@armoriq/sdk-dev 0.0.1 → 0.2.13

package/dist/session.js

@@ -0,0 +1,547 @@
+"use strict";
+/**
+ * ArmorIQSession — the core primitive for framework integrations.
+ *
+ * Two modes:
+ *
+ * 1. Observe mode (default, new) — MCP stays on the agent side:
+ *      await session.startPlan(toolCalls)                // capture plan + mint token
+ *      const decision = await session.enforce(toolName, toolArgs)  // check policy
+ *      // ... framework calls MCP directly ...
+ *      await session.report(toolName, toolArgs, result)  // audit
+ *
+ * 2. Proxy mode (legacy) — routes through the Armoriq proxy:
+ *      await session.startPlan(toolCalls)
+ *      return session.dispatch(toolName, toolArgs)       // proxy handles everything
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ArmorIQSession = void 0;
+const axios_1 = __importDefault(require("axios"));
+const models_1 = require("./models");
+const plan_builder_1 = require("./plan-builder");
+class ArmorIQSession {
+    client;
+    toolNameParser;
+    defaultMcpName;
+    validitySeconds;
+    llm;
+    mode;
+    stepIndex = 0;
+    currentPlanHash = null;
+    currentTokenValue = null;
+    mcpByAction = new Map();
+    // Plan-binding: every tool the agent is allowed to invoke this turn.
+    // Keys are BOTH the framework's tool name (e.g. "GitHub__search_repositories")
+    // and the parsed action name (e.g. "search_repositories") so either matches.
+    declaredTools = new Set();
+    // Cached IAP public key per kid (one HTTP call per process per key).
+    static publicKeyCache = new Map();
+    constructor(client, opts = {}) {
+        this.client = client;
+        this.defaultMcpName = opts.defaultMcpName;
+        this.toolNameParser =
+            opts.toolNameParser ?? (0, plan_builder_1.defaultToolNameParser)(this.defaultMcpName);
+        this.validitySeconds = opts.validitySeconds ?? 3600;
+        this.llm = opts.llm ?? 'agent';
+        this.mode = opts.mode ?? 'local';
+    }
+    /**
+     * Capture a plan from the LLM's tool calls and mint an intent token.
+     * Idempotent: if called again with the same tool-calls list (by SHA),
+     * skips the mint and returns the cached token.
+     */
+    async startPlan(toolCalls, opts = {}) {
+        if (toolCalls.length === 0) {
+            throw new Error('startPlan called with no tool calls.');
+        }
+        const hash = (0, plan_builder_1.hashToolCalls)(toolCalls);
+        if (this.currentTokenValue && this.currentPlanHash === hash) {
+            return this.currentTokenValue;
+        }
+        const plan = (0, plan_builder_1.buildPlanFromToolCalls)(toolCalls, {
+            goal: opts.goal,
+            toolNameParser: this.toolNameParser,
+            defaultMcpName: this.defaultMcpName,
+        });
+        this.mcpByAction.clear();
+        this.declaredTools.clear();
+        for (const step of plan.steps) {
+            this.mcpByAction.set(step.action, step.mcp);
+            // Plan-binding: record both the action name and the namespaced form
+            this.declaredTools.add(step.action);
+            this.declaredTools.add(`${step.mcp}__${step.action}`);
+        }
+        // Also record the original framework-supplied tool names verbatim
+        for (const tc of toolCalls) {
+            this.declaredTools.add(tc.name);
+        }
+        const planCapture = this.client.capturePlan(this.llm, opts.goal ?? this.llm, plan);
+        const token = await this.client.getIntentToken(planCapture, undefined, this.validitySeconds);
+        this.currentPlanHash = hash;
+        this.currentTokenValue = token;
+        this.stepIndex = 0;
+        return token;
+    }
+    /**
+     * Local-mode enforcement.
+     * Verifies the intent token's lifetime, plan-binding, and the
+     * policy snapshot — all in-process. NO network call to the proxy.
+     *
+     * Returns { allowed, action, reason }. Plugin uses this to short-
+     * circuit the framework's tool dispatch on a deny.
+     */
+    async enforceLocal(toolName, toolArgs) {
+        if (!this.currentTokenValue) {
+            return {
+                allowed: false,
+                action: 'block',
+                reason: 'No intent token — call startPlan() first',
+            };
+        }
+        // 1. Token expiry
+        if (models_1.IntentToken.isExpired(this.currentTokenValue)) {
+            return { allowed: false, action: 'block', reason: 'token-expired' };
+        }
+        // 2. Plan-binding — tool must have been declared at startPlan() time
+        const { mcp, action } = this.toolNameParser(toolName);
+        const inPlan = this.declaredTools.has(toolName) ||
+            this.declaredTools.has(action) ||
+            this.declaredTools.has(`${mcp}__${action}`);
+        if (!inPlan) {
+            return {
+                allowed: false,
+                action: 'block',
+                reason: `tool-not-in-plan: '${toolName}' was not declared in the captured plan`,
+            };
+        }
+        const pv = this.currentTokenValue.policyValidation;
+        const snapshot = this.currentTokenValue.policySnapshot;
+        // Find the policy that ACTUALLY governs this tool by walking the
+        // snapshot — `matched_policies` is the union for the whole plan
+        // (may include unrelated MCPs' policies that ran in the same eval).
+        // The policy whose allowedTools include this action OR which
+        // explicitly mentions this tool in its rules is "ours".
+        const ruleOf = (entry) => entry?.memberRule ?? entry?.clientRule ?? entry?.rules ?? entry;
+        const governingEntry = Array.isArray(snapshot)
+            ? snapshot.find((entry) => {
+                const r = ruleOf(entry);
+                if (!r)
+                    return false;
+                const allowed = Array.isArray(r.allowedTools) ? r.allowedTools : [];
+                // A policy "governs" this tool if either:
+                //   - the action is in its allowedTools (positive match)
+                //   - the action would have been in scope by tool prefix match
+                //     (some policies use namespaced names, e.g. "GitHub__search_*")
+                if (allowed.includes(action) || allowed.includes(toolName))
+                    return true;
+                if (allowed.some((t) => t === '*' || t.endsWith('/*') || t.endsWith('*')))
+                    return true;
+                // Fall back to MCP/target name match if we can find one
+                const target = (entry?.targetName || entry?.policyName || '').toLowerCase();
+                return target.includes(mcp.toLowerCase());
+            })
+            : undefined;
+        const governingRule = ruleOf(governingEntry);
+        const governingPolicyName = governingEntry?.policyName;
+        // For "tool not in allowedTools" we use the POLICY-LEVEL default
+        // (defaultEnforcementAction, defaults to 'block'). The per-rule
+        // enforcementAction is reserved for CONDITIONAL violations like
+        // amount thresholds — a tool that isn't allowed at all can't be
+        // approved through delegation, only blocked.
+        const notAllowedAction = governingEntry?.defaultEnforcementAction ||
+            pv?.default_enforcement_action ||
+            'block';
+        // 3. denied_tools — explicit deny list from backend evaluation.
+        //    Only treat as a deny IF we found a governing policy for this tool.
+        const deniedTools = pv?.denied_tools;
+        if (Array.isArray(deniedTools)) {
+            const denied = deniedTools.includes(toolName) || deniedTools.includes(action);
+            if (denied) {
+                const reasonFromBackend = pv?.denied_reasons?.find((r) => r.startsWith(`${action}:`) || r.startsWith(`${toolName}:`));
+                const reason = reasonFromBackend ||
+                    (governingPolicyName
+                        ? `Tool '${action}' is denied by policy '${governingPolicyName}'`
+                        : `Tool '${action}' is denied by policy`);
+                return {
+                    allowed: false,
+                    action: notAllowedAction === 'hold' ? 'hold' : 'block',
+                    reason,
+                    matchedPolicy: governingPolicyName,
+                };
+            }
+        }
+        // 4. Snapshot-based check using the governing policy.
+        if (governingRule) {
+            const allowed = Array.isArray(governingRule.allowedTools)
+                ? governingRule.allowedTools
+                : [];
+            if (allowed.length > 0) {
+                const wildcard = allowed.includes('*');
+                const ok = wildcard ||
+                    allowed.includes(action) ||
+                    allowed.includes(toolName);
+                if (!ok) {
+                    return {
+                        allowed: false,
+                        action: notAllowedAction === 'hold' ? 'hold' : 'block',
+                        reason: `Tool '${action}' is not in the allowed tools for policy '${governingPolicyName}'`,
+                        matchedPolicy: governingPolicyName,
+                    };
+                }
+            }
+        }
+        else if (Array.isArray(snapshot) && snapshot.length > 0) {
+            // We have policies but none govern this tool — for an MCP that has
+            // an explicit policy attached, this means "no rule allows it".
+            // Don't false-positive on unrelated MCP policies though: only
+            // block if `allowed_tools` from the backend is empty for this tool.
+            const allowedTools = pv?.allowed_tools;
+            if (Array.isArray(allowedTools) && allowedTools.length === 0) {
+                return {
+                    allowed: false,
+                    action: 'block',
+                    reason: `Tool '${action}' is not allowed by any policy in scope`,
+                };
+            }
+        }
+        // 5. Threshold checks on the governing rule (e.g. amount limits).
+        //    Uses tool metadata declared on the platform (amountFields +
+        //    amountUnit, set in armorpay's tool-metadata UI) — NO MCP-
+        //    specific knowledge in the SDK itself.
+        if (governingRule) {
+            const decision = await this.evaluateAmountThreshold(governingRule, toolArgs, action, mcp);
+            if (decision) {
+                return { ...decision, matchedPolicy: governingPolicyName };
+            }
+        }
+        return {
+            allowed: true,
+            action: 'allow',
+            reason: 'Allowed by local policy evaluation',
+            matchedPolicy: governingPolicyName,
+        };
+    }
+    /**
+     * Check policy for a tool call BEFORE the agent executes it.
+     * Calls POST /iap/enforce on the backend.
+     * Returns { allowed, action, reason }. The framework plugin uses this
+     * to block or let through — the MCP call itself happens on the agent side.
+     */
+    async enforce(toolName, toolArgs) {
+        if (!this.currentTokenValue) {
+            throw new Error(`enforce("${toolName}") called before startPlan().`);
+        }
+        const { mcp, action } = this.toolNameParser(toolName);
+        const resolvedMcp = this.mcpByAction.get(action) ?? mcp;
+        // Plan-binding check (cheaper than a network call)
+        const inPlan = this.declaredTools.has(toolName) ||
+            this.declaredTools.has(action) ||
+            this.declaredTools.has(`${resolvedMcp}__${action}`);
+        if (!inPlan) {
+            return {
+                allowed: false,
+                action: 'block',
+                reason: `tool-not-in-plan: '${toolName}' was not declared in the captured plan`,
+            };
+        }
+        try {
+            const proxyEndpoint = this.client.defaultProxyEndpoint;
+            const apiKey = this.client.apiKey;
+            const response = await axios_1.default.post(`${proxyEndpoint}/invoke`, {
+                enforce_only: true,
+                mcp: resolvedMcp,
+                tool: action,
+                action,
+                params: toolArgs,
+                arguments: toolArgs,
+                intent_token: this.currentTokenValue.rawToken,
+                plan: this.currentTokenValue.rawToken?.plan,
+                ...(this.currentTokenValue.policySnapshot
+                    ? { policy_snapshot: this.currentTokenValue.policySnapshot }
+                    : {}),
+            }, {
+                headers: {
+                    'X-API-Key': apiKey,
+                    'Content-Type': 'application/json',
+                },
+                timeout: 10000,
+            });
+            const data = response.data;
+            return {
+                allowed: data.allowed !== false,
+                action: data.action || (data.allowed === false ? 'block' : 'allow'),
+                reason: data.reason,
+                delegationId: data.delegation_id,
+                matchedPolicy: data.matched_policy,
+            };
+        }
+        catch (err) {
+            if (err.response?.status === 403) {
+                const data = err.response.data || {};
+                return {
+                    allowed: false,
+                    action: data.action || 'block',
+                    reason: data.reason || data.message || err.message,
+                    matchedPolicy: data.matched_policy,
+                };
+            }
+            // On network error or 5xx, fail open with a warning
+            console.warn(`[ArmorIQ] enforce() failed: ${err.message}. Allowing tool call.`);
+            return { allowed: true, action: 'allow', reason: 'enforce-unavailable' };
+        }
+    }
+    /**
+     * Report a tool execution to the audit log AFTER the agent calls the MCP.
+     * Calls POST /iap/audit on the backend.
+     */
+    async report(toolName, toolArgs, result, opts = {}) {
+        const { mcp, action } = this.toolNameParser(toolName);
+        const resolvedMcp = this.mcpByAction.get(action) ?? mcp;
+        try {
+            const backendEndpoint = this.client.backendEndpoint;
+            const apiKey = this.client.apiKey;
+            const token = this.currentTokenValue;
+            await axios_1.default.post(`${backendEndpoint}/iap/audit`, {
+                token: token?.jwtToken || token?.tokenId || 'unknown',
+                plan_id: token?.planId || token?.tokenId || 'unknown',
+                step_index: this.stepIndex,
+                action,
+                tool: action,
+                mcp: resolvedMcp,
+                input: toolArgs,
+                output: typeof result === 'string' ? { text: result } : (result ?? {}),
+                status: opts.status || 'success',
+                error_message: opts.errorMessage,
+                duration_ms: opts.durationMs,
+                is_delegated: opts.isDelegated,
+                delegated_by: opts.delegatedBy,
+                delegated_to: opts.delegatedTo,
+                executed_at: new Date().toISOString(),
+            }, {
+                headers: {
+                    'X-API-Key': apiKey,
+                    'Content-Type': 'application/json',
+                },
+                timeout: 5000,
+            });
+        }
+        catch (err) {
+            console.warn(`[ArmorIQ] report() failed: ${err.message}`);
+        }
+        this.stepIndex++;
+    }
+    /**
+     * [Proxy mode] Route a tool call through the Armoriq proxy.
+     * Returns the raw result so the framework can short-circuit
+     * its native dispatch. Use this when the proxy handles the
+     * upstream MCP connection (e.g. Claude Desktop, Cursor).
+     */
+    async dispatch(toolName, toolArgs) {
+        if (!this.currentTokenValue) {
+            throw new Error(`dispatch("${toolName}") called before startPlan().`);
+        }
+        const { mcp, action } = this.toolNameParser(toolName);
+        const resolvedMcp = this.mcpByAction.get(action) ?? mcp;
+        const result = await this.client.invoke(resolvedMcp, action, this.currentTokenValue, toolArgs);
+        this.stepIndex++;
+        return result.result;
+    }
+    /**
+     * Mode-aware enforcement entry point. Plugins should call this and
+     * not branch themselves — `mode` on the session decides the path.
+     *
+     * Behavior by mode:
+     *   - 'local'  → allow / block ONLY. In-process, no network calls.
+     *                A 'hold' threshold violation is reported as 'block'
+     *                with an explanatory reason. Use proxy mode if you
+     *                need delegation/approval workflows.
+     *   - 'proxy'  → allow / block / hold. The proxy resolves the hold
+     *                via the delegation pipeline (request → approve → re-run).
+     */
+    async check(toolName, toolArgs, opts = {}) {
+        if (this.mode === 'local') {
+            const decision = await this.enforceLocal(toolName, toolArgs);
+            // Local mode is allow/block only — downgrade any 'hold' to 'block'
+            // so the agent UX is clear: action requires a more permissive mode.
+            if (decision.action === 'hold') {
+                return {
+                    ...decision,
+                    action: 'block',
+                    reason: (decision.reason ?? 'requires approval') +
+                        ' — switch ARMORIQ_MODE=proxy to enable approval workflows for this action.',
+                };
+            }
+            return decision;
+        }
+        // Proxy mode: full pipeline including hold + delegation.
+        const decision = await this.enforce(toolName, toolArgs);
+        if (decision.action !== 'hold')
+            return decision;
+        return this.handleHold(toolName, toolArgs, decision, opts);
+    }
+    /**
+     * Handle a 'hold' decision: check for prior approval, otherwise
+     * create a delegation request. Returns either:
+     *   - allowed: true (prior approval found within window)
+     *   - allowed: false, action: 'hold', delegationId (request created or pending)
+     */
+    async handleHold(toolName, toolArgs, holdDecision, opts = {}) {
+        const userEmail = opts.userEmail ||
+            this.client.userId ||
+            'unknown@armoriq';
+        const { mcp, action } = this.toolNameParser(toolName);
+        const resolvedMcp = this.mcpByAction.get(action) ?? mcp;
+        // 1. Check if there's already an approved delegation for this
+        //    (user, tool, amount) within the approval window.
+        const amount = this.extractAmount(toolArgs);
+        try {
+            const approved = await this.client.checkApprovedDelegation(userEmail, action, amount ?? 0);
+            if (approved && approved.approved !== false) {
+                // Mark used so a single approval = single execution
+                try {
+                    if (approved.delegationId) {
+                        await this.client.markDelegationExecuted(userEmail, approved.delegationId);
+                    }
+                }
+                catch {
+                    // best-effort
+                }
+                return {
+                    allowed: true,
+                    action: 'allow',
+                    reason: `Allowed by approved delegation ${approved.delegationId ?? ''}`.trim(),
+                    delegationId: approved.delegationId,
+                    matchedPolicy: holdDecision.matchedPolicy,
+                };
+            }
+        }
+        catch {
+            // backend unreachable — fall through to creating a new request
+        }
+        // 2. No prior approval → create a delegation request (visible in UI).
+        let delegationId;
+        try {
+            const result = await this.client.createDelegationRequest({
+                tool: action,
+                action,
+                arguments: toolArgs,
+                amount,
+                requesterEmail: userEmail,
+                domain: resolvedMcp,
+                planId: this.currentTokenValue?.planId,
+                intentReference: this.currentTokenValue?.tokenId,
+                merkleRoot: this.currentTokenValue?.rawToken?.merkle_root,
+                reason: holdDecision.reason,
+            });
+            delegationId = result?.delegationId;
+        }
+        catch (err) {
+            // If we can't create the request, still return the original block.
+            console.warn(`[ArmorIQ] createDelegationRequest failed: ${err.message}`);
+        }
+        return {
+            allowed: false,
+            action: 'hold',
+            reason: holdDecision.reason ?? 'Pending approval',
+            delegationId,
+            matchedPolicy: holdDecision.matchedPolicy,
+        };
+    }
+    /**
+     * Best-effort extraction of an amount field from arbitrary tool args.
+     * Used as a FALLBACK when the platform hasn't declared per-tool
+     * metadata. Fully MCP-agnostic — only checks generic field names.
+     */
+    extractAmount(args) {
+        if (!args || typeof args !== 'object')
+            return undefined;
+        const candidates = ['amount', 'value', 'total', 'price', 'cost'];
+        for (const k of candidates) {
+            const v = args[k];
+            if (v != null && !isNaN(Number(v)))
+                return Number(v);
+        }
+        return undefined;
+    }
+    /**
+     * Resolve the canonical "amount" for a tool call:
+     *   1. Try platform-declared tool metadata (amountFields + amountUnit)
+     *      — same source the proxy uses (toolMetadata column on MCPServer,
+     *      authored in the armorpay UI). MCP-specific units like 'cents'
+     *      are normalized HERE, not in the SDK.
+     *   2. Fall back to the generic candidate-field extractor.
+     */
+    async resolveCanonicalAmount(mcp, toolName, args) {
+        try {
+            const meta = await this.client.fetchToolMetadata(mcp);
+            const toolMeta = meta?.toolMetadata?.[toolName];
+            if (toolMeta?.amountFields?.length) {
+                for (const field of toolMeta.amountFields) {
+                    const raw = args?.[field];
+                    if (raw == null || isNaN(Number(raw)))
+                        continue;
+                    const num = Number(raw);
+                    return toolMeta.amountUnit === 'cents' ? num / 100 : num;
+                }
+            }
+        }
+        catch {
+            // metadata fetch failed — fall through to generic extraction
+        }
+        return this.extractAmount(args);
+    }
+    /**
+     * Evaluate an amount-threshold rule from the policy snapshot against
+     * the tool args. Returns:
+     *   - undefined if no threshold or amount-not-applicable
+     *   - { allowed: false, action: 'block' } if amount > maxPerTransaction
+     *   - { allowed: false, action: 'hold'  } if amount > requireApprovalAbove
+     */
+    async evaluateAmountThreshold(rule, toolArgs, action, mcp) {
+        const fin = rule?.financialRule?.amountThreshold ?? rule?.amountThreshold;
+        if (!fin || typeof fin !== 'object')
+            return undefined;
+        const amount = await this.resolveCanonicalAmount(mcp, action, toolArgs);
+        if (amount === undefined)
+            return undefined;
+        const currency = fin.currency || '';
+        const maxPer = fin.maxPerTransaction;
+        const reqApproval = fin.requireApprovalAbove;
+        if (typeof maxPer === 'number' && amount > maxPer) {
+            return {
+                allowed: false,
+                action: 'block',
+                reason: `Amount ${amount} ${currency} exceeds maxPerTransaction (${maxPer})`.trim(),
+            };
+        }
+        if (typeof reqApproval === 'number' && amount > reqApproval) {
+            return {
+                allowed: false,
+                action: 'hold',
+                reason: `Amount ${amount} ${currency} requires approval (threshold: ${reqApproval})`.trim(),
+            };
+        }
+        return undefined;
+    }
+    /** Drop cached plan + token so the next startPlan() always mints fresh. */
+    reset() {
+        this.currentPlanHash = null;
+        this.currentTokenValue = null;
+        this.mcpByAction.clear();
+        this.declaredTools.clear();
+        this.stepIndex = 0;
+    }
+    /** Inspect the currently held intent token (for debugging / audit). */
+    get currentToken() {
+        return this.currentTokenValue;
+    }
+    /** Current session mode ('local' default, 'proxy' opt-in). */
+    get currentMode() {
+        return this.mode;
+    }
+}
+exports.ArmorIQSession = ArmorIQSession;
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;AAEH,kDAA0B;AAE1B,qCAAsE;AACtE,iDAKwB;AAqCxB,MAAa,cAAc;IACjB,MAAM,CAAgB;IACtB,cAAc,CAAiB;IAC/B,cAAc,CAAU;IACxB,eAAe,CAAS;IACxB,GAAG,CAAS;IACZ,IAAI,CAAc;IAClB,SAAS,GAAW,CAAC,CAAC;IAEtB,eAAe,GAAkB,IAAI,CAAC;IACtC,iBAAiB,GAAuB,IAAI,CAAC;IAC7C,WAAW,GAAwB,IAAI,GAAG,EAAE,CAAC;IAErD,qEAAqE;IACrE,+EAA+E;IAC/E,6EAA6E;IACrE,aAAa,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE/C,qEAAqE;IAC7D,MAAM,CAAC,cAAc,GAGzB,IAAI,GAAG,EAAE,CAAC;IAEd,YAAY,MAAqB,EAAE,OAAuB,EAAE;QAC1D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,cAAc;YACjB,IAAI,CAAC,cAAc,IAAI,IAAA,oCAAqB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CACb,SAAqB,EACrB,OAA0B,EAAE;QAE5B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,4BAAa,EAAC,SAAS,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,iBAAiB,CAAC;QAChC,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,qCAAsB,EAAC,SAAS,EAAE;YAC7C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAA+C,EAAE,CAAC;YACxE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,oEAAoE;YACpE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,kEAAkE;QAClE,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAC5C,WAAW,EACX,SAAS,EACT,IAAI,CAAC,eAAe,CACrB,CAAC;QAEF,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,QAAiC;QAEjC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,0CAA0C;aACnD,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,IAAI,oBAAW,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACtE,CAAC;QAED,qEAAqE;QACrE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GACV,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;YAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,sBAAsB,QAAQ,yCAAyC;aAChF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC;QAEvD,iEAAiE;QACjE,gEAAgE;QAChE,oEAAoE;QACpE,6DAA6D;QAC7D,wDAAwD;QACxD,MAAM,MAAM,GAAG,CAAC,KAAU,EAAE,EAAE,CAC5B,KAAK,EAAE,UAAU,IAAI,KAAK,EAAE,UAAU,IAAI,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC;QAClE,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC5C,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAU,EAAE,EAAE;gBAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxB,IAAI,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACrB,MAAM,OAAO,GAAa,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,0CAA0C;gBAC1C,yDAAyD;gBACzD,+DAA+D;gBAC/D,oEAAoE;gBACpE,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACxE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACvF,wDAAwD;gBACxD,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,UAAU,IAAI,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC5E,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YAC5C,CAAC,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7C,MAAM,mBAAmB,GAAG,cAAc,EAAE,UAAU,CAAC;QACvD,iEAAiE;QACjE,gEAAgE;QAChE,gEAAgE;QAChE,gEAAgE;QAChE,6CAA6C;QAC7C,MAAM,gBAAgB,GACpB,cAAc,EAAE,wBAAwB;YACxC,EAAE,EAAE,0BAA0B;YAC9B,OAAO,CAAC;QAEV,gEAAgE;QAChE,wEAAwE;QACxE,MAAM,WAAW,GAAyB,EAAE,EAAE,YAAY,CAAC;QAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GACV,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjE,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,iBAAiB,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAC/D,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,CAC3D,CAAC;gBACF,MAAM,MAAM,GACV,iBAAiB;oBACjB,CAAC,mBAAmB;wBAClB,CAAC,CAAC,SAAS,MAAM,0BAA0B,mBAAmB,GAAG;wBACjE,CAAC,CAAC,SAAS,MAAM,uBAAuB,CAAC,CAAC;gBAC9C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;oBACtD,MAAM;oBACN,aAAa,EAAE,mBAAmB;iBACnC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,OAAO,GAAa,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC;gBACjE,CAAC,CAAC,aAAa,CAAC,YAAY;gBAC5B,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACvC,MAAM,EAAE,GACN,QAAQ;oBACR,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;wBACtD,MAAM,EAAE,SAAS,MAAM,6CAA6C,mBAAmB,GAAG;wBAC1F,aAAa,EAAE,mBAAmB;qBACnC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,mEAAmE;YACnE,+DAA+D;YAC/D,8DAA8D;YAC9D,oEAAoE;YACpE,MAAM,YAAY,GAAyB,EAAE,EAAE,aAAa,CAAC;YAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,SAAS,MAAM,yCAAyC;iBACjE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,iEAAiE;QACjE,+DAA+D;QAC/D,2CAA2C;QAC3C,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,uBAAuB,CACjD,aAAa,EACb,QAAQ,EACR,MAAM,EACN,GAAG,CACJ,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,oCAAoC;YAC5C,aAAa,EAAE,mBAAmB;SACnC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACX,QAAgB,EAChB,QAAiC;QAEjC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,YAAY,QAAQ,+BAA+B,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QAExD,mDAAmD;QACnD,MAAM,MAAM,GACV,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;YAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,WAAW,KAAK,MAAM,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,sBAAsB,QAAQ,yCAAyC;aAChF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,GAAI,IAAI,CAAC,MAAc,CAAC,oBAAoB,CAAC;YAChE,MAAM,MAAM,GAAI,IAAI,CAAC,MAAc,CAAC,MAAM,CAAC;YAE3C,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,IAAI,CAC/B,GAAG,aAAa,SAAS,EACzB;gBACE,YAAY,EAAE,IAAI;gBAClB,GAAG,EAAE,WAAW;gBAChB,IAAI,EAAE,MAAM;gBACZ,MAAM;gBACN,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,QAAQ;gBACnB,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ;gBAC7C,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI;gBAC3C,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,cAAc;oBACvC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE;oBAC5D,CAAC,CAAC,EAAE,CAAC;aACR,EACD;gBACE,OAAO,EAAE;oBACP,WAAW,EAAE,MAAM;oBACnB,cAAc,EAAE,kBAAkB;iBACnC;gBACD,OAAO,EAAE,KAAK;aACf,CACF,CAAC;YAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,KAAK;gBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;gBACnE,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,aAAa,EAAE,IAAI,CAAC,cAAc;aACnC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO;oBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO;oBAClD,aAAa,EAAE,IAAI,CAAC,cAAc;iBACnC,CAAC;YACJ,CAAC;YACD,oDAAoD;YACpD,OAAO,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC;YAChF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,QAAiC,EACjC,MAAe,EACf,OAAsB,EAAE;QAExB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,eAAe,GAAI,IAAI,CAAC,MAAc,CAAC,eAAe,CAAC;YAC7D,MAAM,MAAM,GAAI,IAAI,CAAC,MAAc,CAAC,MAAM,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC;YAErC,MAAM,eAAK,CAAC,IAAI,CACd,GAAG,eAAe,YAAY,EAC9B;gBACE,KAAK,EAAE,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,OAAO,IAAI,SAAS;gBACrD,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,KAAK,EAAE,OAAO,IAAI,SAAS;gBACrD,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,MAAM;gBACN,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;gBACtE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;gBAChC,aAAa,EAAE,IAAI,CAAC,YAAY;gBAChC,WAAW,EAAE,IAAI,CAAC,UAAU;gBAC5B,YAAY,EAAE,IAAI,CAAC,WAAW;gBAC9B,YAAY,EAAE,IAAI,CAAC,WAAW;gBAC9B,YAAY,EAAE,IAAI,CAAC,WAAW;gBAC9B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,EACD;gBACE,OAAO,EAAE;oBACP,WAAW,EAAE,MAAM;oBACnB,cAAc,EAAE,kBAAkB;iBACnC;gBACD,OAAO,EAAE,IAAI;aACd,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CACZ,QAAgB,EAChB,QAAiC;QAEjC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,aAAa,QAAQ,+BAA+B,CACrD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QAExD,MAAM,MAAM,GAAwB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAC1D,WAAW,EACX,MAAM,EACN,IAAI,CAAC,iBAAiB,EACtB,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CACT,QAAgB,EAChB,QAAiC,EACjC,OAA+B,EAAE;QAEjC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC7D,mEAAmE;YACnE,oEAAoE;YACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/B,OAAO;oBACL,GAAG,QAAQ;oBACX,MAAM,EAAE,OAAO;oBACf,MAAM,EACJ,CAAC,QAAQ,CAAC,MAAM,IAAI,mBAAmB,CAAC;wBACxC,4EAA4E;iBAC/E,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,yDAAyD;QACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,UAAU,CACtB,QAAgB,EAChB,QAAiC,EACjC,YAA2B,EAC3B,OAA+B,EAAE;QAEjC,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;YACb,IAAI,CAAC,MAAc,CAAC,MAAM;YAC3B,iBAAiB,CAAC;QACpB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QAExD,8DAA8D;QAC9D,sDAAsD;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CACxD,SAAS,EACT,MAAM,EACN,MAAM,IAAI,CAAC,CACZ,CAAC;YACF,IAAI,QAAQ,IAAK,QAAgB,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBACrD,oDAAoD;gBACpD,IAAI,CAAC;oBACH,IAAK,QAAgB,CAAC,YAAY,EAAE,CAAC;wBACnC,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CACtC,SAAS,EACR,QAAgB,CAAC,YAAY,CAC/B,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc;gBAChB,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,kCAAmC,QAAgB,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;oBACvF,YAAY,EAAG,QAAgB,CAAC,YAAY;oBAC5C,aAAa,EAAE,YAAY,CAAC,aAAa;iBAC1C,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QAED,sEAAsE;QACtE,IAAI,YAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;gBACvD,IAAI,EAAE,MAAM;gBACZ,MAAM;gBACN,SAAS,EAAE,QAAQ;gBACnB,MAAM;gBACN,cAAc,EAAE,SAAS;gBACzB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM;gBACtC,eAAe,EAAE,IAAI,CAAC,iBAAiB,EAAE,OAAO;gBAChD,UAAU,EAAG,IAAI,CAAC,iBAAyB,EAAE,QAAQ,EAAE,WAAW;gBAClE,MAAM,EAAE,YAAY,CAAC,MAAM;aAC5B,CAAC,CAAC;YACH,YAAY,GAAI,MAAc,EAAE,YAAY,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,mEAAmE;YACnE,OAAO,CAAC,IAAI,CAAC,6CAA6C,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,kBAAkB;YACjD,YAAY;YACZ,aAAa,EAAE,YAAY,CAAC,aAAa;SAC1C,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,aAAa,CAAC,IAA6B;QACjD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACxD,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAI,IAAY,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,sBAAsB,CAClC,GAAW,EACX,QAAgB,EAChB,IAA6B;QAE7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,IAAI,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;gBACnC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;oBAC1C,MAAM,GAAG,GAAI,IAAY,EAAE,CAAC,KAAK,CAAC,CAAC;oBACnC,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAAE,SAAS;oBAChD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;oBACxB,OAAO,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,uBAAuB,CACnC,IAAS,EACT,QAAiC,EACjC,MAAc,EACd,GAAW;QAEX,MAAM,GAAG,GAAG,IAAI,EAAE,aAAa,EAAE,eAAe,IAAI,IAAI,EAAE,eAAe,CAAC;QAC1E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAEtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAE3C,MAAM,QAAQ,GAAI,GAAW,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAI,GAAW,CAAC,iBAAiB,CAAC;QAC9C,MAAM,WAAW,GAAI,GAAW,CAAC,oBAAoB,CAAC;QAEtD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;YAClD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,UAAU,MAAM,IAAI,QAAQ,+BAA+B,MAAM,GAAG,CAAC,IAAI,EAAE;aACpF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,GAAG,WAAW,EAAE,CAAC;YAC5D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU,MAAM,IAAI,QAAQ,kCAAkC,WAAW,GAAG,CAAC,IAAI,EAAE;aAC5F,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,2EAA2E;IAC3E,KAAK;QACH,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,uEAAuE;IACvE,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED,8DAA8D;IAC9D,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;;AAznBH,wCA0nBC"}

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "@armoriq/sdk-dev",
-  "version": "0.0.1",
+  "version": "0.2.13",
   "description": "ArmorIQ SDK - Build secure AI agents with cryptographic intent verification.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "bin": {
+    "armoriq": "./dist/cli/index.js"
+  },
   "scripts": {
     "build": "tsc",
     "dev": "tsc --watch",
@@ -38,7 +41,9 @@
     "LICENSE"
   ],
   "dependencies": {
-    "axios": "^1.7.0"
+    "axios": "^1.7.0",
+    "commander": "^14.0.3",
+    "open": "^10.2.0"
   },
   "devDependencies": {
     "@types/jest": "^29.5.0",