@kyaki/agents 0.1.0

package/dist/treasury.js

@@ -0,0 +1,346 @@
+/**
+ * treasury.ts — The Treasurer, KYA's second autonomous agent.
+ *
+ * Where the Procurer spends OUTWARD, the Treasurer manages the BALANCE SHEET
+ * and proves, movement by movement, that it stayed inside its mandate. A full
+ * cycle (runCycle) pays due obligations FIRST (due-date order), then sweeps
+ * idle cash above a configured buffer into reserve/yield.
+ *
+ * Reconstructed from the canonical Notion source and rebased onto the on-disk
+ * hardened seam: every movement runs through evaluateWithPolicy(), which
+ * atomically does kernel-verify -> escalation gate -> org-exposure check ->
+ * kernel COMMIT. Account balances mutate ONLY after a committed allow, so a
+ * denied or escalated movement can never leave a negative balance or a phantom
+ * debit.
+ *
+ *  - Escalated movements park in a TreasuryApprovalInbox that uses the same
+ *    crash-safe two-phase exactly-once protocol as the Procurer:
+ *    approved -> claimExecution() -> 'executing' -> confirm / revert / fail.
+ *    A signed CFO Approval is required to finalize; the agent cannot approve
+ *    its own movement.
+ *  - The FX-funding leg is denominated in a currency the org actually HOLDS,
+ *    so L0/L1 always evaluate a real in-mandate-currency amount rather than
+ *    tripping a single-currency mandate.
+ */
+import { randomUUID } from 'node:crypto';
+import { createTransactionIntent, } from '@kyaki/core';
+import { evaluateWithPolicy, isSecurityAnomaly, } from '@kyaki/policy';
+import { signApproval, verifyApproval } from './approvals.js';
+/** A deterministic FX desk for demos and tests. */
+export class StaticFX {
+    table;
+    constructor(table) {
+        this.table = table;
+    }
+    rate(from, to) {
+        if (from === to)
+            return 1;
+        const direct = this.table[`${from}/${to}`];
+        if (direct !== undefined)
+            return direct;
+        const inverse = this.table[`${to}/${from}`];
+        if (inverse !== undefined && inverse !== 0)
+            return 1 / inverse;
+        throw new Error(`NO_FX_RATE: ${from}->${to}`);
+    }
+}
+/**
+ * Amounts are integer minor units; FX products carry IEEE-754 noise
+ * (100000 * 1.1 === 110000.00000000001). Snap to whole minor units before
+ * rounding so the kernel always evaluates a clean integer.
+ */
+function roundMinorUnits(x) {
+    return Math.round(x);
+}
+function ceilMinorUnits(x) {
+    // Strip float noise to 6 decimals, then round up to the next whole unit.
+    return Math.ceil(Math.round(x * 1e6) / 1e6);
+}
+export class TreasuryApprovalInbox {
+    movements = new Map();
+    submit(input) {
+        const movement = {
+            ...input,
+            id: `mov_${randomUUID().slice(0, 8)}`,
+            submittedAt: new Date().toISOString(),
+            status: 'pending',
+        };
+        this.movements.set(movement.id, movement);
+        return movement;
+    }
+    get(id) { return this.movements.get(id); }
+    pending() { return [...this.movements.values()].filter((m) => m.status === 'pending'); }
+    all() { return [...this.movements.values()]; }
+    /** The CFO countersigns a parked movement with their own key. */
+    approve(id, approver) {
+        const m = this.movements.get(id);
+        if (!m)
+            throw new Error(`No movement ${id}`);
+        if (m.status !== 'pending')
+            throw new Error(`Movement ${id} is ${m.status}, not pending`);
+        const approval = signApproval(m.intent.id, approver);
+        m.status = 'approved';
+        m.decidedBy = approval.approvedBy;
+        m.decidedAt = approval.at;
+        return approval;
+    }
+    reject(id, approver) {
+        const m = this.movements.get(id);
+        if (!m)
+            throw new Error(`No movement ${id}`);
+        if (m.status !== 'pending')
+            throw new Error(`Movement ${id} is ${m.status}, not pending`);
+        m.status = 'rejected';
+        m.decidedBy = approver.did;
+        m.decidedAt = new Date().toISOString();
+        return m;
+    }
+    /** Atomic exactly-once gate: 'approved' -> 'executing'. True iff WE won. */
+    claimExecution(id) {
+        const m = this.movements.get(id);
+        if (!m || m.status !== 'approved')
+            return false;
+        m.status = 'executing';
+        return true;
+    }
+    confirmExecuted(id) {
+        const m = this.movements.get(id);
+        if (m && m.status === 'executing')
+            m.status = 'executed';
+    }
+    /** Transient deny: stays retryable. */
+    revertToApproved(id, reasons) {
+        const m = this.movements.get(id);
+        if (m && m.status === 'executing') {
+            m.status = 'approved';
+            m.failureReasons = reasons;
+        }
+    }
+    /** Security failure: terminal AND visible. */
+    markFailed(id, reasons) {
+        const m = this.movements.get(id);
+        if (m && m.status === 'executing') {
+            m.status = 'failed';
+            m.failureReasons = reasons;
+        }
+    }
+}
+export class Treasurer {
+    cfg;
+    accounts;
+    constructor(cfg) {
+        this.cfg = cfg;
+        this.accounts = new Map(cfg.accounts.map((a) => [a.id, { ...a }]));
+    }
+    account(id) {
+        const a = this.accounts.get(id);
+        return a ? { ...a } : undefined;
+    }
+    /** The signed {intent, mandate} pairs this agent committed — Auditor input. */
+    committedSpends() {
+        return [...this.committed];
+    }
+    committed = [];
+    operatingFor(currency) {
+        return [...this.accounts.values()].find((a) => a.type === 'operating' && a.currency === currency);
+    }
+    intentFor(source, payee, category, amount, currency, now) {
+        return createTransactionIntent({
+            agent: this.cfg.agentKeys,
+            mandateId: this.cfg.mandate.id,
+            merchant: payee,
+            amount,
+            currency,
+            category,
+            description: `treasury:${source.id}`,
+            ...(now ? { now } : {}),
+        });
+    }
+    /**
+     * The shared movement pipeline. Balance is debited ONLY on a committed
+     * allow. On escalate the movement parks (nothing debited); on deny it
+     * aborts (nothing debited). evaluateWithPolicy handles the org-exposure
+     * reserve/release and the atomic kernel commit internally.
+     */
+    async execute(kind, source, payee, category, amount, currency, obligationId, now) {
+        const live = this.accounts.get(source.id);
+        // Balance check up front: never sign a movement we cannot fund.
+        if (live.balance < amount) {
+            return {
+                kind, status: 'skipped', accountId: source.id, payee, category, amount, currency,
+                ...(obligationId ? { obligationId } : {}), reasons: ['INSUFFICIENT_FUNDS'],
+            };
+        }
+        const intent = this.intentFor(live, payee, category, amount, currency, now);
+        const result = await evaluateWithPolicy({
+            policy: this.cfg.policy, mandate: this.cfg.mandate, intent,
+            ...(this.cfg.approvalAbove !== undefined ? { approvalAbove: this.cfg.approvalAbove } : {}),
+            ...(this.cfg.ladder ? { ladder: this.cfg.ladder } : {}),
+            ...(this.cfg.orgLedger ? { orgLedger: this.cfg.orgLedger } : {}),
+            kernelCtx: this.cfg.kernelCtx,
+        });
+        if (result.decision === 'allow') {
+            live.balance -= amount;
+            this.committed.push({ intent, mandate: this.cfg.mandate });
+            this.cfg.audit?.append({
+                type: 'treasury.committed', kind, accountId: source.id, payee, category,
+                amount, currency, intentId: intent.id, ...(obligationId ? { obligationId } : {}),
+            });
+            return {
+                kind, status: 'committed', accountId: source.id, payee, category, amount, currency,
+                intentId: intent.id, ...(obligationId ? { obligationId } : {}),
+            };
+        }
+        if (result.decision === 'escalate') {
+            const movement = this.cfg.approvals.submit({
+                intent, mandate: this.cfg.mandate, kind, accountId: source.id, payee, category,
+                amount, currency, ...(obligationId ? { obligationId } : {}), reason: result.policy.reasons.join(','),
+            });
+            this.cfg.audit?.append({
+                type: 'treasury.escalated', kind, accountId: source.id, payee, category,
+                amount, currency, approvalId: movement.id, intentId: intent.id, ...(obligationId ? { obligationId } : {}),
+            });
+            return {
+                kind, status: 'pending_approval', accountId: source.id, payee, category, amount,
+                currency, approvalId: movement.id, intentId: intent.id, ...(obligationId ? { obligationId } : {}),
+            };
+        }
+        const reasons = [...result.kernel.reasons, ...result.policy.reasons];
+        this.cfg.audit?.append({
+            type: 'treasury.denied', kind, accountId: source.id, payee, category,
+            amount, currency, reasons, ...(obligationId ? { obligationId } : {}),
+        });
+        return {
+            kind, status: 'denied', accountId: source.id, payee, category, amount, currency,
+            reasons, ...(obligationId ? { obligationId } : {}),
+        };
+    }
+    /** Fund a single obligation, routing through FX if we don't hold its currency. */
+    async fundObligation(ob, now) {
+        // 1) We hold the obligation's currency directly. Pay if it can cover it;
+        //    if underfunded, SKIP — converting into a currency we already hold is
+        //    nonsense, so this is a genuine funding gap.
+        const native = this.operatingFor(ob.currency);
+        if (native) {
+            if (native.balance >= ob.amount) {
+                return this.execute('obligation_payment', native, ob.payee, ob.category, ob.amount, ob.currency, ob.id, now);
+            }
+            return {
+                kind: 'obligation_payment', status: 'skipped', accountId: native.id, payee: ob.payee,
+                category: ob.category, amount: ob.amount, currency: ob.currency, obligationId: ob.id,
+                reasons: ['INSUFFICIENT_FUNDS'],
+            };
+        }
+        // 2) We do NOT hold the obligation's currency: route ONE mandate-governed
+        //    movement in a currency we hold (prefer base), FX desk settles abroad.
+        const candidates = [...this.accounts.values()].filter((a) => a.type === 'operating' && a.currency !== ob.currency);
+        const source = candidates.find((a) => a.currency === this.cfg.baseCurrency) ?? candidates[0];
+        if (!source) {
+            return {
+                kind: 'obligation_payment', status: 'skipped', accountId: '—', payee: ob.payee,
+                category: ob.category, amount: ob.amount, currency: ob.currency, obligationId: ob.id,
+                reasons: ['NO_FUNDING_ACCOUNT'],
+            };
+        }
+        const sourceAmount = ceilMinorUnits(ob.amount * this.cfg.fx.rate(ob.currency, source.currency));
+        return this.execute('fx_conversion', source, ob.payee, ob.category, sourceAmount, source.currency, ob.id, now);
+    }
+    /** A full treasury cycle: pay due obligations FIRST, then sweep idle cash. */
+    async runCycle(obligations, now) {
+        const at = (now ?? new Date()).getTime();
+        const actions = [];
+        const due = obligations.filter((o) => o.dueAt <= at).sort((a, b) => a.dueAt - b.dueAt);
+        for (const ob of due)
+            actions.push(await this.fundObligation(ob, now));
+        // Liquidity sweep AFTER obligations, so we never sweep money we owe.
+        for (const acct of this.accounts.values()) {
+            if (acct.type !== 'operating' || acct.minBuffer === undefined)
+                continue;
+            const excess = acct.balance - acct.minBuffer;
+            if (excess <= 0)
+                continue;
+            const reserve = [...this.accounts.values()].find((a) => (a.type === 'reserve' || a.type === 'yield') && a.currency === acct.currency);
+            if (!reserve)
+                continue;
+            const action = await this.execute('liquidity_sweep', acct, reserve.id, 'treasury_sweep', excess, acct.currency, undefined, now);
+            if (action.status === 'committed')
+                this.accounts.get(reserve.id).balance += excess;
+            actions.push(action);
+        }
+        return actions;
+    }
+    /** Finalize an escalated movement with a signed CFO approval (two-phase). */
+    async applyApproval(approvalId, approval) {
+        const movement = this.cfg.approvals.get(approvalId);
+        if (!movement)
+            throw new Error(`No movement ${approvalId}`);
+        const base = {
+            kind: movement.kind, accountId: movement.accountId, payee: movement.payee,
+            category: movement.category, amount: movement.amount, currency: movement.currency,
+            ...(movement.obligationId ? { obligationId: movement.obligationId } : {}),
+        };
+        if (!verifyApproval(approval) || approval.intentId !== movement.intent.id) {
+            return { ...base, status: 'denied', reasons: ['APPROVAL_SIGNATURE_INVALID'] };
+        }
+        // Separation of duties: the agent that initiated the movement can never be
+        // the human that countersigns it. Approval is authority from ANOTHER key.
+        if (approval.approvedBy === this.cfg.agentKeys.did) {
+            return { ...base, status: 'denied', reasons: ['SELF_APPROVAL_FORBIDDEN'] };
+        }
+        // Exactly-once gate: a double-submit dies here, never reaching the kernel.
+        if (!this.cfg.approvals.claimExecution(approvalId)) {
+            return { ...base, status: 'denied', reasons: ['ALREADY_EXECUTED'] };
+        }
+        const result = await evaluateWithPolicy({
+            policy: this.cfg.policy, mandate: this.cfg.mandate, intent: movement.intent,
+            ...(this.cfg.approvalAbove !== undefined ? { approvalAbove: this.cfg.approvalAbove } : {}),
+            humanApproval: approval,
+            ...(this.cfg.ladder ? { ladder: this.cfg.ladder } : {}),
+            ...(this.cfg.orgLedger ? { orgLedger: this.cfg.orgLedger } : {}),
+            kernelCtx: this.cfg.kernelCtx,
+        });
+        if (result.decision !== 'allow') {
+            const reasons = [...result.kernel.reasons, ...result.policy.reasons];
+            if (isSecurityAnomaly(reasons))
+                this.cfg.approvals.markFailed(approvalId, reasons);
+            else
+                this.cfg.approvals.revertToApproved(approvalId, reasons);
+            this.cfg.audit?.append({ type: 'treasury.approval_denied', approvalId, intentId: movement.intent.id, reasons });
+            return { ...base, status: 'denied', reasons };
+        }
+        this.cfg.approvals.confirmExecuted(approvalId);
+        const src = this.accounts.get(movement.accountId);
+        if (src)
+            src.balance -= movement.amount;
+        if (movement.kind === 'liquidity_sweep') {
+            const reserve = [...this.accounts.values()].find((a) => (a.type === 'reserve' || a.type === 'yield') && a.currency === movement.currency);
+            if (reserve)
+                reserve.balance += movement.amount;
+        }
+        this.committed.push({ intent: movement.intent, mandate: movement.mandate });
+        this.cfg.audit?.append({
+            type: 'treasury.approval_executed', approvalId, intentId: movement.intent.id,
+            approvedBy: approval.approvedBy, approvalSignature: approval.signature,
+            amount: movement.amount, currency: movement.currency, payee: movement.payee,
+        });
+        return { ...base, status: 'committed', intentId: movement.intent.id, approvalId };
+    }
+    /** Multi-currency cash position, converted to base, net of near-term obligations. */
+    cashPosition(obligations, horizonMs = 30 * 24 * 3600 * 1000, now) {
+        const at = (now ?? new Date()).getTime();
+        const byCurrency = {};
+        let totalInBase = 0;
+        for (const a of this.accounts.values()) {
+            byCurrency[a.currency] = (byCurrency[a.currency] ?? 0) + a.balance;
+            totalInBase += roundMinorUnits(a.balance * this.cfg.fx.rate(a.currency, this.cfg.baseCurrency));
+        }
+        const nearTermObligationsInBase = obligations
+            .filter((o) => o.dueAt <= at + horizonMs)
+            .reduce((s, o) => s + roundMinorUnits(o.amount * this.cfg.fx.rate(o.currency, this.cfg.baseCurrency)), 0);
+        return {
+            baseCurrency: this.cfg.baseCurrency, byCurrency, totalInBase,
+            nearTermObligationsInBase, netLiquidityInBase: totalInBase - nearTermObligationsInBase,
+        };
+    }
+}
+//# sourceMappingURL=treasury.js.map

package/dist/treasury.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"treasury.js","sourceRoot":"","sources":["../src/treasury.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,uBAAuB,GAOxB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,GAIlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,cAAc,EAAuB,MAAM,gBAAgB,CAAC;AA8BnF,mDAAmD;AACnD,MAAM,OAAO,QAAQ;IACU;IAA7B,YAA6B,KAA6B;QAA7B,UAAK,GAAL,KAAK,CAAwB;IAAG,CAAC;IAC9D,IAAI,CAAC,IAAY,EAAE,EAAU;QAC3B,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AACD,SAAS,cAAc,CAAC,CAAS;IAC/B,yEAAyE;IACzE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;AAC9C,CAAC;AAoDD,MAAM,OAAO,qBAAqB;IACxB,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEvD,MAAM,CAAC,KAA6D;QAClE,MAAM,QAAQ,GAAoB;YAChC,GAAG,KAAK;YACR,EAAE,EAAE,OAAO,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACrC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,MAAM,EAAE,SAAS;SAClB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,EAAU,IAAiC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,OAAO,KAAwB,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3G,GAAG,KAAwB,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjE,iEAAiE;IACjE,OAAO,CAAC,EAAU,EAAE,QAAkB;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC;QAClC,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,QAAkB;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC;QAC1F,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC3B,CAAC,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4EAA4E;IAC5E,cAAc,CAAC,EAAU;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QAChD,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,eAAe,CAAC,EAAU;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;YAAE,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;IAC3D,CAAC;IACD,uCAAuC;IACvC,gBAAgB,CAAC,EAAU,EAAE,OAAiB;QAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAAC,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;YAAC,CAAC,CAAC,cAAc,GAAG,OAAO,CAAC;QAAC,CAAC;IAC3F,CAAC;IACD,8CAA8C;IAC9C,UAAU,CAAC,EAAU,EAAE,OAAiB;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;YAAC,CAAC,CAAC,cAAc,GAAG,OAAO,CAAC;QAAC,CAAC;IACzF,CAAC;CACF;AAmBD,MAAM,OAAO,SAAS;IAGS;IAFZ,QAAQ,CAAuB;IAEhD,YAA6B,GAAoB;QAApB,QAAG,GAAH,GAAG,CAAiB;QAC/C,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,+EAA+E;IAC/E,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IACO,SAAS,GAA2D,EAAE,CAAC;IAEvE,YAAY,CAAC,QAAgB;QACnC,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACpG,CAAC;IAEO,SAAS,CAAC,MAAe,EAAE,KAAa,EAAE,QAAgB,EAAE,MAAc,EAAE,QAAgB,EAAE,GAAU;QAC9G,OAAO,uBAAuB,CAAC;YAC7B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC9B,QAAQ,EAAE,KAAK;YACf,MAAM;YACN,QAAQ;YACR,QAAQ;YACR,WAAW,EAAE,YAAY,MAAM,CAAC,EAAE,EAAE;YACpC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,OAAO,CACnB,IAAgB,EAAE,MAAe,EAAE,KAAa,EAAE,QAAgB,EAClE,MAAc,EAAE,QAAgB,EAAE,YAAgC,EAAE,GAAqB;QAEzF,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAE,CAAC;QAC3C,gEAAgE;QAChE,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;YAC1B,OAAO;gBACL,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;gBAChF,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,oBAAoB,CAAC;aAC3E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;YACtC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM;YAC1D,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS;SAC9B,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;gBACrB,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ;gBACvE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjF,CAAC,CAAC;YACH,OAAO;gBACL,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;gBAClF,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC;gBACzC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ;gBAC9E,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;aACrG,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;gBACrB,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ;gBACvE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1G,CAAC,CAAC;YACH,OAAO;gBACL,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM;gBAC/E,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClG,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;YACrB,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ;YACpE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;YAC/E,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC;IACJ,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,cAAc,CAAC,EAAc,EAAE,GAAU;QACrD,yEAAyE;QACzE,0EAA0E;QAC1E,iDAAiD;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBAChC,OAAO,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK;gBACpF,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE;gBACpF,OAAO,EAAE,CAAC,oBAAoB,CAAC;aAChC,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnH,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK;gBAC9E,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE;gBACpF,OAAO,EAAE,CAAC,oBAAoB,CAAC;aAChC,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,cAAc,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACjH,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,QAAQ,CAAC,WAAyB,EAAE,GAAU;QAClD,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,OAAO,GAAqB,EAAE,CAAC;QAErC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACvF,KAAK,MAAM,EAAE,IAAI,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAEvE,qEAAqE;QACrE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7C,IAAI,MAAM,IAAI,CAAC;gBAAE,SAAS;YAC1B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtI,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YAChI,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAE,CAAC,OAAO,IAAI,MAAM,CAAC;YACpF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,QAAwB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;QAE5D,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK;YACzE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YACjF,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC;QAEF,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAC1E,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAChF,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACnD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC7E,CAAC;QACD,2EAA2E;QAC3E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;YACtC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;YAC3E,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,aAAa,EAAE,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS;SAC9B,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrE,IAAI,iBAAiB,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;;gBAC9E,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAChH,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,GAAG;YAAE,GAAG,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;QACxC,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1I,IAAI,OAAO;gBAAE,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;YACrB,IAAI,EAAE,4BAA4B,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE;YAC5E,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,SAAS;YACtE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK;SAC5E,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;IACpF,CAAC;IAED,qFAAqF;IACrF,YAAY,CAAC,WAAyB,EAAE,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,GAAU;QACnF,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;YACnE,WAAW,IAAI,eAAe,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,yBAAyB,GAAG,WAAW;aAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,GAAG,SAAS,CAAC;aACxC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5G,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW;YAC5D,yBAAyB,EAAE,kBAAkB,EAAE,WAAW,GAAG,yBAAyB;SACvF,CAAC;IACJ,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,47 @@
+/**
+ * types.ts — L2 agent runtime data model (procurement domain).
+ */
+import type { SpendMandate, TransactionIntent } from '@kyaki/core';
+export interface ProcurementNeed {
+    id: string;
+    description: string;
+    category?: string;
+    maxBudget?: number;
+}
+export interface VendorOffer {
+    needId: string;
+    vendor: string;
+    price: number;
+    currency: string;
+}
+export interface Market {
+    offersFor(needId: string): Promise<VendorOffer[]> | VendorOffer[];
+}
+export type OutcomeStatus = 'purchased' | 'pending_approval' | 'no_compliant_vendor' | 'deferred';
+export interface SkippedOffer {
+    vendor: string;
+    price: number;
+    reason: string;
+}
+export interface ProcurementOutcome {
+    need: ProcurementNeed;
+    status: OutcomeStatus;
+    offer?: VendorOffer;
+    txnId?: string;
+    approvalId?: string;
+    skippedNonCompliant?: SkippedOffer[];
+    reasons?: string[];
+}
+export interface ApprovalRequest {
+    id: string;
+    intent: TransactionIntent;
+    mandate: SpendMandate;
+    need: ProcurementNeed;
+    offer: VendorOffer;
+    reason: string;
+    submittedAt: string;
+    status: 'pending' | 'approved' | 'rejected' | 'executed';
+    decidedBy?: string;
+    decidedAt?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEnE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC;CACnE;AAED,MAAM,MAAM,aAAa,GACrB,WAAW,GACX,kBAAkB,GAClB,qBAAqB,GACrB,UAAU,CAAC;AAEf,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@kyaki/agents",
+  "version": "0.1.0",
+  "description": "KYA agent runtime — the Procurer, Treasurer, Auditor, and Steward over the fail-closed kernel.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "types": "./src/index.ts",
+  "exports": {
+    ".": {
+      "types": "./src/index.ts",
+      "import": "./src/index.ts",
+      "default": "./src/index.ts"
+    }
+  },
+  "files": ["dist", "src"],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json"
+  },
+  "publishConfig": {
+    "access": "public",
+    "types": "./dist/index.d.ts",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "import": "./dist/index.js",
+        "default": "./dist/index.js"
+      }
+    }
+  },
+  "dependencies": {
+    "@kyaki/core": "^0.1.0",
+    "@kyaki/policy": "^0.1.0"
+  }
+}

package/src/approvals.ts

@@ -0,0 +1,111 @@
+/**
+ * approvals.ts — The human countersignature workflow.
+ *
+ * Approval is not a button click recorded in a database row — it is an
+ * Ed25519 SIGNATURE by the approver's key over a canonical approval document
+ * binding (intentId, approvedBy, at). Exactly-once execution is enforced by
+ * markExecuted, which flips state before the kernel is touched.
+ */
+import { randomUUID } from 'node:crypto';
+import {
+  canonicalBytes, fromBase58, publicKeyFromDid, sign, toBase58, verifySignature,
+  type Identity, type SpendMandate, type TransactionIntent,
+} from '@kyaki/core';
+import type { HumanApproval } from '@kyaki/policy';
+import type { ApprovalRequest, ProcurementNeed, VendorOffer } from './types.js';
+
+export interface SignedApproval extends HumanApproval {
+  at: string;
+  signature: string;
+}
+
+function approvalDocument(intentId: string, approvedBy: string, at: string) {
+  return { type: 'KyaHumanApproval', intentId, approvedBy, at };
+}
+
+/** Produce a CFO countersignature over the canonical approval document. The
+ *  single signer used by every approval inbox (procurement + treasury), so the
+ *  signed shape never diverges from what verifyApproval expects. */
+export function signApproval(
+  intentId: string,
+  approver: Identity,
+  at: string = new Date().toISOString(),
+): SignedApproval {
+  const doc = approvalDocument(intentId, approver.did, at);
+  return { intentId, approvedBy: approver.did, at, signature: toBase58(sign(canonicalBytes(doc), approver.privateKey)) };
+}
+
+export function verifyApproval(approval: SignedApproval): boolean {
+  try {
+    const publicKey = publicKeyFromDid(approval.approvedBy);
+    const doc = approvalDocument(approval.intentId, approval.approvedBy, approval.at);
+    return verifySignature(fromBase58(approval.signature), canonicalBytes(doc), publicKey);
+  } catch {
+    return false;
+  }
+}
+
+export class ApprovalInbox {
+  private requests = new Map<string, ApprovalRequest>();
+
+  submit(input: {
+    intent: TransactionIntent; mandate: SpendMandate; need: ProcurementNeed;
+    offer: VendorOffer; reason: string;
+  }): ApprovalRequest {
+    const request: ApprovalRequest = {
+      id: `apr_${randomUUID().slice(0, 8)}`,
+      intent: input.intent, mandate: input.mandate, need: input.need,
+      offer: input.offer, reason: input.reason,
+      submittedAt: new Date().toISOString(), status: 'pending',
+    };
+    this.requests.set(request.id, request);
+    return request;
+  }
+
+  get(id: string): ApprovalRequest | undefined { return this.requests.get(id); }
+  pending(): ApprovalRequest[] { return [...this.requests.values()].filter((r) => r.status === 'pending'); }
+  all(): ApprovalRequest[] { return [...this.requests.values()]; }
+
+  approve(id: string, approver: Identity): SignedApproval {
+    const request = this.requests.get(id);
+    if (!request) throw new Error(`No approval request ${id}`);
+    if (request.status !== 'pending') throw new Error(`Approval ${id} is ${request.status}, not pending`);
+    const signed = signApproval(request.intent.id, approver);
+    request.status = 'approved';
+    request.decidedBy = signed.approvedBy;
+    request.decidedAt = signed.at;
+    return signed;
+  }
+
+  reject(id: string, approver: Identity): ApprovalRequest {
+    const request = this.requests.get(id);
+    if (!request) throw new Error(`No approval request ${id}`);
+    if (request.status !== 'pending') throw new Error(`Approval ${id} is ${request.status}, not pending`);
+    request.status = 'rejected';
+    request.decidedBy = approver.did;
+    request.decidedAt = new Date().toISOString();
+    return request;
+  }
+
+  /** Accept a countersignature produced OUTSIDE the inbox — e.g. signed in the
+   *  CFO's browser with their own key — as the approval decision. The caller is
+   *  expected to have already run verifyApproval(); this only binds the decision
+   *  to the request (and refuses if the signature is for a different intent). */
+  acceptSignature(id: string, signed: SignedApproval): boolean {
+    const request = this.requests.get(id);
+    if (!request || request.status !== 'pending') return false;
+    if (signed.intentId !== request.intent.id) return false;
+    request.status = 'approved';
+    request.decidedBy = signed.approvedBy;
+    request.decidedAt = signed.at;
+    return true;
+  }
+
+  /** Exactly-once gate. Returns true the FIRST time only. */
+  markExecuted(id: string): boolean {
+    const request = this.requests.get(id);
+    if (!request || request.status !== 'approved') return false;
+    request.status = 'executed';
+    return true;
+  }
+}