@llm-dev-ops/agentics-cli 1.4.26 → 1.4.27

package/dist/bundled-agents/costops-agents/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@costops/costops-agents",
+  "version": "1.0.0",
+  "description": "Unified Cloud Function for all CostOps agents",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "esbuild src/index.ts --bundle --platform=node --target=node20 --outfile=dist/index.js --format=cjs --external:@google-cloud/functions-framework",
+    "build:check": "tsc --noEmit",
+    "gcp-build": "",
+    "clean": "rm -rf dist",
+    "start": "npm run build && npx @google-cloud/functions-framework --target=handler --source=dist --port=8080",
+    "test": "node --test dist/handler.test.js",
+    "deploy": "npm run build && gcloud functions deploy costops-agents --gen2 --runtime nodejs20 --trigger-http --region us-central1 --project agentics-dev --entry-point handler --memory 512MB --timeout 120s --no-allow-unauthenticated --source=."
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "dependencies": {
+    "@google-cloud/functions-framework": "^3.5.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.0",
+    "@types/uuid": "^9.0.7",
+    "decimal.js": "^10.4.3",
+    "esbuild": "^0.20.0",
+    "typescript": "^5.3.3",
+    "uuid": "^9.0.1",
+    "zod": "^3.22.4"
+  }
+}

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/agent.d.ts

@@ -0,0 +1,134 @@
+/**
+ * LLM-Data-Vault: Data Access Control Agent
+ *
+ * Core agent implementation for evaluating data access requests
+ * using RBAC/ABAC policies and regulatory constraints.
+ *
+ * CRITICAL CONSTRAINTS:
+ * - Agent MUST NOT execute inference
+ * - Agent MUST NOT modify prompts or responses
+ * - Agent MUST NOT route requests
+ * - Agent MUST NOT trigger orchestration
+ * - Agent MUST emit exactly ONE DecisionEvent per invocation
+ *
+ * @module agents/data-access-control/agent
+ */
+import { DataVaultAgent, type ExecutionContext } from '../../runtime/agent-base.js';
+import { type AccessAuthorizationRequest, type AccessAuthorizationResponse, type AccessPolicy, type DecisionType, type AppliedConstraint, type ConfidenceBreakdown } from '../../contracts/index.js';
+import { type PolicyEvaluatorConfig, type RegulatoryConstraint, type PolicyEvaluationSummary } from './policy-evaluator.js';
+import type { RuVectorClient } from '../../ruvector-client/index.js';
+/**
+ * Agent version - follows semver
+ */
+export declare const AGENT_VERSION = "1.0.0";
+/**
+ * Agent identifier
+ */
+export declare const AGENT_ID = "data-access-control";
+/**
+ * Data Access Control Agent configuration
+ */
+export interface DataAccessControlAgentConfig {
+    /** Access policies to evaluate */
+    policies: AccessPolicy[];
+    /** Regulatory constraints to enforce */
+    regulatoryConstraints?: RegulatoryConstraint[];
+    /** Policy evaluator configuration */
+    evaluatorConfig?: Partial<PolicyEvaluatorConfig>;
+    /** RuVector client for persisting decisions */
+    ruvectorClient?: RuVectorClient;
+    /** Enable telemetry emission */
+    enableTelemetry?: boolean;
+}
+/**
+ * Extended authorization response with evaluation details
+ */
+interface AuthorizationResult {
+    response: AccessAuthorizationResponse;
+    evaluation: PolicyEvaluationSummary;
+}
+/**
+ * Data Access Control Agent
+ *
+ * Evaluates data access requests against RBAC/ABAC policies and
+ * regulatory constraints, emitting exactly ONE DecisionEvent per invocation.
+ */
+export declare class DataAccessControlAgent extends DataVaultAgent<AccessAuthorizationRequest, AccessAuthorizationResponse> {
+    private readonly policyEvaluator;
+    private readonly ruvectorClient;
+    private readonly enableTelemetry;
+    /**
+     * Creates a new DataAccessControlAgent
+     *
+     * @param config - Agent configuration
+     */
+    constructor(config: DataAccessControlAgentConfig);
+    /**
+     * Validate incoming request
+     */
+    protected validateRequest(request: unknown): AccessAuthorizationRequest;
+    /**
+     * Validate outgoing response
+     */
+    protected validateResponse(response: unknown): AccessAuthorizationResponse;
+    /**
+     * Get decision type for this agent
+     */
+    protected getDecisionType(): DecisionType;
+    /**
+     * Execute authorization logic
+     */
+    protected executeCore(request: AccessAuthorizationRequest, context: ExecutionContext): Promise<{
+        response: AccessAuthorizationResponse;
+        confidence: ConfidenceBreakdown;
+        constraints: AppliedConstraint[];
+    }>;
+    /**
+     * Authorize a data access request
+     *
+     * This is the main entry point for authorization decisions.
+     *
+     * @param request - The authorization request
+     * @returns Authorization result with response and evaluation details
+     */
+    authorize(request: AccessAuthorizationRequest): Promise<AuthorizationResult>;
+    /**
+     * Build policy evaluation results from summary
+     */
+    private buildPolicyEvaluations;
+    /**
+     * Build denial reasons from evaluation
+     */
+    private buildDenialReasons;
+    /**
+     * Build access conditions from evaluation
+     */
+    private buildAccessConditions;
+    /**
+     * Build applied constraints from evaluation
+     */
+    private buildConstraints;
+    /**
+     * Calculate cache TTL based on evaluation result
+     */
+    private calculateCacheTTL;
+    /**
+     * Persist decision event to ruvector-service
+     *
+     * This method MUST be called after invoke() to persist the DecisionEvent.
+     * The agent itself does not persist - the handler is responsible for calling this.
+     *
+     * @param decisionEvent - The decision event from invoke() result
+     */
+    persistDecision(decisionEvent: Parameters<RuVectorClient['persistDecisionEvent']>[0]): Promise<void>;
+}
+/**
+ * Create a DataAccessControlAgent with default configuration
+ *
+ * @param policies - Access policies to evaluate
+ * @param ruvectorClient - Optional RuVector client for persistence
+ * @returns Configured agent instance
+ */
+export declare function createDataAccessControlAgent(policies: AccessPolicy[], ruvectorClient?: RuVectorClient): DataAccessControlAgent;
+export {};
+//# sourceMappingURL=agent.d.ts.map

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/agents/data-access-control/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,cAAc,EAEd,KAAK,gBAAgB,EACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,YAAY,EAEjB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EAGzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAE7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAGrE;;GAEG;AACH,eAAO,MAAM,aAAa,UAAU,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,QAAQ,wBAAwB,CAAC;AAE9C;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,kCAAkC;IAClC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,wCAAwC;IACxC,qBAAqB,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC/C,qCAAqC;IACrC,eAAe,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACjD,+CAA+C;IAC/C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,gCAAgC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,UAAU,mBAAmB;IAC3B,QAAQ,EAAE,2BAA2B,CAAC;IACtC,UAAU,EAAE,uBAAuB,CAAC;CACrC;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,cAAc,CACxD,0BAA0B,EAC1B,2BAA2B,CAC5B;IACC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAE1C;;;;OAIG;gBACS,MAAM,EAAE,4BAA4B;IAkChD;;OAEG;IACH,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,0BAA0B;IAIvE;;OAEG;IACH,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,2BAA2B;IAI1E;;OAEG;IACH,SAAS,CAAC,eAAe,IAAI,YAAY;IAKzC;;OAEG;cACa,WAAW,CACzB,OAAO,EAAE,0BAA0B,EACnC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;QACT,QAAQ,EAAE,2BAA2B,CAAC;QACtC,UAAU,EAAE,mBAAmB,CAAC;QAChC,WAAW,EAAE,iBAAiB,EAAE,CAAC;KAClC,CAAC;IA4DF;;;;;;;OAOG;IACU,SAAS,CACpB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,mBAAmB,CAAC;IA0C/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA+C9B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA6C1B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoC7B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAqExB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAmBzB;;;;;;;OAOG;IACU,eAAe,CAC1B,aAAa,EAAE,UAAU,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,GACnE,OAAO,CAAC,IAAI,CAAC;CAWjB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,YAAY,EAAE,EACxB,cAAc,CAAC,EAAE,cAAc,GAC9B,sBAAsB,CAMxB"}

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/agent.js

@@ -0,0 +1,389 @@
+/**
+ * LLM-Data-Vault: Data Access Control Agent
+ *
+ * Core agent implementation for evaluating data access requests
+ * using RBAC/ABAC policies and regulatory constraints.
+ *
+ * CRITICAL CONSTRAINTS:
+ * - Agent MUST NOT execute inference
+ * - Agent MUST NOT modify prompts or responses
+ * - Agent MUST NOT route requests
+ * - Agent MUST NOT trigger orchestration
+ * - Agent MUST emit exactly ONE DecisionEvent per invocation
+ *
+ * @module agents/data-access-control/agent
+ */
+import { DataVaultAgent, } from '../../runtime/agent-base.js';
+import { validateAccessAuthorizationRequest, validateAccessAuthorizationResponse, } from '../../contracts/index.js';
+import { PolicyEvaluator, createDefaultPolicyEvaluator, } from './policy-evaluator.js';
+import { getTelemetry } from '../../telemetry/index.js';
+/**
+ * Agent version - follows semver
+ */
+export const AGENT_VERSION = '1.0.0';
+/**
+ * Agent identifier
+ */
+export const AGENT_ID = 'data-access-control';
+/**
+ * Data Access Control Agent
+ *
+ * Evaluates data access requests against RBAC/ABAC policies and
+ * regulatory constraints, emitting exactly ONE DecisionEvent per invocation.
+ */
+export class DataAccessControlAgent extends DataVaultAgent {
+    policyEvaluator;
+    ruvectorClient;
+    enableTelemetry;
+    /**
+     * Creates a new DataAccessControlAgent
+     *
+     * @param config - Agent configuration
+     */
+    constructor(config) {
+        const metadata = {
+            agent_id: AGENT_ID,
+            agent_version: AGENT_VERSION,
+            classification: 'DATA_ACCESS_CONTROL',
+            name: 'Data Access Control Agent',
+            description: 'Evaluates data access requests using RBAC/ABAC policies and regulatory constraints',
+            supported_operations: [
+                'authorize',
+                'evaluate_policy',
+                'check_regulatory_compliance',
+            ],
+        };
+        super(metadata);
+        // Initialize policy evaluator
+        if (config.regulatoryConstraints) {
+            this.policyEvaluator = new PolicyEvaluator(config.policies, config.regulatoryConstraints, config.evaluatorConfig);
+        }
+        else {
+            this.policyEvaluator = createDefaultPolicyEvaluator(config.policies, config.evaluatorConfig);
+        }
+        this.ruvectorClient = config.ruvectorClient ?? null;
+        this.enableTelemetry = config.enableTelemetry ?? true;
+    }
+    /**
+     * Validate incoming request
+     */
+    validateRequest(request) {
+        return validateAccessAuthorizationRequest(request);
+    }
+    /**
+     * Validate outgoing response
+     */
+    validateResponse(response) {
+        return validateAccessAuthorizationResponse(response);
+    }
+    /**
+     * Get decision type for this agent
+     */
+    getDecisionType() {
+        // Map to appropriate decision type based on result
+        return 'dataset_access_granted'; // Will be updated in executeCore based on actual decision
+    }
+    /**
+     * Execute authorization logic
+     */
+    async executeCore(request, context) {
+        const startTime = performance.now();
+        // Emit telemetry for invocation start
+        if (this.enableTelemetry) {
+            getTelemetry().recordInvocationStart(this.metadata.agent_id, this.metadata.agent_version, context.execution_ref, context.correlation_id, context.tenant_id);
+        }
+        try {
+            // Perform authorization
+            const authResult = await this.authorize(request);
+            // Build constraints list from evaluation
+            const constraints = this.buildConstraints(authResult.evaluation);
+            // Build confidence breakdown
+            const confidence = {
+                policy_match: authResult.evaluation.confidence,
+                detection_confidence: authResult.evaluation.rbac.confidence,
+                model_confidence: authResult.evaluation.abac.confidence,
+            };
+            // Record access decision telemetry
+            if (this.enableTelemetry) {
+                getTelemetry().recordAccessDecision(this.metadata.agent_id, context.execution_ref, authResult.response.decision === 'allow', authResult.evaluation.reasons.join('; '));
+            }
+            return {
+                response: authResult.response,
+                confidence,
+                constraints,
+            };
+        }
+        finally {
+            const duration = performance.now() - startTime;
+            // Emit completion telemetry
+            if (this.enableTelemetry) {
+                getTelemetry().recordInvocationComplete(this.metadata.agent_id, this.metadata.agent_version, context.execution_ref, duration, true, { operation: 'authorize' });
+            }
+        }
+    }
+    /**
+     * Authorize a data access request
+     *
+     * This is the main entry point for authorization decisions.
+     *
+     * @param request - The authorization request
+     * @returns Authorization result with response and evaluation details
+     */
+    async authorize(request) {
+        // Evaluate policies
+        const evaluation = this.policyEvaluator.evaluate(request.subject, request.resource, request.permission, request.context);
+        // Build policy evaluation results
+        const policyEvaluations = this.buildPolicyEvaluations(evaluation);
+        // Build denial reasons if denied
+        const denialReasons = evaluation.decision === 'deny'
+            ? this.buildDenialReasons(evaluation)
+            : [];
+        // Build conditions if conditional access
+        const conditions = this.buildAccessConditions(evaluation);
+        // Determine granted permissions
+        const grantedPermissions = evaluation.decision === 'allow'
+            ? evaluation.rbac.grantedPermissions
+            : [];
+        // Build response
+        const response = {
+            request_id: request.request_id,
+            decision: evaluation.decision === 'allow' ? 'allow' : 'deny',
+            granted_permissions: grantedPermissions,
+            policy_evaluations: policyEvaluations,
+            conditions,
+            denial_reasons: denialReasons,
+            cache_ttl_seconds: this.calculateCacheTTL(evaluation),
+        };
+        return {
+            response,
+            evaluation,
+        };
+    }
+    /**
+     * Build policy evaluation results from summary
+     */
+    buildPolicyEvaluations(evaluation) {
+        const results = [];
+        // Add RBAC evaluation if roles matched
+        if (evaluation.rbac.matchingRoles.length > 0) {
+            results.push({
+                policy_id: crypto.randomUUID(),
+                policy_version: '1.0',
+                rule_id: evaluation.rbac.matchingRoles.join(','),
+                effect: evaluation.rbac.allowed ? 'allow' : 'deny',
+                reason: evaluation.rbac.reason,
+            });
+        }
+        // Add ABAC evaluation if rules matched
+        if (evaluation.abac.matchingRules.length > 0) {
+            results.push({
+                policy_id: crypto.randomUUID(),
+                policy_version: '1.0',
+                rule_id: evaluation.abac.matchingRules.join(','),
+                effect: evaluation.abac.allowed ? 'allow' : 'deny',
+                reason: evaluation.abac.reason,
+            });
+        }
+        // Add regulatory evaluations
+        for (const framework of evaluation.regulatory.applicableFrameworks) {
+            const violations = evaluation.regulatory.violations.filter(v => v.framework === framework);
+            results.push({
+                policy_id: crypto.randomUUID(),
+                policy_version: '1.0',
+                rule_id: framework,
+                effect: violations.some(v => v.severity === 'deny') ? 'deny' : 'allow',
+                reason: violations.length > 0
+                    ? `Violations: ${violations.map(v => v.requirementId).join(', ')}`
+                    : `${framework} compliant`,
+            });
+        }
+        return results;
+    }
+    /**
+     * Build denial reasons from evaluation
+     */
+    buildDenialReasons(evaluation) {
+        const reasons = [];
+        // Add RBAC denial reasons
+        if (!evaluation.rbac.allowed) {
+            reasons.push({
+                code: 'RBAC_DENIED',
+                message: evaluation.rbac.reason,
+            });
+        }
+        // Add ABAC denial reasons
+        if (!evaluation.abac.allowed) {
+            reasons.push({
+                code: 'ABAC_DENIED',
+                message: evaluation.abac.reason,
+            });
+        }
+        // Add regulatory violation reasons
+        for (const violation of evaluation.regulatory.violations) {
+            if (violation.severity === 'deny') {
+                reasons.push({
+                    code: `${violation.framework}_VIOLATION`,
+                    message: violation.description,
+                    rule_id: violation.requirementId,
+                });
+            }
+        }
+        // Add combined reasons
+        for (const reason of evaluation.reasons) {
+            if (!reasons.some(r => r.message === reason)) {
+                reasons.push({
+                    code: 'POLICY_DENIED',
+                    message: reason,
+                });
+            }
+        }
+        return reasons;
+    }
+    /**
+     * Build access conditions from evaluation
+     */
+    buildAccessConditions(evaluation) {
+        const conditions = [];
+        // Add warning-level regulatory violations as conditions
+        for (const violation of evaluation.regulatory.violations) {
+            if (violation.severity === 'warn') {
+                conditions.push({
+                    type: 'regulatory_warning',
+                    requirement: violation.description,
+                    metadata: {
+                        framework: violation.framework,
+                        requirementId: violation.requirementId,
+                    },
+                });
+            }
+        }
+        // Add audit requirements
+        for (const violation of evaluation.regulatory.violations) {
+            if (violation.severity === 'audit') {
+                conditions.push({
+                    type: 'audit_required',
+                    requirement: `Access must be audited for ${violation.framework} compliance`,
+                    metadata: {
+                        framework: violation.framework,
+                        requirementId: violation.requirementId,
+                    },
+                });
+            }
+        }
+        return conditions;
+    }
+    /**
+     * Build applied constraints from evaluation
+     */
+    buildConstraints(evaluation) {
+        const constraints = [];
+        // Add role-based constraints
+        if (evaluation.rbac.matchingRoles.length > 0) {
+            constraints.push({
+                type: 'role_required',
+                description: `Access granted via roles: ${evaluation.rbac.matchingRoles.join(', ')}`,
+                severity: 'info',
+                metadata: { roles: evaluation.rbac.matchingRoles },
+            });
+        }
+        else if (!evaluation.rbac.allowed) {
+            constraints.push({
+                type: 'permission_denied',
+                description: evaluation.rbac.reason,
+                severity: 'error',
+            });
+        }
+        // Add regulatory constraints
+        for (const violation of evaluation.regulatory.violations) {
+            const severityMap = {
+                deny: 'critical',
+                warn: 'warning',
+                audit: 'info',
+            };
+            let constraintType;
+            switch (violation.framework) {
+                case 'GDPR':
+                    constraintType = 'gdpr_compliance';
+                    break;
+                case 'HIPAA':
+                    constraintType = 'hipaa_compliance';
+                    break;
+                case 'CCPA':
+                    constraintType = 'ccpa_compliance';
+                    break;
+                default:
+                    constraintType = 'soc2_compliance';
+            }
+            constraints.push({
+                type: constraintType,
+                description: violation.description,
+                severity: severityMap[violation.severity] ?? 'warning',
+                metadata: {
+                    requirementId: violation.requirementId,
+                    framework: violation.framework,
+                },
+            });
+        }
+        // Add decision source constraint
+        constraints.push({
+            type: 'role_required', // Using as proxy for decision tracking
+            description: `Decision made by: ${evaluation.decisionSource}`,
+            severity: 'info',
+            metadata: {
+                decisionSource: evaluation.decisionSource,
+                confidence: evaluation.confidence,
+            },
+        });
+        return constraints;
+    }
+    /**
+     * Calculate cache TTL based on evaluation result
+     */
+    calculateCacheTTL(evaluation) {
+        // No caching for denied requests
+        if (evaluation.decision === 'deny') {
+            return 0;
+        }
+        // Shorter TTL for lower confidence decisions
+        if (evaluation.confidence < 0.7) {
+            return 60; // 1 minute
+        }
+        if (evaluation.confidence < 0.9) {
+            return 300; // 5 minutes
+        }
+        // Standard TTL for high confidence decisions
+        return 900; // 15 minutes
+    }
+    /**
+     * Persist decision event to ruvector-service
+     *
+     * This method MUST be called after invoke() to persist the DecisionEvent.
+     * The agent itself does not persist - the handler is responsible for calling this.
+     *
+     * @param decisionEvent - The decision event from invoke() result
+     */
+    async persistDecision(decisionEvent) {
+        if (!this.ruvectorClient) {
+            throw new Error('RuVector client not configured - cannot persist decision');
+        }
+        const result = await this.ruvectorClient.persistDecisionEvent(decisionEvent);
+        if (!result.success) {
+            throw new Error(`Failed to persist decision: ${result.error?.message}`);
+        }
+    }
+}
+/**
+ * Create a DataAccessControlAgent with default configuration
+ *
+ * @param policies - Access policies to evaluate
+ * @param ruvectorClient - Optional RuVector client for persistence
+ * @returns Configured agent instance
+ */
+export function createDataAccessControlAgent(policies, ruvectorClient) {
+    return new DataAccessControlAgent({
+        policies,
+        ruvectorClient,
+        enableTelemetry: true,
+    });
+}
+//# sourceMappingURL=agent.js.map

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../../src/agents/data-access-control/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,cAAc,GAGf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAQL,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAIf,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AAErC;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AA0B9C;;;;;GAKG;AACH,MAAM,OAAO,sBAAuB,SAAQ,cAG3C;IACkB,eAAe,CAAkB;IACjC,cAAc,CAAwB;IACtC,eAAe,CAAU;IAE1C;;;;OAIG;IACH,YAAY,MAAoC;QAC9C,MAAM,QAAQ,GAAkB;YAC9B,QAAQ,EAAE,QAAQ;YAClB,aAAa,EAAE,aAAa;YAC5B,cAAc,EAAE,qBAAqB;YACrC,IAAI,EAAE,2BAA2B;YACjC,WAAW,EAAE,oFAAoF;YACjG,oBAAoB,EAAE;gBACpB,WAAW;gBACX,iBAAiB;gBACjB,6BAA6B;aAC9B;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEhB,8BAA8B;QAC9B,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACjC,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CACxC,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,qBAAqB,EAC5B,MAAM,CAAC,eAAe,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,GAAG,4BAA4B,CACjD,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,eAAe,CACvB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IACxD,CAAC;IAED;;OAEG;IACO,eAAe,CAAC,OAAgB;QACxC,OAAO,kCAAkC,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACO,gBAAgB,CAAC,QAAiB;QAC1C,OAAO,mCAAmC,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACO,eAAe;QACvB,mDAAmD;QACnD,OAAO,wBAAwB,CAAC,CAAC,0DAA0D;IAC7F,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,WAAW,CACzB,OAAmC,EACnC,OAAyB;QAMzB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,sCAAsC;QACtC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,YAAY,EAAE,CAAC,qBAAqB,CAClC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EACtB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAC3B,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,SAAS,CAClB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,wBAAwB;YACxB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAEjD,yCAAyC;YACzC,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAEjE,6BAA6B;YAC7B,MAAM,UAAU,GAAwB;gBACtC,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,UAAU;gBAC9C,oBAAoB,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU;gBAC3D,gBAAgB,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU;aACxD,CAAC;YAEF,mCAAmC;YACnC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,YAAY,EAAE,CAAC,oBAAoB,CACjC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EACtB,OAAO,CAAC,aAAa,EACrB,UAAU,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,EACxC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACzC,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,UAAU;gBACV,WAAW;aACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE/C,4BAA4B;YAC5B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,YAAY,EAAE,CAAC,wBAAwB,CACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EACtB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAC3B,OAAO,CAAC,aAAa,EACrB,QAAQ,EACR,IAAI,EACJ,EAAE,SAAS,EAAE,WAAW,EAAE,CAC3B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,SAAS,CACpB,OAAmC;QAEnC,oBAAoB;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAC9C,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,OAAO,CAChB,CAAC;QAEF,kCAAkC;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAElE,iCAAiC;QACjC,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,KAAK,MAAM;YAClD,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;YACrC,CAAC,CAAC,EAAE,CAAC;QAEP,yCAAyC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAE1D,gCAAgC;QAChC,MAAM,kBAAkB,GAAG,UAAU,CAAC,QAAQ,KAAK,OAAO;YACxD,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB;YACpC,CAAC,CAAC,EAAE,CAAC;QAEP,iBAAiB;QACjB,MAAM,QAAQ,GAAgC;YAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC5D,mBAAmB,EAAE,kBAAkB;YACvC,kBAAkB,EAAE,iBAAiB;YACrC,UAAU;YACV,cAAc,EAAE,aAAa;YAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;SACtD,CAAC;QAEF,OAAO;YACL,QAAQ;YACR,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC5B,UAAmC;QAEnC,MAAM,OAAO,GAA6B,EAAE,CAAC;QAE7C,uCAAuC;QACvC,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC9B,cAAc,EAAE,KAAK;gBACrB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;gBAChD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBAClD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,uCAAuC;QACvC,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC9B,cAAc,EAAE,KAAK;gBACrB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;gBAChD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBAClD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC;YACnE,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAC/B,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC9B,cAAc,EAAE,KAAK;gBACrB,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;gBACtE,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;oBAC3B,CAAC,CAAC,eAAe,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAClE,CAAC,CAAC,GAAG,SAAS,YAAY;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,UAAmC;QAEnC,MAAM,OAAO,GAAkD,EAAE,CAAC;QAElE,0BAA0B;QAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;aAChC,CAAC,CAAC;QACL,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;aAChC,CAAC,CAAC;QACL,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YACzD,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,GAAG,SAAS,CAAC,SAAS,YAAY;oBACxC,OAAO,EAAE,SAAS,CAAC,WAAW;oBAC9B,OAAO,EAAE,SAAS,CAAC,aAAa;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,qBAAqB,CAC3B,UAAmC;QAEnC,MAAM,UAAU,GAA8C,EAAE,CAAC;QAEjE,wDAAwD;QACxD,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YACzD,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAClC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,oBAAoB;oBAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,QAAQ,EAAE;wBACR,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,aAAa,EAAE,SAAS,CAAC,aAAa;qBACvC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YACzD,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACnC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,gBAAgB;oBACtB,WAAW,EAAE,8BAA8B,SAAS,CAAC,SAAS,aAAa;oBAC3E,QAAQ,EAAE;wBACR,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,aAAa,EAAE,SAAS,CAAC,aAAa;qBACvC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,UAAmC;QAEnC,MAAM,WAAW,GAAwB,EAAE,CAAC;QAE5C,6BAA6B;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,eAAe;gBACrB,WAAW,EAAE,6BAA6B,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACpF,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE;aACnD,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,mBAAmB;gBACzB,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;gBACnC,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YACzD,MAAM,WAAW,GAAkD;gBACjE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,MAAM;aACd,CAAC;YAEF,IAAI,cAAyC,CAAC;YAC9C,QAAQ,SAAS,CAAC,SAAS,EAAE,CAAC;gBAC5B,KAAK,MAAM;oBACT,cAAc,GAAG,iBAAiB,CAAC;oBACnC,MAAM;gBACR,KAAK,OAAO;oBACV,cAAc,GAAG,kBAAkB,CAAC;oBACpC,MAAM;gBACR,KAAK,MAAM;oBACT,cAAc,GAAG,iBAAiB,CAAC;oBACnC,MAAM;gBACR;oBACE,cAAc,GAAG,iBAAiB,CAAC;YACvC,CAAC;YAED,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,cAAc;gBACpB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,SAAS;gBACtD,QAAQ,EAAE;oBACR,aAAa,EAAE,SAAS,CAAC,aAAa;oBACtC,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;QAED,iCAAiC;QACjC,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,eAAe,EAAE,uCAAuC;YAC9D,WAAW,EAAE,qBAAqB,UAAU,CAAC,cAAc,EAAE;YAC7D,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE;gBACR,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,UAAU,EAAE,UAAU,CAAC,UAAU;aAClC;SACF,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,UAAmC;QAC3D,iCAAiC;QACjC,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,6CAA6C;QAC7C,IAAI,UAAU,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC,CAAC,WAAW;QACxB,CAAC;QAED,IAAI,UAAU,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,CAAC,YAAY;QAC1B,CAAC;QAED,6CAA6C;QAC7C,OAAO,GAAG,CAAC,CAAC,aAAa;IAC3B,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,eAAe,CAC1B,aAAoE;QAEpE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;QAE7E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAwB,EACxB,cAA+B;IAE/B,OAAO,IAAI,sBAAsB,CAAC;QAChC,QAAQ;QACR,cAAc;QACd,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/handler.d.ts

@@ -0,0 +1,64 @@
+/**
+ * LLM-Data-Vault: Data Access Control Edge Function Handler
+ *
+ * Google Cloud Edge Function handler for the Data Access Control Agent.
+ * Handles HTTP requests, validates input, invokes the agent, and
+ * emits telemetry.
+ *
+ * CRITICAL:
+ * - Exactly ONE DecisionEvent MUST be emitted per invocation
+ * - Handler MUST persist DecisionEvent to ruvector-service
+ * - Handler MUST return deterministic, machine-readable output
+ *
+ * @module agents/data-access-control/handler
+ */
+import type { Request, Response } from 'express';
+import type { AccessPolicy } from '../../contracts/index.js';
+/**
+ * Handler configuration
+ */
+export interface HandlerConfig {
+    /** Access policies to evaluate */
+    policies: AccessPolicy[];
+    /** Enable telemetry */
+    enableTelemetry?: boolean;
+    /** Enable request validation */
+    enableValidation?: boolean;
+    /** Enable response caching headers */
+    enableCaching?: boolean;
+    /** Environment (production, staging, development) */
+    environment?: string;
+}
+/**
+ * Main Edge Function handler
+ *
+ * This is the entry point for Google Cloud Functions.
+ *
+ * @param req - Express-compatible request object
+ * @param res - Express-compatible response object
+ * @param config - Handler configuration
+ */
+export declare function handleDataAccessControl(req: Request, res: Response, config: HandlerConfig): Promise<void>;
+/**
+ * Create handler factory for Google Cloud Functions
+ *
+ * Usage:
+ * ```typescript
+ * import { createHandler } from './handler';
+ *
+ * export const dataAccessControl = createHandler({
+ *   policies: loadPolicies(),
+ *   enableTelemetry: true,
+ * });
+ * ```
+ */
+export declare function createHandler(config: HandlerConfig): (req: Request, res: Response) => Promise<void>;
+/**
+ * Health check handler
+ */
+export declare function handleHealthCheck(_req: Request, res: Response): Promise<void>;
+/**
+ * Reset handler state (for testing)
+ */
+export declare function resetHandlerState(): void;
+//# sourceMappingURL=handler.d.ts.map

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/agents/data-access-control/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAajD,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,0BAA0B,CAAC;AAGlC;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,uBAAuB;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gCAAgC;IAChC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,sCAAsC;IACtC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA8GD;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAqJf;AA4HD;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,aAAa,GACpB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAIhD;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,QAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAIxC"}