@vauban-org/agent-sdk 0.16.0

package/dist/trace/strict-pii-detector.js

@@ -0,0 +1,144 @@
+/**
+ * STRICT_PII_DETECTOR — ultra-conservative, opt-in PIIDetector.
+ *
+ * Detects:
+ *   - Email addresses (RFC 5321 — local-part + domain + TLD ≥ 2 chars)
+ *   - IBANs (ISO 13616 — country code + check digits mod-97 + BBAN)
+ *
+ * Intentionally NOT detecting:
+ *   - Phone numbers: catastrophic false-positive rate on amounts and IDs.
+ *   - SSN / NSS: locale-dependent patterns with high FP on numeric sequences.
+ *
+ * Activation:
+ *   This detector is NEVER activated by defaultPolicy() (R8-I3).
+ *   Opt in explicitly:
+ *     { kind: 'redact', piiFields: ['email'], piiDetector: STRICT_PII_DETECTOR }
+ *
+ * @module trace/strict-pii-detector
+ */
+// ─── Email (RFC 5321) ────────────────────────────────────────────────────────
+//
+// Local-part: printable ASCII except @, <, >, (, ), [, ], :, ;, \, ,, .
+//   except that . is allowed when not leading, trailing, or consecutive.
+// Domain: standard hostname labels (alphanum + hyphen, no leading/trailing hyphen).
+// TLD: at least 2 alpha chars (no all-numeric TLDs accepted).
+//
+// We intentionally reject IP-literal domains ([1.2.3.4]) and quoted strings
+// in the local part — they are valid RFC 5321 but extremely rare in practice
+// and high false-positive risk.
+const EMAIL_REGEX = /^[a-zA-Z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-zA-Z0-9!#$%&'*+/=?^_`{|}~-]+)*@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*\.[a-zA-Z]{2,}$/;
+function isEmail(value) {
+    return EMAIL_REGEX.test(value.trim());
+}
+// ─── IBAN (ISO 13616) ────────────────────────────────────────────────────────
+//
+// Structure: CC DD BBAN
+//   CC = 2-letter ISO 3166-1 alpha-2 country code
+//   DD = 2-digit check digits
+//   BBAN = country-specific (alphanumeric, variable length)
+// Total length: 15–34 characters (no spaces in canonical form).
+//
+// Checksum (mod-97-10):
+//   1. Move CC + DD to the end.
+//   2. Replace each letter with its decimal value (A=10, B=11, ..., Z=35).
+//   3. Compute the resulting integer mod 97.
+//   4. Valid IBAN → result === 1.
+//
+// Country codes: hardcoded list of all ISO 13616 registered countries (2026-04-30).
+// We reject any 2-letter prefix NOT in this list to avoid false positives.
+const IBAN_COUNTRY_CODES = new Set([
+    "AD", "AE", "AL", "AT", "AZ",
+    "BA", "BE", "BG", "BH", "BR", "BY",
+    "CH", "CR", "CY", "CZ",
+    "DE", "DK", "DO",
+    "EE", "EG", "ES",
+    "FI", "FK", "FO", "FR",
+    "GB", "GE", "GI", "GL", "GR", "GT",
+    "HR", "HU",
+    "IE", "IL", "IQ", "IS",
+    "IT",
+    "JO",
+    "KW", "KZ",
+    "LB", "LC", "LI", "LT", "LU", "LV",
+    "LY",
+    "MC", "MD", "ME", "MK", "MN", "MR", "MT", "MU",
+    "NI", "NL", "NO",
+    "PK", "PL", "PS", "PT",
+    "QA",
+    "RO", "RS", "RU",
+    "SA", "SC", "SD", "SE", "SI", "SK", "SM", "SO", "ST", "SV",
+    "TL", "TN", "TR",
+    "UA",
+    "VA", "VG",
+    "XK",
+    "YE",
+]);
+/** Strip whitespace and uppercase for canonical form. */
+function normaliseIban(raw) {
+    return raw.replace(/\s/g, "").toUpperCase();
+}
+/**
+ * Compute mod-97 of a large numeric string represented as a string.
+ * We process 9 digits at a time to avoid BigInt or floating-point overflow.
+ */
+function mod97(numericStr) {
+    let remainder = 0;
+    for (let i = 0; i < numericStr.length; i += 9) {
+        const chunk = String(remainder) + numericStr.slice(i, i + 9);
+        remainder = parseInt(chunk, 10) % 97;
+    }
+    return remainder;
+}
+/**
+ * Convert IBAN characters to their numeric equivalents:
+ *   A=10, B=11, …, Z=35 ; digits stay as-is.
+ */
+function ibanToNumericString(iban) {
+    let result = "";
+    for (const ch of iban) {
+        const code = ch.charCodeAt(0);
+        if (code >= 65 && code <= 90) {
+            // A-Z → 10-35
+            result += String(code - 55);
+        }
+        else {
+            result += ch;
+        }
+    }
+    return result;
+}
+function isIban(value) {
+    const normalised = normaliseIban(value);
+    // Length check: 15–34 chars
+    if (normalised.length < 15 || normalised.length > 34)
+        return false;
+    // Country code check
+    const countryCode = normalised.slice(0, 2);
+    if (!IBAN_COUNTRY_CODES.has(countryCode))
+        return false;
+    // Only alphanumeric characters after country code + check digits
+    if (!/^[A-Z]{2}[0-9]{2}[A-Z0-9]+$/.test(normalised))
+        return false;
+    // Rearrange: move first 4 chars to end
+    const rearranged = normalised.slice(4) + normalised.slice(0, 4);
+    // Convert to numeric string and check mod-97
+    const numericStr = ibanToNumericString(rearranged);
+    return mod97(numericStr) === 1;
+}
+// ─── PIIDetector implementation ───────────────────────────────────────────────
+/**
+ * Ultra-conservative PII detector for strings.
+ * Returns true only for values that match email or IBAN patterns with checksum.
+ *
+ * Note: operates on leaves of the value tree only (non-string values → false).
+ * The redaction logic in policy.ts handles recursive traversal.
+ */
+export const STRICT_PII_DETECTOR = (value) => {
+    if (typeof value !== "string")
+        return false;
+    const trimmed = value.trim();
+    if (trimmed.length === 0)
+        return false;
+    return isEmail(trimmed) || isIban(trimmed);
+};
+//# sourceMappingURL=strict-pii-detector.js.map

package/dist/trace/strict-pii-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strict-pii-detector.js","sourceRoot":"","sources":["../../src/trace/strict-pii-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,gFAAgF;AAChF,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,oFAAoF;AACpF,8DAA8D;AAC9D,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,gCAAgC;AAEhC,MAAM,WAAW,GACf,yLAAyL,CAAC;AAE5L,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,gFAAgF;AAChF,EAAE;AACF,wBAAwB;AACxB,kDAAkD;AAClD,8BAA8B;AAC9B,4DAA4D;AAC5D,gEAAgE;AAChE,EAAE;AACF,wBAAwB;AACxB,gCAAgC;AAChC,2EAA2E;AAC3E,6CAA6C;AAC7C,kCAAkC;AAClC,EAAE;AACF,oFAAoF;AACpF,2EAA2E;AAE3E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC5B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAClC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IACtB,IAAI,EAAE,IAAI,EAAE,IAAI;IAChB,IAAI,EAAE,IAAI,EAAE,IAAI;IAChB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IACtB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAClC,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IACtB,IAAI;IACJ,IAAI;IACJ,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAClC,IAAI;IACJ,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9C,IAAI,EAAE,IAAI,EAAE,IAAI;IAChB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IACtB,IAAI;IACJ,IAAI,EAAE,IAAI,EAAE,IAAI;IAChB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC1D,IAAI,EAAE,IAAI,EAAE,IAAI;IAChB,IAAI;IACJ,IAAI,EAAE,IAAI;IACV,IAAI;IACJ,IAAI;CACL,CAAC,CAAC;AAEH,yDAAyD;AACzD,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,SAAS,KAAK,CAAC,UAAkB;IAC/B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YAC7B,cAAc;YACd,MAAM,IAAI,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAExC,4BAA4B;IAC5B,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAEnE,qBAAqB;IACrB,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvD,iEAAiE;IACjE,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAElE,uCAAuC;IACvC,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEhE,6CAA6C;IAC7C,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAgB,CAAC,KAAc,EAAW,EAAE;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC,CAAC"}

package/dist/tracing/traced-port.d.ts

@@ -0,0 +1,50 @@
+/**
+ * tracedPort — instrument any port implementation with OTel spans.
+ *
+ * Sprint-460 — ships uniform observability for BrainPort / OutcomePort /
+ * DbPort / any host-injected async surface. Wraps every function-valued
+ * method of the impl in a span rooted at the active context; attributes
+ * follow OpenTelemetry Semantic Conventions for GenAI operations where
+ * applicable (gen_ai.system, gen_ai.operation.name).
+ *
+ * Usage:
+ *   const raw: BrainPort = buildHttpBrain(...);
+ *   const traced = tracedPort(raw, { portName: "brain", tracerName: "vauban-agent-sdk" });
+ *   // traced.archiveKnowledge(...) emits a span per call.
+ *
+ * Transparent: the proxy's type is identical to T. Non-function fields
+ * are forwarded unchanged. Sync methods still get a span (they complete
+ * within the synchronous call frame).
+ *
+ * Opt-out: if no tracer is configured (getTracer returns the noop tracer,
+ * which is the OTel default when no SDK is installed), spans become
+ * no-ops — zero runtime cost for consumers who don't want tracing.
+ */
+import type { Span } from "@opentelemetry/api";
+export interface TracedPortOptions {
+    /**
+     * Short port identifier, e.g. "brain", "outcome", "db". Emitted as
+     * `gen_ai.system` attribute and used in span names.
+     */
+    portName: string;
+    /**
+     * OTel tracer name. Defaults to "vauban-agent-sdk".
+     */
+    tracerName?: string;
+    /**
+     * Optional hook to enrich the span with impl-specific attributes
+     * before it completes. Receives the span, method name, and the
+     * args/return-value of the call.
+     */
+    attributeHook?: (ctx: {
+        span: Span;
+        method: string;
+        args: readonly unknown[];
+        result?: unknown;
+    }) => void;
+}
+/**
+ * Wrap a port impl. Returns a proxy with the same type, instrumented.
+ */
+export declare function tracedPort<T extends object>(impl: T, options: TracedPortOptions): T;
+//# sourceMappingURL=traced-port.d.ts.map

package/dist/tracing/traced-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traced-port.d.ts","sourceRoot":"","sources":["../../src/tracing/traced-port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAG/C,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE;QACpB,IAAI,EAAE,IAAI,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,EAAE,OAAO,CAAC;KAClB,KAAK,IAAI,CAAC;CACZ;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,MAAM,EACzC,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,iBAAiB,GACzB,CAAC,CAwEH"}

package/dist/tracing/traced-port.js

@@ -0,0 +1,108 @@
+/**
+ * tracedPort — instrument any port implementation with OTel spans.
+ *
+ * Sprint-460 — ships uniform observability for BrainPort / OutcomePort /
+ * DbPort / any host-injected async surface. Wraps every function-valued
+ * method of the impl in a span rooted at the active context; attributes
+ * follow OpenTelemetry Semantic Conventions for GenAI operations where
+ * applicable (gen_ai.system, gen_ai.operation.name).
+ *
+ * Usage:
+ *   const raw: BrainPort = buildHttpBrain(...);
+ *   const traced = tracedPort(raw, { portName: "brain", tracerName: "vauban-agent-sdk" });
+ *   // traced.archiveKnowledge(...) emits a span per call.
+ *
+ * Transparent: the proxy's type is identical to T. Non-function fields
+ * are forwarded unchanged. Sync methods still get a span (they complete
+ * within the synchronous call frame).
+ *
+ * Opt-out: if no tracer is configured (getTracer returns the noop tracer,
+ * which is the OTel default when no SDK is installed), spans become
+ * no-ops — zero runtime cost for consumers who don't want tracing.
+ */
+import { SpanStatusCode, trace } from "@opentelemetry/api";
+/**
+ * Wrap a port impl. Returns a proxy with the same type, instrumented.
+ */
+export function tracedPort(impl, options) {
+    const tracer = trace.getTracer(options.tracerName ?? "vauban-agent-sdk");
+    const { portName } = options;
+    return new Proxy(impl, {
+        get(target, prop, receiver) {
+            const value = Reflect.get(target, prop, receiver);
+            if (typeof value !== "function")
+                return value;
+            const methodName = String(prop);
+            // Return a wrapper that traces each call. Preserve `this` = impl.
+            const wrapped = function (...args) {
+                return tracer.startActiveSpan(`${portName}.${methodName}`, {
+                    attributes: {
+                        "gen_ai.system": portName,
+                        "gen_ai.operation.name": methodName,
+                    },
+                }, (span) => {
+                    try {
+                        const out = value.apply(target, args);
+                        // Async path: settle the span on promise resolution.
+                        if (out instanceof Promise) {
+                            return out.then((result) => {
+                                options.attributeHook?.({
+                                    span,
+                                    method: methodName,
+                                    args,
+                                    result,
+                                });
+                                span.setStatus({ code: SpanStatusCode.OK });
+                                span.end();
+                                return result;
+                            }, (err) => {
+                                recordError(span, err);
+                                span.end();
+                                throw err;
+                            });
+                        }
+                        // Sync path.
+                        options.attributeHook?.({
+                            span,
+                            method: methodName,
+                            args,
+                            result: out,
+                        });
+                        span.setStatus({ code: SpanStatusCode.OK });
+                        span.end();
+                        return out;
+                    }
+                    catch (err) {
+                        recordError(span, err);
+                        span.end();
+                        throw err;
+                    }
+                });
+            };
+            // Preserve function name for stack traces + debugging.
+            Object.defineProperty(wrapped, "name", { value: methodName });
+            return wrapped;
+        },
+    });
+}
+function recordError(span, err) {
+    const message = err instanceof Error
+        ? err.message
+        : typeof err === "string"
+            ? err
+            : "error";
+    span.setStatus({ code: SpanStatusCode.ERROR, message });
+    if (err instanceof Error)
+        span.recordException(err);
+    // Surface PortError metadata when present (port-side observability).
+    if (err && typeof err === "object") {
+        const anyErr = err;
+        if (typeof anyErr.port === "string") {
+            span.setAttribute("vauban.port.error.port", anyErr.port);
+        }
+        if (typeof anyErr.retryable === "boolean") {
+            span.setAttribute("vauban.port.error.retryable", anyErr.retryable);
+        }
+    }
+}
+//# sourceMappingURL=traced-port.js.map

package/dist/tracing/traced-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traced-port.js","sourceRoot":"","sources":["../../src/tracing/traced-port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAyB3D;;GAEG;AACH,MAAM,UAAU,UAAU,CACxB,IAAO,EACP,OAA0B;IAE1B,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,IAAI,kBAAkB,CAAC,CAAC;IACzE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAE7B,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE;QACrB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;YACxB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,OAAO,KAAK,KAAK,UAAU;gBAAE,OAAO,KAAK,CAAC;YAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAEhC,kEAAkE;YAClE,MAAM,OAAO,GAAG,UAAyB,GAAG,IAAe;gBACzD,OAAO,MAAM,CAAC,eAAe,CAC3B,GAAG,QAAQ,IAAI,UAAU,EAAE,EAC3B;oBACE,UAAU,EAAE;wBACV,eAAe,EAAE,QAAQ;wBACzB,uBAAuB,EAAE,UAAU;qBACpC;iBACF,EACD,CAAC,IAAI,EAAE,EAAE;oBACP,IAAI,CAAC;wBACH,MAAM,GAAG,GAAI,KAAsC,CAAC,KAAK,CACvD,MAAM,EACN,IAAI,CACL,CAAC;wBAEF,qDAAqD;wBACrD,IAAI,GAAG,YAAY,OAAO,EAAE,CAAC;4BAC3B,OAAO,GAAG,CAAC,IAAI,CACb,CAAC,MAAM,EAAE,EAAE;gCACT,OAAO,CAAC,aAAa,EAAE,CAAC;oCACtB,IAAI;oCACJ,MAAM,EAAE,UAAU;oCAClB,IAAI;oCACJ,MAAM;iCACP,CAAC,CAAC;gCACH,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;gCAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;gCACX,OAAO,MAAM,CAAC;4BAChB,CAAC,EACD,CAAC,GAAY,EAAE,EAAE;gCACf,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gCACvB,IAAI,CAAC,GAAG,EAAE,CAAC;gCACX,MAAM,GAAG,CAAC;4BACZ,CAAC,CACF,CAAC;wBACJ,CAAC;wBAED,aAAa;wBACb,OAAO,CAAC,aAAa,EAAE,CAAC;4BACtB,IAAI;4BACJ,MAAM,EAAE,UAAU;4BAClB,IAAI;4BACJ,MAAM,EAAE,GAAG;yBACZ,CAAC,CAAC;wBACH,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;wBACX,OAAO,GAAG,CAAC;oBACb,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;wBACvB,IAAI,CAAC,GAAG,EAAE,CAAC;wBACX,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC;YACF,uDAAuD;YACvD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9D,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAM,CAAC;AACV,CAAC;AAED,SAAS,WAAW,CAAC,IAAU,EAAE,GAAY;IAC3C,MAAM,OAAO,GACX,GAAG,YAAY,KAAK;QAClB,CAAC,CAAC,GAAG,CAAC,OAAO;QACb,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,OAAO,CAAC;IAChB,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,YAAY,KAAK;QAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACpD,qEAAqE;IACrE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,GAA8C,CAAC;QAC9D,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,YAAY,CAAC,6BAA6B,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/tracking/agent-run-tracker.d.ts

@@ -0,0 +1,63 @@
+/**
+ * AgentRunTracker — per-run token/cost accounting for agent loops.
+ *
+ * Lifecycle:
+ *   1. start(input)      → INSERT agent_run row with status='running', returns UUID.
+ *   2. recordStep(uuid)  → UPDATE increments input/output/tool_calls/cost_usd counters.
+ *   3. finish(uuid)      → UPDATE sets finished_at, status, stop_reason.
+ *
+ * Contract: agent_version is required at start().
+ * Cost is NUMERIC(10,6) USD (Postgres returns as string from pg driver — we
+ * normalise to string at the boundary).
+ *
+ * Persistence layer only — no side effects beyond DB. OTel spans are emitted
+ * by the caller (loop) with `gen_ai.usage.*` attributes.
+ */
+/**
+ * Minimal injectable Postgres interface.
+ * Compatible with `pg.Pool`, `pg.Client`, and test mocks.
+ */
+export interface DbClient {
+    query<T extends object>(sql: string, params?: unknown[]): Promise<{
+        rows: T[];
+        rowCount?: number;
+    }>;
+}
+export interface AgentRunStartInput {
+    agentId: string;
+    agentVersion: string;
+    /** Caller-generated run id (matches the loop's runId / trace). */
+    runId: string;
+    model: string;
+    provider: string;
+    tenantId?: string;
+    /** OTel trace id for replay linkage. */
+    traceId?: string;
+}
+export interface AgentRunStepDelta {
+    inputTokens: number;
+    outputTokens: number;
+    toolCalls?: number;
+    /**
+     * USD delta for this step. Must be >= 0 (cumulative counter).
+     * Accepts number or string; normalised to fixed(6) in SQL binding.
+     */
+    costUsd: number;
+}
+export type AgentRunFinalStatus = "success" | "failed" | "timeout" | "incoherent";
+export interface AgentRunFinish {
+    status: AgentRunFinalStatus;
+    stopReason?: string;
+    errorMessage?: string;
+}
+export interface AgentRunTracker {
+    /** Insert a new row in 'running' status; returns the UUID. */
+    start(input: AgentRunStartInput): Promise<string>;
+    /** Increment counters atomically. Idempotent per-call (caller dedupes). */
+    recordStep(uuid: string, delta: AgentRunStepDelta): Promise<void>;
+    /** Terminal transition — sets finished_at + status. */
+    finish(uuid: string, result: AgentRunFinish): Promise<void>;
+}
+/** Factory — inject a DbClient (pg.Pool or test mock). */
+export declare function createAgentRunTracker(db: DbClient): AgentRunTracker;
+//# sourceMappingURL=agent-run-tracker.d.ts.map

package/dist/tracking/agent-run-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-run-tracker.d.ts","sourceRoot":"","sources":["../../src/tracking/agent-run-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,CAAC,SAAS,MAAM,EACpB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,OAAO,EAAE,GACjB,OAAO,CAAC;QAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9C;AAID,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,QAAQ,GACR,SAAS,GACT,YAAY,CAAC;AAEjB,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,2EAA2E;IAC3E,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,uDAAuD;IACvD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAuJD,0DAA0D;AAC1D,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,QAAQ,GAAG,eAAe,CAEnE"}

package/dist/tracking/agent-run-tracker.js

@@ -0,0 +1,132 @@
+/**
+ * AgentRunTracker — per-run token/cost accounting for agent loops.
+ *
+ * Lifecycle:
+ *   1. start(input)      → INSERT agent_run row with status='running', returns UUID.
+ *   2. recordStep(uuid)  → UPDATE increments input/output/tool_calls/cost_usd counters.
+ *   3. finish(uuid)      → UPDATE sets finished_at, status, stop_reason.
+ *
+ * Contract: agent_version is required at start().
+ * Cost is NUMERIC(10,6) USD (Postgres returns as string from pg driver — we
+ * normalise to string at the boundary).
+ *
+ * Persistence layer only — no side effects beyond DB. OTel spans are emitted
+ * by the caller (loop) with `gen_ai.usage.*` attributes.
+ */
+// ─── Validation helpers ──────────────────────────────────────────────────────
+function assertNonEmpty(name, v) {
+    if (typeof v !== "string" || v.length === 0) {
+        throw new Error(`agent-run-tracker: ${name} must be a non-empty string`);
+    }
+}
+function assertNonNegativeInt(name, v) {
+    if (!Number.isFinite(v) || !Number.isInteger(v) || v < 0) {
+        throw new Error(`agent-run-tracker: ${name} must be a non-negative integer`);
+    }
+}
+function assertNonNegativeCost(name, v) {
+    if (!Number.isFinite(v) || v < 0) {
+        throw new Error(`agent-run-tracker: ${name} must be a non-negative finite number`);
+    }
+}
+function assertUuid(name, v) {
+    // Loose uuid check (36 chars with dashes) — DB has full constraint via type.
+    if (typeof v !== "string" ||
+        !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(v)) {
+        throw new Error(`agent-run-tracker: ${name} must be a UUID`);
+    }
+}
+// ─── Implementation ──────────────────────────────────────────────────────────
+class AgentRunTrackerImpl {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async start(input) {
+        assertNonEmpty("agentId", input.agentId);
+        assertNonEmpty("agentVersion", input.agentVersion);
+        assertNonEmpty("runId", input.runId);
+        assertNonEmpty("model", input.model);
+        assertNonEmpty("provider", input.provider);
+        const result = await this.db.query(`INSERT INTO agent_run
+         (agent_id, agent_version, run_id, model, provider,
+          tenant_id, trace_id, status, started_at)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, 'running', NOW())
+       RETURNING id`, [
+            input.agentId,
+            input.agentVersion,
+            input.runId,
+            input.model,
+            input.provider,
+            input.tenantId ?? null,
+            input.traceId ?? null,
+        ]);
+        const row = result.rows[0];
+        if (!row) {
+            throw new Error("agent-run-tracker: insert did not return an id");
+        }
+        return row.id;
+    }
+    async recordStep(uuid, delta) {
+        assertUuid("uuid", uuid);
+        assertNonNegativeInt("inputTokens", delta.inputTokens);
+        assertNonNegativeInt("outputTokens", delta.outputTokens);
+        if (delta.toolCalls !== undefined) {
+            assertNonNegativeInt("toolCalls", delta.toolCalls);
+        }
+        assertNonNegativeCost("costUsd", delta.costUsd);
+        // Use numeric addition at the DB for atomicity; bind cost as fixed(6) string
+        // to avoid float64 imprecision accumulating over many steps.
+        const costStr = delta.costUsd.toFixed(6);
+        await this.db.query(`UPDATE agent_run
+         SET input_tokens     = input_tokens     + $2,
+             output_tokens    = output_tokens    + $3,
+             tool_calls_count = tool_calls_count + $4,
+             cost_usd         = cost_usd         + $5::numeric
+       WHERE id = $1
+         AND status = 'running'`, [
+            uuid,
+            delta.inputTokens,
+            delta.outputTokens,
+            delta.toolCalls ?? 0,
+            costStr,
+        ]);
+    }
+    async finish(uuid, result) {
+        assertUuid("uuid", uuid);
+        const validStatuses = [
+            "success",
+            "failed",
+            "timeout",
+            "incoherent",
+        ];
+        if (!validStatuses.includes(result.status)) {
+            throw new Error(`agent-run-tracker: status must be one of ${validStatuses.join(", ")}`);
+        }
+        if (result.stopReason !== undefined &&
+            typeof result.stopReason !== "string") {
+            throw new Error("agent-run-tracker: stopReason must be a string when provided");
+        }
+        if (result.errorMessage !== undefined &&
+            typeof result.errorMessage !== "string") {
+            throw new Error("agent-run-tracker: errorMessage must be a string when provided");
+        }
+        await this.db.query(`UPDATE agent_run
+         SET status        = $2,
+             stop_reason   = $3,
+             error_message = $4,
+             finished_at   = NOW()
+       WHERE id = $1
+         AND status = 'running'`, [
+            uuid,
+            result.status,
+            result.stopReason ?? null,
+            result.errorMessage ?? null,
+        ]);
+    }
+}
+/** Factory — inject a DbClient (pg.Pool or test mock). */
+export function createAgentRunTracker(db) {
+    return new AgentRunTrackerImpl(db);
+}
+//# sourceMappingURL=agent-run-tracker.js.map

package/dist/tracking/agent-run-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-run-tracker.js","sourceRoot":"","sources":["../../src/tracking/agent-run-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA6DH,gFAAgF;AAEhF,SAAS,cAAc,CAAC,IAAY,EAAE,CAAU;IAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,6BAA6B,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,CAAU;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAK,CAAY,GAAG,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,iCAAiC,CAC5D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,CAAU;IACrD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAK,CAAY,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,uCAAuC,CAClE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,CAAU;IAC1C,6EAA6E;IAC7E,IACE,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,iEAAiE,CAAC,IAAI,CAAC,CAAC,CAAC,EAC1E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,iBAAiB,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,MAAM,mBAAmB;IACM;IAA7B,YAA6B,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAE7C,KAAK,CAAC,KAAK,CAAC,KAAyB;QACnC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACnD,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACrC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACrC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC;;;;oBAIc,EACd;YACE,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,KAAK;YACX,KAAK,CAAC,KAAK;YACX,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,QAAQ,IAAI,IAAI;YACtB,KAAK,CAAC,OAAO,IAAI,IAAI;SACtB,CACF,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,KAAwB;QACrD,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzB,oBAAoB,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACvD,oBAAoB,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,oBAAoB,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;QACD,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAEhD,6EAA6E;QAC7E,6DAA6D;QAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAEzC,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB;;;;;;gCAM0B,EAC1B;YACE,IAAI;YACJ,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,SAAS,IAAI,CAAC;YACpB,OAAO;SACR,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAAsB;QAC/C,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,aAAa,GAA0B;YAC3C,SAAS;YACT,QAAQ;YACR,SAAS;YACT,YAAY;SACb,CAAC;QACF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,4CAA4C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;QACJ,CAAC;QACD,IACE,MAAM,CAAC,UAAU,KAAK,SAAS;YAC/B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,IACE,MAAM,CAAC,YAAY,KAAK,SAAS;YACjC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,EACvC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB;;;;;;gCAM0B,EAC1B;YACE,IAAI;YACJ,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,UAAU,IAAI,IAAI;YACzB,MAAM,CAAC,YAAY,IAAI,IAAI;SAC5B,CACF,CAAC;IACJ,CAAC;CACF;AAED,0DAA0D;AAC1D,MAAM,UAAU,qBAAqB,CAAC,EAAY;IAChD,OAAO,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC"}

package/dist/tracking/gen-ai.d.ts

@@ -0,0 +1,54 @@
+/**
+ * tracking/gen-ai — OpenTelemetry GenAI semantic conventions wrapper.
+ *
+ * https://opentelemetry.io/docs/specs/semconv/gen-ai/
+ *
+ * Scope: thin helpers that create spans with the standard `gen_ai.*`
+ * attribute set. Each helper returns the span so the caller can add
+ * provider-specific attributes and call `.end()` when done — mirrors the
+ * `@opentelemetry/api` ergonomics.
+ *
+ * Custom Vauban attributes (not in spec):
+ *   - gen_ai.agent.run_id     (our runId; used for replay linkage)
+ *   - gen_ai.agent.compacted  (event marker — emitted by AgentLoop)
+ */
+import { type Span, type Tracer } from "@opentelemetry/api";
+export declare function getTracer(name?: string): Tracer;
+export declare function llmSpan(tracer: Tracer, request: {
+    provider: string;
+    model: string;
+    maxTokens?: number;
+    messageCount?: number;
+    temperature?: number;
+    topP?: number;
+    seed?: number;
+}): Span;
+export declare function recordLlmUsage(span: Span, usage: {
+    inputTokens: number;
+    outputTokens: number;
+    latencyMs: number;
+    finishReason?: string;
+    responseId?: string;
+}): void;
+export declare function toolSpan(tracer: Tracer, toolName: string, args: unknown): Span;
+export declare function recordToolResult(span: Span, result: {
+    success: boolean;
+    errorMessage?: string;
+    outputSizeBytes?: number;
+}): void;
+export declare function agentSpan(tracer: Tracer, opts: {
+    agentId: string;
+    agentVersion: string;
+    runId: string;
+}): Span;
+/**
+ * recordOutcome — convenience helper to stamp the final outcome of an agent
+ * run onto an existing span. Call from the loop's finally block.
+ */
+export declare function recordOutcome(span: Span, outcome: {
+    stopReason: string;
+    inputTokens: number;
+    outputTokens: number;
+    stepCount?: number;
+}): void;
+//# sourceMappingURL=gen-ai.d.ts.map

package/dist/tracking/gen-ai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gen-ai.d.ts","sourceRoot":"","sources":["../../src/tracking/gen-ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,MAAM,EAAS,MAAM,oBAAoB,CAAC;AAInE,wBAAgB,SAAS,CAAC,IAAI,SAAqB,GAAG,MAAM,CAE3D;AAID,wBAAgB,OAAO,CACrB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GACA,IAAI,CAqBN;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IACL,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACA,IAAI,CAUN;AAID,wBAAgB,QAAQ,CACtB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,GACZ,IAAI,CAcN;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,IAAI,EACV,MAAM,EAAE;IACN,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GACA,IAAI,CAQN;AAID,wBAAgB,SAAS,CACvB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7D,IAAI,CAON;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,IAAI,EACV,OAAO,EAAE;IACP,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,IAAI,CAON"}