@intutic/shared-types 0.1.0

package/.dist/auth.d.ts

@@ -0,0 +1,222 @@
+/**
+ * Auth + RBAC Types — Shared across control plane services.
+ *
+ * LLD #7 — Auth, RBAC, Dashboard API
+ * HLD §5.1 — Zero-Trust Perimeter
+ *
+ * @module
+ */
+import { z } from 'zod';
+import type { WorkspaceRole } from './enums.js';
+/**
+ * Auth context injected by middleware on every authenticated request.
+ * Available via `c.get('auth')` in Hono handlers.
+ */
+export interface AuthContext {
+    /** The workspace member ID (PK of workspace_members). */
+    memberId: string;
+    /** The workspace this member belongs to. */
+    workspaceId: string;
+    /** Display-facing email of the authenticated member. */
+    email: string;
+    /** RBAC role within the workspace. */
+    role: WorkspaceRole;
+    /** Cross-workspace user ID (LLD #11). Optional for pre-migration members. */
+    userId?: string;
+}
+/** JWT access token payload (compact claims). */
+export interface JwtPayload {
+    /** Subject — member_id */
+    sub: string;
+    /** Workspace ID */
+    wid: string;
+    /** RBAC role */
+    role: WorkspaceRole;
+    /** Issued at (epoch seconds) */
+    iat: number;
+    /** Expiry (epoch seconds) */
+    exp: number;
+}
+/** Login request schema (Zod validated). */
+export declare const LoginInputSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+    password: string;
+}, {
+    email: string;
+    password: string;
+}>;
+/** Login request input. */
+export type LoginInput = z.infer<typeof LoginInputSchema>;
+/** Login response payload. */
+export interface LoginResult {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+    member: WorkspaceMemberInfo;
+}
+/** Registration request schema (Zod validated). */
+export declare const RegisterInputSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+    displayName: z.ZodString;
+    workspaceName: z.ZodString;
+    workspaceSlug: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+    password: string;
+    displayName: string;
+    workspaceName: string;
+    workspaceSlug: string;
+}, {
+    email: string;
+    password: string;
+    displayName: string;
+    workspaceName: string;
+    workspaceSlug: string;
+}>;
+/** Registration request input. */
+export type RegisterInput = z.infer<typeof RegisterInputSchema>;
+/** Registration response payload. */
+export interface RegisterResult {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+    member: WorkspaceMemberInfo;
+    workspaceId: string;
+}
+/** Token refresh request schema. */
+export declare const RefreshInputSchema: z.ZodObject<{
+    refreshToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    refreshToken: string;
+}, {
+    refreshToken: string;
+}>;
+/** Token refresh response. */
+export interface RefreshResult {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+}
+/** Change password request schema. */
+export declare const ChangePasswordInputSchema: z.ZodObject<{
+    currentPassword: z.ZodString;
+    newPassword: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    currentPassword: string;
+    newPassword: string;
+}, {
+    currentPassword: string;
+    newPassword: string;
+}>;
+/** Safe projection of a workspace member (no password hash). */
+export interface WorkspaceMemberInfo {
+    memberId: string;
+    workspaceId: string;
+    email: string;
+    displayName: string;
+    role: WorkspaceRole;
+    isActive: boolean;
+    lastLoginAt: string | null;
+    createdAt: string;
+}
+/** Invite member request schema. */
+export declare const InviteMemberInputSchema: z.ZodObject<{
+    email: z.ZodString;
+    displayName: z.ZodString;
+    role: z.ZodEnum<["ADMIN", "EM", "DEVELOPER", "VIEWER"]>;
+    tempPassword: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+    displayName: string;
+    role: "ADMIN" | "EM" | "DEVELOPER" | "VIEWER";
+    tempPassword: string;
+}, {
+    email: string;
+    displayName: string;
+    role: "ADMIN" | "EM" | "DEVELOPER" | "VIEWER";
+    tempPassword: string;
+}>;
+/** Invite member input. */
+export type InviteMemberInput = z.infer<typeof InviteMemberInputSchema>;
+/** Update role request schema. */
+export declare const UpdateRoleInputSchema: z.ZodObject<{
+    role: z.ZodEnum<["OWNER", "ADMIN", "EM", "DEVELOPER", "VIEWER"]>;
+}, "strip", z.ZodTypeAny, {
+    role: "OWNER" | "ADMIN" | "EM" | "DEVELOPER" | "VIEWER";
+}, {
+    role: "OWNER" | "ADMIN" | "EM" | "DEVELOPER" | "VIEWER";
+}>;
+/** API key creation request schema. */
+export declare const CreateApiKeyInputSchema: z.ZodObject<{
+    label: z.ZodString;
+    scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    expiresInDays: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    scopes: string[];
+    expiresInDays?: number | undefined;
+}, {
+    label: string;
+    scopes?: string[] | undefined;
+    expiresInDays?: number | undefined;
+}>;
+/** API key creation input. */
+export type CreateApiKeyInput = z.infer<typeof CreateApiKeyInputSchema>;
+/** API key creation result (plaintext key returned ONCE). */
+export interface CreateApiKeyResult {
+    keyId: string;
+    /** Plaintext vk_* token — returned ONCE, never stored. */
+    key: string;
+    keyPrefix: string;
+    label: string;
+    scopes: string[];
+    expiresAt: string | null;
+    createdAt: string;
+}
+/** Safe projection of an API key (no key_hash, no plaintext). */
+export interface ApiKeyInfo {
+    keyId: string;
+    keyPrefix: string;
+    label: string;
+    scopes: string[];
+    expiresAt: string | null;
+    lastUsedAt: string | null;
+    revokedAt: string | null;
+    createdAt: string;
+}
+/**
+ * Workspace dashboard summary — aggregated metrics for EM Dashboard.
+ * Phase 1 provides JSON API; the EM Dashboard UI is Phase 2 (TD-032).
+ * HLD §8b.1
+ */
+export interface DashboardSummary {
+    /** Total active sessions in the workspace. */
+    activeSessions: number;
+    /** Budget utilization (current month spend vs. budget). */
+    budgetUtilization: {
+        spentUsd: number;
+        budgetUsd: number;
+        percentUsed: number;
+    };
+    /** Anomaly count in the last 24 hours by category. */
+    anomalyCount24h: number;
+    /** SOP health summary. */
+    sopHealth: {
+        totalActive: number;
+        totalStale: number;
+        totalInvalidated: number;
+    };
+    /** Recent governance incidents (last 5). */
+    recentIncidents: Array<{
+        incidentId: string;
+        sessionId: string;
+        category: string;
+        severity: string;
+        createdAt: string;
+    }>;
+}
+//# sourceMappingURL=auth.d.ts.map

package/.dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAI/C;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAA;IAChB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IACnB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAA;IACb,sCAAsC;IACtC,IAAI,EAAE,aAAa,CAAA;IACnB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAID,iDAAiD;AACjD,MAAM,WAAW,UAAU;IACzB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,mBAAmB;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,gBAAgB;IAChB,IAAI,EAAE,aAAa,CAAA;IACnB,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAA;CACZ;AAID,4CAA4C;AAC5C,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAA;AAEF,2BAA2B;AAC3B,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAEzD,8BAA8B;AAC9B,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,mBAAmB,CAAA;CAC5B;AAID,mDAAmD;AACnD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;EAM9B,CAAA;AAEF,kCAAkC;AAClC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D,qCAAqC;AACrC,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,mBAAmB,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;CACpB;AAID,oCAAoC;AACpC,eAAO,MAAM,kBAAkB;;;;;;EAE7B,CAAA;AAEF,8BAA8B;AAC9B,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AAID,sCAAsC;AACtC,eAAO,MAAM,yBAAyB;;;;;;;;;EAGpC,CAAA;AAIF,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,aAAa,CAAA;IACnB,QAAQ,EAAE,OAAO,CAAA;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;CAClB;AAID,oCAAoC;AACpC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;EAKlC,CAAA;AAEF,2BAA2B;AAC3B,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAIvE,kCAAkC;AAClC,eAAO,MAAM,qBAAqB;;;;;;EAEhC,CAAA;AAIF,uCAAuC;AACvC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;EAIlC,CAAA;AAEF,8BAA8B;AAC9B,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAEvE,6DAA6D;AAC7D,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAID;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,cAAc,EAAE,MAAM,CAAA;IACtB,2DAA2D;IAC3D,iBAAiB,EAAE;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,SAAS,EAAE,MAAM,CAAA;QACjB,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,sDAAsD;IACtD,eAAe,EAAE,MAAM,CAAA;IACvB,0BAA0B;IAC1B,SAAS,EAAE;QACT,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,EAAE,MAAM,CAAA;QAClB,gBAAgB,EAAE,MAAM,CAAA;KACzB,CAAA;IACD,4CAA4C;IAC5C,eAAe,EAAE,KAAK,CAAC;QACrB,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,SAAS,EAAE,MAAM,CAAA;KAClB,CAAC,CAAA;CACH"}

package/.dist/auth.js

@@ -0,0 +1,59 @@
+"use strict";
+/**
+ * Auth + RBAC Types — Shared across control plane services.
+ *
+ * LLD #7 — Auth, RBAC, Dashboard API
+ * HLD §5.1 — Zero-Trust Perimeter
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateApiKeyInputSchema = exports.UpdateRoleInputSchema = exports.InviteMemberInputSchema = exports.ChangePasswordInputSchema = exports.RefreshInputSchema = exports.RegisterInputSchema = exports.LoginInputSchema = void 0;
+const zod_1 = require("zod");
+// ─── Login ───────────────────────────────────────────────────────────
+/** Login request schema (Zod validated). */
+exports.LoginInputSchema = zod_1.z.object({
+    email: zod_1.z.string().email().max(256),
+    password: zod_1.z.string().min(8).max(128),
+});
+// ─── Register ────────────────────────────────────────────────────────
+/** Registration request schema (Zod validated). */
+exports.RegisterInputSchema = zod_1.z.object({
+    email: zod_1.z.string().email().max(256),
+    password: zod_1.z.string().min(8).max(128),
+    displayName: zod_1.z.string().min(1).max(128),
+    workspaceName: zod_1.z.string().min(1).max(128),
+    workspaceSlug: zod_1.z.string().min(1).max(64).regex(/^[a-z0-9-]+$/),
+});
+// ─── Refresh ─────────────────────────────────────────────────────────
+/** Token refresh request schema. */
+exports.RefreshInputSchema = zod_1.z.object({
+    refreshToken: zod_1.z.string().min(1),
+});
+// ─── Change Password ─────────────────────────────────────────────────
+/** Change password request schema. */
+exports.ChangePasswordInputSchema = zod_1.z.object({
+    currentPassword: zod_1.z.string().min(8).max(128),
+    newPassword: zod_1.z.string().min(8).max(128),
+});
+// ─── Member Invite ───────────────────────────────────────────────────
+/** Invite member request schema. */
+exports.InviteMemberInputSchema = zod_1.z.object({
+    email: zod_1.z.string().email().max(256),
+    displayName: zod_1.z.string().min(1).max(128),
+    role: zod_1.z.enum(['ADMIN', 'EM', 'DEVELOPER', 'VIEWER']),
+    tempPassword: zod_1.z.string().min(8).max(128),
+});
+// ─── Role Update ─────────────────────────────────────────────────────
+/** Update role request schema. */
+exports.UpdateRoleInputSchema = zod_1.z.object({
+    role: zod_1.z.enum(['OWNER', 'ADMIN', 'EM', 'DEVELOPER', 'VIEWER']),
+});
+// ─── API Key ─────────────────────────────────────────────────────────
+/** API key creation request schema. */
+exports.CreateApiKeyInputSchema = zod_1.z.object({
+    label: zod_1.z.string().min(1).max(128),
+    scopes: zod_1.z.array(zod_1.z.string()).default(['*']),
+    expiresInDays: zod_1.z.number().int().min(1).max(365).optional(),
+});
+//# sourceMappingURL=auth.js.map

package/.dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,6BAAuB;AAsCvB,wEAAwE;AAExE,4CAA4C;AAC/B,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACrC,CAAC,CAAA;AAaF,wEAAwE;AAExE,mDAAmD;AACtC,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CAC/D,CAAC,CAAA;AAcF,wEAAwE;AAExE,oCAAoC;AACvB,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAA;AASF,wEAAwE;AAExE,sCAAsC;AACzB,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChD,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACxC,CAAC,CAAA;AAgBF,wEAAwE;AAExE,oCAAoC;AACvB,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACpD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACzC,CAAC,CAAA;AAKF,wEAAwE;AAExE,kCAAkC;AACrB,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;CAC9D,CAAC,CAAA;AAEF,wEAAwE;AAExE,uCAAuC;AAC1B,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1C,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAA"}

package/.dist/enums.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Domain enums for the Intutic governance platform.
+ *
+ * Each enum is defined as a frozen `as const` object with a corresponding
+ * TypeScript union type extracted via `typeof Obj[keyof typeof Obj]`.
+ * This pattern gives us runtime values (for comparisons, iteration) and
+ * compile-time narrowing without Drizzle or Postgres dependencies.
+ *
+ * These mirror the Postgres enum types defined in
+ * LLD 01-data-architecture §3.1.
+ *
+ * @module
+ */
+/** Risk severity classification for SOPs, anomalies, and incidents. */
+export declare const RiskLevel: {
+    readonly LOW: "LOW";
+    readonly MEDIUM: "MEDIUM";
+    readonly HIGH: "HIGH";
+    readonly CRITICAL: "CRITICAL";
+};
+/** Union of all risk level values. */
+export type RiskLevel = typeof RiskLevel[keyof typeof RiskLevel];
+/** PCAS enforcement action applied to a tool call. */
+export declare const EnforcementAction: {
+    readonly BYPASS: "BYPASS";
+    readonly ENHANCE: "ENHANCE";
+    readonly HIJACK: "HIJACK";
+    readonly KILL: "KILL";
+};
+/** Union of all enforcement action values. */
+export type EnforcementAction = typeof EnforcementAction[keyof typeof EnforcementAction];
+/** Classification of whether a token expenditure was useful or wasted. */
+export declare const TokenUtility: {
+    readonly USEFUL: "USEFUL";
+    readonly WASTED: "WASTED";
+};
+/** Union of all token utility values. */
+export type TokenUtility = typeof TokenUtility[keyof typeof TokenUtility];
+/** Budget authority level assigned to a user or agent session. */
+export declare const BudgetTier: {
+    readonly JUNIOR: "JUNIOR";
+    readonly SENIOR: "SENIOR";
+    readonly STAFF: "STAFF";
+    readonly PRINCIPAL: "PRINCIPAL";
+};
+/** Union of all budget tier values. */
+export type BudgetTier = typeof BudgetTier[keyof typeof BudgetTier];
+/** Task complexity classification for model routing. */
+export declare const ComplexityTier: {
+    readonly TIER_0: "TIER_0";
+    readonly TIER_1: "TIER_1";
+    readonly TIER_2: "TIER_2";
+};
+/** Union of all complexity tier values. */
+export type ComplexityTier = typeof ComplexityTier[keyof typeof ComplexityTier];
+/** Classification of how an SOP change affects the prior version. */
+export declare const ChangeClassification: {
+    readonly STRENGTHEN: "STRENGTHEN";
+    readonly CLARIFY: "CLARIFY";
+    readonly NARROW: "NARROW";
+    readonly WEAKEN: "WEAKEN";
+};
+/** Union of all change classification values. */
+export type ChangeClassification = typeof ChangeClassification[keyof typeof ChangeClassification];
+/** Runtime anomaly classification taxonomy. */
+export declare const AnomalyType: {
+    readonly TOOL_ABUSE: "TOOL_ABUSE";
+    readonly TOKEN_WASTE: "TOKEN_WASTE";
+    readonly LOOP_DETECTED: "LOOP_DETECTED";
+    readonly UNAUTHORIZED_TOOL: "UNAUTHORIZED_TOOL";
+    readonly DATA_EXFILTRATION: "DATA_EXFILTRATION";
+    readonly PROMPT_INJECTION: "PROMPT_INJECTION";
+    readonly HALLUCINATION: "HALLUCINATION";
+    readonly SCOPE_VIOLATION: "SCOPE_VIOLATION";
+    readonly BUDGET_BREACH: "BUDGET_BREACH";
+    readonly SPAWN_BUDGET_BREACH: "SPAWN_BUDGET_BREACH";
+    readonly WORKFLOW_BUDGET_BREACH: "WORKFLOW_BUDGET_BREACH";
+    readonly WORKFLOW_GOAL_DRIFT: "WORKFLOW_GOAL_DRIFT";
+};
+/** Union of all anomaly type values. */
+export type AnomalyType = typeof AnomalyType[keyof typeof AnomalyType];
+/** Supported AI agent harness/IDE integrations. */
+export declare const HarnessType: {
+    readonly CURSOR: "cursor";
+    readonly CLAUDE_CODE: "claude-code";
+    readonly ANTIGRAVITY: "antigravity";
+    readonly N8N: "n8n";
+    readonly CODEX: "codex";
+    readonly WINDSURF: "windsurf";
+    readonly AIDER: "aider";
+    readonly OPENHANDS: "openhands";
+    readonly OPENCLAW: "openclaw";
+    readonly HERMES: "hermes";
+    readonly PI: "pi";
+};
+/** Union of all harness type values. */
+export type HarnessType = typeof HarnessType[keyof typeof HarnessType];
+/** Agent execution mode controlling autonomy level. */
+export declare const ExecutionMode: {
+    readonly STANDARD: "STANDARD";
+    readonly PLAN_ONLY: "PLAN_ONLY";
+    readonly SHADOW: "SHADOW";
+    readonly AUTONOMOUS: "AUTONOMOUS";
+};
+/** Union of all execution mode values. */
+export type ExecutionMode = typeof ExecutionMode[keyof typeof ExecutionMode];
+/** Lifecycle state of a governance incident. */
+export declare const IncidentStatus: {
+    readonly OPEN: "OPEN";
+    readonly ACKNOWLEDGED: "ACKNOWLEDGED";
+    readonly RESOLVED: "RESOLVED";
+    readonly FALSE_POSITIVE: "FALSE_POSITIVE";
+};
+/** Union of all incident status values. */
+export type IncidentStatus = typeof IncidentStatus[keyof typeof IncidentStatus];
+/** Lifecycle state for stored execution plans. */
+export declare const PlanLifecycleState: {
+    readonly PENDING_APPROVAL: "PENDING_APPROVAL";
+    readonly APPROVED: "APPROVED";
+    readonly REJECTED: "REJECTED";
+    readonly EXECUTING: "EXECUTING";
+    readonly COMPLETED: "COMPLETED";
+};
+/** Union of all plan lifecycle state values. */
+export type PlanLifecycleState = typeof PlanLifecycleState[keyof typeof PlanLifecycleState];
+/** Lifecycle state for SOPs in the registry. */
+export declare const SopLifecycleState: {
+    readonly DRAFT: "DRAFT";
+    readonly PENDING_REVIEW: "PENDING_REVIEW";
+    readonly GENERATED: "GENERATED";
+    readonly HYPOTHESIZED: "HYPOTHESIZED";
+    readonly REFINED: "REFINED";
+    readonly VALIDATED: "VALIDATED";
+    readonly INVALIDATED: "INVALIDATED";
+};
+/** Union of all SOP lifecycle state values. */
+export type SopLifecycleState = typeof SopLifecycleState[keyof typeof SopLifecycleState];
+/** Model routing tier for cost optimization. */
+export declare const RoutingTier: {
+    readonly FRONTIER: "frontier";
+    readonly ECONOMY: "economy";
+    readonly LOCAL: "local";
+};
+/** Union of all routing tier values. */
+export type RoutingTier = typeof RoutingTier[keyof typeof RoutingTier];
+/** Workspace member role for RBAC. OWNER > ADMIN > EM > DEVELOPER > VIEWER. */
+export declare const WorkspaceRole: {
+    readonly OWNER: "OWNER";
+    readonly ADMIN: "ADMIN";
+    readonly EM: "EM";
+    readonly DEVELOPER: "DEVELOPER";
+    readonly VIEWER: "VIEWER";
+};
+/** Union of all workspace role values. */
+export type WorkspaceRole = typeof WorkspaceRole[keyof typeof WorkspaceRole];
+//# sourceMappingURL=enums.d.ts.map

package/.dist/enums.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,uEAAuE;AACvE,eAAO,MAAM,SAAS;;;;;CAKZ,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE,sDAAsD;AACtD,eAAO,MAAM,iBAAiB;;;;;CAKpB,CAAA;AAEV,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,0EAA0E;AAC1E,eAAO,MAAM,YAAY;;;CAGf,CAAA;AAEV,yCAAyC;AACzC,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAKzE,kEAAkE;AAClE,eAAO,MAAM,UAAU;;;;;CAKb,CAAA;AAEV,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAKnE,wDAAwD;AACxD,eAAO,MAAM,cAAc;;;;CAIjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,qEAAqE;AACrE,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,iDAAiD;AACjD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAKjG,+CAA+C;AAC/C,eAAO,MAAM,WAAW;;;;;;;;;;;;;CAad,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAMtE,mDAAmD;AACnD,eAAO,MAAM,WAAW;;;;;;;;;;;;CAYd,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAKtE,uDAAuD;AACvD,eAAO,MAAM,aAAa;;;;;CAKhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E,gDAAgD;AAChD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,kDAAkD;AAClD,eAAO,MAAM,kBAAkB;;;;;;CAMrB,CAAA;AAEV,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAM3F,gDAAgD;AAChD,eAAO,MAAM,iBAAiB;;;;;;;;CAQpB,CAAA;AAEV,+CAA+C;AAC/C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,gDAAgD;AAChD,eAAO,MAAM,WAAW;;;;CAId,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAKtE,+EAA+E;AAC/E,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA"}

package/.dist/enums.js

@@ -0,0 +1,161 @@
+"use strict";
+/**
+ * Domain enums for the Intutic governance platform.
+ *
+ * Each enum is defined as a frozen `as const` object with a corresponding
+ * TypeScript union type extracted via `typeof Obj[keyof typeof Obj]`.
+ * This pattern gives us runtime values (for comparisons, iteration) and
+ * compile-time narrowing without Drizzle or Postgres dependencies.
+ *
+ * These mirror the Postgres enum types defined in
+ * LLD 01-data-architecture §3.1.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkspaceRole = exports.RoutingTier = exports.SopLifecycleState = exports.PlanLifecycleState = exports.IncidentStatus = exports.ExecutionMode = exports.HarnessType = exports.AnomalyType = exports.ChangeClassification = exports.ComplexityTier = exports.BudgetTier = exports.TokenUtility = exports.EnforcementAction = exports.RiskLevel = void 0;
+// ─── Risk Level ──────────────────────────────────────────────────────
+// HLD §3.5, LLD §3.1 — risk_level enum
+/** Risk severity classification for SOPs, anomalies, and incidents. */
+exports.RiskLevel = {
+    LOW: 'LOW',
+    MEDIUM: 'MEDIUM',
+    HIGH: 'HIGH',
+    CRITICAL: 'CRITICAL',
+};
+// ─── Enforcement Action ──────────────────────────────────────────────
+// HLD §3.3, LLD §3.1 — enforcement_action_type enum
+/** PCAS enforcement action applied to a tool call. */
+exports.EnforcementAction = {
+    BYPASS: 'BYPASS',
+    ENHANCE: 'ENHANCE',
+    HIJACK: 'HIJACK',
+    KILL: 'KILL',
+};
+// ─── Token Utility ───────────────────────────────────────────────────
+// HLD §3.6, LLD §3.1 — token_utility_type enum
+/** Classification of whether a token expenditure was useful or wasted. */
+exports.TokenUtility = {
+    USEFUL: 'USEFUL',
+    WASTED: 'WASTED',
+};
+// ─── Budget Tier ─────────────────────────────────────────────────────
+// HLD §3.3, LLD §3.1 — budget_tier_type enum
+/** Budget authority level assigned to a user or agent session. */
+exports.BudgetTier = {
+    JUNIOR: 'JUNIOR',
+    SENIOR: 'SENIOR',
+    STAFF: 'STAFF',
+    PRINCIPAL: 'PRINCIPAL',
+};
+// ─── Complexity Tier ─────────────────────────────────────────────────
+// HLD §3.4, LLD §3.1 — complexity_tier enum
+/** Task complexity classification for model routing. */
+exports.ComplexityTier = {
+    TIER_0: 'TIER_0',
+    TIER_1: 'TIER_1',
+    TIER_2: 'TIER_2',
+};
+// ─── Change Classification ──────────────────────────────────────────
+// HLD §3.4, LLD §3.1 — change_classification enum
+/** Classification of how an SOP change affects the prior version. */
+exports.ChangeClassification = {
+    STRENGTHEN: 'STRENGTHEN',
+    CLARIFY: 'CLARIFY',
+    NARROW: 'NARROW',
+    WEAKEN: 'WEAKEN',
+};
+// ─── Anomaly Type ────────────────────────────────────────────────────
+// HLD §3.5, LLD §3.1 — anomaly_type enum (12-category runtime taxonomy)
+/** Runtime anomaly classification taxonomy. */
+exports.AnomalyType = {
+    TOOL_ABUSE: 'TOOL_ABUSE',
+    TOKEN_WASTE: 'TOKEN_WASTE',
+    LOOP_DETECTED: 'LOOP_DETECTED',
+    UNAUTHORIZED_TOOL: 'UNAUTHORIZED_TOOL',
+    DATA_EXFILTRATION: 'DATA_EXFILTRATION',
+    PROMPT_INJECTION: 'PROMPT_INJECTION',
+    HALLUCINATION: 'HALLUCINATION',
+    SCOPE_VIOLATION: 'SCOPE_VIOLATION',
+    BUDGET_BREACH: 'BUDGET_BREACH',
+    SPAWN_BUDGET_BREACH: 'SPAWN_BUDGET_BREACH',
+    WORKFLOW_BUDGET_BREACH: 'WORKFLOW_BUDGET_BREACH',
+    WORKFLOW_GOAL_DRIFT: 'WORKFLOW_GOAL_DRIFT',
+};
+// ─── Harness Type ────────────────────────────────────────────────────
+// HLD §3.14, §4.5 — Supported AI agent harness integrations
+// Full matrix: HLD §3.14 Harness Onboarding Matrix (8 harnesses)
+/** Supported AI agent harness/IDE integrations. */
+exports.HarnessType = {
+    CURSOR: 'cursor',
+    CLAUDE_CODE: 'claude-code',
+    ANTIGRAVITY: 'antigravity',
+    N8N: 'n8n',
+    CODEX: 'codex',
+    WINDSURF: 'windsurf',
+    AIDER: 'aider',
+    OPENHANDS: 'openhands',
+    OPENCLAW: 'openclaw',
+    HERMES: 'hermes',
+    PI: 'pi',
+};
+// ─── Execution Mode ──────────────────────────────────────────────────
+// HLD §3.4 — Agent execution modes
+/** Agent execution mode controlling autonomy level. */
+exports.ExecutionMode = {
+    STANDARD: 'STANDARD',
+    PLAN_ONLY: 'PLAN_ONLY',
+    SHADOW: 'SHADOW',
+    AUTONOMOUS: 'AUTONOMOUS',
+};
+// ─── Incident Status ─────────────────────────────────────────────────
+// HLD §3.6.1, LLD §3.1 — Governance incident lifecycle
+/** Lifecycle state of a governance incident. */
+exports.IncidentStatus = {
+    OPEN: 'OPEN',
+    ACKNOWLEDGED: 'ACKNOWLEDGED',
+    RESOLVED: 'RESOLVED',
+    FALSE_POSITIVE: 'FALSE_POSITIVE',
+};
+// ─── Plan Lifecycle State ────────────────────────────────────────────
+// HLD §3.4.1 — Stored plan compliance trail lifecycle
+/** Lifecycle state for stored execution plans. */
+exports.PlanLifecycleState = {
+    PENDING_APPROVAL: 'PENDING_APPROVAL',
+    APPROVED: 'APPROVED',
+    REJECTED: 'REJECTED',
+    EXECUTING: 'EXECUTING',
+    COMPLETED: 'COMPLETED',
+};
+// ─── SOP Lifecycle State ─────────────────────────────────────────────
+// HLD §3.4, LLD #6 §4.2 — 7-state FSM: DRAFT → PENDING_REVIEW → GENERATED
+//   → HYPOTHESIZED → REFINED → VALIDATED → INVALIDATED
+/** Lifecycle state for SOPs in the registry. */
+exports.SopLifecycleState = {
+    DRAFT: 'DRAFT',
+    PENDING_REVIEW: 'PENDING_REVIEW',
+    GENERATED: 'GENERATED',
+    HYPOTHESIZED: 'HYPOTHESIZED',
+    REFINED: 'REFINED',
+    VALIDATED: 'VALIDATED',
+    INVALIDATED: 'INVALIDATED',
+};
+// ─── Routing Tier ────────────────────────────────────────────────────
+// HLD §3.6, LLD §3.1 — Model routing tier classification
+/** Model routing tier for cost optimization. */
+exports.RoutingTier = {
+    FRONTIER: 'frontier',
+    ECONOMY: 'economy',
+    LOCAL: 'local',
+};
+// ─── Workspace Role ──────────────────────────────────────────────────
+// HLD §5.1, LLD #7 — RBAC role hierarchy
+/** Workspace member role for RBAC. OWNER > ADMIN > EM > DEVELOPER > VIEWER. */
+exports.WorkspaceRole = {
+    OWNER: 'OWNER',
+    ADMIN: 'ADMIN',
+    EM: 'EM',
+    DEVELOPER: 'DEVELOPER',
+    VIEWER: 'VIEWER',
+};
+//# sourceMappingURL=enums.js.map

package/.dist/enums.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,wEAAwE;AACxE,uCAAuC;AAEvC,uEAAuE;AAC1D,QAAA,SAAS,GAAG;IACvB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,oDAAoD;AAEpD,sDAAsD;AACzC,QAAA,iBAAiB,GAAG;IAC/B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;CACJ,CAAA;AAKV,wEAAwE;AACxE,+CAA+C;AAE/C,0EAA0E;AAC7D,QAAA,YAAY,GAAG;IAC1B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,6CAA6C;AAE7C,kEAAkE;AACrD,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,4CAA4C;AAE5C,wDAAwD;AAC3C,QAAA,cAAc,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,uEAAuE;AACvE,kDAAkD;AAElD,qEAAqE;AACxD,QAAA,oBAAoB,GAAG;IAClC,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,wEAAwE;AAExE,+CAA+C;AAClC,QAAA,WAAW,GAAG;IACzB,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,aAAa,EAAE,eAAe;IAC9B,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,gBAAgB,EAAE,kBAAkB;IACpC,aAAa,EAAE,eAAe;IAC9B,eAAe,EAAE,iBAAiB;IAClC,aAAa,EAAE,eAAe;IAC9B,mBAAmB,EAAE,qBAAqB;IAC1C,sBAAsB,EAAE,wBAAwB;IAChD,mBAAmB,EAAE,qBAAqB;CAClC,CAAA;AAKV,wEAAwE;AACxE,4DAA4D;AAC5D,iEAAiE;AAEjE,mDAAmD;AACtC,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,IAAI;CACA,CAAA;AAKV,wEAAwE;AACxE,mCAAmC;AAEnC,uDAAuD;AAC1C,QAAA,aAAa,GAAG;IAC3B,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;CAChB,CAAA;AAKV,wEAAwE;AACxE,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;CACxB,CAAA;AAKV,wEAAwE;AACxE,sDAAsD;AAEtD,kDAAkD;AACrC,QAAA,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,0EAA0E;AAC1E,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE,OAAO;IACd,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAClB,CAAA;AAKV,wEAAwE;AACxE,yDAAyD;AAEzD,gDAAgD;AACnC,QAAA,WAAW,GAAG;IACzB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACN,CAAA;AAKV,wEAAwE;AACxE,yCAAyC;AAEzC,+EAA+E;AAClE,QAAA,aAAa,GAAG;IAC3B,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;CACR,CAAA"}