@intutic/shared-types 2.2.0 → 2.4.0

package/dist/index.js

@@ -22,10 +22,13 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.canonicalizeIr = exports.validateGuardrailIr = exports.MIN_EGRESS_CIDR_PREFIX = exports.MAX_SETTING_VALUES = exports.MODEL_ID_RE = exports.isEgressHostEntry = exports.settingValues = exports.isSettingIr = exports.SETTING_KIND_KEYS = exports.SETTING_KINDS = exports.isFrontMatterIr = exports.FRONT_MATTER_KINDS = exports.IR_KINDS = exports.GuardrailIrSchema = exports.TOOL_TOKEN_RE = exports.isActionToken = exports.ACTION_TOKENS = exports.isDocumentProvider = exports.isSourceProvider = exports.PRIVILEGED_SOURCE_PROVIDERS = exports.DOCUMENT_PROVIDERS = exports.SOURCE_PROVIDERS = exports.ANOMALY_SEVERITY_MAP = exports.MCP_ANOMALY_DETECTOR_IDS = exports.resolveSecurityProbeSampleRate = exports.resolveWorkspaceSettings = exports.DEFAULT_WORKSPACE_SETTINGS = exports.AmendmentSource = exports.BypassEnforcementTier = exports.McpProxyMode = exports.McpProxyFailBehavior = exports.WorkspaceRole = exports.RoutingTier = exports.HookPhase = exports.SopType = exports.SopLifecycleState = exports.PlanExecutionOutcome = exports.PlanLifecycleState = exports.IncidentStatus = exports.ExecutionMode = exports.HARNESS_HEADLINE_COUNT = exports.HARNESS_COUNT = exports.HarnessType = exports.AnomalyType = exports.ChangeClassification = exports.ComplexityTier = exports.BudgetTier = exports.TokenUtility = exports.EnforcementAction = exports.RiskLevel = void 0;
-exports.E_RATE_LIMITED = exports.E_BUDGET_EXCEEDED = exports.E_FORBIDDEN = exports.E_SCIM_AUTH_FAILED = exports.E_SCIM_DUPLICATE = exports.E_OFFBOARDING_IN_PROGRESS = exports.E_UNAUTHORIZED = exports.E_CACHE_UNAVAILABLE = exports.E_NOT_FOUND = exports.IntuticError = exports.VALID_PLAN_TRANSITIONS = exports.ENFORCEMENT_BY_STATE = exports.VALID_SOP_TRANSITIONS = exports.LEDGER_EDGE_TYPES = exports.LEDGER_IMPACT_MAX_DEPTH = exports.LEDGER_NEAR_IDENTICAL_JACCARD = exports.LEDGER_OVERLAP_JACCARD = exports.isCandidateCitationEvidence = exports.GUARDRAIL_EVENT_TYPES = exports.GUARDRAIL_TARGETS = exports.guardrailIdFromSopTitle = exports.guardrailFileStem = exports.GUARDRAIL_SOP_TITLE_PREFIX = exports.LIVE_GUARDRAIL_STATUSES = exports.GUARDRAIL_STATUSES = exports.renderWorkspaceSetting = exports.renderGuardrailSopFile = exports.MAX_QUOTE_IN_REASON = exports.MAX_REASON_CHARS = exports.frontMatterIrsOf = exports.frontMatterToIrs = exports.isEnforceableFrontMatter = exports.parseFrontMatterEnforcing = exports.splitFrontMatter = exports.renderFrontMatterLines = exports.renderHookRule = exports.renderHookReason = exports.scrubReason = exports.renderArgPattern = exports.renderToolPattern = exports.escapeRegexLiteral = exports.MAX_CALLS_LIMIT = exports.MAX_RATIONALE_CHARS = exports.MAX_TITLE_CHARS = exports.MAX_ROLES = exports.MAX_LITERAL_CHARS = exports.MAX_LITERALS = exports.MAX_LIST_TOKENS = exports.MAX_HOOK_TOOLS = exports.irTokens = void 0;
-exports.getInputBucket = exports.E_OVERAGE_HARD_CAP_EXCEEDED = exports.E_ATTENUATION_CAP_VIOLATION = exports.SSO_GROUP_RECORD_TAG = exports.decodeSsoGroupRecord = exports.encodeSsoGroupRecord = exports.ssoGroupRuleId = exports.evaluateSsoGroupClearance = exports.parseSsoGroupPolicy = exports.SsoGroupPolicySchema = exports.AttenuateTokenInputSchema = exports.IssueOboTokenInputSchema = exports.PromptEstimateInputSchema = exports.CreateScimTokenSchema = exports.UpdateUserProfileSchema = exports.CreateSsoProviderSchema = exports.BatchConfigCapturePayloadSchema = exports.DaemonStatusSchema = exports.SopHashReportSchema = exports.MagicLinkLoginInputSchema = exports.MagicLinkRequestInputSchema = exports.ResendVerificationInputSchema = exports.VerifyEmailInputSchema = exports.OrgSignupInputSchema = exports.SignupInputSchema = exports.CreateApiKeyInputSchema = exports.UpdateRoleInputSchema = exports.InviteMemberInputSchema = exports.ChangePasswordInputSchema = exports.RefreshInputSchema = exports.RegisterInputSchema = exports.LoginInputSchema = exports.PolicyVerdictSchema = exports.CreateTraceSchema = exports.CreateSessionSchema = exports.isIntuticError = exports.E_SSL_NOT_ENFORCED = exports.E_FEATURE_NOT_AVAILABLE = exports.E_PROVIDER_IN_USE = exports.E_PROVIDER_DISABLED = exports.E_OIDC_CLAIMS_MISSING = exports.E_OIDC_TOKEN_EXCHANGE_FAILED = exports.E_OIDC_INVALID_STATE = exports.E_SSO_NO_MEMBERSHIP = exports.E_SSO_DISABLED = exports.E_DOMAIN_NOT_VERIFIED = exports.E_SIGNUP_DISABLED = exports.E_VALIDATION_FAILED = exports.E_APPROVAL_RATIONALE_REQUIRED = exports.E_APPEND_ONLY_VIOLATION = void 0;
-exports.openaiBaseUrl = exports.anthropicBaseUrl = exports.proxyHost = exports.DEFAULT_PROXY_HOST = exports.deriveEnforcementInputs = exports.MAX_SCRIPT_HASH_BYTES = exports.MAX_SCRIPT_SCAN_BYTES = exports.MAX_FILES_PER_SKILL = exports.MAX_SKILL_DIR_DEPTH = exports.detectScriptLanguage = exports.scanScriptContent = exports.SCRIPT_SCAN_PATTERNS = exports.EXCERPT_RADIUS = exports.excerptFor = exports.scanSkillContent = exports.SKILL_CONTENT_BLOCK_PATTERN_IDS = exports.SKILL_SCAN_PATTERNS = exports.secretPatternAlternation = exports.SECRET_VALUE_PATTERNS = exports.findPosture = exports.COST_POSTURES = exports.SECURITY_POSTURES = exports.toonDecodeToolResult = exports.toonEncodeToolResult = exports.shouldToon = exports.toonDecode = exports.toonEncode = exports.serializeCell = exports.extractColumns = exports.TOON_MAGIC = exports.TOON_MAX_CELL_CHARS = exports.TOON_THRESHOLD_ROWS = exports.predicateStringValues = exports.compilePredicate = exports.evaluatePredicate = exports.renderRule = exports.validatePredicate = exports.PredicateError = exports.RENDERABLE_VERDICTS = exports.RULE_DSL_OPERATORS = exports.RULE_DSL_FIELDS = exports.explainWasmImport = exports.unsupportedWasmImports = exports.WASM_HOST_IMPORTS = void 0;
+exports.isEgressHostEntry = exports.settingValues = exports.isSettingIr = exports.SETTING_KIND_KEYS = exports.SETTING_KINDS = exports.isFrontMatterIr = exports.FRONT_MATTER_KINDS = exports.IR_KINDS = exports.GuardrailIrSchema = exports.TOOL_TOKEN_RE = exports.isActionToken = exports.ACTION_TOKENS = exports.isDocumentProvider = exports.isSourceProvider = exports.DOCUMENT_PROVIDERS = exports.SOURCE_PROVIDERS = exports.ANOMALY_SEVERITY_MAP = exports.DEFAULT_MONTHLY_BUDGET_USD = exports.DEFAULT_DAILY_BUDGET_USD = exports.MCP_ANOMALY_DETECTOR_IDS = exports.resolveSecurityProbeSampleRate = exports.resolveWorkspaceSettings = exports.DEFAULT_WORKSPACE_SETTINGS = exports.AmendmentSource = exports.BypassEnforcementTier = exports.McpProxyMode = exports.McpProxyFailBehavior = exports.WorkspaceRole = exports.RoutingTier = exports.HookPhase = exports.SopType = exports.SopLifecycleState = exports.PlanExecutionOutcome = exports.PlanLifecycleState = exports.SystemIncidentType = exports.isIncidentType = exports.INCIDENT_TYPES = exports.IncidentType = exports.IncidentStatus = exports.ExecutionMode = exports.HARNESS_HEADLINE_COUNT = exports.HARNESS_COUNT = exports.HarnessType = exports.AnomalyType = exports.ChangeClassification = exports.ComplexityTier = exports.BudgetTier = exports.TokenUtility = exports.EnforcementAction = exports.RiskLevel = void 0;
+exports.VALID_PLAN_TRANSITIONS = exports.ENFORCEMENT_BY_STATE = exports.VALID_SOP_TRANSITIONS = exports.LEDGER_EDGE_TYPES = exports.LEDGER_IMPACT_MAX_DEPTH = exports.LEDGER_NEAR_IDENTICAL_JACCARD = exports.LEDGER_OVERLAP_JACCARD = exports.isCandidateCitationEvidence = exports.AuthoredGuardrailUpdateSchema = exports.AuthoredGuardrailCreateSchema = exports.AUTHORED_DESCRIPTION_MAX_CHARS = exports.AUTHORED_NAME_MAX_CHARS = exports.GUARDRAIL_PROVENANCES = exports.GUARDRAIL_EVENT_TYPES = exports.GUARDRAIL_TARGETS = exports.guardrailIdFromSopTitle = exports.guardrailFileStem = exports.GUARDRAIL_SOP_TITLE_PREFIX = exports.LIVE_GUARDRAIL_STATUSES = exports.GUARDRAIL_STATUSES = exports.renderWorkspaceSetting = exports.renderGuardrailSopFile = exports.MAX_QUOTE_IN_REASON = exports.MAX_REASON_CHARS = exports.frontMatterIrsOf = exports.frontMatterToIrs = exports.isEnforceableFrontMatter = exports.parseFrontMatterEnforcing = exports.splitFrontMatter = exports.renderFrontMatterLines = exports.renderHookRule = exports.renderHookReason = exports.scrubReason = exports.renderArgPattern = exports.renderToolPattern = exports.escapeRegexLiteral = exports.MAX_CALLS_LIMIT = exports.MAX_RATIONALE_CHARS = exports.MAX_TITLE_CHARS = exports.MAX_ROLES = exports.MAX_LITERAL_CHARS = exports.MAX_LITERALS = exports.MAX_LIST_TOKENS = exports.MAX_HOOK_TOOLS = exports.irTokens = exports.canonicalizeIr = exports.validateGuardrailIr = exports.MIN_EGRESS_CIDR_PREFIX = exports.MAX_SETTING_VALUES = exports.MODEL_ID_RE = void 0;
+exports.PromptEstimateInputSchema = exports.normalizeGitRemote = exports.CreateScimTokenSchema = exports.UpdateUserProfileSchema = exports.CreateSsoProviderSchema = exports.BatchConfigCapturePayloadSchema = exports.DaemonStatusSchema = exports.SopHashReportSchema = exports.MagicLinkLoginInputSchema = exports.MagicLinkRequestInputSchema = exports.ResendVerificationInputSchema = exports.VerifyEmailInputSchema = exports.OrgSignupInputSchema = exports.SignupInputSchema = exports.UpdateApiKeyInputSchema = exports.CreateApiKeyInputSchema = exports.UpdateRoleInputSchema = exports.InviteMemberInputSchema = exports.ChangePasswordInputSchema = exports.RefreshInputSchema = exports.RegisterInputSchema = exports.LoginInputSchema = exports.PolicyVerdictSchema = exports.CreateTraceSchema = exports.CreateSessionSchema = exports.isIntuticError = exports.E_SSL_NOT_ENFORCED = exports.E_FEATURE_NOT_AVAILABLE = exports.E_PROVIDER_IN_USE = exports.E_PROVIDER_DISABLED = exports.E_OIDC_CLAIMS_MISSING = exports.E_OIDC_TOKEN_EXCHANGE_FAILED = exports.E_OIDC_INVALID_STATE = exports.E_SSO_NO_MEMBERSHIP = exports.E_SSO_DISABLED = exports.E_DOMAIN_NOT_VERIFIED = exports.E_SIGNUP_DISABLED = exports.E_VALIDATION_FAILED = exports.E_APPROVAL_RATIONALE_REQUIRED = exports.E_APPEND_ONLY_VIOLATION = exports.E_RATE_LIMITED = exports.E_BUDGET_EXCEEDED = exports.E_FORBIDDEN = exports.E_SCIM_AUTH_FAILED = exports.E_SCIM_DUPLICATE = exports.E_OFFBOARDING_IN_PROGRESS = exports.E_UNAUTHORIZED = exports.E_CACHE_UNAVAILABLE = exports.E_NOT_FOUND = exports.IntuticError = void 0;
+exports.scoreToolSetChange = exports.MEMBER_BUDGET_DEFAULT = exports.MAX_KEY_TPM = exports.MAX_KEY_RPM = exports.MAX_SPEND_BUDGET_USD = exports.SPEND_BUDGET_SCOPES = exports.SPEND_BUDGET_PERIODS = exports.describeSpendBudget = exports.spendBudgetWindow = exports.KeyRateLimitSchema = exports.SpendBudgetListSchema = exports.SpendBudgetSchema = exports.MCP_BUDGET_PERIODS = exports.MCP_BUDGET_SCOPES = exports.MAX_MCP_BUDGET_LIMIT = exports.MAX_MCP_BUDGETS = exports.MCP_BUDGET_DEFAULT_WARN_PCT = exports.describeMcpBudget = exports.budgetWarnAt = exports.budgetWindow = exports.budgetsForCall = exports.parseMcpBudgetPolicy = exports.McpBudgetSettingsSchema = exports.harnessOfGate = exports.gateIdentitiesOf = exports.GEMINI_CLI_GATE_ID = exports.MCP_SNAPSHOT_UNVERIFIED_JS_SOURCE = exports.mcpSnapshotUnverifiedRefusal = exports.MCP_ALLOWLIST_JS_SOURCE = exports.MCP_ALLOWLIST_RECORD_TAG = exports.evaluateMcpAllowlist = exports.decodeMcpAllowlistRecord = exports.encodeMcpAllowlistRecord = exports.MCP_REGISTRY_JS_SOURCE = exports.MCP_REGISTRY_RECORD_TAG = exports.isUnrestrictedMcpRegistry = exports.evaluateMcpRegistry = exports.decodeMcpRegistryRecord = exports.encodeMcpRegistryRecord = exports.parseMcpRegistryRecord = exports.SSO_GROUP_RECORD_TAG = exports.decodeSsoGroupRecord = exports.encodeSsoGroupRecord = exports.ssoGroupRuleId = exports.ssoGroupToolMatches = exports.evaluateSsoGroupClearance = exports.parseSsoGroupPolicy = exports.SsoGroupPolicySchema = exports.AttenuateTokenInputSchema = exports.IssueOboTokenInputSchema = void 0;
+exports.UPSTREAM_RETRY_LIMITS = exports.UPSTREAM_PROVIDERS = exports.DEFAULT_UPSTREAM_RETRY_STATUSES = exports.DEFAULT_UPSTREAM_RETRY = exports.secretPatternAlternation = exports.SECRET_VALUE_PATTERNS = exports.holdApprovalHint = exports.HOLD_ID_PLACEHOLDER = exports.HOLD_APPROVAL_HINT_TEMPLATE = exports.findDestructiveSql = exports.DESTRUCTIVE_SQL_STATEMENTS = exports.findPosture = exports.COST_POSTURES = exports.SECURITY_POSTURES = exports.toonDecodeToolResult = exports.toonEncodeToolResult = exports.shouldToon = exports.toonDecode = exports.toonEncode = exports.serializeCell = exports.extractColumns = exports.TOON_MAGIC = exports.TOON_MAX_CELL_CHARS = exports.TOON_THRESHOLD_ROWS = exports.predicateStringValues = exports.compilePredicate = exports.evaluatePredicate = exports.renderRule = exports.validatePredicate = exports.PredicateError = exports.RENDERABLE_VERDICTS = exports.RULE_DSL_OPERATORS = exports.RULE_DSL_FIELDS = exports.REGO_HOST_BUILTIN_NAMES = exports.REGO_HOST_BUILTINS = exports.parseWasmRuleDescriptors = exports.explainWasmImport = exports.unsupportedWasmImports = exports.WASM_HOST_IMPORTS = exports.getInputBucket = exports.E_OVERAGE_HARD_CAP_EXCEEDED = exports.E_ATTENUATION_CAP_VIOLATION = exports.scanToolDescription = exports.MCP_TOOL_CAPABILITY_POINTS = exports.MCP_TOOL_RISK_MEDIUM = exports.MCP_TOOL_RISK_HIGH = exports.MAX_TOOL_SCHEMA_CHARS = exports.MAX_TOOL_DESCRIPTION_CHARS = exports.riskLevelOf = exports.normalizeToolDefinition = void 0;
+exports.DELEGATED_GATE_HARNESSES = exports.BRIDGE_GATED_HARNESSES = exports.gateDeadlineMs = exports.HOOK_GATE_TIMEOUTS = exports.GATE_DEADLINE_MARGIN_MS = exports.HOOK_TIMEOUT_SECONDS = exports.ARGUMENTS_SIZE_LIMIT = exports.COMMAND_SIZE_LIMIT = exports.SEQUENCE_JS_SOURCE = exports.sequenceMatch = exports.compileSequence = exports.sequenceAlternatives = exports.PHRASES_JS_SOURCE = exports.hasPhrase = exports.phraseText = exports.rulesFrontMatterOf = exports.decisionsTargetOf = exports.harnessesReading = exports.rulesFileOf = exports.HARNESS_RULES_FILES = exports.openaiBaseUrl = exports.anthropicBaseUrl = exports.proxyHost = exports.DEFAULT_PROXY_HOST = exports.sanitizeMcpEndpoint = exports.homeRelativePath = exports.REDACTED_SEGMENT = exports.REDACTED_PATH = exports.DEVICE_INVENTORY_SCHEMA_VERSION = exports.deriveEnforcementInputs = exports.MAX_SCRIPT_HASH_BYTES = exports.MAX_SCRIPT_SCAN_BYTES = exports.MAX_FILES_PER_SKILL = exports.MAX_SKILL_DIR_DEPTH = exports.detectScriptLanguage = exports.scanScriptContent = exports.SCRIPT_SCAN_PATTERNS = exports.EXCERPT_RADIUS = exports.excerptFor = exports.scanSkillContent = exports.SKILL_CONTENT_BLOCK_PATTERN_IDS = exports.SKILL_SCAN_PATTERNS = exports.parseWorkspacePiiDetectors = exports.effectivePiiActions = exports.PiiDetectorSettingsSchema = exports.PII_DETECTOR_IDS = exports.PII_DEFINITION = exports.PII_ACTIONS = exports.UpstreamRetrySettingsSchema = exports.UpstreamFallbackTargetSchema = void 0;
+exports.GATE_DECISION_VERDICTS = exports.isRuleLoadFailureReason = exports.RULE_LOAD_FAILURE_TEXT = exports.RULE_LOAD_FAILURE_REASONS = exports.capDeclaredMemory = exports.WASM_PAGE_BYTES = exports.meterFuel = exports.REGO_FUEL_BUDGET = exports.FUEL_EXPORT = exports.DEFAULT_FUEL_BUDGET = exports.gateKindForHarness = exports.SDK_GATED_HARNESSES = exports.NO_GATE_HARNESSES = void 0;
 var enums_js_1 = require("./enums.js");
 Object.defineProperty(exports, "RiskLevel", { enumerable: true, get: function () { return enums_js_1.RiskLevel; } });
 Object.defineProperty(exports, "EnforcementAction", { enumerable: true, get: function () { return enums_js_1.EnforcementAction; } });
@@ -39,6 +42,10 @@ Object.defineProperty(exports, "HARNESS_COUNT", { enumerable: true, get: functio
 Object.defineProperty(exports, "HARNESS_HEADLINE_COUNT", { enumerable: true, get: function () { return enums_js_1.HARNESS_HEADLINE_COUNT; } });
 Object.defineProperty(exports, "ExecutionMode", { enumerable: true, get: function () { return enums_js_1.ExecutionMode; } });
 Object.defineProperty(exports, "IncidentStatus", { enumerable: true, get: function () { return enums_js_1.IncidentStatus; } });
+Object.defineProperty(exports, "IncidentType", { enumerable: true, get: function () { return enums_js_1.IncidentType; } });
+Object.defineProperty(exports, "INCIDENT_TYPES", { enumerable: true, get: function () { return enums_js_1.INCIDENT_TYPES; } });
+Object.defineProperty(exports, "isIncidentType", { enumerable: true, get: function () { return enums_js_1.isIncidentType; } });
+Object.defineProperty(exports, "SystemIncidentType", { enumerable: true, get: function () { return enums_js_1.SystemIncidentType; } });
 Object.defineProperty(exports, "PlanLifecycleState", { enumerable: true, get: function () { return enums_js_1.PlanLifecycleState; } });
 Object.defineProperty(exports, "PlanExecutionOutcome", { enumerable: true, get: function () { return enums_js_1.PlanExecutionOutcome; } });
 Object.defineProperty(exports, "SopLifecycleState", { enumerable: true, get: function () { return enums_js_1.SopLifecycleState; } });
@@ -57,12 +64,14 @@ Object.defineProperty(exports, "DEFAULT_WORKSPACE_SETTINGS", { enumerable: true,
 Object.defineProperty(exports, "resolveWorkspaceSettings", { enumerable: true, get: function () { return workspaceSettings_js_1.resolveWorkspaceSettings; } });
 Object.defineProperty(exports, "resolveSecurityProbeSampleRate", { enumerable: true, get: function () { return workspaceSettings_js_1.resolveSecurityProbeSampleRate; } });
 Object.defineProperty(exports, "MCP_ANOMALY_DETECTOR_IDS", { enumerable: true, get: function () { return workspaceSettings_js_1.MCP_ANOMALY_DETECTOR_IDS; } });
+var finops_js_1 = require("./finops.js");
+Object.defineProperty(exports, "DEFAULT_DAILY_BUDGET_USD", { enumerable: true, get: function () { return finops_js_1.DEFAULT_DAILY_BUDGET_USD; } });
+Object.defineProperty(exports, "DEFAULT_MONTHLY_BUDGET_USD", { enumerable: true, get: function () { return finops_js_1.DEFAULT_MONTHLY_BUDGET_USD; } });
 var anomaly_js_1 = require("./anomaly.js");
 Object.defineProperty(exports, "ANOMALY_SEVERITY_MAP", { enumerable: true, get: function () { return anomaly_js_1.ANOMALY_SEVERITY_MAP; } });
 var sourceProviders_js_1 = require("./sourceProviders.js");
 Object.defineProperty(exports, "SOURCE_PROVIDERS", { enumerable: true, get: function () { return sourceProviders_js_1.SOURCE_PROVIDERS; } });
 Object.defineProperty(exports, "DOCUMENT_PROVIDERS", { enumerable: true, get: function () { return sourceProviders_js_1.DOCUMENT_PROVIDERS; } });
-Object.defineProperty(exports, "PRIVILEGED_SOURCE_PROVIDERS", { enumerable: true, get: function () { return sourceProviders_js_1.PRIVILEGED_SOURCE_PROVIDERS; } });
 Object.defineProperty(exports, "isSourceProvider", { enumerable: true, get: function () { return sourceProviders_js_1.isSourceProvider; } });
 Object.defineProperty(exports, "isDocumentProvider", { enumerable: true, get: function () { return sourceProviders_js_1.isDocumentProvider; } });
 var guardrailIr_js_1 = require("./guardrailIr.js");
@@ -117,6 +126,11 @@ Object.defineProperty(exports, "guardrailFileStem", { enumerable: true, get: fun
 Object.defineProperty(exports, "guardrailIdFromSopTitle", { enumerable: true, get: function () { return policyGuardrails_js_1.guardrailIdFromSopTitle; } });
 Object.defineProperty(exports, "GUARDRAIL_TARGETS", { enumerable: true, get: function () { return policyGuardrails_js_1.GUARDRAIL_TARGETS; } });
 Object.defineProperty(exports, "GUARDRAIL_EVENT_TYPES", { enumerable: true, get: function () { return policyGuardrails_js_1.GUARDRAIL_EVENT_TYPES; } });
+Object.defineProperty(exports, "GUARDRAIL_PROVENANCES", { enumerable: true, get: function () { return policyGuardrails_js_1.GUARDRAIL_PROVENANCES; } });
+Object.defineProperty(exports, "AUTHORED_NAME_MAX_CHARS", { enumerable: true, get: function () { return policyGuardrails_js_1.AUTHORED_NAME_MAX_CHARS; } });
+Object.defineProperty(exports, "AUTHORED_DESCRIPTION_MAX_CHARS", { enumerable: true, get: function () { return policyGuardrails_js_1.AUTHORED_DESCRIPTION_MAX_CHARS; } });
+Object.defineProperty(exports, "AuthoredGuardrailCreateSchema", { enumerable: true, get: function () { return policyGuardrails_js_1.AuthoredGuardrailCreateSchema; } });
+Object.defineProperty(exports, "AuthoredGuardrailUpdateSchema", { enumerable: true, get: function () { return policyGuardrails_js_1.AuthoredGuardrailUpdateSchema; } });
 Object.defineProperty(exports, "isCandidateCitationEvidence", { enumerable: true, get: function () { return policyGuardrails_js_1.isCandidateCitationEvidence; } });
 Object.defineProperty(exports, "LEDGER_OVERLAP_JACCARD", { enumerable: true, get: function () { return policyGuardrails_js_1.LEDGER_OVERLAP_JACCARD; } });
 Object.defineProperty(exports, "LEDGER_NEAR_IDENTICAL_JACCARD", { enumerable: true, get: function () { return policyGuardrails_js_1.LEDGER_NEAR_IDENTICAL_JACCARD; } });
@@ -142,7 +156,7 @@ Object.defineProperty(exports, "E_APPROVAL_RATIONALE_REQUIRED", { enumerable: tr
 Object.defineProperty(exports, "E_VALIDATION_FAILED", { enumerable: true, get: function () { return errors_js_1.E_VALIDATION_FAILED; } });
 Object.defineProperty(exports, "E_SIGNUP_DISABLED", { enumerable: true, get: function () { return errors_js_1.E_SIGNUP_DISABLED; } });
 Object.defineProperty(exports, "E_DOMAIN_NOT_VERIFIED", { enumerable: true, get: function () { return errors_js_1.E_DOMAIN_NOT_VERIFIED; } });
-// Identity Federation (LLD #11)
+// Identity Federation
 Object.defineProperty(exports, "E_SSO_DISABLED", { enumerable: true, get: function () { return errors_js_1.E_SSO_DISABLED; } });
 Object.defineProperty(exports, "E_SSO_NO_MEMBERSHIP", { enumerable: true, get: function () { return errors_js_1.E_SSO_NO_MEMBERSHIP; } });
 Object.defineProperty(exports, "E_OIDC_INVALID_STATE", { enumerable: true, get: function () { return errors_js_1.E_OIDC_INVALID_STATE; } });
@@ -165,6 +179,7 @@ Object.defineProperty(exports, "ChangePasswordInputSchema", { enumerable: true,
 Object.defineProperty(exports, "InviteMemberInputSchema", { enumerable: true, get: function () { return auth_js_1.InviteMemberInputSchema; } });
 Object.defineProperty(exports, "UpdateRoleInputSchema", { enumerable: true, get: function () { return auth_js_1.UpdateRoleInputSchema; } });
 Object.defineProperty(exports, "CreateApiKeyInputSchema", { enumerable: true, get: function () { return auth_js_1.CreateApiKeyInputSchema; } });
+Object.defineProperty(exports, "UpdateApiKeyInputSchema", { enumerable: true, get: function () { return auth_js_1.UpdateApiKeyInputSchema; } });
 Object.defineProperty(exports, "SignupInputSchema", { enumerable: true, get: function () { return auth_js_1.SignupInputSchema; } });
 Object.defineProperty(exports, "OrgSignupInputSchema", { enumerable: true, get: function () { return auth_js_1.OrgSignupInputSchema; } });
 Object.defineProperty(exports, "VerifyEmailInputSchema", { enumerable: true, get: function () { return auth_js_1.VerifyEmailInputSchema; } });
@@ -179,10 +194,12 @@ var identity_js_1 = require("./identity.js");
 Object.defineProperty(exports, "CreateSsoProviderSchema", { enumerable: true, get: function () { return identity_js_1.CreateSsoProviderSchema; } });
 Object.defineProperty(exports, "UpdateUserProfileSchema", { enumerable: true, get: function () { return identity_js_1.UpdateUserProfileSchema; } });
 Object.defineProperty(exports, "CreateScimTokenSchema", { enumerable: true, get: function () { return identity_js_1.CreateScimTokenSchema; } });
+var gitRemote_js_1 = require("./gitRemote.js");
+Object.defineProperty(exports, "normalizeGitRemote", { enumerable: true, get: function () { return gitRemote_js_1.normalizeGitRemote; } });
 // WS2: Advanced Observability
 var observability_js_1 = require("./observability.js");
 Object.defineProperty(exports, "PromptEstimateInputSchema", { enumerable: true, get: function () { return observability_js_1.PromptEstimateInputSchema; } });
-// WS4: Enterprise Identity & Compliance (LLD #19)
+// WS4: Enterprise Identity & Compliance
 var attenuation_js_1 = require("./attenuation.js");
 Object.defineProperty(exports, "IssueOboTokenInputSchema", { enumerable: true, get: function () { return attenuation_js_1.IssueOboTokenInputSchema; } });
 Object.defineProperty(exports, "AttenuateTokenInputSchema", { enumerable: true, get: function () { return attenuation_js_1.AttenuateTokenInputSchema; } });
@@ -190,31 +207,96 @@ var ssoGroupClearance_js_1 = require("./ssoGroupClearance.js");
 Object.defineProperty(exports, "SsoGroupPolicySchema", { enumerable: true, get: function () { return ssoGroupClearance_js_1.SsoGroupPolicySchema; } });
 Object.defineProperty(exports, "parseSsoGroupPolicy", { enumerable: true, get: function () { return ssoGroupClearance_js_1.parseSsoGroupPolicy; } });
 Object.defineProperty(exports, "evaluateSsoGroupClearance", { enumerable: true, get: function () { return ssoGroupClearance_js_1.evaluateSsoGroupClearance; } });
+Object.defineProperty(exports, "ssoGroupToolMatches", { enumerable: true, get: function () { return ssoGroupClearance_js_1.ssoGroupToolMatches; } });
 Object.defineProperty(exports, "ssoGroupRuleId", { enumerable: true, get: function () { return ssoGroupClearance_js_1.ssoGroupRuleId; } });
 Object.defineProperty(exports, "encodeSsoGroupRecord", { enumerable: true, get: function () { return ssoGroupClearance_js_1.encodeSsoGroupRecord; } });
 Object.defineProperty(exports, "decodeSsoGroupRecord", { enumerable: true, get: function () { return ssoGroupClearance_js_1.decodeSsoGroupRecord; } });
 Object.defineProperty(exports, "SSO_GROUP_RECORD_TAG", { enumerable: true, get: function () { return ssoGroupClearance_js_1.SSO_GROUP_RECORD_TAG; } });
+var mcpRegistryRecord_js_1 = require("./mcpRegistryRecord.js");
+Object.defineProperty(exports, "parseMcpRegistryRecord", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.parseMcpRegistryRecord; } });
+Object.defineProperty(exports, "encodeMcpRegistryRecord", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.encodeMcpRegistryRecord; } });
+Object.defineProperty(exports, "decodeMcpRegistryRecord", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.decodeMcpRegistryRecord; } });
+Object.defineProperty(exports, "evaluateMcpRegistry", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.evaluateMcpRegistry; } });
+Object.defineProperty(exports, "isUnrestrictedMcpRegistry", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.isUnrestrictedMcpRegistry; } });
+Object.defineProperty(exports, "MCP_REGISTRY_RECORD_TAG", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.MCP_REGISTRY_RECORD_TAG; } });
+Object.defineProperty(exports, "MCP_REGISTRY_JS_SOURCE", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.MCP_REGISTRY_JS_SOURCE; } });
+Object.defineProperty(exports, "encodeMcpAllowlistRecord", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.encodeMcpAllowlistRecord; } });
+Object.defineProperty(exports, "decodeMcpAllowlistRecord", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.decodeMcpAllowlistRecord; } });
+Object.defineProperty(exports, "evaluateMcpAllowlist", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.evaluateMcpAllowlist; } });
+Object.defineProperty(exports, "MCP_ALLOWLIST_RECORD_TAG", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.MCP_ALLOWLIST_RECORD_TAG; } });
+Object.defineProperty(exports, "MCP_ALLOWLIST_JS_SOURCE", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.MCP_ALLOWLIST_JS_SOURCE; } });
+Object.defineProperty(exports, "mcpSnapshotUnverifiedRefusal", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.mcpSnapshotUnverifiedRefusal; } });
+Object.defineProperty(exports, "MCP_SNAPSHOT_UNVERIFIED_JS_SOURCE", { enumerable: true, get: function () { return mcpRegistryRecord_js_1.MCP_SNAPSHOT_UNVERIFIED_JS_SOURCE; } });
+var gateIdentity_js_1 = require("./gateIdentity.js");
+Object.defineProperty(exports, "GEMINI_CLI_GATE_ID", { enumerable: true, get: function () { return gateIdentity_js_1.GEMINI_CLI_GATE_ID; } });
+Object.defineProperty(exports, "gateIdentitiesOf", { enumerable: true, get: function () { return gateIdentity_js_1.gateIdentitiesOf; } });
+Object.defineProperty(exports, "harnessOfGate", { enumerable: true, get: function () { return gateIdentity_js_1.harnessOfGate; } });
+// MCP governance: call budgets, tool-change risk, description poisoning
+var mcpBudgets_js_1 = require("./mcpBudgets.js");
+Object.defineProperty(exports, "McpBudgetSettingsSchema", { enumerable: true, get: function () { return mcpBudgets_js_1.McpBudgetSettingsSchema; } });
+Object.defineProperty(exports, "parseMcpBudgetPolicy", { enumerable: true, get: function () { return mcpBudgets_js_1.parseMcpBudgetPolicy; } });
+Object.defineProperty(exports, "budgetsForCall", { enumerable: true, get: function () { return mcpBudgets_js_1.budgetsForCall; } });
+Object.defineProperty(exports, "budgetWindow", { enumerable: true, get: function () { return mcpBudgets_js_1.budgetWindow; } });
+Object.defineProperty(exports, "budgetWarnAt", { enumerable: true, get: function () { return mcpBudgets_js_1.budgetWarnAt; } });
+Object.defineProperty(exports, "describeMcpBudget", { enumerable: true, get: function () { return mcpBudgets_js_1.describeMcpBudget; } });
+Object.defineProperty(exports, "MCP_BUDGET_DEFAULT_WARN_PCT", { enumerable: true, get: function () { return mcpBudgets_js_1.MCP_BUDGET_DEFAULT_WARN_PCT; } });
+Object.defineProperty(exports, "MAX_MCP_BUDGETS", { enumerable: true, get: function () { return mcpBudgets_js_1.MAX_MCP_BUDGETS; } });
+Object.defineProperty(exports, "MAX_MCP_BUDGET_LIMIT", { enumerable: true, get: function () { return mcpBudgets_js_1.MAX_MCP_BUDGET_LIMIT; } });
+Object.defineProperty(exports, "MCP_BUDGET_SCOPES", { enumerable: true, get: function () { return mcpBudgets_js_1.MCP_BUDGET_SCOPES; } });
+Object.defineProperty(exports, "MCP_BUDGET_PERIODS", { enumerable: true, get: function () { return mcpBudgets_js_1.MCP_BUDGET_PERIODS; } });
+// LLM spend budgets (workspace, virtual key, member) and key rate limits
+var spendBudgets_js_1 = require("./spendBudgets.js");
+Object.defineProperty(exports, "SpendBudgetSchema", { enumerable: true, get: function () { return spendBudgets_js_1.SpendBudgetSchema; } });
+Object.defineProperty(exports, "SpendBudgetListSchema", { enumerable: true, get: function () { return spendBudgets_js_1.SpendBudgetListSchema; } });
+Object.defineProperty(exports, "KeyRateLimitSchema", { enumerable: true, get: function () { return spendBudgets_js_1.KeyRateLimitSchema; } });
+Object.defineProperty(exports, "spendBudgetWindow", { enumerable: true, get: function () { return spendBudgets_js_1.spendBudgetWindow; } });
+Object.defineProperty(exports, "describeSpendBudget", { enumerable: true, get: function () { return spendBudgets_js_1.describeSpendBudget; } });
+Object.defineProperty(exports, "SPEND_BUDGET_PERIODS", { enumerable: true, get: function () { return spendBudgets_js_1.SPEND_BUDGET_PERIODS; } });
+Object.defineProperty(exports, "SPEND_BUDGET_SCOPES", { enumerable: true, get: function () { return spendBudgets_js_1.SPEND_BUDGET_SCOPES; } });
+Object.defineProperty(exports, "MAX_SPEND_BUDGET_USD", { enumerable: true, get: function () { return spendBudgets_js_1.MAX_SPEND_BUDGET_USD; } });
+Object.defineProperty(exports, "MAX_KEY_RPM", { enumerable: true, get: function () { return spendBudgets_js_1.MAX_KEY_RPM; } });
+Object.defineProperty(exports, "MAX_KEY_TPM", { enumerable: true, get: function () { return spendBudgets_js_1.MAX_KEY_TPM; } });
+Object.defineProperty(exports, "MEMBER_BUDGET_DEFAULT", { enumerable: true, get: function () { return spendBudgets_js_1.MEMBER_BUDGET_DEFAULT; } });
+var mcpToolRisk_js_1 = require("./mcpToolRisk.js");
+Object.defineProperty(exports, "scoreToolSetChange", { enumerable: true, get: function () { return mcpToolRisk_js_1.scoreToolSetChange; } });
+Object.defineProperty(exports, "normalizeToolDefinition", { enumerable: true, get: function () { return mcpToolRisk_js_1.normalizeToolDefinition; } });
+Object.defineProperty(exports, "riskLevelOf", { enumerable: true, get: function () { return mcpToolRisk_js_1.riskLevelOf; } });
+Object.defineProperty(exports, "MAX_TOOL_DESCRIPTION_CHARS", { enumerable: true, get: function () { return mcpToolRisk_js_1.MAX_TOOL_DESCRIPTION_CHARS; } });
+Object.defineProperty(exports, "MAX_TOOL_SCHEMA_CHARS", { enumerable: true, get: function () { return mcpToolRisk_js_1.MAX_TOOL_SCHEMA_CHARS; } });
+Object.defineProperty(exports, "MCP_TOOL_RISK_HIGH", { enumerable: true, get: function () { return mcpToolRisk_js_1.MCP_TOOL_RISK_HIGH; } });
+Object.defineProperty(exports, "MCP_TOOL_RISK_MEDIUM", { enumerable: true, get: function () { return mcpToolRisk_js_1.MCP_TOOL_RISK_MEDIUM; } });
+Object.defineProperty(exports, "MCP_TOOL_CAPABILITY_POINTS", { enumerable: true, get: function () { return mcpToolRisk_js_1.MCP_TOOL_CAPABILITY_POINTS; } });
+var toolPoison_js_1 = require("./toolPoison.js");
+Object.defineProperty(exports, "scanToolDescription", { enumerable: true, get: function () { return toolPoison_js_1.scanToolDescription; } });
 // WS4 + WS5 new error codes
 var errors_js_2 = require("./errors.js");
 Object.defineProperty(exports, "E_ATTENUATION_CAP_VIOLATION", { enumerable: true, get: function () { return errors_js_2.E_ATTENUATION_CAP_VIOLATION; } });
 Object.defineProperty(exports, "E_OVERAGE_HARD_CAP_EXCEEDED", { enumerable: true, get: function () { return errors_js_2.E_OVERAGE_HARD_CAP_EXCEEDED; } });
 var intelligence_js_1 = require("./intelligence.js");
 Object.defineProperty(exports, "getInputBucket", { enumerable: true, get: function () { return intelligence_js_1.getInputBucket; } });
-// LLD #45-slack: Notification Hub + Slack Adapter
+// Notification Hub + Slack Adapter
 __exportStar(require("./notifications.js"), exports);
 // Restored Stripe billing & subscription types
 __exportStar(require("./billing.js"), exports);
 // Restored task management and alerting adapter types
 __exportStar(require("./taskManagement.js"), exports);
-// LLD #67: multi-provider credential registry
+// Multi-provider credential registry
 __exportStar(require("./providers.js"), exports);
-// LLD #70: model catalog & cohort wizard
+// Model catalog & cohort wizard
 __exportStar(require("./modelCatalog.js"), exports);
 __exportStar(require("./providerVerification.js"), exports);
+__exportStar(require("./cloudProbe.js"), exports);
 var wasmHost_js_1 = require("./wasmHost.js");
 Object.defineProperty(exports, "WASM_HOST_IMPORTS", { enumerable: true, get: function () { return wasmHost_js_1.WASM_HOST_IMPORTS; } });
 Object.defineProperty(exports, "unsupportedWasmImports", { enumerable: true, get: function () { return wasmHost_js_1.unsupportedWasmImports; } });
 Object.defineProperty(exports, "explainWasmImport", { enumerable: true, get: function () { return wasmHost_js_1.explainWasmImport; } });
+var wasmRuleDescriptor_js_1 = require("./wasmRuleDescriptor.js");
+Object.defineProperty(exports, "parseWasmRuleDescriptors", { enumerable: true, get: function () { return wasmRuleDescriptor_js_1.parseWasmRuleDescriptors; } });
+// Rego policies compiled by OPA, run as rules (packages/proxy/src/wasm/opa.rs).
+__exportStar(require("./regoRules.js"), exports);
+var regoBuiltins_js_1 = require("./regoBuiltins.js");
+Object.defineProperty(exports, "REGO_HOST_BUILTINS", { enumerable: true, get: function () { return regoBuiltins_js_1.REGO_HOST_BUILTINS; } });
+Object.defineProperty(exports, "REGO_HOST_BUILTIN_NAMES", { enumerable: true, get: function () { return regoBuiltins_js_1.REGO_HOST_BUILTIN_NAMES; } });
 var rulePredicateDsl_js_1 = require("./rulePredicateDsl.js");
 Object.defineProperty(exports, "RULE_DSL_FIELDS", { enumerable: true, get: function () { return rulePredicateDsl_js_1.FIELDS; } });
 Object.defineProperty(exports, "RULE_DSL_OPERATORS", { enumerable: true, get: function () { return rulePredicateDsl_js_1.OPERATORS; } });
@@ -241,9 +323,30 @@ var posturePresets_js_1 = require("./posturePresets.js");
 Object.defineProperty(exports, "SECURITY_POSTURES", { enumerable: true, get: function () { return posturePresets_js_1.SECURITY_POSTURES; } });
 Object.defineProperty(exports, "COST_POSTURES", { enumerable: true, get: function () { return posturePresets_js_1.COST_POSTURES; } });
 Object.defineProperty(exports, "findPosture", { enumerable: true, get: function () { return posturePresets_js_1.findPosture; } });
+var destructiveSql_js_1 = require("./destructiveSql.js");
+Object.defineProperty(exports, "DESTRUCTIVE_SQL_STATEMENTS", { enumerable: true, get: function () { return destructiveSql_js_1.DESTRUCTIVE_SQL_STATEMENTS; } });
+Object.defineProperty(exports, "findDestructiveSql", { enumerable: true, get: function () { return destructiveSql_js_1.findDestructiveSql; } });
+var holdMessages_js_1 = require("./holdMessages.js");
+Object.defineProperty(exports, "HOLD_APPROVAL_HINT_TEMPLATE", { enumerable: true, get: function () { return holdMessages_js_1.HOLD_APPROVAL_HINT_TEMPLATE; } });
+Object.defineProperty(exports, "HOLD_ID_PLACEHOLDER", { enumerable: true, get: function () { return holdMessages_js_1.HOLD_ID_PLACEHOLDER; } });
+Object.defineProperty(exports, "holdApprovalHint", { enumerable: true, get: function () { return holdMessages_js_1.holdApprovalHint; } });
 var secretPatterns_js_1 = require("./secretPatterns.js");
 Object.defineProperty(exports, "SECRET_VALUE_PATTERNS", { enumerable: true, get: function () { return secretPatterns_js_1.SECRET_VALUE_PATTERNS; } });
 Object.defineProperty(exports, "secretPatternAlternation", { enumerable: true, get: function () { return secretPatterns_js_1.secretPatternAlternation; } });
+var upstreamRetry_js_1 = require("./upstreamRetry.js");
+Object.defineProperty(exports, "DEFAULT_UPSTREAM_RETRY", { enumerable: true, get: function () { return upstreamRetry_js_1.DEFAULT_UPSTREAM_RETRY; } });
+Object.defineProperty(exports, "DEFAULT_UPSTREAM_RETRY_STATUSES", { enumerable: true, get: function () { return upstreamRetry_js_1.DEFAULT_UPSTREAM_RETRY_STATUSES; } });
+Object.defineProperty(exports, "UPSTREAM_PROVIDERS", { enumerable: true, get: function () { return upstreamRetry_js_1.UPSTREAM_PROVIDERS; } });
+Object.defineProperty(exports, "UPSTREAM_RETRY_LIMITS", { enumerable: true, get: function () { return upstreamRetry_js_1.UPSTREAM_RETRY_LIMITS; } });
+Object.defineProperty(exports, "UpstreamFallbackTargetSchema", { enumerable: true, get: function () { return upstreamRetry_js_1.UpstreamFallbackTargetSchema; } });
+Object.defineProperty(exports, "UpstreamRetrySettingsSchema", { enumerable: true, get: function () { return upstreamRetry_js_1.UpstreamRetrySettingsSchema; } });
+var piiDetectors_js_1 = require("./piiDetectors.js");
+Object.defineProperty(exports, "PII_ACTIONS", { enumerable: true, get: function () { return piiDetectors_js_1.PII_ACTIONS; } });
+Object.defineProperty(exports, "PII_DEFINITION", { enumerable: true, get: function () { return piiDetectors_js_1.PII_DEFINITION; } });
+Object.defineProperty(exports, "PII_DETECTOR_IDS", { enumerable: true, get: function () { return piiDetectors_js_1.PII_DETECTOR_IDS; } });
+Object.defineProperty(exports, "PiiDetectorSettingsSchema", { enumerable: true, get: function () { return piiDetectors_js_1.PiiDetectorSettingsSchema; } });
+Object.defineProperty(exports, "effectivePiiActions", { enumerable: true, get: function () { return piiDetectors_js_1.effectivePiiActions; } });
+Object.defineProperty(exports, "parseWorkspacePiiDetectors", { enumerable: true, get: function () { return piiDetectors_js_1.parseWorkspacePiiDetectors; } });
 var skillScan_js_1 = require("./skillScan.js");
 Object.defineProperty(exports, "SKILL_SCAN_PATTERNS", { enumerable: true, get: function () { return skillScan_js_1.SKILL_SCAN_PATTERNS; } });
 Object.defineProperty(exports, "SKILL_CONTENT_BLOCK_PATTERN_IDS", { enumerable: true, get: function () { return skillScan_js_1.SKILL_CONTENT_BLOCK_PATTERN_IDS; } });
@@ -260,9 +363,57 @@ Object.defineProperty(exports, "MAX_SCRIPT_SCAN_BYTES", { enumerable: true, get:
 Object.defineProperty(exports, "MAX_SCRIPT_HASH_BYTES", { enumerable: true, get: function () { return scriptScan_js_1.MAX_SCRIPT_HASH_BYTES; } });
 var governanceCoverage_js_1 = require("./governanceCoverage.js");
 Object.defineProperty(exports, "deriveEnforcementInputs", { enumerable: true, get: function () { return governanceCoverage_js_1.deriveEnforcementInputs; } });
+var devInventory_js_1 = require("./devInventory.js");
+Object.defineProperty(exports, "DEVICE_INVENTORY_SCHEMA_VERSION", { enumerable: true, get: function () { return devInventory_js_1.DEVICE_INVENTORY_SCHEMA_VERSION; } });
+Object.defineProperty(exports, "REDACTED_PATH", { enumerable: true, get: function () { return devInventory_js_1.REDACTED_PATH; } });
+Object.defineProperty(exports, "REDACTED_SEGMENT", { enumerable: true, get: function () { return devInventory_js_1.REDACTED_SEGMENT; } });
+Object.defineProperty(exports, "homeRelativePath", { enumerable: true, get: function () { return devInventory_js_1.homeRelativePath; } });
+Object.defineProperty(exports, "sanitizeMcpEndpoint", { enumerable: true, get: function () { return devInventory_js_1.sanitizeMcpEndpoint; } });
 var proxyBaseUrls_js_1 = require("./proxyBaseUrls.js");
 Object.defineProperty(exports, "DEFAULT_PROXY_HOST", { enumerable: true, get: function () { return proxyBaseUrls_js_1.DEFAULT_PROXY_HOST; } });
 Object.defineProperty(exports, "proxyHost", { enumerable: true, get: function () { return proxyBaseUrls_js_1.proxyHost; } });
 Object.defineProperty(exports, "anthropicBaseUrl", { enumerable: true, get: function () { return proxyBaseUrls_js_1.anthropicBaseUrl; } });
 Object.defineProperty(exports, "openaiBaseUrl", { enumerable: true, get: function () { return proxyBaseUrls_js_1.openaiBaseUrl; } });
+var harnessRules_js_1 = require("./harnessRules.js");
+Object.defineProperty(exports, "HARNESS_RULES_FILES", { enumerable: true, get: function () { return harnessRules_js_1.HARNESS_RULES_FILES; } });
+Object.defineProperty(exports, "rulesFileOf", { enumerable: true, get: function () { return harnessRules_js_1.rulesFileOf; } });
+Object.defineProperty(exports, "harnessesReading", { enumerable: true, get: function () { return harnessRules_js_1.harnessesReading; } });
+Object.defineProperty(exports, "decisionsTargetOf", { enumerable: true, get: function () { return harnessRules_js_1.decisionsTargetOf; } });
+Object.defineProperty(exports, "rulesFrontMatterOf", { enumerable: true, get: function () { return harnessRules_js_1.rulesFrontMatterOf; } });
+var phrases_js_1 = require("./phrases.js");
+Object.defineProperty(exports, "phraseText", { enumerable: true, get: function () { return phrases_js_1.phraseText; } });
+Object.defineProperty(exports, "hasPhrase", { enumerable: true, get: function () { return phrases_js_1.hasPhrase; } });
+Object.defineProperty(exports, "PHRASES_JS_SOURCE", { enumerable: true, get: function () { return phrases_js_1.PHRASES_JS_SOURCE; } });
+var sequence_js_1 = require("./sequence.js");
+Object.defineProperty(exports, "sequenceAlternatives", { enumerable: true, get: function () { return sequence_js_1.sequenceAlternatives; } });
+Object.defineProperty(exports, "compileSequence", { enumerable: true, get: function () { return sequence_js_1.compileSequence; } });
+Object.defineProperty(exports, "sequenceMatch", { enumerable: true, get: function () { return sequence_js_1.sequenceMatch; } });
+Object.defineProperty(exports, "SEQUENCE_JS_SOURCE", { enumerable: true, get: function () { return sequence_js_1.SEQUENCE_JS_SOURCE; } });
+var gateLimits_js_1 = require("./gateLimits.js");
+Object.defineProperty(exports, "COMMAND_SIZE_LIMIT", { enumerable: true, get: function () { return gateLimits_js_1.COMMAND_SIZE_LIMIT; } });
+Object.defineProperty(exports, "ARGUMENTS_SIZE_LIMIT", { enumerable: true, get: function () { return gateLimits_js_1.ARGUMENTS_SIZE_LIMIT; } });
+Object.defineProperty(exports, "HOOK_TIMEOUT_SECONDS", { enumerable: true, get: function () { return gateLimits_js_1.HOOK_TIMEOUT_SECONDS; } });
+Object.defineProperty(exports, "GATE_DEADLINE_MARGIN_MS", { enumerable: true, get: function () { return gateLimits_js_1.GATE_DEADLINE_MARGIN_MS; } });
+Object.defineProperty(exports, "HOOK_GATE_TIMEOUTS", { enumerable: true, get: function () { return gateLimits_js_1.HOOK_GATE_TIMEOUTS; } });
+Object.defineProperty(exports, "gateDeadlineMs", { enumerable: true, get: function () { return gateLimits_js_1.gateDeadlineMs; } });
+var gateKind_js_1 = require("./gateKind.js");
+Object.defineProperty(exports, "BRIDGE_GATED_HARNESSES", { enumerable: true, get: function () { return gateKind_js_1.BRIDGE_GATED_HARNESSES; } });
+Object.defineProperty(exports, "DELEGATED_GATE_HARNESSES", { enumerable: true, get: function () { return gateKind_js_1.DELEGATED_GATE_HARNESSES; } });
+Object.defineProperty(exports, "NO_GATE_HARNESSES", { enumerable: true, get: function () { return gateKind_js_1.NO_GATE_HARNESSES; } });
+Object.defineProperty(exports, "SDK_GATED_HARNESSES", { enumerable: true, get: function () { return gateKind_js_1.SDK_GATED_HARNESSES; } });
+Object.defineProperty(exports, "gateKindForHarness", { enumerable: true, get: function () { return gateKind_js_1.gateKindForHarness; } });
+var wasmFuel_js_1 = require("./wasmFuel.js");
+Object.defineProperty(exports, "DEFAULT_FUEL_BUDGET", { enumerable: true, get: function () { return wasmFuel_js_1.DEFAULT_FUEL_BUDGET; } });
+Object.defineProperty(exports, "FUEL_EXPORT", { enumerable: true, get: function () { return wasmFuel_js_1.FUEL_EXPORT; } });
+Object.defineProperty(exports, "REGO_FUEL_BUDGET", { enumerable: true, get: function () { return wasmFuel_js_1.REGO_FUEL_BUDGET; } });
+Object.defineProperty(exports, "meterFuel", { enumerable: true, get: function () { return wasmFuel_js_1.meterFuel; } });
+var wasmMemoryCap_js_1 = require("./wasmMemoryCap.js");
+Object.defineProperty(exports, "WASM_PAGE_BYTES", { enumerable: true, get: function () { return wasmMemoryCap_js_1.WASM_PAGE_BYTES; } });
+Object.defineProperty(exports, "capDeclaredMemory", { enumerable: true, get: function () { return wasmMemoryCap_js_1.capDeclaredMemory; } });
+var ruleLoadFailures_js_1 = require("./ruleLoadFailures.js");
+Object.defineProperty(exports, "RULE_LOAD_FAILURE_REASONS", { enumerable: true, get: function () { return ruleLoadFailures_js_1.RULE_LOAD_FAILURE_REASONS; } });
+Object.defineProperty(exports, "RULE_LOAD_FAILURE_TEXT", { enumerable: true, get: function () { return ruleLoadFailures_js_1.RULE_LOAD_FAILURE_TEXT; } });
+Object.defineProperty(exports, "isRuleLoadFailureReason", { enumerable: true, get: function () { return ruleLoadFailures_js_1.isRuleLoadFailureReason; } });
+var gateDecisions_js_1 = require("./gateDecisions.js");
+Object.defineProperty(exports, "GATE_DECISION_VERDICTS", { enumerable: true, get: function () { return gateDecisions_js_1.GATE_DECISION_VERDICTS; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;AAEH,uCA0BmB;AAzBjB,qGAAA,SAAS,OAAA;AACT,6GAAA,iBAAiB,OAAA;AACjB,wGAAA,YAAY,OAAA;AACZ,sGAAA,UAAU,OAAA;AACV,0GAAA,cAAc,OAAA;AACd,gHAAA,oBAAoB,OAAA;AACpB,uGAAA,WAAW,OAAA;AACX,uGAAA,WAAW,OAAA;AACX,yGAAA,aAAa,OAAA;AACb,kHAAA,sBAAsB,OAAA;AACtB,yGAAA,aAAa,OAAA;AACb,0GAAA,cAAc,OAAA;AACd,8GAAA,kBAAkB,OAAA;AAClB,gHAAA,oBAAoB,OAAA;AACpB,6GAAA,iBAAiB,OAAA;AACjB,mGAAA,OAAO,OAAA;AACP,qGAAA,SAAS,OAAA;AACT,uGAAA,WAAW,OAAA;AACX,yGAAA,aAAa,OAAA;AACb,uCAAuC;AACvC,gHAAA,oBAAoB,OAAA;AACpB,wGAAA,YAAY,OAAA;AACZ,iHAAA,qBAAqB,OAAA;AACrB,wDAAwD;AACxD,2GAAA,eAAe,OAAA;AAGjB,+DAK+B;AAJ7B,kIAAA,0BAA0B,OAAA;AAC1B,gIAAA,wBAAwB,OAAA;AACxB,sIAAA,8BAA8B,OAAA;AAC9B,gIAAA,wBAAwB,OAAA;AAmC1B,2CAEqB;AADnB,kHAAA,oBAAoB,OAAA;AA2DtB,2DAA8I;AAArI,sHAAA,gBAAgB,OAAA;AAAE,wHAAA,kBAAkB,OAAA;AAAE,iIAAA,2BAA2B,OAAA;AAAE,sHAAA,gBAAgB,OAAA;AAAE,wHAAA,kBAAkB,OAAA;AAGhH,mDA2ByB;AA1BvB,+GAAA,aAAa,OAAA;AACb,+GAAA,aAAa,OAAA;AACb,+GAAA,aAAa,OAAA;AACb,mHAAA,iBAAiB,OAAA;AACjB,0GAAA,QAAQ,OAAA;AACR,oHAAA,kBAAkB,OAAA;AAClB,iHAAA,eAAe,OAAA;AACf,+GAAA,aAAa,OAAA;AACb,mHAAA,iBAAiB,OAAA;AACjB,6GAAA,WAAW,OAAA;AACX,+GAAA,aAAa,OAAA;AACb,mHAAA,iBAAiB,OAAA;AACjB,6GAAA,WAAW,OAAA;AACX,oHAAA,kBAAkB,OAAA;AAClB,wHAAA,sBAAsB,OAAA;AACtB,qHAAA,mBAAmB,OAAA;AACnB,gHAAA,cAAc,OAAA;AACd,0GAAA,QAAQ,OAAA;AACR,gHAAA,cAAc,OAAA;AACd,iHAAA,eAAe,OAAA;AACf,8GAAA,YAAY,OAAA;AACZ,mHAAA,iBAAiB,OAAA;AACjB,2GAAA,SAAS,OAAA;AACT,iHAAA,eAAe,OAAA;AACf,qHAAA,mBAAmB,OAAA;AACnB,iHAAA,eAAe,OAAA;AAcjB,2DAiB6B;AAhB3B,wHAAA,kBAAkB,OAAA;AAClB,uHAAA,iBAAiB,OAAA;AACjB,sHAAA,gBAAgB,OAAA;AAChB,iHAAA,WAAW,OAAA;AACX,sHAAA,gBAAgB,OAAA;AAChB,oHAAA,cAAc,OAAA;AACd,4HAAA,sBAAsB,OAAA;AACtB,sHAAA,gBAAgB,OAAA;AAChB,+HAAA,yBAAyB,OAAA;AACzB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,sHAAA,gBAAgB,OAAA;AAChB,sHAAA,gBAAgB,OAAA;AAChB,yHAAA,mBAAmB,OAAA;AACnB,4HAAA,sBAAsB,OAAA;AACtB,4HAAA,sBAAsB,OAAA;AAIxB,6DAa8B;AAZ5B,yHAAA,kBAAkB,OAAA;AAClB,8HAAA,uBAAuB,OAAA;AACvB,iIAAA,0BAA0B,OAAA;AAC1B,wHAAA,iBAAiB,OAAA;AACjB,8HAAA,uBAAuB,OAAA;AACvB,wHAAA,iBAAiB,OAAA;AACjB,4HAAA,qBAAqB,OAAA;AACrB,kIAAA,2BAA2B,OAAA;AAC3B,6HAAA,sBAAsB,OAAA;AACtB,oIAAA,6BAA6B,OAAA;AAC7B,8HAAA,uBAAuB,OAAA;AACvB,wHAAA,iBAAiB,OAAA;AAqCnB,mCAIiB;AAHf,+GAAA,qBAAqB,OAAA;AACrB,8GAAA,oBAAoB,OAAA;AACpB,gHAAA,sBAAsB,OAAA;AAGxB,yCA2BoB;AA1BlB,yGAAA,YAAY,OAAA;AACZ,wGAAA,WAAW,OAAA;AACX,gHAAA,mBAAmB,OAAA;AACnB,2GAAA,cAAc,OAAA;AACd,sHAAA,yBAAyB,OAAA;AACzB,6GAAA,gBAAgB,OAAA;AAChB,+GAAA,kBAAkB,OAAA;AAClB,wGAAA,WAAW,OAAA;AACX,8GAAA,iBAAiB,OAAA;AACjB,2GAAA,cAAc,OAAA;AACd,oHAAA,uBAAuB,OAAA;AACvB,0HAAA,6BAA6B,OAAA;AAC7B,gHAAA,mBAAmB,OAAA;AACnB,8GAAA,iBAAiB,OAAA;AACjB,kHAAA,qBAAqB,OAAA;AACrB,gCAAgC;AAChC,2GAAA,cAAc,OAAA;AACd,gHAAA,mBAAmB,OAAA;AACnB,iHAAA,oBAAoB,OAAA;AACpB,yHAAA,4BAA4B,OAAA;AAC5B,kHAAA,qBAAqB,OAAA;AACrB,gHAAA,mBAAmB,OAAA;AACnB,8GAAA,iBAAiB,OAAA;AACjB,oHAAA,uBAAuB,OAAA;AACvB,+GAAA,kBAAkB,OAAA;AAClB,2GAAA,cAAc,OAAA;AAIhB,uDAI2B;AAHzB,uHAAA,mBAAmB,OAAA;AACnB,qHAAA,iBAAiB,OAAA;AACjB,uHAAA,mBAAmB,OAAA;AAarB,qCAckB;AAbhB,2GAAA,gBAAgB,OAAA;AAChB,8GAAA,mBAAmB,OAAA;AACnB,6GAAA,kBAAkB,OAAA;AAClB,oHAAA,yBAAyB,OAAA;AACzB,kHAAA,uBAAuB,OAAA;AACvB,gHAAA,qBAAqB,OAAA;AACrB,kHAAA,uBAAuB,OAAA;AACvB,4GAAA,iBAAiB,OAAA;AACjB,+GAAA,oBAAoB,OAAA;AACpB,iHAAA,sBAAsB,OAAA;AACtB,wHAAA,6BAA6B,OAAA;AAC7B,sHAAA,2BAA2B,OAAA;AAC3B,oHAAA,yBAAyB,OAAA;AAyB3B,qCAIkB;AAHhB,8GAAA,mBAAmB,OAAA;AACnB,6GAAA,kBAAkB,OAAA;AAClB,0HAAA,+BAA+B,OAAA;AAkBjC,6CAIsB;AAHpB,sHAAA,uBAAuB,OAAA;AACvB,sHAAA,uBAAuB,OAAA;AACvB,oHAAA,qBAAqB,OAAA;AA4BvB,8BAA8B;AAC9B,uDAE2B;AADzB,6HAAA,yBAAyB,OAAA;AAa3B,kDAAkD;AAClD,mDAGyB;AAFvB,0HAAA,wBAAwB,OAAA;AACxB,2HAAA,yBAAyB,OAAA;AAa3B,+DAQ+B;AAP7B,4HAAA,oBAAoB,OAAA;AACpB,2HAAA,mBAAmB,OAAA;AACnB,iIAAA,yBAAyB,OAAA;AACzB,sHAAA,cAAc,OAAA;AACd,4HAAA,oBAAoB,OAAA;AACpB,4HAAA,oBAAoB,OAAA;AACpB,4HAAA,oBAAoB,OAAA;AAItB,4BAA4B;AAC5B,yCAGoB;AAFlB,wHAAA,2BAA2B,OAAA;AAC3B,wHAAA,2BAA2B,OAAA;AA+C7B,qDAU0B;AAJxB,iHAAA,cAAc,OAAA;AAMhB,kDAAkD;AAClD,qDAAkC;AAElC,+CAA+C;AAC/C,+CAA4B;AAE5B,sDAAsD;AACtD,sDAAmC;AAEnC,8CAA8C;AAC9C,iDAA8B;AAE9B,yCAAyC;AACzC,oDAAiC;AACjC,4DAAyC;AAKzC,6CAKsB;AAJpB,gHAAA,iBAAiB,OAAA;AACjB,qHAAA,sBAAsB,OAAA;AACtB,gHAAA,iBAAiB,OAAA;AAInB,6DAW8B;AAV5B,sHAAA,MAAM,OAAmB;AACzB,yHAAA,SAAS,OAAsB;AAC/B,0HAAA,mBAAmB,OAAA;AACnB,qHAAA,cAAc,OAAA;AACd,wHAAA,iBAAiB,OAAA;AACjB,iHAAA,UAAU,OAAA;AAOZ,+DAAmG;AAA1F,yHAAA,iBAAiB,OAAA;AAAE,wHAAA,gBAAgB,OAAA;AAAE,6HAAA,qBAAqB,OAAA;AAEnE,qCAWkB;AAVhB,8GAAA,mBAAmB,OAAA;AACnB,8GAAA,mBAAmB,OAAA;AACnB,qGAAA,UAAU,OAAA;AACV,yGAAA,cAAc,OAAA;AACd,wGAAA,aAAa,OAAA;AACb,qGAAA,UAAU,OAAA;AACV,qGAAA,UAAU,OAAA;AACV,qGAAA,UAAU,OAAA;AACV,+GAAA,oBAAoB,OAAA;AACpB,+GAAA,oBAAoB,OAAA;AAGtB,yDAO4B;AAN1B,sHAAA,iBAAiB,OAAA;AACjB,kHAAA,aAAa,OAAA;AACb,gHAAA,WAAW,OAAA;AAMb,yDAI4B;AAH1B,0HAAA,qBAAqB,OAAA;AACrB,6HAAA,wBAAwB,OAAA;AAI1B,+CAWuB;AAVrB,mHAAA,mBAAmB,OAAA;AACnB,+HAAA,+BAA+B,OAAA;AAC/B,gHAAA,gBAAgB,OAAA;AAChB,0GAAA,UAAU,OAAA;AACV,8GAAA,cAAc,OAAA;AAQhB,iDAawB;AAZtB,qHAAA,oBAAoB,OAAA;AACpB,kHAAA,iBAAiB,OAAA;AACjB,qHAAA,oBAAoB,OAAA;AACpB,oHAAA,mBAAmB,OAAA;AACnB,oHAAA,mBAAmB,OAAA;AACnB,sHAAA,qBAAqB,OAAA;AACrB,sHAAA,qBAAqB,OAAA;AAQvB,iEAIgC;AAH9B,gIAAA,uBAAuB,OAAA;AAKzB,uDAK2B;AAJzB,sHAAA,kBAAkB,OAAA;AAClB,6GAAA,SAAS,OAAA;AACT,oHAAA,gBAAgB,OAAA;AAChB,iHAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCA8BmB;AA7BjB,qGAAA,SAAS,OAAA;AACT,6GAAA,iBAAiB,OAAA;AACjB,wGAAA,YAAY,OAAA;AACZ,sGAAA,UAAU,OAAA;AACV,0GAAA,cAAc,OAAA;AACd,gHAAA,oBAAoB,OAAA;AACpB,uGAAA,WAAW,OAAA;AACX,uGAAA,WAAW,OAAA;AACX,yGAAA,aAAa,OAAA;AACb,kHAAA,sBAAsB,OAAA;AACtB,yGAAA,aAAa,OAAA;AACb,0GAAA,cAAc,OAAA;AACd,wGAAA,YAAY,OAAA;AACZ,0GAAA,cAAc,OAAA;AACd,0GAAA,cAAc,OAAA;AACd,8GAAA,kBAAkB,OAAA;AAClB,8GAAA,kBAAkB,OAAA;AAClB,gHAAA,oBAAoB,OAAA;AACpB,6GAAA,iBAAiB,OAAA;AACjB,mGAAA,OAAO,OAAA;AACP,qGAAA,SAAS,OAAA;AACT,uGAAA,WAAW,OAAA;AACX,yGAAA,aAAa,OAAA;AACb,uCAAuC;AACvC,gHAAA,oBAAoB,OAAA;AACpB,wGAAA,YAAY,OAAA;AACZ,iHAAA,qBAAqB,OAAA;AACrB,wDAAwD;AACxD,2GAAA,eAAe,OAAA;AAGjB,+DAK+B;AAJ7B,kIAAA,0BAA0B,OAAA;AAC1B,gIAAA,wBAAwB,OAAA;AACxB,sIAAA,8BAA8B,OAAA;AAC9B,gIAAA,wBAAwB,OAAA;AAqB1B,yCAAkF;AAAzE,qHAAA,wBAAwB,OAAA;AAAE,uHAAA,0BAA0B,OAAA;AAkB7D,2CAEqB;AADnB,kHAAA,oBAAoB,OAAA;AA2DtB,2DAAiH;AAAxG,sHAAA,gBAAgB,OAAA;AAAE,wHAAA,kBAAkB,OAAA;AAAE,sHAAA,gBAAgB,OAAA;AAAE,wHAAA,kBAAkB,OAAA;AAGnF,mDA2ByB;AA1BvB,+GAAA,aAAa,OAAA;AACb,+GAAA,aAAa,OAAA;AACb,+GAAA,aAAa,OAAA;AACb,mHAAA,iBAAiB,OAAA;AACjB,0GAAA,QAAQ,OAAA;AACR,oHAAA,kBAAkB,OAAA;AAClB,iHAAA,eAAe,OAAA;AACf,+GAAA,aAAa,OAAA;AACb,mHAAA,iBAAiB,OAAA;AACjB,6GAAA,WAAW,OAAA;AACX,+GAAA,aAAa,OAAA;AACb,mHAAA,iBAAiB,OAAA;AACjB,6GAAA,WAAW,OAAA;AACX,oHAAA,kBAAkB,OAAA;AAClB,wHAAA,sBAAsB,OAAA;AACtB,qHAAA,mBAAmB,OAAA;AACnB,gHAAA,cAAc,OAAA;AACd,0GAAA,QAAQ,OAAA;AACR,gHAAA,cAAc,OAAA;AACd,iHAAA,eAAe,OAAA;AACf,8GAAA,YAAY,OAAA;AACZ,mHAAA,iBAAiB,OAAA;AACjB,2GAAA,SAAS,OAAA;AACT,iHAAA,eAAe,OAAA;AACf,qHAAA,mBAAmB,OAAA;AACnB,iHAAA,eAAe,OAAA;AAcjB,2DAiB6B;AAhB3B,wHAAA,kBAAkB,OAAA;AAClB,uHAAA,iBAAiB,OAAA;AACjB,sHAAA,gBAAgB,OAAA;AAChB,iHAAA,WAAW,OAAA;AACX,sHAAA,gBAAgB,OAAA;AAChB,oHAAA,cAAc,OAAA;AACd,4HAAA,sBAAsB,OAAA;AACtB,sHAAA,gBAAgB,OAAA;AAChB,+HAAA,yBAAyB,OAAA;AACzB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,sHAAA,gBAAgB,OAAA;AAChB,sHAAA,gBAAgB,OAAA;AAChB,yHAAA,mBAAmB,OAAA;AACnB,4HAAA,sBAAsB,OAAA;AACtB,4HAAA,sBAAsB,OAAA;AAIxB,6DAkB8B;AAjB5B,yHAAA,kBAAkB,OAAA;AAClB,8HAAA,uBAAuB,OAAA;AACvB,iIAAA,0BAA0B,OAAA;AAC1B,wHAAA,iBAAiB,OAAA;AACjB,8HAAA,uBAAuB,OAAA;AACvB,wHAAA,iBAAiB,OAAA;AACjB,4HAAA,qBAAqB,OAAA;AACrB,4HAAA,qBAAqB,OAAA;AACrB,8HAAA,uBAAuB,OAAA;AACvB,qIAAA,8BAA8B,OAAA;AAC9B,oIAAA,6BAA6B,OAAA;AAC7B,oIAAA,6BAA6B,OAAA;AAC7B,kIAAA,2BAA2B,OAAA;AAC3B,6HAAA,sBAAsB,OAAA;AACtB,oIAAA,6BAA6B,OAAA;AAC7B,8HAAA,uBAAuB,OAAA;AACvB,wHAAA,iBAAiB,OAAA;AA6CnB,mCAIiB;AAHf,+GAAA,qBAAqB,OAAA;AACrB,8GAAA,oBAAoB,OAAA;AACpB,gHAAA,sBAAsB,OAAA;AAGxB,yCA2BoB;AA1BlB,yGAAA,YAAY,OAAA;AACZ,wGAAA,WAAW,OAAA;AACX,gHAAA,mBAAmB,OAAA;AACnB,2GAAA,cAAc,OAAA;AACd,sHAAA,yBAAyB,OAAA;AACzB,6GAAA,gBAAgB,OAAA;AAChB,+GAAA,kBAAkB,OAAA;AAClB,wGAAA,WAAW,OAAA;AACX,8GAAA,iBAAiB,OAAA;AACjB,2GAAA,cAAc,OAAA;AACd,oHAAA,uBAAuB,OAAA;AACvB,0HAAA,6BAA6B,OAAA;AAC7B,gHAAA,mBAAmB,OAAA;AACnB,8GAAA,iBAAiB,OAAA;AACjB,kHAAA,qBAAqB,OAAA;AACrB,sBAAsB;AACtB,2GAAA,cAAc,OAAA;AACd,gHAAA,mBAAmB,OAAA;AACnB,iHAAA,oBAAoB,OAAA;AACpB,yHAAA,4BAA4B,OAAA;AAC5B,kHAAA,qBAAqB,OAAA;AACrB,gHAAA,mBAAmB,OAAA;AACnB,8GAAA,iBAAiB,OAAA;AACjB,oHAAA,uBAAuB,OAAA;AACvB,+GAAA,kBAAkB,OAAA;AAClB,2GAAA,cAAc,OAAA;AAIhB,uDAI2B;AAHzB,uHAAA,mBAAmB,OAAA;AACnB,qHAAA,iBAAiB,OAAA;AACjB,uHAAA,mBAAmB,OAAA;AAarB,qCAekB;AAdhB,2GAAA,gBAAgB,OAAA;AAChB,8GAAA,mBAAmB,OAAA;AACnB,6GAAA,kBAAkB,OAAA;AAClB,oHAAA,yBAAyB,OAAA;AACzB,kHAAA,uBAAuB,OAAA;AACvB,gHAAA,qBAAqB,OAAA;AACrB,kHAAA,uBAAuB,OAAA;AACvB,kHAAA,uBAAuB,OAAA;AACvB,4GAAA,iBAAiB,OAAA;AACjB,+GAAA,oBAAoB,OAAA;AACpB,iHAAA,sBAAsB,OAAA;AACtB,wHAAA,6BAA6B,OAAA;AAC7B,sHAAA,2BAA2B,OAAA;AAC3B,oHAAA,yBAAyB,OAAA;AA0B3B,qCAIkB;AAHhB,8GAAA,mBAAmB,OAAA;AACnB,6GAAA,kBAAkB,OAAA;AAClB,0HAAA,+BAA+B,OAAA;AAkBjC,6CAIsB;AAHpB,sHAAA,uBAAuB,OAAA;AACvB,sHAAA,uBAAuB,OAAA;AACvB,oHAAA,qBAAqB,OAAA;AA0CvB,+CAAmD;AAA1C,kHAAA,kBAAkB,OAAA;AAE3B,8BAA8B;AAC9B,uDAE2B;AADzB,6HAAA,yBAAyB,OAAA;AAa3B,wCAAwC;AACxC,mDAGyB;AAFvB,0HAAA,wBAAwB,OAAA;AACxB,2HAAA,yBAAyB,OAAA;AAa3B,+DAS+B;AAR7B,4HAAA,oBAAoB,OAAA;AACpB,2HAAA,mBAAmB,OAAA;AACnB,iIAAA,yBAAyB,OAAA;AACzB,2HAAA,mBAAmB,OAAA;AACnB,sHAAA,cAAc,OAAA;AACd,4HAAA,oBAAoB,OAAA;AACpB,4HAAA,oBAAoB,OAAA;AACpB,4HAAA,oBAAoB,OAAA;AAGtB,+DAe+B;AAd7B,8HAAA,sBAAsB,OAAA;AACtB,+HAAA,uBAAuB,OAAA;AACvB,+HAAA,uBAAuB,OAAA;AACvB,2HAAA,mBAAmB,OAAA;AACnB,iIAAA,yBAAyB,OAAA;AACzB,+HAAA,uBAAuB,OAAA;AACvB,8HAAA,sBAAsB,OAAA;AACtB,gIAAA,wBAAwB,OAAA;AACxB,gIAAA,wBAAwB,OAAA;AACxB,4HAAA,oBAAoB,OAAA;AACpB,gIAAA,wBAAwB,OAAA;AACxB,+HAAA,uBAAuB,OAAA;AACvB,oIAAA,4BAA4B,OAAA;AAC5B,yIAAA,iCAAiC,OAAA;AASnC,qDAAuF;AAA9E,qHAAA,kBAAkB,OAAA;AAAE,mHAAA,gBAAgB,OAAA;AAAE,gHAAA,aAAa,OAAA;AAE5D,wEAAwE;AACxE,iDAYwB;AAXtB,wHAAA,uBAAuB,OAAA;AACvB,qHAAA,oBAAoB,OAAA;AACpB,+GAAA,cAAc,OAAA;AACd,6GAAA,YAAY,OAAA;AACZ,6GAAA,YAAY,OAAA;AACZ,kHAAA,iBAAiB,OAAA;AACjB,4HAAA,2BAA2B,OAAA;AAC3B,gHAAA,eAAe,OAAA;AACf,qHAAA,oBAAoB,OAAA;AACpB,kHAAA,iBAAiB,OAAA;AACjB,mHAAA,kBAAkB,OAAA;AAWpB,yEAAyE;AACzE,qDAY0B;AAXxB,oHAAA,iBAAiB,OAAA;AACjB,wHAAA,qBAAqB,OAAA;AACrB,qHAAA,kBAAkB,OAAA;AAClB,oHAAA,iBAAiB,OAAA;AACjB,sHAAA,mBAAmB,OAAA;AACnB,uHAAA,oBAAoB,OAAA;AACpB,sHAAA,mBAAmB,OAAA;AACnB,uHAAA,oBAAoB,OAAA;AACpB,8GAAA,WAAW,OAAA;AACX,8GAAA,WAAW,OAAA;AACX,wHAAA,qBAAqB,OAAA;AAUvB,mDASyB;AARvB,oHAAA,kBAAkB,OAAA;AAClB,yHAAA,uBAAuB,OAAA;AACvB,6GAAA,WAAW,OAAA;AACX,4HAAA,0BAA0B,OAAA;AAC1B,uHAAA,qBAAqB,OAAA;AACrB,oHAAA,kBAAkB,OAAA;AAClB,sHAAA,oBAAoB,OAAA;AACpB,4HAAA,0BAA0B,OAAA;AAU5B,iDAAqD;AAA5C,oHAAA,mBAAmB,OAAA;AAE5B,4BAA4B;AAC5B,yCAGoB;AAFlB,wHAAA,2BAA2B,OAAA;AAC3B,wHAAA,2BAA2B,OAAA;AA+C7B,qDAU0B;AAJxB,iHAAA,cAAc,OAAA;AAMhB,mCAAmC;AACnC,qDAAkC;AAElC,+CAA+C;AAC/C,+CAA4B;AAE5B,sDAAsD;AACtD,sDAAmC;AAEnC,qCAAqC;AACrC,iDAA8B;AAE9B,gCAAgC;AAChC,oDAAiC;AACjC,4DAAyC;AACzC,kDAA+B;AAK/B,6CAKsB;AAJpB,gHAAA,iBAAiB,OAAA;AACjB,qHAAA,sBAAsB,OAAA;AACtB,gHAAA,iBAAiB,OAAA;AAGnB,iEAKgC;AAJ9B,iIAAA,wBAAwB,OAAA;AAM1B,gFAAgF;AAChF,iDAA8B;AAC9B,qDAM0B;AALxB,qHAAA,kBAAkB,OAAA;AAClB,0HAAA,uBAAuB,OAAA;AAMzB,6DAW8B;AAV5B,sHAAA,MAAM,OAAmB;AACzB,yHAAA,SAAS,OAAsB;AAC/B,0HAAA,mBAAmB,OAAA;AACnB,qHAAA,cAAc,OAAA;AACd,wHAAA,iBAAiB,OAAA;AACjB,iHAAA,UAAU,OAAA;AAOZ,+DAAmG;AAA1F,yHAAA,iBAAiB,OAAA;AAAE,wHAAA,gBAAgB,OAAA;AAAE,6HAAA,qBAAqB,OAAA;AAEnE,qCAWkB;AAVhB,8GAAA,mBAAmB,OAAA;AACnB,8GAAA,mBAAmB,OAAA;AACnB,qGAAA,UAAU,OAAA;AACV,yGAAA,cAAc,OAAA;AACd,wGAAA,aAAa,OAAA;AACb,qGAAA,UAAU,OAAA;AACV,qGAAA,UAAU,OAAA;AACV,qGAAA,UAAU,OAAA;AACV,+GAAA,oBAAoB,OAAA;AACpB,+GAAA,oBAAoB,OAAA;AAGtB,yDAO4B;AAN1B,sHAAA,iBAAiB,OAAA;AACjB,kHAAA,aAAa,OAAA;AACb,gHAAA,WAAW,OAAA;AAMb,yDAI4B;AAH1B,+HAAA,0BAA0B,OAAA;AAC1B,uHAAA,kBAAkB,OAAA;AAIpB,qDAI0B;AAHxB,8HAAA,2BAA2B,OAAA;AAC3B,sHAAA,mBAAmB,OAAA;AACnB,mHAAA,gBAAgB,OAAA;AAGlB,yDAI4B;AAH1B,0HAAA,qBAAqB,OAAA;AACrB,6HAAA,wBAAwB,OAAA;AAI1B,uDAU2B;AATzB,0HAAA,sBAAsB,OAAA;AACtB,mIAAA,+BAA+B,OAAA;AAC/B,sHAAA,kBAAkB,OAAA;AAClB,yHAAA,qBAAqB,OAAA;AACrB,gIAAA,4BAA4B,OAAA;AAC5B,+HAAA,2BAA2B,OAAA;AAM7B,qDAa0B;AAZxB,8GAAA,WAAW,OAAA;AACX,iHAAA,cAAc,OAAA;AACd,mHAAA,gBAAgB,OAAA;AAChB,4HAAA,yBAAyB,OAAA;AACzB,sHAAA,mBAAmB,OAAA;AACnB,6HAAA,0BAA0B,OAAA;AAS5B,+CAWuB;AAVrB,mHAAA,mBAAmB,OAAA;AACnB,+HAAA,+BAA+B,OAAA;AAC/B,gHAAA,gBAAgB,OAAA;AAChB,0GAAA,UAAU,OAAA;AACV,8GAAA,cAAc,OAAA;AAQhB,iDAawB;AAZtB,qHAAA,oBAAoB,OAAA;AACpB,kHAAA,iBAAiB,OAAA;AACjB,qHAAA,oBAAoB,OAAA;AACpB,oHAAA,mBAAmB,OAAA;AACnB,oHAAA,mBAAmB,OAAA;AACnB,sHAAA,qBAAqB,OAAA;AACrB,sHAAA,qBAAqB,OAAA;AAQvB,iEAIgC;AAH9B,gIAAA,uBAAuB,OAAA;AAKzB,qDAa0B;AAZxB,kIAAA,+BAA+B,OAAA;AAC/B,gHAAA,aAAa,OAAA;AACb,mHAAA,gBAAgB,OAAA;AAChB,mHAAA,gBAAgB,OAAA;AAChB,sHAAA,mBAAmB,OAAA;AAUrB,uDAK2B;AAJzB,sHAAA,kBAAkB,OAAA;AAClB,6GAAA,SAAS,OAAA;AACT,oHAAA,gBAAgB,OAAA;AAChB,iHAAA,aAAa,OAAA;AAEf,qDAA6H;AAApH,sHAAA,mBAAmB,OAAA;AAAE,8GAAA,WAAW,OAAA;AAAE,mHAAA,gBAAgB,OAAA;AAAE,oHAAA,iBAAiB,OAAA;AAAE,qHAAA,kBAAkB,OAAA;AAElG,2CAAuE;AAA9D,wGAAA,UAAU,OAAA;AAAE,uGAAA,SAAS,OAAA;AAAE,+GAAA,iBAAiB,OAAA;AAEjD,6CAAwG;AAA/F,mHAAA,oBAAoB,OAAA;AAAE,8GAAA,eAAe,OAAA;AAAE,4GAAA,aAAa,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AACjF,iDAOwB;AANtB,mHAAA,kBAAkB,OAAA;AAClB,qHAAA,oBAAoB,OAAA;AACpB,qHAAA,oBAAoB,OAAA;AACpB,wHAAA,uBAAuB,OAAA;AACvB,mHAAA,kBAAkB,OAAA;AAClB,+GAAA,cAAc,OAAA;AAGhB,6CAOsB;AANpB,qHAAA,sBAAsB,OAAA;AACtB,uHAAA,wBAAwB,OAAA;AACxB,gHAAA,iBAAiB,OAAA;AACjB,kHAAA,mBAAmB,OAAA;AACnB,iHAAA,kBAAkB,OAAA;AAGpB,6CAA6F;AAApF,kHAAA,mBAAmB,OAAA;AAAE,0GAAA,WAAW,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAAE,wGAAA,SAAS,OAAA;AACtE,uDAAuE;AAA9D,mHAAA,eAAe,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAC3C,6DAK8B;AAJ5B,gIAAA,yBAAyB,OAAA;AACzB,6HAAA,sBAAsB,OAAA;AACtB,8HAAA,uBAAuB,OAAA;AAGzB,uDAAqF;AAA5E,0HAAA,sBAAsB,OAAA"}

package/dist/intelligence.d.ts

@@ -35,7 +35,7 @@ export interface SslGraphJson {
         steps: SslStep[];
         /**
          * Per step, the tools the compiler refused because the SOP text never
-         * names them (TD-477 part 1): a step "run the tests" compiled to
+         * names them: a step "run the tests" compiled to
          * `tools: ["Bash"]` when the SOP said nothing about Bash, and the
          * enforcer then treated any other tool as unauthorized. Kept for the
          * author; never evaluated.

package/dist/mcpBudgets.d.ts

@@ -0,0 +1,191 @@
+/**
+ * MCP call budgets — how many MCP tool calls a workspace allows per hour or
+ * per day, per server, per member, per tool, or per member on one server.
+ *
+ * An MCP tool call has no price of its own: the protocol's `tools/call` result
+ * carries content, structured content, an error flag and `_meta`, and nothing
+ * that reports cost (the only cost-shaped field in the specification,
+ * `costPriority`, is a client's model preference for sampling). So a budget
+ * counts calls.
+ *
+ * The workspace setting `mcpBudgets` holds the budgets. The control plane
+ * validates it with {@link McpBudgetSettingsSchema} when an owner or admin
+ * writes it, delivers it to every MCP proxy with the rest of the MCP policy,
+ * and the proxy reads it with {@link parseMcpBudgetPolicy} and enforces it
+ * against counters in Valkey before each call
+ * (`packages/mcp-proxy/src/budget.ts`).
+ *
+ * @module
+ */
+import { z } from 'zod';
+/**
+ * What a budget counts:
+ * - `server`        every call to one server;
+ * - `tool`          every call to one tool on one server;
+ * - `member`        each member's calls across every server;
+ * - `member_server` each member's calls to one server.
+ *
+ * A `member` or `member_server` budget names one member, or none to give
+ * every member their own allowance of the same size.
+ */
+export type McpBudgetScope = 'server' | 'tool' | 'member' | 'member_server';
+/** A budget's period. Periods are fixed UTC windows: an hour starts on the hour, a day at 00:00 UTC. */
+export type McpBudgetPeriod = 'hour' | 'day';
+export interface McpBudget {
+    /** Stable id, so a counter survives an edit to the limit. Named in refusals and alerts. */
+    id: string;
+    scope: McpBudgetScope;
+    /** The server, for `server`, `tool` and `member_server`. */
+    server?: string;
+    /** The tool, for `tool`. */
+    tool?: string;
+    /** One member, for `member` and `member_server`; absent means each member separately. */
+    memberId?: string;
+    period: McpBudgetPeriod;
+    /** Calls allowed per period. */
+    limit: number;
+}
+export interface McpBudgetPolicy {
+    budgets: McpBudget[];
+    /** A budget warns once per period when its calls reach this percentage of the limit. */
+    warnAtPct: number;
+}
+/** The LLM budget alert's default threshold, used here too so both kinds of budget warn alike. */
+export declare const MCP_BUDGET_DEFAULT_WARN_PCT = 80;
+export declare const MAX_MCP_BUDGETS = 200;
+export declare const MAX_MCP_BUDGET_LIMIT = 1000000;
+export declare const MCP_BUDGET_SCOPES: readonly McpBudgetScope[];
+export declare const MCP_BUDGET_PERIODS: readonly McpBudgetPeriod[];
+/**
+ * The `mcpBudgets` workspace setting as an owner or admin writes it. Budget
+ * ids are unique within a workspace: the id is part of the counter's key.
+ */
+export declare const McpBudgetSettingsSchema: z.ZodEffects<z.ZodObject<{
+    budgets: z.ZodArray<z.ZodEffects<z.ZodObject<{
+        id: z.ZodString;
+        scope: z.ZodEnum<["server", "tool", "member", "member_server"]>;
+        server: z.ZodOptional<z.ZodString>;
+        tool: z.ZodOptional<z.ZodString>;
+        memberId: z.ZodOptional<z.ZodString>;
+        period: z.ZodEnum<["hour", "day"]>;
+        limit: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        period: "day" | "hour";
+        id: string;
+        limit: number;
+        scope: "member" | "server" | "tool" | "member_server";
+        server?: string | undefined;
+        tool?: string | undefined;
+        memberId?: string | undefined;
+    }, {
+        period: "day" | "hour";
+        id: string;
+        limit: number;
+        scope: "member" | "server" | "tool" | "member_server";
+        server?: string | undefined;
+        tool?: string | undefined;
+        memberId?: string | undefined;
+    }>, {
+        period: "day" | "hour";
+        id: string;
+        limit: number;
+        scope: "member" | "server" | "tool" | "member_server";
+        server?: string | undefined;
+        tool?: string | undefined;
+        memberId?: string | undefined;
+    }, {
+        period: "day" | "hour";
+        id: string;
+        limit: number;
+        scope: "member" | "server" | "tool" | "member_server";
+        server?: string | undefined;
+        tool?: string | undefined;
+        memberId?: string | undefined;
+    }>, "many">;
+    warnAtPct: z.ZodOptional<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    budgets: {
+        period: "day" | "hour";
+        id: string;
+        limit: number;
+        scope: "member" | "server" | "tool" | "member_server";
+        server?: string | undefined;
+        tool?: string | undefined;
+        memberId?: string | undefined;
+    }[];
+    warnAtPct?: number | undefined;
+}, {
+    budgets: {
+        period: "day" | "hour";
+        id: string;
+        limit: number;
+        scope: "member" | "server" | "tool" | "member_server";
+        server?: string | undefined;
+        tool?: string | undefined;
+        memberId?: string | undefined;
+    }[];
+    warnAtPct?: number | undefined;
+}>, {
+    budgets: {
+        period: "day" | "hour";
+        id: string;
+        limit: number;
+        scope: "member" | "server" | "tool" | "member_server";
+        server?: string | undefined;
+        tool?: string | undefined;
+        memberId?: string | undefined;
+    }[];
+    warnAtPct?: number | undefined;
+}, {
+    budgets: {
+        period: "day" | "hour";
+        id: string;
+        limit: number;
+        scope: "member" | "server" | "tool" | "member_server";
+        server?: string | undefined;
+        tool?: string | undefined;
+        memberId?: string | undefined;
+    }[];
+    warnAtPct?: number | undefined;
+}>;
+export type McpBudgetSettings = z.infer<typeof McpBudgetSettingsSchema>;
+/**
+ * Reads `mcpBudgets` as the control plane delivered it. Every budget is
+ * checked on its own and a malformed one is dropped, so one bad entry never
+ * lifts the others; anything that is not a settings object reads as no
+ * budgets at all.
+ */
+export declare function parseMcpBudgetPolicy(value: unknown): McpBudgetPolicy;
+/** One tool call, as far as budgets are concerned. */
+export interface McpBudgetCall {
+    server: string;
+    tool: string;
+    /** The member the proxy's API key resolves to, when the control plane said. */
+    memberId: string | null;
+    /**
+     * Who to count a per-member budget against when no member is known — the
+     * API key's prefix, say. Callers nobody can identify share one allowance.
+     */
+    fallbackCaller: string;
+}
+/** A budget that applies to a call, and whose allowance the call draws on. */
+export interface McpBudgetCharge {
+    budget: McpBudget;
+    /** Distinguishes allowances within one budget: the member, for an each-member budget. */
+    subject: string;
+}
+/**
+ * The budgets a call counts against, in the order they were configured. A
+ * call draws on every one of them, and is refused when any is used up.
+ */
+export declare function budgetsForCall(policy: McpBudgetPolicy, call: McpBudgetCall): McpBudgetCharge[];
+/** The fixed window a moment falls in: when it began and when it resets. */
+export declare function budgetWindow(period: McpBudgetPeriod, nowMs: number): {
+    startMs: number;
+    resetAtMs: number;
+};
+/** The call count at which a budget warns: `warnAtPct` of the limit, rounded up, at least one call. */
+export declare function budgetWarnAt(limit: number, warnAtPct: number): number;
+/** A budget in words, for refusals, alerts and the dashboard: what it counts, and how many per period. */
+export declare function describeMcpBudget(budget: McpBudget, memberLabel?: string): string;
+//# sourceMappingURL=mcpBudgets.d.ts.map

package/dist/mcpBudgets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpBudgets.d.ts","sourceRoot":"","sources":["../src/mcpBudgets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,eAAe,CAAA;AAE3E,wGAAwG;AACxG,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,CAAA;AAE5C,MAAM,WAAW,SAAS;IACxB,2FAA2F;IAC3F,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,cAAc,CAAA;IACrB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,eAAe,CAAA;IACvB,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,SAAS,EAAE,CAAA;IACpB,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,kGAAkG;AAClG,eAAO,MAAM,2BAA2B,KAAK,CAAA;AAC7C,eAAO,MAAM,eAAe,MAAM,CAAA;AAClC,eAAO,MAAM,oBAAoB,UAAY,CAAA;AAE7C,eAAO,MAAM,iBAAiB,EAAE,SAAS,cAAc,EAAkD,CAAA;AACzG,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAAoB,CAAA;AAyB7E;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYhC,CAAA;AAEJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAEvE;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAepE;AAED,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,CAAA;IACjB,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,GAAG,eAAe,EAAE,CAW9F;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAI3G;AAED,uGAAuG;AACvG,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,0GAA0G;AAC1G,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAWjF"}