@iflow-mcp/jkheadley-instar 0.26.2

package/dist/threadline/AgentTrustManager.js

@@ -0,0 +1,526 @@
+/**
+ * AgentTrustManager — Per-agent trust profiles for inter-agent communication.
+ *
+ * Part of Threadline Protocol Phase 5. Tracks trust between THIS agent and
+ * remote agents it communicates with. Unlike AdaptiveTrust (user→agent trust),
+ * this manages agent→agent trust in the Threadline mesh.
+ *
+ * Trust rules (Section 7.3/7.4):
+ * - ALL trust level UPGRADES require source: 'user-granted' — NO auto-escalation
+ * - Auto-DOWNGRADE only: circuit breaker (3 activations in 24h → untrusted),
+ *   crypto verification failure → untrusted, 90 days no interaction → downgrade one level
+ * - All trust changes logged to append-only audit trail
+ *
+ * Storage:
+ * - Profiles: {stateDir}/threadline/trust-profiles.json
+ * - Audit trail: {stateDir}/threadline/trust-audit.jsonl
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+// ── Constants ────────────────────────────────────────────────────────
+/** Trust levels ordered from most restrictive to least */
+const TRUST_ORDER = ['untrusted', 'verified', 'trusted', 'autonomous'];
+/** 90 days in milliseconds — staleness threshold for auto-downgrade */
+const STALENESS_THRESHOLD_MS = 90 * 24 * 60 * 60 * 1000;
+/** Default operations allowed per trust level */
+const DEFAULT_ALLOWED_OPS = {
+    untrusted: ['ping', 'health'],
+    verified: ['ping', 'health', 'message', 'query'],
+    trusted: ['ping', 'health', 'message', 'query', 'task-request', 'data-share'],
+    autonomous: ['ping', 'health', 'message', 'query', 'task-request', 'data-share', 'spawn', 'delegate'],
+};
+// ── Helpers ──────────────────────────────────────────────────────────
+function atomicWrite(filePath, data) {
+    const tmpPath = `${filePath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
+    try {
+        fs.writeFileSync(tmpPath, data);
+        fs.renameSync(tmpPath, filePath);
+    }
+    catch (err) {
+        try {
+            fs.unlinkSync(tmpPath);
+        }
+        catch { /* ignore */ }
+        throw err;
+    }
+}
+function safeJsonParse(filePath, fallback) {
+    try {
+        if (!fs.existsSync(filePath))
+            return fallback;
+        return JSON.parse(fs.readFileSync(filePath, 'utf-8'));
+    }
+    catch {
+        return fallback;
+    }
+}
+export class AgentTrustManager {
+    threadlineDir;
+    profilesPath;
+    auditPath;
+    profiles;
+    onTrustChange;
+    saveDirty = false;
+    saveTimer = null;
+    constructor(options) {
+        this.threadlineDir = path.join(options.stateDir, 'threadline');
+        fs.mkdirSync(this.threadlineDir, { recursive: true });
+        this.profilesPath = path.join(this.threadlineDir, 'trust-profiles.json');
+        this.auditPath = path.join(this.threadlineDir, 'trust-audit.jsonl');
+        this.onTrustChange = options.onTrustChange ?? null;
+        this.profiles = this.loadProfiles();
+    }
+    // ── Profile Access ──────────────────────────────────────────────
+    /**
+     * Get trust profile for an agent. Returns null if no profile exists.
+     */
+    getProfile(agentName) {
+        return this.profiles[agentName] ?? null;
+    }
+    /**
+     * Get or create a trust profile for an agent.
+     * New agents start as 'untrusted' with 'setup-default' source.
+     */
+    getOrCreateProfile(agentName) {
+        if (!this.profiles[agentName]) {
+            const now = new Date().toISOString();
+            this.profiles[agentName] = {
+                agent: agentName,
+                level: 'untrusted',
+                source: 'setup-default',
+                history: {
+                    messagesReceived: 0,
+                    messagesResponded: 0,
+                    successfulInteractions: 0,
+                    failedInteractions: 0,
+                    lastInteraction: '',
+                    streakSinceIncident: 0,
+                },
+                allowedOperations: [...DEFAULT_ALLOWED_OPS.untrusted],
+                blockedOperations: [],
+                createdAt: now,
+                updatedAt: now,
+            };
+            this.save();
+        }
+        return this.profiles[agentName];
+    }
+    // ── Fingerprint-Based Access (for relay messages) ──────────────
+    /**
+     * Get trust profile by cryptographic fingerprint.
+     * Used for relay inbound messages where identity is fingerprint-based.
+     */
+    getProfileByFingerprint(fingerprint) {
+        for (const profile of Object.values(this.profiles)) {
+            if (profile.fingerprint === fingerprint) {
+                return profile;
+            }
+        }
+        return null;
+    }
+    /**
+     * Get or create a trust profile keyed by fingerprint.
+     * For relay agents, the fingerprint IS the identity.
+     */
+    getOrCreateProfileByFingerprint(fingerprint, displayName) {
+        // Check if profile already exists by fingerprint
+        const existing = this.getProfileByFingerprint(fingerprint);
+        if (existing)
+            return existing;
+        // Create new profile keyed by fingerprint
+        const now = new Date().toISOString();
+        const key = displayName ?? fingerprint;
+        this.profiles[key] = {
+            agent: key,
+            fingerprint,
+            level: 'untrusted',
+            source: 'setup-default',
+            history: {
+                messagesReceived: 0,
+                messagesResponded: 0,
+                successfulInteractions: 0,
+                failedInteractions: 0,
+                lastInteraction: '',
+                streakSinceIncident: 0,
+            },
+            allowedOperations: [...DEFAULT_ALLOWED_OPS.untrusted],
+            blockedOperations: [],
+            createdAt: now,
+            updatedAt: now,
+        };
+        this.save();
+        return this.profiles[key];
+    }
+    /**
+     * Get trust level by fingerprint. Returns 'untrusted' for unknown agents.
+     */
+    getTrustLevelByFingerprint(fingerprint) {
+        const profile = this.getProfileByFingerprint(fingerprint);
+        return profile?.level ?? 'untrusted';
+    }
+    /**
+     * Get allowed operations by fingerprint.
+     */
+    getAllowedOperationsByFingerprint(fingerprint) {
+        const profile = this.getProfileByFingerprint(fingerprint);
+        if (!profile)
+            return [...DEFAULT_ALLOWED_OPS.untrusted];
+        return profile.allowedOperations.length > 0
+            ? profile.allowedOperations
+            : [...DEFAULT_ALLOWED_OPS[profile.level]];
+    }
+    /**
+     * Set trust level by fingerprint.
+     */
+    setTrustLevelByFingerprint(fingerprint, level, source, reason, displayName) {
+        const profile = this.getOrCreateProfileByFingerprint(fingerprint, displayName);
+        return this.setTrustLevel(profile.agent, level, source, reason);
+    }
+    /**
+     * Record a received message by fingerprint (debounced save).
+     */
+    recordMessageReceivedByFingerprint(fingerprint) {
+        const profile = this.getOrCreateProfileByFingerprint(fingerprint);
+        profile.history.messagesReceived++;
+        profile.history.lastInteraction = new Date().toISOString();
+        profile.updatedAt = new Date().toISOString();
+        this.scheduleSave();
+    }
+    // ── Trust Level Management ──────────────────────────────────────
+    /**
+     * Set trust level for an agent.
+     * UPGRADES require source: 'user-granted' or 'paired-machine-granted'.
+     * Returns true if the change was applied, false if rejected.
+     */
+    setTrustLevel(agentName, level, source, reason) {
+        const profile = this.getOrCreateProfile(agentName);
+        const previousLevel = profile.level;
+        // Upgrades require user-granted or paired-machine-granted source
+        if (this.compareTrust(level, previousLevel) > 0) {
+            if (source !== 'user-granted' && source !== 'paired-machine-granted') {
+                return false;
+            }
+        }
+        profile.level = level;
+        profile.source = source;
+        profile.updatedAt = new Date().toISOString();
+        profile.allowedOperations = [...DEFAULT_ALLOWED_OPS[level]];
+        this.save();
+        this.writeAudit({
+            timestamp: new Date().toISOString(),
+            agent: agentName,
+            previousLevel,
+            newLevel: level,
+            source,
+            reason: reason ?? `Trust level changed to ${level}`,
+            userInitiated: source === 'user-granted' || source === 'paired-machine-granted',
+        });
+        if (this.onTrustChange) {
+            this.onTrustChange({
+                agent: agentName,
+                previousLevel,
+                newLevel: level,
+                reason: reason ?? `Trust level changed to ${level}`,
+                userInitiated: source === 'user-granted' || source === 'paired-machine-granted',
+            });
+        }
+        return true;
+    }
+    // ── Interaction Recording ───────────────────────────────────────
+    /**
+     * Record a successful or failed interaction with an agent.
+     */
+    recordInteraction(agentName, success, details) {
+        const profile = this.getOrCreateProfile(agentName);
+        const now = new Date().toISOString();
+        profile.history.lastInteraction = now;
+        if (success) {
+            profile.history.successfulInteractions++;
+            profile.history.streakSinceIncident++;
+        }
+        else {
+            profile.history.failedInteractions++;
+            profile.history.streakSinceIncident = 0;
+        }
+        profile.updatedAt = now;
+        this.save();
+    }
+    /**
+     * Record a received message from an agent.
+     */
+    recordMessageReceived(agentName) {
+        const profile = this.getOrCreateProfile(agentName);
+        profile.history.messagesReceived++;
+        profile.history.lastInteraction = new Date().toISOString();
+        profile.updatedAt = new Date().toISOString();
+        this.save();
+    }
+    /**
+     * Record a response sent to an agent.
+     */
+    recordMessageResponded(agentName) {
+        const profile = this.getOrCreateProfile(agentName);
+        profile.history.messagesResponded++;
+        profile.updatedAt = new Date().toISOString();
+        this.save();
+    }
+    // ── Permission Checking ─────────────────────────────────────────
+    /**
+     * Check if an agent is allowed to perform an operation.
+     * Checks both trust-level defaults and explicit allowed/blocked lists.
+     */
+    checkPermission(agentName, operation) {
+        const profile = this.profiles[agentName];
+        if (!profile) {
+            // Unknown agent — only allow untrusted-level operations
+            return DEFAULT_ALLOWED_OPS.untrusted.includes(operation);
+        }
+        // Explicitly blocked operations always take precedence
+        if (profile.blockedOperations.includes(operation)) {
+            return false;
+        }
+        // Check explicit allowed list
+        if (profile.allowedOperations.includes(operation)) {
+            return true;
+        }
+        // Fall back to trust level defaults
+        return DEFAULT_ALLOWED_OPS[profile.level].includes(operation);
+    }
+    // ── Interaction Stats ───────────────────────────────────────────
+    /**
+     * Get interaction statistics for an agent.
+     */
+    getInteractionStats(agentName) {
+        const profile = this.profiles[agentName];
+        if (!profile)
+            return null;
+        const h = profile.history;
+        const total = h.successfulInteractions + h.failedInteractions;
+        return {
+            messagesReceived: h.messagesReceived,
+            messagesResponded: h.messagesResponded,
+            successfulInteractions: h.successfulInteractions,
+            failedInteractions: h.failedInteractions,
+            successRate: total > 0 ? h.successfulInteractions / total : 0,
+            streakSinceIncident: h.streakSinceIncident,
+            lastInteraction: h.lastInteraction || null,
+        };
+    }
+    // ── Auto-Downgrade ──────────────────────────────────────────────
+    /**
+     * Safety-only auto-downgrade. Never auto-upgrades.
+     * Called by CircuitBreaker (3 activations in 24h) or on crypto failure.
+     */
+    autoDowngrade(agentName, reason) {
+        const profile = this.profiles[agentName];
+        if (!profile)
+            return false;
+        const previousLevel = profile.level;
+        if (previousLevel === 'untrusted')
+            return false; // Already at lowest
+        profile.level = 'untrusted';
+        profile.updatedAt = new Date().toISOString();
+        profile.allowedOperations = [...DEFAULT_ALLOWED_OPS.untrusted];
+        this.save();
+        this.writeAudit({
+            timestamp: new Date().toISOString(),
+            agent: agentName,
+            previousLevel,
+            newLevel: 'untrusted',
+            source: 'system',
+            reason,
+            userInitiated: false,
+        });
+        if (this.onTrustChange) {
+            this.onTrustChange({
+                agent: agentName,
+                previousLevel,
+                newLevel: 'untrusted',
+                reason,
+                userInitiated: false,
+            });
+        }
+        return true;
+    }
+    /**
+     * Check for staleness-based auto-downgrade.
+     * If an agent hasn't interacted in 90 days, downgrade one level.
+     * Returns true if a downgrade occurred.
+     */
+    checkStalenessDowngrade(agentName, nowMs) {
+        const profile = this.profiles[agentName];
+        if (!profile)
+            return false;
+        if (profile.level === 'untrusted')
+            return false;
+        const now = nowMs ?? Date.now();
+        const lastInteraction = profile.history.lastInteraction;
+        if (!lastInteraction)
+            return false;
+        const elapsed = now - new Date(lastInteraction).getTime();
+        if (elapsed < STALENESS_THRESHOLD_MS)
+            return false;
+        const previousLevel = profile.level;
+        const currentIdx = TRUST_ORDER.indexOf(previousLevel);
+        if (currentIdx <= 0)
+            return false;
+        const newLevel = TRUST_ORDER[currentIdx - 1];
+        profile.level = newLevel;
+        profile.updatedAt = new Date().toISOString();
+        profile.allowedOperations = [...DEFAULT_ALLOWED_OPS[newLevel]];
+        this.save();
+        this.writeAudit({
+            timestamp: new Date().toISOString(),
+            agent: agentName,
+            previousLevel,
+            newLevel,
+            source: 'system',
+            reason: `No interaction for ${Math.floor(elapsed / (24 * 60 * 60 * 1000))} days — auto-downgrade`,
+            userInitiated: false,
+        });
+        if (this.onTrustChange) {
+            this.onTrustChange({
+                agent: agentName,
+                previousLevel,
+                newLevel,
+                reason: `Staleness auto-downgrade after ${Math.floor(elapsed / (24 * 60 * 60 * 1000))} days`,
+                userInitiated: false,
+            });
+        }
+        return true;
+    }
+    // ── Profile Listing ─────────────────────────────────────────────
+    /**
+     * List all trust profiles, optionally filtered by trust level.
+     */
+    listProfiles(filter) {
+        let profiles = Object.values(this.profiles);
+        if (filter?.level) {
+            profiles = profiles.filter(p => p.level === filter.level);
+        }
+        if (filter?.source) {
+            profiles = profiles.filter(p => p.source === filter.source);
+        }
+        return profiles;
+    }
+    // ── Blocked Operations ──────────────────────────────────────────
+    /**
+     * Block a specific operation for an agent.
+     */
+    blockOperation(agentName, operation) {
+        const profile = this.getOrCreateProfile(agentName);
+        if (!profile.blockedOperations.includes(operation)) {
+            profile.blockedOperations.push(operation);
+            profile.updatedAt = new Date().toISOString();
+            this.save();
+        }
+    }
+    /**
+     * Unblock a specific operation for an agent.
+     */
+    unblockOperation(agentName, operation) {
+        const profile = this.getOrCreateProfile(agentName);
+        profile.blockedOperations = profile.blockedOperations.filter(op => op !== operation);
+        profile.updatedAt = new Date().toISOString();
+        this.save();
+    }
+    // ── Audit Trail ─────────────────────────────────────────────────
+    /**
+     * Read audit trail entries. Returns all entries or last N entries.
+     */
+    readAuditTrail(limit) {
+        try {
+            if (!fs.existsSync(this.auditPath))
+                return [];
+            const content = fs.readFileSync(this.auditPath, 'utf-8').trim();
+            if (!content)
+                return [];
+            const entries = content.split('\n').map(line => {
+                try {
+                    return JSON.parse(line);
+                }
+                catch {
+                    return null;
+                }
+            }).filter((e) => e !== null);
+            if (limit && limit > 0) {
+                return entries.slice(-limit);
+            }
+            return entries;
+        }
+        catch {
+            return [];
+        }
+    }
+    // ── Persistence ─────────────────────────────────────────────────
+    /**
+     * Force reload profiles from disk.
+     */
+    reload() {
+        this.profiles = this.loadProfiles();
+    }
+    /**
+     * Flush any pending saves and stop the debounce timer.
+     * Call on shutdown for clean exit.
+     */
+    flush() {
+        if (this.saveDirty) {
+            this.save();
+            this.saveDirty = false;
+        }
+        if (this.saveTimer) {
+            clearInterval(this.saveTimer);
+            this.saveTimer = null;
+        }
+    }
+    // ── Private ─────────────────────────────────────────────────────
+    /**
+     * Schedule a debounced save (dirty-flag + interval flush).
+     * Avoids synchronous disk writes on every message received.
+     */
+    scheduleSave() {
+        this.saveDirty = true;
+        if (!this.saveTimer) {
+            this.saveTimer = setInterval(() => {
+                if (this.saveDirty) {
+                    this.save();
+                    this.saveDirty = false;
+                }
+            }, 5000); // Flush every 5 seconds
+            // Don't keep process alive just for this timer
+            if (this.saveTimer.unref)
+                this.saveTimer.unref();
+        }
+    }
+    loadProfiles() {
+        const data = safeJsonParse(this.profilesPath, {
+            profiles: {},
+            updatedAt: '',
+        });
+        return data.profiles;
+    }
+    save() {
+        try {
+            const data = {
+                profiles: this.profiles,
+                updatedAt: new Date().toISOString(),
+            };
+            atomicWrite(this.profilesPath, JSON.stringify(data, null, 2));
+        }
+        catch {
+            // Save failure should never break trust evaluation
+        }
+    }
+    writeAudit(entry) {
+        try {
+            fs.appendFileSync(this.auditPath, JSON.stringify(entry) + '\n');
+        }
+        catch {
+            // Audit failure should not break operations
+        }
+    }
+    compareTrust(a, b) {
+        return TRUST_ORDER.indexOf(a) - TRUST_ORDER.indexOf(b);
+    }
+}
+//# sourceMappingURL=AgentTrustManager.js.map

package/dist/threadline/AgentTrustManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentTrustManager.js","sourceRoot":"","sources":["../../src/threadline/AgentTrustManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA4D7B,wEAAwE;AAExE,0DAA0D;AAC1D,MAAM,WAAW,GAAsB,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAE1F,uEAAuE;AACvE,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExD,iDAAiD;AACjD,MAAM,mBAAmB,GAAsC;IAC7D,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC7B,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;IAChD,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,CAAC;IAC7E,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,CAAC;CACtG,CAAC;AAEF,wEAAwE;AAExE,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAY;IACjD,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACxF,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAI,QAAgB,EAAE,QAAW;IACrD,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AASD,MAAM,OAAO,iBAAiB;IACX,aAAa,CAAS;IACtB,YAAY,CAAS;IACrB,SAAS,CAAS;IAC3B,QAAQ,CAAoC;IAC5C,aAAa,CAA6B;IAC1C,SAAS,GAAG,KAAK,CAAC;IAClB,SAAS,GAA0C,IAAI,CAAC;IAEhE,YAAY,OAGX;QACC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC/D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;QACzE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;QACnD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IACtC,CAAC;IAED,mEAAmE;IAEnE;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,SAAiB;QAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG;gBACzB,KAAK,EAAE,SAAS;gBAChB,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,eAAe;gBACvB,OAAO,EAAE;oBACP,gBAAgB,EAAE,CAAC;oBACnB,iBAAiB,EAAE,CAAC;oBACpB,sBAAsB,EAAE,CAAC;oBACzB,kBAAkB,EAAE,CAAC;oBACrB,eAAe,EAAE,EAAE;oBACnB,mBAAmB,EAAE,CAAC;iBACvB;gBACD,iBAAiB,EAAE,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC;gBACrD,iBAAiB,EAAE,EAAE;gBACrB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,kEAAkE;IAElE;;;OAGG;IACH,uBAAuB,CAAC,WAAmB;QACzC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBACxC,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,+BAA+B,CAAC,WAAmB,EAAE,WAAoB;QACvE,iDAAiD;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,0CAA0C;QAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,WAAW,IAAI,WAAW,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG;YACnB,KAAK,EAAE,GAAG;YACV,WAAW;YACX,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE;gBACP,gBAAgB,EAAE,CAAC;gBACnB,iBAAiB,EAAE,CAAC;gBACpB,sBAAsB,EAAE,CAAC;gBACzB,kBAAkB,EAAE,CAAC;gBACrB,eAAe,EAAE,EAAE;gBACnB,mBAAmB,EAAE,CAAC;aACvB;YACD,iBAAiB,EAAE,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC;YACrD,iBAAiB,EAAE,EAAE;YACrB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,0BAA0B,CAAC,WAAmB;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAC1D,OAAO,OAAO,EAAE,KAAK,IAAI,WAAW,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,iCAAiC,CAAC,WAAmB;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACxD,OAAO,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;YACzC,CAAC,CAAC,OAAO,CAAC,iBAAiB;YAC3B,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,0BAA0B,CACxB,WAAmB,EACnB,KAAsB,EACtB,MAAwB,EACxB,MAAe,EACf,WAAoB;QAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,+BAA+B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,kCAAkC,CAAC,WAAmB;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,+BAA+B,CAAC,WAAW,CAAC,CAAC;QAClE,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACnC,OAAO,CAAC,OAAO,CAAC,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3D,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,mEAAmE;IAEnE;;;;OAIG;IACH,aAAa,CACX,SAAiB,EACjB,KAAsB,EACtB,MAAwB,EACxB,MAAe;QAEf,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC;QAEpC,iEAAiE;QACjE,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,wBAAwB,EAAE,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACxB,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,CAAC,iBAAiB,GAAG,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QAE5D,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,UAAU,CAAC;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,SAAS;YAChB,aAAa;YACb,QAAQ,EAAE,KAAK;YACf,MAAM;YACN,MAAM,EAAE,MAAM,IAAI,0BAA0B,KAAK,EAAE;YACnD,aAAa,EAAE,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,wBAAwB;SAChF,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC;gBACjB,KAAK,EAAE,SAAS;gBAChB,aAAa;gBACb,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,MAAM,IAAI,0BAA0B,KAAK,EAAE;gBACnD,aAAa,EAAE,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,wBAAwB;aAChF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mEAAmE;IAEnE;;OAEG;IACH,iBAAiB,CAAC,SAAiB,EAAE,OAAgB,EAAE,OAAgB;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,OAAO,CAAC,OAAO,CAAC,eAAe,GAAG,GAAG,CAAC;QAEtC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;YACzC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACrC,OAAO,CAAC,OAAO,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC;QACxB,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,SAAiB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACnC,OAAO,CAAC,OAAO,CAAC,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3D,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,SAAiB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACpC,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACH,eAAe,CAAC,SAAiB,EAAE,SAAiB;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,wDAAwD;YACxD,OAAO,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC3D,CAAC;QAED,uDAAuD;QACvD,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,8BAA8B;QAC9B,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oCAAoC;QACpC,OAAO,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;IAED,mEAAmE;IAEnE;;OAEG;IACH,mBAAmB,CAAC,SAAiB;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,sBAAsB,GAAG,CAAC,CAAC,kBAAkB,CAAC;QAE9D,OAAO;YACL,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,sBAAsB,EAAE,CAAC,CAAC,sBAAsB;YAChD,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;YACxC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7D,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;YAC1C,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;SAC3C,CAAC;IACJ,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACH,aAAa,CAAC,SAAiB,EAAE,MAAc;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,IAAI,aAAa,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC,CAAC,oBAAoB;QAErE,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC;QAC5B,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,CAAC,iBAAiB,GAAG,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAE/D,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,UAAU,CAAC;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,SAAS;YAChB,aAAa;YACb,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,QAAQ;YAChB,MAAM;YACN,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC;gBACjB,KAAK,EAAE,SAAS;gBAChB,aAAa;gBACb,QAAQ,EAAE,WAAW;gBACrB,MAAM;gBACN,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,uBAAuB,CAAC,SAAiB,EAAE,KAAc;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QAEhD,MAAM,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;QACxD,IAAI,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QAEnC,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1D,IAAI,OAAO,GAAG,sBAAsB;YAAE,OAAO,KAAK,CAAC;QAEnD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,UAAU,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAElC,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;QACzB,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,CAAC,iBAAiB,GAAG,CAAC,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE/D,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,UAAU,CAAC;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,SAAS;YAChB,aAAa;YACb,QAAQ;YACR,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,sBAAsB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,wBAAwB;YACjG,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC;gBACjB,KAAK,EAAE,SAAS;gBAChB,aAAa;gBACb,QAAQ;gBACR,MAAM,EAAE,kCAAkC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO;gBAC5F,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mEAAmE;IAEnE;;OAEG;IACH,YAAY,CAAC,MAA+D;QAC1E,IAAI,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;YAClB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;YACnB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mEAAmE;IAEnE;;OAEG;IACH,cAAc,CAAC,SAAiB,EAAE,SAAiB;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1C,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,SAAiB,EAAE,SAAiB;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACrF,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,mEAAmE;IAEnE;;OAEG;IACH,cAAc,CAAC,KAAc;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;YAExB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBAC7C,IAAI,CAAC;oBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;gBAAC,CAAC;gBACnD,MAAM,CAAC;oBAAC,OAAO,IAAI,CAAC;gBAAC,CAAC;YACxB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YAEnD,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,mEAAmE;IAEnE;;OAEG;IACH,MAAM;QACJ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED,mEAAmE;IAEnE;;;OAGG;IACK,YAAY;QAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gBAChC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACZ,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACzB,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,wBAAwB;YAClC,+CAA+C;YAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK;gBAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,MAAM,IAAI,GAAG,aAAa,CAAe,IAAI,CAAC,YAAY,EAAE;YAC1D,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,MAAM,IAAI,GAAiB;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,KAAsB;QACvC,IAAI,CAAC;YACH,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,CAAkB,EAAE,CAAkB;QACzD,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/threadline/ApprovalQueue.d.ts

@@ -0,0 +1,71 @@
+/**
+ * ApprovalQueue — Queues inter-agent messages awaiting user approval.
+ *
+ * Part of the Threadline Protocol Phase 2 (Autonomy-Gated Visibility).
+ * When the autonomy gate decides a message needs user approval (cautious mode),
+ * it's enqueued here. The user approves/rejects via Telegram or dashboard.
+ *
+ * Storage: {stateDir}/threadline/approval-queue.json
+ */
+import type { MessageEnvelope } from '../messaging/types.js';
+export interface ApprovalQueueEntry {
+    /** Approval request ID */
+    id: string;
+    /** The message awaiting approval */
+    messageId: string;
+    /** Thread context */
+    threadId?: string;
+    /** Who sent it */
+    fromAgent: string;
+    /** Message subject */
+    subject: string;
+    /** Message body (truncated for display) */
+    body: string;
+    /** When received */
+    receivedAt: string;
+    /** From message envelope TTL */
+    ttlMinutes: number;
+    /** Approval status */
+    status: 'pending' | 'approved' | 'rejected' | 'expired';
+    /** When user decided */
+    decidedAt?: string;
+    /** Who decided (user ID or 'system' for TTL expiry) */
+    decidedBy?: string;
+}
+export declare class ApprovalQueue {
+    private readonly filePath;
+    constructor(stateDir: string);
+    /**
+     * Add a message to the approval queue.
+     * Returns the approval ID for tracking.
+     */
+    enqueue(envelope: MessageEnvelope): string;
+    /**
+     * Approve a queued message. Returns the entry if found.
+     */
+    approve(approvalId: string, decidedBy?: string): ApprovalQueueEntry | null;
+    /**
+     * Reject a queued message. Returns the entry if found.
+     */
+    reject(approvalId: string, decidedBy?: string): ApprovalQueueEntry | null;
+    /**
+     * Get queue entries, optionally filtered by status.
+     */
+    getQueue(status?: ApprovalQueueEntry['status']): ApprovalQueueEntry[];
+    /**
+     * Get a single entry by approval ID.
+     */
+    getEntry(approvalId: string): ApprovalQueueEntry | null;
+    /**
+     * Prune expired entries based on TTL.
+     * Returns the IDs of entries that were expired.
+     */
+    pruneExpired(): string[];
+    /**
+     * Get the count of pending entries.
+     */
+    pendingCount(): number;
+    private load;
+    private save;
+}
+//# sourceMappingURL=ApprovalQueue.d.ts.map

package/dist/threadline/ApprovalQueue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApprovalQueue.d.ts","sourceRoot":"","sources":["../../src/threadline/ApprovalQueue.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAI7D,MAAM,WAAW,kBAAkB;IACjC,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IACxD,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAgBD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,QAAQ,EAAE,MAAM;IAM5B;;;OAGG;IACH,OAAO,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM;IA+B1C;;OAEG;IACH,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,SAAS,GAAG,kBAAkB,GAAG,IAAI;IAa1E;;OAEG;IACH,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,SAAS,GAAG,kBAAkB,GAAG,IAAI;IAazE;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GAAG,kBAAkB,EAAE;IAQrE;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAKvD;;;OAGG;IACH,YAAY,IAAI,MAAM,EAAE;IA0BxB;;OAEG;IACH,YAAY,IAAI,MAAM;IAOtB,OAAO,CAAC,IAAI;IAWZ,OAAO,CAAC,IAAI;CAOb"}