@connexum/ai-governance 1.0.0-beta.11

package/dist/governance/retention-manager.js

@@ -0,0 +1,566 @@
+"use strict";
+/**
+ * RetentionManager -- Enforces data retention policies per compliance framework.
+ *
+ * Manages lifecycle of audit logs, session data, and incident records
+ * with framework-specific retention periods.
+ *
+ * Retention periods (configurable per pack):
+ *   - HIPAA: 6 years (45 CFR 164.530(j))
+ *   - PCI DSS: 12 months (Req 10.7)
+ *   - SOC 2: 12 months (CC7.4)
+ *   - GDPR: Purpose-dependent (Art. 5(1)(e))
+ *   - SOX: 7 years (SOX Act Section 802)
+ *
+ * P4-RET-04 upgrade (AC 11):
+ *   - enforce() now consults PolicyMatrix.resolve() per file for dynamic
+ *     retention days and action (replaces per-category config lookup).
+ *   - enforce() queries LegalHoldStore.findHoldsMatching() before each
+ *     delete. Any active hold aborts the delete and emits
+ *     'retention:blocked-by-legal-hold' via the audit emitter.
+ *   - Every actual delete emits 'retention:deleted' via the audit emitter.
+ *   - Audit-chain append is fail-closed: if append throws, the delete does
+ *     NOT proceed (prevents orphaned deletes -- AC 16).
+ *   - Per-file DataClassTag is read from a sidecar '<file>.meta.json'
+ *     when present; falls back to category-level tag from managedDir config.
+ *
+ * @connexum/ai-governance
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RetentionManager = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto = __importStar(require("crypto"));
+const fs_1 = require("../util/fs");
+const log_1 = require("../util/log");
+const log = (0, log_1.createLogger)('retention-manager');
+class RetentionManager {
+    config;
+    policyMap = new Map();
+    constructor(config) {
+        this.config = {
+            dryRun: false,
+            ...config,
+        };
+        (0, fs_1.ensureDir)(config.logDir);
+        for (const policy of config.policies) {
+            this.policyMap.set(policy.category, policy);
+            if (policy.action === 'archive' && policy.archiveDir) {
+                (0, fs_1.ensureDir)(policy.archiveDir);
+            }
+        }
+    }
+    /**
+     * Run retention enforcement across all managed directories.
+     *
+     * Legacy sync path (no PolicyMatrix / LegalHoldStore). When P4-RET-04
+     * options (policyMatrix, legalHoldStore, auditEmitter) are configured,
+     * use enforceAsync() instead to get hold-checked, audit-chained enforcement.
+     *
+     * This method is preserved for backward compatibility with existing tests
+     * and callers that do not yet need P4-RET-04 semantics.
+     */
+    enforce() {
+        return this.enforceSync();
+    }
+    /**
+     * Async enforcement (P4-RET-04). Returns a Promise<RetentionReport>.
+     * This is the primary method when PolicyMatrix + LegalHoldStore are wired.
+     *
+     * For backward compat, callers that do not need P4-RET-04 semantics can
+     * call enforceSync() which has the old behaviour (no hold check, no matrix).
+     */
+    async enforceAsync() {
+        const jobId = this.config.jobId ?? crypto.randomUUID();
+        const report = {
+            timestamp: new Date().toISOString(),
+            totalFilesScanned: 0,
+            filesDeleted: 0,
+            filesArchived: 0,
+            filesRetained: 0,
+            actions: [],
+            policiesApplied: Array.from(this.policyMap.keys()),
+        };
+        for (const dir of this.config.managedDirs) {
+            if (!fs.existsSync(dir.path))
+                continue;
+            const files = this.listFiles(dir.path, dir.filePattern);
+            for (const file of files) {
+                report.totalFilesScanned++;
+                const action = await this.processFileAsync(file, dir, jobId);
+                report.actions.push(action);
+                switch (action.action) {
+                    case 'deleted':
+                        report.filesDeleted++;
+                        break;
+                    case 'archived':
+                        report.filesArchived++;
+                        break;
+                    case 'retained':
+                        report.filesRetained++;
+                        break;
+                }
+            }
+        }
+        const logFile = path.join(this.config.logDir, 'retention-actions.jsonl');
+        (0, fs_1.appendJsonl)(logFile, {
+            type: 'retention-report',
+            ...report,
+            actions: report.actions.length,
+        });
+        log.info(`Retention enforcement complete`, {
+            jobId,
+            scanned: report.totalFilesScanned,
+            deleted: report.filesDeleted,
+            archived: report.filesArchived,
+            retained: report.filesRetained,
+        });
+        return report;
+    }
+    /**
+     * Legacy synchronous enforcement. No PolicyMatrix, no LegalHoldStore,
+     * no audit emission. Maintained for backward compatibility with callers
+     * that have not yet migrated to P4-RET-04.
+     */
+    enforceSync() {
+        const report = {
+            timestamp: new Date().toISOString(),
+            totalFilesScanned: 0,
+            filesDeleted: 0,
+            filesArchived: 0,
+            filesRetained: 0,
+            actions: [],
+            policiesApplied: Array.from(this.policyMap.keys()),
+        };
+        for (const dir of this.config.managedDirs) {
+            const policy = this.policyMap.get(dir.category);
+            if (!policy) {
+                log.warn(`No retention policy for category: ${dir.category}`);
+                continue;
+            }
+            if (!fs.existsSync(dir.path))
+                continue;
+            const files = this.listFiles(dir.path, dir.filePattern);
+            for (const file of files) {
+                report.totalFilesScanned++;
+                const action = this.processFile(file, policy);
+                report.actions.push(action);
+                switch (action.action) {
+                    case 'deleted':
+                        report.filesDeleted++;
+                        break;
+                    case 'archived':
+                        report.filesArchived++;
+                        break;
+                    case 'retained':
+                        report.filesRetained++;
+                        break;
+                }
+            }
+        }
+        const logFile = path.join(this.config.logDir, 'retention-actions.jsonl');
+        (0, fs_1.appendJsonl)(logFile, {
+            type: 'retention-report',
+            ...report,
+            actions: report.actions.length,
+        });
+        log.info(`Retention enforcement complete`, {
+            scanned: report.totalFilesScanned,
+            deleted: report.filesDeleted,
+            archived: report.filesArchived,
+            retained: report.filesRetained,
+        });
+        return report;
+    }
+    /**
+     * Check what would happen without executing (dry run).
+     * Uses enforceSync() for backward compat.
+     */
+    preview() {
+        const savedDryRun = this.config.dryRun;
+        this.config.dryRun = true;
+        const report = this.enforceSync();
+        this.config.dryRun = savedDryRun;
+        return report;
+    }
+    /**
+     * Get the effective retention policy for a category.
+     */
+    getPolicy(category) {
+        return this.policyMap.get(category) || null;
+    }
+    /**
+     * Get all policies.
+     */
+    getPolicies() {
+        return Array.from(this.policyMap.values());
+    }
+    /**
+     * Check if a specific file should be retained or expired.
+     */
+    checkFile(filePath, category) {
+        const policy = this.policyMap.get(category);
+        if (!policy)
+            return { expired: false, ageDays: 0, retentionDays: 0 };
+        const ageDays = this.getFileAgeDays(filePath);
+        return {
+            expired: ageDays > policy.retentionDays,
+            ageDays,
+            retentionDays: policy.retentionDays,
+        };
+    }
+    // --- Private ---
+    /**
+     * Read per-file DataClassTag from a sidecar <file>.meta.json.
+     * Falls back to the managedDir's defaultTag if no sidecar exists.
+     * Returns null if neither is available.
+     */
+    readSidecarTag(filePath, dirDefaultTag) {
+        const sidecarPath = `${filePath}.meta.json`;
+        try {
+            if (fs.existsSync(sidecarPath)) {
+                const raw = fs.readFileSync(sidecarPath, 'utf-8');
+                const meta = JSON.parse(raw);
+                if (meta.dataClassTag)
+                    return meta.dataClassTag;
+            }
+        }
+        catch {
+            // Sidecar unreadable -- fall through to default
+        }
+        return dirDefaultTag ?? null;
+    }
+    /**
+     * P4-RET-04 async file processor. Handles PolicyMatrix resolution,
+     * LegalHoldStore check, and fail-closed audit emission before delete.
+     */
+    async processFileAsync(filePath, dir, jobId) {
+        const ageDays = this.getFileAgeDays(filePath);
+        const now = new Date().toISOString();
+        const category = dir.category;
+        // --- Resolve retention policy ---
+        let retentionDays;
+        let action;
+        let dataClassTag;
+        let resolvedRetention;
+        const tag = this.readSidecarTag(filePath, dir.defaultTag);
+        if (tag && this.config.policyMatrix) {
+            try {
+                resolvedRetention = this.config.policyMatrix.resolve({
+                    tenantId: tag.tenantId,
+                    contractId: tag.contractId,
+                    dataClass: tag.dataClass,
+                    packBinding: tag.packBinding,
+                });
+                retentionDays = resolvedRetention.retentionDays;
+                action = resolvedRetention.action;
+                dataClassTag = tag;
+            }
+            catch {
+                // PolicyMatrix threw (e.g. MissingRetentionPolicyError) -- skip file
+                return {
+                    timestamp: now,
+                    file: filePath,
+                    category,
+                    action: 'skipped',
+                    reason: 'PolicyMatrix could not resolve retention policy; skipping until policy is defined.',
+                    fileAgeDays: ageDays,
+                    retentionDays: 0,
+                    dryRun: this.config.dryRun,
+                    dataClassTag: tag ?? undefined,
+                };
+            }
+        }
+        else {
+            // Fallback to legacy category policy
+            const policy = this.policyMap.get(category);
+            if (!policy) {
+                log.warn(`No retention policy for category: ${category}`);
+                return {
+                    timestamp: now,
+                    file: filePath,
+                    category,
+                    action: 'skipped',
+                    reason: `No policy for category "${category}"`,
+                    fileAgeDays: ageDays,
+                    retentionDays: 0,
+                    dryRun: this.config.dryRun,
+                };
+            }
+            retentionDays = policy.retentionDays;
+            action = policy.action;
+            dataClassTag = tag ?? undefined;
+        }
+        // --- Not expired ---
+        if (ageDays <= retentionDays) {
+            return {
+                timestamp: now,
+                file: filePath,
+                category,
+                action: 'retained',
+                reason: `Within retention period (${ageDays}d / ${retentionDays}d)`,
+                fileAgeDays: ageDays,
+                retentionDays,
+                dryRun: this.config.dryRun,
+                dataClassTag,
+            };
+        }
+        // --- Expired: legal hold check (AC 11) ---
+        if (this.config.legalHoldStore) {
+            const record = {
+                tenantId: tag?.tenantId,
+                contractId: tag?.contractId,
+                packBinding: tag?.packBinding,
+            };
+            const holds = await this.config.legalHoldStore.findHoldsMatching(record);
+            if (holds.length > 0) {
+                const holdId = holds[0].holdId;
+                // Emit blocked event (best-effort -- spec says emit but don't fail close on block)
+                if (this.config.auditEmitter) {
+                    try {
+                        await this.config.auditEmitter('retention:blocked-by-legal-hold', {
+                            file: filePath,
+                            category,
+                            holdId,
+                            dataClass: tag?.dataClass,
+                            tenantId: tag?.tenantId,
+                            jobId,
+                            store: 'fs',
+                            legalHoldChecked: true,
+                        });
+                    }
+                    catch {
+                        // Non-fatal: emit failure on a block event is logged but does not change behaviour
+                        log.warn(`Failed to emit retention:blocked-by-legal-hold for ${filePath}`);
+                    }
+                }
+                log.info(`Skipping ${filePath}: blocked by legal hold ${holdId}`);
+                return {
+                    timestamp: now,
+                    file: filePath,
+                    category,
+                    action: 'skipped',
+                    reason: `Blocked by legal hold ${holdId}`,
+                    fileAgeDays: ageDays,
+                    retentionDays,
+                    dryRun: this.config.dryRun,
+                    dataClassTag,
+                };
+            }
+        }
+        // --- Dry run ---
+        if (this.config.dryRun) {
+            return {
+                timestamp: now,
+                file: filePath,
+                category,
+                action: action === 'archive' ? 'archived' : 'deleted',
+                reason: `[DRY RUN] Would ${action} (${ageDays}d > ${retentionDays}d)`,
+                fileAgeDays: ageDays,
+                retentionDays,
+                dryRun: true,
+                dataClassTag,
+            };
+        }
+        // --- Fail-closed audit emit before delete (AC 16) ---
+        if (this.config.auditEmitter) {
+            try {
+                await this.config.auditEmitter('retention:deleted', {
+                    recordId: filePath,
+                    dataClass: tag?.dataClass,
+                    tenantId: tag?.tenantId,
+                    contractId: tag?.contractId,
+                    policySource: resolvedRetention?.policySource ?? 'default',
+                    retentionDaysApplied: retentionDays,
+                    jobId,
+                    legalHoldChecked: this.config.legalHoldStore != null,
+                    store: 'fs',
+                });
+            }
+            catch (err) {
+                // Audit chain append failed -- DO NOT proceed with delete (fail-closed, AC 16)
+                log.error(`Audit chain append failed for ${filePath}; skipping delete to prevent orphaned delete`);
+                return {
+                    timestamp: now,
+                    file: filePath,
+                    category,
+                    action: 'skipped',
+                    reason: `Audit chain append failed: ${err.message}`,
+                    fileAgeDays: ageDays,
+                    retentionDays,
+                    dryRun: false,
+                    dataClassTag,
+                };
+            }
+        }
+        // --- Execute delete/archive ---
+        if (action === 'archive') {
+            const policy = this.policyMap.get(category);
+            if (policy?.action === 'archive' && policy.archiveDir) {
+                return this.archiveFile(filePath, policy, ageDays, dataClassTag);
+            }
+        }
+        return this.deleteFile(filePath, { category, retentionDays, reference: resolvedRetention?.policySource ?? category, action }, ageDays, dataClassTag);
+    }
+    processFile(filePath, policy) {
+        const ageDays = this.getFileAgeDays(filePath);
+        const now = new Date().toISOString();
+        if (ageDays <= policy.retentionDays) {
+            return {
+                timestamp: now,
+                file: filePath,
+                category: policy.category,
+                action: 'retained',
+                reason: `Within retention period (${ageDays}d / ${policy.retentionDays}d)`,
+                fileAgeDays: ageDays,
+                retentionDays: policy.retentionDays,
+                dryRun: this.config.dryRun,
+            };
+        }
+        // File has expired
+        if (this.config.dryRun) {
+            return {
+                timestamp: now,
+                file: filePath,
+                category: policy.category,
+                action: policy.action === 'archive' ? 'archived' : 'deleted',
+                reason: `[DRY RUN] Would ${policy.action} (${ageDays}d > ${policy.retentionDays}d, ref: ${policy.reference})`,
+                fileAgeDays: ageDays,
+                retentionDays: policy.retentionDays,
+                dryRun: true,
+            };
+        }
+        if (policy.action === 'archive' && policy.archiveDir) {
+            return this.archiveFile(filePath, policy, ageDays);
+        }
+        return this.deleteFile(filePath, policy, ageDays);
+    }
+    archiveFile(filePath, policy, ageDays, dataClassTag) {
+        const now = new Date().toISOString();
+        try {
+            const dest = path.join(policy.archiveDir, path.basename(filePath));
+            fs.copyFileSync(filePath, dest);
+            fs.unlinkSync(filePath);
+            log.info(`Archived: ${filePath} -> ${dest}`);
+            return {
+                timestamp: now,
+                file: filePath,
+                category: policy.category,
+                action: 'archived',
+                reason: `Archived after ${ageDays}d (max ${policy.retentionDays}d, ref: ${policy.reference})`,
+                fileAgeDays: ageDays,
+                retentionDays: policy.retentionDays,
+                dryRun: false,
+                dataClassTag,
+            };
+        }
+        catch (err) {
+            log.error(`Failed to archive ${filePath}: ${err.message}`);
+            return {
+                timestamp: now,
+                file: filePath,
+                category: policy.category,
+                action: 'skipped',
+                reason: `Archive failed: ${err.message}`,
+                fileAgeDays: ageDays,
+                retentionDays: policy.retentionDays,
+                dryRun: false,
+                dataClassTag,
+            };
+        }
+    }
+    deleteFile(filePath, policy, ageDays, dataClassTag) {
+        const now = new Date().toISOString();
+        try {
+            fs.unlinkSync(filePath);
+            log.info(`Deleted: ${filePath} (${ageDays}d old, policy: ${policy.retentionDays}d)`);
+            return {
+                timestamp: now,
+                file: filePath,
+                category: policy.category,
+                action: 'deleted',
+                reason: `Deleted after ${ageDays}d (max ${policy.retentionDays}d, ref: ${policy.reference})`,
+                fileAgeDays: ageDays,
+                retentionDays: policy.retentionDays,
+                dryRun: false,
+                dataClassTag,
+            };
+        }
+        catch (err) {
+            log.error(`Failed to delete ${filePath}: ${err.message}`);
+            return {
+                timestamp: now,
+                file: filePath,
+                category: policy.category,
+                action: 'skipped',
+                reason: `Delete failed: ${err.message}`,
+                fileAgeDays: ageDays,
+                retentionDays: policy.retentionDays,
+                dryRun: false,
+                dataClassTag,
+            };
+        }
+    }
+    getFileAgeDays(filePath) {
+        try {
+            const stat = fs.statSync(filePath);
+            const ageMs = Date.now() - stat.mtimeMs;
+            return Math.floor(ageMs / 86400000);
+        }
+        catch {
+            return 0;
+        }
+    }
+    listFiles(dir, pattern) {
+        try {
+            return fs.readdirSync(dir)
+                .filter(f => {
+                if (pattern) {
+                    const regex = new RegExp(pattern.replace(/\*/g, '.*'));
+                    return regex.test(f);
+                }
+                return true;
+            })
+                .map(f => path.join(dir, f))
+                .filter(f => fs.statSync(f).isFile());
+        }
+        catch {
+            return [];
+        }
+    }
+}
+exports.RetentionManager = RetentionManager;
+//# sourceMappingURL=retention-manager.js.map

package/dist/governance/retention-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention-manager.js","sourceRoot":"","sources":["../../src/governance/retention-manager.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,+CAAiC;AACjC,mCAAoD;AACpD,qCAA2C;AAK3C,MAAM,GAAG,GAAG,IAAA,kBAAY,EAAC,mBAAmB,CAAC,CAAC;AAmH9C,MAAa,gBAAgB;IACnB,MAAM,CACsC;IAC5C,SAAS,GAAiC,IAAI,GAAG,EAAE,CAAC;IAE5D,YAAY,MAA8B;QACxC,IAAI,CAAC,MAAM,GAAG;YACZ,MAAM,EAAE,KAAK;YACb,GAAG,MAAM;SACV,CAAC;QAEF,IAAA,cAAS,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEzB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACrD,IAAA,cAAS,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACvD,MAAM,MAAM,GAAoB;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,iBAAiB,EAAE,CAAC;YACpB,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE;YACX,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;SACnD,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YAExD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC7D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAE5B,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtB,KAAK,SAAS;wBAAE,MAAM,CAAC,YAAY,EAAE,CAAC;wBAAC,MAAM;oBAC7C,KAAK,UAAU;wBAAE,MAAM,CAAC,aAAa,EAAE,CAAC;wBAAC,MAAM;oBAC/C,KAAK,UAAU;wBAAE,MAAM,CAAC,aAAa,EAAE,CAAC;wBAAC,MAAM;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QACzE,IAAA,gBAAW,EAAC,OAAO,EAAE;YACnB,IAAI,EAAE,kBAAkB;YACxB,GAAG,MAAM;YACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;SAC/B,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACzC,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,iBAAiB;YACjC,OAAO,EAAE,MAAM,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM,CAAC,aAAa;YAC9B,QAAQ,EAAE,MAAM,CAAC,aAAa;SAC/B,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,WAAW;QACT,MAAM,MAAM,GAAoB;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,iBAAiB,EAAE,CAAC;YACpB,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE;YACX,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;SACnD,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,qCAAqC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC9D,SAAS;YACX,CAAC;YAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YAExD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC9C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAE5B,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtB,KAAK,SAAS;wBAAE,MAAM,CAAC,YAAY,EAAE,CAAC;wBAAC,MAAM;oBAC7C,KAAK,UAAU;wBAAE,MAAM,CAAC,aAAa,EAAE,CAAC;wBAAC,MAAM;oBAC/C,KAAK,UAAU;wBAAE,MAAM,CAAC,aAAa,EAAE,CAAC;wBAAC,MAAM;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QACzE,IAAA,gBAAW,EAAC,OAAO,EAAE;YACnB,IAAI,EAAE,kBAAkB;YACxB,GAAG,MAAM;YACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;SAC/B,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACzC,OAAO,EAAE,MAAM,CAAC,iBAAiB;YACjC,OAAO,EAAE,MAAM,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM,CAAC,aAAa;YAC9B,QAAQ,EAAE,MAAM,CAAC,aAAa;SAC/B,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,QAAgB,EAAE,QAAgB;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAErE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,aAAa;YACvC,OAAO;YACP,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC;IACJ,CAAC;IAED,kBAAkB;IAElB;;;;OAIG;IACK,cAAc,CACpB,QAAgB,EAChB,aAA4B;QAE5B,MAAM,WAAW,GAAG,GAAG,QAAQ,YAAY,CAAC;QAC5C,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,IAAI,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC,YAAY,CAAC;YAClD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;QACD,OAAO,aAAa,IAAI,IAAI,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,gBAAgB,CAC5B,QAAgB,EAChB,GAAkD,EAClD,KAAa;QAEb,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE9B,mCAAmC;QACnC,IAAI,aAAqB,CAAC;QAC1B,IAAI,MAA4B,CAAC;QACjC,IAAI,YAAsC,CAAC;QAC3C,IAAI,iBAAgD,CAAC;QAErD,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAE1D,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC;oBACnD,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,SAAS,EAAE,GAAG,CAAC,SAAmB;oBAClC,WAAW,EAAE,GAAG,CAAC,WAAW;iBAC7B,CAAC,CAAC;gBACH,aAAa,GAAG,iBAAiB,CAAC,aAAa,CAAC;gBAChD,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC;gBAClC,YAAY,GAAG,GAAG,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,OAAO;oBACL,SAAS,EAAE,GAAG;oBACd,IAAI,EAAE,QAAQ;oBACd,QAAQ;oBACR,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,oFAAoF;oBAC5F,WAAW,EAAE,OAAO;oBACpB,aAAa,EAAE,CAAC;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;oBAC1B,YAAY,EAAE,GAAG,IAAI,SAAS;iBAC/B,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,qCAAqC;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;gBAC1D,OAAO;oBACL,SAAS,EAAE,GAAG;oBACd,IAAI,EAAE,QAAQ;oBACd,QAAQ;oBACR,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,2BAA2B,QAAQ,GAAG;oBAC9C,WAAW,EAAE,OAAO;oBACpB,aAAa,EAAE,CAAC;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;iBAC3B,CAAC;YACJ,CAAC;YACD,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;YACrC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YACvB,YAAY,GAAG,GAAG,IAAI,SAAS,CAAC;QAClC,CAAC;QAED,sBAAsB;QACtB,IAAI,OAAO,IAAI,aAAa,EAAE,CAAC;YAC7B,OAAO;gBACL,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ;gBACR,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,4BAA4B,OAAO,OAAO,aAAa,IAAI;gBACnE,WAAW,EAAE,OAAO;gBACpB,aAAa;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAC1B,YAAY;aACb,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAqB;gBAC/B,QAAQ,EAAE,GAAG,EAAE,QAAQ;gBACvB,UAAU,EAAE,GAAG,EAAE,UAAU;gBAC3B,WAAW,EAAE,GAAG,EAAE,WAAW;aAC9B,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAEzE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC/B,mFAAmF;gBACnF,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBAC7B,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,iCAAiC,EAAE;4BAChE,IAAI,EAAE,QAAQ;4BACd,QAAQ;4BACR,MAAM;4BACN,SAAS,EAAE,GAAG,EAAE,SAAS;4BACzB,QAAQ,EAAE,GAAG,EAAE,QAAQ;4BACvB,KAAK;4BACL,KAAK,EAAE,IAAI;4BACX,gBAAgB,EAAE,IAAI;yBACvB,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,mFAAmF;wBACnF,GAAG,CAAC,IAAI,CAAC,sDAAsD,QAAQ,EAAE,CAAC,CAAC;oBAC7E,CAAC;gBACH,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,YAAY,QAAQ,2BAA2B,MAAM,EAAE,CAAC,CAAC;gBAClE,OAAO;oBACL,SAAS,EAAE,GAAG;oBACd,IAAI,EAAE,QAAQ;oBACd,QAAQ;oBACR,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,yBAAyB,MAAM,EAAE;oBACzC,WAAW,EAAE,OAAO;oBACpB,aAAa;oBACb,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;oBAC1B,YAAY;iBACb,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO;gBACL,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ;gBACR,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBACrD,MAAM,EAAE,mBAAmB,MAAM,KAAK,OAAO,OAAO,aAAa,IAAI;gBACrE,WAAW,EAAE,OAAO;gBACpB,aAAa;gBACb,MAAM,EAAE,IAAI;gBACZ,YAAY;aACb,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,mBAAmB,EAAE;oBAClD,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,GAAG,EAAE,SAAS;oBACzB,QAAQ,EAAE,GAAG,EAAE,QAAQ;oBACvB,UAAU,EAAE,GAAG,EAAE,UAAU;oBAC3B,YAAY,EAAE,iBAAiB,EAAE,YAAY,IAAI,SAAS;oBAC1D,oBAAoB,EAAE,aAAa;oBACnC,KAAK;oBACL,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI;oBACpD,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,+EAA+E;gBAC/E,GAAG,CAAC,KAAK,CAAC,iCAAiC,QAAQ,8CAA8C,CAAC,CAAC;gBACnG,OAAO;oBACL,SAAS,EAAE,GAAG;oBACd,IAAI,EAAE,QAAQ;oBACd,QAAQ;oBACR,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,8BAA+B,GAAa,CAAC,OAAO,EAAE;oBAC9D,WAAW,EAAE,OAAO;oBACpB,aAAa;oBACb,MAAM,EAAE,KAAK;oBACb,YAAY;iBACb,CAAC;YACJ,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CACpB,QAAQ,EACR,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,IAAI,QAAQ,EAAE,MAAM,EAAE,EAC3F,OAAO,EACP,YAAY,CACb,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,QAAgB,EAAE,MAAuB;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACpC,OAAO;gBACL,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,4BAA4B,OAAO,OAAO,MAAM,CAAC,aAAa,IAAI;gBAC1E,WAAW,EAAE,OAAO;gBACpB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;aAC3B,CAAC;QACJ,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO;gBACL,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBAC5D,MAAM,EAAE,mBAAmB,MAAM,CAAC,MAAM,KAAK,OAAO,OAAO,MAAM,CAAC,aAAa,WAAW,MAAM,CAAC,SAAS,GAAG;gBAC7G,WAAW,EAAE,OAAO;gBACpB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAEO,WAAW,CACjB,QAAgB,EAChB,MAAuB,EACvB,OAAe,EACf,YAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAExB,GAAG,CAAC,IAAI,CAAC,aAAa,QAAQ,OAAO,IAAI,EAAE,CAAC,CAAC;YAE7C,OAAO;gBACL,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,kBAAkB,OAAO,UAAU,MAAM,CAAC,aAAa,WAAW,MAAM,CAAC,SAAS,GAAG;gBAC7F,WAAW,EAAE,OAAO;gBACpB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,MAAM,EAAE,KAAK;gBACb,YAAY;aACb,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,qBAAqB,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACtE,OAAO;gBACL,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,mBAAoB,GAAa,CAAC,OAAO,EAAE;gBACnD,WAAW,EAAE,OAAO;gBACpB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,MAAM,EAAE,KAAK;gBACb,YAAY;aACb,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,UAAU,CAChB,QAAgB,EAChB,MAAoF,EACpF,OAAe,EACf,YAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAExB,GAAG,CAAC,IAAI,CAAC,YAAY,QAAQ,KAAK,OAAO,kBAAkB,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;YAErF,OAAO;gBACL,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,iBAAiB,OAAO,UAAU,MAAM,CAAC,aAAa,WAAW,MAAM,CAAC,SAAS,GAAG;gBAC5F,WAAW,EAAE,OAAO;gBACpB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,MAAM,EAAE,KAAK;gBACb,YAAY;aACb,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,oBAAoB,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,OAAO;gBACL,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,kBAAmB,GAAa,CAAC,OAAO,EAAE;gBAClD,WAAW,EAAE,OAAO;gBACpB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,MAAM,EAAE,KAAK;gBACb,YAAY;aACb,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,QAAgB;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;YACxC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,GAAW,EAAE,OAAgB;QAC7C,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;iBACvB,MAAM,CAAC,CAAC,CAAC,EAAE;gBACV,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;oBACvD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACvB,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;iBACD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;iBAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAhiBD,4CAgiBC"}

package/dist/governance/runtime-event-renderer.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Runtime Event Renderer (W3.1-support of F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12).
+ *
+ * Pure helpers that normalise heterogeneous governance events (live
+ * PackEvaluator verdicts, OverrideEvents from W1.9, info/action-separation
+ * verdicts from W1.6, pack-version transitions from W1.4, ReplayEvents
+ * from W4.2 sandbox replay) into a single TimelineRow shape suitable for
+ * rendering in the runtime live-view single-vertical timeline.
+ *
+ * Browser-side safe — no node-builtin imports, no framework dependencies.
+ * The React UI layer (W3.1) consumes the TimelineRow shape directly.
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-RUNTIME-LIVE-VIEW (renderer support)
+ */
+import type { ReplayEvent } from './sandbox-replay.js';
+import type { OverrideEvent } from './pack-inheritance.js';
+import type { PackVersionEvent } from './pack-versioning.js';
+import type { InfoActionVerdict } from './info-action-separation.js';
+export type RowKind = 'tool-call' | 'authority' | 'verdict-allow' | 'verdict-deny' | 'verdict-pending' | 'approval-granted' | 'approval-denied' | 'state-change' | 'audit' | 'trust-delta' | 'override' | 'pack-version-change';
+export type RowTone = 'info' | 'notice' | 'warn' | 'error' | 'critical';
+export interface TimelineRow {
+    /** ISO 8601 timestamp the event occurred. */
+    at: string;
+    /** Relative offset in ms from the start of the run (if known). */
+    tMs?: number;
+    kind: RowKind;
+    tone: RowTone;
+    /** One-line headline for the row. */
+    headline: string;
+    /** Optional expandable detail body. */
+    detail?: string;
+    /** Pack ID that produced this row, if any. */
+    packId?: string;
+    /** Check / classifier ID, if any. */
+    checkId?: string;
+    /** Tool name, when relevant. */
+    toolName?: string;
+    /** Approver / actor for human-driven events. */
+    actor?: string;
+    /** Severity badge value for the UI. */
+    severityLabel: 'INFO' | 'NOTICE' | 'WARN' | 'ERROR' | 'CRITICAL';
+}
+export declare function fromReplayEvent(ev: ReplayEvent, runStartIso: string): TimelineRow;
+export declare function fromOverrideEvent(ev: OverrideEvent): TimelineRow;
+export declare function fromPackVersionEvent(ev: PackVersionEvent): TimelineRow;
+export declare function fromInfoActionVerdict(v: InfoActionVerdict, ctx: {
+    at: string;
+    toolName?: string;
+    tMs?: number;
+}): TimelineRow;
+/** Sort rows in ascending time order (stable). */
+export declare function sortTimelineRows(rows: TimelineRow[]): TimelineRow[];
+/** Filter rows by tone (e.g. show only WARN+CRITICAL on a triage view). */
+export declare function filterByMinTone(rows: TimelineRow[], minTone: RowTone): TimelineRow[];
+//# sourceMappingURL=runtime-event-renderer.d.ts.map

package/dist/governance/runtime-event-renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-event-renderer.d.ts","sourceRoot":"","sources":["../../src/governance/runtime-event-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,MAAM,OAAO,GACf,WAAW,GACX,WAAW,GACX,eAAe,GACf,cAAc,GACd,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,cAAc,GACd,OAAO,GACP,aAAa,GACb,UAAU,GACV,qBAAqB,CAAC;AAE1B,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;AAExE,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,aAAa,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;CAClE;AAuBD,wBAAgB,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,CAiBjF;AAED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,aAAa,GAAG,WAAW,CAYhE;AAED,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,gBAAgB,GAAG,WAAW,CAmBtE;AAED,wBAAgB,qBAAqB,CACnC,CAAC,EAAE,iBAAiB,EACpB,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,WAAW,CAiBb;AAOD,kDAAkD;AAClD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAOnE;AAED,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,WAAW,EAAE,CAUpF"}