@connexum/ai-governance 1.0.0-beta.11

package/dist/governance/incident-notifier.js

@@ -0,0 +1,527 @@
+"use strict";
+/**
+ * IncidentNotifier -- Compliance-driven incident notification system.
+ *
+ * Manages incident classification, deadline tracking, and notification
+ * delivery for regulatory compliance.
+ *
+ * Regulatory deadlines:
+ *   - DORA: 4 hours for major ICT incidents (Art. 19)
+ *   - GDPR: 72 hours for personal data breaches (Art. 33)
+ *   - HIPAA: 60 days for breach notification (45 CFR 164.404)
+ *   - PCI DSS: Immediate for suspected compromise
+ *   - SOC 2: Per customer SLA (typically 24-72 hours)
+ *
+ * @connexum/ai-governance
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IncidentNotifier = exports.NoPacksLoadedError = void 0;
+exports.deriveSeverityLabels = deriveSeverityLabels;
+const crypto = __importStar(require("crypto"));
+const fs_1 = require("../util/fs");
+const log_1 = require("../util/log");
+const path = __importStar(require("path"));
+const log = (0, log_1.createLogger)('incident-notifier');
+/**
+ * HL-1: Thrown when the incident notifier finds zero packs loaded and
+ * therefore cannot derive a compliant fallback category list.
+ *
+ * Failing closed here is intentional: an incident notifier with no pack
+ * context should not silently downgrade severity by guessing categories.
+ * The operator must ensure packs are loaded before incidents are classified.
+ *
+ * Reference: W1 directive (Thomas, 2026-04-24): runtime must read from packs,
+ * not from hardcoded lists.
+ */
+class NoPacksLoadedError extends Error {
+    constructor() {
+        super('IncidentNotifier: no compliance packs are loaded in the PackDrivenClassifier registry. ' +
+            'Cannot derive blocking category list for severity classification. ' +
+            'Ensure packs are loaded via PackDrivenClassifier.loadFromPacks() before classifying incidents. ' +
+            '(HL-1: hardcoded fallback removed; fail-closed policy.)');
+        this.name = 'NoPacksLoadedError';
+    }
+}
+exports.NoPacksLoadedError = NoPacksLoadedError;
+/**
+ * Deadline rules per framework (hours from discovery).
+ *
+ * F-NEW-MED-15 (2026-05-02): pre-fix this was a hardcoded map of 6
+ * frameworks while every pack declares its own
+ * `incidentPolicy.notificationDeadlineHours`. Only HIPAA/DORA/GDPR/PCI
+ * DSS/SOC 2/FERPA had wired deadlines; the other 93 packs' declared
+ * deadlines were dead data on this code path.
+ *
+ * Now derived from PackDrivenClassifier registry at lookup time. The
+ * legacy values below remain only as a hard fallback for packs that
+ * are not in the registry (e.g., test stubs without a registered pack
+ * binding). Real customer code paths read from pack metadata.
+ */
+const LEGACY_DEADLINE_RULES = {
+    dora: 4,
+    'pci-dss': 1,
+    'soc2': 24,
+    gdpr: 72,
+    hipaa: 1440,
+    ferpa: 720,
+};
+/**
+ * Resolve a framework's notification deadline in hours.
+ *
+ * Resolution order:
+ *   1. Caller-supplied packDeadlinesByFramework (built from
+ *      pack.incidentPolicy.notificationDeadlineHours by the gov-server)
+ *   2. Legacy hardcoded map (backward-compat for the 6 originally-wired
+ *      frameworks: dora/pci-dss/soc2/gdpr/hipaa/ferpa)
+ *   3. undefined (caller should treat as "no deadline")
+ *
+ * Method on the class to access the per-instance config.
+ */
+function resolveDeadlineHoursFor(framework, packDeadlines) {
+    const key = framework.toLowerCase();
+    if (packDeadlines && typeof packDeadlines[key] === 'number' && packDeadlines[key] > 0) {
+        return packDeadlines[key];
+    }
+    return LEGACY_DEADLINE_RULES[key];
+}
+// ---------------------------------------------------------------------------
+// W1 residual: industry-tag to severity-label derivation
+//
+// Severity labels are derived from CompliancePack.industries[] at incident
+// classification time. No category strings (PHI, PII, GDPR, etc.) appear
+// here -- all classification is driven by the pack registry.
+//
+// Maps each industry tag substring (lowercase) to one or more severity label
+// buckets. The match is prefix/contains so that e.g. 'health-it' and
+// 'telehealth' both map to HEALTHCARE.
+// ---------------------------------------------------------------------------
+/**
+ * Each entry: [industryTagSubstring, severityLabel].
+ * Evaluated in order; a single industry tag can trigger multiple labels.
+ * Substrings are matched case-insensitively against the pack's declared
+ * industries array entries.
+ */
+const INDUSTRY_LABEL_RULES = [
+    // Healthcare
+    ['healthcare', 'HEALTHCARE'],
+    ['health-it', 'HEALTHCARE'],
+    ['telehealth', 'HEALTHCARE'],
+    ['pharma', 'HEALTHCARE'],
+    ['clinical-research', 'HEALTHCARE'],
+    ['ehr-vendor', 'HEALTHCARE'],
+    ['biotech', 'HEALTHCARE'],
+    ['medical', 'HEALTHCARE'],
+    ['business-associates', 'HEALTHCARE'],
+    // Education
+    ['edtech', 'EDUCATION'],
+    ['education', 'EDUCATION'],
+    ['k12', 'EDUCATION'],
+    ['higher-education', 'EDUCATION'],
+    ['learning-management', 'EDUCATION'],
+    ['student-information', 'EDUCATION'],
+    // Financial
+    ['banking', 'FINANCIAL'],
+    ['bank', 'FINANCIAL'],
+    ['fintech', 'FINANCIAL'],
+    ['payments', 'FINANCIAL'],
+    ['insurance', 'FINANCIAL'],
+    ['mortgage', 'FINANCIAL'],
+    ['credit', 'FINANCIAL'],
+    ['investment', 'FINANCIAL'],
+    ['broker-dealer', 'FINANCIAL'],
+    ['asset-management', 'FINANCIAL'],
+    ['clearing-house', 'FINANCIAL'],
+    ['finance', 'FINANCIAL'],
+    ['money-transmitter', 'FINANCIAL'],
+    ['virtual-currency', 'FINANCIAL'],
+    ['ecommerce', 'FINANCIAL'],
+    ['trading', 'FINANCIAL'],
+    ['crypto', 'FINANCIAL'],
+    // Government / Defense
+    ['government', 'GOVERNMENT'],
+    ['federal', 'GOVERNMENT'],
+    ['govtech', 'GOVERNMENT'],
+    ['law-enforcement', 'GOVERNMENT'],
+    ['defense', 'GOVERNMENT'],
+    ['public-safety', 'GOVERNMENT'],
+    ['courts', 'GOVERNMENT'],
+    ['corrections', 'GOVERNMENT'],
+    ['criminal-justice', 'GOVERNMENT'],
+    ['aerospace', 'GOVERNMENT'],
+    ['government-contractor', 'GOVERNMENT'],
+    // Legal
+    ['legal', 'LEGAL'],
+    ['law-firm', 'LEGAL'],
+    ['ediscovery', 'LEGAL'],
+    ['legal-ops', 'LEGAL'],
+    ['legal-tech', 'LEGAL'],
+    // Privacy (packs that apply cross-industry for privacy regulation)
+    ['all-eu', 'PRIVACY'],
+    ['all-ca', 'PRIVACY'],
+    ['adtech', 'PRIVACY'],
+    ['hr-tech', 'PRIVACY'],
+    ['any-collecting-biometric', 'PRIVACY'],
+    ['biometric', 'PRIVACY'],
+    ['consumer-reporting-agency', 'PRIVACY'],
+    ['tenant-screening', 'PRIVACY'],
+    ['employer', 'PRIVACY'],
+];
+/**
+ * Derive a set of human-readable severity labels from the pack IDs that
+ * produced blocking-category matches on an incident.
+ *
+ * Each matched pack contributes its declared industries[] to the label
+ * derivation. The result is the union of all labels that any matched pack's
+ * industries trigger via INDUSTRY_LABEL_RULES.
+ *
+ * W1 directive: no category name strings (PHI, PII, GDPR, ...) appear in
+ * this function. The pack's own metadata drives the output.
+ *
+ * @param matchedPackIds - Pack IDs whose categories matched (BLOCK or above).
+ * @param getIndustries  - Lookup function: packId -> industries[]. Supplied
+ *                         by the caller from PackDrivenClassifier.getPackIndustries().
+ */
+function deriveSeverityLabels(matchedPackIds, getIndustries) {
+    const labels = new Set();
+    for (const packId of matchedPackIds) {
+        const industries = getIndustries(packId);
+        for (const industry of industries) {
+            const lower = industry.toLowerCase();
+            for (const [tag, label] of INDUSTRY_LABEL_RULES) {
+                if (lower.includes(tag)) {
+                    labels.add(label);
+                }
+            }
+        }
+    }
+    return labels;
+}
+class IncidentNotifier {
+    config;
+    incidents = new Map();
+    incidentFile;
+    constructor(config) {
+        this.config = {
+            webhooks: { CRITICAL: [], HIGH: [], MEDIUM: [], LOW: [] },
+            activeFrameworks: [],
+            notificationEmail: '',
+            packDeadlinesByFramework: {},
+            ...config,
+        };
+        (0, fs_1.ensureDir)(config.incidentDir);
+        this.incidentFile = path.join(config.incidentDir, 'incidents.json');
+        this.loadIncidents();
+    }
+    /**
+     * Classify an incident based on data types, volume, and cause.
+     */
+    classify(params) {
+        const reasons = [];
+        let severity = 'LOW';
+        // Data type escalation.
+        // W1: Instead of hardcoding 'PHI', consult the PackDrivenClassifier registry to
+        // determine which category IDs are declared by active packs with BLOCK action.
+        // Fallback to structural heuristics when no packs are loaded.
+        const { getGlobalClassifier } = require('../classification/pack-driven-classifier');
+        const pdClassifier = getGlobalClassifier();
+        // Build blockingEntries (category + pack pairs) so we can derive severity labels
+        // from the packs that contributed BLOCK-level categories.
+        const blockingEntries = pdClassifier.listRegisteredEntries().filter(e => e.action === 'BLOCK');
+        const blockingCategories = new Set(blockingEntries.map(e => e.categoryId.toUpperCase()));
+        // HL-1: If no packs are loaded, fail closed with NoPacksLoadedError.
+        // Hardcoded fallback list removed per W1 directive (Thomas, 2026-04-24):
+        // the runtime must read from packs, not from hardcoded constants.
+        // If blockingCategories is empty here, it signals a configuration error
+        // (packs were not loaded before the incident notifier was called), not a
+        // situation that should be silently papered over with hardcoded strings.
+        if (blockingCategories.size === 0) {
+            throw new NoPacksLoadedError();
+        }
+        // W1 residual (2026-04-24): hasPHI is now purely pack-driven.
+        // Any category that a loaded pack declared with BLOCK action counts as PHI-tier.
+        // Hardcoded category name strings removed per W1 directive; pack registry drives all detection.
+        const hasPHI = params.dataTypes.some(d => blockingCategories.has(d.toUpperCase()));
+        // W1 residual (2026-04-24): hasPII is now pack-driven via WARN-or-above categories.
+        // Any category that a loaded pack declared with WARN or stricter action counts as
+        // PII-tier (lower severity than BLOCK). Hardcoded category name strings removed per W1 directive.
+        const warnOrAboveCategories = new Set(pdClassifier.listCategoriesByMinAction('WARN').map(e => e.categoryId.toUpperCase()));
+        const hasPII = params.dataTypes.some(d => warnOrAboveCategories.has(d.toUpperCase()));
+        // W1 residual: collect pack IDs whose BLOCK categories matched the incident's
+        // data types. These are used to derive the human-readable severity label set
+        // via the pack's declared industries[].
+        const matchedPackIds = new Set();
+        for (const dataType of params.dataTypes) {
+            for (const entry of blockingEntries) {
+                if (entry.categoryId.toUpperCase() === dataType.toUpperCase()) {
+                    matchedPackIds.add(entry.packId);
+                }
+            }
+        }
+        // Also include packs whose WARN-or-above categories matched, so PII-type
+        // packs (GDPR, CCPA etc.) contribute their labels even when action < BLOCK.
+        const warnOrAboveEntries = pdClassifier.listCategoriesByMinAction('WARN');
+        for (const dataType of params.dataTypes) {
+            for (const entry of warnOrAboveEntries) {
+                if (entry.categoryId.toUpperCase() === dataType.toUpperCase()) {
+                    matchedPackIds.add(entry.packId);
+                }
+            }
+        }
+        const severityLabelSet = deriveSeverityLabels(matchedPackIds, (packId) => pdClassifier.getPackIndustries(packId));
+        const hasPAN = params.dataTypes.some(d => ['PAN', 'CREDIT_CARD', 'PCI'].includes(d.toUpperCase()));
+        const hasCredentials = params.dataTypes.some(d => ['CREDENTIALS', 'API_KEY', 'SECRET'].includes(d.toUpperCase()));
+        if (hasPHI) {
+            severity = 'CRITICAL';
+            reasons.push('Protected Health Information (PHI) involved');
+        }
+        if (hasPAN) {
+            severity = 'CRITICAL';
+            reasons.push('Payment card data (PAN) involved');
+        }
+        if (hasCredentials) {
+            severity = severity === 'CRITICAL' ? 'CRITICAL' : 'HIGH';
+            reasons.push('Credentials or API keys exposed');
+        }
+        if (hasPII) {
+            severity = severity === 'LOW' ? 'MEDIUM' : severity;
+            reasons.push('Personal Identifiable Information (PII) involved');
+        }
+        // Volume escalation
+        if (params.recordsAffected > 500) {
+            if (severity === 'LOW')
+                severity = 'MEDIUM';
+            if (severity === 'MEDIUM')
+                severity = 'HIGH';
+            reasons.push(`High volume: ${params.recordsAffected} records affected`);
+        }
+        if (params.recordsAffected > 5000) {
+            severity = 'CRITICAL';
+            reasons.push(`Mass breach: ${params.recordsAffected} records affected`);
+        }
+        // Cause escalation
+        const maliciousCauses = ['attack', 'exploit', 'injection', 'unauthorized', 'tamper', 'exfiltration'];
+        if (maliciousCauses.some(c => params.cause.toLowerCase().includes(c))) {
+            if (severity === 'LOW')
+                severity = 'HIGH';
+            reasons.push(`Potentially malicious cause: ${params.cause}`);
+        }
+        // Multi-agent escalation
+        if (params.affectedAgents.length > 3) {
+            if (severity === 'LOW')
+                severity = 'MEDIUM';
+            reasons.push(`Multiple agents affected: ${params.affectedAgents.length}`);
+        }
+        // Calculate deadlines
+        const now = new Date();
+        const deadlines = {};
+        for (const framework of this.config.activeFrameworks) {
+            const hours = resolveDeadlineHoursFor(framework, this.config.packDeadlinesByFramework);
+            if (hours !== undefined) {
+                const deadline = new Date(now.getTime() + hours * 3600000);
+                deadlines[framework] = {
+                    framework,
+                    hoursFromDiscovery: hours,
+                    deadline: deadline.toISOString(),
+                };
+            }
+        }
+        return {
+            severity,
+            reasons,
+            deadlines,
+            requiresImmediateAction: severity === 'CRITICAL' || Object.keys(deadlines).some(k => {
+                const h = resolveDeadlineHoursFor(k, this.config.packDeadlinesByFramework);
+                return h !== undefined && h <= 4;
+            }),
+            // W1 residual: labels derived from pack.industries, not from hardcoded strings.
+            severityLabels: Array.from(severityLabelSet),
+        };
+    }
+    /**
+     * Create a new incident.
+     */
+    create(params) {
+        const classification = this.classify(params);
+        const now = new Date().toISOString();
+        const incident = {
+            id: `INC-${Date.now()}-${crypto.randomBytes(3).toString('hex')}`,
+            title: params.title,
+            description: params.description,
+            severity: classification.severity,
+            status: 'open',
+            dataTypes: params.dataTypes,
+            recordsAffected: params.recordsAffected,
+            affectedAgents: params.affectedAgents,
+            cause: params.cause,
+            discoveredAt: params.discoveredAt || now,
+            createdAt: now,
+            deadlines: {},
+            notifications: [],
+            timeline: [{
+                    timestamp: now,
+                    action: 'created',
+                    actor: 'system',
+                    detail: `Severity: ${classification.severity}. ${classification.reasons.join('; ')}`,
+                }],
+        };
+        // Set deadlines
+        for (const [framework, dl] of Object.entries(classification.deadlines)) {
+            incident.deadlines[framework] = dl.deadline;
+        }
+        this.incidents.set(incident.id, incident);
+        this.saveIncidents();
+        log.warn(`Incident created: ${incident.id} [${incident.severity}] ${incident.title}`, {
+            severity: incident.severity,
+            dataTypes: incident.dataTypes,
+            deadlines: incident.deadlines,
+        });
+        // Log notification record
+        this.logNotification(incident.id, 'system-log', 'audit-trail', 'sent');
+        return incident;
+    }
+    /**
+     * Update incident status.
+     */
+    updateStatus(incidentId, status, actor, detail) {
+        const incident = this.incidents.get(incidentId);
+        if (!incident)
+            throw new Error(`Incident ${incidentId} not found`);
+        incident.status = status;
+        incident.timeline.push({
+            timestamp: new Date().toISOString(),
+            action: `status_change:${status}`,
+            actor,
+            detail,
+        });
+        this.saveIncidents();
+        return incident;
+    }
+    /**
+     * Get an incident by ID.
+     */
+    get(incidentId) {
+        return this.incidents.get(incidentId) || null;
+    }
+    /**
+     * Get all open incidents.
+     */
+    getOpen() {
+        return Array.from(this.incidents.values())
+            .filter(i => i.status !== 'closed' && i.status !== 'resolved');
+    }
+    /**
+     * Get incidents with approaching or breached deadlines.
+     */
+    getUrgent(withinHours = 4) {
+        const cutoff = new Date(Date.now() + withinHours * 3600000).toISOString();
+        return this.getOpen().filter(incident => {
+            return Object.values(incident.deadlines).some(deadline => deadline <= cutoff);
+        });
+    }
+    /**
+     * Check if any deadlines have been breached.
+     */
+    getBreachedDeadlines() {
+        const now = new Date().toISOString();
+        const breached = [];
+        for (const incident of this.getOpen()) {
+            for (const [framework, deadline] of Object.entries(incident.deadlines)) {
+                if (deadline < now) {
+                    breached.push({ incident, framework, deadline });
+                }
+            }
+        }
+        return breached;
+    }
+    /**
+     * Get incident statistics.
+     */
+    getStats() {
+        const all = Array.from(this.incidents.values());
+        const open = all.filter(i => i.status !== 'closed' && i.status !== 'resolved');
+        return {
+            total: all.length,
+            open: open.length,
+            bySeverity: {
+                CRITICAL: all.filter(i => i.severity === 'CRITICAL').length,
+                HIGH: all.filter(i => i.severity === 'HIGH').length,
+                MEDIUM: all.filter(i => i.severity === 'MEDIUM').length,
+                LOW: all.filter(i => i.severity === 'LOW').length,
+            },
+            breachedDeadlines: this.getBreachedDeadlines().length,
+        };
+    }
+    // --- Private ---
+    logNotification(incidentId, channel, recipient, status) {
+        const incident = this.incidents.get(incidentId);
+        if (!incident)
+            return;
+        incident.notifications.push({
+            timestamp: new Date().toISOString(),
+            channel,
+            recipient,
+            status,
+        });
+        // Also log to JSONL for audit trail
+        const logFile = path.join(this.config.incidentDir, 'notifications.jsonl');
+        (0, fs_1.appendJsonl)(logFile, {
+            timestamp: new Date().toISOString(),
+            incidentId,
+            channel,
+            recipient,
+            status,
+        });
+    }
+    saveIncidents() {
+        try {
+            const data = Array.from(this.incidents.values());
+            (0, fs_1.saveJson)(this.incidentFile, data);
+        }
+        catch (err) {
+            log.critical(`Failed to save incidents: ${err.message}`);
+        }
+    }
+    loadIncidents() {
+        const data = (0, fs_1.loadJson)(this.incidentFile);
+        if (data && Array.isArray(data)) {
+            for (const incident of data) {
+                this.incidents.set(incident.id, incident);
+            }
+        }
+    }
+}
+exports.IncidentNotifier = IncidentNotifier;
+//# sourceMappingURL=incident-notifier.js.map

package/dist/governance/incident-notifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incident-notifier.js","sourceRoot":"","sources":["../../src/governance/incident-notifier.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0QH,oDAmBC;AA3RD,+CAAiC;AACjC,mCAAmF;AACnF,qCAA2C;AAC3C,2CAA6B;AAE7B,MAAM,GAAG,GAAG,IAAA,kBAAY,EAAC,mBAAmB,CAAC,CAAC;AAE9C;;;;;;;;;;GAUG;AACH,MAAa,kBAAmB,SAAQ,KAAK;IAC3C;QACE,KAAK,CACH,yFAAyF;YACzF,oEAAoE;YACpE,iGAAiG;YACjG,yDAAyD,CAC1D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAVD,gDAUC;AA2FD;;;;;;;;;;;;;GAaG;AACH,MAAM,qBAAqB,GAA2B;IACpD,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,GAAG;CACX,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,SAAS,uBAAuB,CAC9B,SAAiB,EACjB,aAAiD;IAEjD,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,aAAa,IAAI,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACtF,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,qEAAqE;AACrE,uCAAuC;AACvC,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,oBAAoB,GAA6C;IACrE,aAAa;IACb,CAAC,YAAY,EAAU,YAAY,CAAC;IACpC,CAAC,WAAW,EAAU,YAAY,CAAC;IACnC,CAAC,YAAY,EAAS,YAAY,CAAC;IACnC,CAAC,QAAQ,EAAa,YAAY,CAAC;IACnC,CAAC,mBAAmB,EAAE,YAAY,CAAC;IACnC,CAAC,YAAY,EAAS,YAAY,CAAC;IACnC,CAAC,SAAS,EAAY,YAAY,CAAC;IACnC,CAAC,SAAS,EAAY,YAAY,CAAC;IACnC,CAAC,qBAAqB,EAAC,YAAY,CAAC;IACpC,YAAY;IACZ,CAAC,QAAQ,EAAa,WAAW,CAAC;IAClC,CAAC,WAAW,EAAU,WAAW,CAAC;IAClC,CAAC,KAAK,EAAgB,WAAW,CAAC;IAClC,CAAC,kBAAkB,EAAG,WAAW,CAAC;IAClC,CAAC,qBAAqB,EAAC,WAAW,CAAC;IACnC,CAAC,qBAAqB,EAAC,WAAW,CAAC;IACnC,YAAY;IACZ,CAAC,SAAS,EAAY,WAAW,CAAC;IAClC,CAAC,MAAM,EAAe,WAAW,CAAC;IAClC,CAAC,SAAS,EAAY,WAAW,CAAC;IAClC,CAAC,UAAU,EAAW,WAAW,CAAC;IAClC,CAAC,WAAW,EAAU,WAAW,CAAC;IAClC,CAAC,UAAU,EAAW,WAAW,CAAC;IAClC,CAAC,QAAQ,EAAa,WAAW,CAAC;IAClC,CAAC,YAAY,EAAS,WAAW,CAAC;IAClC,CAAC,eAAe,EAAM,WAAW,CAAC;IAClC,CAAC,kBAAkB,EAAG,WAAW,CAAC;IAClC,CAAC,gBAAgB,EAAK,WAAW,CAAC;IAClC,CAAC,SAAS,EAAY,WAAW,CAAC;IAClC,CAAC,mBAAmB,EAAE,WAAW,CAAC;IAClC,CAAC,kBAAkB,EAAG,WAAW,CAAC;IAClC,CAAC,WAAW,EAAU,WAAW,CAAC;IAClC,CAAC,SAAS,EAAY,WAAW,CAAC;IAClC,CAAC,QAAQ,EAAa,WAAW,CAAC;IAClC,uBAAuB;IACvB,CAAC,YAAY,EAAS,YAAY,CAAC;IACnC,CAAC,SAAS,EAAY,YAAY,CAAC;IACnC,CAAC,SAAS,EAAY,YAAY,CAAC;IACnC,CAAC,iBAAiB,EAAI,YAAY,CAAC;IACnC,CAAC,SAAS,EAAY,YAAY,CAAC;IACnC,CAAC,eAAe,EAAM,YAAY,CAAC;IACnC,CAAC,QAAQ,EAAa,YAAY,CAAC;IACnC,CAAC,aAAa,EAAQ,YAAY,CAAC;IACnC,CAAC,kBAAkB,EAAG,YAAY,CAAC;IACnC,CAAC,WAAW,EAAU,YAAY,CAAC;IACnC,CAAC,uBAAuB,EAAC,YAAY,CAAC;IACtC,QAAQ;IACR,CAAC,OAAO,EAAc,OAAO,CAAC;IAC9B,CAAC,UAAU,EAAW,OAAO,CAAC;IAC9B,CAAC,YAAY,EAAS,OAAO,CAAC;IAC9B,CAAC,WAAW,EAAU,OAAO,CAAC;IAC9B,CAAC,YAAY,EAAS,OAAO,CAAC;IAC9B,mEAAmE;IACnE,CAAC,QAAQ,EAAa,SAAS,CAAC;IAChC,CAAC,QAAQ,EAAa,SAAS,CAAC;IAChC,CAAC,QAAQ,EAAa,SAAS,CAAC;IAChC,CAAC,SAAS,EAAY,SAAS,CAAC;IAChC,CAAC,0BAA0B,EAAE,SAAS,CAAC;IACvC,CAAC,WAAW,EAAU,SAAS,CAAC;IAChC,CAAC,2BAA2B,EAAE,SAAS,CAAC;IACxC,CAAC,kBAAkB,EAAG,SAAS,CAAC;IAChC,CAAC,UAAU,EAAW,SAAS,CAAC;CACxB,CAAC;AAEX;;;;;;;;;;;;;;GAcG;AACH,SAAgB,oBAAoB,CAClC,cAAgC,EAChC,aAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,oBAAoB,EAAE,CAAC;gBAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAa,gBAAgB;IACnB,MAAM,CAAmC;IACzC,SAAS,GAA0B,IAAI,GAAG,EAAE,CAAC;IAC7C,YAAY,CAAS;IAE7B,YAAY,MAA8B;QACxC,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACzD,gBAAgB,EAAE,EAAE;YACpB,iBAAiB,EAAE,EAAE;YACrB,wBAAwB,EAAE,EAAE;YAC5B,GAAG,MAAM;SACV,CAAC;QAEF,IAAA,cAAS,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QACpE,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,MAKR;QACC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,QAAQ,GAAqB,KAAK,CAAC;QAEvC,wBAAwB;QACxB,gFAAgF;QAChF,+EAA+E;QAC/E,8DAA8D;QAC9D,MAAM,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,0CAA0C,CACvB,CAAC;QAC5D,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;QAE3C,iFAAiF;QACjF,0DAA0D;QAC1D,MAAM,eAAe,GAAG,YAAY,CAAC,qBAAqB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QAC/F,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAEzF,qEAAqE;QACrE,yEAAyE;QACzE,kEAAkE;QAClE,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,IAAI,kBAAkB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;QAED,8DAA8D;QAC9D,iFAAiF;QACjF,gGAAgG;QAChG,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAEnF,oFAAoF;QACpF,kFAAkF;QAClF,kGAAkG;QAClG,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,YAAY,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CACpF,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAEtF,8EAA8E;QAC9E,6EAA6E;QAC7E,wCAAwC;QACxC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;gBACpC,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC9D,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,kBAAkB,GAAG,YAAY,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAC1E,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;gBACvC,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC9D,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,gBAAgB,GAAG,oBAAoB,CAC3C,cAAc,EACd,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,CACnD,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACnG,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAElH,IAAI,MAAM,EAAE,CAAC;YAAC,QAAQ,GAAG,UAAU,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAAC,CAAC;QACnG,IAAI,MAAM,EAAE,CAAC;YAAC,QAAQ,GAAG,UAAU,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAAC,CAAC;QACxF,IAAI,cAAc,EAAE,CAAC;YACnB,QAAQ,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACnE,CAAC;QAED,oBAAoB;QACpB,IAAI,MAAM,CAAC,eAAe,GAAG,GAAG,EAAE,CAAC;YACjC,IAAI,QAAQ,KAAK,KAAK;gBAAE,QAAQ,GAAG,QAAQ,CAAC;YAC5C,IAAI,QAAQ,KAAK,QAAQ;gBAAE,QAAQ,GAAG,MAAM,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,eAAe,mBAAmB,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,GAAG,IAAI,EAAE,CAAC;YAClC,QAAQ,GAAG,UAAU,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,eAAe,mBAAmB,CAAC,CAAC;QAC1E,CAAC;QAED,mBAAmB;QACnB,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;QACrG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,QAAQ,KAAK,KAAK;gBAAE,QAAQ,GAAG,MAAM,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,yBAAyB;QACzB,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,QAAQ,KAAK,KAAK;gBAAE,QAAQ,GAAG,QAAQ,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,sBAAsB;QACtB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAwF,EAAE,CAAC;QAE1G,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACvF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC;gBAC3D,SAAS,CAAC,SAAS,CAAC,GAAG;oBACrB,SAAS;oBACT,kBAAkB,EAAE,KAAK;oBACzB,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;iBACjC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ;YACR,OAAO;YACP,SAAS;YACT,uBAAuB,EAAE,QAAQ,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAC7E,CAAC,CAAC,EAAE;gBACF,MAAM,CAAC,GAAG,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;gBAC3E,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC,CACF;YACD,gFAAgF;YAChF,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;SAC7C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAQN;QACC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,QAAQ,GAAa;YACzB,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAChE,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,GAAG;YACxC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,CAAC;oBACT,SAAS,EAAE,GAAG;oBACd,MAAM,EAAE,SAAS;oBACjB,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE,aAAa,cAAc,CAAC,QAAQ,KAAK,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACrF,CAAC;SACH,CAAC;QAEF,gBAAgB;QAChB,KAAK,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACvE,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,GAAG,CAAC,IAAI,CAAC,qBAAqB,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,KAAK,EAAE,EAAE;YACpF,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;QAEH,0BAA0B;QAC1B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QAEvE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,UAAkB,EAAE,MAAsB,EAAE,KAAa,EAAE,MAAe;QACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,UAAU,YAAY,CAAC,CAAC;QAEnE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,iBAAiB,MAAM,EAAE;YACjC,KAAK;YACL,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;aACvC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,cAAsB,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAE1E,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACtC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,oBAAoB;QAClB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAuE,EAAE,CAAC;QAExF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvE,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;oBACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,QAAQ;QAMN,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAE/E,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,MAAM;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,UAAU,EAAE;gBACV,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;gBAC3D,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;gBACnD,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;gBACvD,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;aAClD;YACD,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC,MAAM;SACtD,CAAC;IACJ,CAAC;IAED,kBAAkB;IAEV,eAAe,CAAC,UAAkB,EAAE,OAAe,EAAE,SAAiB,EAAE,MAAqC;QACnH,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC;YAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO;YACP,SAAS;YACT,MAAM;SACP,CAAC,CAAC;QAEH,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QAC1E,IAAA,gBAAW,EAAC,OAAO,EAAE;YACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU;YACV,OAAO;YACP,SAAS;YACT,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YACjD,IAAA,aAAQ,EAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,QAAQ,CAAC,6BAA8B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,MAAM,IAAI,GAAG,IAAA,aAAQ,EAAa,IAAI,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA3VD,4CA2VC"}

package/dist/governance/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * src/governance/index.ts
+ *
+ * Re-exports all governance modules so the runtime can import from a
+ * single path and the top-level src/index.ts can selectively re-export
+ * public surfaces.
+ *
+ * @connexum/ai-governance
+ */
+export { GovernanceRuntime, GovernanceTamperError, type GovernanceConfig, type GovernanceVerification, type PermissionLevel, type ActivityLogEntry, } from './governance-runtime';
+export { createCapabilityBundle, type CapabilityBundleConfig, type FileResult, type CommandResult, type MemoryIntegrityResult, } from './capability-bundle';
+export { GateGuard, type GateGuardConfig, type GateGuardVerification, type GateGuardResult, } from './gateguard';
+export { ApprovalQueue, packsRequireApprovalQueue, type ApprovalQueueConfig, type ApprovalRequest, type ApprovalDecision, type ApprovalStatus, } from './approval-queue';
+export { ApprovalService, type ApprovalServiceConfig, } from './approval-service';
+export { InstinctSystem, type InstinctConfig, type Instinct, type InstinctStatus, } from './instinct-system';
+export { Council, type CouncilConfig, type CouncilDecision, type VoiceOpinion, type VoiceName, type Verdict, type DecisionCategory, } from './council';
+export { MemoryIntegrity, type MemoryIntegrityConfig, type MemoryVerification, type MemoryWriteResult, } from './memory-integrity';
+export { SessionPersistence, type SessionPersistenceConfig, type SessionState, type TaskSnapshot, type PendingDecision, type SessionSummary, type SessionEncryption, } from './session-persistence';
+export { ToolRateLimiter, ToolRateLimitExceededError, type ToolRateLimiterConfig, type ToolRateLimitWindow, type ToolRateLimitAuditEvent, } from './tool-rate-limit';
+export { CycleTokenBudgetEnforcer, CycleTokenBudgetExceededError, type CycleTokenBudgetConfig, type CycleTokenBudgetAuditEvent, } from './cycle-token-budget';
+export { CycleTimeoutEnforcer, CycleTimeoutError, type CycleTimeoutConfig, type CycleTimeoutAction, type CycleTimeoutAuditEvent, } from './cycle-timeout';
+export { ConfidenceGate, ConfidenceBelowAutonomousError, ConfidenceBelowReviewerError, ConfidenceMissingError, type ConfidenceGateConfig, type ConfidenceThresholds, type ConfidenceGateAuditEvent, type ConfidenceGateEventType, } from './confidence-gate';
+export { SessionMemoryStore, SessionMemoryExpiredError, CrossSessionMemoryStore, ReidentificationTokenRequiredError, InvalidReidentificationTokenError, MemoryChainVerifier, MemoryPoisoningDetectedError, RetrievalAllowlistEnforcer, UnauthorizedRetrievalSourceError, PACK_POLICIES, type SessionMemoryConfig, type SessionMemoryEntry, type SessionClearReason, type DataClassTag, type SessionMemoryClearedAuditEvent, type CrossSessionMemoryConfig, type CrossSessionMemoryEntry, type IdentifierClass, type PackIdentifierPolicy, type MemoryChainVerifierConfig, type MemoryChainEntry, type MemoryPoisoningAuditEvent, type MemoryWriteOp, type MemoryChainPersistAdapter, type RetrievalAllowlistConfig, type RetrievalRequest, type RetrievalDenyReason, type RetrievalAllowedAuditEvent, type RetrievalDeniedAuditEvent, } from './memory/index';
+//# sourceMappingURL=index.d.ts.map

package/dist/governance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,qBAAqB,GAC3B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,SAAS,EACT,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,cAAc,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,GAC3B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,OAAO,EACP,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,gBAAgB,GACtB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,GAChC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,cAAc,EACd,8BAA8B,EAC9B,4BAA4B,EAC5B,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,GAC7B,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,kCAAkC,EAClC,iCAAiC,EACjC,mBAAmB,EACnB,4BAA4B,EAC5B,0BAA0B,EAC1B,gCAAgC,EAChC,aAAa,EACb,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,8BAA8B,EACnC,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC"}

package/dist/governance/index.js

@@ -0,0 +1,67 @@
+"use strict";
+/**
+ * src/governance/index.ts
+ *
+ * Re-exports all governance modules so the runtime can import from a
+ * single path and the top-level src/index.ts can selectively re-export
+ * public surfaces.
+ *
+ * @connexum/ai-governance
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PACK_POLICIES = exports.UnauthorizedRetrievalSourceError = exports.RetrievalAllowlistEnforcer = exports.MemoryPoisoningDetectedError = exports.MemoryChainVerifier = exports.InvalidReidentificationTokenError = exports.ReidentificationTokenRequiredError = exports.CrossSessionMemoryStore = exports.SessionMemoryExpiredError = exports.SessionMemoryStore = exports.ConfidenceMissingError = exports.ConfidenceBelowReviewerError = exports.ConfidenceBelowAutonomousError = exports.ConfidenceGate = exports.CycleTimeoutError = exports.CycleTimeoutEnforcer = exports.CycleTokenBudgetExceededError = exports.CycleTokenBudgetEnforcer = exports.ToolRateLimitExceededError = exports.ToolRateLimiter = exports.SessionPersistence = exports.MemoryIntegrity = exports.Council = exports.InstinctSystem = exports.ApprovalService = exports.packsRequireApprovalQueue = exports.ApprovalQueue = exports.GateGuard = exports.createCapabilityBundle = exports.GovernanceTamperError = exports.GovernanceRuntime = void 0;
+// ---------------------------------------------------------------------------
+// Existing modules
+// ---------------------------------------------------------------------------
+var governance_runtime_1 = require("./governance-runtime");
+Object.defineProperty(exports, "GovernanceRuntime", { enumerable: true, get: function () { return governance_runtime_1.GovernanceRuntime; } });
+Object.defineProperty(exports, "GovernanceTamperError", { enumerable: true, get: function () { return governance_runtime_1.GovernanceTamperError; } });
+var capability_bundle_1 = require("./capability-bundle");
+Object.defineProperty(exports, "createCapabilityBundle", { enumerable: true, get: function () { return capability_bundle_1.createCapabilityBundle; } });
+var gateguard_1 = require("./gateguard");
+Object.defineProperty(exports, "GateGuard", { enumerable: true, get: function () { return gateguard_1.GateGuard; } });
+var approval_queue_1 = require("./approval-queue");
+Object.defineProperty(exports, "ApprovalQueue", { enumerable: true, get: function () { return approval_queue_1.ApprovalQueue; } });
+Object.defineProperty(exports, "packsRequireApprovalQueue", { enumerable: true, get: function () { return approval_queue_1.packsRequireApprovalQueue; } });
+var approval_service_1 = require("./approval-service");
+Object.defineProperty(exports, "ApprovalService", { enumerable: true, get: function () { return approval_service_1.ApprovalService; } });
+var instinct_system_1 = require("./instinct-system");
+Object.defineProperty(exports, "InstinctSystem", { enumerable: true, get: function () { return instinct_system_1.InstinctSystem; } });
+var council_1 = require("./council");
+Object.defineProperty(exports, "Council", { enumerable: true, get: function () { return council_1.Council; } });
+var memory_integrity_1 = require("./memory-integrity");
+Object.defineProperty(exports, "MemoryIntegrity", { enumerable: true, get: function () { return memory_integrity_1.MemoryIntegrity; } });
+var session_persistence_1 = require("./session-persistence");
+Object.defineProperty(exports, "SessionPersistence", { enumerable: true, get: function () { return session_persistence_1.SessionPersistence; } });
+// ---------------------------------------------------------------------------
+// P3-T1 runtime control gates
+// ---------------------------------------------------------------------------
+var tool_rate_limit_1 = require("./tool-rate-limit");
+Object.defineProperty(exports, "ToolRateLimiter", { enumerable: true, get: function () { return tool_rate_limit_1.ToolRateLimiter; } });
+Object.defineProperty(exports, "ToolRateLimitExceededError", { enumerable: true, get: function () { return tool_rate_limit_1.ToolRateLimitExceededError; } });
+var cycle_token_budget_1 = require("./cycle-token-budget");
+Object.defineProperty(exports, "CycleTokenBudgetEnforcer", { enumerable: true, get: function () { return cycle_token_budget_1.CycleTokenBudgetEnforcer; } });
+Object.defineProperty(exports, "CycleTokenBudgetExceededError", { enumerable: true, get: function () { return cycle_token_budget_1.CycleTokenBudgetExceededError; } });
+var cycle_timeout_1 = require("./cycle-timeout");
+Object.defineProperty(exports, "CycleTimeoutEnforcer", { enumerable: true, get: function () { return cycle_timeout_1.CycleTimeoutEnforcer; } });
+Object.defineProperty(exports, "CycleTimeoutError", { enumerable: true, get: function () { return cycle_timeout_1.CycleTimeoutError; } });
+var confidence_gate_1 = require("./confidence-gate");
+Object.defineProperty(exports, "ConfidenceGate", { enumerable: true, get: function () { return confidence_gate_1.ConfidenceGate; } });
+Object.defineProperty(exports, "ConfidenceBelowAutonomousError", { enumerable: true, get: function () { return confidence_gate_1.ConfidenceBelowAutonomousError; } });
+Object.defineProperty(exports, "ConfidenceBelowReviewerError", { enumerable: true, get: function () { return confidence_gate_1.ConfidenceBelowReviewerError; } });
+Object.defineProperty(exports, "ConfidenceMissingError", { enumerable: true, get: function () { return confidence_gate_1.ConfidenceMissingError; } });
+// ---------------------------------------------------------------------------
+// P3-T1 memory governance (Group 2)
+// ---------------------------------------------------------------------------
+var index_1 = require("./memory/index");
+Object.defineProperty(exports, "SessionMemoryStore", { enumerable: true, get: function () { return index_1.SessionMemoryStore; } });
+Object.defineProperty(exports, "SessionMemoryExpiredError", { enumerable: true, get: function () { return index_1.SessionMemoryExpiredError; } });
+Object.defineProperty(exports, "CrossSessionMemoryStore", { enumerable: true, get: function () { return index_1.CrossSessionMemoryStore; } });
+Object.defineProperty(exports, "ReidentificationTokenRequiredError", { enumerable: true, get: function () { return index_1.ReidentificationTokenRequiredError; } });
+Object.defineProperty(exports, "InvalidReidentificationTokenError", { enumerable: true, get: function () { return index_1.InvalidReidentificationTokenError; } });
+Object.defineProperty(exports, "MemoryChainVerifier", { enumerable: true, get: function () { return index_1.MemoryChainVerifier; } });
+Object.defineProperty(exports, "MemoryPoisoningDetectedError", { enumerable: true, get: function () { return index_1.MemoryPoisoningDetectedError; } });
+Object.defineProperty(exports, "RetrievalAllowlistEnforcer", { enumerable: true, get: function () { return index_1.RetrievalAllowlistEnforcer; } });
+Object.defineProperty(exports, "UnauthorizedRetrievalSourceError", { enumerable: true, get: function () { return index_1.UnauthorizedRetrievalSourceError; } });
+Object.defineProperty(exports, "PACK_POLICIES", { enumerable: true, get: function () { return index_1.PACK_POLICIES; } });
+//# sourceMappingURL=index.js.map