route
+ * (via exact, path-only, pattern, or prefix match) and `null` when the
+ * route would only be served by the conservative default.
+ *
+ * Used by both `classifyRisk` (which adds the default fallback) and
+ * `auditRiskClassifications` (which surfaces unclassified routes at boot).
+ *
+ * Lookup order:
+ * 1. Exact match: "METHOD /path" (e.g., "POST /api/calendar/events")
+ * 2. Path-only match: "/path" (e.g., "/api/health")
+ * 3. Pattern match: keys containing `{*}` placeholder — longest literal
+ *    prefix wins ties (multi-account routes like
+ *    `POST /api/mail/{*}/messages/send`)
+ * 4. Prefix match: longest matching `path.startsWith(...)` key
+ */
+export declare function findExplicitRiskClassification(method: string, path: string): RiskTier | null;
+/**
+ * Classify the risk tier of an API request.
+ *
+ * Wraps `findExplicitRiskClassification` with the conservative default:
+ * unknown /api/* routes → Approve (fail-closed); other paths → Autonomous.
+ */
+export declare function classifyRisk(method: string, path: string): RiskTier;
+/**
+ * Boot-time audit: given the registered Hono routes, return the subset
+ * that would only be served by the default-Approve fallback.
+ *
+ * Why this exists: `API_RISK` is hand-maintained. When a developer adds
+ * a new route in `routes/*.ts` but forgets to update the classifier
+ * table, the request hits the runtime warning at line ~480 only after
+ * the first call — and then 401s because Approve-tier requires a Bearer
+ * the agent can't supply. We saw this with `POST /api/context/roadmap/id`
+ * (7×401 + 4×400 retry spiral inside roadmap_refresh, 2026-04-28).
+ *
+ * Hono parameterized segments (`/integrations/:key/invoke`) are
+ * normalized to a representative literal so `{*}`-pattern entries in
+ * `API_RISK` match them. Routes that don't start with `/api/` are
+ * skipped (default-Autonomous is intentional there — webhooks, root).
+ */
+export interface AuditableRoute {
+    method: string;
+    path: string;
+}
+export declare function auditRiskClassifications(routes: ReadonlyArray<AuditableRoute>): AuditableRoute[];
+//# sourceMappingURL=risk-classifier.d.ts.map

package/dist/safety/risk-classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-classifier.d.ts","sourceRoot":"","sources":["../../src/safety/risk-classifier.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,oBAAY,QAAQ;IAClB,4DAA4D;IAC5D,UAAU,eAAe;IACzB;;;OAGG;IACH,aAAa,mBAAmB;IAChC,uDAAuD;IACvD,OAAO,YAAY;CACpB;AAgoBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,QAAQ,GAAG,IAAI,CAyCjB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAiBnE;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,aAAa,CAAC,cAAc,CAAC,GACpC,cAAc,EAAE,CA0BlB"}