@iflow-mcp/jkheadley-instar 0.26.2

package/dist/core/AnthropicIntelligenceProvider.js

@@ -0,0 +1,63 @@
+/**
+ * AnthropicIntelligenceProvider — OPTIONAL IntelligenceProvider using the Anthropic Messages API.
+ *
+ * ⚠️  This provider uses API tokens (extra cost). For most Instar agents, the
+ * ClaudeCliIntelligenceProvider (which uses the Claude subscription) is the
+ * correct default. Only use this provider when:
+ *   - The user explicitly sets intelligenceProvider: "anthropic-api" in config
+ *   - The Claude CLI is not available
+ *   - The user has a specific reason to prefer direct API access
+ *
+ * No SDK dependency — direct fetch calls, following the TelegramAdapter pattern.
+ */
+import { resolveModelId } from './models.js';
+const ANTHROPIC_API_URL = 'https://api.anthropic.com/v1/messages';
+const ANTHROPIC_API_VERSION = '2023-06-01';
+const DEFAULT_MODEL = 'fast';
+export class AnthropicIntelligenceProvider {
+    apiKey;
+    constructor(apiKey) {
+        this.apiKey = apiKey;
+    }
+    /**
+     * Create a provider from environment variables, or null if no key available.
+     * Follows the same graceful degradation pattern as TelegramAdapter's voice providers.
+     */
+    static fromEnv() {
+        const apiKey = process.env['ANTHROPIC_API_KEY']?.trim();
+        if (!apiKey) {
+            return null;
+        }
+        return new AnthropicIntelligenceProvider(apiKey);
+    }
+    async evaluate(prompt, options) {
+        const model = resolveModelId(options?.model ?? DEFAULT_MODEL);
+        const maxTokens = options?.maxTokens ?? 100;
+        const temperature = options?.temperature ?? 0;
+        const response = await fetch(ANTHROPIC_API_URL, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'x-api-key': this.apiKey,
+                'anthropic-version': ANTHROPIC_API_VERSION,
+            },
+            body: JSON.stringify({
+                model,
+                max_tokens: maxTokens,
+                temperature,
+                messages: [
+                    { role: 'user', content: prompt },
+                ],
+            }),
+        });
+        if (!response.ok) {
+            const errorText = await response.text().catch(() => 'unknown error');
+            throw new Error(`Anthropic API error ${response.status}: ${errorText}`);
+        }
+        const data = await response.json();
+        // Extract text from the response
+        const textBlock = data.content?.find((block) => block.type === 'text');
+        return textBlock?.text ?? '';
+    }
+}
+//# sourceMappingURL=AnthropicIntelligenceProvider.js.map

package/dist/core/AnthropicIntelligenceProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AnthropicIntelligenceProvider.js","sourceRoot":"","sources":["../../src/core/AnthropicIntelligenceProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,iBAAiB,GAAG,uCAAuC,CAAC;AAClE,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAE3C,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B,MAAM,OAAO,6BAA6B;IAChC,MAAM,CAAS;IAEvB,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO;QACZ,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,6BAA6B,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAA6B;QAC1D,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,IAAI,aAAa,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC;QAC5C,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,IAAI,CAAC,MAAM;gBACxB,mBAAmB,EAAE,qBAAqB;aAC3C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,UAAU,EAAE,SAAS;gBACrB,WAAW;gBACX,QAAQ,EAAE;oBACR,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;iBAClC;aACF,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAE/B,CAAC;QAEF,iCAAiC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACvE,OAAO,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC;IAC/B,CAAC;CACF"}

package/dist/core/AuditTrail.d.ts

@@ -0,0 +1,207 @@
+/**
+ * AuditTrail — Tamper-evident logging for LLM merge operations.
+ *
+ * Logs:
+ *   - Every LLM invocation (prompt hash, model, timestamp)
+ *   - Resolution decisions (chosen side, confidence, file)
+ *   - Validation results (post-merge checks)
+ *   - Redaction events (count, types — never the values)
+ *   - Security events (injection attempts, auth failures)
+ *
+ * Log entries are chained: each entry includes a hash of the previous
+ * entry, creating a tamper-evident audit chain.
+ *
+ * From INTELLIGENT_SYNC_SPEC Section 5.6 and Phase 6 requirements.
+ */
+export type AuditEventType = 'llm-invocation' | 'resolution' | 'validation' | 'redaction' | 'security' | 'handoff' | 'branch' | 'access-denied';
+export interface AuditEntry {
+    /** Unique entry ID. */
+    id: string;
+    /** Event type. */
+    type: AuditEventType;
+    /** ISO timestamp. */
+    timestamp: string;
+    /** Machine that generated this event. */
+    machineId: string;
+    /** User ID (if applicable). */
+    userId?: string;
+    /** Session ID. */
+    sessionId?: string;
+    /** Event-specific data. */
+    data: Record<string, unknown>;
+    /** SHA-256 hash of the previous entry (chain link). */
+    previousHash: string;
+    /** SHA-256 hash of this entry (for the next link). */
+    entryHash: string;
+}
+export interface AuditQuery {
+    /** Filter by event type. */
+    type?: AuditEventType;
+    /** Filter by machine. */
+    machineId?: string;
+    /** Filter by session. */
+    sessionId?: string;
+    /** Entries after this timestamp. */
+    after?: string;
+    /** Entries before this timestamp. */
+    before?: string;
+    /** Maximum entries to return. */
+    limit?: number;
+}
+export interface AuditIntegrityResult {
+    /** Whether the chain is intact. */
+    intact: boolean;
+    /** Total entries checked. */
+    entriesChecked: number;
+    /** First broken link (if any). */
+    brokenAt?: number;
+    /** Details about the break. */
+    breakDetails?: string;
+}
+export interface AuditStats {
+    /** Total entries. */
+    totalEntries: number;
+    /** Entries by type. */
+    byType: Record<AuditEventType, number>;
+    /** Entries by machine. */
+    byMachine: Record<string, number>;
+    /** Time range. */
+    firstEntry?: string;
+    lastEntry?: string;
+}
+export interface AuditTrailConfig {
+    /** State directory (.instar). */
+    stateDir: string;
+    /** This machine's ID. */
+    machineId: string;
+    /** Maximum entries per file before rotation (default: 1000). */
+    maxEntriesPerFile?: number;
+}
+export declare class AuditTrail {
+    private stateDir;
+    private machineId;
+    private auditDir;
+    private maxEntries;
+    private lastHash;
+    constructor(config: AuditTrailConfig);
+    /**
+     * Log an LLM invocation event.
+     */
+    logLLMInvocation(data: {
+        promptHash: string;
+        model: string;
+        conflictFile: string;
+        tier: number;
+        tokenEstimate?: number;
+        sessionId?: string;
+    }): AuditEntry;
+    /**
+     * Log a resolution decision.
+     */
+    logResolution(data: {
+        file: string;
+        chosenSide: 'ours' | 'theirs' | 'merged';
+        confidence: number;
+        tier: number;
+        conflictRegions: number;
+        sessionId?: string;
+    }): AuditEntry;
+    /**
+     * Log a validation result.
+     */
+    logValidation(data: {
+        file: string;
+        passed: boolean;
+        checks: string[];
+        failures?: string[];
+        sessionId?: string;
+    }): AuditEntry;
+    /**
+     * Log a redaction event (never log the actual values).
+     */
+    logRedaction(data: {
+        file: string;
+        totalRedactions: number;
+        typeCounts: Record<string, number>;
+        entropyStringsFound: number;
+        sessionId?: string;
+    }): AuditEntry;
+    /**
+     * Log a security event.
+     */
+    logSecurity(data: {
+        event: string;
+        severity: 'low' | 'medium' | 'high';
+        details: string;
+        sourceFile?: string;
+        sessionId?: string;
+    }): AuditEntry;
+    /**
+     * Log a handoff event.
+     */
+    logHandoff(data: {
+        fromMachine: string;
+        toMachine?: string;
+        reason: string;
+        workItemCount: number;
+        sessionId?: string;
+    }): AuditEntry;
+    /**
+     * Log a branch event.
+     */
+    logBranch(data: {
+        action: 'create' | 'merge' | 'abandon';
+        branch: string;
+        result: 'success' | 'conflict' | 'failed';
+        conflictFiles?: string[];
+        sessionId?: string;
+    }): AuditEntry;
+    /**
+     * Log an access denied event.
+     */
+    logAccessDenied(data: {
+        userId: string;
+        permission: string;
+        role: string;
+        action: string;
+        sessionId?: string;
+    }): AuditEntry;
+    /**
+     * Query audit entries with filters.
+     */
+    query(filter?: AuditQuery): AuditEntry[];
+    /**
+     * Get audit statistics.
+     */
+    stats(): AuditStats;
+    /**
+     * Verify the integrity of the audit chain.
+     * Checks that each entry's previousHash matches the prior entry's entryHash.
+     */
+    verifyIntegrity(): AuditIntegrityResult;
+    /**
+     * Append an entry to the audit log.
+     */
+    private append;
+    /**
+     * Compute the SHA-256 hash of an entry (excluding the entryHash field).
+     */
+    private computeEntryHash;
+    /**
+     * Load the last hash from the current log.
+     */
+    private loadLastHash;
+    /**
+     * Load all entries from the current log.
+     */
+    private loadEntries;
+    /**
+     * Current log file path.
+     */
+    private currentLogPath;
+    /**
+     * Rotate log if it exceeds max entries.
+     */
+    private maybeRotate;
+}
+//# sourceMappingURL=AuditTrail.d.ts.map

package/dist/core/AuditTrail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditTrail.d.ts","sourceRoot":"","sources":["../../src/core/AuditTrail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,YAAY,GACZ,YAAY,GACZ,WAAW,GACX,UAAU,GACV,SAAS,GACT,QAAQ,GACR,eAAe,CAAC;AAEpB,MAAM,WAAW,UAAU;IACzB,uBAAuB;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB;IAClB,IAAI,EAAE,cAAc,CAAC;IACrB,qBAAqB;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kBAAkB;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,4BAA4B;IAC5B,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,mCAAmC;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,qBAAqB;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACvC,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAWD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAS;gBAEb,MAAM,EAAE,gBAAgB;IAgBpC;;OAEG;IACH,gBAAgB,CAAC,IAAI,EAAE;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,UAAU;IAId;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACzC,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,UAAU;IAId;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,UAAU;IAId;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,mBAAmB,EAAE,MAAM,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,UAAU;IAId;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,UAAU;IAId;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,UAAU;IAId;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE;QACd,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;QACvC,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;QAC1C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,UAAU;IAId;;OAEG;IACH,eAAe,CAAC,IAAI,EAAE;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,UAAU;IAMd;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,UAAU,EAAE;IA0BxC;;OAEG;IACH,KAAK,IAAI,UAAU;IAqBnB;;;OAGG;IACH,eAAe,IAAI,oBAAoB;IA4CvC;;OAEG;IACH,OAAO,CAAC,MAAM;IA6Bd;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAgBxB;;OAEG;IACH,OAAO,CAAC,YAAY;IAMpB;;OAEG;IACH,OAAO,CAAC,WAAW;IAanB;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,OAAO,CAAC,WAAW;CAepB"}

package/dist/core/AuditTrail.js

@@ -0,0 +1,271 @@
+/**
+ * AuditTrail — Tamper-evident logging for LLM merge operations.
+ *
+ * Logs:
+ *   - Every LLM invocation (prompt hash, model, timestamp)
+ *   - Resolution decisions (chosen side, confidence, file)
+ *   - Validation results (post-merge checks)
+ *   - Redaction events (count, types — never the values)
+ *   - Security events (injection attempts, auth failures)
+ *
+ * Log entries are chained: each entry includes a hash of the previous
+ * entry, creating a tamper-evident audit chain.
+ *
+ * From INTELLIGENT_SYNC_SPEC Section 5.6 and Phase 6 requirements.
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+// ── Constants ────────────────────────────────────────────────────────
+const AUDIT_DIR = 'audit';
+const CURRENT_LOG = 'current.jsonl';
+const GENESIS_HASH = '0'.repeat(64);
+const DEFAULT_MAX_ENTRIES = 1000;
+// ── AuditTrail ───────────────────────────────────────────────────────
+export class AuditTrail {
+    stateDir;
+    machineId;
+    auditDir;
+    maxEntries;
+    lastHash;
+    constructor(config) {
+        this.stateDir = config.stateDir;
+        this.machineId = config.machineId;
+        this.maxEntries = config.maxEntriesPerFile ?? DEFAULT_MAX_ENTRIES;
+        this.auditDir = path.join(config.stateDir, 'state', AUDIT_DIR);
+        if (!fs.existsSync(this.auditDir)) {
+            fs.mkdirSync(this.auditDir, { recursive: true });
+        }
+        // Load the last hash from the current log
+        this.lastHash = this.loadLastHash();
+    }
+    // ── Logging ───────────────────────────────────────────────────────
+    /**
+     * Log an LLM invocation event.
+     */
+    logLLMInvocation(data) {
+        return this.append('llm-invocation', data, data.sessionId);
+    }
+    /**
+     * Log a resolution decision.
+     */
+    logResolution(data) {
+        return this.append('resolution', data, data.sessionId);
+    }
+    /**
+     * Log a validation result.
+     */
+    logValidation(data) {
+        return this.append('validation', data, data.sessionId);
+    }
+    /**
+     * Log a redaction event (never log the actual values).
+     */
+    logRedaction(data) {
+        return this.append('redaction', data, data.sessionId);
+    }
+    /**
+     * Log a security event.
+     */
+    logSecurity(data) {
+        return this.append('security', data, data.sessionId);
+    }
+    /**
+     * Log a handoff event.
+     */
+    logHandoff(data) {
+        return this.append('handoff', data, data.sessionId);
+    }
+    /**
+     * Log a branch event.
+     */
+    logBranch(data) {
+        return this.append('branch', data, data.sessionId);
+    }
+    /**
+     * Log an access denied event.
+     */
+    logAccessDenied(data) {
+        return this.append('access-denied', data, data.sessionId);
+    }
+    // ── Querying ──────────────────────────────────────────────────────
+    /**
+     * Query audit entries with filters.
+     */
+    query(filter) {
+        const entries = this.loadEntries();
+        let filtered = entries;
+        if (filter?.type) {
+            filtered = filtered.filter(e => e.type === filter.type);
+        }
+        if (filter?.machineId) {
+            filtered = filtered.filter(e => e.machineId === filter.machineId);
+        }
+        if (filter?.sessionId) {
+            filtered = filtered.filter(e => e.sessionId === filter.sessionId);
+        }
+        if (filter?.after) {
+            filtered = filtered.filter(e => e.timestamp > filter.after);
+        }
+        if (filter?.before) {
+            filtered = filtered.filter(e => e.timestamp < filter.before);
+        }
+        if (filter?.limit) {
+            filtered = filtered.slice(-filter.limit);
+        }
+        return filtered;
+    }
+    /**
+     * Get audit statistics.
+     */
+    stats() {
+        const entries = this.loadEntries();
+        const byType = {};
+        const byMachine = {};
+        for (const entry of entries) {
+            byType[entry.type] = (byType[entry.type] ?? 0) + 1;
+            byMachine[entry.machineId] = (byMachine[entry.machineId] ?? 0) + 1;
+        }
+        return {
+            totalEntries: entries.length,
+            byType,
+            byMachine,
+            firstEntry: entries[0]?.timestamp,
+            lastEntry: entries[entries.length - 1]?.timestamp,
+        };
+    }
+    // ── Integrity Verification ────────────────────────────────────────
+    /**
+     * Verify the integrity of the audit chain.
+     * Checks that each entry's previousHash matches the prior entry's entryHash.
+     */
+    verifyIntegrity() {
+        const entries = this.loadEntries();
+        if (entries.length === 0) {
+            return { intact: true, entriesChecked: 0 };
+        }
+        // First entry should chain from genesis
+        if (entries[0].previousHash !== GENESIS_HASH) {
+            return {
+                intact: false,
+                entriesChecked: 1,
+                brokenAt: 0,
+                breakDetails: `First entry does not chain from genesis hash`,
+            };
+        }
+        for (let i = 0; i < entries.length; i++) {
+            // Verify the entry's own hash
+            const computed = this.computeEntryHash(entries[i]);
+            if (computed !== entries[i].entryHash) {
+                return {
+                    intact: false,
+                    entriesChecked: i + 1,
+                    brokenAt: i,
+                    breakDetails: `Entry ${entries[i].id} has been tampered with (hash mismatch)`,
+                };
+            }
+            // Verify chain link (skip first entry, already checked)
+            if (i > 0 && entries[i].previousHash !== entries[i - 1].entryHash) {
+                return {
+                    intact: false,
+                    entriesChecked: i + 1,
+                    brokenAt: i,
+                    breakDetails: `Chain broken at entry ${entries[i].id} — previousHash does not match prior entry`,
+                };
+            }
+        }
+        return { intact: true, entriesChecked: entries.length };
+    }
+    // ── Private Helpers ───────────────────────────────────────────────
+    /**
+     * Append an entry to the audit log.
+     */
+    append(type, data, sessionId) {
+        const entry = {
+            id: `audit_${crypto.randomBytes(8).toString('hex')}`,
+            type,
+            timestamp: new Date().toISOString(),
+            machineId: this.machineId,
+            sessionId,
+            data,
+            previousHash: this.lastHash,
+            entryHash: '', // Computed below
+        };
+        entry.entryHash = this.computeEntryHash(entry);
+        this.lastHash = entry.entryHash;
+        // Write to current log
+        const logPath = this.currentLogPath();
+        fs.appendFileSync(logPath, JSON.stringify(entry) + '\n');
+        // Check if rotation is needed
+        this.maybeRotate();
+        return entry;
+    }
+    /**
+     * Compute the SHA-256 hash of an entry (excluding the entryHash field).
+     */
+    computeEntryHash(entry) {
+        const hashable = {
+            id: entry.id,
+            type: entry.type,
+            timestamp: entry.timestamp,
+            machineId: entry.machineId,
+            userId: entry.userId,
+            sessionId: entry.sessionId,
+            data: entry.data,
+            previousHash: entry.previousHash,
+        };
+        return crypto.createHash('sha256')
+            .update(JSON.stringify(hashable))
+            .digest('hex');
+    }
+    /**
+     * Load the last hash from the current log.
+     */
+    loadLastHash() {
+        const entries = this.loadEntries();
+        if (entries.length === 0)
+            return GENESIS_HASH;
+        return entries[entries.length - 1].entryHash;
+    }
+    /**
+     * Load all entries from the current log.
+     */
+    loadEntries() {
+        const logPath = this.currentLogPath();
+        try {
+            const content = fs.readFileSync(logPath, 'utf-8');
+            return content.trim().split('\n')
+                .filter(line => line.trim())
+                .map(line => JSON.parse(line));
+        }
+        catch {
+            // @silent-fallback-ok — log file may not exist yet; empty array is the natural default
+            return [];
+        }
+    }
+    /**
+     * Current log file path.
+     */
+    currentLogPath() {
+        return path.join(this.auditDir, CURRENT_LOG);
+    }
+    /**
+     * Rotate log if it exceeds max entries.
+     */
+    maybeRotate() {
+        const entries = this.loadEntries();
+        if (entries.length < this.maxEntries)
+            return;
+        // Rotate: rename current to timestamped archive
+        const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
+        const archiveName = `audit-${timestamp}.jsonl`;
+        const archivePath = path.join(this.auditDir, archiveName);
+        try {
+            fs.renameSync(this.currentLogPath(), archivePath);
+        }
+        catch {
+            // Rotation failed — continue with current file
+        }
+    }
+}
+//# sourceMappingURL=AuditTrail.js.map

package/dist/core/AuditTrail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditTrail.js","sourceRoot":"","sources":["../../src/core/AuditTrail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAkF7B,wEAAwE;AAExE,MAAM,SAAS,GAAG,OAAO,CAAC;AAC1B,MAAM,WAAW,GAAG,eAAe,CAAC;AACpC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACpC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,wEAAwE;AAExE,MAAM,OAAO,UAAU;IACb,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,QAAQ,CAAS;IAEzB,YAAY,MAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,iBAAiB,IAAI,mBAAmB,CAAC;QAElE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IACtC,CAAC;IAED,qEAAqE;IAErE;;OAEG;IACH,gBAAgB,CAAC,IAOhB;QACC,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,IAOb;QACC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,IAMb;QACC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAMZ;QACC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAMX;QACC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAMV;QACC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,IAMT;QACC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAMf;QACC,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,qEAAqE;IAErE;;OAEG;IACH,KAAK,CAAC,MAAmB;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,QAAQ,GAAG,OAAO,CAAC;QAEvB,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;YACjB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,EAAE,SAAS,EAAE,CAAC;YACtB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,MAAM,EAAE,SAAS,EAAE,CAAC;YACtB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;YAClB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,KAAM,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;YACnB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,MAAO,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;YAClB,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,EAAoC,CAAC;QACpD,MAAM,SAAS,GAAG,EAA4B,CAAC;QAE/C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACnD,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,OAAO;YACL,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,MAAM;YACN,SAAS;YACT,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;YACjC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS;SAClD,CAAC;IACJ,CAAC;IAED,qEAAqE;IAErE;;;OAGG;IACH,eAAe;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAC7C,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YAC7C,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,cAAc,EAAE,CAAC;gBACjB,QAAQ,EAAE,CAAC;gBACX,YAAY,EAAE,8CAA8C;aAC7D,CAAC;QACJ,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;gBACtC,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,cAAc,EAAE,CAAC,GAAG,CAAC;oBACrB,QAAQ,EAAE,CAAC;oBACX,YAAY,EAAE,SAAS,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,yCAAyC;iBAC9E,CAAC;YACJ,CAAC;YAED,wDAAwD;YACxD,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;gBAClE,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,cAAc,EAAE,CAAC,GAAG,CAAC;oBACrB,QAAQ,EAAE,CAAC;oBACX,YAAY,EAAE,yBAAyB,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,4CAA4C;iBACjG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC1D,CAAC;IAED,qEAAqE;IAErE;;OAEG;IACK,MAAM,CACZ,IAAoB,EACpB,IAA6B,EAC7B,SAAkB;QAElB,MAAM,KAAK,GAAe;YACxB,EAAE,EAAE,SAAS,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YACpD,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS;YACT,IAAI;YACJ,YAAY,EAAE,IAAI,CAAC,QAAQ;YAC3B,SAAS,EAAE,EAAE,EAAE,iBAAiB;SACjC,CAAC;QAEF,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;QAEhC,uBAAuB;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAEzD,8BAA8B;QAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,KAAiB;QACxC,MAAM,QAAQ,GAAG;YACf,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC;QACF,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;aAC/B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;aAChC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QAC9C,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,WAAW;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;iBAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,uFAAuF;YACvF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,WAAW;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU;YAAE,OAAO;QAE7C,gDAAgD;QAChD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,SAAS,SAAS,QAAQ,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE1D,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,WAAW,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;CACF"}

package/dist/core/AutoApprover.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Auto-Approver — Phase 2 of Prompt Gate.
+ *
+ * Handles auto-approved prompts by injecting the appropriate response
+ * into the tmux session. Logs every action to an append-only audit trail.
+ *
+ * Design: Fail-closed. If anything goes wrong (send fails, log fails),
+ * the prompt is NOT approved and falls through to relay.
+ */
+import type { DetectedPrompt } from '../monitoring/PromptGate.js';
+import type { ClassificationResult } from '../monitoring/InputClassifier.js';
+export interface AutoApproverConfig {
+    /** State directory for audit log */
+    stateDir: string;
+    /** Log retention in days (default: 30) */
+    logRetentionDays: number;
+    /** Include human-readable summary in log (default: false) */
+    verboseLogging: boolean;
+    /** Send function — injects key/text into tmux session */
+    sendKey: (tmuxSession: string, key: string) => boolean;
+    /** Callback when a prompt is auto-approved (for notifications) */
+    onApproval?: (prompt: DetectedPrompt, classification: ClassificationResult) => void;
+}
+export interface AuditLogEntry {
+    timestamp: string;
+    event: 'auto_approved' | 'auto_approve_failed' | 'dry_run';
+    sessionName: string;
+    promptId: string;
+    promptType: string;
+    action: string;
+    reason: string;
+    confidence: number;
+    llmClassified: boolean;
+    summary?: string;
+}
+export declare class AutoApprover {
+    private config;
+    private logPath;
+    /** Track which sessions have had their first auto-approval notification */
+    private notifiedSessions;
+    constructor(config: AutoApproverConfig);
+    /**
+     * Handle a prompt that has been classified as auto-approvable.
+     * Returns true if the prompt was successfully handled, false if it should fall through to relay.
+     */
+    handle(prompt: DetectedPrompt, classification: ClassificationResult): boolean;
+    /**
+     * Whether this is the first auto-approval for a session.
+     * Used by the caller to send a one-time notification:
+     * "Auto-approving session actions — I'll summarize when done"
+     */
+    isFirstApproval(sessionName: string): boolean;
+    /**
+     * Clean up session tracking state.
+     */
+    cleanup(sessionName: string): void;
+    /**
+     * Rotate audit log if needed.
+     */
+    rotateLog(): void;
+    private log;
+}
+//# sourceMappingURL=AutoApprover.d.ts.map

package/dist/core/AutoApprover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AutoApprover.d.ts","sourceRoot":"","sources":["../../src/core/AutoApprover.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAK7E,MAAM,WAAW,kBAAkB;IACjC,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,gBAAgB,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,cAAc,EAAE,OAAO,CAAC;IACxB,yDAAyD;IACzD,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACvD,kEAAkE;IAClE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,KAAK,IAAI,CAAC;CACrF;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,qBAAqB,GAAG,SAAS,CAAC;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAoCD,qBAAa,YAAY;IAKX,OAAO,CAAC,MAAM;IAJ1B,OAAO,CAAC,OAAO,CAAS;IACxB,2EAA2E;IAC3E,OAAO,CAAC,gBAAgB,CAAqB;gBAEzB,MAAM,EAAE,kBAAkB;IAI9C;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,GAAG,OAAO;IAuD7E;;;;OAIG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAM7C;;OAEG;IACH,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAIlC;;OAEG;IACH,SAAS,IAAI,IAAI;IAajB,OAAO,CAAC,GAAG;CAYZ"}