@framers/agentos 0.1.6 → 0.1.7

package/dist/core/provenance/enforcement/TombstoneManager.js

@@ -0,0 +1,121 @@
+/**
+ * @file TombstoneManager.ts
+ * @description Manages soft-deletion via tombstone records.
+ * In revisioned/sealed modes, DELETE operations are converted to tombstones.
+ *
+ * @module AgentOS/Provenance/Enforcement
+ */
+import { v4 as uuidv4 } from 'uuid';
+// =============================================================================
+// TombstoneManager
+// =============================================================================
+export class TombstoneManager {
+    constructor(storageAdapter, ledger = null, tablePrefix = '') {
+        this.storageAdapter = storageAdapter;
+        this.ledger = ledger;
+        this.tablePrefix = tablePrefix;
+    }
+    /**
+     * Create a tombstone for records about to be deleted.
+     * Call this INSTEAD of executing the DELETE.
+     *
+     * @param tableName - The table the records belong to.
+     * @param whereClause - The WHERE clause from the DELETE statement.
+     * @param parameters - Parameters for the WHERE clause.
+     * @param reason - Reason for deletion.
+     * @param initiator - Who initiated the deletion (agent ID or 'human').
+     */
+    async createTombstone(tableName, whereClause, parameters = [], reason = 'deleted', initiator = 'system') {
+        // Fetch the records that would be deleted
+        const rows = await this.storageAdapter.all(`SELECT * FROM ${tableName} WHERE ${whereClause}`, parameters);
+        const tombstones = [];
+        for (const row of rows) {
+            const recordId = String(row.id ?? row.Id ?? row.ID ?? JSON.stringify(row));
+            const timestamp = new Date().toISOString();
+            const id = uuidv4();
+            // Check if already tombstoned
+            const existing = await this.storageAdapter.get(`SELECT id FROM ${this.tablePrefix}tombstones WHERE table_name = ? AND record_id = ?`, [tableName, recordId]);
+            if (existing) {
+                // Already tombstoned, skip
+                continue;
+            }
+            // Log to signed event ledger
+            let eventId = id; // fallback
+            if (this.ledger) {
+                const eventType = tableName.includes('message')
+                    ? 'message.tombstoned'
+                    : tableName.includes('conversation')
+                        ? 'conversation.tombstoned'
+                        : 'memory.tombstoned';
+                const event = await this.ledger.appendEvent(eventType, {
+                    tableName,
+                    recordId,
+                    reason,
+                    initiator,
+                });
+                eventId = event.id;
+            }
+            // Insert tombstone record
+            await this.storageAdapter.run(`INSERT INTO ${this.tablePrefix}tombstones
+         (id, table_name, record_id, reason, event_id, initiator, timestamp)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`, [id, tableName, recordId, reason, eventId, initiator, timestamp]);
+            tombstones.push({
+                id,
+                tableName,
+                recordId,
+                reason,
+                eventId,
+                initiator,
+                timestamp,
+            });
+        }
+        return tombstones;
+    }
+    /**
+     * Check if a record has been tombstoned.
+     */
+    async isTombstoned(tableName, recordId) {
+        const row = await this.storageAdapter.get(`SELECT id FROM ${this.tablePrefix}tombstones WHERE table_name = ? AND record_id = ?`, [tableName, recordId]);
+        return row !== null;
+    }
+    /**
+     * Get the tombstone record for a specific record.
+     */
+    async getTombstone(tableName, recordId) {
+        const row = await this.storageAdapter.get(`SELECT * FROM ${this.tablePrefix}tombstones WHERE table_name = ? AND record_id = ?`, [tableName, recordId]);
+        if (!row)
+            return null;
+        return {
+            id: row.id,
+            tableName: row.table_name,
+            recordId: row.record_id,
+            reason: row.reason,
+            eventId: row.event_id,
+            initiator: row.initiator,
+            timestamp: row.timestamp,
+        };
+    }
+    /**
+     * Get all tombstones for a table.
+     */
+    async getTombstones(tableName) {
+        let sql = `SELECT * FROM ${this.tablePrefix}tombstones`;
+        const params = [];
+        if (tableName) {
+            sql += ' WHERE table_name = ?';
+            params.push(tableName);
+        }
+        sql += ' ORDER BY timestamp DESC';
+        const rows = await this.storageAdapter.all(sql, params);
+        return rows.map(row => ({
+            id: row.id,
+            tableName: row.table_name,
+            recordId: row.record_id,
+            reason: row.reason,
+            eventId: row.event_id,
+            initiator: row.initiator,
+            timestamp: row.timestamp,
+        }));
+    }
+}
+//# sourceMappingURL=TombstoneManager.js.map

package/dist/core/provenance/enforcement/TombstoneManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TombstoneManager.js","sourceRoot":"","sources":["../../../../src/core/provenance/enforcement/TombstoneManager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAcpC,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,MAAM,OAAO,gBAAgB;IAK3B,YACE,cAAuC,EACvC,SAAmC,IAAI,EACvC,cAAsB,EAAE;QAExB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,WAAmB,EACnB,aAAwB,EAAE,EAC1B,SAAiB,SAAS,EAC1B,YAAoB,QAAQ;QAE5B,0CAA0C;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CACxC,iBAAiB,SAAS,UAAU,WAAW,EAAE,EACjD,UAAU,CACX,CAAC;QAEF,MAAM,UAAU,GAAsB,EAAE,CAAC;QAEzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3E,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;YAEpB,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAC5C,kBAAkB,IAAI,CAAC,WAAW,mDAAmD,EACrF,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;YAEF,IAAI,QAAQ,EAAE,CAAC;gBACb,2BAA2B;gBAC3B,SAAS;YACX,CAAC;YAED,6BAA6B;YAC7B,IAAI,OAAO,GAAG,EAAE,CAAC,CAAC,WAAW;YAC7B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAC7C,CAAC,CAAC,oBAA6B;oBAC/B,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC;wBAClC,CAAC,CAAC,yBAAkC;wBACpC,CAAC,CAAC,mBAA4B,CAAC;gBAEnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE;oBACrD,SAAS;oBACT,QAAQ;oBACR,MAAM;oBACN,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;YACrB,CAAC;YAED,0BAA0B;YAC1B,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAC3B,eAAe,IAAI,CAAC,WAAW;;sCAED,EAC9B,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CACjE,CAAC;YAEF,UAAU,CAAC,IAAI,CAAC;gBACd,EAAE;gBACF,SAAS;gBACT,QAAQ;gBACR,MAAM;gBACN,OAAO;gBACP,SAAS;gBACT,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,QAAgB;QACpD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CACvC,kBAAkB,IAAI,CAAC,WAAW,mDAAmD,EACrF,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;QACF,OAAO,GAAG,KAAK,IAAI,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,QAAgB;QACpD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CACvC,iBAAiB,IAAI,CAAC,WAAW,mDAAmD,EACpF,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;QAEF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,SAAkB;QACpC,IAAI,GAAG,GAAG,iBAAiB,IAAI,CAAC,WAAW,YAAY,CAAC;QACxD,MAAM,MAAM,GAAc,EAAE,CAAC;QAE7B,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,IAAI,uBAAuB,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;QAED,GAAG,IAAI,0BAA0B,CAAC;QAElC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAM,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;CACF"}

package/dist/core/provenance/index.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @file index.ts
+ * @description Public API for the AgentOS Provenance System.
+ * Re-exports all types, classes, and utilities for external consumption.
+ *
+ * Built-in anchor providers: {@link NoneProvider}, {@link CompositeAnchorProvider}.
+ *
+ * External anchor providers (Rekor, Ethereum, Solana, OpenTimestamps, WORM) are in the
+ * `@framers/agentos-ext-anchor-providers` extension package.
+ * See: https://github.com/framersai/agentos-extensions/tree/master/registry/curated/provenance/anchor-providers
+ *
+ * @module AgentOS/Provenance
+ */
+export type { StoragePolicyMode, StoragePolicyConfig, ProvenanceConfig, AgentKeySource, AnchorTarget, AutonomyConfig, ProvenanceSystemConfig, ProvenanceEventType, SignedEvent, AnchorRecord, RevisionRecord, TombstoneRecord, AgentKeyRecord, VerificationResult, VerificationError, VerificationBundle, ProofLevel, AnchorProviderResult, AnchorProvider, } from './types.js';
+export { ProvenanceViolationError } from './types.js';
+export { AgentKeyManager } from './crypto/AgentKeyManager.js';
+export { HashChain } from './crypto/HashChain.js';
+export { MerkleTree } from './crypto/MerkleTree.js';
+export { profiles } from './config/PolicyProfiles.js';
+export { getProvenanceSchema, getProvenanceDropSchema } from './schema/provenance-schema.js';
+export { SignedEventLedger } from './ledger/SignedEventLedger.js';
+export { createProvenanceHooks } from './enforcement/ProvenanceStorageHooks.js';
+export { RevisionManager } from './enforcement/RevisionManager.js';
+export { TombstoneManager } from './enforcement/TombstoneManager.js';
+export { AutonomyGuard } from './enforcement/AutonomyGuard.js';
+export { ChainVerifier } from './verification/ChainVerifier.js';
+export { ConversationVerifier } from './verification/ConversationVerifier.js';
+export type { ConversationVerificationResult } from './verification/ConversationVerifier.js';
+export { BundleExporter } from './verification/BundleExporter.js';
+export { AnchorManager } from './anchoring/AnchorManager.js';
+export { NoneProvider } from './anchoring/providers/NoneProvider.js';
+export { CompositeAnchorProvider } from './anchoring/providers/CompositeAnchorProvider.js';
+export { createAnchorProvider, registerAnchorProviderFactory } from './anchoring/providers/createAnchorProvider.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/provenance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/provenance/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,mBAAmB,EACnB,WAAW,EACX,YAAY,EACZ,cAAc,EACd,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,oBAAoB,EACpB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAGtD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAGtD,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAG7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAGlE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAG/D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,YAAY,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAGlE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC"}

package/dist/core/provenance/index.js

@@ -0,0 +1,39 @@
+/**
+ * @file index.ts
+ * @description Public API for the AgentOS Provenance System.
+ * Re-exports all types, classes, and utilities for external consumption.
+ *
+ * Built-in anchor providers: {@link NoneProvider}, {@link CompositeAnchorProvider}.
+ *
+ * External anchor providers (Rekor, Ethereum, Solana, OpenTimestamps, WORM) are in the
+ * `@framers/agentos-ext-anchor-providers` extension package.
+ * See: https://github.com/framersai/agentos-extensions/tree/master/registry/curated/provenance/anchor-providers
+ *
+ * @module AgentOS/Provenance
+ */
+export { ProvenanceViolationError } from './types.js';
+// Crypto
+export { AgentKeyManager } from './crypto/AgentKeyManager.js';
+export { HashChain } from './crypto/HashChain.js';
+export { MerkleTree } from './crypto/MerkleTree.js';
+// Config / Profiles
+export { profiles } from './config/PolicyProfiles.js';
+// Schema
+export { getProvenanceSchema, getProvenanceDropSchema } from './schema/provenance-schema.js';
+// Ledger
+export { SignedEventLedger } from './ledger/SignedEventLedger.js';
+// Enforcement
+export { createProvenanceHooks } from './enforcement/ProvenanceStorageHooks.js';
+export { RevisionManager } from './enforcement/RevisionManager.js';
+export { TombstoneManager } from './enforcement/TombstoneManager.js';
+export { AutonomyGuard } from './enforcement/AutonomyGuard.js';
+// Verification
+export { ChainVerifier } from './verification/ChainVerifier.js';
+export { ConversationVerifier } from './verification/ConversationVerifier.js';
+export { BundleExporter } from './verification/BundleExporter.js';
+// Anchoring
+export { AnchorManager } from './anchoring/AnchorManager.js';
+export { NoneProvider } from './anchoring/providers/NoneProvider.js';
+export { CompositeAnchorProvider } from './anchoring/providers/CompositeAnchorProvider.js';
+export { createAnchorProvider, registerAnchorProviderFactory } from './anchoring/providers/createAnchorProvider.js';
+//# sourceMappingURL=index.js.map

package/dist/core/provenance/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/provenance/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAwBH,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEtD,SAAS;AACT,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,oBAAoB;AACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAEtD,SAAS;AACT,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAE7F,SAAS;AACT,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,cAAc;AACd,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,eAAe;AACf,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAElE,YAAY;AACZ,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC"}

package/dist/core/provenance/ledger/EventTypes.d.ts

@@ -0,0 +1,123 @@
+/**
+ * @file EventTypes.ts
+ * @description Typed event payload definitions for each ProvenanceEventType.
+ * Provides helper functions for constructing well-typed event payloads.
+ *
+ * @module AgentOS/Provenance/Ledger
+ */
+export interface GenesisPayload {
+    agentId: string;
+    seedPromptHash?: string;
+    policySnapshot: Record<string, unknown>;
+    publicKey: string;
+}
+export interface MessageCreatedPayload {
+    conversationId: string;
+    messageId: string;
+    role: string;
+    contentHash: string;
+    timestamp: number;
+}
+export interface MessageRevisedPayload {
+    conversationId: string;
+    messageId: string;
+    revisionNumber: number;
+    previousContentHash: string;
+    newContentHash: string;
+}
+export interface MessageTombstonedPayload {
+    conversationId: string;
+    messageId: string;
+    reason: string;
+    initiator: string;
+}
+export interface ConversationCreatedPayload {
+    conversationId: string;
+    userId?: string;
+    gmiInstanceId?: string;
+}
+export interface ConversationArchivedPayload {
+    conversationId: string;
+}
+export interface ConversationTombstonedPayload {
+    conversationId: string;
+    reason: string;
+    initiator: string;
+}
+export interface ToolInvokedPayload {
+    conversationId?: string;
+    toolId: string;
+    toolName: string;
+    inputHash: string;
+}
+export interface ToolResultPayload {
+    conversationId?: string;
+    toolId: string;
+    toolName: string;
+    resultHash: string;
+    success: boolean;
+}
+export interface MemoryStoredPayload {
+    collectionId: string;
+    documentId: string;
+    contentHash: string;
+    category?: string;
+}
+export interface MemoryRevisedPayload {
+    collectionId: string;
+    documentId: string;
+    revisionNumber: number;
+    previousContentHash: string;
+    newContentHash: string;
+}
+export interface MemoryTombstonedPayload {
+    collectionId: string;
+    documentId: string;
+    reason: string;
+    initiator: string;
+}
+export interface ConfigChangedPayload {
+    changedField: string;
+    previousValueHash?: string;
+    newValueHash: string;
+}
+export interface HumanInterventionPayload {
+    interventionType: 'approval' | 'clarification' | 'edit' | 'escalation' | 'checkpoint' | 'pause' | 'stop';
+    requestId?: string;
+    decision?: string;
+    details?: Record<string, unknown>;
+}
+export interface AnchorCreatedPayload {
+    anchorId: string;
+    merkleRoot: string;
+    fromSequence: number;
+    toSequence: number;
+    eventCount: number;
+    externalRef?: string;
+}
+export interface GuardrailTriggeredPayload {
+    guardrailId?: string;
+    action: 'allow' | 'flag' | 'sanitize' | 'block';
+    reason?: string;
+    reasonCode?: string;
+    direction: 'input' | 'output';
+}
+export interface ProvenancePayloadMap {
+    genesis: GenesisPayload;
+    'message.created': MessageCreatedPayload;
+    'message.revised': MessageRevisedPayload;
+    'message.tombstoned': MessageTombstonedPayload;
+    'conversation.created': ConversationCreatedPayload;
+    'conversation.archived': ConversationArchivedPayload;
+    'conversation.tombstoned': ConversationTombstonedPayload;
+    'tool.invoked': ToolInvokedPayload;
+    'tool.result': ToolResultPayload;
+    'memory.stored': MemoryStoredPayload;
+    'memory.revised': MemoryRevisedPayload;
+    'memory.tombstoned': MemoryTombstonedPayload;
+    'config.changed': ConfigChangedPayload;
+    'human.intervention': HumanInterventionPayload;
+    'anchor.created': AnchorCreatedPayload;
+    'guardrail.triggered': GuardrailTriggeredPayload;
+}
+//# sourceMappingURL=EventTypes.d.ts.map

package/dist/core/provenance/ledger/EventTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EventTypes.d.ts","sourceRoot":"","sources":["../../../../src/core/provenance/ledger/EventTypes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,6BAA6B;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,EAAE,UAAU,GAAG,eAAe,GAAG,MAAM,GAAG,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC;IACzG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC/B;AAMD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,oBAAoB,EAAE,wBAAwB,CAAC;IAC/C,sBAAsB,EAAE,0BAA0B,CAAC;IACnD,uBAAuB,EAAE,2BAA2B,CAAC;IACrD,yBAAyB,EAAE,6BAA6B,CAAC;IACzD,cAAc,EAAE,kBAAkB,CAAC;IACnC,aAAa,EAAE,iBAAiB,CAAC;IACjC,eAAe,EAAE,mBAAmB,CAAC;IACrC,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,mBAAmB,EAAE,uBAAuB,CAAC;IAC7C,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,oBAAoB,EAAE,wBAAwB,CAAC;IAC/C,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,qBAAqB,EAAE,yBAAyB,CAAC;CAClD"}

package/dist/core/provenance/ledger/EventTypes.js

@@ -0,0 +1,9 @@
+/**
+ * @file EventTypes.ts
+ * @description Typed event payload definitions for each ProvenanceEventType.
+ * Provides helper functions for constructing well-typed event payloads.
+ *
+ * @module AgentOS/Provenance/Ledger
+ */
+export {};
+//# sourceMappingURL=EventTypes.js.map

package/dist/core/provenance/ledger/EventTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EventTypes.js","sourceRoot":"","sources":["../../../../src/core/provenance/ledger/EventTypes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/core/provenance/ledger/SignedEventLedger.d.ts

@@ -0,0 +1,75 @@
+/**
+ * @file SignedEventLedger.ts
+ * @description Core append-only signed event log with hash chain and Ed25519 signatures.
+ * All events are sequenced, hashed, and signed to create a tamper-evident chain.
+ *
+ * @module AgentOS/Provenance/Ledger
+ */
+import type { SignedEvent, ProvenanceEventType, ProvenanceConfig } from '../types.js';
+import { AgentKeyManager } from '../crypto/AgentKeyManager.js';
+interface LedgerStorageAdapter {
+    run(statement: string, parameters?: unknown[]): Promise<{
+        changes: number;
+    }>;
+    all<T = unknown>(statement: string, parameters?: unknown[]): Promise<T[]>;
+    get<T = unknown>(statement: string, parameters?: unknown[]): Promise<T | null>;
+}
+export declare class SignedEventLedger {
+    private readonly storageAdapter;
+    private readonly keyManager;
+    private readonly agentId;
+    private readonly config;
+    private readonly tablePrefix;
+    private chain;
+    private isInitialized;
+    private appendQueue;
+    constructor(storageAdapter: LedgerStorageAdapter, keyManager: AgentKeyManager, agentId: string, config: ProvenanceConfig, tablePrefix?: string);
+    /**
+     * Initialize the ledger: load the last sequence number and hash from the DB.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Append a new event to the ledger.
+     * Serialized via internal queue to maintain hash chain integrity.
+     */
+    appendEvent(type: ProvenanceEventType, payload: Record<string, unknown>): Promise<SignedEvent>;
+    private doAppend;
+    /**
+     * Get a single event by ID.
+     */
+    getEvent(id: string): Promise<SignedEvent | null>;
+    /**
+     * Get events in a sequence range (inclusive).
+     */
+    getEventsByRange(fromSequence: number, toSequence: number): Promise<SignedEvent[]>;
+    /**
+     * Get events by type.
+     */
+    getEventsByType(type: ProvenanceEventType): Promise<SignedEvent[]>;
+    /**
+     * Get events matching a payload filter (searches JSON payload).
+     */
+    getEventsByPayloadFilter(filter: Record<string, unknown>, types?: ProvenanceEventType[]): Promise<SignedEvent[]>;
+    /**
+     * Get the latest event.
+     */
+    getLatestEvent(): Promise<SignedEvent | null>;
+    /**
+     * Get the total number of events for this agent.
+     */
+    getEventCount(): Promise<number>;
+    /**
+     * Get all events for this agent (ordered by sequence).
+     */
+    getAllEvents(): Promise<SignedEvent[]>;
+    /**
+     * Get the current chain state (for diagnostics).
+     */
+    getChainState(): {
+        lastHash: string;
+        sequence: number;
+    };
+    private rowToEvent;
+}
+export {};
+//# sourceMappingURL=SignedEventLedger.d.ts.map

package/dist/core/provenance/ledger/SignedEventLedger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedEventLedger.d.ts","sourceRoot":"","sources":["../../../../src/core/provenance/ledger/SignedEventLedger.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EACV,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAO/D,UAAU,oBAAoB;IAC5B,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;CAChF;AAMD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAuB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,KAAK,CAAY;IACzB,OAAO,CAAC,aAAa,CAAkB;IAGvC,OAAO,CAAC,WAAW,CAAoC;gBAGrD,cAAc,EAAE,oBAAoB,EACpC,UAAU,EAAE,eAAe,EAC3B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,gBAAgB,EACxB,WAAW,GAAE,MAAW;IAU1B;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAoBjC;;;OAGG;IACG,WAAW,CACf,IAAI,EAAE,mBAAmB,EACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,WAAW,CAAC;YAiBT,QAAQ;IAgEtB;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQvD;;OAEG;IACG,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAUxF;;OAEG;IACG,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAUxE;;OAEG;IACG,wBAAwB,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,CAAC,EAAE,mBAAmB,EAAE,GAC5B,OAAO,CAAC,WAAW,EAAE,CAAC;IAyBzB;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAUnD;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAQtC;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAU5C;;OAEG;IACH,aAAa,IAAI;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;IAWvD,OAAO,CAAC,UAAU;CAgBnB"}

package/dist/core/provenance/ledger/SignedEventLedger.js

@@ -0,0 +1,210 @@
+/**
+ * @file SignedEventLedger.ts
+ * @description Core append-only signed event log with hash chain and Ed25519 signatures.
+ * All events are sequenced, hashed, and signed to create a tamper-evident chain.
+ *
+ * @module AgentOS/Provenance/Ledger
+ */
+import { v4 as uuidv4 } from 'uuid';
+import { HashChain } from '../crypto/HashChain.js';
+// =============================================================================
+// SignedEventLedger
+// =============================================================================
+export class SignedEventLedger {
+    constructor(storageAdapter, keyManager, agentId, config, tablePrefix = '') {
+        this.isInitialized = false;
+        // Mutex for serialized appends (hash chain requires sequential writes)
+        this.appendQueue = Promise.resolve();
+        this.storageAdapter = storageAdapter;
+        this.keyManager = keyManager;
+        this.agentId = agentId;
+        this.config = config;
+        this.tablePrefix = tablePrefix;
+        this.chain = new HashChain();
+    }
+    /**
+     * Initialize the ledger: load the last sequence number and hash from the DB.
+     */
+    async initialize() {
+        const lastEvent = await this.storageAdapter.get(`SELECT sequence, hash FROM ${this.tablePrefix}signed_events
+       WHERE agent_id = ?
+       ORDER BY sequence DESC LIMIT 1`, [this.agentId]);
+        if (lastEvent) {
+            this.chain = new HashChain(lastEvent.hash, lastEvent.sequence);
+        }
+        else {
+            this.chain = new HashChain('', 0);
+        }
+        this.isInitialized = true;
+    }
+    /**
+     * Append a new event to the ledger.
+     * Serialized via internal queue to maintain hash chain integrity.
+     */
+    async appendEvent(type, payload) {
+        if (!this.isInitialized) {
+            throw new Error('SignedEventLedger: not initialized. Call initialize() first.');
+        }
+        return new Promise((resolve, reject) => {
+            this.appendQueue = this.appendQueue.then(async () => {
+                try {
+                    const event = await this.doAppend(type, payload);
+                    resolve(event);
+                }
+                catch (e) {
+                    reject(e);
+                }
+            });
+        });
+    }
+    async doAppend(type, payload) {
+        const { sequence, prevHash } = this.chain.advance();
+        const timestamp = new Date().toISOString();
+        const id = uuidv4();
+        // Compute payload hash
+        const payloadHash = HashChain.computePayloadHash(payload, this.config.hashAlgorithm);
+        // Compute event hash
+        const hash = HashChain.computeEventHash({ sequence, type, timestamp, agentId: this.agentId, prevHash, payloadHash }, this.config.hashAlgorithm);
+        // Sign the hash
+        let signature = '';
+        if (this.config.signatureMode === 'every-event') {
+            signature = await this.keyManager.sign(hash);
+        }
+        const event = {
+            id,
+            type,
+            timestamp,
+            sequence,
+            agentId: this.agentId,
+            prevHash,
+            hash,
+            payloadHash,
+            payload,
+            signature,
+            signerPublicKey: this.keyManager.getPublicKeyBase64(),
+        };
+        // Persist to database
+        await this.storageAdapter.run(`INSERT INTO ${this.tablePrefix}signed_events
+       (id, type, timestamp, sequence, agent_id, prev_hash, hash, payload_hash, payload, signature, signer_public_key, anchor_id)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+            event.id,
+            event.type,
+            event.timestamp,
+            event.sequence,
+            event.agentId,
+            event.prevHash,
+            event.hash,
+            event.payloadHash,
+            JSON.stringify(event.payload),
+            event.signature,
+            event.signerPublicKey,
+            event.anchorId ?? null,
+        ]);
+        // Update chain state
+        this.chain.recordHash(hash);
+        return event;
+    }
+    /**
+     * Get a single event by ID.
+     */
+    async getEvent(id) {
+        const row = await this.storageAdapter.get(`SELECT * FROM ${this.tablePrefix}signed_events WHERE id = ?`, [id]);
+        return row ? this.rowToEvent(row) : null;
+    }
+    /**
+     * Get events in a sequence range (inclusive).
+     */
+    async getEventsByRange(fromSequence, toSequence) {
+        const rows = await this.storageAdapter.all(`SELECT * FROM ${this.tablePrefix}signed_events
+       WHERE agent_id = ? AND sequence >= ? AND sequence <= ?
+       ORDER BY sequence ASC`, [this.agentId, fromSequence, toSequence]);
+        return rows.map(r => this.rowToEvent(r));
+    }
+    /**
+     * Get events by type.
+     */
+    async getEventsByType(type) {
+        const rows = await this.storageAdapter.all(`SELECT * FROM ${this.tablePrefix}signed_events
+       WHERE agent_id = ? AND type = ?
+       ORDER BY sequence ASC`, [this.agentId, type]);
+        return rows.map(r => this.rowToEvent(r));
+    }
+    /**
+     * Get events matching a payload filter (searches JSON payload).
+     */
+    async getEventsByPayloadFilter(filter, types) {
+        // Get all events (optionally filtered by type) and apply payload filter in memory
+        let sql = `SELECT * FROM ${this.tablePrefix}signed_events WHERE agent_id = ?`;
+        const params = [this.agentId];
+        if (types && types.length > 0) {
+            const placeholders = types.map(() => '?').join(', ');
+            sql += ` AND type IN (${placeholders})`;
+            params.push(...types);
+        }
+        sql += ' ORDER BY sequence ASC';
+        const rows = await this.storageAdapter.all(sql, params);
+        const events = rows.map(r => this.rowToEvent(r));
+        // Filter by payload fields
+        return events.filter(event => {
+            for (const [key, value] of Object.entries(filter)) {
+                if (event.payload[key] !== value)
+                    return false;
+            }
+            return true;
+        });
+    }
+    /**
+     * Get the latest event.
+     */
+    async getLatestEvent() {
+        const row = await this.storageAdapter.get(`SELECT * FROM ${this.tablePrefix}signed_events
+       WHERE agent_id = ?
+       ORDER BY sequence DESC LIMIT 1`, [this.agentId]);
+        return row ? this.rowToEvent(row) : null;
+    }
+    /**
+     * Get the total number of events for this agent.
+     */
+    async getEventCount() {
+        const row = await this.storageAdapter.get(`SELECT COUNT(*) as count FROM ${this.tablePrefix}signed_events WHERE agent_id = ?`, [this.agentId]);
+        return row?.count ?? 0;
+    }
+    /**
+     * Get all events for this agent (ordered by sequence).
+     */
+    async getAllEvents() {
+        const rows = await this.storageAdapter.all(`SELECT * FROM ${this.tablePrefix}signed_events
+       WHERE agent_id = ?
+       ORDER BY sequence ASC`, [this.agentId]);
+        return rows.map(r => this.rowToEvent(r));
+    }
+    /**
+     * Get the current chain state (for diagnostics).
+     */
+    getChainState() {
+        return {
+            lastHash: this.chain.getLastHash(),
+            sequence: this.chain.getSequence(),
+        };
+    }
+    // ===========================================================================
+    // Internal
+    // ===========================================================================
+    rowToEvent(row) {
+        return {
+            id: row.id,
+            type: row.type,
+            timestamp: row.timestamp,
+            sequence: row.sequence,
+            agentId: row.agent_id,
+            prevHash: row.prev_hash,
+            hash: row.hash,
+            payloadHash: row.payload_hash,
+            payload: typeof row.payload === 'string' ? JSON.parse(row.payload) : row.payload,
+            signature: row.signature,
+            signerPublicKey: row.signer_public_key,
+            anchorId: row.anchor_id ?? undefined,
+        };
+    }
+}
+//# sourceMappingURL=SignedEventLedger.js.map

package/dist/core/provenance/ledger/SignedEventLedger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedEventLedger.js","sourceRoot":"","sources":["../../../../src/core/provenance/ledger/SignedEventLedger.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAOpC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAYnD,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,MAAM,OAAO,iBAAiB;IAY5B,YACE,cAAoC,EACpC,UAA2B,EAC3B,OAAe,EACf,MAAwB,EACxB,cAAsB,EAAE;QAVlB,kBAAa,GAAY,KAAK,CAAC;QAEvC,uEAAuE;QAC/D,gBAAW,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QASrD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAI7C,8BAA8B,IAAI,CAAC,WAAW;;sCAEd,EAChC,CAAC,IAAI,CAAC,OAAO,CAAC,CACf,CAAC;QAEF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CACf,IAAyB,EACzB,OAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAClD,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACjD,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,CAAC,CAAC,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,IAAyB,EACzB,OAAgC;QAEhC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAEpB,uBAAuB;QACvB,MAAM,WAAW,GAAG,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAErF,qBAAqB;QACrB,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CACrC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAC3E,IAAI,CAAC,MAAM,CAAC,aAAa,CAC1B,CAAC;QAEF,gBAAgB;QAChB,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;YAChD,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,KAAK,GAAgB;YACzB,EAAE;YACF,IAAI;YACJ,SAAS;YACT,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ;YACR,IAAI;YACJ,WAAW;YACX,OAAO;YACP,SAAS;YACT,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE;SACtD,CAAC;QAEF,sBAAsB;QACtB,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAC3B,eAAe,IAAI,CAAC,WAAW;;mDAEc,EAC7C;YACE,KAAK,CAAC,EAAE;YACR,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,WAAW;YACjB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;YAC7B,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,eAAe;YACrB,KAAK,CAAC,QAAQ,IAAI,IAAI;SACvB,CACF,CAAC;QAEF,qBAAqB;QACrB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CACvC,iBAAiB,IAAI,CAAC,WAAW,4BAA4B,EAC7D,CAAC,EAAE,CAAC,CACL,CAAC;QACF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,YAAoB,EAAE,UAAkB;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CACxC,iBAAiB,IAAI,CAAC,WAAW;;6BAEV,EACvB,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CACzC,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,IAAyB;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CACxC,iBAAiB,IAAI,CAAC,WAAW;;6BAEV,EACvB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CACrB,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,MAA+B,EAC/B,KAA6B;QAE7B,kFAAkF;QAClF,IAAI,GAAG,GAAG,iBAAiB,IAAI,CAAC,WAAW,kCAAkC,CAAC;QAC9E,MAAM,MAAM,GAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,GAAG,IAAI,iBAAiB,YAAY,GAAG,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACxB,CAAC;QAED,GAAG,IAAI,wBAAwB,CAAC;QAEhC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAM,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjD,2BAA2B;QAC3B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK;oBAAE,OAAO,KAAK,CAAC;YACjD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CACvC,iBAAiB,IAAI,CAAC,WAAW;;sCAED,EAChC,CAAC,IAAI,CAAC,OAAO,CAAC,CACf,CAAC;QACF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CACvC,iCAAiC,IAAI,CAAC,WAAW,kCAAkC,EACnF,CAAC,IAAI,CAAC,OAAO,CAAC,CACf,CAAC;QACF,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CACxC,iBAAiB,IAAI,CAAC,WAAW;;6BAEV,EACvB,CAAC,IAAI,CAAC,OAAO,CAAC,CACf,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAClC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;SACnC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,WAAW;IACX,8EAA8E;IAEtE,UAAU,CAAC,GAAQ;QACzB,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAA2B;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;YAChF,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,eAAe,EAAE,GAAG,CAAC,iBAAiB;YACtC,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;SACrC,CAAC;IACJ,CAAC;CACF"}