@dcyfr/ai 1.0.4 → 2.1.0

package/dist/ai/delegation/chain-tracker.js

@@ -0,0 +1,336 @@
+/**
+ * DCYFR Delegation Chain Tracker
+ * TLP:AMBER - Internal Use Only
+ *
+ * Tracks multi-hop delegation chains with loop detection and liability firebreaks.
+ * Implements accountability boundaries to prevent unlimited delegation depth.
+ *
+ * @module delegation/chain-tracker
+ * @version 1.0.0
+ * @date 2026-02-13
+ */
+/**
+ * Delegation Chain Tracker
+ *
+ * Builds and analyzes delegation chains with loop detection and firebreak identification.
+ */
+export class DelegationChainTracker {
+    config;
+    contractManager;
+    constructor(contractManager, config = {}) {
+        this.contractManager = contractManager;
+        this.config = {
+            maxChainDepth: 10,
+            debug: false,
+            ...config,
+        };
+    }
+    /**
+     * Build a delegation chain from a contract
+     */
+    async buildChain(contractId) {
+        const chain = [];
+        const visited = new Set();
+        let current = this.contractManager.getContract(contractId);
+        if (!current) {
+            throw new Error(`Contract not found: ${contractId}`);
+        }
+        // Build chain from leaf to root
+        while (current) {
+            if (visited.has(current.contract_id)) {
+                // Loop detected
+                break;
+            }
+            chain.unshift(current); // Add to beginning (root to leaf order)
+            visited.add(current.contract_id);
+            if (current.parent_contract_id) {
+                current = this.contractManager.getContract(current.parent_contract_id);
+            }
+            else {
+                break; // Reached root
+            }
+        }
+        const hasLoops = await this.detectLoops(chain);
+        const firebreakContracts = this.identifyFirebreaks(chain);
+        return {
+            chain_id: `chain-${contractId}`,
+            contracts: chain,
+            depth: chain.length,
+            has_loops: hasLoops,
+            firebreak_contracts: firebreakContracts,
+            created_at: new Date().toISOString(),
+        };
+    }
+    /**
+     * Analyze a delegation chain for validity
+     */
+    async analyzeChain(contractId) {
+        const errors = [];
+        const warnings = [];
+        const contractIds = [];
+        try {
+            const chain = await this.buildChain(contractId);
+            // Track all contract IDs
+            chain.contracts.forEach(c => contractIds.push(c.contract_id));
+            // Check max depth
+            if (chain.depth > (this.config.maxChainDepth ?? 10)) {
+                errors.push(`Chain depth ${chain.depth} exceeds maximum ${this.config.maxChainDepth}`);
+            }
+            // Detect loops
+            const loops = await this.findLoops(chain.contracts);
+            const hasLoops = loops.length > 0;
+            if (hasLoops) {
+                errors.push(`Chain contains ${loops.length} loop(s)`);
+            }
+            // Identify firebreaks
+            const firebreakContracts = this.identifyFirebreaks(chain.contracts);
+            // Validate delegation depth consistency
+            for (let i = 0; i < chain.contracts.length; i++) {
+                const contract = chain.contracts[i];
+                if (contract.delegation_depth !== i) {
+                    warnings.push(`Contract ${contract.contract_id} has incorrect depth ${contract.delegation_depth}, expected ${i}`);
+                }
+            }
+            // Check for permission attenuation
+            const permissionViolations = this.checkPermissionAttenuation(chain.contracts);
+            if (permissionViolations.length > 0) {
+                warnings.push(...permissionViolations);
+            }
+            if (this.config.debug) {
+                console.log(`[ChainTracker] Analyzed chain ${chain.chain_id}: depth=${chain.depth}, loops=${hasLoops}, firebreaks=${firebreakContracts.length}`);
+            }
+            return {
+                valid: errors.length === 0,
+                depth: chain.depth,
+                has_loops: hasLoops,
+                loops: hasLoops ? loops : undefined,
+                firebreak_contracts: firebreakContracts,
+                contract_ids: contractIds,
+                errors: errors.length > 0 ? errors : undefined,
+                warnings: warnings.length > 0 ? warnings : undefined,
+            };
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            return {
+                valid: false,
+                depth: 0,
+                has_loops: false,
+                firebreak_contracts: [],
+                contract_ids: contractIds,
+                errors: [errorMessage],
+            };
+        }
+    }
+    /**
+     * Detect if a chain contains loops
+     */
+    async detectLoops(contracts) {
+        const seen = new Set();
+        for (const contract of contracts) {
+            if (seen.has(contract.contract_id)) {
+                return true; // Loop detected
+            }
+            seen.add(contract.contract_id);
+        }
+        return false;
+    }
+    /**
+     * Find all loops in a chain
+     */
+    async findLoops(contracts) {
+        const loops = [];
+        const agentsSeen = new Map(); // agent_id -> first occurrence index
+        for (let i = 0; i < contracts.length; i++) {
+            const contract = contracts[i];
+            const delegatee = contract.delegatee.agent_id;
+            // Check if this delegatee has already appeared as a delegator or delegatee earlier in the chain
+            if (agentsSeen.has(delegatee)) {
+                // Loop detected - agent is reappearing
+                const loopStart = agentsSeen.get(delegatee);
+                const loopContracts = contracts.slice(loopStart, i + 1).map(c => c.contract_id);
+                loops.push({
+                    contracts: loopContracts,
+                    entry_contract_id: contracts[loopStart].contract_id,
+                    description: `Agent loop detected: ${delegatee} reappears in delegation chain`,
+                });
+            }
+            // Track both delegator and delegatee
+            agentsSeen.set(contract.delegator.agent_id, i);
+            agentsSeen.set(delegatee, i);
+        }
+        return loops;
+    }
+    /**
+     * Identify liability firebreak contracts
+     *
+     * Firebreaks are accountability boundaries where delegation chains
+     * should have heightened verification or require human approval.
+     */
+    identifyFirebreaks(contracts) {
+        const firebreaks = [];
+        for (let i = 0; i < contracts.length; i++) {
+            const contract = contracts[i];
+            // Criteria for firebreaks:
+            // 1. Human verification required
+            if (contract.verification_policy === 'human_required') {
+                firebreaks.push(contract.contract_id);
+                continue;
+            }
+            // 2. TLP:AMBER or TLP:RED classification
+            if (contract.tlp_classification === 'AMBER' || contract.tlp_classification === 'RED') {
+                firebreaks.push(contract.contract_id);
+                continue;
+            }
+            // 3. Depth threshold (every 3rd level)
+            if ((contract.delegation_depth || 0) > 0 && (contract.delegation_depth || 0) % 3 === 0) {
+                firebreaks.push(contract.contract_id);
+                continue;
+            }
+            // 4. Critical verification policies
+            if (contract.verification_policy === 'cryptographic_proof') {
+                firebreaks.push(contract.contract_id);
+                continue;
+            }
+        }
+        return firebreaks;
+    }
+    /**
+     * Check for proper permission attenuation in chain
+     *
+     * Permissions should only decrease (or stay the same) as delegation depth increases.
+     */
+    isScopeGrantedByParent(scope, parentScopes) {
+        for (const parentScope of parentScopes) {
+            if (scope.startsWith(parentScope) || scope === parentScope) {
+                return true;
+            }
+        }
+        return false;
+    }
+    checkPermissionAttenuation(contracts) {
+        const violations = [];
+        for (let i = 1; i < contracts.length; i++) {
+            const parent = contracts[i - 1];
+            const child = contracts[i];
+            // Check if child has more permissions than parent
+            const parentTokens = parent.permission_tokens;
+            const childTokens = child.permission_tokens;
+            if (parentTokens && parentTokens.length > 0 && childTokens && childTokens.length > 0) {
+                const parentScopes = new Set(parentTokens[0].scopes || []);
+                const childScopes = childTokens[0].scopes || [];
+                for (const scope of childScopes) {
+                    if (!this.isScopeGrantedByParent(scope, parentScopes)) {
+                        violations.push(`Contract ${child.contract_id} has scope '${scope}' not granted by parent ${parent.contract_id}`);
+                    }
+                }
+            }
+        }
+        return violations;
+    }
+    /**
+     * Get all descendant contracts from a given contract
+     */
+    async getDescendants(contractId) {
+        const descendants = [];
+        const queue = [contractId];
+        const visited = new Set();
+        while (queue.length > 0) {
+            const currentId = queue.shift();
+            if (visited.has(currentId)) {
+                continue; // Skip visited to prevent infinite loops
+            }
+            visited.add(currentId);
+            // Find all contracts that have this as parent
+            const children = this.contractManager.queryContracts({
+                parent_contract_id: currentId,
+            });
+            descendants.push(...children);
+            queue.push(...children.map((c) => c.contract_id));
+        }
+        return descendants;
+    }
+    /**
+     * Get all ancestor contracts from a given contract
+     */
+    async getAncestors(contractId) {
+        const ancestors = [];
+        const visited = new Set();
+        let current = this.contractManager.getContract(contractId);
+        while (current && current.parent_contract_id) {
+            if (visited.has(current.parent_contract_id)) {
+                break; // Loop detected
+            }
+            visited.add(current.parent_contract_id);
+            const parent = this.contractManager.getContract(current.parent_contract_id);
+            if (parent) {
+                ancestors.unshift(parent); // Add to beginning (root to current order)
+                current = parent;
+            }
+            else {
+                break;
+            }
+        }
+        return ancestors;
+    }
+    /**
+     * Validate that adding a new child contract won't create loops
+     */
+    async validateNewChild(parentId, childContractData) {
+        // Get parent contract
+        const parent = this.contractManager.getContract(parentId);
+        if (!parent) {
+            return { valid: false, reason: 'Parent contract not found' };
+        }
+        // Check if delegatee is in parent chain (would create loop)
+        const ancestors = await this.getAncestors(parentId);
+        const ancestorAgents = new Set([
+            parent.delegator.agent_id,
+            parent.delegatee.agent_id,
+            ...ancestors.map(a => a.delegator.agent_id),
+            ...ancestors.map(a => a.delegatee.agent_id),
+        ]);
+        if (ancestorAgents.has(childContractData.delegatee.agent_id)) {
+            return {
+                valid: false,
+                reason: `Agent ${childContractData.delegatee.agent_id} is already in the delegation chain, would create a loop`,
+            };
+        }
+        // Check depth limit
+        const newDepth = (parent.delegation_depth || 0) + 1;
+        if (newDepth >= (this.config.maxChainDepth ?? 10)) {
+            return {
+                valid: false,
+                reason: `New child would exceed maximum chain depth ${this.config.maxChainDepth}`,
+            };
+        }
+        return { valid: true };
+    }
+    /**
+     * Get chain statistics
+     */
+    async getChainStatistics(contractId) {
+        const chain = await this.buildChain(contractId);
+        const descendants = await this.getDescendants(contractId);
+        const totalContracts = chain.contracts.length + descendants.length;
+        const maxDepth = Math.max(chain.depth, ...descendants.map(d => d.delegation_depth || 0));
+        const uniqueAgents = new Set([
+            ...chain.contracts.flatMap(c => [c.delegator.agent_id, c.delegatee.agent_id]),
+            ...descendants.flatMap(d => [d.delegator.agent_id, d.delegatee.agent_id]),
+        ]);
+        // Count firebreaks in chain
+        const chainFirebreaks = chain.firebreak_contracts?.length ?? 0;
+        // Count firebreaks in descendants
+        const descendantFirebreaks = this.identifyFirebreaks(descendants);
+        const totalFirebreaks = chainFirebreaks + descendantFirebreaks.length;
+        return {
+            total_contracts: totalContracts,
+            chain_depth: chain.depth,
+            max_depth: maxDepth,
+            unique_agents: uniqueAgents.size,
+            firebreak_count: totalFirebreaks,
+            has_loops: chain.has_loops,
+        };
+    }
+}
+//# sourceMappingURL=chain-tracker.js.map

package/dist/ai/delegation/chain-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-tracker.js","sourceRoot":"","sources":["../../../packages/ai/delegation/chain-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA8EH;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IACzB,MAAM,CAAqB;IAC3B,eAAe,CAAkB;IAEzC,YAAY,eAAgC,EAAE,SAA6B,EAAE;QAC3E,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG;YACZ,aAAa,EAAE,EAAE;YACjB,KAAK,EAAE,KAAK;YACZ,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,KAAK,GAAyB,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAE3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,gCAAgC;QAChC,OAAO,OAAO,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrC,gBAAgB;gBAChB,MAAM;YACR,CAAC;YAED,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,wCAAwC;YAChE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAEjC,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;gBAC/B,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,eAAe;YACxB,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE1D,OAAO;YACL,QAAQ,EAAE,SAAS,UAAU,EAAE;YAC/B,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,SAAS,EAAE,QAAQ;YACnB,mBAAmB,EAAE,kBAAkB;YACvC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAEhD,yBAAyB;YACzB,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAE9D,kBAAkB;YAClB,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,KAAK,oBAAoB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;YACzF,CAAC;YAED,eAAe;YACf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YAElC,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,MAAM,UAAU,CAAC,CAAC;YACxD,CAAC;YAED,sBAAsB;YACtB,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAEpE,wCAAwC;YACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,QAAQ,CAAC,gBAAgB,KAAK,CAAC,EAAE,CAAC;oBACpC,QAAQ,CAAC,IAAI,CACX,YAAY,QAAQ,CAAC,WAAW,wBAAwB,QAAQ,CAAC,gBAAgB,cAAc,CAAC,EAAE,CACnG,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,mCAAmC;YACnC,MAAM,oBAAoB,GAAG,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9E,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,CAAC;YACzC,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,CAAC,QAAQ,WAAW,KAAK,CAAC,KAAK,WAAW,QAAQ,gBAAgB,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;YACnJ,CAAC;YAED,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBACnC,mBAAmB,EAAE,kBAAkB;gBACvC,YAAY,EAAE,WAAW;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBAC9C,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACrD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,KAAK;gBAChB,mBAAmB,EAAE,EAAE;gBACvB,YAAY,EAAE,WAAW;gBACzB,MAAM,EAAE,CAAC,YAAY,CAAC;aACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,SAA+B;QACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC,CAAC,gBAAgB;YAC/B,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,SAA+B;QACrD,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,qCAAqC;QAEnF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;YAE9C,gGAAgG;YAChG,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9B,uCAAuC;gBACvC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;gBAC7C,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAEhF,KAAK,CAAC,IAAI,CAAC;oBACT,SAAS,EAAE,aAAa;oBACxB,iBAAiB,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW;oBACnD,WAAW,EAAE,wBAAwB,SAAS,gCAAgC;iBAC/E,CAAC,CAAC;YACL,CAAC;YAED,qCAAqC;YACrC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC/C,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,SAA+B;QACxD,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAE9B,2BAA2B;YAC3B,iCAAiC;YACjC,IAAI,QAAQ,CAAC,mBAAmB,KAAK,gBAAgB,EAAE,CAAC;gBACtD,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,yCAAyC;YACzC,IAAI,QAAQ,CAAC,kBAAkB,KAAK,OAAO,IAAI,QAAQ,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;gBACrF,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,uCAAuC;YACvC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvF,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,oCAAoC;YACpC,IAAI,QAAQ,CAAC,mBAAmB,KAAK,qBAAqB,EAAE,CAAC;gBAC3D,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACtC,SAAS;YACX,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACK,sBAAsB,CAAC,KAAa,EAAE,YAAyB;QACrE,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,0BAA0B,CAAC,SAA+B;QAChE,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAE3B,kDAAkD;YAClD,MAAM,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAC;YAC9C,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,CAAC;YAC5C,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC3D,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;gBAEhD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;oBAChC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;wBACtD,UAAU,CAAC,IAAI,CACb,YAAY,KAAK,CAAC,WAAW,eAAe,KAAK,2BAA2B,MAAM,CAAC,WAAW,EAAE,CACjG,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,MAAM,WAAW,GAAyB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAa,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAEjC,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,SAAS,CAAC,yCAAyC;YACrD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAEvB,8CAA8C;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC;gBACnD,kBAAkB,EAAE,SAAS;aAC9B,CAAC,CAAC;YAEH,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,SAAS,GAAyB,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAE3D,OAAO,OAAO,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC5C,MAAM,CAAC,gBAAgB;YACzB,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAExC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAC5E,IAAI,MAAM,EAAE,CAAC;gBACX,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,2CAA2C;gBACtE,OAAO,GAAG,MAAM,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,iBAAsD;QAI7F,sBAAsB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QAC/D,CAAC;QAED,4DAA4D;QAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;YAC7B,MAAM,CAAC,SAAS,CAAC,QAAQ;YACzB,MAAM,CAAC,SAAS,CAAC,QAAQ;YACzB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC3C,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;SAC5C,CAAC,CAAC;QAEH,IAAI,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,SAAS,iBAAiB,CAAC,SAAS,CAAC,QAAQ,0DAA0D;aAChH,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;YAClD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,8CAA8C,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;aAClF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,UAAkB;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAE1D,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,KAAK,CAAC,KAAK,EACX,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,CACjD,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;YAC3B,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC7E,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;SAC1E,CAAC,CAAC;QAEH,4BAA4B;QAC5B,MAAM,eAAe,GAAG,KAAK,CAAC,mBAAmB,EAAE,MAAM,IAAI,CAAC,CAAC;QAE/D,kCAAkC;QAClC,MAAM,oBAAoB,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAElE,MAAM,eAAe,GAAG,eAAe,GAAG,oBAAoB,CAAC,MAAM,CAAC;QAEtE,OAAO;YACL,eAAe,EAAE,cAAc;YAC/B,WAAW,EAAE,KAAK,CAAC,KAAK;YACxB,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY,CAAC,IAAI;YAChC,eAAe,EAAE,eAAe;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC;CACF"}

package/dist/ai/delegation/circuit-breaker.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Circuit Breaker — per-agent failure state machine
+ * TLP:AMBER - Internal Use Only
+ *
+ * Design decision D6: Circuit breaker with cascading revocation.
+ *
+ * States: closed (normal) → open (blocked) ↔ half-open (probe allowed)
+ *
+ * The companion CircuitBreakerMiddleware wraps this as a SecurityMiddleware
+ * that can be inserted into the SecurityMiddlewareChain.
+ *
+ * @module delegation/circuit-breaker
+ * @version 1.0.0
+ * @date 2026-02-24
+ */
+import { EventEmitter } from 'events';
+import type { SecurityMiddleware, SecurityContext, SecurityVerdict, SecurityOperationType } from '../types/security-middleware.js';
+export type CircuitState = 'closed' | 'half-open' | 'open';
+export interface CircuitBreakerConfig {
+    /** Number of failures within windowMs before opening. Default: 5 */
+    failureThreshold?: number;
+    /** Sliding window for counting failures. Default: 60 000 ms */
+    windowMs?: number;
+    /** How long to stay open before testing with half-open. Default: 30 000 ms */
+    cooldownMs?: number;
+}
+/**
+ * CircuitBreaker emits:
+ *   - `circuit_opened`      when an agent circuit trips open
+ *   - `circuit_half_opened` when cooldown expires and probe is allowed
+ *   - `circuit_closed`      when a probe succeeds and circuit resets
+ */
+export declare class CircuitBreaker extends EventEmitter {
+    private readonly failureThreshold;
+    private readonly windowMs;
+    private readonly cooldownMs;
+    private readonly circuits;
+    constructor(config?: CircuitBreakerConfig);
+    /**
+     * Returns true if the agent may proceed; false if the circuit is open.
+     * Transitions open → half-open when cooldown expires.
+     */
+    canProceed(agentId: string): boolean;
+    recordSuccess(agentId: string): void;
+    recordFailure(agentId: string): void;
+    getState(agentId: string): CircuitState;
+    /** Force-reset a circuit (e.g., after manual review). */
+    reset(agentId: string): void;
+    private getOrCreate;
+}
+export declare class CircuitBreakerMiddleware implements SecurityMiddleware {
+    private readonly breaker;
+    readonly name = "circuit-breaker";
+    readonly featureFlag = "security_monitoring";
+    readonly appliesTo: SecurityOperationType[];
+    constructor(breaker: CircuitBreaker);
+    evaluate(context: SecurityContext): Promise<SecurityVerdict>;
+}
+//# sourceMappingURL=circuit-breaker.d.ts.map

package/dist/ai/delegation/circuit-breaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-breaker.d.ts","sourceRoot":"","sources":["../../../packages/ai/delegation/circuit-breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAMnI,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,GAAG,MAAM,CAAC;AAE3D,MAAM,WAAW,oBAAoB;IACnC,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAaD;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,YAAY;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;gBAEhD,MAAM,GAAE,oBAAyB;IAW7C;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAuBpC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAcpC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAyBpC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY;IAIvC,yDAAyD;IACzD,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAQ5B,OAAO,CAAC,WAAW;CAQpB;AAMD,qBAAa,wBAAyB,YAAW,kBAAkB;IAKrD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,WAAW,yBAAyB;IAC7C,QAAQ,CAAC,SAAS,EAAE,qBAAqB,EAAE,CAAc;gBAE5B,OAAO,EAAE,cAAc;IAE9C,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;CAyBnE"}

package/dist/ai/delegation/circuit-breaker.js

@@ -0,0 +1,153 @@
+/**
+ * Circuit Breaker — per-agent failure state machine
+ * TLP:AMBER - Internal Use Only
+ *
+ * Design decision D6: Circuit breaker with cascading revocation.
+ *
+ * States: closed (normal) → open (blocked) ↔ half-open (probe allowed)
+ *
+ * The companion CircuitBreakerMiddleware wraps this as a SecurityMiddleware
+ * that can be inserted into the SecurityMiddlewareChain.
+ *
+ * @module delegation/circuit-breaker
+ * @version 1.0.0
+ * @date 2026-02-24
+ */
+import { EventEmitter } from 'events';
+// ──────────────────────────────────────────────────────────────────────────
+// CircuitBreaker
+// ──────────────────────────────────────────────────────────────────────────
+/**
+ * CircuitBreaker emits:
+ *   - `circuit_opened`      when an agent circuit trips open
+ *   - `circuit_half_opened` when cooldown expires and probe is allowed
+ *   - `circuit_closed`      when a probe succeeds and circuit resets
+ */
+export class CircuitBreaker extends EventEmitter {
+    failureThreshold;
+    windowMs;
+    cooldownMs;
+    circuits = new Map();
+    constructor(config = {}) {
+        super();
+        this.failureThreshold = config.failureThreshold ?? 5;
+        this.windowMs = config.windowMs ?? 60_000;
+        this.cooldownMs = config.cooldownMs ?? 30_000;
+    }
+    // ──────────────────────────────────────────────────────────────────────────
+    // Public API
+    // ──────────────────────────────────────────────────────────────────────────
+    /**
+     * Returns true if the agent may proceed; false if the circuit is open.
+     * Transitions open → half-open when cooldown expires.
+     */
+    canProceed(agentId) {
+        const circuit = this.getOrCreate(agentId);
+        const now = Date.now();
+        switch (circuit.state) {
+            case 'closed':
+                return true;
+            case 'open': {
+                if (now - circuit.openedAt >= this.cooldownMs) {
+                    circuit.state = 'half-open';
+                    circuit.probeAllowed = true;
+                    this.emit('circuit_half_opened', { agent_id: agentId });
+                }
+                return circuit.state === 'half-open' && circuit.probeAllowed;
+            }
+            case 'half-open':
+                // Only allow one probe at a time
+                return circuit.probeAllowed;
+        }
+    }
+    recordSuccess(agentId) {
+        const circuit = this.circuits.get(agentId);
+        if (!circuit)
+            return;
+        if (circuit.state === 'half-open') {
+            circuit.state = 'closed';
+            circuit.failures = [];
+            circuit.openedAt = 0;
+            circuit.probeAllowed = false;
+            this.emit('circuit_closed', { agent_id: agentId });
+        }
+        // No-op for closed circuits — do not penalise successes
+    }
+    recordFailure(agentId) {
+        const circuit = this.getOrCreate(agentId);
+        const now = Date.now();
+        const cutoff = now - this.windowMs;
+        // Prune old failures
+        circuit.failures = circuit.failures.filter(t => t > cutoff);
+        circuit.failures.push(now);
+        if (circuit.state === 'half-open') {
+            // Probe failed — reopen immediately
+            circuit.state = 'open';
+            circuit.openedAt = now;
+            circuit.probeAllowed = false;
+            this.emit('circuit_opened', { agent_id: agentId, failure_count: circuit.failures.length });
+            return;
+        }
+        if (circuit.state === 'closed' && circuit.failures.length >= this.failureThreshold) {
+            circuit.state = 'open';
+            circuit.openedAt = now;
+            this.emit('circuit_opened', { agent_id: agentId, failure_count: circuit.failures.length });
+        }
+    }
+    getState(agentId) {
+        return this.circuits.get(agentId)?.state ?? 'closed';
+    }
+    /** Force-reset a circuit (e.g., after manual review). */
+    reset(agentId) {
+        this.circuits.delete(agentId);
+    }
+    // ──────────────────────────────────────────────────────────────────────────
+    // Internal helpers
+    // ──────────────────────────────────────────────────────────────────────────
+    getOrCreate(agentId) {
+        let circuit = this.circuits.get(agentId);
+        if (!circuit) {
+            circuit = { state: 'closed', failures: [], openedAt: 0, probeAllowed: false };
+            this.circuits.set(agentId, circuit);
+        }
+        return circuit;
+    }
+}
+// ──────────────────────────────────────────────────────────────────────────
+// CircuitBreakerMiddleware — SecurityMiddleware adapter
+// ──────────────────────────────────────────────────────────────────────────
+export class CircuitBreakerMiddleware {
+    breaker;
+    name = 'circuit-breaker';
+    featureFlag = 'security_monitoring';
+    appliesTo = ['create'];
+    constructor(breaker) {
+        this.breaker = breaker;
+    }
+    async evaluate(context) {
+        // Check both delegator and delegatee circuits
+        const idsToCheck = [];
+        const delegatorId = context.delegator_auth?.agent_id ?? context.contract.delegator?.agent_id;
+        const delegateeId = context.delegatee_auth?.agent_id ?? context.contract.delegatee?.agent_id;
+        if (delegatorId)
+            idsToCheck.push(delegatorId);
+        if (delegateeId)
+            idsToCheck.push(delegateeId);
+        for (const agentId of idsToCheck) {
+            if (!this.breaker.canProceed(agentId)) {
+                return {
+                    action: 'block',
+                    reason: `Circuit breaker is open for agent '${agentId}'. Too many recent failures.`,
+                    threat_type: 'circuit_open',
+                    severity: 'critical',
+                    evidence: {
+                        agent_id: agentId,
+                        circuit_state: this.breaker.getState(agentId),
+                    },
+                };
+            }
+        }
+        return { action: 'allow' };
+    }
+}
+//# sourceMappingURL=circuit-breaker.js.map

package/dist/ai/delegation/circuit-breaker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-breaker.js","sourceRoot":"","sources":["../../../packages/ai/delegation/circuit-breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAyBtC,6EAA6E;AAC7E,iBAAiB;AACjB,6EAA6E;AAE7E;;;;;GAKG;AACH,MAAM,OAAO,cAAe,SAAQ,YAAY;IAC7B,gBAAgB,CAAS;IACzB,QAAQ,CAAS;IACjB,UAAU,CAAS;IAEnB,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE5D,YAAY,SAA+B,EAAE;QAC3C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,aAAa;IACb,6EAA6E;IAE7E;;;OAGG;IACH,UAAU,CAAC,OAAe;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC;YAEd,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC9C,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC;oBAC5B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;oBAC5B,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,OAAO,OAAO,CAAC,KAAK,KAAK,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;YAC/D,CAAC;YAED,KAAK,WAAW;gBACd,iCAAiC;gBACjC,OAAO,OAAO,CAAC,YAAY,CAAC;QAChC,CAAC;IACH,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;YACzB,OAAO,CAAC,QAAQ,GAAG,EAAE,CAAC;YACtB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,wDAAwD;IAC1D,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEnC,qBAAqB;QACrB,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAC5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE3B,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAClC,oCAAoC;YACpC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC;YACvB,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;YACvB,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACnF,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC;YACvB,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,QAAQ,CAAC;IACvD,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,OAAe;QACnB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,6EAA6E;IAC7E,mBAAmB;IACnB,6EAA6E;IAErE,WAAW,CAAC,OAAe;QACjC,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAC9E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,6EAA6E;AAC7E,wDAAwD;AACxD,6EAA6E;AAE7E,MAAM,OAAO,wBAAwB;IAKN;IAJpB,IAAI,GAAG,iBAAiB,CAAC;IACzB,WAAW,GAAG,qBAAqB,CAAC;IACpC,SAAS,GAA4B,CAAC,QAAQ,CAAC,CAAC;IAEzD,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,8CAA8C;QAC9C,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC7F,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC7F,IAAI,WAAW;YAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,WAAW;YAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE9C,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,sCAAsC,OAAO,8BAA8B;oBACnF,WAAW,EAAE,cAAc;oBAC3B,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE;wBACR,QAAQ,EAAE,OAAO;wBACjB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;qBAC9C;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF"}