@connexum/ai-governance 1.0.0-beta.11

package/dist/governance/hook-install-snippet.js

@@ -0,0 +1,212 @@
+"use strict";
+/**
+ * Hook Install Snippet Generator (companion to W4.4 proxy onboarding).
+ *
+ * Generates customer-facing copy-paste snippets for wiring governance hooks
+ * into their existing agent codebase. The proxy onboarding (W4.4) covers
+ * cloud-LLM-only customers via URL swap; this generator covers customers
+ * who need the full hook install for tool-using agents (Claude Code,
+ * OpenAI Agents SDK function calling, LangChain agents with tools, etc.).
+ *
+ * Each framework gets:
+ *   - install command (npm / pip)
+ *   - configuration snippet (where the hook is wired)
+ *   - verification step (how to confirm the hook fired the first time)
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-AGENT-DISCOVERY-CLI / W5.1 hook-install path
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUPPORTED_HOOK_FRAMEWORKS = void 0;
+exports.buildHookInstallSnippet = buildHookInstallSnippet;
+const DEFAULT_ENDPOINT = 'https://proxy.my-cc.io/api/v1/events';
+function buildHookInstallSnippet(input) {
+    if (!input.tenantId || input.tenantId.trim() === '') {
+        throw new Error('buildHookInstallSnippet: tenantId is required');
+    }
+    const endpoint = input.endpoint ?? DEFAULT_ENDPOINT;
+    switch (input.framework) {
+        case 'claude-code':
+            return claudeCode(input.tenantId, endpoint);
+        case 'openai-agents-py':
+            return openaiAgentsPy(input.tenantId, endpoint);
+        case 'openai-agents-ts':
+            return openaiAgentsTs(input.tenantId, endpoint);
+        case 'langchain-py':
+            return langchainPy(input.tenantId, endpoint);
+        case 'langchain-ts':
+            return langchainTs(input.tenantId, endpoint);
+        case 'crew-ai':
+            return crewAi(input.tenantId, endpoint);
+        case 'langgraph':
+            return langgraph(input.tenantId, endpoint);
+    }
+}
+function claudeCode(tenant, endpoint) {
+    return {
+        framework: 'claude-code',
+        tenantId: tenant,
+        endpoint,
+        installCommand: 'npx @connexum/ai-governance init',
+        configPath: '.claude/settings.json',
+        snippet: `{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "command": "npx @connexum/ai-governance hook",
+        "env": {
+          "CONNEXUM_TENANT": "${tenant}",
+          "CONNEXUM_ENDPOINT": "${endpoint}"
+        }
+      }
+    ],
+    "PostToolUse": [
+      {
+        "command": "npx @connexum/ai-governance hook --post"
+      }
+    ]
+  }
+}`,
+        verificationStep: `Run any tool call in this Claude Code workspace. Within 5 seconds, ` +
+            `your dashboard should show "first event received" for tenant ${tenant}.`,
+    };
+}
+function openaiAgentsPy(tenant, endpoint) {
+    return {
+        framework: 'openai-agents-py',
+        tenantId: tenant,
+        endpoint,
+        installCommand: 'pip install connexum-governance',
+        configPath: 'your agent module',
+        snippet: `from connexum_governance import wrap_agent
+
+agent = Agent(name="researcher", tools=[web_search, summarize])
+agent = wrap_agent(
+    agent,
+    tenant_id="${tenant}",
+    endpoint="${endpoint}",
+)
+# Use agent.run(...) normally; hooks fire pre + post every tool call.`,
+        verificationStep: `Invoke agent.run(...) once. The dashboard should show first event ` +
+            `for tenant ${tenant} within 5 seconds.`,
+    };
+}
+function openaiAgentsTs(tenant, endpoint) {
+    return {
+        framework: 'openai-agents-ts',
+        tenantId: tenant,
+        endpoint,
+        installCommand: 'npm install @connexum/ai-governance',
+        configPath: 'your agent module',
+        snippet: `import { wrapAgent } from '@connexum/ai-governance';
+import { Agent } from '@openai/agents';
+
+const raw = new Agent({ name: 'researcher', tools: [webSearch, summarize] });
+const agent = wrapAgent(raw, {
+  tenantId: '${tenant}',
+  endpoint: '${endpoint}',
+});
+// Use agent.run(...) normally; hooks fire pre + post every tool call.`,
+        verificationStep: `Invoke agent.run(...) once. The dashboard should show first event ` +
+            `for tenant ${tenant} within 5 seconds.`,
+    };
+}
+function langchainPy(tenant, endpoint) {
+    return {
+        framework: 'langchain-py',
+        tenantId: tenant,
+        endpoint,
+        installCommand: 'pip install connexum-governance',
+        configPath: 'your agent constructor',
+        snippet: `from connexum_governance.callbacks import ConnexumGovernanceCallback
+
+cb = ConnexumGovernanceCallback(
+    tenant_id="${tenant}",
+    endpoint="${endpoint}",
+)
+agent_executor = AgentExecutor(
+    agent=agent,
+    tools=tools,
+    callbacks=[cb],
+)`,
+        verificationStep: `Call agent_executor.invoke({...}) once. The dashboard should show ` +
+            `first event for tenant ${tenant} within 5 seconds.`,
+    };
+}
+function langchainTs(tenant, endpoint) {
+    return {
+        framework: 'langchain-ts',
+        tenantId: tenant,
+        endpoint,
+        installCommand: 'npm install @connexum/ai-governance',
+        configPath: 'your agent constructor',
+        snippet: `import { ConnexumGovernanceCallback } from '@connexum/ai-governance/langchain';
+
+const cb = new ConnexumGovernanceCallback({
+  tenantId: '${tenant}',
+  endpoint: '${endpoint}',
+});
+
+const executor = AgentExecutor.fromAgentAndTools({
+  agent,
+  tools,
+  callbacks: [cb],
+});`,
+        verificationStep: `Call executor.invoke({...}) once. The dashboard should show first ` +
+            `event for tenant ${tenant} within 5 seconds.`,
+    };
+}
+function crewAi(tenant, endpoint) {
+    return {
+        framework: 'crew-ai',
+        tenantId: tenant,
+        endpoint,
+        installCommand: 'pip install connexum-governance',
+        configPath: 'your crew module',
+        snippet: `from connexum_governance.crewai import GovernedCrew
+
+crew = GovernedCrew(
+    agents=[researcher, writer],
+    tasks=[task1, task2],
+    connexum_tenant_id="${tenant}",
+    connexum_endpoint="${endpoint}",
+)
+result = crew.kickoff()`,
+        verificationStep: `Run crew.kickoff() once. The dashboard should show first event ` +
+            `for tenant ${tenant} within 5 seconds.`,
+    };
+}
+function langgraph(tenant, endpoint) {
+    return {
+        framework: 'langgraph',
+        tenantId: tenant,
+        endpoint,
+        installCommand: 'pip install connexum-governance',
+        configPath: 'your graph module',
+        snippet: `from connexum_governance.langgraph import attach_governance
+
+builder = StateGraph(MyState)
+builder.add_node("plan", plan_node)
+builder.add_node("act", act_node)
+builder.add_edge(START, "plan")
+builder.add_edge("plan", "act")
+
+graph = builder.compile()
+graph = attach_governance(
+    graph,
+    tenant_id="${tenant}",
+    endpoint="${endpoint}",
+)`,
+        verificationStep: `Invoke graph.invoke({...}) once. The dashboard should show first ` +
+            `event for tenant ${tenant} within 5 seconds.`,
+    };
+}
+exports.SUPPORTED_HOOK_FRAMEWORKS = [
+    { id: 'claude-code', label: 'Claude Code' },
+    { id: 'openai-agents-py', label: 'OpenAI Agents SDK (Python)' },
+    { id: 'openai-agents-ts', label: 'OpenAI Agents SDK (TypeScript)' },
+    { id: 'langchain-py', label: 'LangChain (Python)' },
+    { id: 'langchain-ts', label: 'LangChain (TypeScript)' },
+    { id: 'crew-ai', label: 'CrewAI' },
+    { id: 'langgraph', label: 'LangGraph' },
+];
+//# sourceMappingURL=hook-install-snippet.js.map

package/dist/governance/hook-install-snippet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-install-snippet.js","sourceRoot":"","sources":["../../src/governance/hook-install-snippet.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAkCH,0DAqBC;AAvBD,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAEhE,SAAgB,uBAAuB,CAAC,KAAuB;IAC7D,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IACpD,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;QACxB,KAAK,aAAa;YAChB,OAAO,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9C,KAAK,kBAAkB;YACrB,OAAO,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClD,KAAK,kBAAkB;YACrB,OAAO,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClD,KAAK,cAAc;YACjB,OAAO,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/C,KAAK,cAAc;YACjB,OAAO,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/C,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1C,KAAK,WAAW;YACd,OAAO,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,QAAgB;IAClD,OAAO;QACL,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,MAAM;QAChB,QAAQ;QACR,cAAc,EAAE,kCAAkC;QAClD,UAAU,EAAE,uBAAuB;QACnC,OAAO,EAAE;;;;;;gCAMmB,MAAM;kCACJ,QAAQ;;;;;;;;;;EAUxC;QACE,gBAAgB,EACd,qEAAqE;YACrE,gEAAgE,MAAM,GAAG;KAC5E,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,QAAgB;IACtD,OAAO;QACL,SAAS,EAAE,kBAAkB;QAC7B,QAAQ,EAAE,MAAM;QAChB,QAAQ;QACR,cAAc,EAAE,iCAAiC;QACjD,UAAU,EAAE,mBAAmB;QAC/B,OAAO,EAAE;;;;;iBAKI,MAAM;gBACP,QAAQ;;sEAE8C;QAClE,gBAAgB,EACd,oEAAoE;YACpE,cAAc,MAAM,oBAAoB;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,QAAgB;IACtD,OAAO;QACL,SAAS,EAAE,kBAAkB;QAC7B,QAAQ,EAAE,MAAM;QAChB,QAAQ;QACR,cAAc,EAAE,qCAAqC;QACrD,UAAU,EAAE,mBAAmB;QAC/B,OAAO,EAAE;;;;;eAKE,MAAM;eACN,QAAQ;;uEAEgD;QACnE,gBAAgB,EACd,oEAAoE;YACpE,cAAc,MAAM,oBAAoB;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,QAAgB;IACnD,OAAO;QACL,SAAS,EAAE,cAAc;QACzB,QAAQ,EAAE,MAAM;QAChB,QAAQ;QACR,cAAc,EAAE,iCAAiC;QACjD,UAAU,EAAE,wBAAwB;QACpC,OAAO,EAAE;;;iBAGI,MAAM;gBACP,QAAQ;;;;;;EAMtB;QACE,gBAAgB,EACd,oEAAoE;YACpE,0BAA0B,MAAM,oBAAoB;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,QAAgB;IACnD,OAAO;QACL,SAAS,EAAE,cAAc;QACzB,QAAQ,EAAE,MAAM;QAChB,QAAQ;QACR,cAAc,EAAE,qCAAqC;QACrD,UAAU,EAAE,wBAAwB;QACpC,OAAO,EAAE;;;eAGE,MAAM;eACN,QAAQ;;;;;;;IAOnB;QACA,gBAAgB,EACd,oEAAoE;YACpE,oBAAoB,MAAM,oBAAoB;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,QAAgB;IAC9C,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,MAAM;QAChB,QAAQ;QACR,cAAc,EAAE,iCAAiC;QACjD,UAAU,EAAE,kBAAkB;QAC9B,OAAO,EAAE;;;;;0BAKa,MAAM;yBACP,QAAQ;;wBAET;QACpB,gBAAgB,EACd,iEAAiE;YACjE,cAAc,MAAM,oBAAoB;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,QAAgB;IACjD,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,MAAM;QAChB,QAAQ;QACR,cAAc,EAAE,iCAAiC;QACjD,UAAU,EAAE,mBAAmB;QAC/B,OAAO,EAAE;;;;;;;;;;;iBAWI,MAAM;gBACP,QAAQ;EACtB;QACE,gBAAgB,EACd,mEAAmE;YACnE,oBAAoB,MAAM,oBAAoB;KACjD,CAAC;AACJ,CAAC;AAEY,QAAA,yBAAyB,GAAwD;IAC5F,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE;IAC3C,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,4BAA4B,EAAE;IAC/D,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACnE,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,EAAE;IACnD,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,wBAAwB,EAAE;IACvD,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE;IAClC,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE;CACxC,CAAC"}

package/dist/governance/hook-install-snippet.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * RED-GREEN tests for the hook install snippet generator.
+ *
+ * @connexum/ai-governance  hook-install path (companion to W4.4 proxy onboarding)
+ */
+export {};
+//# sourceMappingURL=hook-install-snippet.test.d.ts.map

package/dist/governance/hook-install-snippet.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-install-snippet.test.d.ts","sourceRoot":"","sources":["../../src/governance/hook-install-snippet.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/governance/hook-install-snippet.test.js

@@ -0,0 +1,130 @@
+"use strict";
+/**
+ * RED-GREEN tests for the hook install snippet generator.
+ *
+ * @connexum/ai-governance  hook-install path (companion to W4.4 proxy onboarding)
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const assert = __importStar(require("node:assert/strict"));
+const hook_install_snippet_1 = require("./hook-install-snippet");
+const ALL = [
+    'claude-code',
+    'openai-agents-py',
+    'openai-agents-ts',
+    'langchain-py',
+    'langchain-ts',
+    'crew-ai',
+    'langgraph',
+];
+(0, node_test_1.describe)('hook install snippet generator', () => {
+    (0, node_test_1.it)('SUPPORTED_HOOK_FRAMEWORKS lists all 7 frameworks', () => {
+        const ids = hook_install_snippet_1.SUPPORTED_HOOK_FRAMEWORKS.map((f) => f.id).sort();
+        assert.deepEqual(ids, [...ALL].sort());
+    });
+    (0, node_test_1.it)('every framework produces an install command + config path + snippet + verification', () => {
+        for (const framework of ALL) {
+            const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework, tenantId: 'tenant-1' });
+            assert.ok(s.installCommand.length > 0, `${framework} installCommand`);
+            assert.ok(s.configPath.length > 0, `${framework} configPath`);
+            assert.ok(s.snippet.length > 0, `${framework} snippet`);
+            assert.ok(s.verificationStep.length > 0, `${framework} verificationStep`);
+            assert.ok(s.snippet.includes('tenant-1'), `${framework} snippet must embed tenantId`);
+        }
+    });
+    (0, node_test_1.it)('claude-code uses settings.json and PreToolUse / PostToolUse hooks', () => {
+        const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework: 'claude-code', tenantId: 'tenant-1' });
+        assert.match(s.configPath, /\.claude\/settings\.json$/);
+        assert.match(s.snippet, /PreToolUse/);
+        assert.match(s.snippet, /PostToolUse/);
+        assert.match(s.installCommand, /npx @connexum\/ai-governance init/);
+    });
+    (0, node_test_1.it)('openai-agents-py uses pip + wrap_agent', () => {
+        const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework: 'openai-agents-py', tenantId: 'tenant-1' });
+        assert.match(s.installCommand, /pip install connexum-governance/);
+        assert.match(s.snippet, /wrap_agent/);
+        assert.match(s.snippet, /tenant_id="tenant-1"/);
+    });
+    (0, node_test_1.it)('openai-agents-ts uses npm + wrapAgent', () => {
+        const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework: 'openai-agents-ts', tenantId: 'tenant-1' });
+        assert.match(s.installCommand, /npm install @connexum\/ai-governance/);
+        assert.match(s.snippet, /wrapAgent/);
+        assert.match(s.snippet, /tenantId: 'tenant-1'/);
+    });
+    (0, node_test_1.it)('langchain-py uses callbacks=[cb]', () => {
+        const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework: 'langchain-py', tenantId: 'tenant-1' });
+        assert.match(s.snippet, /ConnexumGovernanceCallback/);
+        assert.match(s.snippet, /callbacks=\[cb\]/);
+    });
+    (0, node_test_1.it)('langchain-ts uses callbacks: [cb]', () => {
+        const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework: 'langchain-ts', tenantId: 'tenant-1' });
+        assert.match(s.snippet, /ConnexumGovernanceCallback/);
+        assert.match(s.snippet, /callbacks: \[cb\]/);
+    });
+    (0, node_test_1.it)('crew-ai uses GovernedCrew', () => {
+        const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework: 'crew-ai', tenantId: 'tenant-1' });
+        assert.match(s.snippet, /GovernedCrew/);
+        assert.match(s.snippet, /connexum_tenant_id="tenant-1"/);
+    });
+    (0, node_test_1.it)('langgraph uses attach_governance', () => {
+        const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework: 'langgraph', tenantId: 'tenant-1' });
+        assert.match(s.snippet, /attach_governance/);
+    });
+    (0, node_test_1.it)('endpoint override is honored', () => {
+        const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({
+            framework: 'claude-code',
+            tenantId: 'tenant-1',
+            endpoint: 'https://staging-events.my-cc.io/api/v1/events',
+        });
+        assert.ok(s.snippet.includes('staging-events.my-cc.io'));
+    });
+    (0, node_test_1.it)('default endpoint references proxy.my-cc.io', () => {
+        const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework: 'claude-code', tenantId: 'tenant-1' });
+        assert.ok(s.endpoint.includes('proxy.my-cc.io'));
+        assert.ok(s.snippet.includes('proxy.my-cc.io'));
+    });
+    (0, node_test_1.it)('missing tenantId throws (fail-closed)', () => {
+        assert.throws(() => (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework: 'claude-code', tenantId: '' }), /tenantId is required/);
+    });
+    (0, node_test_1.it)('verificationStep mentions the dashboard + 5-second window for every framework', () => {
+        for (const framework of ALL) {
+            const s = (0, hook_install_snippet_1.buildHookInstallSnippet)({ framework, tenantId: 'tenant-1' });
+            assert.match(s.verificationStep, /dashboard/i);
+            assert.match(s.verificationStep, /5 seconds/);
+        }
+    });
+});
+//# sourceMappingURL=hook-install-snippet.test.js.map

package/dist/governance/hook-install-snippet.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-install-snippet.test.js","sourceRoot":"","sources":["../../src/governance/hook-install-snippet.test.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,yCAAyC;AACzC,2DAA6C;AAE7C,iEAIgC;AAEhC,MAAM,GAAG,GAAoB;IAC3B,aAAa;IACb,kBAAkB;IAClB,kBAAkB;IAClB,cAAc;IACd,cAAc;IACd,SAAS;IACT,WAAW;CACZ,CAAC;AAEF,IAAA,oBAAQ,EAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,IAAA,cAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,gDAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,KAAK,MAAM,SAAS,IAAI,GAAG,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YACvE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,SAAS,iBAAiB,CAAC,CAAC;YACtE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,SAAS,aAAa,CAAC,CAAC;YAC9D,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,SAAS,UAAU,CAAC,CAAC;YACxD,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,SAAS,mBAAmB,CAAC,CAAC;YAC1E,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,GAAG,SAAS,8BAA8B,CAAC,CAAC;QACxF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC;YAChC,SAAS,EAAE,aAAa;YACxB,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,+CAA+C;SAC1D,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EACzE,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,KAAK,MAAM,SAAS,IAAI,GAAG,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,IAAA,8CAAuB,EAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/governance/hook-profile.d.ts

@@ -0,0 +1,215 @@
+/**
+ * HookProfileSelector -- Per-agent posture dial with audited maintenance mode.
+ *
+ * Provides three named profiles (minimal / standard / strict) that bundle
+ * related enforcement hooks into coherent postures. Operators pick one per
+ * agent; the selector resolves which hook names are active for a given agent
+ * at any point in time.
+ *
+ * Maintenance mode allows temporary, time-bounded, audited relaxation of hooks
+ * above the safety floor. The minimal-profile hook set is the floor: it can
+ * never be disabled via maintenance mode.
+ *
+ * See docs/runtime/hook-profile-selector.md for the full contract.
+ *
+ * BUILD_PLAN V3 line 267: "Hook profile selector (minimal / standard / strict)
+ * with maintenance mode audit trail".
+ *
+ * Related PRs:
+ *   PR #12 (cycle-token-budget), PR #13 (cycle-wall-clock-timeout),
+ *   PR #14 (tool-rate-limit), PR #15 (session-memory),
+ *   PR #17 (self-reflection-loop-detector), PR #18 (rag-source-allowlist),
+ *   PR #19 (external-cross-check), PR #20 (rag-citation-enforcement).
+ *
+ * Compliance bindings:
+ *   - HIPAA 164.308(a)(5): Security Awareness -- documented posture per agent
+ *   - SOC 2 CC6.1: Logical access controls -- profile-bounded enforcement
+ *   - EU AI Act Art. 9: Risk management -- tiered posture selection
+ *   - ISO 42001 A.6.1.4: AI resource management -- maintenance audit trail
+ *   - NIST 800-53 CM-3: Configuration change control -- profile change record
+ *
+ * @connexum/ai-governance
+ */
+export type HookProfile = 'minimal' | 'standard' | 'strict';
+/**
+ * MINIMAL profile hook set -- the absolute safety floor.
+ *
+ * These hooks are ALWAYS active regardless of profile or maintenance mode.
+ * Maintenance mode CANNOT disable any hook in this set.
+ *
+ * - audit-chain:            SHA-256 tamper-evident audit trail (AuditIntegrity)
+ * - capability-immutability: CapabilityBundle immutability enforcement
+ * - web-permission-tier:    Agent web access level enforcement
+ * - circuit-breaker:        CircuitBreaker fail-safe (3 failures = suspend)
+ */
+export declare const MINIMAL_HOOKS: ReadonlySet<string>;
+/**
+ * STANDARD profile additions on top of MINIMAL.
+ *
+ * - cycle-wall-clock-timeout: PR #13 -- wall-clock cycle timeout
+ * - cycle-token-budget:       PR #12 -- per-cycle token budget gate
+ * - session-memory-auto-clear: PR #15 -- session-scoped memory auto-clear
+ * - tool-rate-limit:          PR #14 -- per-tool sliding-window rate gate
+ *                             (pass-through by default when no rules configured)
+ */
+export declare const STANDARD_ADDITIONS: ReadonlySet<string>;
+/**
+ * STRICT profile additions on top of STANDARD.
+ *
+ * - rag-source-allowlist:         PR #18 -- retrieval source allowlisting
+ * - rag-citation-enforcement:     PR #20 -- citation chain-of-custody
+ * - self-reflection-loop-detector: PR #17 -- loop detection for self-reflecting agents
+ * - external-cross-check:         PR #19 -- external verification of reflection outcomes
+ *                                 (human-only mode by default; operator can flip to peer-agent)
+ */
+export declare const STRICT_ADDITIONS: ReadonlySet<string>;
+/** Full hook set per profile (pre-computed for fast lookup). */
+export declare const PROFILE_HOOKS: Record<HookProfile, ReadonlySet<string>>;
+export declare class ProfileChangeReasonRequiredError extends Error {
+    constructor();
+}
+export declare class MaintenanceDurationExceededError extends Error {
+    constructor(requestedMs: number, maxMs: number);
+}
+export declare class MaintenanceCannotDisableFloorHookError extends Error {
+    readonly hookName: string;
+    constructor(hookName: string);
+}
+export declare class PackBindingRequiredError extends Error {
+    constructor(operation: string);
+}
+export type HookProfileAuditEventType = 'PROFILE_CHANGED' | 'MAINTENANCE_MODE_ENTERED' | 'MAINTENANCE_MODE_EXITED' | 'MAINTENANCE_MODE_AUTO_EXITED' | 'HOOK_SKIPPED_BY_PROFILE';
+export interface HookProfileAuditEvent {
+    type: HookProfileAuditEventType;
+    orgId: string;
+    agentId: string;
+    /** Severity level for downstream routing. */
+    severity: 'NOTICE' | 'WARNING' | 'ERROR' | 'INFO';
+    timestamp: string;
+    /** SHA-256 hash of the previous event in this agent's profile chain (empty if first). */
+    prevHash: string;
+    /** SHA-256 hash of this event. */
+    hash: string;
+    data: Record<string, unknown>;
+}
+export interface SetProfileOptions {
+    reason: string;
+    packBinding: string[];
+}
+export interface EnterMaintenanceModeOptions {
+    disabledHooks: string[];
+    reason: string;
+    durationMs: number;
+    approvedBy: string;
+}
+/** 4 hours in milliseconds -- operators who need longer must explicitly renew. */
+export declare const MAX_MAINTENANCE_DURATION_MS: number;
+export declare class HookProfileSelector {
+    /** key: `${orgId}::${agentId}` */
+    private readonly profiles;
+    /** key: `${orgId}::${agentId}` */
+    private readonly maintenance;
+    /** key: `${orgId}::${agentId}` -- last audit hash per agent */
+    private readonly lastHashes;
+    private readonly auditSink;
+    constructor(auditSink?: (event: HookProfileAuditEvent) => void);
+    /**
+     * Set the active hook profile for an agent.
+     *
+     * @param orgId       Tenant / organisation identifier.
+     * @param agentId     Agent identifier within the org.
+     * @param profile     One of 'minimal' | 'standard' | 'strict'.
+     * @param packBinding Compliance pack IDs that govern this agent (mandatory, non-empty).
+     * @param reason      Human-readable explanation -- mandatory, must be non-empty.
+     */
+    setProfile(orgId: string, agentId: string, profile: HookProfile, packBinding: string[], reason: string): void;
+    /**
+     * Get the active profile for an agent. Returns 'standard' if not explicitly set.
+     */
+    getProfile(orgId: string, agentId: string): HookProfile;
+    /**
+     * Returns the set of currently enabled hook names for an agent.
+     *
+     * Resolution order:
+     *   1. Start with the profile's base hook set.
+     *   2. Subtract hooks currently disabled by maintenance mode.
+     *   3. Apply operator explicit overrides (hook explicitly enabled wins even
+     *      if maintenance mode disabled it; a hook explicitly disabled overrides
+     *      the profile default).
+     *
+     * NOTE: Minimal-floor hooks are never returned as disabled -- maintenance mode
+     * cannot subtract them and operator overrides cannot disable them.
+     */
+    getEnabledHooks(orgId: string, agentId: string): ReadonlySet<string>;
+    /**
+     * Returns whether a specific hook is currently enabled for an agent.
+     *
+     * This is the primary integration surface for enforcers. An enforcer calls
+     * this at the top of its guard methods and becomes a pass-through when it
+     * returns false.
+     *
+     * Usage pattern for new enforcers:
+     *
+     *   guardPreTool(orgId: string, agentId: string, ...): void {
+     *     if (!selector.isHookEnabled(orgId, agentId, 'cycle-token-budget')) return;
+     *     // ... existing guard logic ...
+     *   }
+     *
+     * NOTE: Enforcers integrated via this API should emit a single
+     * "hook skipped due to profile" audit event per cycle (not per call)
+     * to avoid flooding the audit chain.
+     */
+    isHookEnabled(orgId: string, agentId: string, hookName: string): boolean;
+    /**
+     * Explicitly enable or disable a hook for an agent, overriding the profile
+     * default. Floor hooks cannot be disabled.
+     *
+     * This is the operator-level escape hatch for individual hook customisation
+     * beyond what the three profiles provide. Use sparingly.
+     */
+    setHookOverride(orgId: string, agentId: string, hookName: string, enabled: boolean): void;
+    /**
+     * Enter maintenance mode for an agent: temporarily disable specific hooks
+     * above the safety floor.
+     *
+     * - Maximum duration: 4 hours (MAX_MAINTENANCE_DURATION_MS).
+     * - Cannot disable floor hooks (minimal profile set).
+     * - Reason and approvedBy are mandatory.
+     * - Emits MAINTENANCE_MODE_ENTERED audit event at severity ERROR.
+     * - Auto-exit fires MAINTENANCE_MODE_AUTO_EXITED at severity WARNING.
+     *
+     * PERSISTENCE CAVEAT (v0 limitation):
+     *   The auto-exit timer is in-memory only. If the process restarts while
+     *   maintenance mode is active, the timer will not fire and hooks will
+     *   remain in whichever state they were last saved. On startup, callers
+     *   should call checkMaintenanceExpiry() to expire any overdue entries.
+     *   Persistent storage of maintenance-mode state (deadline checkpointing)
+     *   is deferred to v1 as DEFERRED-HOOK-PROFILE-PERSIST-MAINTENANCE.
+     */
+    enterMaintenanceMode(orgId: string, agentId: string, opts: EnterMaintenanceModeOptions, packBinding: string[]): void;
+    /**
+     * Exit maintenance mode immediately and re-enable all temporarily-disabled hooks.
+     *
+     * Emits MAINTENANCE_MODE_EXITED at severity NOTICE.
+     */
+    exitMaintenanceMode(orgId: string, agentId: string): void;
+    /**
+     * Check whether a maintenance-mode entry has expired (for post-restart recovery).
+     *
+     * If the deadline has passed, fires auto-exit logic including the WARNING
+     * audit event. Call this from application startup to handle the case where
+     * a process restarted while maintenance mode was active.
+     *
+     * This is the v0 mitigation for the in-memory-timer limitation documented
+     * in enterMaintenanceMode(). See DEFERRED-HOOK-PROFILE-PERSIST-MAINTENANCE.
+     */
+    checkMaintenanceExpiry(orgId: string, agentId: string): void;
+    /**
+     * Returns true when the agent is currently in maintenance mode.
+     */
+    isInMaintenanceMode(orgId: string, agentId: string): boolean;
+    private autoExitMaintenanceMode;
+    private key;
+    private emitAudit;
+}
+//# sourceMappingURL=hook-profile.d.ts.map

package/dist/governance/hook-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-profile.d.ts","sourceRoot":"","sources":["../../src/governance/hook-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAQH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAO5D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,CAK5C,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAKjD,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAK/C,CAAC;AAEH,gEAAgE;AAChE,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAIlE,CAAC;AAMF,qBAAa,gCAAiC,SAAQ,KAAK;;CAQ1D;AAED,qBAAa,gCAAiC,SAAQ,KAAK;gBAC7C,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAO/C;AAED,qBAAa,sCAAuC,SAAQ,KAAK;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM;CAQ7B;AAED,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,SAAS,EAAE,MAAM;CAO9B;AAMD,MAAM,MAAM,yBAAyB,GACjC,iBAAiB,GACjB,0BAA0B,GAC1B,yBAAyB,GACzB,8BAA8B,GAC9B,yBAAyB,CAAC;AAE9B,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,yBAAyB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AA6BD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,kFAAkF;AAClF,eAAO,MAAM,2BAA2B,QAAsB,CAAC;AAM/D,qBAAa,mBAAmB;IAC9B,kCAAkC;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IACtE,kCAAkC;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4C;IACxE,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAE7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;gBAEvD,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI;IAQ9D;;;;;;;;OAQG;IACH,UAAU,CACR,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,WAAW,EACpB,WAAW,EAAE,MAAM,EAAE,EACrB,MAAM,EAAE,MAAM,GACb,IAAI;IAiCP;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW;IAQvD;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAoCpE;;;;;;;;;;;;;;;;;OAiBG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQxE;;;;;;OAMG;IACH,eAAe,CACb,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,GACf,IAAI;IAwBP;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,2BAA2B,EACjC,WAAW,EAAE,MAAM,EAAE,GACpB,IAAI;IAgEP;;;;OAIG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IA4BzD;;;;;;;;;OASG;IACH,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAS5D;;OAEG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAQ5D,OAAO,CAAC,uBAAuB;IAyB/B,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,SAAS;CA4BlB"}