@claude-flow/cli 3.32.29 → 3.32.32

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/pii-pipeline-service.d.ts

@@ -0,0 +1,65 @@
+import { TrustLevel } from '../entities/trust-level.js';
+export type PIIType = 'email' | 'ssn' | 'credit_card' | 'api_key' | 'password' | 'name' | 'address' | 'phone' | 'ip_address' | 'jwt' | 'aws_key' | 'private_key' | 'database_url' | 'github_token';
+export type PIIAction = 'block' | 'redact' | 'hash' | 'pass';
+export interface PIIDetection {
+    readonly type: PIIType;
+    readonly value: string;
+    readonly confidence: number;
+    readonly offset: number;
+    readonly context: string;
+}
+export interface PIIPolicyConfig {
+    defaultAction: PIIAction;
+    overrides: Partial<Record<PIIType, {
+        action: PIIAction;
+        trustLevelOverride?: Partial<Record<TrustLevel, PIIAction>>;
+    }>>;
+    hashAlgorithm: 'sha256' | 'blake3';
+    hashSalt: string;
+    redactionPlaceholder: string;
+}
+export interface PIICalibration {
+    type: PIIType;
+    falsePositiveRate: number;
+    falseNegativeRate: number;
+    adjustedThreshold: number;
+    totalOverrides: number;
+    lastCalibrated: string;
+}
+export interface PIITransformResult {
+    readonly originalText: string;
+    readonly transformedText: string;
+    readonly detections: readonly PIIDetection[];
+    readonly actionsApplied: readonly {
+        type: PIIType;
+        action: PIIAction;
+    }[];
+    readonly blocked: boolean;
+}
+export interface PIIConfidenceThresholds {
+    autoBlock: number;
+    autoRedact: number;
+    flagForReview: number;
+    ignore: number;
+}
+export interface PIIPipelineServiceDeps {
+    hashFunction: (value: string, salt: string) => string;
+}
+export declare class PIIPipelineService {
+    private readonly deps;
+    private readonly policy;
+    private readonly calibrations;
+    private readonly confidenceThresholds;
+    constructor(deps: PIIPipelineServiceDeps, policy?: Partial<PIIPolicyConfig>, confidenceThresholds?: Partial<PIIConfidenceThresholds>);
+    detect(text: string): PIIDetection[];
+    classify(detections: PIIDetection[]): Map<PIIType, PIIDetection[]>;
+    evaluate(detection: PIIDetection, trustLevel: TrustLevel): PIIAction;
+    transform(text: string, trustLevel: TrustLevel): PIITransformResult;
+    updateCalibration(type: PIIType, calibration: PIICalibration): void;
+    getCalibration(type: PIIType): PIICalibration | undefined;
+    private computeConfidence;
+    private getEffectiveThreshold;
+    static defaultPolicy(): PIIPolicyConfig;
+    static defaultPolicyMatrix(): Record<PIIType, Record<TrustLevel, PIIAction>>;
+}
+//# sourceMappingURL=pii-pipeline-service.d.ts.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/pii-pipeline-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-pipeline-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/pii-pipeline-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,GAC1E,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,GAAG,KAAK,GACnD,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,cAAc,CAAC;AAEhE,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,SAAS,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE;QACjC,MAAM,EAAE,SAAS,CAAC;QAClB,kBAAkB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;KAC7D,CAAC,CAAC,CAAC;IACJ,aAAa,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,SAAS;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,SAAS,CAAA;KAAE,EAAE,CAAC;IACzE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AA2CD,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACvD;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;IAC5D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA0B;gBAG7D,IAAI,EAAE,sBAAsB,EAC5B,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,EACjC,oBAAoB,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC;IAczD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,EAAE;IAyBpC,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;IAYlE,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,GAAG,SAAS;IAkBpE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,kBAAkB;IA+CnE,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,GAAG,IAAI;IAInE,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS;IAIzD,OAAO,CAAC,iBAAiB;IA6CzB,OAAO,CAAC,qBAAqB;IAQ7B,MAAM,CAAC,aAAa,IAAI,eAAe;IAUvC,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;CAG7E"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/pii-pipeline-service.js

@@ -0,0 +1,208 @@
+import { TrustLevel } from '../entities/trust-level.js';
+const DEFAULT_CONFIDENCE_THRESHOLDS = {
+    autoBlock: 0.95,
+    autoRedact: 0.85,
+    flagForReview: 0.6,
+    ignore: 0.6,
+};
+const PII_PATTERNS = {
+    email: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b/g,
+    ssn: /\b\d{3}-\d{2}-\d{4}\b/g,
+    credit_card: /\b(?:\d{4}[-\s]?){3}\d{4}\b/g,
+    api_key: /\b(?:sk-[a-zA-Z0-9]{20,}|key-[a-zA-Z0-9]{20,})\b/g,
+    password: /(?:password|passwd|pwd)\s*[:=]\s*['"]?[^\s'"]{8,}['"]?/gi,
+    name: /\b(?:Mr\.|Mrs\.|Ms\.|Dr\.)\s+[A-Z][a-z]+(?:\s+[A-Z][a-z]+)+\b/g,
+    address: /\b\d{1,5}\s+(?:[A-Z][a-z]+\s+){1,3}(?:St|Ave|Blvd|Dr|Ln|Rd|Way|Ct)\b/g,
+    phone: /(?:\+?1[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b/g,
+    ip_address: /\b(?:\d{1,3}\.){3}\d{1,3}\b|(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}/g,
+    jwt: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,
+    aws_key: /\bAKIA[0-9A-Z]{16}\b/g,
+    private_key: /-----BEGIN\s+(?:RSA\s+|EC\s+|DSA\s+)?PRIVATE\s+KEY-----/g,
+    database_url: /(?:postgres|mysql|mongodb|redis):\/\/[^\s]+/g,
+    github_token: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}\b/g,
+};
+const DEFAULT_POLICY_MATRIX = {
+    ssn: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'block' },
+    credit_card: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'block' },
+    api_key: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'redact' },
+    password: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'block' },
+    email: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'redact', [TrustLevel.TRUSTED]: 'hash', [TrustLevel.PRIVILEGED]: 'pass' },
+    phone: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'redact', [TrustLevel.TRUSTED]: 'hash', [TrustLevel.PRIVILEGED]: 'pass' },
+    name: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'redact', [TrustLevel.TRUSTED]: 'redact', [TrustLevel.PRIVILEGED]: 'pass' },
+    ip_address: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'hash', [TrustLevel.TRUSTED]: 'hash', [TrustLevel.PRIVILEGED]: 'pass' },
+    jwt: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'redact' },
+    aws_key: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'block' },
+    private_key: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'block' },
+    database_url: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'redact' },
+    github_token: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'redact' },
+    address: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'redact', [TrustLevel.TRUSTED]: 'redact', [TrustLevel.PRIVILEGED]: 'pass' },
+};
+export class PIIPipelineService {
+    deps;
+    policy;
+    calibrations;
+    confidenceThresholds;
+    constructor(deps, policy, confidenceThresholds) {
+        this.deps = deps;
+        this.policy = {
+            defaultAction: policy?.defaultAction ?? 'redact',
+            overrides: policy?.overrides ?? {},
+            hashAlgorithm: policy?.hashAlgorithm ?? 'sha256',
+            hashSalt: policy?.hashSalt ?? '',
+            redactionPlaceholder: policy?.redactionPlaceholder ?? '[REDACTED:{type}]',
+        };
+        this.calibrations = new Map();
+        this.confidenceThresholds = { ...DEFAULT_CONFIDENCE_THRESHOLDS, ...confidenceThresholds };
+    }
+    detect(text) {
+        const detections = [];
+        for (const [type, pattern] of Object.entries(PII_PATTERNS)) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(text)) !== null) {
+                const contextStart = Math.max(0, match.index - 20);
+                const contextEnd = Math.min(text.length, match.index + match[0].length + 20);
+                const confidence = this.computeConfidence(type, match[0], text);
+                detections.push({
+                    type: type,
+                    value: match[0],
+                    confidence,
+                    offset: match.index,
+                    context: text.slice(contextStart, contextEnd),
+                });
+            }
+        }
+        return detections.sort((a, b) => b.offset - a.offset);
+    }
+    classify(detections) {
+        const classified = new Map();
+        for (const detection of detections) {
+            const existing = classified.get(detection.type) ?? [];
+            existing.push(detection);
+            classified.set(detection.type, existing);
+        }
+        return classified;
+    }
+    evaluate(detection, trustLevel) {
+        if (detection.confidence < this.getEffectiveThreshold(detection.type)) {
+            return 'pass';
+        }
+        const override = this.policy.overrides[detection.type];
+        if (override?.trustLevelOverride?.[trustLevel]) {
+            return override.trustLevelOverride[trustLevel];
+        }
+        const defaultMatrix = DEFAULT_POLICY_MATRIX[detection.type];
+        if (defaultMatrix) {
+            return defaultMatrix[trustLevel];
+        }
+        return this.policy.defaultAction;
+    }
+    transform(text, trustLevel) {
+        const detections = this.detect(text);
+        const actionsApplied = [];
+        let transformedText = text;
+        let blocked = false;
+        const sortedDetections = [...detections].sort((a, b) => b.offset - a.offset);
+        for (const detection of sortedDetections) {
+            const action = this.evaluate(detection, trustLevel);
+            actionsApplied.push({ type: detection.type, action });
+            switch (action) {
+                case 'block':
+                    blocked = true;
+                    break;
+                case 'redact': {
+                    const placeholder = this.policy.redactionPlaceholder.replace('{type}', detection.type);
+                    transformedText =
+                        transformedText.slice(0, detection.offset) +
+                            placeholder +
+                            transformedText.slice(detection.offset + detection.value.length);
+                    break;
+                }
+                case 'hash': {
+                    const hashed = this.deps.hashFunction(detection.value, this.policy.hashSalt);
+                    const hashPlaceholder = `[HASH:${detection.type}:${hashed.slice(0, 8)}]`;
+                    transformedText =
+                        transformedText.slice(0, detection.offset) +
+                            hashPlaceholder +
+                            transformedText.slice(detection.offset + detection.value.length);
+                    break;
+                }
+                case 'pass':
+                    break;
+            }
+        }
+        return {
+            originalText: text,
+            transformedText: blocked ? '' : transformedText,
+            detections,
+            actionsApplied,
+            blocked,
+        };
+    }
+    updateCalibration(type, calibration) {
+        this.calibrations.set(type, calibration);
+    }
+    getCalibration(type) {
+        return this.calibrations.get(type);
+    }
+    computeConfidence(type, value, _fullText) {
+        const calibration = this.calibrations.get(type);
+        let baseConfidence;
+        switch (type) {
+            case 'ssn':
+            case 'credit_card':
+            case 'aws_key':
+            case 'github_token':
+                baseConfidence = 0.95;
+                break;
+            case 'email':
+            case 'jwt':
+            case 'private_key':
+            case 'database_url':
+                baseConfidence = 0.9;
+                break;
+            case 'api_key':
+            case 'password':
+                baseConfidence = 0.85;
+                break;
+            case 'phone':
+            case 'ip_address':
+                baseConfidence = 0.8;
+                break;
+            case 'name':
+            case 'address':
+                baseConfidence = 0.7;
+                break;
+            default:
+                baseConfidence = 0.75;
+        }
+        if (value.length < 5) {
+            baseConfidence *= 0.8;
+        }
+        if (calibration && calibration.totalOverrides > 10) {
+            const fpAdjustment = calibration.falsePositiveRate * 0.1;
+            baseConfidence = Math.max(0.1, baseConfidence - fpAdjustment);
+        }
+        return Math.min(1.0, Math.max(0.0, baseConfidence));
+    }
+    getEffectiveThreshold(type) {
+        const calibration = this.calibrations.get(type);
+        if (calibration && calibration.totalOverrides > 10) {
+            return calibration.adjustedThreshold;
+        }
+        return this.confidenceThresholds.ignore;
+    }
+    static defaultPolicy() {
+        return {
+            defaultAction: 'redact',
+            overrides: {},
+            hashAlgorithm: 'sha256',
+            hashSalt: '',
+            redactionPlaceholder: '[REDACTED:{type}]',
+        };
+    }
+    static defaultPolicyMatrix() {
+        return { ...DEFAULT_POLICY_MATRIX };
+    }
+}
+//# sourceMappingURL=pii-pipeline-service.js.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/pii-pipeline-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-pipeline-service.js","sourceRoot":"","sources":["../../../src/domain/services/pii-pipeline-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAmDxD,MAAM,6BAA6B,GAA4B;IAC7D,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,aAAa,EAAE,GAAG;IAClB,MAAM,EAAE,GAAG;CACZ,CAAC;AAEF,MAAM,YAAY,GAA4B;IAC5C,KAAK,EAAE,sDAAsD;IAC7D,GAAG,EAAE,wBAAwB;IAC7B,WAAW,EAAE,8BAA8B;IAC3C,OAAO,EAAE,mDAAmD;IAC5D,QAAQ,EAAE,0DAA0D;IACpE,IAAI,EAAE,gEAAgE;IACtE,OAAO,EAAE,uEAAuE;IAChF,KAAK,EAAE,wDAAwD;IAC/D,UAAU,EAAE,uEAAuE;IACnF,GAAG,EAAE,oEAAoE;IACzE,OAAO,EAAE,uBAAuB;IAChC,WAAW,EAAE,0DAA0D;IACvE,YAAY,EAAE,8CAA8C;IAC5D,YAAY,EAAE,gDAAgD;CAC/D,CAAC;AAEF,MAAM,qBAAqB,GAAmD;IAC5E,GAAG,EAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;IAClL,WAAW,EAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;IAClL,OAAO,EAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE;IACnL,QAAQ,EAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;IAClL,KAAK,EAAS,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;IACjL,KAAK,EAAS,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;IACjL,IAAI,EAAU,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;IACnL,UAAU,EAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;IAC/K,GAAG,EAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE;IACnL,OAAO,EAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;IAClL,WAAW,EAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;IAClL,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE;IACnL,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE;IACnL,OAAO,EAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;CACpL,CAAC;AAMF,MAAM,OAAO,kBAAkB;IACZ,IAAI,CAAyB;IAC7B,MAAM,CAAkB;IACxB,YAAY,CAA+B;IAC3C,oBAAoB,CAA0B;IAE/D,YACE,IAA4B,EAC5B,MAAiC,EACjC,oBAAuD;QAEvD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG;YACZ,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,QAAQ;YAChD,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;YAClC,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,QAAQ;YAChD,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE;YAChC,oBAAoB,EAAE,MAAM,EAAE,oBAAoB,IAAI,mBAAmB;SAC1E,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,oBAAoB,GAAG,EAAE,GAAG,6BAA6B,EAAE,GAAG,oBAAoB,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,MAAM,UAAU,GAAmB,EAAE,CAAC;QAEtC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAA6B,CAAC;YAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;gBACnD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;gBAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAe,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAE3E,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,IAAe;oBACrB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;oBACf,UAAU;oBACV,MAAM,EAAE,KAAK,CAAC,KAAK;oBACnB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,QAAQ,CAAC,UAA0B;QACjC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;QAEtD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzB,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,QAAQ,CAAC,SAAuB,EAAE,UAAsB;QACtD,IAAI,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACtE,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,OAAO,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAE,CAAC;QAClD,CAAC;QAED,MAAM,aAAa,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,UAAsB;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,cAAc,GAA2C,EAAE,CAAC;QAClE,IAAI,eAAe,GAAG,IAAI,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,gBAAgB,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAE7E,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YACpD,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAEtD,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,OAAO;oBACV,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;oBACvF,eAAe;wBACb,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC;4BAC1C,WAAW;4BACX,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACnE,MAAM;gBACR,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC7E,MAAM,eAAe,GAAG,SAAS,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;oBACzE,eAAe;wBACb,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC;4BAC1C,eAAe;4BACf,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACnE,MAAM;gBACR,CAAC;gBACD,KAAK,MAAM;oBACT,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe;YAC/C,UAAU;YACV,cAAc;YACd,OAAO;SACR,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,IAAa,EAAE,WAA2B;QAC1D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,cAAc,CAAC,IAAa;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAEO,iBAAiB,CAAC,IAAa,EAAE,KAAa,EAAE,SAAiB;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,cAAsB,CAAC;QAE3B,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,KAAK,CAAC;YACX,KAAK,aAAa,CAAC;YACnB,KAAK,SAAS,CAAC;YACf,KAAK,cAAc;gBACjB,cAAc,GAAG,IAAI,CAAC;gBACtB,MAAM;YACR,KAAK,OAAO,CAAC;YACb,KAAK,KAAK,CAAC;YACX,KAAK,aAAa,CAAC;YACnB,KAAK,cAAc;gBACjB,cAAc,GAAG,GAAG,CAAC;gBACrB,MAAM;YACR,KAAK,SAAS,CAAC;YACf,KAAK,UAAU;gBACb,cAAc,GAAG,IAAI,CAAC;gBACtB,MAAM;YACR,KAAK,OAAO,CAAC;YACb,KAAK,YAAY;gBACf,cAAc,GAAG,GAAG,CAAC;gBACrB,MAAM;YACR,KAAK,MAAM,CAAC;YACZ,KAAK,SAAS;gBACZ,cAAc,GAAG,GAAG,CAAC;gBACrB,MAAM;YACR;gBACE,cAAc,GAAG,IAAI,CAAC;QAC1B,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,cAAc,IAAI,GAAG,CAAC;QACxB,CAAC;QAED,IAAI,WAAW,IAAI,WAAW,CAAC,cAAc,GAAG,EAAE,EAAE,CAAC;YACnD,MAAM,YAAY,GAAG,WAAW,CAAC,iBAAiB,GAAG,GAAG,CAAC;YACzD,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,GAAG,YAAY,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,qBAAqB,CAAC,IAAa;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,WAAW,IAAI,WAAW,CAAC,cAAc,GAAG,EAAE,EAAE,CAAC;YACnD,OAAO,WAAW,CAAC,iBAAiB,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,aAAa;QAClB,OAAO;YACL,aAAa,EAAE,QAAQ;YACvB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,EAAE;YACZ,oBAAoB,EAAE,mBAAmB;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,mBAAmB;QACxB,OAAO,EAAE,GAAG,qBAAqB,EAAE,CAAC;IACtC,CAAC;CACF"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/routing-service.d.ts

@@ -0,0 +1,51 @@
+import { FederationEnvelope, type FederationEnvelopeProps, type FederationMessageType } from '../entities/federation-envelope.js';
+import { FederationSession } from '../entities/federation-session.js';
+export type RoutingMode = 'direct' | 'broadcast' | 'consensus';
+export interface RoutingResult {
+    readonly success: boolean;
+    readonly mode: RoutingMode;
+    readonly envelopeId: string;
+    readonly targetNodeIds: readonly string[];
+    readonly error?: string;
+    readonly latencyMs?: number;
+}
+export interface ConsensusProposal {
+    readonly proposalId: string;
+    readonly proposerNodeId: string;
+    readonly messageType: FederationMessageType;
+    readonly payload: unknown;
+    readonly quorumRequired: number;
+    readonly votes: Map<string, boolean>;
+    readonly createdAt: Date;
+    readonly expiresAt: Date;
+}
+export interface RoutingServiceDeps {
+    generateEnvelopeId: () => string;
+    generateNonce: () => string;
+    signEnvelope: (payload: string, sessionToken: string) => string;
+    verifyEnvelope: (payload: string, signature: string, sessionToken: string) => boolean;
+    scanPii: (text: string, trustLevel: number) => {
+        transformedText: string;
+        scanResult: FederationEnvelopeProps['piiScanResult'];
+    };
+    sendToNode: (nodeId: string, envelope: FederationEnvelope) => Promise<void>;
+    getActiveSessions: () => FederationSession[];
+    getLocalNodeId: () => string;
+}
+export declare class RoutingService {
+    private readonly deps;
+    private readonly pendingProposals;
+    constructor(deps: RoutingServiceDeps);
+    selectMode(messageType: FederationMessageType): RoutingMode;
+    send<T>(session: FederationSession, messageType: FederationMessageType, payload: T): Promise<RoutingResult>;
+    broadcast<T>(messageType: FederationMessageType, payload: T): Promise<RoutingResult[]>;
+    propose<T>(messageType: FederationMessageType, payload: T, quorumFraction?: number): Promise<ConsensusProposal>;
+    recordVote(proposalId: string, nodeId: string, vote: boolean): boolean;
+    isConsensusReached(proposalId: string): {
+        reached: boolean;
+        approved: boolean;
+    };
+    verifyInboundEnvelope(envelope: FederationEnvelope, sessionToken: string): boolean;
+    cleanExpiredProposals(): void;
+}
+//# sourceMappingURL=routing-service.d.ts.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/routing-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/routing-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAE3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,EAAE,MAAM,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;IAChE,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IACtF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,uBAAuB,CAAC,eAAe,CAAC,CAAA;KAAE,CAAC;IACjI,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,iBAAiB,EAAE,MAAM,iBAAiB,EAAE,CAAC;IAC7C,cAAc,EAAE,MAAM,MAAM,CAAC;CAC9B;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiC;gBAEtD,IAAI,EAAE,kBAAkB;IAKpC,UAAU,CAAC,WAAW,EAAE,qBAAqB,GAAG,WAAW;IAUrD,IAAI,CAAC,CAAC,EACV,OAAO,EAAE,iBAAiB,EAC1B,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,CAAC,GACT,OAAO,CAAC,aAAa,CAAC;IAmEnB,SAAS,CAAC,CAAC,EACf,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,CAAC,GACT,OAAO,CAAC,aAAa,EAAE,CAAC;IAYrB,OAAO,CAAC,CAAC,EACb,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,CAAC,EACV,cAAc,GAAE,MAAc,GAC7B,OAAO,CAAC,iBAAiB,CAAC;IA4B7B,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO;IAatE,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE;IAkB/E,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IAKlF,qBAAqB,IAAI,IAAI;CAQ9B"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/routing-service.js

@@ -0,0 +1,147 @@
+import { FederationEnvelope, CONSENSUS_REQUIRED_TYPES, } from '../entities/federation-envelope.js';
+export class RoutingService {
+    deps;
+    pendingProposals;
+    constructor(deps) {
+        this.deps = deps;
+        this.pendingProposals = new Map();
+    }
+    selectMode(messageType) {
+        if (CONSENSUS_REQUIRED_TYPES.has(messageType)) {
+            return 'consensus';
+        }
+        if (messageType === 'status-broadcast') {
+            return 'broadcast';
+        }
+        return 'direct';
+    }
+    async send(session, messageType, payload) {
+        const startTime = Date.now();
+        if (!session.active) {
+            return { success: false, mode: 'direct', envelopeId: '', targetNodeIds: [], error: 'Session is not active' };
+        }
+        if (session.isExpired()) {
+            return { success: false, mode: 'direct', envelopeId: '', targetNodeIds: [], error: 'Session has expired' };
+        }
+        const payloadStr = JSON.stringify(payload);
+        const { transformedText, scanResult } = this.deps.scanPii(payloadStr, session.trustLevel);
+        if (scanResult.piiFound && scanResult.actionsApplied.includes('block')) {
+            return { success: false, mode: 'direct', envelopeId: '', targetNodeIds: [session.remoteNodeId], error: 'Message blocked by PII policy' };
+        }
+        const envelopeId = this.deps.generateEnvelopeId();
+        const nonce = this.deps.generateNonce();
+        const timestamp = new Date();
+        const unsignedPayload = JSON.stringify({
+            envelopeId,
+            sourceNodeId: session.localNodeId,
+            targetNodeId: session.remoteNodeId,
+            sessionId: session.sessionId,
+            messageType,
+            payload: JSON.parse(transformedText),
+            timestamp: timestamp.toISOString(),
+            nonce,
+        });
+        const hmacSignature = this.deps.signEnvelope(unsignedPayload, session.sessionToken);
+        const envelope = new FederationEnvelope({
+            envelopeId,
+            sourceNodeId: session.localNodeId,
+            targetNodeId: session.remoteNodeId,
+            sessionId: session.sessionId,
+            messageType,
+            payload: JSON.parse(transformedText),
+            timestamp,
+            nonce,
+            hmacSignature,
+            piiScanResult: scanResult,
+        });
+        try {
+            await this.deps.sendToNode(session.remoteNodeId, envelope);
+            session.recordMessageSent();
+            if (scanResult.piiFound) {
+                session.recordPiiRedaction();
+            }
+            return {
+                success: true,
+                mode: 'direct',
+                envelopeId,
+                targetNodeIds: [session.remoteNodeId],
+                latencyMs: Date.now() - startTime,
+            };
+        }
+        catch (err) {
+            const errorMsg = err instanceof Error ? err.message : String(err);
+            return { success: false, mode: 'direct', envelopeId, targetNodeIds: [session.remoteNodeId], error: errorMsg };
+        }
+    }
+    async broadcast(messageType, payload) {
+        const sessions = this.deps.getActiveSessions().filter(s => s.active && !s.isExpired());
+        const results = [];
+        for (const session of sessions) {
+            const result = await this.send(session, messageType, payload);
+            results.push(result);
+        }
+        return results;
+    }
+    async propose(messageType, payload, quorumFraction = 2 / 3) {
+        const sessions = this.deps.getActiveSessions().filter(s => s.active && !s.isExpired());
+        const quorumRequired = Math.ceil(sessions.length * quorumFraction);
+        const proposal = {
+            proposalId: this.deps.generateEnvelopeId(),
+            proposerNodeId: this.deps.getLocalNodeId(),
+            messageType,
+            payload,
+            quorumRequired,
+            votes: new Map(),
+            createdAt: new Date(),
+            expiresAt: new Date(Date.now() + 30_000),
+        };
+        this.pendingProposals.set(proposal.proposalId, proposal);
+        await this.broadcast(messageType, {
+            type: 'consensus-proposal',
+            proposalId: proposal.proposalId,
+            messageType,
+            payload,
+            quorumRequired,
+        });
+        return proposal;
+    }
+    recordVote(proposalId, nodeId, vote) {
+        const proposal = this.pendingProposals.get(proposalId);
+        if (!proposal)
+            return false;
+        if (new Date() > proposal.expiresAt) {
+            this.pendingProposals.delete(proposalId);
+            return false;
+        }
+        proposal.votes.set(nodeId, vote);
+        return true;
+    }
+    isConsensusReached(proposalId) {
+        const proposal = this.pendingProposals.get(proposalId);
+        if (!proposal)
+            return { reached: false, approved: false };
+        const approvals = Array.from(proposal.votes.values()).filter(v => v).length;
+        if (approvals >= proposal.quorumRequired) {
+            return { reached: true, approved: true };
+        }
+        const rejections = Array.from(proposal.votes.values()).filter(v => !v).length;
+        const totalVoters = this.deps.getActiveSessions().length;
+        if (rejections > totalVoters - proposal.quorumRequired) {
+            return { reached: true, approved: false };
+        }
+        return { reached: false, approved: false };
+    }
+    verifyInboundEnvelope(envelope, sessionToken) {
+        const signablePayload = envelope.toSignablePayload();
+        return this.deps.verifyEnvelope(signablePayload, envelope.hmacSignature, sessionToken);
+    }
+    cleanExpiredProposals() {
+        const now = new Date();
+        for (const [id, proposal] of this.pendingProposals) {
+            if (now > proposal.expiresAt) {
+                this.pendingProposals.delete(id);
+            }
+        }
+    }
+}
+//# sourceMappingURL=routing-service.js.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/routing-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing-service.js","sourceRoot":"","sources":["../../../src/domain/services/routing-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAGlB,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAoC5C,MAAM,OAAO,cAAc;IACR,IAAI,CAAqB;IACzB,gBAAgB,CAAiC;IAElE,YAAY,IAAwB;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,UAAU,CAAC,WAAkC;QAC3C,IAAI,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;YACvC,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,OAA0B,EAC1B,WAAkC,EAClC,OAAU;QAEV,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC/G,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC7G,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1F,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QAC3I,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE7B,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC;YACrC,UAAU;YACV,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YACpC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAEpF,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAI;YACzC,UAAU;YACV,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAM;YACzC,SAAS;YACT,KAAK;YACL,aAAa;YACb,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC3D,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ;gBACd,UAAU;gBACV,aAAa,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;gBACrC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aAClC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAChH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,WAAkC,EAClC,OAAU;QAEV,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACvF,MAAM,OAAO,GAAoB,EAAE,CAAC;QAEpC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,WAAkC,EAClC,OAAU,EACV,iBAAyB,CAAC,GAAG,CAAC;QAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACvF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC;QAEnE,MAAM,QAAQ,GAAsB;YAClC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAC1C,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YAC1C,WAAW;YACX,OAAO;YACP,cAAc;YACd,KAAK,EAAE,IAAI,GAAG,EAAE;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SACzC,CAAC;QAEF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEzD,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,WAAW;YACX,OAAO;YACP,cAAc;SACf,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,UAAU,CAAC,UAAkB,EAAE,MAAc,EAAE,IAAa;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE5B,IAAI,IAAI,IAAI,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kBAAkB,CAAC,UAAkB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAE1D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5E,IAAI,SAAS,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC;QACzD,IAAI,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5C,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,qBAAqB,CAAC,QAA4B,EAAE,YAAoB;QACtE,MAAM,eAAe,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACzF,CAAC;IAED,qBAAqB;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACnD,IAAI,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-firewall-service.d.ts

@@ -0,0 +1,71 @@
+/**
+ * ADR-111 Phase 4 — Trust-graded firewall projection.
+ *
+ * Projects the WG_NETWORK_GATES table (defined in wg-mesh-service.ts) into
+ * concrete kernel-firewall rules. Two backends:
+ *
+ *   - `nftables` for Linux — atomic `nft -f <file>` loader, family `inet`,
+ *     hook `input` (interface-scoped to the WG iface).
+ *   - `pf` for macOS — `pfctl -a ruflo-fed -f <file>`, anchor-scoped so
+ *     ruflo's rules don't collide with the operator's main pf ruleset.
+ *
+ * Like Phase 2's WgMeshService this is a **pure-projection** service: it
+ * returns rule strings + the shell command the operator runs. It never
+ * shells out or modifies kernel state itself. Operator review is mandatory
+ * because `pf` / `nft` reloads atomically replace the active ruleset for
+ * the targeted scope — a typo here can drop ssh.
+ *
+ * v1 scope: the four trust levels VERIFIED/ATTESTED/TRUSTED/PRIVILEGED.
+ * UNTRUSTED peers are never in the mesh (excluded by WgMeshService) so
+ * they don't need a firewall rule either — implicit drop policy.
+ */
+import { FederationNode } from '../entities/federation-node.js';
+export type WgFirewallPlatform = 'linux-nftables' | 'darwin-pf';
+export interface WgFirewallServiceConfig {
+    /** Target platform. Default: auto-detect from process.platform. */
+    readonly platform?: WgFirewallPlatform;
+    /** WG interface name to scope rules to. Defaults to `ruflo-fed`. */
+    readonly interfaceName?: string;
+    /** Where the operator should write the rule file. Used for the load-command string. */
+    readonly rulePath?: string;
+    /** pf anchor (macOS only). Defaults to `ruflo-fed`. */
+    readonly pfAnchor?: string;
+}
+export interface WgFirewallRuleSet {
+    /** The full rule-file content the operator writes to disk. */
+    readonly content: string;
+    /** The shell command the operator runs to load it. */
+    readonly loadCmd: string;
+    /** Recommended file path (informational — the operator decides). */
+    readonly rulePath: string;
+    /** Per-peer rule projections for audit/inspection. */
+    readonly peerProjections: ReadonlyArray<{
+        readonly nodeId: string;
+        readonly trustLabel: string;
+        readonly meshIP: string;
+        readonly rules: readonly string[];
+    }>;
+}
+export declare class WgFirewallService {
+    private readonly platform;
+    private readonly interfaceName;
+    private readonly rulePath;
+    private readonly pfAnchor;
+    constructor(config?: WgFirewallServiceConfig);
+    getPlatform(): WgFirewallPlatform;
+    /**
+     * Project the current peer set into a complete rule file (nftables or pf)
+     * scoped to the WG interface.
+     *
+     * Peers below WG_MIN_MESH_TRUST (UNTRUSTED) are dropped — they have no
+     * mesh IP and shouldn't appear in firewall allow rules anyway. Peers
+     * without `metadata.wgMeshIP` are skipped (a stale manifest with no WG
+     * block; the mesh layer already excludes them).
+     */
+    projectRules(peers: readonly FederationNode[]): WgFirewallRuleSet;
+    private renderNftables;
+    private renderPf;
+    private defaultRulePath;
+    private trustLabel;
+}
+//# sourceMappingURL=wg-firewall-service.d.ts.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-firewall-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wg-firewall-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/wg-firewall-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAIhE,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG,WAAW,CAAC;AAEhE,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IACvC,oEAAoE;IACpE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uDAAuD;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,sDAAsD;IACtD,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC;QACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;KACnC,CAAC,CAAC;CACJ;AAwDD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,MAAM,GAAE,uBAA4B;IAShD,WAAW,IAAI,kBAAkB;IAIjC;;;;;;;;OAQG;IACH,YAAY,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,GAAG,iBAAiB;IAsCjE,OAAO,CAAC,cAAc;IAmCtB,OAAO,CAAC,QAAQ;IAyBhB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,UAAU;CASnB"}