@iflow-mcp/jkheadley-instar 0.26.2

package/dist/core/NonceStore.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Nonce store for replay prevention.
+ *
+ * Triple-layer anti-replay:
+ * 1. Timestamp: 30-second window
+ * 2. Nonce: unique per request, persisted to disk
+ * 3. Sequence number: monotonic per peer
+ *
+ * Nonces are pruned continuously (every 5 minutes) and on startup.
+ *
+ * Part of Phase 4 (secret sync infrastructure).
+ */
+export interface NonceStoreConfig {
+    /** Timestamp window for freshness validation (default: 30s). */
+    timestampWindowMs?: number;
+    /** Max age for nonce retention before pruning (default: 60s). */
+    nonceMaxAgeMs?: number;
+    /** Interval between automatic prune runs (default: 5 min). */
+    pruneIntervalMs?: number;
+}
+export declare class NonceStore {
+    private stateDir;
+    private nonces;
+    private sequences;
+    private pruneTimer;
+    private initialized;
+    private timestampWindowMs;
+    private nonceMaxAgeMs;
+    private pruneIntervalMs;
+    constructor(stateDir: string, config?: NonceStoreConfig);
+    /**
+     * Initialize: load persisted nonces and prune old ones.
+     * Must be called before use. Idempotent.
+     */
+    initialize(): void;
+    /**
+     * Stop the prune timer. Call on shutdown.
+     */
+    destroy(): void;
+    /**
+     * Validate a request's anti-replay fields.
+     * Returns { valid: true } or { valid: false, reason }.
+     *
+     * @param timestamp - ISO string or epoch ms
+     * @param nonce - Unique nonce for this request
+     * @param sequence - Monotonic sequence number
+     * @param peerId - The sending machine's ID
+     */
+    validate(timestamp: string | number, nonce: string, sequence: number, peerId: string): {
+        valid: true;
+    } | {
+        valid: false;
+        reason: string;
+    };
+    /**
+     * Get the next sequence number to use when sending to a peer.
+     * Returns the last seen + 1, or 0 if never communicated.
+     */
+    getNextSequence(peerId: string): number;
+    /**
+     * Get the current nonce count (for diagnostics).
+     */
+    get size(): number;
+    /**
+     * Prune expired nonces from memory and rewrite the file.
+     */
+    prune(): void;
+    private get noncePath();
+    private loadFromDisk;
+    private persistNonce;
+}
+//# sourceMappingURL=NonceStore.d.ts.map

package/dist/core/NonceStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NonceStore.d.ts","sourceRoot":"","sources":["../../src/core/NonceStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAuBH,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,eAAe,CAAS;gBAEpB,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB;IAOvD;;;OAGG;IACH,UAAU,IAAI,IAAI;IAclB;;OAEG;IACH,OAAO,IAAI,IAAI;IAOf;;;;;;;;OAQG;IACH,QAAQ,CACN,SAAS,EAAE,MAAM,GAAG,MAAM,EAC1B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IA6BrD;;;OAGG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAKvC;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,KAAK,IAAI,IAAI;IAgCb,OAAO,KAAK,SAAS,GAEpB;IAED,OAAO,CAAC,YAAY;IAiBpB,OAAO,CAAC,YAAY;CAIrB"}

package/dist/core/NonceStore.js

@@ -0,0 +1,163 @@
+/**
+ * Nonce store for replay prevention.
+ *
+ * Triple-layer anti-replay:
+ * 1. Timestamp: 30-second window
+ * 2. Nonce: unique per request, persisted to disk
+ * 3. Sequence number: monotonic per peer
+ *
+ * Nonces are pruned continuously (every 5 minutes) and on startup.
+ *
+ * Part of Phase 4 (secret sync infrastructure).
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+// ── Constants (defaults) ─────────────────────────────────────────────
+const NONCE_FILE = 'nonces.jsonl';
+const DEFAULT_NONCE_MAX_AGE_MS = 60_000; // 60 seconds
+const DEFAULT_TIMESTAMP_WINDOW_MS = 30_000; // 30-second window
+const DEFAULT_PRUNE_INTERVAL_MS = 5 * 60_000; // 5 minutes
+// ── NonceStore ───────────────────────────────────────────────────────
+export class NonceStore {
+    stateDir;
+    nonces = new Set();
+    sequences = {};
+    pruneTimer = null;
+    initialized = false;
+    timestampWindowMs;
+    nonceMaxAgeMs;
+    pruneIntervalMs;
+    constructor(stateDir, config) {
+        this.stateDir = stateDir;
+        this.timestampWindowMs = config?.timestampWindowMs ?? DEFAULT_TIMESTAMP_WINDOW_MS;
+        this.nonceMaxAgeMs = config?.nonceMaxAgeMs ?? DEFAULT_NONCE_MAX_AGE_MS;
+        this.pruneIntervalMs = config?.pruneIntervalMs ?? DEFAULT_PRUNE_INTERVAL_MS;
+    }
+    /**
+     * Initialize: load persisted nonces and prune old ones.
+     * Must be called before use. Idempotent.
+     */
+    initialize() {
+        if (this.initialized)
+            return;
+        fs.mkdirSync(this.stateDir, { recursive: true });
+        this.loadFromDisk();
+        this.prune();
+        // Start continuous pruning
+        this.pruneTimer = setInterval(() => this.prune(), this.pruneIntervalMs);
+        if (this.pruneTimer.unref)
+            this.pruneTimer.unref(); // Don't keep process alive
+        this.initialized = true;
+    }
+    /**
+     * Stop the prune timer. Call on shutdown.
+     */
+    destroy() {
+        if (this.pruneTimer) {
+            clearInterval(this.pruneTimer);
+            this.pruneTimer = null;
+        }
+    }
+    /**
+     * Validate a request's anti-replay fields.
+     * Returns { valid: true } or { valid: false, reason }.
+     *
+     * @param timestamp - ISO string or epoch ms
+     * @param nonce - Unique nonce for this request
+     * @param sequence - Monotonic sequence number
+     * @param peerId - The sending machine's ID
+     */
+    validate(timestamp, nonce, sequence, peerId) {
+        this.initialize();
+        // 1. Timestamp window
+        const ts = typeof timestamp === 'string' ? new Date(timestamp).getTime() : timestamp;
+        const age = Math.abs(Date.now() - ts);
+        if (age > this.timestampWindowMs) {
+            return { valid: false, reason: `Timestamp outside ${this.timestampWindowMs / 1000}s window (age: ${Math.round(age / 1000)}s)` };
+        }
+        // 2. Nonce uniqueness
+        if (this.nonces.has(nonce)) {
+            return { valid: false, reason: 'Nonce already seen (replay detected)' };
+        }
+        // 3. Sequence number (monotonic per peer)
+        const lastSeq = this.sequences[peerId] ?? -1;
+        if (sequence <= lastSeq) {
+            return { valid: false, reason: `Sequence ${sequence} <= last seen ${lastSeq} from ${peerId}` };
+        }
+        // All checks passed — record the nonce and sequence
+        this.nonces.add(nonce);
+        this.sequences[peerId] = sequence;
+        this.persistNonce(nonce);
+        return { valid: true };
+    }
+    /**
+     * Get the next sequence number to use when sending to a peer.
+     * Returns the last seen + 1, or 0 if never communicated.
+     */
+    getNextSequence(peerId) {
+        this.initialize();
+        return (this.sequences[peerId] ?? -1) + 1;
+    }
+    /**
+     * Get the current nonce count (for diagnostics).
+     */
+    get size() {
+        return this.nonces.size;
+    }
+    /**
+     * Prune expired nonces from memory and rewrite the file.
+     */
+    prune() {
+        const cutoff = Date.now() - this.nonceMaxAgeMs;
+        const filePath = this.noncePath;
+        if (!fs.existsSync(filePath))
+            return;
+        const content = fs.readFileSync(filePath, 'utf-8').trim();
+        if (!content)
+            return;
+        const lines = content.split('\n');
+        const surviving = [];
+        const survivingNonces = new Set();
+        for (const line of lines) {
+            try {
+                const entry = JSON.parse(line);
+                if (entry.timestamp >= cutoff) {
+                    surviving.push(line);
+                    survivingNonces.add(entry.nonce);
+                }
+            }
+            catch {
+                // Skip corrupt entries
+            }
+        }
+        // Rewrite file with only surviving entries
+        fs.writeFileSync(filePath, surviving.join('\n') + (surviving.length ? '\n' : ''));
+        this.nonces = survivingNonces;
+    }
+    // ── Private ──────────────────────────────────────────────────────
+    get noncePath() {
+        return path.join(this.stateDir, NONCE_FILE);
+    }
+    loadFromDisk() {
+        const filePath = this.noncePath;
+        if (!fs.existsSync(filePath))
+            return;
+        const content = fs.readFileSync(filePath, 'utf-8').trim();
+        if (!content)
+            return;
+        for (const line of content.split('\n')) {
+            try {
+                const entry = JSON.parse(line);
+                this.nonces.add(entry.nonce);
+            }
+            catch {
+                // Skip corrupt entries
+            }
+        }
+    }
+    persistNonce(nonce) {
+        const entry = { nonce, timestamp: Date.now() };
+        fs.appendFileSync(this.noncePath, JSON.stringify(entry) + '\n');
+    }
+}
+//# sourceMappingURL=NonceStore.js.map

package/dist/core/NonceStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NonceStore.js","sourceRoot":"","sources":["../../src/core/NonceStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,wEAAwE;AAExE,MAAM,UAAU,GAAG,cAAc,CAAC;AAClC,MAAM,wBAAwB,GAAG,MAAM,CAAC,CAAC,aAAa;AACtD,MAAM,2BAA2B,GAAG,MAAM,CAAC,CAAC,mBAAmB;AAC/D,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,YAAY;AAsB1D,wEAAwE;AAExE,MAAM,OAAO,UAAU;IACb,QAAQ,CAAS;IACjB,MAAM,GAAgB,IAAI,GAAG,EAAE,CAAC;IAChC,SAAS,GAAkB,EAAE,CAAC;IAC9B,UAAU,GAA0C,IAAI,CAAC;IACzD,WAAW,GAAY,KAAK,CAAC;IAC7B,iBAAiB,CAAS;IAC1B,aAAa,CAAS;IACtB,eAAe,CAAS;IAEhC,YAAY,QAAgB,EAAE,MAAyB;QACrD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,iBAAiB,GAAG,MAAM,EAAE,iBAAiB,IAAI,2BAA2B,CAAC;QAClF,IAAI,CAAC,aAAa,GAAG,MAAM,EAAE,aAAa,IAAI,wBAAwB,CAAC;QACvE,IAAI,CAAC,eAAe,GAAG,MAAM,EAAE,eAAe,IAAI,yBAAyB,CAAC;IAC9E,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,EAAE,CAAC;QAEb,2BAA2B;QAC3B,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK;YAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,2BAA2B;QAE/E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CACN,SAA0B,EAC1B,KAAa,EACb,QAAgB,EAChB,MAAc;QAEd,IAAI,CAAC,UAAU,EAAE,CAAC;QAElB,sBAAsB;QACtB,MAAM,EAAE,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACrF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACtC,IAAI,GAAG,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,iBAAiB,GAAG,IAAI,kBAAkB,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAClI,CAAC;QAED,sBAAsB;QACtB,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QAC1E,CAAC;QAED,0CAA0C;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,QAAQ,iBAAiB,OAAO,SAAS,MAAM,EAAE,EAAE,CAAC;QACjG,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;QAClC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAEzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,MAAc;QAC5B,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAEhC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO;QAErC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;QAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAe,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3C,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC;oBAC9B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrB,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC;IAChC,CAAC;IAED,oEAAoE;IAEpE,IAAY,SAAS;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IAEO,YAAY;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO;QAErC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAe,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,KAAa;QAChC,MAAM,KAAK,GAAe,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC3D,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,CAAC;CACF"}

package/dist/core/OrgIntentManager.d.ts

@@ -0,0 +1,58 @@
+/**
+ * OrgIntentManager — Parses and validates ORG-INTENT.md for organizational intent.
+ *
+ * The organizational intent layer sits above individual agent intent (AGENT.md).
+ * Three-rule contract:
+ *   1. Org constraints are mandatory — agents cannot override
+ *   2. Org goals are defaults — agents can specialize
+ *   3. Agent identity fills the rest — personality, style, domain expertise
+ *
+ * Storage: ORG-INTENT.md in the project's .instar/ directory.
+ */
+export interface OrgConstraint {
+    text: string;
+    source: 'org-intent';
+}
+export interface OrgGoal {
+    text: string;
+    source: 'org-intent';
+    specializable: boolean;
+}
+export interface ParsedOrgIntent {
+    name: string;
+    constraints: OrgConstraint[];
+    goals: OrgGoal[];
+    values: string[];
+    tradeoffHierarchy: string[];
+    raw: string;
+}
+export interface IntentConflict {
+    orgConstraint: string;
+    agentStatement: string;
+    severity: 'error' | 'warning';
+    description: string;
+}
+export interface IntentValidationResult {
+    valid: boolean;
+    conflicts: IntentConflict[];
+    warnings: string[];
+}
+export declare class OrgIntentManager {
+    private stateDir;
+    private orgIntentPath;
+    constructor(stateDir: string);
+    /** Check if ORG-INTENT.md exists */
+    exists(): boolean;
+    /** Read and return raw content */
+    readRaw(): string | null;
+    /** Parse ORG-INTENT.md into structured data */
+    parse(): ParsedOrgIntent | null;
+    /** Validate agent intent against org constraints (structural/heuristic) */
+    validateAgentIntent(agentIntentContent: string): IntentValidationResult;
+    /**
+     * Extract actionable statements from agent intent content.
+     * Finds list items and sentences containing "never", "always", etc.
+     */
+    private extractStatements;
+}
+//# sourceMappingURL=OrgIntentManager.d.ts.map

package/dist/core/OrgIntentManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgIntentManager.d.ts","sourceRoot":"","sources":["../../src/core/OrgIntentManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AA2ID,qBAAa,gBAAgB;IAGf,OAAO,CAAC,QAAQ;IAF5B,OAAO,CAAC,aAAa,CAAS;gBAEV,QAAQ,EAAE,MAAM;IAIpC,oCAAoC;IACpC,MAAM,IAAI,OAAO;IAIjB,kCAAkC;IAClC,OAAO,IAAI,MAAM,GAAG,IAAI;IAUxB,+CAA+C;IAC/C,KAAK,IAAI,eAAe,GAAG,IAAI;IAoC/B,2EAA2E;IAC3E,mBAAmB,CAAC,kBAAkB,EAAE,MAAM,GAAG,sBAAsB;IA0CvE;;;OAGG;IACH,OAAO,CAAC,iBAAiB;CA0B1B"}

package/dist/core/OrgIntentManager.js

@@ -0,0 +1,250 @@
+/**
+ * OrgIntentManager — Parses and validates ORG-INTENT.md for organizational intent.
+ *
+ * The organizational intent layer sits above individual agent intent (AGENT.md).
+ * Three-rule contract:
+ *   1. Org constraints are mandatory — agents cannot override
+ *   2. Org goals are defaults — agents can specialize
+ *   3. Agent identity fills the rest — personality, style, domain expertise
+ *
+ * Storage: ORG-INTENT.md in the project's .instar/ directory.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+// ── Helpers ──────────────────────────────────────────────────────────
+/**
+ * Extract list items from a markdown section.
+ * Recognizes lines starting with `- ` or `* `.
+ * Skips HTML comments.
+ */
+function extractListItems(sectionContent) {
+    const items = [];
+    const withoutComments = sectionContent.replace(/<!--[\s\S]*?-->/g, '');
+    for (const line of withoutComments.split('\n')) {
+        const trimmed = line.trim();
+        const match = trimmed.match(/^[-*]\s+(.+)/);
+        if (match) {
+            items.push(match[1].trim());
+        }
+    }
+    return items;
+}
+/**
+ * Extract text between a specific ## heading and the next ## heading.
+ * Returns the raw text of the section (excluding the heading line itself).
+ */
+function extractSection(content, sectionName) {
+    const lines = content.split('\n');
+    let inSection = false;
+    const sectionLines = [];
+    const sectionRe = new RegExp(`^##\\s+${escapeRegex(sectionName)}\\b`, 'i');
+    for (const line of lines) {
+        if (sectionRe.test(line)) {
+            inSection = true;
+            continue;
+        }
+        // Another ## heading (but not ###) ends the section
+        if (inSection && /^##\s+/.test(line) && !/^###/.test(line)) {
+            break;
+        }
+        if (inSection) {
+            sectionLines.push(line);
+        }
+    }
+    if (sectionLines.length === 0)
+        return null;
+    return sectionLines.join('\n');
+}
+function escapeRegex(str) {
+    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/**
+ * Check if content is template-only (all HTML comments, no real text).
+ */
+function isTemplateOnly(content) {
+    const withoutComments = content.replace(/<!--[\s\S]*?-->/g, '');
+    const withoutHeadings = withoutComments.replace(/^#+.*$/gm, '');
+    return !withoutHeadings.trim();
+}
+// ── Keyword contradiction detection ──────────────────────────────────
+/** Normalize text for keyword comparison. */
+function normalize(text) {
+    return text.toLowerCase().replace(/[^a-z0-9\s]/g, ' ').replace(/\s+/g, ' ').trim();
+}
+/**
+ * Extract the core action/subject from a constraint or statement.
+ * For "Never share internal data" -> "share internal data"
+ * For "Always validate inputs" -> "validate inputs"
+ */
+function extractCore(text) {
+    const norm = normalize(text);
+    // Check for negation patterns
+    const negationPatterns = [
+        /^never\s+(.+)/,
+        /^do not\s+(.+)/,
+        /^don t\s+(.+)/,
+        /^must not\s+(.+)/,
+        /^should not\s+(.+)/,
+        /^cannot\s+(.+)/,
+        /^must never\s+(.+)/,
+        /^avoid\s+(.+)/,
+        /^prohibit\s+(.+)/,
+        /^no\s+(.+)/,
+    ];
+    for (const pattern of negationPatterns) {
+        const match = norm.match(pattern);
+        if (match) {
+            return { negated: true, positiveCore: match[1].trim() };
+        }
+    }
+    // Check for positive/mandatory patterns
+    const positivePatterns = [
+        /^always\s+(.+)/,
+        /^must\s+(.+)/,
+        /^should\s+(.+)/,
+        /^require\s+(.+)/,
+    ];
+    for (const pattern of positivePatterns) {
+        const match = norm.match(pattern);
+        if (match) {
+            return { negated: false, positiveCore: match[1].trim() };
+        }
+    }
+    return { negated: false, positiveCore: norm };
+}
+/**
+ * Check if two core phrases overlap significantly.
+ * Uses word overlap heuristic.
+ */
+function coresOverlap(core1, core2) {
+    const words1 = new Set(core1.split(' ').filter(w => w.length > 2));
+    const words2 = new Set(core2.split(' ').filter(w => w.length > 2));
+    if (words1.size === 0 || words2.size === 0)
+        return false;
+    let overlap = 0;
+    for (const w of words1) {
+        if (words2.has(w))
+            overlap++;
+    }
+    // Require at least 2 overlapping words or >50% of the smaller set
+    const minSize = Math.min(words1.size, words2.size);
+    return overlap >= 2 || (overlap > 0 && overlap / minSize >= 0.5);
+}
+// ── Main Class ───────────────────────────────────────────────────────
+export class OrgIntentManager {
+    stateDir;
+    orgIntentPath;
+    constructor(stateDir) {
+        this.stateDir = stateDir;
+        this.orgIntentPath = path.join(stateDir, 'ORG-INTENT.md');
+    }
+    /** Check if ORG-INTENT.md exists */
+    exists() {
+        return fs.existsSync(this.orgIntentPath);
+    }
+    /** Read and return raw content */
+    readRaw() {
+        if (!this.exists())
+            return null;
+        try {
+            return fs.readFileSync(this.orgIntentPath, 'utf-8');
+        }
+        catch {
+            // @silent-fallback-ok — ORG-INTENT read returns null
+            return null;
+        }
+    }
+    /** Parse ORG-INTENT.md into structured data */
+    parse() {
+        const raw = this.readRaw();
+        if (!raw)
+            return null;
+        // Check if the file is template-only (all comments, no real content)
+        if (isTemplateOnly(raw))
+            return null;
+        // Extract organization name from heading
+        const nameMatch = raw.match(/^#\s+Organizational Intent:\s*(.+)$/m);
+        const name = nameMatch ? nameMatch[1].trim() : 'Unknown';
+        // Extract sections
+        const constraintsSection = extractSection(raw, 'Constraints \\(Mandatory.*\\)') ?? extractSection(raw, 'Constraints');
+        const goalsSection = extractSection(raw, 'Goals \\(Defaults.*\\)') ?? extractSection(raw, 'Goals');
+        const valuesSection = extractSection(raw, 'Values');
+        const tradeoffSection = extractSection(raw, 'Tradeoff Hierarchy');
+        const constraints = constraintsSection
+            ? extractListItems(constraintsSection).map(text => ({ text, source: 'org-intent' }))
+            : [];
+        const goals = goalsSection
+            ? extractListItems(goalsSection).map(text => ({ text, source: 'org-intent', specializable: true }))
+            : [];
+        const values = valuesSection ? extractListItems(valuesSection) : [];
+        const tradeoffHierarchy = tradeoffSection ? extractListItems(tradeoffSection) : [];
+        // If all sections are empty after parsing, treat as template-only
+        if (constraints.length === 0 && goals.length === 0 && values.length === 0 && tradeoffHierarchy.length === 0) {
+            return null;
+        }
+        return { name, constraints, goals, values, tradeoffHierarchy, raw };
+    }
+    /** Validate agent intent against org constraints (structural/heuristic) */
+    validateAgentIntent(agentIntentContent) {
+        const orgIntent = this.parse();
+        const conflicts = [];
+        const warnings = [];
+        if (!orgIntent) {
+            return { valid: true, conflicts: [], warnings: ['No ORG-INTENT.md found or it contains no real content.'] };
+        }
+        if (!agentIntentContent.trim()) {
+            return { valid: true, conflicts: [], warnings: ['Agent intent content is empty.'] };
+        }
+        // Extract all list items and sentences from agent intent
+        const agentStatements = this.extractStatements(agentIntentContent);
+        for (const constraint of orgIntent.constraints) {
+            const orgCore = extractCore(constraint.text);
+            for (const statement of agentStatements) {
+                const agentCore = extractCore(statement);
+                // Check for contradiction: one is negated and the other is positive,
+                // and they share the same core subject
+                if (orgCore.negated !== agentCore.negated && coresOverlap(orgCore.positiveCore, agentCore.positiveCore)) {
+                    conflicts.push({
+                        orgConstraint: constraint.text,
+                        agentStatement: statement,
+                        severity: 'error',
+                        description: `Agent statement "${statement}" contradicts org constraint "${constraint.text}"`,
+                    });
+                }
+            }
+        }
+        return {
+            valid: conflicts.length === 0,
+            conflicts,
+            warnings,
+        };
+    }
+    /**
+     * Extract actionable statements from agent intent content.
+     * Finds list items and sentences containing "never", "always", etc.
+     */
+    extractStatements(content) {
+        const statements = [];
+        const withoutComments = content.replace(/<!--[\s\S]*?-->/g, '');
+        for (const line of withoutComments.split('\n')) {
+            const trimmed = line.trim();
+            // List items
+            const listMatch = trimmed.match(/^[-*]\s+(.+)/);
+            if (listMatch) {
+                statements.push(listMatch[1].trim());
+                continue;
+            }
+            // Sentences containing directive keywords (outside of headings)
+            if (/^#/.test(trimmed))
+                continue;
+            if (!trimmed)
+                continue;
+            const norm = normalize(trimmed);
+            if (/\b(never|always|must|should not|do not|cannot|avoid|require)\b/.test(norm)) {
+                statements.push(trimmed);
+            }
+        }
+        return statements;
+    }
+}
+//# sourceMappingURL=OrgIntentManager.js.map

package/dist/core/OrgIntentManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgIntentManager.js","sourceRoot":"","sources":["../../src/core/OrgIntentManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAqC7B,wEAAwE;AAExE;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,cAAsB;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC5C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,WAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,UAAU,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,oDAAoD;QACpD,IAAI,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM;QACR,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,eAAe,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,wEAAwE;AAExE,6CAA6C;AAC7C,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE7B,8BAA8B;IAC9B,MAAM,gBAAgB,GAAG;QACvB,eAAe;QACf,gBAAgB;QAChB,eAAe;QACf,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,oBAAoB;QACpB,eAAe;QACf,kBAAkB;QAClB,YAAY;KACb,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,gBAAgB,GAAG;QACvB,gBAAgB;QAChB,cAAc;QACd,gBAAgB;QAChB,iBAAiB;KAClB,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAEnE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,kEAAkE;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,OAAO,IAAI,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,wEAAwE;AAExE,MAAM,OAAO,gBAAgB;IAGP;IAFZ,aAAa,CAAS;IAE9B,YAAoB,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;QAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC5D,CAAC;IAED,oCAAoC;IACpC,MAAM;QACJ,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC;IAED,kCAAkC;IAClC,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,qEAAqE;QACrE,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAErC,yCAAyC;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzD,mBAAmB;QACnB,MAAM,kBAAkB,GAAG,cAAc,CAAC,GAAG,EAAE,+BAA+B,CAAC,IAAI,cAAc,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtH,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC,IAAI,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnG,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAElE,MAAM,WAAW,GAAoB,kBAAkB;YACrD,CAAC,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAqB,EAAE,CAAC,CAAC;YAC7F,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,KAAK,GAAc,YAAY;YACnC,CAAC,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAqB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5G,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,iBAAiB,GAAG,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEnF,kEAAkE;QAClE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5G,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC;IACtE,CAAC;IAED,2EAA2E;IAC3E,mBAAmB,CAAC,kBAA0B;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,wDAAwD,CAAC,EAAE,CAAC;QAC9G,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,gCAAgC,CAAC,EAAE,CAAC;QACtF,CAAC;QAED,yDAAyD;QACzD,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAEnE,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAE7C,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;gBAEzC,qEAAqE;gBACrE,uCAAuC;gBACvC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;oBACxG,SAAS,CAAC,IAAI,CAAC;wBACb,aAAa,EAAE,UAAU,CAAC,IAAI;wBAC9B,cAAc,EAAE,SAAS;wBACzB,QAAQ,EAAE,OAAO;wBACjB,WAAW,EAAE,oBAAoB,SAAS,iCAAiC,UAAU,CAAC,IAAI,GAAG;qBAC9F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC;YAC7B,SAAS;YACT,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,iBAAiB,CAAC,OAAe;QACvC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAEhE,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAE5B,aAAa;YACb,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAChD,IAAI,SAAS,EAAE,CAAC;gBACd,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,gEAAgE;YAChE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,SAAS;YACjC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChF,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}