@sponsio/sdk 0.1.0-alpha.3 → 0.2.0-alpha.10

package/dist/core/tool-names.js

@@ -0,0 +1,128 @@
+/**
+ * One canonical spelling for a tool name, shared by contracts and grounding.
+ *
+ * Port of sponsio/formulas/tool_names.py.
+ *
+ * Predicate keys are map keys: ``called(issue_refund)`` and
+ * ``called(Issue_Refund)`` are different entries, and a contract looks up
+ * the spelling its author typed. So a rule written against ``issue_refund``
+ * was silently inert against an event whose tool arrived as
+ * ``Issue_Refund``, as ``"issue_refund "`` with a stray space, or as
+ * ``mcp__finance__issue_refund`` (our own documented MCP wire format).
+ * ``mustPrecede`` compiles to ``Or(order-holds, never-called)``, so a name
+ * that never matches makes the second disjunct true and the contract
+ * reports satisfied while the guarded action runs unchecked.
+ *
+ * Two functions, used on opposite sides of the same join:
+ *
+ * - {@link canonicalTool}: what a *contract* keys on. Contracts are
+ *   authored once, so they collapse to a single canonical spelling.
+ * - {@link toolAliases}: what an *event* answers to. A tool call is a fact
+ *   and cannot be rewritten, so it is grounded under every spelling a
+ *   contract might reasonably have used, canonical form included.
+ *
+ * Widening only ever makes more contracts apply to a given call, never
+ * fewer.
+ */
+/**
+ * Claude Code / MCP wire format: ``mcp__<server>__<tool>``, prefix in any
+ * case (``MCP__finance__x`` is the same call). The server segment has no
+ * ``__`` of its own; the tool segment may, so the split is on the FIRST
+ * ``__`` after the prefix. ``[^\n]`` rather than ``.`` because
+ * Python's ``.`` excludes only ``\n`` while JavaScript's also excludes
+ * ``\r`` and U+2028/2029.
+ */
+export const MCP_TOOL_RE = /^mcp__([^_]+(?:_[^_]+)*)__([^\n]+)$/i;
+/**
+ * OpenClaw's MCP wire format: ``<server>__<tool>`` with no ``mcp__``
+ * prefix. Same split; consulted only when {@link MCP_TOOL_RE} did not
+ * match, so the ``mcp`` of a prefixed name is never read as a server.
+ */
+export const SERVER_TOOL_RE = /^([^_]+(?:_[^_]+)*)__([^\n]+)$/;
+/**
+ * Python ``str.strip()`` whitespace (``str.isspace``). Differs from
+ * ``String.prototype.trim`` on U+001C-001F and U+0085 (Python strips,
+ * JavaScript keeps) and U+FEFF (JavaScript strips, Python keeps).
+ */
+const PY_WS = "\\t\\n\\v\\f\\r\\x1c-\\x20\\x85\\xa0\\u1680\\u2000-\\u200a\\u2028\\u2029\\u202f\\u205f\\u3000";
+const PY_STRIP_RE = new RegExp(`^[${PY_WS}]+|[${PY_WS}]+$`, "g");
+function pyStrip(s) {
+    return s.replace(PY_STRIP_RE, "");
+}
+/**
+ * Python ``str.casefold()``, per code point.
+ *
+ * Lower-casing alone misses the full case folds (``ß`` -> ``ss``,
+ * ``ſ`` -> ``s``, final sigma -> ``σ``, ``µ`` -> ``μ``); folding through
+ * the upper case catches those. Two families need explicit handling:
+ * dotless ``ı`` has no fold in Python but upper-cases to ``I``, and
+ * Unicode folds lower-case Cherokee *to* the upper-case letters. Code
+ * points added in a Unicode version one runtime knows and the other does
+ * not can still differ; tool names are ASCII in practice.
+ */
+function pyCasefold(s) {
+    let out = "";
+    for (const ch of s) {
+        const cp = ch.codePointAt(0);
+        if (cp < 0x80) {
+            out += ch.toLowerCase();
+        }
+        else if (cp === 0x131) {
+            out += ch;
+        }
+        else if (cp >= 0xab70 && cp <= 0xabbf) {
+            out += String.fromCodePoint(cp - 0xab70 + 0x13a0);
+        }
+        else if (cp >= 0x13f8 && cp <= 0x13fd) {
+            out += String.fromCodePoint(cp - 8);
+        }
+        else if (cp >= 0x13a0 && cp <= 0x13f5) {
+            out += ch;
+        }
+        else {
+            const lower = ch.toLowerCase();
+            const upper = lower.toUpperCase();
+            out += upper !== lower ? upper.toLowerCase() : lower;
+        }
+    }
+    return out;
+}
+/** ``mcp__finance__issue_refund`` -> ``issue_refund``; else ``null``. */
+function stripMcp(name) {
+    const m = MCP_TOOL_RE.exec(name);
+    return m ? m[2] : null;
+}
+/** ``finance__issue_refund`` -> ``issue_refund``; else ``null``. */
+function stripServer(name) {
+    const m = SERVER_TOOL_RE.exec(name);
+    return m ? m[2] : null;
+}
+/**
+ * The single spelling a contract keys on.
+ *
+ * Strips surrounding whitespace and case-folds. The MCP prefix is *not*
+ * stripped here: a contract that deliberately names
+ * ``mcp__finance__issue_refund`` means that server's tool and should not
+ * widen to every tool of that name. Grounding supplies the bare-name
+ * alias so the reverse direction still joins.
+ */
+export function canonicalTool(tool) {
+    return pyCasefold(pyStrip(String(tool)));
+}
+/**
+ * Every spelling an event's tool call should answer to.
+ *
+ * Ordered, duplicate-free, and always contains the raw name first so
+ * existing traces and predicate keys keep working unchanged.
+ */
+export function toolAliases(tool) {
+    const raw = String(tool);
+    const out = [raw];
+    const stripped = pyStrip(raw);
+    out.push(stripped, pyCasefold(stripped));
+    const bare = stripMcp(stripped) ?? stripServer(stripped);
+    if (bare)
+        out.push(bare, pyCasefold(bare));
+    return [...new Set(out)].filter((k) => k);
+}
+//# sourceMappingURL=tool-names.js.map

package/dist/core/tool-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-names.js","sourceRoot":"","sources":["../../src/core/tool-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAElE;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,gCAAgC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,KAAK,GAAG,+FAA+F,CAAC;AAC9G,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,KAAK,KAAK,EAAE,GAAG,CAAC,CAAC;AAEjE,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC;QACvC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;YACd,GAAG,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1B,CAAC;aAAM,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;YACxB,GAAG,IAAI,EAAE,CAAC;QACZ,CAAC;aAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;YACxC,GAAG,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;YACxC,GAAG,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;YACxC,GAAG,IAAI,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAClC,GAAG,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAED,oEAAoE;AACpE,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC"}

package/dist/index.d.ts

@@ -20,8 +20,9 @@
  *   if (result.blocked) { ... }
  */
 import { AgentTurnSpan } from "./core/spans.js";
+import { CloudClient } from "./cloud/client.js";
 import type { DetFormula } from "./core/patterns.js";
-import { type JudgeClient, type JudgeConfig, type StoContextSnapshot } from "./core/sto.js";
+import type { JudgeClient, JudgeConfig, StoContextSnapshot } from "./core/sto.js";
 export { evaluate } from "./core/evaluator.js";
 export type { Valuation } from "./core/evaluator.js";
 export * from "./core/formula.js";
@@ -34,7 +35,13 @@ export type { LoadedConfig, SkippedItem } from "./core/config-loader.js";
 export { SessionLogger, rotateSessions } from "./core/session-log.js";
 export type { SessionRecord, SessionLoggerOptions, } from "./core/session-log.js";
 export { contract, ContractBuilder } from "./contract.js";
-export { createJudge, LlmJudgeEvaluator, ToneEvaluator, RelevanceEvaluator, SemanticPiiFreeEvaluator, HallucinationFreeEvaluator, ScopeRespectEvaluator, MetricIntegrityEvaluator, InjectionFreeEvaluator, parseScore, } from "./core/sto.js";
+export { parseScore, CloudFeatureError } from "./core/sto.js";
+export { CloudClient, CloudError, readApiKey, readProject, baseUrl, } from "./cloud/client.js";
+export type { PulledRulebook, CloudClientOptions } from "./cloud/client.js";
+export { LEVELS as PRIVACY_LEVELS } from "./cloud/privacy.js";
+export type { PrivacyLevel } from "./cloud/privacy.js";
+export { buildViewModel, newSessionId } from "./cloud/view-model.js";
+export type { RunSpan, ViewModelInput } from "./cloud/view-model.js";
 export type { StoEvaluator, StoContract, StoInput, StoResult, StoContextSnapshot, JudgeClient, JudgeConfig, } from "./core/sto.js";
 /**
  * One det violation, with enough structure to feed into downstream
@@ -61,9 +68,28 @@ export type { StoEvaluator, StoContract, StoInput, StoResult, StoContextSnapshot
  * - ``alternatives`` is an optional list of suggested replacement
  *   actions for blocked / redirected outcomes.
  */
+/**
+ * What the runtime did about one violation, mirroring Python's
+ * ``DetViolation.action``. Every derived verdict property reads this
+ * rather than a separate boolean, so a new outcome cannot be added
+ * without every consumer seeing it.
+ *
+ * ``blocked`` and ``redirected`` both stop the original call and are the
+ * members of the stopping set; ``escalated`` hands the decision to a
+ * human without stopping, and ``observed`` / ``warned`` record only.
+ */
+export type DetAction = "blocked" | "redirected" | "escalated" | "observed" | "warned";
+/** Actions after which the original tool call must NOT run. */
+export declare const STOPPING_ACTIONS: ReadonlySet<DetAction>;
+/** Parity with Python's ``is_stopping_action``. */
+export declare function isStoppingAction(action: DetAction): boolean;
 export interface DetViolation {
     /** Human-readable contract description (``DetFormula.desc``). */
     desc: string;
+    /** What the runtime did. Absent on rows written before this field existed. */
+    action?: DetAction;
+    /** The tool to call instead, set when ``action`` is ``redirected``. */
+    redirectedTo?: string;
     /** Formatted ``"[WOULD-]BLOCKED: agent.tool — det constraint …"``. */
     message: string;
     /** Stable rule identifier (pattern name / contract id). */
@@ -98,13 +124,49 @@ export interface CheckResult {
      */
     detViolations: DetViolation[];
     /**
-     * Sto-pipeline violations — populated by ``guardAfter`` when
-     * stochastic contracts (e.g. ``tone``, ``llm_judge``) are declared
-     * in the yaml and a ``judge:`` block is configured. Empty on a
-     * clean pass or when no sto contracts exist.
+     * Sto-pipeline violations. Not part of this build (the engine is
+     * deterministic-only). Always ``[]`` on the TS SDK (the ctor
+     * rejects yaml sto contracts at load time and never builds a
+     * judge). External subclasses can populate this with results from
+     * stochastic contracts (``tone`` / ``llm_judge`` / ``injection_free``
+     * / ...). Kept on the schema so dashboards / session loggers branch
+     * consistently across both surfaces.
      */
     stoViolations: DetViolation[];
+    /** True when any violation returned an escalate outcome. */
+    escalated: boolean;
+    /** True when any violation returned a redirect outcome. */
+    redirected: boolean;
+    /** The substitute tool named by the first redirect, if any. */
+    redirectedTo?: string;
+    /**
+     * True when the original tool call must NOT run.
+     *
+     * **This is the gate an adapter branches on, not `blocked`.** A
+     * redirect leaves `blocked` false and `allowed` true, because the
+     * agent flow continues down the safe path; a caller reading `blocked`
+     * would run the exact call the contract forbade. Adapters that can
+     * substitute should branch on `redirected` / `redirectedTo` first and
+     * dispatch the safe tool; those that cannot must gate on this, so a
+     * redirect fails closed.
+     */
+    stopOriginal: boolean;
+    /** Det and sto violations together, in that order. */
+    allViolations: DetViolation[];
+    /**
+     * True if any sto violation asked for a retry. Always false in this
+     * build: the engine is deterministic-only and `stoViolations` is
+     * always empty. Present so an adapter written against one runtime
+     * reads the same on the other.
+     */
+    needsRetry: boolean;
 }
+/**
+ * Fill the derived half of a verdict from the violations' actions. One
+ * place, so a new `DetAction` cannot be handled inconsistently across
+ * the several sites that build a `CheckResult`.
+ */
+export declare function deriveVerdict(detViolations: DetViolation[], stoViolations?: DetViolation[]): Pick<CheckResult, "blocked" | "escalated" | "redirected" | "redirectedTo" | "stopOriginal" | "allViolations" | "needsRetry">;
 export type SponsoMode = "enforce" | "observe";
 export interface SponsoOptions {
     /** Logical agent id — used for session log paths. */
@@ -128,7 +190,11 @@ export interface SponsoOptions {
     /**
      * Runtime mode. Precedence (matches the Python SDK):
      *
-     *     SPONSIO_MODE env  >  ctor arg  >  yaml runtime.mode  >  "observe"
+     *     SPONSIO_MODE env  >  ctor arg  >  yaml runtime.mode
+     *       >  yaml defaults.mode  >  yaml top-level mode:  >  "observe"
+     *
+     * A contract may also carry its own `mode:` in yaml, which overrides
+     * whatever the global resolution lands on — for that contract alone.
      *
      * ``observe`` (the default) logs every would-have-blocked decision
      * to ``~/.sponsio/sessions/<agent_id>/*.jsonl`` without actually
@@ -146,11 +212,13 @@ export interface SponsoOptions {
     /** Override session log base dir (tests / alternative layouts). */
     sessionLogBaseDir?: string;
     /**
-     * Judge config for the sto pipeline. Either a plain config object
-     * (provider / model / apiKey / baseUrl / fallbackMode) or a
-     * pre-built ``JudgeClient``. Falls through to the yaml ``judge:``
-     * block if the ctor arg is omitted. When no sto contracts exist,
-     * the judge is never contacted.
+     * Judge config for the sto pipeline. **Not supported in this build**
+     * (the engine is deterministic-only). Either a plain config object
+     * (provider / model / apiKey / baseUrl / fallbackMode) or a pre-built
+     * ``JudgeClient``. The TS SDK accepts the option for shared-yaml
+     * compatibility but never constructs a judge: passing this surfaces
+     * a warning via the skipped-items path and the field is otherwise
+     * ignored.
      */
     judge?: JudgeConfig | JudgeClient;
 }
@@ -159,8 +227,6 @@ export declare class Sponsio {
     readonly mode: SponsoMode;
     private _contracts;
     private _stoContracts;
-    private _judge;
-    private _judgeFallback;
     private _stoContext;
     private _trace;
     private _state;
@@ -168,7 +234,45 @@ export declare class Sponsio {
     private _violations;
     private _logger;
     private _turnSpans;
+    private _runSpans;
+    private _sessionId;
+    private _startedAt;
+    private _rulebookStamp;
     constructor(options?: SponsoOptions);
+    /**
+     * Predicates whose truth depends on the *contents* of a tool call's
+     * arguments. If a call arrives with no arguments, none of these keys is
+     * written and the evaluator reads a missing key as false, which makes
+     * ``argBlacklist`` (``!arg_field_has(...)``) report "satisfied" for a
+     * call nothing looked at. Mirrors Python's
+     * ``BaseGuard._ARG_SHAPED_PREDICATES``.
+     */
+    private static readonly ARG_SHAPED_PREDICATES;
+    /** Canonical names of the tools some contract reads the arguments of. */
+    private _toolsNeedingArgs;
+    /** ``[tool, field]`` pairs some ``arg_numeric`` rule reads. */
+    private _numericRuleTargets;
+    /**
+     * Refuse a call whose argument rules cannot be evaluated.
+     *
+     * Two cases, both of which used to read as "not violated":
+     *
+     * - The call arrived with no arguments (``{}``, ``undefined``, ``null``)
+     *   but some rule reads this tool's arguments. An adapter that loses the
+     *   arguments, a partial streamed call or a malformed payload all land
+     *   here, and every argument check would pass vacuously.
+     * - A field an ``arg_numeric`` rule bounds is present but is not a
+     *   number (``"five thousand"``). Grounding leaves ``arg_numeric`` unset
+     *   and the evaluator reads the gap as 0, which passes every upper
+     *   bound. An absent field is left alone: CLI-flag and positional rules
+     *   on ``Bash`` legitimately see calls without their flag.
+     *
+     * ``SPONSIO_ALLOW_MISSING_ARGS=1`` restores the permissive behaviour.
+     * Mirrors Python ``BaseGuard._args_unevaluable`` and
+     * ``_unreadable_numeric_arg``; both block under rule id
+     * ``args:unevaluable``.
+     */
+    private _unevaluableArgs;
     /**
      * Check a tool call against contracts before execution.
      *
@@ -195,6 +299,28 @@ export declare class Sponsio {
     turnSpans(): AgentTurnSpan[];
     /** Drop accumulated turn spans (used between sessions in tests). */
     resetSession(): void;
+    /**
+     * This run, in the shape the cloud stores.
+     *
+     * Exposed so a caller can see exactly what would be uploaded before
+     * uploading anything, which is the question a customer under a data
+     * agreement asks first.
+     */
+    viewModel(): Record<string, unknown>;
+    /**
+     * Upload this run.
+     *
+     * Best-effort by construction: it resolves false rather than throwing,
+     * because losing telemetry must never change what an agent does, and a
+     * rejected upload at the end of a run is not a reason to fail the run.
+     * Silent only about the network; a misconfiguration is worth saying
+     * once, since the symptom otherwise is a customer with no runs and no
+     * explanation.
+     */
+    uploadSession(opts?: {
+        project?: string | null;
+        client?: CloudClient;
+    }): Promise<boolean>;
     /**
      * Render the end-of-session view to ``out`` (defaults to stderr) —
      * banner, contracts armed, trace tree, verdict, perf, CTA. Mirrors
@@ -212,35 +338,103 @@ export declare class Sponsio {
     }): void;
     /** Deep-copy the grounding state so it can be restored on a blocked call. */
     private _snapshotState;
+    /**
+     * Push external facts into the grounding context. Mirrors Python's
+     * ``BaseGuard.observe_context`` — every subsequent event sees the
+     * keys as ``ctx(k, v)`` atoms, so contracts like
+     * ``ctx_required("wire", "caller_id", ["alice"])`` can fire.
+     *
+     * Emits a synthetic ``context_update`` event into the trace so
+     * patterns that anchor on the moment a fact was set (notably
+     * ``time_since(ctx(approval.role, alice))``) start their clock here.
+     */
+    observeContext(ctx: Record<string, unknown>): void;
+    /**
+     * Convenience helper for the approval-active gate: pushes
+     * ``approval.role`` / ``approval.decision`` (+ optional ``approver``
+     * / ``reason``) via ``observeContext``. Pairs with the
+     * ``approval_active`` pattern.
+     */
+    observeApproval(opts: {
+        role: string;
+        decision?: "allow" | "deny";
+        approver?: string;
+        reason?: string;
+    }): void;
+    /**
+     * Record an LLM response into the trace. Drives ``max_length``,
+     * ``no_pii``, ``no_keywords`` (any pattern that grounds against
+     * ``llm_said`` / ``response_words`` / ``response_chars``). Mirrors
+     * the Python ``llm_response`` event path.
+     *
+     * Returns a ``CheckResult`` so callers can branch on observe-mode
+     * violations the same way they branch on ``guardBefore``. In
+     * enforce mode, ``blocked: true`` rolls back the synthetic event.
+     */
+    /**
+     * Record a claim-verification verdict in the trace and check the
+     * contracts that reference it.
+     *
+     * Grounds `claim_emitted(pred)`, `evidence_verdict(pred, V)` and
+     * `evidence_action(pred, a)` at one timestep, so contracts built from
+     * `claimRequiresEvidence` / `underdeterminedMustClarify` can decide.
+     * No verdict is computed here: the atoms restate what
+     * `/v1/evidence/verify` answered.
+     *
+     * Parity with feeding `EvidenceResult.to_event()` through Python's
+     * trace path.
+     */
+    observeEvidence(predicate: string, verdict: string, action: string): CheckResult;
+    observeResponse(content: string, opts?: {
+        segment?: string;
+    }): CheckResult;
+    /**
+     * Check one synthetic (non-tool-call) event against every contract.
+     *
+     * The output lane and the evidence lane both push an event that is not
+     * a tool call and then judge the trace. Sharing the body keeps their
+     * verdicts identical: a second copy is how one lane ends up with a
+     * rollback the other lacks.
+     *
+     * `label` names the subject in violation messages and session logs.
+     */
+    private _checkSynthetic;
     private _logViolations;
     private _logAllow;
     /**
-     * Record tool output after execution and run the sto pipeline.
+     * Record tool output after execution.
      *
-     * Returns a ``CheckResult`` whose ``stoViolations`` carries any
-     * stochastic rule failures (``tone`` / ``llm_judge``). When no sto
-     * contracts are declared the method returns synchronously in
-     * effect (the ``Promise`` resolves on the microtask queue) and
-     * never contacts the judge LLM.
+     * This build ships **no sto pipeline** (the engine is deterministic-only).
+     * Stochastic (LLM-judged) atoms are the extension point that would
+     * populate ``stoViolations``; with no external implementation and no
+     * sto contracts loaded (sto entries in yaml are rejected at config
+     * load), ``stoViolations`` is always ``[]`` and ``allowed: true``.
      *
-     * In **observe mode** violations are logged but the method still
-     * reports ``allowed: true``. In **enforce mode** the first sto
-     * violation flips ``blocked: true`` — but the tool output has
-     * already executed, so the caller is responsible for routing the
-     * result (retry with feedback, redirect to safe, etc.).
+     * The method stays ``async`` for API parity: an external subclass
+     * or wrapper can run the judge pipeline and surface real
+     * ``stoViolations`` without changing the call site. In **enforce
+     * mode** such subclasses can flip ``blocked: true`` on the first
+     * sto violation; the tool output has already executed, so the
+     * caller is responsible for routing the result (retry with
+     * feedback, redirect to safe, etc.).
      */
-    guardAfter(toolName: string, output?: string): Promise<CheckResult>;
-    private _logSto;
+    guardAfter(_toolName: string, _output?: string): Promise<CheckResult>;
     /**
-     * Reset guard state for a new session.
+     * Reset guard state for a new session. Clears the trace, the
+     * grounding accumulators (including ``currentCtx``, ``lastTs``,
+     * event clock), the violation log, and the sto-context snapshot.
      */
     reset(): void;
     /**
-     * Stash per-turn context for the sto pipeline. Atoms that need
-     * grounding — ``relevance`` (``query``), ``hallucination_free``
-     * (``source``), ``scope_respect`` (``scope`` override),
-     * ``metric_integrity`` (``history``) — read from this snapshot on
-     * the next ``guardAfter`` call.
+     * Stash per-turn context for the sto pipeline.
+     *
+     * Not supported in this build (the engine is deterministic-only).
+     * Atoms that need grounding (``relevance`` -> ``query``,
+     * ``hallucination_free`` -> ``source``, ``scope_respect`` ->
+     * ``scope`` override, ``metric_integrity`` -> ``history``) would
+     * read from this snapshot on the next ``guardAfter`` call. This
+     * build accepts the call as a no-op so shared agent code can stay
+     * framework-neutral; the snapshot is never consumed.
      *
      * Merges with any previously-set context; pass ``{ query: undefined }``
      * to explicitly clear a field. ``reset()`` clears the whole snapshot.

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAkBH,OAAO,EACL,aAAa,EAKd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAUL,KAAK,WAAW,EAChB,KAAK,WAAW,EAEhB,KAAK,kBAAkB,EAExB,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,YAAY,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACtE,YAAY,EACV,aAAa,EACb,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,WAAW,EACX,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,YAAY;IAC3B,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,YAAY,EAAE,EAC1B,QAAQ,GAAE,MAA6B,GACtC,MAAM,CAUR;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB;;;;OAIG;IACH,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B;;;;;OAKG;IACH,aAAa,EAAE,YAAY,EAAE,CAAC;CAC/B;AAED,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC5B,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,oFAAoF;IACpF,SAAS,CAAC,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC;IAEpC;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;IAElB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,CAAC;CACnC;AAED,qBAAa,OAAO;IAClB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,WAAW,CAAW;IAC9B,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,UAAU,CAAuB;gBAE7B,OAAO,GAAE,aAAkB;IAuFvC;;;;;;;;;;;;OAYG;IACH,0EAA0E;IAC1E,aAAa,IAAI,MAAM,EAAE;IAIzB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,WAAW;IA2F9E;;;;;;OAMG;IACH,SAAS,IAAI,aAAa,EAAE;IAI5B,oEAAoE;IACpE,YAAY,IAAI,IAAI;IAIpB;;;;;OAKG;IACH,aAAa,CAAC,IAAI,GAAE;QAClB,GAAG,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACf,GAAG,IAAI;IAUb,6EAA6E;IAC7E,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,cAAc;IAoBtB,OAAO,CAAC,SAAS;IAYjB;;;;;;;;;;;;;;OAcG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,MAAW,GAClB,OAAO,CAAC,WAAW,CAAC;IA4GvB,OAAO,CAAC,OAAO;IAmCf;;OAEG;IACH,KAAK,IAAI,IAAI;IAUb;;;;;;;;;OASG;IACH,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI;IAIlD;;OAEG;IACH,IAAI,UAAU,IAAI,MAAM,EAAE,CAEzB;IAED;;;OAGG;IACH,OAAO,IAAI,MAAM;IAKjB;;;;;;OAMG;IACH,YAAY,IAAI,IAAI;CAGrB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAsBH,OAAO,EACL,aAAa,EAKd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,WAAW,EAAe,MAAM,mBAAmB,CAAC;AAO7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EAEX,kBAAkB,EAEnB,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,YAAY,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACtE,YAAY,EACV,aAAa,EACb,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EACL,WAAW,EACX,UAAU,EACV,UAAU,EACV,WAAW,EACX,OAAO,GACR,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,MAAM,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC9D,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACrE,YAAY,EACV,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,WAAW,EACX,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;;;;;;;GASG;AACH,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,YAAY,GACZ,WAAW,GACX,UAAU,GACV,QAAQ,CAAC;AAEb,+DAA+D;AAC/D,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,SAAS,CAGlD,CAAC;AAEH,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAE3D;AAED,MAAM,WAAW,YAAY;IAC3B,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,YAAY,EAAE,EAC1B,QAAQ,GAAE,MAA6B,GACtC,MAAM,CAUR;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB;;;;OAIG;IACH,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B;;;;;;;;OAQG;IACH,aAAa,EAAE,YAAY,EAAE,CAAC;IAS9B,4DAA4D;IAC5D,SAAS,EAAE,OAAO,CAAC;IACnB,2DAA2D;IAC3D,UAAU,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,YAAY,EAAE,OAAO,CAAC;IACtB,sDAAsD;IACtD,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,aAAa,EAAE,YAAY,EAAE,EAC7B,aAAa,GAAE,YAAY,EAAO,GACjC,IAAI,CACL,WAAW,EACT,SAAS,GACT,WAAW,GACX,YAAY,GACZ,cAAc,GACd,cAAc,GACd,eAAe,GACf,YAAY,CACf,CAcA;AAED,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC5B,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,oFAAoF;IACpF,SAAS,CAAC,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC;IAEpC;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;;;;;;;;OAYG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;IAElB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,CAAC;CACnC;AAED,qBAAa,OAAO;IAClB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,OAAO,CAAC,UAAU,CAAe;IAIjC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,WAAW,CAAW;IAC9B,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,UAAU,CAAuB;IAKzC,OAAO,CAAC,SAAS,CAAiB;IAClC,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,UAAU,CAAc;IAChC,OAAO,CAAC,cAAc,CAAqB;gBAE/B,OAAO,GAAE,aAAkB;IA8GvC;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAO3C;IAEF,yEAAyE;IACzE,OAAO,CAAC,iBAAiB;IAWzB,+DAA+D;IAC/D,OAAO,CAAC,mBAAmB;IAS3B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,gBAAgB;IAwDxB;;;;;;;;;;;;OAYG;IACH,0EAA0E;IAC1E,aAAa,IAAI,MAAM,EAAE;IAIzB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,WAAW;IA8J9E;;;;;;OAMG;IACH,SAAS,IAAI,aAAa,EAAE;IAI5B,oEAAoE;IACpE,YAAY,IAAI,IAAI;IAOpB;;;;;;OAMG;IACH,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAepC;;;;;;;;;OASG;IACG,aAAa,CACjB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO,GAC3D,OAAO,CAAC,OAAO,CAAC;IAsBnB;;;;;OAKG;IACH,aAAa,CAAC,IAAI,GAAE;QAClB,GAAG,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACf,GAAG,IAAI;IAUb,6EAA6E;IAC7E,OAAO,CAAC,cAAc;IAgBtB;;;;;;;;;OASG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAUlD;;;;;OAKG;IACH,eAAe,CAAC,IAAI,EAAE;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;QAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,IAAI;IAUR;;;;;;;;;OASG;IACH;;;;;;;;;;;;OAYG;IACH,eAAe,CACb,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,WAAW;IASd,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,WAAW;IAS9E;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;IA6FvB,OAAO,CAAC,cAAc;IAoBtB,OAAO,CAAC,SAAS;IAYjB;;;;;;;;;;;;;;;;OAgBG;IACG,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,MAAW,GACnB,OAAO,CAAC,WAAW,CAAC;IAOvB;;;;OAIG;IACH,KAAK,IAAI,IAAI;IAUb;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI;IAIlD;;OAEG;IACH,IAAI,UAAU,IAAI,MAAM,EAAE,CAEzB;IAED;;;OAGG;IACH,OAAO,IAAI,MAAM;IAKjB;;;;;;OAMG;IACH,YAAY,IAAI,IAAI;CAGrB"}