@provos/ironcurtain 0.10.0 → 0.12.0

package/dist/skills/index.d.ts

@@ -0,0 +1,4 @@
+export type { ResolvedSkill, SkillDiscoveryError, SkillDiscoveryErrorReason, SkillFrontmatter, SkillSource, } from './types.js';
+export { ACTIONABLE_DISCOVERY_REASONS, discoverSkills, discoverSkillsWithErrors, resolveSkillsForSession, } from './discovery.js';
+export type { DiscoverSkillsResult, ResolveSkillsOptions } from './discovery.js';
+export { stageSkillsToBundle, createCachedStager, validateSkillName } from './staging.js';

package/dist/skills/index.js

@@ -0,0 +1,3 @@
+export { ACTIONABLE_DISCOVERY_REASONS, discoverSkills, discoverSkillsWithErrors, resolveSkillsForSession, } from './discovery.js';
+export { stageSkillsToBundle, createCachedStager, validateSkillName } from './staging.js';
+//# sourceMappingURL=index.js.map

package/dist/skills/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,4BAA4B,EAC5B,cAAc,EACd,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC"}

package/dist/skills/staging.d.ts

@@ -0,0 +1,28 @@
+import type { ResolvedSkill } from './types.js';
+/**
+ * Rejects skill names whose `resolve(destDir, name)` would either
+ * overlay the staging root (`''`, `.`), escape it (`..`), or nest
+ * beneath it (`/`, `\\`) — the container's one-level walk only sees
+ * `<root>/<name>/SKILL.md`. Throws on rejection.
+ */
+export declare function validateSkillName(name: string): void;
+/**
+ * Replaces the contents of `destDir` with the resolved set: each skill
+ * is copied to `<destDir>/<skill.name>/`. Skill names are validated by
+ * {@link validateSkillName}.
+ *
+ * Wipes children individually rather than the parent itself. Workflow
+ * bundles bind-mount this directory into a long-lived container; on
+ * Linux a bind mount pins the source's inode at mount time, so removing
+ * and recreating the parent dir leaves the container's mount pointing
+ * at the freed (now-empty) inode. Per-child cleanup keeps the parent
+ * inode stable across re-stages.
+ */
+export declare function stageSkillsToBundle(skills: readonly ResolvedSkill[], destDir: string): void;
+/**
+ * Builds a `stage(skills)` closure pinned to `destDir` that skips the
+ * wipe-and-rebuild when the resolved set is byte-identical to the
+ * previous call. Used by workflow bundles to keep state-transition
+ * latency near-zero when consecutive states resolve to the same skills.
+ */
+export declare function createCachedStager(destDir: string): (skills: readonly ResolvedSkill[]) => boolean;

package/dist/skills/staging.js

@@ -0,0 +1,68 @@
+import { cpSync, mkdirSync, readdirSync, rmSync } from 'node:fs';
+import { resolve } from 'node:path';
+/** Stable signature for change-detection in `createCachedStager`. */
+function computeSignature(skills) {
+    return skills
+        .map((s) => `${s.name}\0${s.sourceDir}`)
+        .sort()
+        .join('\n');
+}
+/**
+ * Rejects skill names whose `resolve(destDir, name)` would either
+ * overlay the staging root (`''`, `.`), escape it (`..`), or nest
+ * beneath it (`/`, `\\`) — the container's one-level walk only sees
+ * `<root>/<name>/SKILL.md`. Throws on rejection.
+ */
+export function validateSkillName(name) {
+    if (name === '') {
+        throw new Error('Invalid skill name: name is empty');
+    }
+    if (name === '.' || name === '..') {
+        throw new Error(`Invalid skill name: "${name}" is not a valid directory name`);
+    }
+    if (name.includes('/') || name.includes('\\')) {
+        throw new Error(`Invalid skill name: "${name}" contains a path separator`);
+    }
+}
+/**
+ * Replaces the contents of `destDir` with the resolved set: each skill
+ * is copied to `<destDir>/<skill.name>/`. Skill names are validated by
+ * {@link validateSkillName}.
+ *
+ * Wipes children individually rather than the parent itself. Workflow
+ * bundles bind-mount this directory into a long-lived container; on
+ * Linux a bind mount pins the source's inode at mount time, so removing
+ * and recreating the parent dir leaves the container's mount pointing
+ * at the freed (now-empty) inode. Per-child cleanup keeps the parent
+ * inode stable across re-stages.
+ */
+export function stageSkillsToBundle(skills, destDir) {
+    const normalizedDestDir = resolve(destDir);
+    mkdirSync(normalizedDestDir, { recursive: true });
+    for (const entry of readdirSync(normalizedDestDir)) {
+        rmSync(resolve(normalizedDestDir, entry), { recursive: true, force: true });
+    }
+    for (const skill of skills) {
+        validateSkillName(skill.name);
+        const target = resolve(normalizedDestDir, skill.name);
+        cpSync(skill.sourceDir, target, { recursive: true });
+    }
+}
+/**
+ * Builds a `stage(skills)` closure pinned to `destDir` that skips the
+ * wipe-and-rebuild when the resolved set is byte-identical to the
+ * previous call. Used by workflow bundles to keep state-transition
+ * latency near-zero when consecutive states resolve to the same skills.
+ */
+export function createCachedStager(destDir) {
+    let lastSignature;
+    return (skills) => {
+        const signature = computeSignature(skills);
+        if (signature === lastSignature)
+            return false;
+        stageSkillsToBundle(skills, destDir);
+        lastSignature = signature;
+        return true;
+    };
+}
+//# sourceMappingURL=staging.js.map

package/dist/skills/staging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staging.js","sourceRoot":"","sources":["../../src/skills/staging.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,qEAAqE;AACrE,SAAS,gBAAgB,CAAC,MAAgC;IACxD,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;SACvC,IAAI,EAAE;SACN,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,iCAAiC,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,6BAA6B,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAgC,EAAE,OAAe;IACnF,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,SAAS,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,IAAI,aAAiC,CAAC;IACtC,OAAO,CAAC,MAAM,EAAE,EAAE;QAChB,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,SAAS,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QAC9C,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,aAAa,GAAG,SAAS,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC"}

package/dist/skills/types.d.ts

@@ -0,0 +1,46 @@
+export interface SkillFrontmatter {
+    readonly name: string;
+    readonly description: string;
+    readonly [extra: string]: unknown;
+}
+/** Layer of origin; determines precedence in `resolveSkillsForSession` (workflow > persona > user). */
+export type SkillSource = 'user' | 'persona' | 'workflow';
+export interface ResolvedSkill {
+    /** From the frontmatter — not the directory name; collision key during layering. */
+    readonly name: string;
+    readonly source: SkillSource;
+    /** Absolute host path; copied recursively by `stageSkillsToBundle`. */
+    readonly sourceDir: string;
+    readonly description: string;
+}
+/**
+ * Why a candidate skill directory could not be resolved into a
+ * `ResolvedSkill`. Surfaced through `discoverSkillsWithErrors` so
+ * runtime sessions and the workflow lint surface can give authors
+ * actionable feedback instead of a silently-empty skills set.
+ *
+ * - `missing-manifest`: directory has no `SKILL.md`. Often legitimate
+ *   (e.g., a `node_modules/` or `.git/` subdir under the skills root),
+ *   so the runtime wrapper does NOT log this — only consumers that
+ *   walked a known skills tree (e.g., a workflow package) should
+ *   surface it as a warning.
+ * - `unreadable`: `readFileSync` failed (permission error, etc.).
+ * - `malformed-frontmatter`: the `---` fence is missing, or the YAML
+ *   between fences failed to parse, or the parsed value isn't an object.
+ * - `missing-required-fields`: frontmatter parsed but `name` or
+ *   `description` is missing or non-string.
+ * - `duplicate-name`: two or more skill directories under the same
+ *   skills root resolve to the same frontmatter `name`. Composition is
+ *   keyed on the frontmatter name, so duplicates are non-deterministic
+ *   without a tiebreaker. Reported once per losing entry; the winner
+ *   (lexicographically-first directory name) is yielded as a normal
+ *   `ResolvedSkill`.
+ */
+export type SkillDiscoveryErrorReason = 'missing-manifest' | 'unreadable' | 'malformed-frontmatter' | 'missing-required-fields' | 'duplicate-name';
+export interface SkillDiscoveryError {
+    /** Absolute path to the offending directory under the skills root. */
+    readonly skillDir: string;
+    readonly reason: SkillDiscoveryErrorReason;
+    /** Optional extra context (e.g., the YAML parse error message). */
+    readonly detail?: string;
+}

package/dist/skills/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/skills/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/skills/types.ts"],"names":[],"mappings":""}

package/dist/trusted-process/approval-whitelist.d.ts

@@ -58,8 +58,6 @@ export interface WhitelistPattern {
 export interface WhitelistCandidateIpc {
     /** Human-readable summary, e.g. "Allow write_file within /home/user/Documents" */
     readonly description: string;
-    /** Warning for zero-constraint side-effectful patterns. */
-    readonly warning?: string;
 }
 /**
  * Result of a whitelist match check.

package/dist/trusted-process/approval-whitelist.js

@@ -74,8 +74,14 @@ export function extractWhitelistCandidates(serverName, toolName, args, annotatio
     // Determine which roles to extract constraints for
     const rolesToExtract = escalatedRoles ?? collectDistinctRoles(annotation);
     const constraints = buildConstraints(rolesToExtract, args, annotation);
+    // Zero-constraint patterns would blanket-approve ALL future calls to the tool.
+    // This happens when a tool's arguments only have 'none' roles (no resource
+    // identifiers). Refuse to offer whitelisting in this case — each invocation
+    // must be individually approved.
+    if (constraints.length === 0) {
+        return { patterns: [], ipcs: [] };
+    }
     const description = buildDescription(serverName, toolName, constraints);
-    const warning = buildWarning(constraints);
     const pattern = {
         serverName,
         toolName,
@@ -87,7 +93,6 @@ export function extractWhitelistCandidates(serverName, toolName, args, annotatio
     };
     const ipc = {
         description,
-        ...(warning ? { warning } : {}),
     };
     // Phase 1: returns a single candidate pattern. The array-based return type and
     // whitelistSelection index in the IPC protocol are designed to support future
@@ -172,9 +177,6 @@ function buildConstraintForRole(role, category, value) {
  * Builds a human-readable description from constraints.
  */
 function buildDescription(serverName, toolName, constraints) {
-    if (constraints.length === 0) {
-        return `Allow ${serverName}/${toolName} (exact tool match only)`;
-    }
     const parts = constraints.map((c) => {
         switch (c.kind) {
             case 'directory':
@@ -187,15 +189,6 @@ function buildDescription(serverName, toolName, constraints) {
     });
     return `Allow ${serverName}/${toolName} ${parts.join(', ')}`;
 }
-/**
- * Generates a warning for zero-constraint tools.
- */
-function buildWarning(constraints) {
-    if (constraints.length === 0) {
-        return 'Whitelisting will auto-approve ALL future calls to this tool for this session.';
-    }
-    return undefined;
-}
 // ---------------------------------------------------------------------------
 // Factory
 // ---------------------------------------------------------------------------
@@ -206,6 +199,12 @@ export function createApprovalWhitelist() {
     const patterns = [];
     return {
         add(patternData) {
+            // Defense-in-depth: reject zero-constraint patterns that would blanket-approve
+            // all calls to a tool. extractWhitelistCandidates() already prevents this, but
+            // guard here too so a future caller can't reintroduce the vulnerability.
+            if (patternData.constraints.length === 0) {
+                throw new Error(`Refusing to add zero-constraint whitelist pattern for ${patternData.serverName}/${patternData.toolName}`);
+            }
             const id = uuidv4();
             const pattern = { ...patternData, id };
             patterns.push(pattern);
@@ -217,9 +216,10 @@ export function createApprovalWhitelist() {
                     continue;
                 if (pattern.toolName !== toolName)
                     continue;
-                // All constraints must match (AND semantics)
-                const allMatch = pattern.constraints.length === 0 ||
-                    pattern.constraints.every((c) => constraintMatches(c, resolvedArgs, annotation));
+                // All constraints must match (AND semantics).
+                // Zero-constraint patterns are rejected by add(), so every pattern
+                // here has at least one constraint to evaluate.
+                const allMatch = pattern.constraints.every((c) => constraintMatches(c, resolvedArgs, annotation));
                 if (allMatch) {
                     return { matched: true, patternId: pattern.id, pattern };
                 }

package/dist/trusted-process/approval-whitelist.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-whitelist.js","sourceRoot":"","sources":["../../src/trusted-process/approval-whitelist.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAyEjF,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,kBAAkB,EAAE,CAAC,EAAW,CAAC;AA8B5E,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;AAE9E,MAAM,uBAAuB,GAA8B,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAExG,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;GAEG;AACH,SAAS,iBAAiB,CACxB,UAA+B,EAC/B,IAA6B,EAC7B,UAA0B;IAE1B,qDAAqD;IACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtC,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxB,IAAI,CAAC;oBACH,OAAO,iBAAiB,CAAC,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBACpD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;QACL,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxB,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC3C,MAAM,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;oBACjE,OAAO,MAAM,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0BAA0B,CACxC,UAAkB,EAClB,QAAgB,EAChB,IAA6B,EAC7B,UAA0B,EAC1B,cAAmD,EACnD,YAAoB,EACpB,gBAAwB;IAExB,mDAAmD;IACnD,MAAM,cAAc,GAAG,cAAc,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAE1E,MAAM,WAAW,GAAG,gBAAgB,CAAC,cAAc,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAE1C,MAAM,OAAO,GAAiC;QAC5C,UAAU;QACV,QAAQ;QACR,WAAW;QACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,kBAAkB,EAAE,YAAY;QAChC,cAAc,EAAE,gBAAgB;QAChC,WAAW;KACZ,CAAC;IAEF,MAAM,GAAG,GAA0B;QACjC,WAAW;QACX,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC;IAEF,+EAA+E;IAC/E,8EAA8E;IAC9E,uFAAuF;IACvF,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,KAA8B,EAC9B,IAA6B,EAC7B,UAA0B;IAE1B,MAAM,WAAW,GAA0B,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU;gBAAE,SAAS;YAE1B,yDAAyD;YACzD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,qDAAqD;AACrD,SAAS,aAAa,CAAC,CAAsB;IAC3C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QACxC,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACrC,KAAK,OAAO;YACV,OAAO,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IACxC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,IAAkB,EAAE,QAAgB,EAAE,KAAa;IACjF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,qEAAqE;YACrE,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxD,IAAI,CAAC;gBACH,0EAA0E;gBAC1E,+EAA+E;gBAC/E,2EAA2E;gBAC3E,8EAA8E;gBAC9E,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;gBAClC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBACtD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,KAAK,YAAY;YACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7D;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,UAAkB,EAAE,QAAgB,EAAE,WAA2C;IACzG,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,UAAU,IAAI,QAAQ,0BAA0B,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,WAAW;gBACd,OAAO,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC;YAC3C,KAAK,QAAQ;gBACX,OAAO,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;YACxC,KAAK,OAAO;gBACV,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,UAAU,IAAI,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,WAA2C;IAC/D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,gFAAgF,CAAC;IAC1F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,OAAO;QACL,GAAG,CAAC,WAAyC;YAC3C,MAAM,EAAE,GAAG,MAAM,EAAsB,CAAC;YACxC,MAAM,OAAO,GAAqB,EAAE,GAAG,WAAW,EAAE,EAAE,EAAE,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,KAAK,CACH,UAAkB,EAClB,QAAgB,EAChB,YAAqC,EACrC,UAA0B;YAE1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU;oBAAE,SAAS;gBAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;oBAAE,SAAS;gBAE5C,6CAA6C;gBAC7C,MAAM,QAAQ,GACZ,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;oBAChC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;gBAEnF,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,OAAO;YACL,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,IAAI;YACN,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"approval-whitelist.js","sourceRoot":"","sources":["../../src/trusted-process/approval-whitelist.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAuEjF,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,kBAAkB,EAAE,CAAC,EAAW,CAAC;AA8B5E,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;AAE9E,MAAM,uBAAuB,GAA8B,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAExG,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;GAEG;AACH,SAAS,iBAAiB,CACxB,UAA+B,EAC/B,IAA6B,EAC7B,UAA0B;IAE1B,qDAAqD;IACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtC,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxB,IAAI,CAAC;oBACH,OAAO,iBAAiB,CAAC,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBACpD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;QACL,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxB,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC3C,MAAM,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;oBACjE,OAAO,MAAM,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0BAA0B,CACxC,UAAkB,EAClB,QAAgB,EAChB,IAA6B,EAC7B,UAA0B,EAC1B,cAAmD,EACnD,YAAoB,EACpB,gBAAwB;IAExB,mDAAmD;IACnD,MAAM,cAAc,GAAG,cAAc,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAE1E,MAAM,WAAW,GAAG,gBAAgB,CAAC,cAAc,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAEvE,+EAA+E;IAC/E,2EAA2E;IAC3E,4EAA4E;IAC5E,iCAAiC;IACjC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAExE,MAAM,OAAO,GAAiC;QAC5C,UAAU;QACV,QAAQ;QACR,WAAW;QACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,kBAAkB,EAAE,YAAY;QAChC,cAAc,EAAE,gBAAgB;QAChC,WAAW;KACZ,CAAC;IAEF,MAAM,GAAG,GAA0B;QACjC,WAAW;KACZ,CAAC;IAEF,+EAA+E;IAC/E,8EAA8E;IAC9E,uFAAuF;IACvF,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,KAA8B,EAC9B,IAA6B,EAC7B,UAA0B;IAE1B,MAAM,WAAW,GAA0B,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU;gBAAE,SAAS;YAE1B,yDAAyD;YACzD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,qDAAqD;AACrD,SAAS,aAAa,CAAC,CAAsB;IAC3C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QACxC,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACrC,KAAK,OAAO;YACV,OAAO,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IACxC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,IAAkB,EAAE,QAAgB,EAAE,KAAa;IACjF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,qEAAqE;YACrE,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxD,IAAI,CAAC;gBACH,0EAA0E;gBAC1E,+EAA+E;gBAC/E,2EAA2E;gBAC3E,8EAA8E;gBAC9E,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;gBAClC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBACtD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,KAAK,YAAY;YACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7D;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,UAAkB,EAAE,QAAgB,EAAE,WAA2C;IACzG,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,WAAW;gBACd,OAAO,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC;YAC3C,KAAK,QAAQ;gBACX,OAAO,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;YACxC,KAAK,OAAO;gBACV,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,UAAU,IAAI,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,OAAO;QACL,GAAG,CAAC,WAAyC;YAC3C,+EAA+E;YAC/E,+EAA+E;YAC/E,yEAAyE;YACzE,IAAI,WAAW,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,yDAAyD,WAAW,CAAC,UAAU,IAAI,WAAW,CAAC,QAAQ,EAAE,CAC1G,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,EAAsB,CAAC;YACxC,MAAM,OAAO,GAAqB,EAAE,GAAG,WAAW,EAAE,EAAE,EAAE,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,KAAK,CACH,UAAkB,EAClB,QAAgB,EAChB,YAAqC,EACrC,UAA0B;YAE1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU;oBAAE,SAAS;gBAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;oBAAE,SAAS;gBAE5C,8CAA8C;gBAC9C,mEAAmE;gBACnE,gDAAgD;gBAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;gBAElG,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,OAAO;YACL,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,IAAI;YACN,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/trusted-process/async-mutex.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Minimal async mutex for serializing access to coordinator-owned state.
+ *
+ * Used by ToolCallCoordinator to:
+ *   - Serialize concurrent handleToolCall invocations against each other
+ *     (protects ApprovalWhitelist, CallCircuitBreaker, ServerContextMap
+ *     from read-modify-write races)
+ *   - Reserve a separate lock for future loadPolicy operations
+ *
+ * Implementation notes:
+ *   - Single-threaded: `Node.js` concurrency happens only at await points,
+ *     so a simple promise-chain mutex is sufficient.
+ *   - Fair FIFO order: each acquirer receives a release token after the
+ *     previous holder's promise resolves. No priority inversion risk.
+ *   - Non-reentrant: a holder that calls `acquire()` recursively will deadlock.
+ */
+export declare class AsyncMutex {
+    private waitTail;
+    /**
+     * Acquires the mutex, returning a `release()` function.
+     *
+     * Usage:
+     *   const release = await mutex.acquire();
+     *   try { ... } finally { release(); }
+     */
+    acquire(): Promise<() => void>;
+    /**
+     * Runs `fn` while holding the mutex. Preferred form for call sites
+     * that do not need manual release control.
+     */
+    withLock<T>(fn: () => Promise<T>): Promise<T>;
+}

package/dist/trusted-process/async-mutex.js

@@ -0,0 +1,50 @@
+/**
+ * Minimal async mutex for serializing access to coordinator-owned state.
+ *
+ * Used by ToolCallCoordinator to:
+ *   - Serialize concurrent handleToolCall invocations against each other
+ *     (protects ApprovalWhitelist, CallCircuitBreaker, ServerContextMap
+ *     from read-modify-write races)
+ *   - Reserve a separate lock for future loadPolicy operations
+ *
+ * Implementation notes:
+ *   - Single-threaded: `Node.js` concurrency happens only at await points,
+ *     so a simple promise-chain mutex is sufficient.
+ *   - Fair FIFO order: each acquirer receives a release token after the
+ *     previous holder's promise resolves. No priority inversion risk.
+ *   - Non-reentrant: a holder that calls `acquire()` recursively will deadlock.
+ */
+export class AsyncMutex {
+    waitTail = Promise.resolve();
+    /**
+     * Acquires the mutex, returning a `release()` function.
+     *
+     * Usage:
+     *   const release = await mutex.acquire();
+     *   try { ... } finally { release(); }
+     */
+    async acquire() {
+        let release;
+        const next = new Promise((resolve) => {
+            release = resolve;
+        });
+        const prior = this.waitTail;
+        this.waitTail = next;
+        await prior;
+        return release;
+    }
+    /**
+     * Runs `fn` while holding the mutex. Preferred form for call sites
+     * that do not need manual release control.
+     */
+    async withLock(fn) {
+        const release = await this.acquire();
+        try {
+            return await fn();
+        }
+        finally {
+            release();
+        }
+    }
+}
+//# sourceMappingURL=async-mutex.js.map

package/dist/trusted-process/async-mutex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-mutex.js","sourceRoot":"","sources":["../../src/trusted-process/async-mutex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,UAAU;IACb,QAAQ,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEpD;;;;;;OAMG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,OAAoB,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACzC,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,KAAK,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAI,EAAoB;QACpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/trusted-process/audit-log.d.ts

@@ -3,10 +3,47 @@ export interface AuditLogOptions {
     /** When true, PII/credential patterns are redacted before writing. */
     redact?: boolean;
 }
+/**
+ * Append-only JSONL writer for audit entries.
+ *
+ * Writes are synchronous (`appendFileSync`) for two reasons: durability
+ * and read-after-write determinism. An async `WriteStream` buffers
+ * chunks and flushes them on the event loop; on fast machines (the CI
+ * ubuntu-latest runner being the motivating case) the test/inspection
+ * code can call `readFileSync(auditPath)` before the last write has
+ * reached disk. More importantly, a process crash between a policy
+ * decision and the next flush would silently drop the audit entry for
+ * that decision — the exact window where durability matters most. The
+ * sibling logger (`src/logger.ts`) uses the same pattern for the same
+ * reason. Since `rotate()` was removed in the coordinator redesign,
+ * this class's only remaining job is one append per tool call, which
+ * does not justify the async buffering machinery.
+ *
+ * Each coordinator owns exactly one `AuditLog` targeting a single file
+ * for its entire lifetime. Workflow runs write one file per run
+ * (entries tagged with `persona` so consumers can slice by re-entry);
+ * single-session modes write one file per session. Policy hot-swap
+ * only updates `currentPersona` on the coordinator and all entries
+ * continue to land in the same file.
+ */
 export declare class AuditLog {
-    private stream;
+    private readonly path;
     private readonly redact;
+    private closed;
+    private streamError;
     constructor(path: string, options?: AuditLogOptions);
+    /**
+     * Appends a single audit entry to the log file.
+     *
+     * A trusted process that cannot audit is a security violation: we
+     * fail loudly rather than silently drop entries. If a previous write
+     * failed, we rethrow the cached error without attempting a new write
+     * so the caller sees a deterministic, idempotent failure surface.
+     *
+     * @throws if called after `close()`.
+     * @throws if any previous write (or the ctor's `mkdirSync`) failed.
+     * @throws if this write fails (ENOSPC, EACCES, etc.).
+     */
     log(entry: AuditEntry): void;
     close(): Promise<void>;
 }

package/dist/trusted-process/audit-log.js

@@ -1,25 +1,94 @@
-import { createWriteStream } from 'node:fs';
+import { appendFileSync, mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
 import { redactObject } from './audit-redactor.js';
+/**
+ * Append-only JSONL writer for audit entries.
+ *
+ * Writes are synchronous (`appendFileSync`) for two reasons: durability
+ * and read-after-write determinism. An async `WriteStream` buffers
+ * chunks and flushes them on the event loop; on fast machines (the CI
+ * ubuntu-latest runner being the motivating case) the test/inspection
+ * code can call `readFileSync(auditPath)` before the last write has
+ * reached disk. More importantly, a process crash between a policy
+ * decision and the next flush would silently drop the audit entry for
+ * that decision — the exact window where durability matters most. The
+ * sibling logger (`src/logger.ts`) uses the same pattern for the same
+ * reason. Since `rotate()` was removed in the coordinator redesign,
+ * this class's only remaining job is one append per tool call, which
+ * does not justify the async buffering machinery.
+ *
+ * Each coordinator owns exactly one `AuditLog` targeting a single file
+ * for its entire lifetime. Workflow runs write one file per run
+ * (entries tagged with `persona` so consumers can slice by re-entry);
+ * single-session modes write one file per session. Policy hot-swap
+ * only updates `currentPersona` on the coordinator and all entries
+ * continue to land in the same file.
+ */
 export class AuditLog {
-    stream;
+    path;
     redact;
+    closed = false;
+    // Latched write error. Once any `appendFileSync` has failed (ENOSPC,
+    // EACCES, missing parent dir that was deleted mid-session, etc.) we
+    // stop attempting further writes and rethrow the cached error on
+    // every subsequent `log()` call. This preserves the "fail-closed"
+    // invariant: a trusted process that cannot audit must stop
+    // processing tool calls, and must report the same root-cause error
+    // each time it's asked to audit afterwards.
+    streamError = null;
     constructor(path, options) {
-        this.stream = createWriteStream(path, { flags: 'a' });
+        this.path = path;
+        // Match the old `createWriteStream` behavior of auto-creating the
+        // parent directory for common session/workflow layouts. If this
+        // itself fails (e.g., a path component is a file), we latch the
+        // error so the first `log()` rethrows it synchronously — the
+        // caller experiences the same fail-closed contract either way.
+        try {
+            mkdirSync(dirname(path), { recursive: true });
+        }
+        catch (err) {
+            this.streamError = err instanceof Error ? err : new Error(String(err));
+        }
         this.redact = options?.redact ?? false;
     }
+    /**
+     * Appends a single audit entry to the log file.
+     *
+     * A trusted process that cannot audit is a security violation: we
+     * fail loudly rather than silently drop entries. If a previous write
+     * failed, we rethrow the cached error without attempting a new write
+     * so the caller sees a deterministic, idempotent failure surface.
+     *
+     * @throws if called after `close()`.
+     * @throws if any previous write (or the ctor's `mkdirSync`) failed.
+     * @throws if this write fails (ENOSPC, EACCES, etc.).
+     */
     log(entry) {
+        if (this.closed) {
+            throw new Error('AuditLog.log() called after close()');
+        }
+        if (this.streamError) {
+            throw new Error(`AuditLog stream error: ${this.streamError.message}`);
+        }
         const toWrite = this.redact ? redactAuditEntry(entry) : entry;
-        this.stream.write(JSON.stringify(toWrite) + '\n');
-    }
-    async close() {
-        return new Promise((resolve, reject) => {
-            this.stream.end((err) => {
-                if (err)
-                    reject(err);
-                else
-                    resolve();
+        try {
+            appendFileSync(this.path, JSON.stringify(toWrite) + '\n');
+        }
+        catch (err) {
+            this.streamError = err instanceof Error ? err : new Error(String(err));
+            throw new Error(`AuditLog stream error: ${this.streamError.message}`, {
+                cause: err,
             });
-        });
+        }
+    }
+    close() {
+        if (this.closed)
+            return Promise.resolve();
+        this.closed = true;
+        // Synchronous writes have nothing to flush and no fd to release.
+        // Returns a promise purely for API compatibility with the existing
+        // coordinator teardown path, which `await`s this call.
+        return Promise.resolve();
     }
 }
 /**

package/dist/trusted-process/audit-log.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../src/trusted-process/audit-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAE9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAOnD,MAAM,OAAO,QAAQ;IACX,MAAM,CAAc;IACX,MAAM,CAAU;IAEjC,YAAY,IAAY,EAAE,OAAyB;QACjD,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;IACzC,CAAC;IAED,GAAG,CAAC,KAAiB;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAA6B,EAAE,EAAE;gBAChD,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAiB;IACzC,OAAO;QACL,GAAG,KAAK;QACR,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;QACxC,MAAM,EAAE;YACN,GAAG,KAAK,CAAC,MAAM;YACf,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5F,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;SACvF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../src/trusted-process/audit-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAOnD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,QAAQ;IACF,IAAI,CAAS;IACb,MAAM,CAAU;IACzB,MAAM,GAAG,KAAK,CAAC;IACvB,qEAAqE;IACrE,oEAAoE;IACpE,iEAAiE;IACjE,kEAAkE;IAClE,2DAA2D;IAC3D,mEAAmE;IACnE,4CAA4C;IACpC,WAAW,GAAiB,IAAI,CAAC;IAEzC,YAAY,IAAY,EAAE,OAAyB;QACjD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,kEAAkE;QAClE,gEAAgE;QAChE,gEAAgE;QAChE,6DAA6D;QAC7D,+DAA+D;QAC/D,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,GAAG,CAAC,KAAiB;QACnB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9D,IAAI,CAAC;YACH,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE;gBACpE,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,iEAAiE;QACjE,mEAAmE;QACnE,uDAAuD;QACvD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAiB;IACzC,OAAO;QACL,GAAG,KAAK;QACR,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;QACxC,MAAM,EAAE;YACN,GAAG,KAAK,CAAC,MAAM;YACf,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5F,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;SACvF;KACF,CAAC;AACJ,CAAC"}

package/dist/trusted-process/call-circuit-breaker.d.ts

@@ -11,6 +11,12 @@
 export interface CircuitBreakerConfig {
     windowMs: number;
     threshold: number;
+    /**
+     * Number of concurrent worker lanes expected to share this breaker.
+     * Identical calls from N lanes should consume N slots before the
+     * ordinary single-lane runaway threshold applies.
+     */
+    workerCount: number;
 }
 export type CircuitBreakerVerdict = {
     allowed: true;

package/dist/trusted-process/call-circuit-breaker.js

@@ -9,15 +9,22 @@
  * Runs AFTER policy evaluation so every call is always audited.
  */
 import { computeHash } from '../hash.js';
+import { ERROR_PREFIX_CIRCUIT_BREAKER } from './error-prefixes.js';
 const DEFAULT_CONFIG = {
     windowMs: 60_000,
     threshold: 20,
+    workerCount: 1,
 };
 export class CallCircuitBreaker {
     config;
     windows = new Map();
     constructor(config) {
-        this.config = { ...DEFAULT_CONFIG, ...config };
+        const merged = { ...DEFAULT_CONFIG, ...config };
+        this.config = {
+            ...merged,
+            threshold: Math.max(1, Math.floor(merged.threshold)),
+            workerCount: Math.max(1, Math.floor(merged.workerCount)),
+        };
     }
     /**
      * Check whether a tool call should be allowed.
@@ -42,10 +49,23 @@ export class CallCircuitBreaker {
         else if (firstValid === -1) {
             timestamps.length = 0;
         }
-        if (timestamps.length >= this.config.threshold) {
+        // Scale the GLOBAL per-`(tool:argsHash)` threshold by `workerCount` so
+        // N homogeneous lanes issuing the same call do not false-trip the
+        // single-lane runaway guard. Trade-off: because the window is keyed
+        // only by `(tool, argsHash)` and NOT by lane, this grants `threshold *
+        // workerCount` headroom to the WHOLE bucket -- so a single runaway lane
+        // gets `threshold * N` slots to itself, weakening the DoS guard by a
+        // factor of N. Harmless today (`workerCount` is always 1 in
+        // production). REQUIRED PREREQUISITE before any caller sets
+        // `workerCount > 1`: per-lane bucketing (key the window by lane id) so
+        // each lane keeps its own single-lane threshold. Lane ids do not exist
+        // yet, so this cannot be implemented here -- see
+        // docs/designs/evolve-sync-parallelism-slice.md §5.2.
+        const effectiveThreshold = this.config.threshold * this.config.workerCount;
+        if (timestamps.length >= effectiveThreshold) {
             return {
                 allowed: false,
-                reason: `CIRCUIT BREAKER: Tool '${toolName}' called ${this.config.threshold} times ` +
+                reason: `${ERROR_PREFIX_CIRCUIT_BREAKER} Tool '${toolName}' called ${effectiveThreshold} times ` +
                     `with identical arguments within ${this.config.windowMs / 1000}s window. ` +
                     'Try a different approach.',
             };

package/dist/trusted-process/call-circuit-breaker.js.map

@@ -1 +1 @@
-{"version":3,"file":"call-circuit-breaker.js","sourceRoot":"","sources":["../../src/trusted-process/call-circuit-breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAOzC,MAAM,cAAc,GAAyB;IAC3C,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,EAAE;CACd,CAAC;AAIF,MAAM,OAAO,kBAAkB;IACZ,MAAM,CAAuB;IACtC,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE9C,YAAY,MAAsC;QAChD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAgB,EAAE,IAA6B;QACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE1C,IAAI,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACpC,CAAC;QAED,sCAAsC;QACtC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAC3D,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7B,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC/C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EACJ,0BAA0B,QAAQ,YAAY,IAAI,CAAC,MAAM,CAAC,SAAS,SAAS;oBAC5E,mCAAmC,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,YAAY;oBAC1E,2BAA2B;aAC9B,CAAC;QACJ,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,uBAAuB;IACvB,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"call-circuit-breaker.js","sourceRoot":"","sources":["../../src/trusted-process/call-circuit-breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAanE,MAAM,cAAc,GAAyB;IAC3C,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,EAAE;IACb,WAAW,EAAE,CAAC;CACf,CAAC;AAIF,MAAM,OAAO,kBAAkB;IACZ,MAAM,CAAuB;IACtC,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE9C,YAAY,MAAsC;QAChD,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,MAAM;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpD,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAgB,EAAE,IAA6B;QACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE1C,IAAI,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACpC,CAAC;QAED,sCAAsC;QACtC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAC3D,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7B,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,uEAAuE;QACvE,kEAAkE;QAClE,oEAAoE;QACpE,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,4DAA4D;QAC5D,4DAA4D;QAC5D,uEAAuE;QACvE,uEAAuE;QACvE,iDAAiD;QACjD,sDAAsD;QACtD,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAC3E,IAAI,UAAU,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EACJ,GAAG,4BAA4B,UAAU,QAAQ,YAAY,kBAAkB,SAAS;oBACxF,mCAAmC,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,YAAY;oBAC1E,2BAA2B;aAC9B,CAAC;QACJ,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,uBAAuB;IACvB,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}