@decionis/agent-safe-pipeline 0.4.0 → 0.5.0

package/dist/manifest/ActionManifest.d.ts

@@ -0,0 +1,112 @@
+import { z } from "zod";
+import type { ActionRegistry } from "../execution/ActionRegistry.js";
+import { type JsonObject } from "../intent/JsonValue.js";
+import { ApiProfile } from "../profile/ApiProfile.js";
+import { type McpToolProfile } from "../profile/McpToolProfile.js";
+/**
+ * `agent-safe.actions/1`: the action space an executor can run, as one
+ * document. Each entry is an action an intent can name, where it comes from
+ * (a family registered in code, an API profile's writes, an MCP profile's
+ * tools), the JSON Schema its parameters are admitted against, the target
+ * scopes it acts on, and the effect it produces when its source says.
+ *
+ * The authority reads it as the inventory a policy release has to cover:
+ * Decionis refuses a release that leaves a manifest action matched by no
+ * rule but its default. The contract is Decionis's (`ActionManifest` in its
+ * OpenAPI); this is the producer.
+ */
+export declare const ACTION_MANIFEST_CONTRACT = "agent-safe.actions/1";
+/** The most actions one manifest lists, and the most target scopes one action names. */
+export declare const MAX_MANIFEST_ACTIONS = 500;
+export declare const MAX_ACTION_TARGETS = 64;
+export declare const ActionManifestSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"registry">;
+    family: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"api">;
+    profile: z.ZodString;
+    operations: z.ZodArray<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"mcp">;
+    profile: z.ZodString;
+    tool: z.ZodString;
+}, z.core.$strict>], "kind">;
+export declare const ActionManifestEntrySchema: z.ZodObject<{
+    action: z.ZodString;
+    source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"registry">;
+        family: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"api">;
+        profile: z.ZodString;
+        operations: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        profile: z.ZodString;
+        tool: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    parameters: z.ZodType<JsonObject, unknown, z.core.$ZodTypeInternals<JsonObject, unknown>>;
+    targets: z.ZodArray<z.ZodString>;
+    effect_type: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export declare const ActionManifestSchema: z.ZodObject<{
+    manifest: z.ZodLiteral<"agent-safe.actions/1">;
+    actions: z.ZodArray<z.ZodObject<{
+        action: z.ZodString;
+        source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"registry">;
+            family: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"api">;
+            profile: z.ZodString;
+            operations: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            profile: z.ZodString;
+            tool: z.ZodString;
+        }, z.core.$strict>], "kind">;
+        parameters: z.ZodType<JsonObject, unknown, z.core.$ZodTypeInternals<JsonObject, unknown>>;
+        targets: z.ZodArray<z.ZodString>;
+        effect_type: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ActionManifestSource = z.infer<typeof ActionManifestSourceSchema>;
+export type ActionManifestEntry = z.infer<typeof ActionManifestEntrySchema>;
+export type ActionManifestDocument = z.infer<typeof ActionManifestSchema>;
+/** What a registry cannot say about an action and its family can: where it acts, and its effect. */
+export interface ActionAnnotation {
+    readonly targets: readonly string[];
+    readonly effectType: string | null;
+}
+export declare class ActionManifestError extends Error {
+    readonly code: "ACTION_MANIFEST_DUPLICATE_ACTION" | "ACTION_MANIFEST_INVALID";
+    readonly detail: string;
+    constructor(code: "ACTION_MANIFEST_DUPLICATE_ACTION" | "ACTION_MANIFEST_INVALID", detail: string);
+}
+export declare class ActionManifest {
+    /**
+     * A parameters schema as JSON Schema: the input side, since that is what an
+     * intent carries, and a check zod cannot express (a refinement, a custom
+     * type) as an open schema rather than a refusal to describe the action.
+     */
+    static parametersJsonSchema(schema: z.ZodType): JsonObject;
+    /** A sealed registry's actions, each annotated by the family that registered it. */
+    static fromRegistry(registry: ActionRegistry, family: string, annotate: (action: string) => ActionAnnotation): ActionManifestEntry[];
+    /**
+     * An API profile's write actions, one entry each, with every operation that
+     * becomes it and that operation's method and path template as a target. A
+     * read is never an intent, so it is not in the action space.
+     */
+    static fromApiProfile(profile: ApiProfile, parametersSchema: z.ZodType): ActionManifestEntry[];
+    /** An MCP profile's tools, one entry each, admitted against the tool's declared arguments. */
+    static fromMcpProfile(profile: McpToolProfile): ActionManifestEntry[];
+    /**
+     * The document: every entry once, in code-point order of its action, held
+     * to the contract. An action two sources both produce is refused by name,
+     * since a grant names an action and only one handler can run under it.
+     */
+    static document(entries: readonly ActionManifestEntry[]): ActionManifestDocument;
+    /** `sha256:` over the RFC 8785 form: what a signed release manifest records as `actionManifestDigest`. */
+    static digest(document: ActionManifestDocument): `sha256:${string}`;
+}
+//# sourceMappingURL=ActionManifest.d.ts.map

package/dist/manifest/ActionManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActionManifest.d.ts","sourceRoot":"","sources":["../../src/manifest/ActionManifest.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,EAAoB,KAAK,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAEL,UAAU,EAEX,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAE/D,wFAAwF;AACxF,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAOrC,eAAO,MAAM,0BAA0B;;;;;;;;;;;4BAqBrC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;kBAYpC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;kBAe7B,CAAC;AAEL,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAE1E,oGAAoG;AACpG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,IAAI,EAAE,kCAAkC,GAAG,yBAAyB;aACpE,MAAM,EAAE,MAAM;gBADd,IAAI,EAAE,kCAAkC,GAAG,yBAAyB,EACpE,MAAM,EAAE,MAAM;CAKjC;AAED,qBAAa,cAAc;IACzB;;;;OAIG;WACW,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,UAAU;IAUjE,oFAAoF;WACtE,YAAY,CACxB,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,gBAAgB,GAC7C,mBAAmB,EAAE;IAaxB;;;;OAIG;WACW,cAAc,CAC1B,OAAO,EAAE,UAAU,EACnB,gBAAgB,EAAE,CAAC,CAAC,OAAO,GAC1B,mBAAmB,EAAE;IAsBxB,8FAA8F;WAChF,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,mBAAmB,EAAE;IAa5E;;;;OAIG;WACW,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,GAAG,sBAAsB;IAsBvF,0GAA0G;WAC5F,MAAM,CAAC,QAAQ,EAAE,sBAAsB,GAAG,UAAU,MAAM,EAAE;CAI3E"}

package/dist/manifest/ActionManifest.js

@@ -0,0 +1,182 @@
+import { createHash } from "node:crypto";
+import { z } from "zod";
+import { CanonicalIntentHasher } from "../intent/CanonicalIntentHasher.js";
+import { JsonObjectSchema } from "../intent/JsonValue.js";
+import { ApiOperationSchema, ApiProfile, ApiProfileDefinitionSchema, } from "../profile/ApiProfile.js";
+import { McpProfileDefinitionSchema, McpToolSchema, } from "../profile/McpToolProfile.js";
+/**
+ * `agent-safe.actions/1`: the action space an executor can run, as one
+ * document. Each entry is an action an intent can name, where it comes from
+ * (a family registered in code, an API profile's writes, an MCP profile's
+ * tools), the JSON Schema its parameters are admitted against, the target
+ * scopes it acts on, and the effect it produces when its source says.
+ *
+ * The authority reads it as the inventory a policy release has to cover:
+ * Decionis refuses a release that leaves a manifest action matched by no
+ * rule but its default. The contract is Decionis's (`ActionManifest` in its
+ * OpenAPI); this is the producer.
+ */
+export const ACTION_MANIFEST_CONTRACT = "agent-safe.actions/1";
+/** The most actions one manifest lists, and the most target scopes one action names. */
+export const MAX_MANIFEST_ACTIONS = 500;
+export const MAX_ACTION_TARGETS = 64;
+const actionName = z
+    .string()
+    .max(120)
+    .regex(/^[a-z][a-z0-9._:-]*$/);
+export const ActionManifestSourceSchema = z.discriminatedUnion("kind", [
+    /** A family registered in code, by the name its registration goes by. */
+    z.strictObject({
+        kind: z.literal("registry"),
+        family: z
+            .string()
+            .max(40)
+            .regex(/^[a-z][a-z0-9]*$/),
+    }),
+    /** An API profile's writes: the operations, in profile order, that become this action. */
+    z.strictObject({
+        kind: z.literal("api"),
+        profile: ApiProfileDefinitionSchema.shape.id,
+        operations: z.array(ApiOperationSchema.shape.id).min(1).max(200),
+    }),
+    /** An MCP profile's tool that becomes this action. */
+    z.strictObject({
+        kind: z.literal("mcp"),
+        profile: McpProfileDefinitionSchema.shape.id,
+        tool: McpToolSchema.shape.tool,
+    }),
+]);
+export const ActionManifestEntrySchema = z.strictObject({
+    action: actionName,
+    source: ActionManifestSourceSchema,
+    /** The JSON Schema (draft 2020-12, without `$schema`) the intent's parameters are admitted against. */
+    parameters: JsonObjectSchema,
+    /** Scope templates with `{name}` placeholders; none when the proposal names the target. */
+    targets: z.array(z.string().min(1).max(500)).max(MAX_ACTION_TARGETS),
+    /** The effect the action produces, when its source declares one. */
+    effect_type: z
+        .string()
+        .regex(/^[A-Z][A-Z0-9_]{0,119}$/)
+        .nullable(),
+});
+export const ActionManifestSchema = z
+    .strictObject({
+    manifest: z.literal(ACTION_MANIFEST_CONTRACT),
+    actions: z.array(ActionManifestEntrySchema).min(1).max(MAX_MANIFEST_ACTIONS),
+})
+    .superRefine((value, context) => {
+    // Strictly ascending is sorted and unique at once: one action, one entry.
+    for (let index = 1; index < value.actions.length; index += 1) {
+        if (value.actions[index - 1].action >= value.actions[index].action)
+            context.addIssue({
+                code: "custom",
+                path: ["actions", index, "action"],
+                message: "actions are listed once each, in code-point order",
+            });
+    }
+});
+export class ActionManifestError extends Error {
+    code;
+    detail;
+    constructor(code, detail) {
+        super(code);
+        this.code = code;
+        this.detail = detail;
+        this.name = "ActionManifestError";
+    }
+}
+export class ActionManifest {
+    /**
+     * A parameters schema as JSON Schema: the input side, since that is what an
+     * intent carries, and a check zod cannot express (a refinement, a custom
+     * type) as an open schema rather than a refusal to describe the action.
+     */
+    static parametersJsonSchema(schema) {
+        const generated = z.toJSONSchema(schema, {
+            target: "draft-2020-12",
+            io: "input",
+            unrepresentable: "any",
+        });
+        delete generated["$schema"];
+        return generated;
+    }
+    /** A sealed registry's actions, each annotated by the family that registered it. */
+    static fromRegistry(registry, family, annotate) {
+        return registry.describe().map(({ action, parametersSchema }) => {
+            const annotation = annotate(action);
+            return {
+                action,
+                source: { kind: "registry", family },
+                parameters: ActionManifest.parametersJsonSchema(parametersSchema),
+                targets: [...annotation.targets],
+                effect_type: annotation.effectType,
+            };
+        });
+    }
+    /**
+     * An API profile's write actions, one entry each, with every operation that
+     * becomes it and that operation's method and path template as a target. A
+     * read is never an intent, so it is not in the action space.
+     */
+    static fromApiProfile(profile, parametersSchema) {
+        const parameters = ActionManifest.parametersJsonSchema(parametersSchema);
+        return profile.actions().map((action) => {
+            const operations = profile.definition.operations.filter((operation) => !ApiProfile.isRead(operation) && operation.action === action);
+            return {
+                action,
+                source: {
+                    kind: "api",
+                    profile: profile.id,
+                    operations: operations.map((operation) => operation.id),
+                },
+                parameters,
+                targets: [
+                    ...new Set(operations.map((operation) => `${operation.method} ${operation.path}`)),
+                ],
+                effect_type: null,
+            };
+        });
+    }
+    /** An MCP profile's tools, one entry each, admitted against the tool's declared arguments. */
+    static fromMcpProfile(profile) {
+        return profile.tools().map((name) => {
+            const tool = profile.tool(name);
+            return {
+                action: tool.action,
+                source: { kind: "mcp", profile: profile.id, tool: tool.tool },
+                parameters: ActionManifest.parametersJsonSchema(profile.argumentsSchema(name)),
+                targets: [tool.target],
+                effect_type: null,
+            };
+        });
+    }
+    /**
+     * The document: every entry once, in code-point order of its action, held
+     * to the contract. An action two sources both produce is refused by name,
+     * since a grant names an action and only one handler can run under it.
+     */
+    static document(entries) {
+        const seen = new Set();
+        for (const entry of entries) {
+            if (seen.has(entry.action))
+                throw new ActionManifestError("ACTION_MANIFEST_DUPLICATE_ACTION", entry.action);
+            seen.add(entry.action);
+        }
+        const parsed = ActionManifestSchema.safeParse({
+            manifest: ACTION_MANIFEST_CONTRACT,
+            actions: [...entries].sort((a, b) => (a.action < b.action ? -1 : 1)),
+        });
+        if (!parsed.success)
+            throw new ActionManifestError("ACTION_MANIFEST_INVALID", parsed.error.issues
+                .slice(0, 3)
+                .map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`)
+                .join("; "));
+        return parsed.data;
+    }
+    /** `sha256:` over the RFC 8785 form: what a signed release manifest records as `actionManifestDigest`. */
+    static digest(document) {
+        const canonical = CanonicalIntentHasher.stringify(document);
+        return `sha256:${createHash("sha256").update(canonical, "utf8").digest("hex")}`;
+    }
+}
+//# sourceMappingURL=ActionManifest.js.map

package/dist/manifest/ActionManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActionManifest.js","sourceRoot":"","sources":["../../src/manifest/ActionManifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAmC,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,0BAA0B,EAC1B,aAAa,GAEd,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAE/D,wFAAwF;AACxF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAEjC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACrE,yEAAyE;IACzE,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,GAAG,CAAC,EAAE,CAAC;aACP,KAAK,CAAC,kBAAkB,CAAC;KAC7B,CAAC;IACF,0FAA0F;IAC1F,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,EAAE;QAC5C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACjE,CAAC;IACF,sDAAsD;IACtD,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,EAAE;QAC5C,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI;KAC/B,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,0BAA0B;IAClC,uGAAuG;IACvG,UAAU,EAAE,gBAAgB;IAC5B,2FAA2F;IAC3F,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACpE,oEAAoE;IACpE,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,KAAK,CAAC,yBAAyB,CAAC;SAChC,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,YAAY,CAAC;IACZ,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;CAC7E,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,0EAA0E;IAC1E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC,MAAM;YAClE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC;gBAClC,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC,CAAC;AAYL,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAE1B;IACA;IAFlB,YACkB,IAAoE,EACpE,MAAc;QAE9B,KAAK,CAAC,IAAI,CAAC,CAAC;QAHI,SAAI,GAAJ,IAAI,CAAgE;QACpE,WAAM,GAAN,MAAM,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IACzB;;;;OAIG;IACI,MAAM,CAAC,oBAAoB,CAAC,MAAiB;QAClD,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE;YACvC,MAAM,EAAE,eAAe;YACvB,EAAE,EAAE,OAAO;YACX,eAAe,EAAE,KAAK;SACvB,CAA4B,CAAC;QAC9B,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5B,OAAO,SAAuB,CAAC;IACjC,CAAC;IAED,oFAAoF;IAC7E,MAAM,CAAC,YAAY,CACxB,QAAwB,EACxB,MAAc,EACd,QAA8C;QAE9C,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE;YAC9D,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,OAAO;gBACL,MAAM;gBACN,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;gBACpC,UAAU,EAAE,cAAc,CAAC,oBAAoB,CAAC,gBAAgB,CAAC;gBACjE,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC;gBAChC,WAAW,EAAE,UAAU,CAAC,UAAU;aACnC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,cAAc,CAC1B,OAAmB,EACnB,gBAA2B;QAE3B,MAAM,UAAU,GAAG,cAAc,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QACzE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CACrD,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAC5E,CAAC;YACF,OAAO;gBACL,MAAM;gBACN,MAAM,EAAE;oBACN,IAAI,EAAE,KAAK;oBACX,OAAO,EAAE,OAAO,CAAC,EAAE;oBACnB,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;iBACxD;gBACD,UAAU;gBACV,OAAO,EAAE;oBACP,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;iBACnF;gBACD,WAAW,EAAE,IAAI;aAClB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IACvF,MAAM,CAAC,cAAc,CAAC,OAAuB;QAClD,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC;YACjC,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;gBAC7D,UAAU,EAAE,cAAc,CAAC,oBAAoB,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBAC9E,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;gBACtB,WAAW,EAAE,IAAI;aAClB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,QAAQ,CAAC,OAAuC;QAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;gBACxB,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAClF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC;YAC5C,QAAQ,EAAE,wBAAwB;YAClC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACrE,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO;YACjB,MAAM,IAAI,mBAAmB,CAC3B,yBAAyB,EACzB,MAAM,CAAC,KAAK,CAAC,MAAM;iBAChB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;iBACvE,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;QACJ,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,0GAA0G;IACnG,MAAM,CAAC,MAAM,CAAC,QAAgC;QACnD,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,CAAC,QAAgC,CAAC,CAAC;QACpF,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAClF,CAAC;CACF"}

package/dist/plan/GovernedPlan.d.ts

@@ -0,0 +1,109 @@
+import { z } from "zod";
+import type { AgentProposal } from "../intent/ExecutionIntent.js";
+import { type JsonObject } from "../intent/JsonValue.js";
+import { type PlanStepReference } from "./PlanStepReference.js";
+/**
+ * A governed plan: one change carried out as several governed operations,
+ * each proposed, decided, granted, claimed and finalized on its own.
+ *
+ * The plan is a governance object, not an orchestrator. It names the steps,
+ * which step depends on which and how (the coupling), and what stays
+ * admissible once a step has failed. Registering it with the authority
+ * authorizes no step: the authority derives each step's plan facts from its
+ * own finalization records, and policy decides each step with those facts in
+ * front of it. ADR 0008 is the design.
+ */
+export declare const GOVERNED_PLAN_VERSION = "agent-safe.plan/1";
+/** What a predecessor's outcome means for the step that depends on it. */
+export declare const PLAN_COUPLINGS: readonly ["independent", "ordered", "all_or_escalate"];
+export declare const MAX_PLAN_STEPS = 32;
+export declare const MAX_PLAN_EDGES = 64;
+export declare const PlanStepSchema: z.ZodObject<{
+    step_id: z.ZodString;
+    action: z.ZodString;
+    target: z.ZodString;
+    parameters: z.ZodOptional<z.ZodType<JsonObject, unknown, z.core.$ZodTypeInternals<JsonObject, unknown>>>;
+    compensates: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export declare const PlanEdgeSchema: z.ZodObject<{
+    from: z.ZodString;
+    to: z.ZodString;
+    coupling: z.ZodEnum<{
+        independent: "independent";
+        ordered: "ordered";
+        all_or_escalate: "all_or_escalate";
+    }>;
+}, z.core.$strict>;
+/** What stays admissible once a step has FAILED. */
+export declare const PartialCommitRuleSchema: z.ZodObject<{
+    admissible: z.ZodArray<z.ZodString>;
+    otherwise: z.ZodEnum<{
+        ESCALATE: "ESCALATE";
+        BLOCK: "BLOCK";
+    }>;
+}, z.core.$strict>;
+export declare const GovernedPlanSchema: z.ZodObject<{
+    version: z.ZodLiteral<"agent-safe.plan/1">;
+    plan_id: z.ZodString;
+    tenant_id: z.ZodString;
+    steps: z.ZodArray<z.ZodObject<{
+        step_id: z.ZodString;
+        action: z.ZodString;
+        target: z.ZodString;
+        parameters: z.ZodOptional<z.ZodType<JsonObject, unknown, z.core.$ZodTypeInternals<JsonObject, unknown>>>;
+        compensates: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    edges: z.ZodArray<z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+        coupling: z.ZodEnum<{
+            independent: "independent";
+            ordered: "ordered";
+            all_or_escalate: "all_or_escalate";
+        }>;
+    }, z.core.$strict>>;
+    partial_commit: z.ZodObject<{
+        admissible: z.ZodArray<z.ZodString>;
+        otherwise: z.ZodEnum<{
+            ESCALATE: "ESCALATE";
+            BLOCK: "BLOCK";
+        }>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type PlanCoupling = (typeof PLAN_COUPLINGS)[number];
+export type PlanStep = z.infer<typeof PlanStepSchema>;
+export type PlanEdge = z.infer<typeof PlanEdgeSchema>;
+export type PartialCommitRule = z.infer<typeof PartialCommitRuleSchema>;
+export type GovernedPlan = z.infer<typeof GovernedPlanSchema>;
+/**
+ * The plan's digest: SHA-256 over its canonical JSON (sorted keys), the form
+ * every digest in the intent contract uses. The plan is parsed first, so two
+ * spellings of one plan that the schema accepts differ only where the plan
+ * itself differs.
+ */
+export declare function planDigest(plan: GovernedPlan): `sha256:${string}`;
+export type PlanStepMismatch = "PLAN_STEP_UNKNOWN" | "PLAN_STEP_ACTION_MISMATCH" | "PLAN_STEP_TARGET_OUT_OF_SCOPE" | "PLAN_STEP_PARAMETER_MISMATCH";
+export type PlanStepMatch = {
+    readonly ok: true;
+    readonly reference: PlanStepReference;
+} | {
+    readonly ok: false;
+    readonly code: PlanStepMismatch;
+};
+/** Whether a target is inside a step's scope: exact, or under a trailing-`*` prefix. */
+export declare function planTargetInScope(scope: string, target: string): boolean;
+/**
+ * Matches a proposal to one step of a plan and, when it fits, returns the
+ * reference the trusted executor stamps into the intent. A different action,
+ * a target outside the step's scope, or a parameter that differs from one the
+ * step pins is refused here, before anything is captured. The authority makes
+ * the same match itself; this one only fails fast.
+ */
+export declare function matchPlanStep(plan: GovernedPlan, stepId: string, proposal: AgentProposal): PlanStepMatch;
+/** The reason an action is outside a step, or null when it fits. */
+export declare function planStepMismatch(step: PlanStep, action: {
+    readonly action: string;
+    readonly target: string;
+    readonly parameters: JsonObject;
+}): Exclude<PlanStepMismatch, "PLAN_STEP_UNKNOWN"> | null;
+//# sourceMappingURL=GovernedPlan.d.ts.map

package/dist/plan/GovernedPlan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GovernedPlan.d.ts","sourceRoot":"","sources":["../../src/plan/GovernedPlan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAoB,KAAK,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAkC,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhG;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD,0EAA0E;AAC1E,eAAO,MAAM,cAAc,wDAAyD,CAAC;AAErF,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,eAAO,MAAM,cAAc,KAAK,CAAC;AAiBjC,eAAO,MAAM,cAAc;;;;;;kBAUhB,CAAC;AAEZ,eAAO,MAAM,cAAc;;;;;;;;kBAMhB,CAAC;AAEZ,oDAAoD;AACpD,eAAO,MAAM,uBAAuB;;;;;;kBAKzB,CAAC;AAEZ,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAa3B,CAAC;AAEL,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAyD9D;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,GAAG,UAAU,MAAM,EAAE,CAIjE;AAED,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,2BAA2B,GAC3B,+BAA+B,GAC/B,8BAA8B,CAAC;AAEnC,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAE5D,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAExE;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,aAAa,GACtB,aAAa,CAaf;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,QAAQ,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAC5F,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,IAAI,CAavD"}

package/dist/plan/GovernedPlan.js

@@ -0,0 +1,187 @@
+import { createHash } from "node:crypto";
+import { z } from "zod";
+import { CanonicalIntentHasher } from "../intent/CanonicalIntentHasher.js";
+import { JsonObjectSchema } from "../intent/JsonValue.js";
+import { PlanIdSchema, PlanStepIdSchema } from "./PlanStepReference.js";
+/**
+ * A governed plan: one change carried out as several governed operations,
+ * each proposed, decided, granted, claimed and finalized on its own.
+ *
+ * The plan is a governance object, not an orchestrator. It names the steps,
+ * which step depends on which and how (the coupling), and what stays
+ * admissible once a step has failed. Registering it with the authority
+ * authorizes no step: the authority derives each step's plan facts from its
+ * own finalization records, and policy decides each step with those facts in
+ * front of it. ADR 0008 is the design.
+ */
+export const GOVERNED_PLAN_VERSION = "agent-safe.plan/1";
+/** What a predecessor's outcome means for the step that depends on it. */
+export const PLAN_COUPLINGS = ["independent", "ordered", "all_or_escalate"];
+export const MAX_PLAN_STEPS = 32;
+export const MAX_PLAN_EDGES = 64;
+const MAX_COMPENSATED_STEPS = 8;
+const actionName = z
+    .string()
+    .min(1)
+    .max(120)
+    .regex(/^[a-z][a-z0-9._:-]*$/);
+/** An exact target, or a prefix followed by one trailing `*`. */
+const targetScope = z
+    .string()
+    .min(1)
+    .max(500)
+    .refine((value) => !value.slice(0, -1).includes("*") && value !== "*", {
+    message: "PLAN_TARGET_SCOPE_INVALID",
+});
+export const PlanStepSchema = z
+    .object({
+    step_id: PlanStepIdSchema,
+    action: actionName,
+    target: targetScope,
+    /** Parameters the step pins: each must equal the proposal's, canonically. */
+    parameters: JsonObjectSchema.optional(),
+    /** Present only on a compensation step: the steps whose failure it may follow. */
+    compensates: z.array(PlanStepIdSchema).min(1).max(MAX_COMPENSATED_STEPS).optional(),
+})
+    .strict();
+export const PlanEdgeSchema = z
+    .object({
+    from: PlanStepIdSchema,
+    to: PlanStepIdSchema,
+    coupling: z.enum(PLAN_COUPLINGS),
+})
+    .strict();
+/** What stays admissible once a step has FAILED. */
+export const PartialCommitRuleSchema = z
+    .object({
+    admissible: z.array(PlanStepIdSchema).max(MAX_PLAN_STEPS),
+    otherwise: z.enum(["ESCALATE", "BLOCK"]),
+})
+    .strict();
+export const GovernedPlanSchema = z
+    .object({
+    version: z.literal(GOVERNED_PLAN_VERSION),
+    plan_id: PlanIdSchema,
+    tenant_id: z.string().uuid(),
+    steps: z.array(PlanStepSchema).min(1).max(MAX_PLAN_STEPS),
+    edges: z.array(PlanEdgeSchema).max(MAX_PLAN_EDGES),
+    partial_commit: PartialCommitRuleSchema,
+})
+    .strict()
+    .superRefine((plan, issues) => {
+    const problem = planStructureProblem(plan);
+    if (problem !== null)
+        issues.addIssue({ code: "custom", message: problem });
+});
+/**
+ * The first structural problem with a plan, or null. The checks are the ones
+ * a dependency graph needs to mean anything: every edge joins two known,
+ * distinct steps once; there is no cycle; and a compensation step stands
+ * outside the graph, compensating ordinary steps only.
+ */
+function planStructureProblem(plan) {
+    const steps = new Map();
+    for (const step of plan.steps) {
+        if (steps.has(step.step_id))
+            return "PLAN_STEP_DUPLICATE";
+        steps.set(step.step_id, step);
+    }
+    const isCompensation = (id) => steps.get(id)?.compensates !== undefined;
+    for (const step of plan.steps) {
+        for (const compensated of step.compensates ?? []) {
+            if (!steps.has(compensated) || isCompensation(compensated)) {
+                return "PLAN_COMPENSATION_INVALID";
+            }
+        }
+    }
+    const seen = new Set();
+    const successors = new Map();
+    for (const edge of plan.edges) {
+        if (!steps.has(edge.from) || !steps.has(edge.to))
+            return "PLAN_EDGE_UNKNOWN_STEP";
+        if (edge.from === edge.to)
+            return "PLAN_EDGE_SELF";
+        if (isCompensation(edge.from) || isCompensation(edge.to))
+            return "PLAN_COMPENSATION_INVALID";
+        const key = `${edge.from}\n${edge.to}`;
+        if (seen.has(key))
+            return "PLAN_EDGE_DUPLICATE";
+        seen.add(key);
+        successors.set(edge.from, [...(successors.get(edge.from) ?? []), edge.to]);
+    }
+    for (const id of plan.partial_commit.admissible) {
+        if (!steps.has(id) || isCompensation(id))
+            return "PLAN_PARTIAL_UNKNOWN_STEP";
+    }
+    // Kahn's algorithm: a graph with a cycle leaves steps no order can reach.
+    const indegree = new Map([...steps.keys()].map((id) => [id, 0]));
+    for (const edge of plan.edges)
+        indegree.set(edge.to, (indegree.get(edge.to) ?? 0) + 1);
+    const ready = [...indegree].filter(([, count]) => count === 0).map(([id]) => id);
+    let ordered = 0;
+    while (ready.length > 0) {
+        const id = ready.pop();
+        ordered += 1;
+        for (const next of successors.get(id) ?? []) {
+            const remaining = (indegree.get(next) ?? 0) - 1;
+            indegree.set(next, remaining);
+            if (remaining === 0)
+                ready.push(next);
+        }
+    }
+    return ordered === steps.size ? null : "PLAN_CYCLE";
+}
+/**
+ * The plan's digest: SHA-256 over its canonical JSON (sorted keys), the form
+ * every digest in the intent contract uses. The plan is parsed first, so two
+ * spellings of one plan that the schema accepts differ only where the plan
+ * itself differs.
+ */
+export function planDigest(plan) {
+    const parsed = GovernedPlanSchema.parse(plan);
+    const canonical = CanonicalIntentHasher.stringify(parsed);
+    return `sha256:${createHash("sha256").update(canonical, "utf8").digest("hex")}`;
+}
+/** Whether a target is inside a step's scope: exact, or under a trailing-`*` prefix. */
+export function planTargetInScope(scope, target) {
+    return scope.endsWith("*") ? target.startsWith(scope.slice(0, -1)) : target === scope;
+}
+/**
+ * Matches a proposal to one step of a plan and, when it fits, returns the
+ * reference the trusted executor stamps into the intent. A different action,
+ * a target outside the step's scope, or a parameter that differs from one the
+ * step pins is refused here, before anything is captured. The authority makes
+ * the same match itself; this one only fails fast.
+ */
+export function matchPlanStep(plan, stepId, proposal) {
+    const step = plan.steps.find((candidate) => candidate.step_id === stepId);
+    if (step === undefined)
+        return { ok: false, code: "PLAN_STEP_UNKNOWN" };
+    const mismatch = planStepMismatch(step, {
+        action: proposal.action,
+        target: proposal.target,
+        parameters: proposal.parameters,
+    });
+    if (mismatch !== null)
+        return { ok: false, code: mismatch };
+    return {
+        ok: true,
+        reference: { plan_id: plan.plan_id, plan_digest: planDigest(plan), step_id: step.step_id },
+    };
+}
+/** The reason an action is outside a step, or null when it fits. */
+export function planStepMismatch(step, action) {
+    if (action.action !== step.action)
+        return "PLAN_STEP_ACTION_MISMATCH";
+    if (!planTargetInScope(step.target, action.target))
+        return "PLAN_STEP_TARGET_OUT_OF_SCOPE";
+    for (const [name, pinned] of Object.entries(step.parameters ?? {})) {
+        const proposed = action.parameters[name];
+        if (proposed === undefined ||
+            CanonicalIntentHasher.stringify(proposed) !== CanonicalIntentHasher.stringify(pinned)) {
+            return "PLAN_STEP_PARAMETER_MISMATCH";
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=GovernedPlan.js.map

package/dist/plan/GovernedPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GovernedPlan.js","sourceRoot":"","sources":["../../src/plan/GovernedPlan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,EAAE,gBAAgB,EAAmC,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA0B,MAAM,wBAAwB,CAAC;AAEhG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,iBAAiB,CAAU,CAAC;AAErF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AACjC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AACjC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,sBAAsB,CAAC,CAAC;AACjC,iEAAiE;AACjE,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG,EAAE;IACrE,OAAO,EAAE,2BAA2B;CACrC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,OAAO,EAAE,gBAAgB;IACzB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,WAAW;IACnB,6EAA6E;IAC7E,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,kFAAkF;IAClF,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CACpF,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,gBAAgB;IACpB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,oDAAoD;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACzC,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IACzD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAClD,cAAc,EAAE,uBAAuB;CACxC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;IAC5B,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC;AAQL;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,IAI7B;IACC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,qBAAqB,CAAC;QAC1D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,EAAU,EAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,WAAW,KAAK,SAAS,CAAC;IACzF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3D,OAAO,2BAA2B,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,wBAAwB,CAAC;QAClF,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE;YAAE,OAAO,gBAAgB,CAAC;QACnD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,2BAA2B,CAAC;QAC7F,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,qBAAqB,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,CAAC;YAAE,OAAO,2BAA2B,CAAC;IAC/E,CAAC;IACD,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;QAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAY,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAChD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC9B,IAAI,SAAS,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAkB;IAC3C,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAA8B,CAAC,CAAC;IAClF,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAClF,CAAC;AAYD,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,MAAc;IAC7D,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;AACxF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAkB,EAClB,MAAc,EACd,QAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAC1E,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE;QACtC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5D,OAAO;QACL,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;KAC3F,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAC9B,IAAc,EACd,MAA6F;IAE7F,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,2BAA2B,CAAC;IACtE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,+BAA+B,CAAC;IAC3F,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,IACE,QAAQ,KAAK,SAAS;YACtB,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,EACrF,CAAC;YACD,OAAO,8BAA8B,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}