@shield-agent/kya 0.19.0 → 0.21.0

package/dist/receipt/search.js

@@ -0,0 +1,475 @@
+/**
+ * Natural-language search over the activity feed.
+ *
+ * Pure-lexical BM25 with optional MiniLM semantic hybrid. The search module
+ * has no runtime dependency on native ML libraries: fastembed is imported
+ * lazily and only in the live server path.
+ */
+import { createHash } from "node:crypto";
+import { clip } from "../dash/render.js";
+import { mcpServerLabel, parseMcpToolId } from "../mcp-servers.js";
+import { productLabel } from "../trail.js";
+const STOPWORDS = new Set([
+    "a",
+    "an",
+    "the",
+    "and",
+    "or",
+    "but",
+    "is",
+    "are",
+    "was",
+    "were",
+    "be",
+    "been",
+    "being",
+    "to",
+    "of",
+    "in",
+    "on",
+    "at",
+    "by",
+    "for",
+    "with",
+    "as",
+    "this",
+    "that",
+    "these",
+    "those",
+    "it",
+    "its",
+    "from",
+    "up",
+    "about",
+    "into",
+    "through",
+    "during",
+    "before",
+    "after",
+    "above",
+    "below",
+    "between",
+    "among",
+    "within",
+    "without",
+    "against",
+    "over",
+    "under",
+    "again",
+    "further",
+    "then",
+    "once",
+    "here",
+    "there",
+    "when",
+    "where",
+    "why",
+    "how",
+    "all",
+    "any",
+    "both",
+    "each",
+    "few",
+    "more",
+    "most",
+    "other",
+    "some",
+    "such",
+    "only",
+    "own",
+    "same",
+    "so",
+    "than",
+    "too",
+    "very",
+    "can",
+    "will",
+    "just",
+    "should",
+    "now",
+    "did",
+    "does",
+    "do",
+    "has",
+    "have",
+    "had",
+    "having",
+    "get",
+    "got",
+    "gets",
+    "make",
+    "made",
+    "makes",
+    "use",
+    "used",
+    "uses",
+    "using",
+]);
+/** Light stemmer: trailing "ing", "ed", and simple plural "s". */
+function stem(token) {
+    if (token.length <= 3)
+        return token;
+    let s = token;
+    if (s.endsWith("ing")) {
+        const stem = s.slice(0, -3);
+        if (/[aeiou]/.test(stem))
+            s = stem;
+    }
+    else if (s.endsWith("ed")) {
+        const stem = s.slice(0, -2);
+        if (/[aeiou]/.test(stem))
+            s = stem;
+    }
+    else if (s.endsWith("s") && !s.endsWith("ss")) {
+        s = s.slice(0, -1);
+    }
+    if (s.length > 3 && /([bcdfghjklmnpqrstvwxz])\1$/.test(s)) {
+        s = s.slice(0, -1);
+    }
+    return s.length >= 2 ? s : token;
+}
+/** Split camelCase, PascalCase, snake_case, kebab-case, and dot.case. */
+function splitIdentifiers(token) {
+    const parts = [];
+    let current = "";
+    for (const char of token) {
+        if (char === "_" || char === "-" || char === ".") {
+            if (current)
+                parts.push(current);
+            current = "";
+        }
+        else if (/[A-Z]/.test(char)) {
+            if (current && /[a-z]/.test(current[current.length - 1])) {
+                parts.push(current);
+                current = char.toLowerCase();
+            }
+            else {
+                current += char.toLowerCase();
+            }
+        }
+        else {
+            current += char;
+        }
+    }
+    if (current)
+        parts.push(current);
+    return parts;
+}
+/** Tokenize a query or document for BM25 matching. */
+export function tokenize(text) {
+    const out = [];
+    for (const raw of text.split(/[^a-zA-Z0-9]+/)) {
+        if (!raw)
+            continue;
+        for (const part of splitIdentifiers(raw)) {
+            if (!part)
+                continue;
+            const s = stem(part.toLowerCase());
+            if (STOPWORDS.has(s))
+                continue;
+            out.push(s);
+        }
+    }
+    return out;
+}
+/** Concatenate the searchable fields of a trail event. */
+export function eventDocumentText(e) {
+    const parsed = parseMcpToolId(e.toolId);
+    const serverLabel = parsed ? mcpServerLabel(parsed.server) : "";
+    const parts = [
+        e.toolId,
+        e.reasonCode,
+        e.summary ?? "",
+        e.project ?? "",
+        productLabel(e.product),
+        e.mode,
+        serverLabel,
+        e.targetPath ?? "",
+    ];
+    return parts.filter((p) => p).join(" ");
+}
+/** Stable SHA1 of the searchable document text; used to version embeddings. */
+export function eventTextSha1(e) {
+    return createHash("sha1").update(eventDocumentText(e)).digest("hex");
+}
+/**
+ * Standard BM25 over field-weighted documents.
+ *
+ * k1 controls term saturation; b controls document-length normalization.
+ */
+export class Bm25Index {
+    k1;
+    b;
+    docs = new Map();
+    df = new Map();
+    totalDocLength = 0;
+    constructor(k1 = 1.5, b = 0.75) {
+        this.k1 = k1;
+        this.b = b;
+    }
+    add(id, doc) {
+        this.docs.set(id, doc);
+        this.totalDocLength += doc.tokens.length;
+        const seen = new Set();
+        for (const t of doc.tokens) {
+            if (seen.has(t))
+                continue;
+            seen.add(t);
+            this.df.set(t, (this.df.get(t) ?? 0) + 1);
+        }
+    }
+    avgDocLength() {
+        return this.docs.size ? this.totalDocLength / this.docs.size : 0;
+    }
+    search(query) {
+        const qTokens = [...new Set(tokenize(query))];
+        if (qTokens.length === 0 || this.docs.size === 0)
+            return [];
+        const avg = this.avgDocLength();
+        const results = [];
+        for (const doc of this.docs.values()) {
+            // Field-weighted length normalization: sum(field tokens * weight).
+            let weightedLength = 0;
+            for (const f of doc.fields) {
+                weightedLength += tokenize(f.text).length * f.weight;
+            }
+            let score = 0;
+            for (const t of qTokens) {
+                const df = this.df.get(t) ?? 0;
+                if (df === 0)
+                    continue;
+                // IDF with a floor so common terms still contribute a little.
+                const idf = Math.log(1 + (this.docs.size - df + 0.5) / (df + 0.5));
+                const tf = doc.tokens.filter((x) => x === t).length;
+                if (tf === 0)
+                    continue;
+                const denom = tf + this.k1 * (1 - this.b + (this.b * weightedLength) / Math.max(avg, 1));
+                score += idf * ((tf * (this.k1 + 1)) / denom);
+            }
+            if (score > 0)
+                results.push({ id: doc.id, score });
+        }
+        return results.sort((a, b) => b.score - a.score);
+    }
+}
+const SERVER_ALIASES = {
+    github: ["GitHub"],
+    gitlab: ["GitLab"],
+    postgres: ["PostgreSQL"],
+    postgresql: ["PostgreSQL"],
+    slack: ["Slack"],
+    notion: ["Notion"],
+    jira: ["Jira"],
+    confluence: ["Confluence"],
+    linear: ["Linear"],
+    playwright: ["Playwright"],
+    browser: ["Playwright"],
+    puppeteer: ["Puppeteer"],
+    stripe: ["Stripe"],
+    vercel: ["Vercel"],
+    aws: ["AWS"],
+    gcp: ["GCP"],
+    google: ["GCP"],
+    azure: ["Azure"],
+};
+const PRODUCT_ALIASES = {
+    cursor: ["cursor"],
+    claude: ["claude"],
+    codex: ["codex"],
+    grok: ["grok"],
+    kimi: ["kimi"],
+};
+/** Map natural-language terms to known facet values for soft boosting. */
+export function extractFacetHints(query) {
+    const q = ` ${query.toLowerCase()} `;
+    const hints = {
+        verdict: [],
+        server: [],
+        product: [],
+        mode: [],
+    };
+    if (/\b(deny|denied|blocked|rejected|forbidden)\b/.test(q))
+        hints.verdict.push("DENY");
+    if (/\b(approve|review|hold)\b/.test(q))
+        hints.verdict.push("REQUIRE_APPROVE");
+    if (/\ballow(ed)?\b/.test(q))
+        hints.verdict.push("ALLOW");
+    if (/\bnever\b/.test(q))
+        hints.verdict.push("NEVER_EVENT");
+    for (const [alias, labels] of Object.entries(SERVER_ALIASES)) {
+        if (q.includes(` ${alias} `))
+            hints.server.push(...labels);
+    }
+    for (const [alias, ids] of Object.entries(PRODUCT_ALIASES)) {
+        if (q.includes(` ${alias} `))
+            hints.product.push(...ids);
+    }
+    if (/\b(observe|observed)\b/.test(q))
+        hints.mode.push("observe");
+    if (/\bhold\b/.test(q))
+        hints.mode.push("hold");
+    if (/\boffline\b/.test(q))
+        hints.mode.push("offline");
+    const out = {};
+    if (hints.verdict.length)
+        out.verdict = hints.verdict;
+    if (hints.server.length)
+        out.server = hints.server;
+    if (hints.product.length)
+        out.product = hints.product;
+    if (hints.mode.length)
+        out.mode = hints.mode;
+    return out;
+}
+/** Cosine similarity of two equal-length vectors. */
+export function cosine(a, b) {
+    if (a.length !== b.length || a.length === 0)
+        return 0;
+    let dot = 0;
+    let na = 0;
+    let nb = 0;
+    for (let i = 0; i < a.length; i++) {
+        dot += a[i] * b[i];
+        na += a[i] * a[i];
+        nb += b[i] * b[i];
+    }
+    const denom = Math.sqrt(na) * Math.sqrt(nb);
+    return denom === 0 ? 0 : dot / denom;
+}
+/**
+ * Reciprocal Rank Fusion of two ranked lists. Each list is expected in
+ * descending order by score; ranks are 1-based.
+ */
+export function rrfMerge(bm25Ranks, semanticRanks, k = 60) {
+    const map = new Map();
+    for (let i = 0; i < bm25Ranks.length; i++) {
+        const r = bm25Ranks[i];
+        map.set(r.id, (map.get(r.id) ?? 0) + 1 / (k + i + 1));
+    }
+    for (let i = 0; i < semanticRanks.length; i++) {
+        const r = semanticRanks[i];
+        map.set(r.id, (map.get(r.id) ?? 0) + 1 / (k + i + 1));
+    }
+    return [...map.entries()]
+        .map(([id, score]) => ({ id, score }))
+        .sort((a, b) => b.score - a.score);
+}
+/** Build a BM25 index from trail events with weighted fields. */
+export function buildEventIndex(events) {
+    const index = new Bm25Index();
+    for (const e of events) {
+        const parsed = parseMcpToolId(e.toolId);
+        const serverLabel = parsed ? mcpServerLabel(parsed.server) : "";
+        const fields = [
+            { text: e.toolId, weight: 2 },
+            { text: e.reasonCode, weight: 1 },
+            { text: e.summary ?? "", weight: 2 },
+            { text: e.project ?? "", weight: 1 },
+            { text: productLabel(e.product), weight: 1 },
+            { text: e.mode, weight: 1 },
+            { text: serverLabel, weight: 1 },
+            { text: e.targetPath ?? "", weight: 1 },
+        ].filter((f) => f.text);
+        const tokens = [];
+        for (const f of fields) {
+            for (let i = 0; i < f.weight; i++) {
+                tokens.push(...tokenize(f.text));
+            }
+        }
+        index.add(eventKey(e), { id: eventKey(e), tokens, fields });
+    }
+    return index;
+}
+export function eventKey(e) {
+    return `${e.ts}::${e.sessionId}::${e.toolId}`;
+}
+/**
+ * Rank events by query relevance. Chip filters are applied first; BM25 ranks
+ * the survivors; optional semantic embeddings are merged with RRF.
+ */
+export function rankEvents(events, options) {
+    const { query, filters, embeddings, queryEmbedding, facetBoost = 0.05 } = options;
+    const q = query.trim();
+    const hints = extractFacetHints(q);
+    const filtered = applyChipFilters(events, filters ?? {});
+    const index = buildEventIndex(filtered);
+    const bm25 = index.search(q);
+    const byId = new Map(filtered.map((e) => [eventKey(e), e]));
+    let merged = bm25;
+    if (embeddings && embeddings.size > 0 && q.length > 0 && queryEmbedding) {
+        const semantic = [];
+        for (const e of filtered) {
+            const vec = embeddings.get(eventKey(e));
+            if (!vec)
+                continue;
+            const sim = cosine(queryEmbedding, vec);
+            if (sim > 0)
+                semantic.push({ id: eventKey(e), score: sim });
+        }
+        merged = rrfMerge(bm25, semantic.sort((a, b) => b.score - a.score));
+    }
+    const ranked = [];
+    for (const s of merged) {
+        const event = byId.get(s.id);
+        if (event)
+            ranked.push({ event, score: s.score });
+    }
+    return applyFacetBoost(ranked, byId, hints, facetBoost);
+}
+function applyFacetBoost(ranked, byId, hints, boost) {
+    if (!hints.verdict && !hints.server && !hints.product && !hints.mode)
+        return ranked;
+    return ranked.map((r) => {
+        const e = byId.get(eventKey(r.event));
+        if (!e)
+            return r;
+        let b = 0;
+        if (hints.verdict?.includes(e.verdict.toUpperCase()))
+            b += boost;
+        const parsed = parseMcpToolId(e.toolId);
+        if (parsed && hints.server?.includes(mcpServerLabel(parsed.server)))
+            b += boost;
+        if (hints.product?.includes(e.product ?? "other"))
+            b += boost;
+        if (hints.mode?.includes(e.mode))
+            b += boost;
+        return b > 0 ? { event: r.event, score: r.score + b } : r;
+    });
+}
+export function applyChipFilters(events, filters) {
+    const groups = Object.entries(filters)
+        .map(([group, vals]) => [group, vals.filter((v) => v !== "")])
+        .filter(([, vals]) => vals.length > 0);
+    if (groups.length === 0)
+        return [...events];
+    return events.filter((e) => groups.every(([group, vals]) => vals.some((v) => eventMatchesFilter(e, group, v))));
+}
+export function eventMatchesFilter(e, group, value) {
+    switch (group) {
+        case "verdict":
+            return e.verdict.toUpperCase() === value;
+        case "never":
+            return (e.neverEvent || e.reasonCode === "NEVER_EVENT") && value === "1";
+        case "mode":
+            return e.mode === value;
+        case "plane":
+            return (e.host?.trim() || "unknown") === value;
+        case "product":
+            return (e.product ?? "other") === value;
+        case "project":
+            if (value === "")
+                return false;
+            return (e.project?.trim() ?? "") === value;
+        case "tool":
+            return clip(e.toolId, 60) === value;
+        case "session":
+            return (e.sessionId || "unknown") === value;
+        case "server": {
+            const parsed = parseMcpToolId(e.toolId);
+            return parsed != null && mcpServerLabel(parsed.server) === value;
+        }
+        default:
+            return false;
+    }
+}
+//# sourceMappingURL=search.js.map

package/dist/receipt/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/receipt/search.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAmB,MAAM,aAAa,CAAC;AAE5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,GAAG;IACH,IAAI;IACJ,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,MAAM;IACN,IAAI;IACJ,MAAM;IACN,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,MAAM;IACN,IAAI;IACJ,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,IAAI;IACJ,KAAK;IACL,MAAM;IACN,IAAI;IACJ,OAAO;IACP,MAAM;IACN,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,SAAS;IACT,SAAS;IACT,MAAM;IACN,OAAO;IACP,OAAO;IACP,SAAS;IACT,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,IAAI;IACJ,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,KAAK;IACL,KAAK;IACL,MAAM;IACN,IAAI;IACJ,KAAK;IACL,MAAM;IACN,KAAK;IACL,QAAQ;IACR,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AAEH,kEAAkE;AAClE,SAAS,IAAI,CAAC,KAAa;IACzB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,CAAC,GAAG,IAAI,CAAC;IACrC,CAAC;SAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,CAAC,GAAG,IAAI,CAAC;IACrC,CAAC;SAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACnC,CAAC;AAED,yEAAyE;AACzE,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjD,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC;gBAC1D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACpB,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAChC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACnC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC/B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,CAAa;IAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,KAAK,GAAG;QACZ,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,OAAO,IAAI,EAAE;QACf,CAAC,CAAC,OAAO,IAAI,EAAE;QACf,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;QACvB,CAAC,CAAC,IAAI;QACN,WAAW;QACX,CAAC,CAAC,UAAU,IAAI,EAAE;KACnB,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,CAAa;IACzC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAaD;;;;GAIG;AACH,MAAM,OAAO,SAAS;IAMD;IACA;IANX,IAAI,GAA8B,IAAI,GAAG,EAAE,CAAC;IAC5C,EAAE,GAAwB,IAAI,GAAG,EAAE,CAAC;IACpC,cAAc,GAAG,CAAC,CAAC;IAE3B,YACmB,KAAK,GAAG,EACR,IAAI,IAAI;QADR,OAAE,GAAF,EAAE,CAAM;QACR,MAAC,GAAD,CAAC,CAAO;IACxB,CAAC;IAEJ,GAAG,CAAC,EAAU,EAAE,GAAiB;QAC/B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,mEAAmE;YACnE,IAAI,cAAc,GAAG,CAAC,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC3B,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACvD,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,EAAE,KAAK,CAAC;oBAAE,SAAS;gBACvB,8DAA8D;gBAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;gBACnE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBACpD,IAAI,EAAE,KAAK,CAAC;oBAAE,SAAS;gBACvB,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,cAAc,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzF,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;CACF;AASD,MAAM,cAAc,GAA6B;IAC/C,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,QAAQ,EAAE,CAAC,YAAY,CAAC;IACxB,UAAU,EAAE,CAAC,YAAY,CAAC;IAC1B,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,UAAU,EAAE,CAAC,YAAY,CAAC;IAC1B,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,UAAU,EAAE,CAAC,YAAY,CAAC;IAC1B,OAAO,EAAE,CAAC,YAAY,CAAC;IACvB,SAAS,EAAE,CAAC,WAAW,CAAC;IACxB,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,GAAG,EAAE,CAAC,KAAK,CAAC;IACZ,GAAG,EAAE,CAAC,KAAK,CAAC;IACZ,MAAM,EAAE,CAAC,KAAK,CAAC;IACf,KAAK,EAAE,CAAC,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,eAAe,GAA6B;IAChD,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,MAAM,CAAC;CACf,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC;IACrC,MAAM,KAAK,GAA+E;QACxF,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,EAAE;KACT,CAAC;IAEF,IAAI,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC/E,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAE3D,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEtD,MAAM,GAAG,GAAyD,EAAE,CAAC;IACrE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM;QAAE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACnD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM;QAAE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACtD,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAC7C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,MAAM,CAAC,CAAoB,EAAE,CAAoB;IAC/D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACrB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACpB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC;AACvC,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,SAA+B,EAAE,aAAmC,EAAE,CAAC,GAAG,EAAE;IACnG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;SACrC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,MAA6B;IAC3D,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG;YACb,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE;YAC7B,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE;YACjC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;YACpC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;YACpC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YAC5C,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE;YAC3B,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE;YAChC,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;SACxC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAa;IACpC,OAAO,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAChD,CAAC;AAaD;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAA6B,EAAE,OAAsB;IAC9E,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAClF,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5D,IAAI,MAAM,GAAgB,IAAI,CAAC;IAC/B,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAgB,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,GAAG,GAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CACtB,MAAqB,EACrB,IAA6B,EAC7B,KAAiB,EACjB,KAAa;IAEb,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IACpF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAAE,CAAC,IAAI,KAAK,CAAC;QACjE,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAE,CAAC,IAAI,KAAK,CAAC;QAChF,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;YAAE,CAAC,IAAI,KAAK,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,CAAC,IAAI,KAAK,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAA6B,EAC7B,OAAwD;IAExD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAU,CAAC;SACtE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAa,EAAE,KAAa,EAAE,KAAa;IAC5E,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;QAC3C,KAAK,OAAO;YACV,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,aAAa,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC;QAC3E,KAAK,MAAM;YACT,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;QAC1B,KAAK,OAAO;YACV,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,KAAK,KAAK,CAAC;QACjD,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC;QAC1C,KAAK,SAAS;YACZ,IAAI,KAAK,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAC;YAC/B,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC;QAC7C,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,CAAC;QAC9C,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,MAAM,IAAI,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC;QACnE,CAAC;QACD;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/receipt/share.d.ts

@@ -0,0 +1,65 @@
+import { type ReceiptModel } from "./render-receipt.js";
+export declare const SHARE_DEFAULT_BASE_URL = "https://shield-agent.com";
+export declare const SHARE_PATH = "/api/v1/share/reports";
+export declare const SHARE_TIMEOUT_MS = 15000;
+export interface ShareStats {
+    readonly total: number;
+    readonly allow: number;
+    readonly review: number;
+    readonly deny: number;
+    readonly never: number;
+    /** Distinct sessions in the window — a count, never ids. */
+    readonly sessions: number;
+}
+export interface ShareCertify {
+    readonly status: "pass" | "gap";
+    readonly pass: number;
+    readonly gap: number;
+    readonly insufficient: number;
+    readonly attested: number;
+    readonly topGaps: readonly {
+        readonly id: string;
+        readonly severity: string;
+        readonly title: string;
+    }[];
+}
+export interface SharePayload {
+    readonly version: 1;
+    readonly title: string;
+    readonly rangeLabel: string;
+    readonly generatedAt: string;
+    readonly cliVersion: string;
+    readonly stats: ShareStats;
+    readonly products: readonly {
+        readonly label: string;
+        readonly count: number;
+    }[];
+    readonly reasonCodes: readonly {
+        readonly code: string;
+        readonly count: number;
+    }[];
+    readonly certify: ShareCertify | null;
+}
+/**
+ * Roll the model into the share payload. Only fields that are already public
+ * labels or aggregates leave the machine: verdict counts, product/reason
+ * labels, and certify requirement ids (catalog identifiers). Events, session
+ * ids, tool args, paths, and identity never enter the payload.
+ */
+export declare function buildSharePayload(model: ReceiptModel): SharePayload;
+/** Resolve the endpoint base: --share-url flag > KYA_SHARE_URL > default. */
+export declare function shareBaseUrl(override: string | undefined, env: NodeJS.ProcessEnv): string;
+export type ShareResult = {
+    readonly ok: true;
+    readonly url: string;
+} | {
+    readonly ok: false;
+    readonly error: string;
+};
+/** POST the payload; 15s timeout. Never throws — failures come back as {ok:false}. */
+export declare function shareReceiptPayload(payload: SharePayload, opts: {
+    readonly baseUrl: string;
+    readonly fetchImpl?: typeof fetch;
+    readonly timeoutMs?: number;
+}): Promise<ShareResult>;
+//# sourceMappingURL=share.d.ts.map

package/dist/receipt/share.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share.d.ts","sourceRoot":"","sources":["../../src/receipt/share.ts"],"names":[],"mappings":"AAUA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzE,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AACjE,eAAO,MAAM,UAAU,0BAA0B,CAAC;AAClD,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACzG;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjF,QAAQ,CAAC,WAAW,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnF,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;CACvC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,CA2CnE;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAGzF;AAED,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvH,sFAAsF;AACtF,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACjG,OAAO,CAAC,WAAW,CAAC,CA+BtB"}

package/dist/receipt/share.js

@@ -0,0 +1,109 @@
+/**
+ * `kya receipt --share` — publish a redacted summary of the current report
+ * window to the hosted platform and get back a public URL.
+ *
+ * The payload is built FROM THE RECEIPT MODEL, never from the raw trail:
+ * aggregate counts and public labels only. No absolute paths, no session ids,
+ * no tool arguments, no identity (baseUrl/IP) — anything that could identify
+ * a machine, project, or person stays local. Dependency-free: global fetch.
+ */
+import { CLI_VERSION } from "../version.js";
+import { aggregateEvents } from "./render-receipt.js";
+export const SHARE_DEFAULT_BASE_URL = "https://shield-agent.com";
+export const SHARE_PATH = "/api/v1/share/reports";
+export const SHARE_TIMEOUT_MS = 15_000;
+/**
+ * Roll the model into the share payload. Only fields that are already public
+ * labels or aggregates leave the machine: verdict counts, product/reason
+ * labels, and certify requirement ids (catalog identifiers). Events, session
+ * ids, tool args, paths, and identity never enter the payload.
+ */
+export function buildSharePayload(model) {
+    const events = model.events;
+    let allow = 0;
+    let review = 0;
+    let deny = 0;
+    let never = 0;
+    const sessions = new Set();
+    for (const e of events) {
+        const v = e.verdict.toUpperCase();
+        if (e.neverEvent || e.reasonCode === "NEVER_EVENT")
+            never++;
+        if (v === "ALLOW")
+            allow++;
+        else if (v === "DENY")
+            deny++;
+        else if (v === "REQUIRE_APPROVE")
+            review++;
+        sessions.add(e.sessionId?.trim() || "unknown");
+    }
+    const agg = aggregateEvents(events);
+    return {
+        version: 1,
+        title: model.title,
+        rangeLabel: model.rangeLabel,
+        generatedAt: model.generatedAt,
+        cliVersion: CLI_VERSION,
+        stats: {
+            total: events.length,
+            allow,
+            review,
+            deny,
+            never,
+            sessions: sessions.size,
+        },
+        products: agg.products.slice(0, 6).map(({ label, count }) => ({ label, count })),
+        reasonCodes: agg.reasons.slice(0, 8).map(({ label, count }) => ({ code: label, count })),
+        certify: model.certify
+            ? {
+                status: model.certify.result,
+                pass: model.certify.pass,
+                gap: model.certify.gap,
+                insufficient: model.certify.insufficientEvidence,
+                attested: model.certify.attested,
+                topGaps: model.certify.topGaps.slice(0, 5).map(({ id, severity, title }) => ({ id, severity, title })),
+            }
+            : null,
+    };
+}
+/** Resolve the endpoint base: --share-url flag > KYA_SHARE_URL > default. */
+export function shareBaseUrl(override, env) {
+    const raw = override?.trim() || env.KYA_SHARE_URL?.trim() || SHARE_DEFAULT_BASE_URL;
+    return raw.replace(/\/+$/, "");
+}
+/** POST the payload; 15s timeout. Never throws — failures come back as {ok:false}. */
+export async function shareReceiptPayload(payload, opts) {
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? SHARE_TIMEOUT_MS);
+    try {
+        let res;
+        try {
+            res = await fetchImpl(`${opts.baseUrl}${SHARE_PATH}`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify(payload),
+                signal: controller.signal,
+            });
+        }
+        catch (err) {
+            const timedOut = err instanceof Error && err.name === "AbortError";
+            return {
+                ok: false,
+                error: timedOut ? "share failed: request timed out" : `share failed: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        if (res.status !== 200 && res.status !== 201) {
+            return { ok: false, error: `share failed: HTTP ${res.status}` };
+        }
+        const data = (await res.json().catch(() => null));
+        if (!data || typeof data.url !== "string" || !data.url) {
+            return { ok: false, error: "share failed: response did not include a url" };
+        }
+        return { ok: true, url: data.url };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=share.js.map