@principles/core 1.262.0 → 1.264.0

package/dist/runtime-v2/activation/__tests__/sqlite-activation-safety-store.test.js

@@ -0,0 +1,311 @@
+import { mkdtempSync, rmSync } from 'fs';
+import { tmpdir } from 'os';
+import { join } from 'path';
+import { afterEach, describe, expect, it } from 'vitest';
+import { SqliteConnection } from '../../store/sqlite-connection.js';
+import { SqliteActivationSafetyStore } from '../sqlite-activation-safety-store.js';
+import { SqliteActivationStateStore } from '../sqlite-activation-state-store.js';
+const tempDirs = [];
+afterEach(() => {
+    for (const dir of tempDirs.splice(0)) {
+        try {
+            rmSync(dir, { recursive: true, force: true });
+        }
+        catch { /* best effort */ }
+    }
+});
+function makeWorkspace() {
+    const dir = mkdtempSync(join(tmpdir(), 'pd-activation-safety-'));
+    tempDirs.push(dir);
+    return dir;
+}
+function seedArtifact(connection) {
+    const db = connection.getDb();
+    db.prepare("INSERT INTO tasks (task_id, task_kind, status, created_at, updated_at) VALUES ('task-1', 'diagnosis', 'pending', ?, ?)")
+        .run('2026-08-21T00:00:00.000Z', '2026-08-21T00:00:00.000Z');
+    db.prepare(`
+    INSERT INTO pi_artifacts
+      (artifact_id, artifact_kind, source_task_id, lineage_artifact_ids, validation_status, content_json, created_at, updated_at)
+    VALUES ('artifact-1', 'rule', 'task-1', '[]', 'passed', '{}', ?, ?)
+  `).run('2026-08-21T00:00:00.000Z', '2026-08-21T00:00:00.000Z');
+}
+function liveActivation() {
+    return {
+        activationId: 'activation-1',
+        idempotencyKey: 'activation-1-key',
+        artifactId: 'artifact-1',
+        channel: 'code_tool_hook',
+        action: 'code_tool_hook_live_activate',
+        targetRef: 'impl://rule-1',
+        activatedAt: '2026-08-21T00:01:00.000Z',
+        promotedAt: '2026-08-21T00:02:00.000Z',
+        deactivatedAt: null,
+    };
+}
+function isolateDecision() {
+    return {
+        decisionId: 'decision-1',
+        subject: {
+            kind: 'activation',
+            activationId: 'activation-1',
+            artifactId: 'artifact-1',
+            artifactDigest: 'sha256:abc123',
+        },
+        decision: 'safety_isolate',
+        principal: { kind: 'system_safety', policyVersion: 'safety-policy-v1' },
+        authentication: { method: 'system' },
+        reasonCode: 'host_liveness_risk',
+        note: 'Synthetic probe observed broad tool blocking.',
+        evidenceSnapshotId: 'evidence-1',
+        decidedAt: '2026-08-21T00:03:00.000Z',
+    };
+}
+function promotionCommit() {
+    return {
+        decision: {
+            decisionId: 'decision-promote-1',
+            subject: { kind: 'activation', activationId: 'activation-1', artifactId: 'artifact-1', artifactDigest: 'sha256:artifact' },
+            decision: 'promote_live',
+            principal: { kind: 'configured_owner', ownerId: 'owner-1' },
+            authentication: { method: 'cli_owner_credential', credentialId: 'credential-1' },
+            operator: { kind: 'local_user', operatorId: 'Administrator' },
+            reasonCode: 'owner_accepts_shadow_evidence',
+            note: 'Reviewed the evidence.',
+            evidenceSnapshotId: 'snapshot-1',
+            decidedAt: '2026-08-21T03:00:00.000Z',
+        },
+        evidenceSnapshot: {
+            snapshotId: 'snapshot-1', snapshotDigest: 'sha256:snapshot', artifactDigest: 'sha256:artifact',
+            lineageRefs: ['task-1', 'run-1'], hostRuntimeVersion: 'openclaw@1',
+            safetyGateResults: [{ checkId: 'host_liveness', status: 'passed' }],
+            shadowSummary: { observed: 20, matched: 3, wouldBlock: 1, wouldAllow: 19, requireApproval: 0, autoCorrect: 0, errors: 0, neutralControl: 1, firstObservedAt: '2026-08-20T00:00:00.000Z', lastObservedAt: '2026-08-21T00:00:00.000Z' },
+            configurationVersion: 'config-v1', redaction: { version: 'redaction-v1', rawParametersStored: false },
+            createdAt: '2026-08-21T02:59:00.000Z',
+        },
+        readinessEvaluationId: 'readiness-1',
+        evidenceSnapshotDigest: 'sha256:snapshot',
+        expectedControlVersion: 1,
+        idempotencyKey: 'promote-activation-1-v1',
+    };
+}
+describe('SqliteActivationSafetyStore', () => {
+    it('initializes an explicit eligible control row for every RuleCode activation', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation(liveActivation());
+        await expect(new SqliteActivationSafetyStore(connection).getControlState('activation-1')).resolves.toEqual({
+            activationId: 'activation-1',
+            enforcement: 'eligible',
+            isolationDecisionId: null,
+            version: 1,
+            updatedAt: '2026-08-21T00:01:00.000Z',
+        });
+        connection.close();
+    });
+    it('atomically records an immutable decision and isolates enforcement', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation(liveActivation());
+        const store = new SqliteActivationSafetyStore(connection);
+        await expect(store.safetyIsolate(isolateDecision(), 1)).resolves.toEqual({
+            activationId: 'activation-1',
+            enforcement: 'safety_isolated',
+            isolationDecisionId: 'decision-1',
+            version: 2,
+            updatedAt: '2026-08-21T00:03:00.000Z',
+        });
+        await expect(store.listDecisions('activation-1')).resolves.toEqual([isolateDecision()]);
+        expect(() => connection.getDb().prepare("UPDATE activation_decisions SET note = 'tampered' WHERE decision_id = 'decision-1'").run())
+            .toThrow(/immutable/i);
+        expect(() => connection.getDb().prepare("DELETE FROM activation_decisions WHERE decision_id = 'decision-1'").run())
+            .toThrow(/immutable/i);
+        connection.close();
+    });
+    it('rolls back the decision when the expected control version is stale', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation(liveActivation());
+        const store = new SqliteActivationSafetyStore(connection);
+        await expect(store.safetyIsolate(isolateDecision(), 9)).rejects.toThrow(/expected version 9/i);
+        await expect(store.listDecisions('activation-1')).resolves.toEqual([]);
+        await expect(store.getControlState('activation-1')).resolves.toMatchObject({ enforcement: 'eligible', version: 1 });
+        connection.close();
+    });
+    it('rejects decision lineage that does not match the active artifact', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation(liveActivation());
+        const decision = isolateDecision();
+        if (decision.subject.kind !== 'activation')
+            throw new Error('test fixture must target activation');
+        const mismatched = {
+            ...decision,
+            subject: { ...decision.subject, artifactId: 'artifact-other' },
+        };
+        await expect(new SqliteActivationSafetyStore(connection).safetyIsolate(mismatched, 1))
+            .rejects.toThrow(/subject mismatch/i);
+        connection.close();
+    });
+    it('retains safety isolation after the database is closed and reopened', async () => {
+        const workspace = makeWorkspace();
+        const first = new SqliteConnection(workspace);
+        seedArtifact(first);
+        await new SqliteActivationStateStore(first).recordActivation(liveActivation());
+        await new SqliteActivationSafetyStore(first).safetyIsolate(isolateDecision(), 1);
+        first.close();
+        const reopened = new SqliteConnection(workspace);
+        await expect(new SqliteActivationSafetyStore(reopened).getControlState('activation-1')).resolves.toMatchObject({
+            enforcement: 'safety_isolated',
+            isolationDecisionId: 'decision-1',
+            version: 2,
+        });
+        reopened.close();
+    });
+    it('atomically persists evidence and Owner decision while promoting shadow to live', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        const shadow = { ...liveActivation(), action: 'code_tool_hook_shadow_activate' };
+        await new SqliteActivationStateStore(connection).recordActivation(shadow);
+        await expect(new SqliteActivationSafetyStore(connection).commitPromotion(promotionCommit())).resolves.toEqual({
+            activationId: 'activation-1', decisionId: 'decision-promote-1', promotedAt: '2026-08-21T03:00:00.000Z',
+        });
+        const db = connection.getDb();
+        expect(db.prepare("SELECT action, promoted_at FROM activations WHERE activation_id = 'activation-1'").get())
+            .toEqual({ action: 'code_tool_hook_live_activate', promoted_at: '2026-08-21T03:00:00.000Z' });
+        expect(db.prepare("SELECT snapshot_digest, artifact_digest FROM activation_evidence_snapshots WHERE snapshot_id = 'snapshot-1'").get())
+            .toEqual({ snapshot_digest: 'sha256:snapshot', artifact_digest: 'sha256:artifact' });
+        await expect(new SqliteActivationSafetyStore(connection).listDecisions('activation-1')).resolves.toEqual([promotionCommit().decision]);
+        connection.close();
+    });
+    it('rolls back evidence and decision when promotion control version is stale', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation({ ...liveActivation(), action: 'code_tool_hook_shadow_activate' });
+        const input = { ...promotionCommit(), expectedControlVersion: 9 };
+        await expect(new SqliteActivationSafetyStore(connection).commitPromotion(input)).rejects.toThrow(/expected control version 9/i);
+        const db = connection.getDb();
+        expect(db.prepare('SELECT COUNT(*) AS count FROM activation_decisions').get()).toEqual({ count: 0 });
+        expect(db.prepare('SELECT COUNT(*) AS count FROM activation_evidence_snapshots').get()).toEqual({ count: 0 });
+        expect(db.prepare("SELECT action FROM activations WHERE activation_id = 'activation-1'").get())
+            .toEqual({ action: 'code_tool_hook_shadow_activate' });
+        connection.close();
+    });
+    it('atomically supersedes the prior live version for the same Principle', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        const db = connection.getDb();
+        db.prepare("UPDATE pi_artifacts SET source_principle_id = 'principle-1' WHERE artifact_id = 'artifact-1'").run();
+        await new SqliteActivationStateStore(connection).recordActivation(liveActivation());
+        db.prepare("INSERT INTO tasks (task_id, task_kind, status, created_at, updated_at) VALUES ('task-2', 'diagnosis', 'pending', ?, ?)").run('2026-08-21T00:00:00.000Z', '2026-08-21T00:00:00.000Z');
+        db.prepare("INSERT INTO pi_artifacts (artifact_id, artifact_kind, source_task_id, source_principle_id, lineage_artifact_ids, validation_status, content_json, created_at, updated_at) VALUES ('artifact-2', 'rule', 'task-2', 'principle-1', '[]', 'passed', '{}', ?, ?)").run('2026-08-21T00:00:00.000Z', '2026-08-21T00:00:00.000Z');
+        await new SqliteActivationStateStore(connection).recordActivation({ ...liveActivation(), activationId: 'activation-2', idempotencyKey: 'activation-2-key', artifactId: 'artifact-2', action: 'code_tool_hook_shadow_activate', promotedAt: null });
+        const input = promotionCommit();
+        input.decision = { ...input.decision, decisionId: 'decision-promote-2', subject: { kind: 'activation', activationId: 'activation-2', artifactId: 'artifact-2', artifactDigest: 'sha256:artifact' } };
+        input.idempotencyKey = 'promote-2';
+        await new SqliteActivationSafetyStore(connection).commitPromotion(input);
+        expect(db.prepare("SELECT activation_id FROM activations WHERE action = 'code_tool_hook_live_activate' AND deactivated_at IS NULL").all()).toEqual([{ activation_id: 'activation-2' }]);
+        expect(db.prepare("SELECT decision FROM activation_decisions WHERE activation_id = 'activation-1'").get()).toEqual({ decision: 'supersede' });
+        connection.close();
+    });
+    it('atomically pauses every current live RuleCode and persists the affected snapshot', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation(liveActivation());
+        const store = new SqliteActivationSafetyStore(connection);
+        const decision = {
+            decisionId: 'pause-decision-1', subject: { kind: 'all_live_rulecode' }, decision: 'global_emergency_pause',
+            principal: { kind: 'break_glass', reason: 'local_no_auth_emergency' }, authentication: { method: 'local_break_glass' },
+            reasonCode: 'owner_emergency_stop', note: null, evidenceSnapshotId: null, decidedAt: '2026-08-21T04:00:00.000Z',
+        };
+        await expect(store.pauseAllLive(decision, 'pause-1', 'pause-key-1')).resolves.toMatchObject({
+            pauseId: 'pause-1', status: 'paused', affectedActivationIds: ['activation-1'], version: 1,
+        });
+        await expect(store.getControlState('activation-1')).resolves.toMatchObject({ enforcement: 'eligible' });
+        await expect(store.getActiveGlobalPause()).resolves.toMatchObject({ pauseId: 'pause-1', status: 'paused' });
+        connection.close();
+    });
+    it('releasing the global latch preserves per-rule isolation and leaves eligible rules eligible', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation(liveActivation());
+        const store = new SqliteActivationSafetyStore(connection);
+        await store.safetyIsolate(isolateDecision(), 1);
+        await store.pauseAllLive({
+            decisionId: 'pause-decision-1', subject: { kind: 'all_live_rulecode' }, decision: 'global_emergency_pause',
+            principal: { kind: 'break_glass', reason: 'local_no_auth_emergency' }, authentication: { method: 'local_break_glass' },
+            reasonCode: 'owner_emergency_stop', note: null, evidenceSnapshotId: null, decidedAt: '2026-08-21T04:00:00.000Z',
+        }, 'pause-1', 'pause-key-1');
+        const release = {
+            decisionId: 'release-decision-1', subject: { kind: 'all_live_rulecode' }, decision: 'global_emergency_pause_release',
+            principal: { kind: 'configured_owner', ownerId: 'owner-1' }, authentication: { method: 'console_token', credentialId: 'console-1' },
+            reasonCode: 'incident_reviewed', note: 'Release latch only.', evidenceSnapshotId: null, decidedAt: '2026-08-21T04:05:00.000Z',
+        };
+        await expect(store.releaseGlobalPause(release, { pauseId: 'pause-1', expectedVersion: 1, idempotencyKey: 'release-key-1' })).resolves.toMatchObject({ status: 'released', version: 2 });
+        await expect(store.getControlState('activation-1')).resolves.toMatchObject({ enforcement: 'safety_isolated' });
+        await expect(store.getActiveGlobalPause()).resolves.toBeNull();
+        connection.close();
+    });
+    it('atomically rejects a shadow rule without deleting its evidence', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation({ ...liveActivation(), action: 'code_tool_hook_shadow_activate' });
+        const store = new SqliteActivationSafetyStore(connection);
+        const decision = {
+            decisionId: 'reject-decision-1', subject: { kind: 'activation', activationId: 'activation-1', artifactId: 'artifact-1', artifactDigest: 'sha256:artifact' },
+            decision: 'reject_after_shadow', principal: { kind: 'configured_owner', ownerId: 'owner-1' },
+            authentication: { method: 'console_token', credentialId: 'console-1' }, reasonCode: 'scope_too_broad',
+            note: 'Would block unrelated tools.', evidenceSnapshotId: null, decidedAt: '2026-08-21T05:00:00.000Z',
+        };
+        await expect(store.deactivateWithDecision(decision, 'reject-key-1')).resolves.toMatchObject({ activationId: 'activation-1', decisionId: 'reject-decision-1' });
+        expect(connection.getDb().prepare("SELECT deactivated_at FROM activations WHERE activation_id = 'activation-1'").get())
+            .toEqual({ deactivated_at: '2026-08-21T05:00:00.000Z' });
+        await expect(store.listDecisions('activation-1')).resolves.toEqual([decision]);
+        connection.close();
+    });
+    it('allows local break-glass emergency deactivation but not governance rejection', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation(liveActivation());
+        const store = new SqliteActivationSafetyStore(connection);
+        const emergency = {
+            decisionId: 'emergency-1', subject: { kind: 'activation', activationId: 'activation-1', artifactId: 'artifact-1', artifactDigest: 'sha256:artifact' },
+            decision: 'emergency_deactivate', principal: { kind: 'break_glass', reason: 'local_no_auth_emergency' },
+            authentication: { method: 'local_break_glass' }, reasonCode: 'host_at_risk', note: null,
+            evidenceSnapshotId: null, decidedAt: '2026-08-21T05:10:00.000Z',
+        };
+        await expect(store.deactivateWithDecision(emergency, 'emergency-key-1')).resolves.toMatchObject({ decisionId: 'emergency-1' });
+        await expect(store.deactivateWithDecision({ ...emergency, decisionId: 'bad-1', decision: 'reject_after_shadow' }, 'bad-key'))
+            .rejects.toThrow(/authorized/i);
+        connection.close();
+    });
+    it('records continue-observing intent without changing shadow state', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation({ ...liveActivation(), action: 'code_tool_hook_shadow_activate' });
+        const decision = {
+            decisionId: 'observe-1', subject: { kind: 'activation', activationId: 'activation-1', artifactId: 'artifact-1', artifactDigest: 'sha256:artifact' },
+            decision: 'continue_observing', principal: { kind: 'configured_owner', ownerId: 'owner-1' },
+            authentication: { method: 'console_token', credentialId: 'console-1' }, reasonCode: 'collect_more_evidence',
+            note: 'Observe another day.', evidenceSnapshotId: null, decidedAt: '2026-08-21T05:20:00.000Z',
+        };
+        const store = new SqliteActivationSafetyStore(connection);
+        await expect(store.recordOwnerDecision(decision, 'observe-key-1')).resolves.toEqual({ decisionId: 'observe-1' });
+        expect(connection.getDb().prepare("SELECT action, deactivated_at FROM activations WHERE activation_id = 'activation-1'").get())
+            .toEqual({ action: 'code_tool_hook_shadow_activate', deactivated_at: null });
+        connection.close();
+    });
+    it('recovers an isolated live rule only to a new linked shadow activation', async () => {
+        const connection = new SqliteConnection(makeWorkspace());
+        seedArtifact(connection);
+        await new SqliteActivationStateStore(connection).recordActivation(liveActivation());
+        const store = new SqliteActivationSafetyStore(connection);
+        await store.safetyIsolate(isolateDecision(), 1);
+        const recovery = { decisionId: 'recover-1', subject: { kind: 'activation', activationId: 'activation-1', artifactId: 'artifact-1', artifactDigest: 'sha256:artifact' }, decision: 'recover_to_shadow', principal: { kind: 'configured_owner', ownerId: 'owner-1' }, authentication: { method: 'console_token', credentialId: 'console-1' }, reasonCode: 'owner_requests_revalidation', note: 'Collect fresh shadow evidence.', evidenceSnapshotId: null, decidedAt: '2026-08-21T06:00:00.000Z' };
+        await expect(store.recoverToShadow(recovery, { expectedControlVersion: 2, newActivationId: 'activation-recovery-1', idempotencyKey: 'recover-key-1' })).resolves.toMatchObject({ sourceActivationId: 'activation-1', shadowActivationId: 'activation-recovery-1' });
+        expect(connection.getDb().prepare("SELECT action FROM activations WHERE activation_id = 'activation-recovery-1'").get()).toEqual({ action: 'code_tool_hook_shadow_activate' });
+        await expect(store.getControlState('activation-1')).resolves.toMatchObject({ enforcement: 'safety_isolated' });
+        await expect(store.getControlState('activation-recovery-1')).resolves.toMatchObject({ enforcement: 'eligible' });
+        connection.close();
+    });
+});
+//# sourceMappingURL=sqlite-activation-safety-store.test.js.map

package/dist/runtime-v2/activation/__tests__/sqlite-activation-safety-store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-activation-safety-store.test.js","sourceRoot":"","sources":["../../../../src/runtime-v2/activation/__tests__/sqlite-activation-safety-store.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAKjF,MAAM,QAAQ,GAAa,EAAE,CAAC;AAE9B,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACpF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACjE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,UAA4B;IAChD,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC;IAC9B,EAAE,CAAC,OAAO,CAAC,wHAAwH,CAAC;SACjI,GAAG,CAAC,0BAA0B,EAAE,0BAA0B,CAAC,CAAC;IAC/D,EAAE,CAAC,OAAO,CAAC;;;;GAIV,CAAC,CAAC,GAAG,CAAC,0BAA0B,EAAE,0BAA0B,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,cAAc;IACrB,OAAO;QACL,YAAY,EAAE,cAAc;QAC5B,cAAc,EAAE,kBAAkB;QAClC,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,gBAAgB;QACzB,MAAM,EAAE,8BAA8B;QACtC,SAAS,EAAE,eAAe;QAC1B,WAAW,EAAE,0BAA0B;QACvC,UAAU,EAAE,0BAA0B;QACtC,aAAa,EAAE,IAAI;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE;YACP,IAAI,EAAE,YAAY;YAClB,YAAY,EAAE,cAAc;YAC5B,UAAU,EAAE,YAAY;YACxB,cAAc,EAAE,eAAe;SAChC;QACD,QAAQ,EAAE,gBAAgB;QAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE;QACvE,cAAc,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;QACpC,UAAU,EAAE,oBAAoB;QAChC,IAAI,EAAE,+CAA+C;QACrD,kBAAkB,EAAE,YAAY;QAChC,SAAS,EAAE,0BAA0B;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL,QAAQ,EAAE;YACR,UAAU,EAAE,oBAAoB;YAChC,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE;YAC1H,QAAQ,EAAE,cAAc;YACxB,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE;YAC3D,cAAc,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,YAAY,EAAE,cAAc,EAAE;YAChF,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE;YAC7D,UAAU,EAAE,+BAA+B;YAC3C,IAAI,EAAE,wBAAwB;YAC9B,kBAAkB,EAAE,YAAY;YAChC,SAAS,EAAE,0BAA0B;SACtC;QACD,gBAAgB,EAAE;YAChB,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,iBAAiB;YAC9F,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,kBAAkB,EAAE,YAAY;YAClE,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YACrE,aAAa,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,0BAA0B,EAAE,cAAc,EAAE,0BAA0B,EAAE;YACnO,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,KAAK,EAAE;YACrG,SAAS,EAAE,0BAA0B;SACtC;QACD,qBAAqB,EAAE,aAAa;QACpC,sBAAsB,EAAE,iBAAiB;QACzC,sBAAsB,EAAE,CAAC;QACzB,cAAc,EAAE,yBAAyB;KAC1C,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QAEzB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;QAEpF,MAAM,MAAM,CAAC,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzG,YAAY,EAAE,cAAc;YAC5B,WAAW,EAAE,UAAU;YACvB,mBAAmB,EAAE,IAAI;YACzB,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,0BAA0B;SACtC,CAAC,CAAC;QACH,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAE1D,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvE,YAAY,EAAE,cAAc;YAC5B,WAAW,EAAE,iBAAiB;YAC9B,mBAAmB,EAAE,YAAY;YACjC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,0BAA0B;SACtC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAExF,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,oFAAoF,CAAC,CAAC,GAAG,EAAE,CAAC;aACjI,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC,GAAG,EAAE,CAAC;aAChH,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAE1D,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC/F,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACpH,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACnG,MAAM,UAAU,GAA6B;YAC3C,GAAG,QAAQ;YACX,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE;SAC/D,CAAC;QAEF,MAAM,MAAM,CAAC,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;aACnF,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACxC,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC9C,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;QAC/E,MAAM,IAAI,2BAA2B,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,IAAI,2BAA2B,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC7G,WAAW,EAAE,iBAAiB;YAC9B,mBAAmB,EAAE,YAAY;YACjC,OAAO,EAAE,CAAC;SACX,CAAC,CAAC;QACH,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;QACjF,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAE1E,MAAM,MAAM,CAAC,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5G,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,oBAAoB,EAAE,UAAU,EAAE,0BAA0B;SACvG,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,kFAAkF,CAAC,CAAC,GAAG,EAAE,CAAC;aACzG,OAAO,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,6GAA6G,CAAC,CAAC,GAAG,EAAE,CAAC;aACpI,OAAO,CAAC,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACvF,MAAM,MAAM,CAAC,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvI,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,EAAE,GAAG,cAAc,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QACrI,MAAM,KAAK,GAAG,EAAE,GAAG,eAAe,EAAE,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAC;QAElE,MAAM,MAAM,CAAC,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAChI,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9G,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,EAAE,CAAC;aAC5F,OAAO,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QACzD,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAAC,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC;QAClH,EAAE,CAAC,OAAO,CAAC,8FAA8F,CAAC,CAAC,GAAG,EAAE,CAAC;QACjH,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;QACpF,EAAE,CAAC,OAAO,CAAC,wHAAwH,CAAC,CAAC,GAAG,CAAC,0BAA0B,EAAE,0BAA0B,CAAC,CAAC;QACjM,EAAE,CAAC,OAAO,CAAC,8PAA8P,CAAC,CAAC,GAAG,CAAC,0BAA0B,EAAE,0BAA0B,CAAC,CAAC;QACvU,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,EAAE,GAAG,cAAc,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,gCAAgC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACnP,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,EAAE,CAAC;QAAC,KAAK,CAAC,cAAc,GAAG,WAAW,CAAC;QAC1Q,MAAM,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,gHAAgH,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QACxL,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,gFAAgF,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACpK,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAA6B;YACzC,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,wBAAwB;YAC1G,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,yBAAyB,EAAE,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;YACtH,UAAU,EAAE,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,0BAA0B;SAChH,CAAC;QAEF,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;SAC1F,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QACxG,MAAM,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5G,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC,YAAY,CAAC;YACvB,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,wBAAwB;YAC1G,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,yBAAyB,EAAE,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;YACtH,UAAU,EAAE,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,0BAA0B;SAChH,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAC7B,MAAM,OAAO,GAA6B;YACxC,UAAU,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,gCAAgC;YACpH,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE;YACnI,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,0BAA0B;SAC9H,CAAC;QAEF,MAAM,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACxL,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC/G,MAAM,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC/D,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,EAAE,GAAG,cAAc,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QACrI,MAAM,KAAK,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAA6B;YACzC,UAAU,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE;YAC3J,QAAQ,EAAE,qBAAqB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE;YAC5F,cAAc,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,iBAAiB;YACrG,IAAI,EAAE,8BAA8B,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,0BAA0B;SACtG,CAAC;QAEF,MAAM,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC/J,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,6EAA6E,CAAC,CAAC,GAAG,EAAE,CAAC;aACpH,OAAO,CAAC,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/E,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,SAAS,GAA6B;YAC1C,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE;YACrJ,QAAQ,EAAE,sBAAsB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,yBAAyB,EAAE;YACvG,cAAc,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI;YACvF,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,0BAA0B;SAChE,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/H,MAAM,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,EAAE,SAAS,CAAC,CAAC;aAC1H,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAClC,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACzD,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,EAAE,GAAG,cAAc,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QACrI,MAAM,QAAQ,GAA6B;YACzC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE;YACnJ,QAAQ,EAAE,oBAAoB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE;YAC3F,cAAc,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,uBAAuB;YAC3G,IAAI,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,0BAA0B;SAC9F,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;QACjH,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,qFAAqF,CAAC,CAAC,GAAG,EAAE,CAAC;aAC5H,OAAO,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACnF,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC/I,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,QAAQ,GAA6B,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,6BAA6B,EAAE,IAAI,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAAC;QAC3f,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,EAAE,EAAE,sBAAsB,EAAE,CAAC,EAAE,eAAe,EAAE,uBAAuB,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACpQ,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,8EAA8E,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC/K,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC/G,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACvI,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/runtime-v2/activation/activation-control-types.d.ts

@@ -0,0 +1,61 @@
+export type ActivationDecisionKind = 'continue_observing' | 'promote_live' | 'reject_after_shadow' | 'emergency_deactivate' | 'global_emergency_pause' | 'global_emergency_pause_release' | 'safety_isolate' | 'recover_to_shadow' | 'supersede';
+export type ActivationDecisionSubject = {
+    kind: 'activation';
+    activationId: string;
+    artifactId: string;
+    artifactDigest: string;
+} | {
+    kind: 'all_live_rulecode';
+};
+export interface ActivationDecisionRecord {
+    decisionId: string;
+    subject: ActivationDecisionSubject;
+    decision: ActivationDecisionKind;
+    principal: {
+        kind: 'configured_owner';
+        ownerId: string;
+    } | {
+        kind: 'system_safety';
+        policyVersion: string;
+    } | {
+        kind: 'break_glass';
+        reason: 'local_no_auth_emergency';
+    };
+    authentication: {
+        method: 'console_token';
+        credentialId: string;
+    } | {
+        method: 'cli_owner_credential';
+        credentialId: string;
+    } | {
+        method: 'system';
+    } | {
+        method: 'local_break_glass';
+    };
+    operator?: {
+        kind: 'local_user';
+        operatorId: string;
+    };
+    reasonCode: string;
+    note: string | null;
+    evidenceSnapshotId: string | null;
+    decidedAt: string;
+}
+export interface ActivationControlState {
+    activationId: string;
+    enforcement: 'eligible' | 'safety_isolated';
+    isolationDecisionId: string | null;
+    version: number;
+    updatedAt: string;
+}
+export interface GlobalRuleCodePause {
+    pauseId: string;
+    status: 'paused' | 'released';
+    incidentDecisionId: string;
+    releaseDecisionId: string | null;
+    affectedActivationIds: string[];
+    pausedAt: string;
+    releasedAt: string | null;
+    version: number;
+}
+//# sourceMappingURL=activation-control-types.d.ts.map

package/dist/runtime-v2/activation/activation-control-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activation-control-types.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/activation/activation-control-types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,sBAAsB,GAC9B,oBAAoB,GACpB,cAAc,GACd,qBAAqB,GACrB,sBAAsB,GACtB,wBAAwB,GACxB,gCAAgC,GAChC,gBAAgB,GAChB,mBAAmB,GACnB,WAAW,CAAC;AAEhB,MAAM,MAAM,yBAAyB,GACjC;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB,GACD;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAElC,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,yBAAyB,CAAC;IACnC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,SAAS,EACL;QAAE,IAAI,EAAE,kBAAkB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAC7C;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAChD;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE,yBAAyB,CAAA;KAAE,CAAC;IAC/D,cAAc,EACV;QAAE,MAAM,EAAE,eAAe,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GACjD;QAAE,MAAM,EAAE,sBAAsB,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GACxD;QAAE,MAAM,EAAE,QAAQ,CAAA;KAAE,GACpB;QAAE,MAAM,EAAE,mBAAmB,CAAA;KAAE,CAAC;IACpC,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,UAAU,GAAG,iBAAiB,CAAC;IAC5C,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/runtime-v2/activation/activation-control-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=activation-control-types.js.map

package/dist/runtime-v2/activation/activation-control-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activation-control-types.js","sourceRoot":"","sources":["../../../src/runtime-v2/activation/activation-control-types.ts"],"names":[],"mappings":""}

package/dist/runtime-v2/activation/index.d.ts

@@ -5,6 +5,20 @@ export type { DispatcherConfig } from './activation-dispatcher.js';
 export { PromptWriter, DeferArchiveWriter, extractPrincipleId, } from './low-risk-writers.js';
 export { MemoryActivationStateStore, MemoryArtifactReadModel, } from './memory-activation-state-store.js';
 export { SqliteActivationStateStore } from './sqlite-activation-state-store.js';
+export { SqliteActivationSafetyStore } from './sqlite-activation-safety-store.js';
+export type { ActivationDecisionRecord, ActivationDecisionSubject, ActivationDecisionKind, ActivationControlState, GlobalRuleCodePause } from './activation-control-types.js';
+export { RuleCodeOwnerDecisionService } from './rulecode-owner-decision-service.js';
+export type { PromotionEvidenceSnapshot, PromotionFailedCheck, PromotionReadinessResult, OwnerPromotionActor, OwnerPromotionRequest, PromotionCommitInput, OwnerPromotionResult, RuleCodeOwnerDecisionServiceDeps, } from './rulecode-owner-decision-service.js';
+export { REQUIRED_PROMOTION_CHECK_IDS, evaluateRuleCodePromotionReadiness } from './promotion-readiness-evaluator.js';
+export type { PromotionCheckId, PromotionReadinessCheck, PromotionReadinessEvaluationInput } from './promotion-readiness-evaluator.js';
+export { PromotionReadinessReader } from './promotion-readiness-reader.js';
+export type { PromotionReadinessReaderDeps } from './promotion-readiness-reader.js';
+export { evaluateRuleCodeSafetyCircuit, initialRuleCodeSafetyCircuitState } from './rulecode-safety-circuit-breaker.js';
+export type { RuleCodeSafetySample, RuleCodeSafetyCircuitState, RuleCodeSafetyTripReason } from './rulecode-safety-circuit-breaker.js';
+export { collectOpenClawPromotionChecks } from './openclaw-promotion-checks.js';
+export type { HostLivenessContract } from './openclaw-promotion-checks.js';
+export { summarizeRuleCodeShadowEvents } from './rulecode-shadow-summary.js';
+export type { RuleCodeShadowSummary } from './rulecode-shadow-summary.js';
 export { ApprovalQueue, decideAutoPromotion } from './approval-queue.js';
 export { MemoryApprovalQueueStore } from './memory-approval-store.js';
 export { SqliteApprovalQueueStore } from './sqlite-approval-store.js';

package/dist/runtime-v2/activation/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/activation/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,yBAAyB,EACzB,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,0BAA0B,EAC1B,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,aAAa,EACb,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,mCAAmC,EACnC,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAEhF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpF,YAAY,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAK1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAIrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,YAAY,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE1G,OAAO,EACL,2BAA2B,EAC3B,QAAQ,IAAI,gBAAgB,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,YAAY,EACZ,4BAA4B,GAC7B,MAAM,wCAAwC,CAAC;AAEhD,YAAY,EACV,kBAAkB,EAClB,4BAA4B,GAC7B,MAAM,wCAAwC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/activation/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,yBAAyB,EACzB,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,0BAA0B,EAC1B,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,aAAa,EACb,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,mCAAmC,EACnC,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,YAAY,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAC9K,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,YAAY,EACV,yBAAyB,EAAE,oBAAoB,EAAE,wBAAwB,EACzE,mBAAmB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,oBAAoB,EACtF,gCAAgC,GACjC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AACtH,YAAY,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvI,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,YAAY,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,EAAE,6BAA6B,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AACxH,YAAY,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AACvI,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,YAAY,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,YAAY,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpF,YAAY,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAK1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAIrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,YAAY,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE1G,OAAO,EACL,2BAA2B,EAC3B,QAAQ,IAAI,gBAAgB,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,YAAY,EACZ,4BAA4B,GAC7B,MAAM,wCAAwC,CAAC;AAEhD,YAAY,EACV,kBAAkB,EAClB,4BAA4B,GAC7B,MAAM,wCAAwC,CAAC"}

package/dist/runtime-v2/activation/index.js

@@ -3,6 +3,13 @@ export { ActivationDispatcher } from './activation-dispatcher.js';
 export { PromptWriter, DeferArchiveWriter, extractPrincipleId, } from './low-risk-writers.js';
 export { MemoryActivationStateStore, MemoryArtifactReadModel, } from './memory-activation-state-store.js';
 export { SqliteActivationStateStore } from './sqlite-activation-state-store.js';
+export { SqliteActivationSafetyStore } from './sqlite-activation-safety-store.js';
+export { RuleCodeOwnerDecisionService } from './rulecode-owner-decision-service.js';
+export { REQUIRED_PROMOTION_CHECK_IDS, evaluateRuleCodePromotionReadiness } from './promotion-readiness-evaluator.js';
+export { PromotionReadinessReader } from './promotion-readiness-reader.js';
+export { evaluateRuleCodeSafetyCircuit, initialRuleCodeSafetyCircuitState } from './rulecode-safety-circuit-breaker.js';
+export { collectOpenClawPromotionChecks } from './openclaw-promotion-checks.js';
+export { summarizeRuleCodeShadowEvents } from './rulecode-shadow-summary.js';
 export { ApprovalQueue, decideAutoPromotion } from './approval-queue.js';
 export { MemoryApprovalQueueStore } from './memory-approval-store.js';
 export { SqliteApprovalQueueStore } from './sqlite-approval-store.js';

package/dist/runtime-v2/activation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime-v2/activation/index.ts"],"names":[],"mappings":"AA+BA,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,mCAAmC,EACnC,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAGlE,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAEhF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAGpF,4EAA4E;AAC5E,0EAA0E;AAC1E,2DAA2D;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,oEAAoE;AACpE,4EAA4E;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAG7E,OAAO,EACL,2BAA2B,EAC3B,QAAQ,IAAI,gBAAgB,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,YAAY,EACZ,4BAA4B,GAC7B,MAAM,wCAAwC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime-v2/activation/index.ts"],"names":[],"mappings":"AA+BA,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,mCAAmC,EACnC,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAGlE,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAElF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAMpF,OAAO,EAAE,4BAA4B,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AAEtH,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,OAAO,EAAE,6BAA6B,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AAExH,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAEhF,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAG7E,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAGpF,4EAA4E;AAC5E,0EAA0E;AAC1E,2DAA2D;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,oEAAoE;AACpE,4EAA4E;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAG7E,OAAO,EACL,2BAA2B,EAC3B,QAAQ,IAAI,gBAAgB,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,YAAY,EACZ,4BAA4B,GAC7B,MAAM,wCAAwC,CAAC"}

package/dist/runtime-v2/activation/openclaw-promotion-checks.d.ts

@@ -0,0 +1,30 @@
+import type { PIArtifactSnapshot } from './activation-types.js';
+import type { PromotionReadinessCheck } from './promotion-readiness-evaluator.js';
+export interface HostLivenessContract {
+    version: string;
+    supportsShadowEvidence: boolean;
+    outOfBandControls: readonly ('activation_deactivate' | 'global_rulecode_pause' | 'owner_review_console')[];
+    protectedCapabilities: readonly {
+        capabilityId: string;
+        hostToolAliases: readonly string[];
+    }[];
+    neutralProbes: readonly {
+        probeId: string;
+        capabilityId: string;
+        toolName: string;
+        params: Readonly<Record<string, unknown>>;
+        expectedDecision: 'allow';
+    }[];
+}
+interface OpenClawPromotionCheckInput {
+    ownerIdentityConfigured: boolean;
+    safetyControlsEnabled: boolean;
+    hostContract: unknown;
+    existingLiveArtifacts: readonly PIArtifactSnapshot[];
+    validateProductionArtifact(artifact: PIArtifactSnapshot): Promise<{
+        ok: boolean;
+    }>;
+}
+export declare function collectOpenClawPromotionChecks(artifact: PIArtifactSnapshot, input: OpenClawPromotionCheckInput): Promise<PromotionReadinessCheck[]>;
+export {};
+//# sourceMappingURL=openclaw-promotion-checks.d.ts.map

package/dist/runtime-v2/activation/openclaw-promotion-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-promotion-checks.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/activation/openclaw-promotion-checks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAElF,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB,EAAE,OAAO,CAAC;IAChC,iBAAiB,EAAE,SAAS,CAAC,uBAAuB,GAAG,uBAAuB,GAAG,sBAAsB,CAAC,EAAE,CAAC;IAC3G,qBAAqB,EAAE,SAAS;QAC9B,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;KACpC,EAAE,CAAC;IACJ,aAAa,EAAE,SAAS;QACtB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1C,gBAAgB,EAAE,OAAO,CAAC;KAC3B,EAAE,CAAC;CACL;AAED,UAAU,2BAA2B;IACnC,uBAAuB,EAAE,OAAO,CAAC;IACjC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,qBAAqB,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACrD,0BAA0B,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACpF;AA4FD,wBAAsB,8BAA8B,CAClD,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAmCpC"}