@vauban-org/agent-sdk 0.16.0

package/README.md

@@ -0,0 +1,205 @@
+# @vauban-org/agent-sdk
+
+Vauban agent primitives extracted from Command Center. Provides the core loop, budget tracking, provider routing, HITL approval, permissions, durable execution, and telemetry building blocks.
+
+## Quickstart
+
+```typescript
+import {
+  AgentLoop,
+  createBudgetState,
+  createProviderRouter,
+} from "@vauban-org/agent-sdk";
+
+const router = createProviderRouter({
+  groqApiKey: process.env.GROQ_API_KEY,
+});
+
+const loop = new AgentLoop({
+  agentId: "my-agent",
+  agentVersion: "0.1.0",
+  systemPrompt: "You are a helpful assistant.",
+  provider: router,
+  tools: myToolRegistry,
+  budget: createBudgetState({ maxSteps: 10 }),
+});
+
+const result = await loop.run("Summarise the latest market news.");
+console.log(result.finalMessage);
+```
+
+## Public API
+
+See [CONTRACT.md](./CONTRACT.md) for all signatures and the breaking-change policy.
+
+| Export | Description |
+|--------|-------------|
+| `AgentLoop` | Multi-provider loop (Anthropic + Groq cascade) |
+| `SdkAgentLoop` | Anthropic-direct loop with permission enforcement |
+| `AgentRegistry` | Plugin registration + descriptor validation |
+| `createBudgetState` | Per-run budget counters |
+| `createCoherenceDetector` | Loop/stall detection |
+| `createProviderRouter` | Anthropic → Groq fallback router |
+| `InMemoryApprovalStore` | In-process HITL approval store |
+| `sanitizeExternalInput` | Prompt injection defence |
+| `keepSafeOnly` | Filter + return clean items |
+| `recordOutcome` | OTel span finalisation helper |
+| `createAgentRunTracker` | DB-backed token/cost accounting |
+| `createBullMQRunner` | BullMQ queue/worker/DLQ factory |
+| `AGENT_IDS` | Stable UUIDs per agent archetype |
+| `mapScopesToSdkPermissions` | JWT scope → SdkPermissions |
+
+## Architecture
+
+```
+@vauban-org/agent-sdk
+├── loop/          AgentLoop (minimal-loop) + SdkAgentLoop (sdk-loop)
+├── budget/        AgentBudgetState, CoherenceDetector, compactToolLog
+├── router/        ProviderRouter (Anthropic + Groq)
+├── hitl/          ApprovalChannel interface + InMemoryApprovalStore
+├── permissions/   SdkPermissions, mapScopesToSdkPermissions
+├── safety/        sanitizeExternalInput, keepSafeOnly
+├── tracking/      OTel gen-ai spans + AgentRunTracker
+├── durable/       BullMQRunner (queues, workers, DLQ, flow)
+└── registry/      AgentRegistry + AGENT_IDS
+```
+
+## Trading-NQ Paper Validation (Required Before Live)
+
+Before flipping `TRADING_MODE=live`:
+
+1. Run 3 weeks of `TRADING_MODE=paper` cycles in production env
+2. Verify `net_roi_pct` stable (median > 0 across 21 days)
+3. Verify `slippage_bps` tolerable (P95 < 5 bps)
+4. Founder + RSO sign-off (per `governance/founder-authority.md`)
+
+## Bundle size gates
+
+`size-limit` enforces maximum bundle sizes per entry-point. These are checked automatically on every PR.
+
+| Entry | Limit |
+|-------|-------|
+| `dist/index.js` (core) | 150 KB |
+| `dist/proof/index.js` | 30 KB |
+| `dist/orchestration/ooda/index.js` | 40 KB |
+
+Run locally: `pnpm size`
+
+## Performance benchmarks
+
+Micro-benchmarks for hot paths (AgentLoop.run, tracedPort, ProviderRouter.complete) live in `benchmarks/sdk.bench.ts`. Powered by [tinybench](https://github.com/tinylibs/tinybench).
+
+```bash
+# Run benchmarks + compare vs committed baseline
+pnpm bench:sdk
+
+# Capture a new baseline (after an intentional performance change)
+pnpm bench:baseline
+```
+
+### Updating the baseline after intentional changes
+
+When you make a deliberate change that improves or alters performance:
+
+1. Run `pnpm bench:baseline` locally — this overwrites `benchmarks/baseline.json`.
+2. Review the diff: `git diff packages/agent-sdk/benchmarks/baseline.json`.
+3. Commit `baseline.json` alongside your code change with a message explaining the intentional shift.
+4. PR CI will use the new baseline for subsequent comparisons.
+
+Never update the baseline just to "fix" a regression caused by unintended slowdowns — diagnose and fix those instead.
+
+## Determinism guarantees
+
+- `random.next()` / `random.uuid()` : seedable, deterministic, **NON SECURITY-GRADE**. Use for application logic only.
+- `random.crypto()` / `random.cryptoUuid()` : crypto-strong, **NON REPLAY-SAFE BY DESIGN** (security trumps audit). Calling these during replay throws `CryptoRandomDuringReplayError` in strict mode.
+- `clock.now()` : virtualized via `RecordedClock` during replay.
+- LLM responses replayed via `LLMResponseCache` keyed by SHA-256(canonical({provider, model, messages, temperature, seed})).
+
+Replay proves byte-identical traces when these are virtualized. It does NOT prove LLM provider-side determinism.
+
+## Agentic privacy via HDNT
+
+The `privacy/` module implements the first slice of the Vauban Privacy Protocol
+integration (sprint-576). It provides a TypeScript shim for the Hierarchical
+Deterministic Nullifier Tree (HDNT) derivation paths described in the design docs:
+
+- `vauban-privacy-protocol/docs/research/03-agentic-privacy.md` — agent nullifier hierarchy,
+  delegation-as-Claim pattern.
+- `vauban-privacy-protocol/docs/research/05-cross-domain-nullifiers.md` — HDNT derivation
+  algorithm and cross-domain proof structure.
+
+### Agent nullifier hierarchy
+
+```typescript
+import { deriveAgentNullifier, deriveActionNullifier } from "@vauban-org/agent-sdk";
+
+// N_agent = Poseidon(N_root, agentPubkey)  — unlinkable per agent
+const agentNullifier = deriveAgentNullifier(masterKey, agentPubkey);
+
+// N_action = Poseidon(N_agent, actionId, nonce)  — one-time use
+const actionNullifier = deriveActionNullifier(agentNullifier, actionId, nonce);
+```
+
+### Delegation-as-Claim
+
+```typescript
+import { buildDelegationClaim, isDelegationScopeValid } from "@vauban-org/agent-sdk";
+
+const claim = buildDelegationClaim(parentClaimRef, delegateeNullifier, {
+  allowedActions: ["trade", "report"],
+  expiry: Math.floor(Date.now() / 1000) + 3600,
+});
+// Pass claim.scopeWitness to the Rust HDNT crate for STARK proof generation.
+```
+
+The authoritative Poseidon implementation is in the Rust HDNT crate at
+`vauban-privacy-protocol/crates/hdnt/`. The TypeScript module uses starknet.js
+`hash.computePoseidonHashOnElements` when the `starknet` peer dep is present,
+and a deterministic placeholder otherwise (test/dev only).
+
+### Inter-agent encrypted channels
+
+The `privacy/channel` module (checkpoint 2, sprint-576) provides shielded
+bidirectional communication between agents.
+
+```typescript
+import {
+  establishChannel,
+  sendOverChannel,
+  receiveOverChannel,
+  ChannelError,
+} from "@vauban-org/agent-sdk";
+
+// Sender establishes a channel to the receiver
+const channel = establishChannel(senderSecretKey, receiverPublicKey);
+
+// Encrypt a message with a monotonically increasing nonce
+const msg = sendOverChannel(channel, plaintext, nonceCounter);
+
+// Receiver decrypts — replay and tamper protection built in
+try {
+  const plaintext = receiveOverChannel(channel, msg, lastAcceptedNonce);
+} catch (e) {
+  if (e.message === ChannelError.ReplayedNonce) { /* ... */ }
+  if (e.message === ChannelError.InvalidTag) { /* ... */ }
+  if (e.message === ChannelError.MismatchedChannel) { /* ... */ }
+}
+```
+
+Security properties:
+- **Replay protection**: nonce must be strictly increasing (`ReplayedNonce` error on violation).
+- **Integrity**: HMAC-style Poseidon auth tag; tampered ciphertext triggers `InvalidTag`.
+- **Channel isolation**: `channel_id` mismatch triggers `MismatchedChannel`.
+- **Directional asymmetry**: sender and receiver roles are asymmetric — swapping
+  them produces a different `channel_id` and `shared_secret`.
+
+**STUB notice (ORQ-1)**: Key exchange uses Poseidon-derived shared secret as a
+placeholder for ML-KEM-768 (CRYSTALS-Kyber). Stream cipher uses Poseidon keystream
+as a placeholder for AES-256-GCM or ChaCha20-Poly1305. Not production-ready until
+ORQ-1 replaces both primitives.
+
+## Workspace dep (Command Center)
+
+```json
+"@vauban-org/agent-sdk": "workspace:*"
+```

package/dist/adapters/hitl/memory-state-store.d.ts

@@ -0,0 +1,23 @@
+/**
+ * MemoryHITLStateStore — in-process HITL state store.
+ *
+ * Suitable for tests, local dev, and single-instance deployments.
+ * Multi-instance prod deployments must use PostgresHITLStateStore.
+ *
+ * @public
+ */
+import { type HITLPort, type HITLRequest, type HITLState } from "../../ports/hitl.js";
+export declare class MemoryHITLStateStore implements HITLPort {
+    #private;
+    request(req: HITLRequest): Promise<string>;
+    getState(id: string): Promise<HITLState>;
+    await(id: string, timeoutMs?: number): Promise<HITLState>;
+    resolve(id: string, decision: "approved" | "rejected", by: string): Promise<void>;
+    expire(id: string): Promise<void>;
+    /**
+     * Called by runExpireJob to expire all overdue pending requests.
+     * Not part of HITLPort — called via the _expireOverdue duck-type hook.
+     */
+    _expireOverdue(): Promise<void>;
+}
+//# sourceMappingURL=memory-state-store.d.ts.map

package/dist/adapters/hitl/memory-state-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-state-store.d.ts","sourceRoot":"","sources":["../../../src/adapters/hitl/memory-state-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,SAAS,EAEf,MAAM,qBAAqB,CAAC;AAa7B,qBAAa,oBAAqB,YAAW,QAAQ;;IAG7C,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAK1C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMxC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAkBzD,OAAO,CACX,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,UAAU,GAAG,UAAU,EACjC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC;IAUV,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvC;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;CAUtC"}

package/dist/adapters/hitl/memory-state-store.js

@@ -0,0 +1,72 @@
+/**
+ * MemoryHITLStateStore — in-process HITL state store.
+ *
+ * Suitable for tests, local dev, and single-instance deployments.
+ * Multi-instance prod deployments must use PostgresHITLStateStore.
+ *
+ * @public
+ */
+import { HITLNotFoundError, validateTransition, } from "../../ports/hitl.js";
+const POLL_INTERVAL_MS = 100;
+export class MemoryHITLStateStore {
+    #store = new Map();
+    async request(req) {
+        this.#store.set(req.id, { request: req, state: "pending" });
+        return req.id;
+    }
+    async getState(id) {
+        const entry = this.#store.get(id);
+        if (!entry)
+            throw new HITLNotFoundError(id);
+        return entry.state;
+    }
+    async await(id, timeoutMs) {
+        const deadline = timeoutMs != null ? Date.now() + timeoutMs : Infinity;
+        for (;;) {
+            const state = await this.getState(id);
+            if (state !== "pending")
+                return state;
+            if (Date.now() >= deadline)
+                return state;
+            // Wait one poll tick (or remaining budget, whichever is shorter)
+            const remaining = deadline - Date.now();
+            const wait = Math.min(POLL_INTERVAL_MS, remaining > 0 ? remaining : 0);
+            await new Promise((resolve) => setTimeout(resolve, wait));
+            // Re-check deadline after sleeping
+            if (Date.now() >= deadline)
+                return await this.getState(id);
+        }
+    }
+    async resolve(id, decision, by) {
+        const entry = this.#store.get(id);
+        if (!entry)
+            throw new HITLNotFoundError(id);
+        validateTransition(entry.state, decision);
+        entry.state = decision;
+        entry.decision = decision;
+        entry.decidedBy = by;
+        entry.decidedAt = new Date();
+    }
+    async expire(id) {
+        const entry = this.#store.get(id);
+        if (!entry)
+            throw new HITLNotFoundError(id);
+        validateTransition(entry.state, "expired");
+        entry.state = "expired";
+    }
+    /**
+     * Called by runExpireJob to expire all overdue pending requests.
+     * Not part of HITLPort — called via the _expireOverdue duck-type hook.
+     */
+    async _expireOverdue() {
+        const now = new Date();
+        for (const [id, entry] of this.#store.entries()) {
+            if (entry.state === "pending" && new Date(entry.request.deadline) < now) {
+                entry.state = "expired";
+                // Best-effort: if validateTransition would throw, we already checked state=pending above
+                void id; // keep the binding in scope
+            }
+        }
+    }
+}
+//# sourceMappingURL=memory-state-store.js.map

package/dist/adapters/hitl/memory-state-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-state-store.js","sourceRoot":"","sources":["../../../src/adapters/hitl/memory-state-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,iBAAiB,EAIjB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAW7B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,OAAO,oBAAoB;IACtB,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEjD,KAAK,CAAC,OAAO,CAAC,GAAgB;QAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,SAAkB;QACxC,MAAM,QAAQ,GAAG,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAEvE,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACtC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAEzC,iEAAiE;YACjE,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAEhE,mCAAmC;YACnC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CACX,EAAU,EACV,QAAiC,EACjC,EAAU;QAEV,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC5C,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1C,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;QACvB,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC1B,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC;QACrB,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC5C,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,EAAE,CAAC;gBACxE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;gBACxB,yFAAyF;gBACzF,KAAK,EAAE,CAAC,CAAC,4BAA4B;YACvC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/adapters/hitl/postgres-state-store.d.ts

@@ -0,0 +1,29 @@
+/**
+ * PostgresHITLStateStore — Postgres-backed HITL state store.
+ *
+ * Uses SELECT FOR UPDATE for atomic state transitions (no lost-update races).
+ * Requires the hitl_requests table from migration 039_hitl_requests.sql.
+ *
+ * Constructor: { db: DbPort } — compatible with pg.Pool / pg.Client.
+ *
+ * @public
+ */
+import type { DbPort } from "../../ports/db.js";
+import { type HITLPort, type HITLRequest, type HITLState } from "../../ports/hitl.js";
+export declare class PostgresHITLStateStore implements HITLPort {
+    #private;
+    constructor({ db }: {
+        db: DbPort;
+    });
+    request(req: HITLRequest): Promise<string>;
+    getState(id: string): Promise<HITLState>;
+    await(id: string, timeoutMs?: number): Promise<HITLState>;
+    resolve(id: string, decision: "approved" | "rejected", by: string): Promise<void>;
+    expire(id: string): Promise<void>;
+    /**
+     * Expire all pending requests whose deadline has passed.
+     * Called by runExpireJob via the _expireOverdue duck-type hook.
+     */
+    _expireOverdue(): Promise<void>;
+}
+//# sourceMappingURL=postgres-state-store.d.ts.map

package/dist/adapters/hitl/postgres-state-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-state-store.d.ts","sourceRoot":"","sources":["../../../src/adapters/hitl/postgres-state-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,SAAS,EAEf,MAAM,qBAAqB,CAAC;AAO7B,qBAAa,sBAAuB,YAAW,QAAQ;;gBAGzC,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE;IAI5B,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB1C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAUxC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAiBzD,OAAO,CACX,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,UAAU,GAAG,UAAU,EACjC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC;IA2BV,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBvC;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;CAQtC"}

package/dist/adapters/hitl/postgres-state-store.js

@@ -0,0 +1,103 @@
+/**
+ * PostgresHITLStateStore — Postgres-backed HITL state store.
+ *
+ * Uses SELECT FOR UPDATE for atomic state transitions (no lost-update races).
+ * Requires the hitl_requests table from migration 039_hitl_requests.sql.
+ *
+ * Constructor: { db: DbPort } — compatible with pg.Pool / pg.Client.
+ *
+ * @public
+ */
+import { HITLNotFoundError, validateTransition, } from "../../ports/hitl.js";
+export class PostgresHITLStateStore {
+    #db;
+    constructor({ db }) {
+        this.#db = db;
+    }
+    async request(req) {
+        await this.#db.query(`INSERT INTO hitl_requests
+         (id, agent_source, question, context, options, channel, state, deadline, tenant_id)
+       VALUES ($1, $2, $3, $4, $5, $6, 'pending', $7, $8)`, [
+            req.id,
+            req.agentSource,
+            req.question,
+            JSON.stringify(req.context),
+            req.options,
+            req.channel,
+            req.deadline,
+            req.tenantId ?? null,
+        ]);
+        return req.id;
+    }
+    async getState(id) {
+        const result = await this.#db.query(`SELECT id, state FROM hitl_requests WHERE id = $1`, [id]);
+        const row = result.rows[0];
+        if (!row)
+            throw new HITLNotFoundError(id);
+        return row.state;
+    }
+    async await(id, timeoutMs) {
+        const deadline = timeoutMs != null ? Date.now() + timeoutMs : Infinity;
+        const POLL_MS = 500;
+        for (;;) {
+            const state = await this.getState(id);
+            if (state !== "pending")
+                return state;
+            if (Date.now() >= deadline)
+                return state;
+            const remaining = deadline - Date.now();
+            const wait = Math.min(POLL_MS, remaining > 0 ? remaining : 0);
+            await new Promise((resolve) => setTimeout(resolve, wait));
+            if (Date.now() >= deadline)
+                return await this.getState(id);
+        }
+    }
+    async resolve(id, decision, by) {
+        await this.#db.query("BEGIN", []);
+        try {
+            const result = await this.#db.query(`SELECT id, state FROM hitl_requests WHERE id = $1 FOR UPDATE`, [id]);
+            const row = result.rows[0];
+            if (!row) {
+                await this.#db.query("ROLLBACK", []);
+                throw new HITLNotFoundError(id);
+            }
+            validateTransition(row.state, decision);
+            await this.#db.query(`UPDATE hitl_requests
+            SET state = $1, decision = $2, decided_by = $3, decided_at = NOW()
+          WHERE id = $4`, [decision, decision, by, id]);
+            await this.#db.query("COMMIT", []);
+        }
+        catch (err) {
+            await this.#db.query("ROLLBACK", []).catch(() => undefined);
+            throw err;
+        }
+    }
+    async expire(id) {
+        await this.#db.query("BEGIN", []);
+        try {
+            const result = await this.#db.query(`SELECT id, state FROM hitl_requests WHERE id = $1 FOR UPDATE`, [id]);
+            const row = result.rows[0];
+            if (!row) {
+                await this.#db.query("ROLLBACK", []);
+                throw new HITLNotFoundError(id);
+            }
+            validateTransition(row.state, "expired");
+            await this.#db.query(`UPDATE hitl_requests SET state = 'expired' WHERE id = $1`, [id]);
+            await this.#db.query("COMMIT", []);
+        }
+        catch (err) {
+            await this.#db.query("ROLLBACK", []).catch(() => undefined);
+            throw err;
+        }
+    }
+    /**
+     * Expire all pending requests whose deadline has passed.
+     * Called by runExpireJob via the _expireOverdue duck-type hook.
+     */
+    async _expireOverdue() {
+        await this.#db.query(`UPDATE hitl_requests
+          SET state = 'expired'
+        WHERE state = 'pending' AND deadline < NOW()`, []);
+    }
+}
+//# sourceMappingURL=postgres-state-store.js.map

package/dist/adapters/hitl/postgres-state-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-state-store.js","sourceRoot":"","sources":["../../../src/adapters/hitl/postgres-state-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACL,iBAAiB,EAIjB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAO7B,MAAM,OAAO,sBAAsB;IACxB,GAAG,CAAS;IAErB,YAAY,EAAE,EAAE,EAAkB;QAChC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAgB;QAC5B,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAClB;;0DAEoD,EACpD;YACE,GAAG,CAAC,EAAE;YACN,GAAG,CAAC,WAAW;YACf,GAAG,CAAC,QAAQ;YACZ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAC3B,GAAG,CAAC,OAAO;YACX,GAAG,CAAC,OAAO;YACX,GAAG,CAAC,QAAQ;YACZ,GAAG,CAAC,QAAQ,IAAI,IAAI;SACrB,CACF,CAAC;QACF,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CACjC,mDAAmD,EACnD,CAAC,EAAE,CAAC,CACL,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,SAAkB;QACxC,MAAM,QAAQ,GAAG,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvE,MAAM,OAAO,GAAG,GAAG,CAAC;QAEpB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACtC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAEzC,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAEhE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CACX,EAAU,EACV,QAAiC,EACjC,EAAU;QAEV,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CACjC,8DAA8D,EAC9D,CAAC,EAAE,CAAC,CACL,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACrC,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;YACD,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAExC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAClB;;wBAEgB,EAChB,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAC7B,CAAC;YACF,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CACjC,8DAA8D,EAC9D,CAAC,EAAE,CAAC,CACL,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACrC,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;YACD,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAEzC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAClB,0DAA0D,EAC1D,CAAC,EAAE,CAAC,CACL,CAAC;YACF,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAClB;;qDAE+C,EAC/C,EAAE,CACH,CAAC;IACJ,CAAC;CACF"}

package/dist/adapters/llm/anthropic-direct.d.ts

@@ -0,0 +1,28 @@
+/**
+ * AnthropicDirectAdapter — wraps @anthropic-ai/sdk for direct API access.
+ *
+ * BYOM: defaultModel is a constructor param default only.
+ * No model string is hardcoded at module scope.
+ *
+ * Maps Anthropic SDK response to ChatResponse canonical format.
+ */
+import Anthropic from "@anthropic-ai/sdk";
+import type { ChatRequest, ChatResponse, LLMProviderPort, StreamDelta } from "../../ports/llm-provider.js";
+export interface AnthropicDirectAdapterConfig {
+    apiKey: string;
+    /** Default model to use when ChatRequest.model is not specified. */
+    defaultModel?: string;
+    /** For testing only — inject a pre-built client instead of creating one. */
+    _clientOverride?: Anthropic;
+}
+export declare class AnthropicDirectAdapter implements LLMProviderPort {
+    private readonly client;
+    private readonly defaultModel;
+    constructor(config: AnthropicDirectAdapterConfig);
+    estimateCost(req: ChatRequest): {
+        usd: number;
+    };
+    complete(req: ChatRequest): Promise<ChatResponse>;
+    stream(req: ChatRequest): AsyncIterable<StreamDelta>;
+}
+//# sourceMappingURL=anthropic-direct.d.ts.map

package/dist/adapters/llm/anthropic-direct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic-direct.d.ts","sourceRoot":"","sources":["../../../src/adapters/llm/anthropic-direct.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,KAAK,EACV,WAAW,EACX,YAAY,EAEZ,eAAe,EACf,WAAW,EACZ,MAAM,6BAA6B,CAAC;AAErC,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,SAAS,CAAC;CAC7B;AA0BD,qBAAa,sBAAuB,YAAW,eAAe;IAC5D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,MAAM,EAAE,4BAA4B;IAOhD,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE;IAUzC,QAAQ,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IA+EhD,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;CA6D5D"}

package/dist/adapters/llm/anthropic-direct.js

@@ -0,0 +1,163 @@
+/**
+ * AnthropicDirectAdapter — wraps @anthropic-ai/sdk for direct API access.
+ *
+ * BYOM: defaultModel is a constructor param default only.
+ * No model string is hardcoded at module scope.
+ *
+ * Maps Anthropic SDK response to ChatResponse canonical format.
+ */
+import Anthropic from "@anthropic-ai/sdk";
+// Pricing approximation for cost estimation (input/output per token in USD)
+const INPUT_USD_PER_TOKEN = 3 / 1_000_000; // $3 / MTok
+const OUTPUT_USD_PER_TOKEN = 15 / 1_000_000; // $15 / MTok
+function estimateInputTokens(req) {
+    const chars = req.messages.reduce((sum, m) => sum + m.content.length, 0);
+    return Math.ceil(chars / 4);
+}
+function mapStopReason(raw) {
+    switch (raw) {
+        case "end_turn":
+            return "stop";
+        case "max_tokens":
+            return "length";
+        case "tool_use":
+            return "tool";
+        default:
+            return "error";
+    }
+}
+export class AnthropicDirectAdapter {
+    client;
+    defaultModel;
+    constructor(config) {
+        this.client =
+            config._clientOverride ?? new Anthropic({ apiKey: config.apiKey });
+        // BYOM: default only in adapter, never exposed in port
+        this.defaultModel = config.defaultModel ?? "claude-sonnet-4-6";
+    }
+    estimateCost(req) {
+        const inputTokens = estimateInputTokens(req);
+        const maxOutputTokens = req.maxTokens ?? 512;
+        return {
+            usd: inputTokens * INPUT_USD_PER_TOKEN +
+                maxOutputTokens * OUTPUT_USD_PER_TOKEN,
+        };
+    }
+    async complete(req) {
+        const model = req.model ?? this.defaultModel;
+        // Extract system message (Anthropic API separates system from messages)
+        const systemMessages = req.messages.filter((m) => m.role === "system");
+        const conversationMessages = req.messages.filter((m) => m.role !== "system");
+        const systemPrompt = systemMessages.length > 0
+            ? systemMessages.map((m) => m.content).join("\n")
+            : undefined;
+        if (req.abortSignal?.aborted) {
+            return {
+                content: "",
+                usage: { inputTokens: 0, outputTokens: 0 },
+                model,
+                finishReason: "error",
+            };
+        }
+        try {
+            const params = {
+                model,
+                max_tokens: req.maxTokens ?? 1024,
+                messages: conversationMessages.map((m) => ({
+                    role: m.role,
+                    content: m.content,
+                })),
+            };
+            if (systemPrompt !== undefined) {
+                params.system = systemPrompt;
+            }
+            if (req.temperature !== undefined) {
+                params.temperature = req.temperature;
+            }
+            const response = await this.client.messages.create(params);
+            const rawUsage = response.usage;
+            const usage = {
+                inputTokens: rawUsage.input_tokens,
+                outputTokens: rawUsage.output_tokens,
+                costUsd: rawUsage.input_tokens * INPUT_USD_PER_TOKEN +
+                    rawUsage.output_tokens * OUTPUT_USD_PER_TOKEN,
+            };
+            const textBlock = response.content.find((b) => b.type === "text");
+            const content = textBlock?.type === "text" ? textBlock.text : "";
+            return {
+                content,
+                usage,
+                model: response.model,
+                finishReason: mapStopReason(response.stop_reason),
+            };
+        }
+        catch (err) {
+            if (req.abortSignal?.aborted) {
+                return {
+                    content: "",
+                    usage: { inputTokens: 0, outputTokens: 0 },
+                    model,
+                    finishReason: "error",
+                };
+            }
+            // Map Anthropic errors — never rethrow, return error finishReason
+            return {
+                content: "",
+                usage: { inputTokens: 0, outputTokens: 0 },
+                model,
+                finishReason: "error",
+            };
+        }
+    }
+    async *stream(req) {
+        const model = req.model ?? this.defaultModel;
+        const systemMessages = req.messages.filter((m) => m.role === "system");
+        const conversationMessages = req.messages.filter((m) => m.role !== "system");
+        const systemPrompt = systemMessages.length > 0
+            ? systemMessages.map((m) => m.content).join("\n")
+            : undefined;
+        if (req.abortSignal?.aborted) {
+            yield { delta: "", usage: { inputTokens: 0, outputTokens: 0 } };
+            return;
+        }
+        try {
+            const params = {
+                model,
+                max_tokens: req.maxTokens ?? 1024,
+                messages: conversationMessages.map((m) => ({
+                    role: m.role,
+                    content: m.content,
+                })),
+            };
+            if (systemPrompt !== undefined) {
+                params.system = systemPrompt;
+            }
+            if (req.temperature !== undefined) {
+                params.temperature = req.temperature;
+            }
+            const stream = this.client.messages.stream(params);
+            for await (const event of stream) {
+                if (req.abortSignal?.aborted)
+                    break;
+                if (event.type === "content_block_delta" &&
+                    event.delta.type === "text_delta") {
+                    yield { delta: event.delta.text };
+                }
+                if (event.type === "message_delta" && event.usage) {
+                    yield {
+                        delta: "",
+                        usage: {
+                            inputTokens: 0,
+                            outputTokens: event.usage.output_tokens,
+                        },
+                    };
+                }
+            }
+        }
+        catch {
+            // Stream error — yield empty and return
+            yield { delta: "", usage: { inputTokens: 0, outputTokens: 0 } };
+        }
+    }
+}
+//# sourceMappingURL=anthropic-direct.js.map

package/dist/adapters/llm/anthropic-direct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic-direct.js","sourceRoot":"","sources":["../../../src/adapters/llm/anthropic-direct.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAiB1C,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,YAAY;AACvD,MAAM,oBAAoB,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,aAAa;AAE1D,SAAS,mBAAmB,CAAC,GAAgB;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CACpB,GAA8B;IAE9B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,UAAU;YACb,OAAO,MAAM,CAAC;QAChB,KAAK,YAAY;YACf,OAAO,QAAQ,CAAC;QAClB,KAAK,UAAU;YACb,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAAY;IAClB,YAAY,CAAS;IAEtC,YAAY,MAAoC;QAC9C,IAAI,CAAC,MAAM;YACT,MAAM,CAAC,eAAe,IAAI,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,uDAAuD;QACvD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,mBAAmB,CAAC;IACjE,CAAC;IAED,YAAY,CAAC,GAAgB;QAC3B,MAAM,WAAW,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,eAAe,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC;QAC7C,OAAO;YACL,GAAG,EACD,WAAW,GAAG,mBAAmB;gBACjC,eAAe,GAAG,oBAAoB;SACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAgB;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;QAE7C,wEAAwE;QACxE,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACvE,MAAM,oBAAoB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAC3B,CAAC;QAEF,MAAM,YAAY,GAChB,cAAc,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACjD,CAAC,CAAC,SAAS,CAAC;QAEhB,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;gBAC1C,KAAK;gBACL,YAAY,EAAE,OAAO;aACtB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAuD;gBACjE,KAAK;gBACL,UAAU,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;gBACjC,QAAQ,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACzC,IAAI,EAAE,CAAC,CAAC,IAA4B;oBACpC,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC,CAAC;aACJ,CAAC;YAEF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;YAC/B,CAAC;YACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;YACvC,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAE3D,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC;YAChC,MAAM,KAAK,GAAc;gBACvB,WAAW,EAAE,QAAQ,CAAC,YAAY;gBAClC,YAAY,EAAE,QAAQ,CAAC,aAAa;gBACpC,OAAO,EACL,QAAQ,CAAC,YAAY,GAAG,mBAAmB;oBAC3C,QAAQ,CAAC,aAAa,GAAG,oBAAoB;aAChD,CAAC;YAEF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,SAAS,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAEjE,OAAO;gBACL,OAAO;gBACP,KAAK;gBACL,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,YAAY,EAAE,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC;aAClD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;gBAC7B,OAAO;oBACL,OAAO,EAAE,EAAE;oBACX,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;oBAC1C,KAAK;oBACL,YAAY,EAAE,OAAO;iBACtB,CAAC;YACJ,CAAC;YACD,kEAAkE;YAClE,OAAO;gBACL,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;gBAC1C,KAAK;gBACL,YAAY,EAAE,OAAO;aACtB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,GAAgB;QAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;QAE7C,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACvE,MAAM,oBAAoB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAC3B,CAAC;QACF,MAAM,YAAY,GAChB,cAAc,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACjD,CAAC,CAAC,SAAS,CAAC;QAEhB,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YAC7B,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;YAChE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAsD;gBAChE,KAAK;gBACL,UAAU,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;gBACjC,QAAQ,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACzC,IAAI,EAAE,CAAC,CAAC,IAA4B;oBACpC,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC,CAAC;aACJ,CAAC;YAEF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;YAC/B,CAAC;YACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;YACvC,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAEnD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO;oBAAE,MAAM;gBAEpC,IACE,KAAK,CAAC,IAAI,KAAK,qBAAqB;oBACpC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,EACjC,CAAC;oBACD,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpC,CAAC;gBAED,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBAClD,MAAM;wBACJ,KAAK,EAAE,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,CAAC;4BACd,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa;yBACxC;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;YACxC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;CACF"}