@ninelives/agent-governance-sdk 5.0.1

package/dist/surface-parity.js

@@ -0,0 +1,216 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SurfaceParityChecker = void 0;
+const KNOWN_SURFACES = ['cli', 'ide', 'api'];
+const SURFACE_CONDITION_PATTERNS = [
+    { pattern: /\bsurface\s*==\s*['"]cli['"]/i, surface: 'cli' },
+    { pattern: /\bsurface\s*==\s*['"]ide['"]/i, surface: 'ide' },
+    { pattern: /\bsurface\s*==\s*['"]api['"]/i, surface: 'api' },
+    { pattern: /\bcontext\.surface\s*==\s*['"]cli['"]/i, surface: 'cli' },
+    { pattern: /\bcontext\.surface\s*==\s*['"]ide['"]/i, surface: 'ide' },
+    { pattern: /\bcontext\.surface\s*==\s*['"]api['"]/i, surface: 'api' },
+    { pattern: /\bsurface\s+in\s+\[.*?['"]cli['"].*?\]/i, surface: 'cli' },
+    { pattern: /\bsurface\s+in\s+\[.*?['"]ide['"].*?\]/i, surface: 'ide' },
+    { pattern: /\bsurface\s+in\s+\[.*?['"]api['"].*?\]/i, surface: 'api' },
+];
+/**
+ * Detects governance parity gaps between enforcement surfaces (CLI, IDE, API).
+ *
+ * When organizations deploy governance policies, rules may be enforced
+ * differently depending on the surface. This checker identifies rules
+ * that only apply to some surfaces, highlighting enforcement gaps.
+ */
+class SurfaceParityChecker {
+    /**
+     * Analyze a set of policies for surface parity gaps.
+     */
+    analyzePolicies(policies) {
+        const mappings = [];
+        for (const policy of policies) {
+            for (const rule of policy.rules) {
+                if (rule.enabled === false)
+                    continue;
+                const detected = this.detectSurfaces(rule);
+                mappings.push({
+                    rule,
+                    policyName: policy.name,
+                    detectedSurfaces: detected,
+                    isUniversal: detected.length === 0,
+                });
+            }
+        }
+        const gaps = this.findGaps(mappings);
+        const universalRules = mappings.filter((m) => m.isUniversal).length;
+        const surfaceSpecificRules = mappings.length - universalRules;
+        const surfaceCoverage = this.computeCoverage(mappings);
+        const parityScore = this.computeParityScore(mappings, gaps);
+        return {
+            analyzedAt: new Date(),
+            totalRules: mappings.length,
+            universalRules,
+            surfaceSpecificRules,
+            gaps,
+            mappings,
+            surfaceCoverage,
+            parityScore,
+        };
+    }
+    /**
+     * Detect which surfaces a rule targets.
+     * Returns empty array for universal rules (no surface restriction).
+     */
+    detectSurfaces(rule) {
+        const surfaces = new Set();
+        // Explicit surfaces field takes precedence
+        if (rule.surfaces && rule.surfaces.length > 0) {
+            return [...rule.surfaces];
+        }
+        // Parse condition string for surface references
+        if (typeof rule.condition === 'string') {
+            for (const { pattern, surface } of SURFACE_CONDITION_PATTERNS) {
+                if (pattern.test(rule.condition)) {
+                    surfaces.add(surface);
+                }
+            }
+        }
+        // Check object-form conditions for surface keys
+        if (rule.condition && typeof rule.condition === 'object') {
+            const condObj = rule.condition;
+            if (condObj.surface && typeof condObj.surface === 'string') {
+                const val = condObj.surface.toLowerCase();
+                if (KNOWN_SURFACES.includes(val)) {
+                    surfaces.add(val);
+                }
+            }
+            if (condObj['context.surface'] && typeof condObj['context.surface'] === 'string') {
+                const val = condObj['context.surface'].toLowerCase();
+                if (KNOWN_SURFACES.includes(val)) {
+                    surfaces.add(val);
+                }
+            }
+        }
+        return [...surfaces];
+    }
+    /**
+     * Find gaps by grouping surface-specific rules by their normalized semantics
+     * and checking which surfaces are missing counterparts.
+     */
+    findGaps(mappings) {
+        const gaps = [];
+        const surfaceSpecific = mappings.filter((m) => !m.isUniversal);
+        // Group by normalized key (action + non-surface conditions)
+        const groups = new Map();
+        for (const mapping of surfaceSpecific) {
+            const key = this.normalizeRuleKey(mapping.rule);
+            const group = groups.get(key) ?? [];
+            group.push(mapping);
+            groups.set(key, group);
+        }
+        for (const [, group] of groups) {
+            const coveredSurfaces = new Set();
+            for (const m of group) {
+                for (const s of m.detectedSurfaces) {
+                    coveredSurfaces.add(s);
+                }
+            }
+            // Only flag gaps if rule exists for some surfaces but not all
+            if (coveredSurfaces.size > 0 && coveredSurfaces.size < KNOWN_SURFACES.length) {
+                const presentOn = [...coveredSurfaces];
+                const missingFrom = KNOWN_SURFACES.filter((s) => !coveredSurfaces.has(s));
+                const representative = group[0];
+                const ruleAction = representative.rule.ruleAction;
+                const severity = this.classifySeverity(ruleAction);
+                gaps.push({
+                    ruleName: representative.rule.name ?? 'unnamed-rule',
+                    policyName: representative.policyName,
+                    presentOn,
+                    missingFrom,
+                    ruleAction,
+                    severity,
+                    recommendation: this.generateRecommendation(representative.rule.name ?? 'unnamed-rule', presentOn, missingFrom, ruleAction),
+                });
+            }
+        }
+        return gaps;
+    }
+    /**
+     * Generate a normalized key for a rule based on its semantics
+     * (action + non-surface conditions), so we can group rules that
+     * do the same thing on different surfaces.
+     */
+    normalizeRuleKey(rule) {
+        const action = rule.ruleAction ?? rule.effect ?? 'unknown';
+        const condStr = this.stripSurfaceFromCondition(rule);
+        return `${action}::${condStr}`;
+    }
+    /**
+     * Remove surface-related parts from a condition to get the
+     * "semantic core" of a rule for comparison purposes.
+     */
+    stripSurfaceFromCondition(rule) {
+        if (typeof rule.condition === 'string') {
+            let stripped = rule.condition;
+            // Remove surface == 'x' clauses and surrounding connectives
+            stripped = stripped.replace(/\bsurface\s*==\s*['"][^'"]*['"]/gi, '');
+            stripped = stripped.replace(/\bcontext\.surface\s*==\s*['"][^'"]*['"]/gi, '');
+            stripped = stripped.replace(/\bsurface\s+in\s+\[[^\]]*\]/gi, '');
+            // Clean up dangling 'and'/'or'
+            stripped = stripped.replace(/^\s*(and|or)\s+/i, '');
+            stripped = stripped.replace(/\s+(and|or)\s*$/i, '');
+            stripped = stripped.replace(/\s+(and|or)\s+(and|or)\s+/gi, ' and ');
+            return stripped.trim() || (rule.name ?? '');
+        }
+        if (rule.condition && typeof rule.condition === 'object') {
+            const condObj = { ...rule.condition };
+            delete condObj.surface;
+            delete condObj['context.surface'];
+            return JSON.stringify(condObj);
+        }
+        return rule.name ?? rule.action ?? '';
+    }
+    classifySeverity(action) {
+        if (action === 'deny' || action === 'require_approval')
+            return 'high';
+        if (action === 'warn' || action === 'log')
+            return 'medium';
+        return 'low';
+    }
+    generateRecommendation(ruleName, presentOn, missingFrom, action) {
+        const present = presentOn.join(', ');
+        const missing = missingFrom.join(', ');
+        if (action === 'deny' || action === 'require_approval') {
+            return (`Rule "${ruleName}" enforces ${action} on ${present} but not ${missing}. ` +
+                `This creates a bypass path: users can avoid governance by switching surfaces.`);
+        }
+        return (`Rule "${ruleName}" applies on ${present} but not ${missing}. ` +
+            `Consider extending coverage for consistent governance.`);
+    }
+    computeCoverage(mappings) {
+        const coverage = { cli: 0, ide: 0, api: 0, unknown: 0 };
+        const universalCount = mappings.filter((m) => m.isUniversal).length;
+        for (const surface of KNOWN_SURFACES) {
+            const surfaceCount = mappings.filter((m) => !m.isUniversal && m.detectedSurfaces.includes(surface)).length;
+            coverage[surface] = surfaceCount + universalCount;
+        }
+        return coverage;
+    }
+    /**
+     * Compute a 0-100 parity score.
+     * 100 = perfect parity (all rules are universal or all surfaces equally covered).
+     * Deductions for each gap, weighted by severity.
+     */
+    computeParityScore(mappings, gaps) {
+        if (mappings.length === 0)
+            return 100;
+        const severityWeights = { high: 15, medium: 8, low: 3 };
+        let deductions = 0;
+        for (const gap of gaps) {
+            deductions += severityWeights[gap.severity] * gap.missingFrom.length;
+        }
+        return Math.max(0, Math.round(100 - deductions));
+    }
+}
+exports.SurfaceParityChecker = SurfaceParityChecker;
+//# sourceMappingURL=surface-parity.js.map

package/dist/surface-parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-parity.js","sourceRoot":"","sources":["../src/surface-parity.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAYlC,MAAM,cAAc,GAAwB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAElE,MAAM,0BAA0B,GAA2D;IACzF,EAAE,OAAO,EAAE,+BAA+B,EAAE,OAAO,EAAE,KAAK,EAAE;IAC5D,EAAE,OAAO,EAAE,+BAA+B,EAAE,OAAO,EAAE,KAAK,EAAE;IAC5D,EAAE,OAAO,EAAE,+BAA+B,EAAE,OAAO,EAAE,KAAK,EAAE;IAC5D,EAAE,OAAO,EAAE,wCAAwC,EAAE,OAAO,EAAE,KAAK,EAAE;IACrE,EAAE,OAAO,EAAE,wCAAwC,EAAE,OAAO,EAAE,KAAK,EAAE;IACrE,EAAE,OAAO,EAAE,wCAAwC,EAAE,OAAO,EAAE,KAAK,EAAE;IACrE,EAAE,OAAO,EAAE,yCAAyC,EAAE,OAAO,EAAE,KAAK,EAAE;IACtE,EAAE,OAAO,EAAE,yCAAyC,EAAE,OAAO,EAAE,KAAK,EAAE;IACtE,EAAE,OAAO,EAAE,yCAAyC,EAAE,OAAO,EAAE,KAAK,EAAE;CACvE,CAAC;AAEF;;;;;;GAMG;AACH,MAAa,oBAAoB;IAC/B;;OAEG;IACH,eAAe,CAAC,QAAkB;QAChC,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAE1C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;oBAAE,SAAS;gBAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAC3C,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI;oBACJ,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,gBAAgB,EAAE,QAAQ;oBAC1B,WAAW,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QACpE,MAAM,oBAAoB,GAAG,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC;QAE9D,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE5D,OAAO;YACL,UAAU,EAAE,IAAI,IAAI,EAAE;YACtB,UAAU,EAAE,QAAQ,CAAC,MAAM;YAC3B,cAAc;YACd,oBAAoB;YACpB,IAAI;YACJ,QAAQ;YACR,eAAe;YACf,WAAW;SACZ,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,IAAgB;QAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;QAE9C,2CAA2C;QAC3C,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,gDAAgD;QAChD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACvC,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,0BAA0B,EAAE,CAAC;gBAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBACjC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,IAAI,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAoC,CAAC;YAC1D,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC1C,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAwB,CAAC,EAAE,CAAC;oBACtD,QAAQ,CAAC,GAAG,CAAC,GAAwB,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YACD,IAAI,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,OAAO,CAAC,iBAAiB,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjF,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC;gBACrD,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAwB,CAAC,EAAE,CAAC;oBACtD,QAAQ,CAAC,GAAG,CAAC,GAAwB,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,QAA8B;QAC7C,MAAM,IAAI,GAAiB,EAAE,CAAC;QAC9B,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAE/D,4DAA4D;QAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;QACvD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QAED,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAqB,CAAC;YACrD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;oBACnC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,8DAA8D;YAC9D,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC7E,MAAM,SAAS,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC;gBACvC,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1E,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAChC,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC;gBAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAEnD,IAAI,CAAC,IAAI,CAAC;oBACR,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,cAAc;oBACpD,UAAU,EAAE,cAAc,CAAC,UAAU;oBACrC,SAAS;oBACT,WAAW;oBACX,UAAU;oBACV,QAAQ;oBACR,cAAc,EAAE,IAAI,CAAC,sBAAsB,CACzC,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,cAAc,EAC1C,SAAS,EACT,WAAW,EACX,UAAU,CACX;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,IAAgB;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC;IACjC,CAAC;IAED;;;OAGG;IACK,yBAAyB,CAAC,IAAgB;QAChD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;YAC9B,4DAA4D;YAC5D,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;YACrE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;YAC9E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;YACjE,+BAA+B;YAC/B,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACpD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACpD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;YACpE,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,EAAE,GAAI,IAAI,CAAC,SAAqC,EAAE,CAAC;YACnE,OAAO,OAAO,CAAC,OAAO,CAAC;YACvB,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACxC,CAAC;IAEO,gBAAgB,CAAC,MAAgC;QACvD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,kBAAkB;YAAE,OAAO,MAAM,CAAC;QACtE,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,QAAQ,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,sBAAsB,CAC5B,QAAgB,EAChB,SAA8B,EAC9B,WAAgC,EAChC,MAAgC;QAEhC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACvD,OAAO,CACL,SAAS,QAAQ,cAAc,MAAM,OAAO,OAAO,YAAY,OAAO,IAAI;gBAC1E,+EAA+E,CAChF,CAAC;QACJ,CAAC;QAED,OAAO,CACL,SAAS,QAAQ,gBAAgB,OAAO,YAAY,OAAO,IAAI;YAC/D,wDAAwD,CACzD,CAAC;IACJ,CAAC;IAEO,eAAe,CACrB,QAA8B;QAE9B,MAAM,QAAQ,GAAsC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC3F,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QAEpE,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC9D,CAAC,MAAM,CAAC;YACT,QAAQ,CAAC,OAAO,CAAC,GAAG,YAAY,GAAG,cAAc,CAAC;QACpD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACK,kBAAkB,CACxB,QAA8B,EAC9B,IAAkB;QAElB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAEtC,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACxD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,UAAU,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;QACvE,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC;IACnD,CAAC;CACF;AA5OD,oDA4OC"}

package/dist/trust.d.ts

@@ -0,0 +1,28 @@
+import { AgentIdentity } from './identity';
+import { TrustConfig, TrustScore, TrustVerificationResult } from './types';
+/**
+ * Manages trust scores for peer agents using a simple Bayesian-inspired model
+ * with configurable decay.
+ */
+export declare class TrustManager {
+    private readonly config;
+    private readonly agents;
+    private readonly persistPath?;
+    constructor(config?: TrustConfig);
+    /** Verify a peer agent's identity and return a trust result. */
+    verifyPeer(peerId: string, peerIdentity: AgentIdentity): Promise<TrustVerificationResult>;
+    /** Get the current trust score for an agent. */
+    getTrustScore(agentId: string): TrustScore;
+    /** Record a successful interaction with an agent. */
+    recordSuccess(agentId: string, reward?: number): void;
+    /** Record a failed interaction with an agent. */
+    recordFailure(agentId: string, penalty?: number): void;
+    private getOrCreateState;
+    private applyDecay;
+    private computeTier;
+    private computeReliability;
+    private getPeerVerificationFailure;
+    private saveToDisk;
+    private loadFromDisk;
+}
+//# sourceMappingURL=trust.d.ts.map

package/dist/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,WAAW,EACX,UAAU,EAEV,uBAAuB,EACxB,MAAM,SAAS,CAAC;AAgBjB;;;GAGG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;IAClE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAS;gBAE1B,MAAM,CAAC,EAAE,WAAW;IAgBhC,gEAAgE;IAC1D,UAAU,CACd,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,aAAa,GAC1B,OAAO,CAAC,uBAAuB,CAAC;IAWnC,gDAAgD;IAChD,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU;IAgB1C,qDAAqD;IACrD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAa,GAAG,IAAI;IAS3D,iDAAiD;IACjD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAY,GAAG,IAAI;IAW3D,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,0BAA0B;IAiClC,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,YAAY;CAgBrB"}

package/dist/trust.js

@@ -0,0 +1,209 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TrustManager = void 0;
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+const crypto_1 = require("crypto");
+const fs = __importStar(require("fs"));
+const DEFAULT_THRESHOLDS = {
+    untrusted: 0.0,
+    provisional: 0.3,
+    trusted: 0.6,
+    verified: 0.85,
+};
+/**
+ * Manages trust scores for peer agents using a simple Bayesian-inspired model
+ * with configurable decay.
+ */
+class TrustManager {
+    config;
+    agents = new Map();
+    persistPath;
+    constructor(config) {
+        this.config = {
+            initialScore: config?.initialScore ?? 0.5,
+            decayFactor: config?.decayFactor ?? 0.95,
+            thresholds: { ...DEFAULT_THRESHOLDS, ...config?.thresholds },
+        };
+        this.persistPath = config?.persistPath;
+        if (this.persistPath) {
+            // Reject paths containing traversal components
+            if (this.persistPath.includes('..')) {
+                throw new Error('persistPath must not contain path traversal components');
+            }
+            this.loadFromDisk();
+        }
+    }
+    /** Verify a peer agent's identity and return a trust result. */
+    async verifyPeer(peerId, peerIdentity) {
+        const trustScore = this.getTrustScore(peerId);
+        const reason = this.getPeerVerificationFailure(peerId, peerIdentity);
+        return {
+            verified: reason === undefined,
+            trustScore,
+            reason,
+        };
+    }
+    /** Get the current trust score for an agent. */
+    getTrustScore(agentId) {
+        const state = this.getOrCreateState(agentId);
+        this.applyDecay(state);
+        const tier = this.computeTier(state.score);
+        return {
+            overall: Math.round(state.score * 1000) / 1000,
+            dimensions: {
+                reliability: this.computeReliability(state),
+                consistency: state.score,
+            },
+            tier,
+        };
+    }
+    /** Record a successful interaction with an agent. */
+    recordSuccess(agentId, reward = 0.05) {
+        const state = this.getOrCreateState(agentId);
+        this.applyDecay(state);
+        state.successes += 1;
+        state.score = Math.min(1, state.score + Math.max(0, Math.min(1, reward)));
+        state.lastUpdate = Date.now();
+        this.saveToDisk();
+    }
+    /** Record a failed interaction with an agent. */
+    recordFailure(agentId, penalty = 0.1) {
+        const state = this.getOrCreateState(agentId);
+        this.applyDecay(state);
+        state.failures += 1;
+        state.score = Math.max(0, state.score - Math.max(0, Math.min(1, penalty)));
+        state.lastUpdate = Date.now();
+        this.saveToDisk();
+    }
+    // ── Private helpers ──
+    getOrCreateState(agentId) {
+        let state = this.agents.get(agentId);
+        if (!state) {
+            state = {
+                successes: 0,
+                failures: 0,
+                score: this.config.initialScore,
+                lastUpdate: Date.now(),
+            };
+            this.agents.set(agentId, state);
+        }
+        return state;
+    }
+    applyDecay(state) {
+        const elapsed = Date.now() - state.lastUpdate;
+        const hours = elapsed / (1000 * 60 * 60);
+        if (hours >= 1) {
+            const decaySteps = Math.floor(hours);
+            state.score *= Math.pow(this.config.decayFactor, decaySteps);
+            state.lastUpdate = Date.now();
+        }
+    }
+    computeTier(score) {
+        const t = this.config.thresholds;
+        if (score >= t.verified)
+            return 'Verified';
+        if (score >= t.trusted)
+            return 'Trusted';
+        if (score >= t.provisional)
+            return 'Provisional';
+        return 'Untrusted';
+    }
+    computeReliability(state) {
+        const total = state.successes + state.failures;
+        if (total === 0)
+            return this.config.initialScore;
+        return Math.round((state.successes / total) * 1000) / 1000;
+    }
+    getPeerVerificationFailure(peerId, peerIdentity) {
+        if (!peerId) {
+            return 'Peer ID is required';
+        }
+        if (!peerIdentity.isActive()) {
+            return 'Peer identity is inactive or expired';
+        }
+        const didPrefix = `did:agentmesh:${peerId}:`;
+        if (!peerIdentity.did.startsWith(didPrefix)) {
+            return 'Peer identity DID does not match the claimed peer ID';
+        }
+        const didFingerprint = peerIdentity.did.slice(didPrefix.length);
+        if (!/^[0-9a-f]{16}$/i.test(didFingerprint)) {
+            return 'Peer identity DID fingerprint is invalid';
+        }
+        const expectedFingerprint = (0, crypto_1.createHash)('sha256')
+            .update(peerIdentity.publicKey)
+            .digest('hex')
+            .slice(0, 16);
+        if (didFingerprint !== expectedFingerprint) {
+            return 'Peer identity DID fingerprint does not match the public key';
+        }
+        return undefined;
+    }
+    saveToDisk() {
+        if (!this.persistPath)
+            return;
+        try {
+            const data = {};
+            for (const [key, value] of this.agents) {
+                data[key] = value;
+            }
+            fs.writeFileSync(this.persistPath, JSON.stringify(data), 'utf-8');
+        }
+        catch {
+            // best-effort: ignore write errors
+        }
+    }
+    loadFromDisk() {
+        if (!this.persistPath)
+            return;
+        try {
+            const raw = fs.readFileSync(this.persistPath, 'utf-8');
+            const data = JSON.parse(raw);
+            for (const [key, value] of Object.entries(data)) {
+                // Clamp deserialized scores to valid [0, 1] range
+                if (typeof value.score === 'number') {
+                    value.score = Math.max(0, Math.min(1, value.score));
+                }
+                this.agents.set(key, value);
+            }
+        }
+        catch {
+            // best-effort: ignore missing or corrupt files
+        }
+    }
+}
+exports.TrustManager = TrustManager;
+//# sourceMappingURL=trust.js.map

package/dist/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAuC;AACvC,kCAAkC;AAClC,mCAAoC;AACpC,uCAAyB;AASzB,MAAM,kBAAkB,GAAG;IACzB,SAAS,EAAE,GAAG;IACd,WAAW,EAAE,GAAG;IAChB,OAAO,EAAE,GAAG;IACZ,QAAQ,EAAE,IAAI;CACf,CAAC;AASF;;;GAGG;AACH,MAAa,YAAY;IACN,MAAM,CAA6C;IACnD,MAAM,GAAiC,IAAI,GAAG,EAAE,CAAC;IACjD,WAAW,CAAU;IAEtC,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG;YACZ,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,GAAG;YACzC,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,IAAI;YACxC,UAAU,EAAE,EAAE,GAAG,kBAAkB,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE;SAC7D,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,MAAM,EAAE,WAAW,CAAC;QACvC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,+CAA+C;YAC/C,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,UAAU,CACd,MAAc,EACd,YAA2B;QAE3B,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAErE,OAAO;YACL,QAAQ,EAAE,MAAM,KAAK,SAAS;YAC9B,UAAU;YACV,MAAM;SACP,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,aAAa,CAAC,OAAe;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE3C,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI;YAC9C,UAAU,EAAE;gBACV,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;gBAC3C,WAAW,EAAE,KAAK,CAAC,KAAK;aACzB;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,aAAa,CAAC,OAAe,EAAE,SAAiB,IAAI;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;QACrB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1E,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,iDAAiD;IACjD,aAAa,CAAC,OAAe,EAAE,UAAkB,GAAG;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QACpB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3E,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,wBAAwB;IAEhB,gBAAgB,CAAC,OAAe;QACtC,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG;gBACN,SAAS,EAAE,CAAC;gBACZ,QAAQ,EAAE,CAAC;gBACX,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBAC/B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU,CAAC,KAAsB;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC7D,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,KAAa;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QACjC,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ;YAAE,OAAO,UAAU,CAAC;QAC3C,IAAI,KAAK,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACzC,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;YAAE,OAAO,aAAa,CAAC;QACjD,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,kBAAkB,CAAC,KAAsB;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/C,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7D,CAAC;IAEO,0BAA0B,CAChC,MAAc,EACd,YAA2B;QAE3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,qBAAqB,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7B,OAAO,sCAAsC,CAAC;QAChD,CAAC;QAED,MAAM,SAAS,GAAG,iBAAiB,MAAM,GAAG,CAAC;QAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,OAAO,sDAAsD,CAAC;QAChE,CAAC;QAED,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5C,OAAO,0CAA0C,CAAC;QACpD,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC;aAC7C,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;aAC9B,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,IAAI,cAAc,KAAK,mBAAmB,EAAE,CAAC;YAC3C,OAAO,6DAA6D,CAAC;QACvE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAoC,EAAE,CAAC;YACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoC,CAAC;YAChE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,kDAAkD;gBAClD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACpC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;CACF;AA/KD,oCA+KC"}