@victframework/runtime 0.1.0

package/dist/agent-governance.js

@@ -0,0 +1,438 @@
+import { validateAgentActivationRecord } from './agent-types.js';
+import { VictRuntimeError } from './errors.js';
+/** Error thrown for credential-resolution failures (stable, non-echoing). */
+export class AgentCredentialError extends Error {
+    code;
+    credentialName;
+    constructor(credentialName) {
+        super(`Credential '${credentialName}' could not be resolved through the protected provider.`);
+        this.name = 'AgentCredentialError';
+        this.code = 'VICT_AGENT_CREDENTIAL_UNAVAILABLE';
+        this.credentialName = credentialName;
+    }
+}
+/**
+ * A credential name: the accepted credential-reference policy is the SAME
+ * closed pattern the profile compiler enforces for
+ * `providerCredentialVar` — an environment-variable-style NAME matching
+ * `^[A-Za-z_][A-Za-z0-9_]*$` (at most 128 characters). Value-like inputs
+ * (separators, `=`, whitespace, secret content) are rejected BEFORE they
+ * reach any provider, and an invalid name is never echoed.
+ */
+const CREDENTIAL_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const MAX_CREDENTIAL_NAME_LENGTH = 128;
+/** A credential name: validated against the accepted credential-reference policy. */
+export function assertCredentialName(name) {
+    if (typeof name !== 'string' ||
+        name.length === 0 ||
+        name.length > MAX_CREDENTIAL_NAME_LENGTH ||
+        !CREDENTIAL_NAME_PATTERN.test(name)) {
+        throw new AgentCredentialError('(invalid credential name)');
+    }
+}
+/**
+ * Wrap a credential provider with the protected-resolution discipline:
+ * - names are validated before reaching the provider;
+ * - provider exceptions are converted into stable sanitized failures whose
+ *   messages never include provider content;
+ * - values are never cached — every read passes through to the provider, so
+ *   rotation is observed and a rejected read cannot poison later reads.
+ */
+export function protectCredentialPort(port) {
+    return {
+        async get(name) {
+            assertCredentialName(name);
+            let value;
+            try {
+                value = await port.get(name);
+            }
+            catch {
+                // The provider's message never propagates; the failure is not
+                // recorded anywhere and cannot poison later invocations.
+                throw new AgentCredentialError(name);
+            }
+            if (value === undefined) {
+                return undefined;
+            }
+            if (typeof value !== 'string') {
+                throw new AgentCredentialError(name);
+            }
+            return value;
+        },
+    };
+}
+/** Stable non-echoing failure for a missing required credential. */
+export function requireCredential(value, name) {
+    assertCredentialName(name);
+    if (value === undefined) {
+        throw new AgentCredentialError(name);
+    }
+    return value;
+}
+/**
+ * The closed deletion-step domain. Both store adapters (in-memory and
+ * SQLite) enforce the SAME receipt-step domain at their API boundary so
+ * unknown (e.g. legacy or fabricated) steps are rejected with the same
+ * stable, non-echoing error BEFORE any mutation (adapter parity).
+ */
+export const DELETION_STEP_DOMAIN = new Set([
+    'application-domain',
+    'memory-store',
+]);
+/** The exact stable, non-echoing rejection text shared by every adapter. */
+export const DELETION_RECEIPT_STEP_INVALID_MESSAGE = 'VICT_AGENT_DELETION_RECEIPT_STEP_INVALID: the deletion receipt step must be a governed durable step.';
+/**
+ * Validate one deletion-receipt step against the closed domain (shared by
+ * the in-memory and SQLite adapters). Invalid or legacy steps are rejected
+ * with the SAME stable, non-echoing error on every adapter, before any
+ * durable mutation occurs.
+ */
+export function assertDeletionReceiptStep(step) {
+    if (typeof step !== 'string' || !DELETION_STEP_DOMAIN.has(step)) {
+        throw new Error(DELETION_RECEIPT_STEP_INVALID_MESSAGE);
+    }
+}
+const INTENT_STATE_ORDER = [
+    'pending',
+    'application-domain-deleted',
+    'completed',
+];
+/**
+ * Shared invariant enforcement for in-memory and SQLite stores.
+ *
+ * Transitions are forward-only AND stepwise: a state may only move to the
+ * IMMEDIATELY next state in the lifecycle. Skipped transitions (for example
+ * `pending` directly to `completed`) are rejected — completion always
+ * requires both durable step receipts, which a skipped transition would
+ * fabricate. Same-state updates are idempotent no-ops.
+ */
+export function assertDeletionStateTransition(from, to) {
+    if (from === to) {
+        return; // idempotent no-op
+    }
+    const fromIndex = INTENT_STATE_ORDER.indexOf(from);
+    const toIndex = INTENT_STATE_ORDER.indexOf(to);
+    if (toIndex < fromIndex) {
+        throw new Error(`VICT_AGENT_DELETION_STATE_REGRESSION: refusing to move deletion intent from '${from}' back to '${to}'.`);
+    }
+    if (toIndex !== fromIndex + 1) {
+        throw new Error(`VICT_AGENT_DELETION_STATE_SKIP: refusing to move deletion intent from '${from}' directly to '${to}'; completion requires each step's durable receipt.`);
+    }
+}
+/**
+ * Receipt-enforced transition validation (shared by in-memory and SQLite
+ * stores): a state may only advance when the receipt of the step it
+ * ENTERS is durably recorded.
+ *
+ * - entering `application-domain-deleted` requires the durable
+ *   `application-domain` receipt;
+ * - entering `completed` requires BOTH durable step receipts.
+ *
+ * The check reads the ACTUAL STORED receipts — the caller must pass the
+ * receipts exactly as they exist in the same store, and each store must
+ * perform the check and the state update ATOMICALLY (one synchronous
+ * critical section in memory; one transaction in SQLite). A receipt-free
+ * two-step bypass (`pending → application-domain-deleted → completed`)
+ * therefore fails at the FIRST transition and leaves the stored state
+ * unchanged.
+ */
+export function assertDeletionStateTransitionWithReceipts(from, to, receipts) {
+    assertDeletionStateTransition(from, to);
+    if (from === to) {
+        return; // idempotent no-op: no new state is entered
+    }
+    const has = (step) => receipts.some((receipt) => receipt.step === step);
+    if (to === 'application-domain-deleted' && !has('application-domain')) {
+        throw new Error("VICT_AGENT_DELETION_RECEIPT_REQUIRED: entering 'application-domain-deleted' requires the durable 'application-domain' receipt; refusing to advance without it.");
+    }
+    if (to === 'completed' && !(has('application-domain') && has('memory-store'))) {
+        throw new Error("VICT_AGENT_DELETION_RECEIPT_REQUIRED: entering 'completed' requires BOTH durable step receipts ('application-domain' and 'memory-store'); refusing to advance without them.");
+    }
+}
+/**
+ * Validate a deletion-intent record at the durable boundary (shared by the
+ * in-memory and SQLite stores). A NEW intent must start as `pending` with
+ * NO receipts — arbitrary initial states and fabricated receipts are
+ * rejected.
+ */
+export function assertDeletionIntentRecord(record) {
+    if (typeof record.intentId !== 'string' || record.intentId.length === 0) {
+        throw new VictRuntimeError('VICT_AGENT_DELETION_INTENT_INVALID', 'A deletion intent requires a non-empty intentId.');
+    }
+    if (typeof record.conversationId !== 'string' || record.conversationId.length === 0) {
+        throw new VictRuntimeError('VICT_AGENT_DELETION_INTENT_INVALID', 'A deletion intent requires a non-empty conversationId.');
+    }
+    if (typeof record.actorId !== 'string' || record.actorId.length === 0) {
+        throw new VictRuntimeError('VICT_AGENT_DELETION_INTENT_INVALID', 'A deletion intent requires a non-empty actorId.');
+    }
+    if (typeof record.createdAt !== 'number' ||
+        !Number.isFinite(record.createdAt) ||
+        record.createdAt < 0) {
+        throw new VictRuntimeError('VICT_AGENT_DELETION_INTENT_INVALID', 'A deletion intent requires a finite createdAt epoch-ms value.');
+    }
+    if (record.state !== 'pending') {
+        throw new VictRuntimeError('VICT_AGENT_DELETION_INTENT_INVALID', `A deletion intent must be recorded in the 'pending' state; arbitrary initial states are rejected.`);
+    }
+    if (!Array.isArray(record.receipts) || record.receipts.length > 0) {
+        throw new VictRuntimeError('VICT_AGENT_DELETION_INTENT_INVALID', 'A new deletion intent must carry no receipts; fabricated receipts are rejected.');
+    }
+}
+/** In-memory AgentGovernanceStore (tests and non-durable compositions). */
+export class InMemoryAgentGovernanceStore {
+    #activations = new Map();
+    #intents = new Map();
+    async saveAgentActivation(record) {
+        const validation = validateAgentActivationRecord(record);
+        if (!validation.ok) {
+            throw new VictRuntimeError('VICT_AGENT_ACTIVATION_RECORD_INVALID', `The activation record is malformed and was not persisted: ${validation.reason}`);
+        }
+        const existing = this.#activations.get(record.activationVersion);
+        if (existing !== undefined) {
+            if (JSON.stringify(existing) !== JSON.stringify(record)) {
+                throw new Error('VICT_AGENT_ACTIVATION_COLLISION: an activation record exists with different content.');
+            }
+            return;
+        }
+        this.#activations.set(record.activationVersion, structuredCloneAgent(record));
+    }
+    async getAgentActivation(activationVersion) {
+        const record = this.#activations.get(activationVersion);
+        return record === undefined ? undefined : structuredCloneAgent(record);
+    }
+    async recordDeletionIntent(record) {
+        assertDeletionIntentRecord(record);
+        const existing = this.#intents.get(record.intentId);
+        if (existing !== undefined) {
+            if (existing.conversationId !== record.conversationId ||
+                existing.actorId !== record.actorId ||
+                existing.createdAt !== record.createdAt) {
+                throw new Error('VICT_AGENT_DELETION_INTENT_COLLISION: an intent exists with different content.');
+            }
+            return;
+        }
+        this.#intents.set(record.intentId, structuredCloneAgent(record));
+    }
+    async getDeletionIntent(intentId) {
+        const record = this.#intents.get(intentId);
+        return record === undefined ? undefined : structuredCloneAgent(record);
+    }
+    async listOpenDeletionIntents() {
+        return [...this.#intents.values()]
+            .filter((record) => record.state !== 'completed')
+            .sort((a, b) => (a.intentId < b.intentId ? -1 : 1))
+            .map((record) => structuredCloneAgent(record));
+    }
+    async listDeletionIntents() {
+        return [...this.#intents.values()]
+            .sort((a, b) => (a.intentId < b.intentId ? -1 : 1))
+            .map((record) => structuredCloneAgent(record));
+    }
+    async recordDeletionReceipt(intentId, step, at) {
+        // Closed step domain — enforced at the API boundary of BOTH adapters
+        // (shared helper), before any mutation, with the same stable,
+        // non-echoing error (adapter parity).
+        assertDeletionReceiptStep(step);
+        const record = this.#intents.get(intentId);
+        if (record === undefined) {
+            throw new Error('VICT_AGENT_DELETION_INTENT_MISSING');
+        }
+        if (record.receipts.some((receipt) => receipt.step === step)) {
+            return; // idempotent: no duplicate receipt
+        }
+        // Receipt order mirrors the governed execution order: the memory step
+        // receipt can only exist after the application-domain receipt. An
+        // out-of-order receipt would fabricate durable progress and is
+        // rejected.
+        if (step === 'memory-store' &&
+            !record.receipts.some((receipt) => receipt.step === 'application-domain')) {
+            throw new Error('VICT_AGENT_DELETION_RECEIPT_ORDER: the memory step receipt requires the application-domain receipt to exist first.');
+        }
+        const updated = {
+            ...record,
+            receipts: [...record.receipts, { step, at }].sort((a, b) => (a.step < b.step ? -1 : 1)),
+        };
+        this.#intents.set(intentId, updated);
+    }
+    async updateDeletionIntentState(intentId, state) {
+        // Atomic check-and-update: the transition is validated against the
+        // ACTUAL stored receipts inside the same synchronous critical section
+        // that performs the update, so no interleaving write can slip between
+        // the check and the update.
+        const record = this.#intents.get(intentId);
+        if (record === undefined) {
+            throw new Error('VICT_AGENT_DELETION_INTENT_MISSING');
+        }
+        assertDeletionStateTransitionWithReceipts(record.state, state, record.receipts);
+        this.#intents.set(intentId, { ...record, state });
+    }
+}
+function structuredCloneAgent(value) {
+    return JSON.parse(JSON.stringify(value));
+}
+/**
+ * Governed conversation deletion across stores (amendment §8.1, MSTR-011).
+ *
+ * Cross-store atomicity is impossible and is never claimed. The
+ * coordinator:
+ * 1. records the durable deletion intent BEFORE touching either store;
+ * 2. deletes the VICT application-domain resource through its governed
+ *    port and records a durable receipt;
+ * 3. deletes the the agent framework thread through the adapter port and records a
+ *    durable receipt;
+ * 4. advances the intent to `completed` only when both receipts exist.
+ *
+ * Every step is idempotent; receipts deduplicate; `recoverPending()`
+ * resumes safely after a crash at ANY boundary without duplicating
+ * receipts, losing completions, or resurrecting deleted data.
+ */
+export class ConversationDeletionCoordinator {
+    #governance;
+    #domain;
+    #memory;
+    #clock;
+    constructor(options) {
+        this.#governance = options.governance;
+        this.#domain = options.domain;
+        this.#memory = options.memory;
+        this.#clock = options.clock ?? (() => Date.now());
+    }
+    /** Deterministic intent id per conversation (idempotent re-deletes). */
+    intentIdFor(conversationId) {
+        return `vict-del-${conversationId}`;
+    }
+    async deleteConversation(options) {
+        const intentId = this.intentIdFor(options.conversationId);
+        const existing = await this.#governance.getDeletionIntent(intentId);
+        if (existing === undefined) {
+            await this.#governance.recordDeletionIntent({
+                intentId,
+                conversationId: options.conversationId,
+                actorId: options.actorId,
+                createdAt: this.#clock(),
+                state: 'pending',
+                receipts: [],
+            });
+        }
+        else if (existing.actorId !== options.actorId) {
+            throw new Error('VICT_AGENT_DELETION_ACTOR_MISMATCH: the intent exists under a different actor.');
+        }
+        return this.#runSteps(intentId);
+    }
+    /**
+     * Resume every open intent (crash recovery, process restart). Each open
+     * intent continues from its recorded receipts; completed steps are never
+     * re-executed against the stores... the underlying ports are idempotent
+     * besides, but receipts are authoritative: a recorded receipt means the
+     * step is durable and is NOT re-driven.
+     */
+    async recoverPending() {
+        const open = await this.#governance.listOpenDeletionIntents();
+        let completed = 0;
+        let pending = 0;
+        for (const intent of open) {
+            const outcome = await this.#runSteps(intent.intentId);
+            if (outcome.status === 'completed') {
+                completed += 1;
+            }
+            else {
+                pending += 1;
+            }
+        }
+        return { resumed: open.length, completed, pending };
+    }
+    async #runSteps(intentId) {
+        const intent = await this.#governance.getDeletionIntent(intentId);
+        if (intent === undefined) {
+            throw new Error('VICT_AGENT_DELETION_INTENT_MISSING');
+        }
+        if (intent.state !== 'completed') {
+            if (!intent.receipts.some((receipt) => receipt.step === 'application-domain')) {
+                const result = await this.#domain.deleteConversation(intent.conversationId);
+                if (typeof result?.deleted !== 'boolean') {
+                    throw new Error('VICT_AGENT_DELETION_DOMAIN_INVALID_RESULT');
+                }
+                await this.#governance.recordDeletionReceipt(intentId, 'application-domain', this.#clock());
+            }
+            // Advance stepwise (a crash may have left the durable state one step
+            // behind its receipts; same-state updates are idempotent no-ops).
+            const afterDomain = await this.#governance.getDeletionIntent(intentId);
+            if (afterDomain !== undefined && afterDomain.state === 'pending') {
+                await this.#governance.updateDeletionIntentState(intentId, 'application-domain-deleted');
+            }
+            const current = await this.#governance.getDeletionIntent(intentId);
+            if (current === undefined) {
+                throw new Error('VICT_AGENT_DELETION_INTENT_MISSING');
+            }
+            if (!current.receipts.some((receipt) => receipt.step === 'memory-store')) {
+                const result = await this.#memory.deleteConversationThread(intent.conversationId);
+                if (typeof result?.deleted !== 'boolean') {
+                    throw new Error('VICT_AGENT_DELETION_MEMORY_INVALID_RESULT');
+                }
+                await this.#governance.recordDeletionReceipt(intentId, 'memory-store', this.#clock());
+            }
+            const after = await this.#governance.getDeletionIntent(intentId);
+            if (after !== undefined &&
+                after.receipts.some((receipt) => receipt.step === 'application-domain') &&
+                after.receipts.some((receipt) => receipt.step === 'memory-store') &&
+                after.state !== 'completed') {
+                // Completion always passes through the intermediate state — the
+                // stepwise invariant forbids skipping it.
+                await this.#governance.updateDeletionIntentState(intentId, 'application-domain-deleted');
+                await this.#governance.updateDeletionIntentState(intentId, 'completed');
+            }
+        }
+        const final = await this.#governance.getDeletionIntent(intentId);
+        if (final === undefined) {
+            throw new Error('VICT_AGENT_DELETION_INTENT_MISSING');
+        }
+        return {
+            status: final.state === 'completed' ? 'completed' : 'pending',
+            intentId,
+            conversationId: final.conversationId,
+            completedSteps: final.receipts.map((receipt) => receipt.step),
+        };
+    }
+}
+/** Error carrying a stable export denial (never raw content). */
+export class AgentConversationExportError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.name = 'AgentConversationExportError';
+        this.code = code;
+    }
+}
+/**
+ * Governed conversation export (MSTR-011). Explicit and request-scoped:
+ * the requestor must present the owning actor identity; the export
+ * contains only classification-policy data; the result is handed to the
+ * caller and never logged or retained by the service.
+ */
+export class ConversationExportService {
+    #memory;
+    constructor(options) {
+        this.#memory = options.memory;
+    }
+    async export(options) {
+        const found = await this.#memory.exportConversationThread(options.conversationId);
+        if (found === undefined) {
+            throw new AgentConversationExportError('VICT_AGENT_EXPORT_NOT_FOUND');
+        }
+        if (found.actorId !== options.actorId) {
+            throw new AgentConversationExportError('VICT_AGENT_EXPORT_ACTOR_MISMATCH');
+        }
+        // Deterministic ordering by sequence; exportedAt comes from the
+        // injected clock. The service retains nothing and logs nothing.
+        const sorted = [...found.messages].sort((a, b) => a.seq - b.seq);
+        return {
+            export: {
+                conversationId: found.conversationId,
+                actorId: found.actorId,
+                threadCreatedAt: found.threadCreatedAt,
+                messages: sorted,
+            },
+            retained: false,
+        };
+    }
+}
+//# sourceMappingURL=agent-governance.js.map

package/dist/agent-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-governance.js","sourceRoot":"","sources":["../src/agent-governance.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAkC/C,6EAA6E;AAC7E,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,CAA2B;IAC/B,cAAc,CAAS;IAEhC,YAAY,cAAsB;QAChC,KAAK,CAAC,eAAe,cAAc,yDAAyD,CAAC,CAAC;QAC9F,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAC3D,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAEvC,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,0BAA0B;QACxC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,IAAY;YACpB,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,KAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;gBAC9D,yDAAyD;gBACzD,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,KAAyB,EAAE,IAAY;IACvE,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAgDD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAoB;IAClF,oBAAoB;IACpB,cAAc;CACf,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qCAAqC,GAChD,sGAAsG,CAAC;AAEzG;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAa;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,GAA4C;IAClE,SAAS;IACT,4BAA4B;IAC5B,WAAW;CACZ,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAA8B,EAC9B,EAA4B;IAE5B,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,mBAAmB;IAC7B,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,OAAO,GAAG,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,gFAAgF,IAAI,cAAc,EAAE,IAAI,CACzG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,0EAA0E,IAAI,kBAAkB,EAAE,qDAAqD,CACxJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,yCAAyC,CACvD,IAA8B,EAC9B,EAA4B,EAC5B,QAA6D;IAE7D,6BAA6B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,4CAA4C;IACtD,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,IAAuB,EAAW,EAAE,CAC/C,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACpD,IAAI,EAAE,KAAK,4BAA4B,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,gKAAgK,CACjK,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,KAAK,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CACb,6KAA6K,CAC9K,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAiC;IAC1E,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,EACpC,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,EACpC,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,EACpC,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,IACE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QAClC,MAAM,CAAC,SAAS,GAAG,CAAC,EACpB,CAAC;QACD,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,EACpC,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,EACpC,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,EACpC,iFAAiF,CAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,OAAO,4BAA4B;IAC9B,YAAY,GAAG,IAAI,GAAG,EAAiC,CAAC;IACxD,QAAQ,GAAG,IAAI,GAAG,EAAqC,CAAC;IAEjE,KAAK,CAAC,mBAAmB,CAAC,MAA6B;QACrD,MAAM,UAAU,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,gBAAgB,CACxB,sCAAsC,EACtC,6DAA6D,UAAU,CAAC,MAAM,EAAE,CACjF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACjE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,iBAAyB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACxD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAiC;QAC1D,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IACE,QAAQ,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;gBACjD,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;gBACnC,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EACvC,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aAC/B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC;aAChD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,QAAgB,EAChB,IAAuB,EACvB,EAAU;QAEV,qEAAqE;QACrE,8DAA8D;QAC9D,sCAAsC;QACtC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,mCAAmC;QAC7C,CAAC;QACD,sEAAsE;QACtE,kEAAkE;QAClE,+DAA+D;QAC/D,YAAY;QACZ,IACE,IAAI,KAAK,cAAc;YACvB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,oBAAoB,CAAC,EACzE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAA8B;YACzC,GAAG,MAAM;YACT,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACxF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,QAAgB,EAChB,KAA+B;QAE/B,mEAAmE;QACnE,sEAAsE;QACtE,sEAAsE;QACtE,4BAA4B;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,yCAAyC,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;CACF;AAED,SAAS,oBAAoB,CAAI,KAAQ;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAyCD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,+BAA+B;IACjC,WAAW,CAAuB;IAClC,OAAO,CAA8B;IACrC,OAAO,CAA0B;IACjC,MAAM,CAAe;IAE9B,YAAY,OAA+C;QACzD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,wEAAwE;IACxE,WAAW,CAAC,cAAsB;QAChC,OAAO,YAAY,cAAc,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAGxB;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC;gBAC1C,QAAQ;gBACR,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;gBACxB,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc;QAKlB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,EAAE,CAAC;QAC9D,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACnC,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,oBAAoB,CAAC,EAAE,CAAC;gBAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC5E,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;oBACzC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,QAAQ,EAAE,oBAAoB,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,qEAAqE;YACrE,kEAAkE;YAClE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACvE,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACjE,MAAM,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACnE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,EAAE,CAAC;gBACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAClF,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;oBACzC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACjE,IACE,KAAK,KAAK,SAAS;gBACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,oBAAoB,CAAC;gBACvE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC;gBACjE,KAAK,CAAC,KAAK,KAAK,WAAW,EAC3B,CAAC;gBACD,gEAAgE;gBAChE,0CAA0C;gBAC1C,MAAM,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;gBACzF,MAAM,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC7D,QAAQ;YACR,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SAC9D,CAAC;IACJ,CAAC;CACF;AAwCD,iEAAiE;AACjE,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,IAAI,CAAmC;IAEhD,YAAY,IAAsC;QAChD,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IAC3B,OAAO,CAAoC;IAEpD,YAAY,OAA+D;QACzE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAGZ;QACC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAClF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,4BAA4B,CAAC,6BAA6B,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,IAAI,4BAA4B,CAAC,kCAAkC,CAAC,CAAC;QAC7E,CAAC;QACD,gEAAgE;QAChE,gEAAgE;QAChE,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,MAAM,EAAE;gBACN,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,QAAQ,EAAE,MAAM;aACjB;YACD,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;CACF"}

package/dist/agent-registry.d.ts

@@ -0,0 +1,103 @@
+import type { AgentArtifact, AgentActivationRecord, AgentActivationRestoreResult, AgentProfileActivation } from './agent-types.js';
+import type { CompiledAgentProfile } from '@victframework/kernel';
+import type { AgentProfileAuthoring } from '@victframework/sdk';
+/** Options for constructing an AgentProfileRegistry. */
+export interface AgentProfileRegistryOptions {
+    /**
+     * Resolves a capability reference to exact-revision existence for the
+     * authority envelope (fail closed at activation when missing). The
+     * composition wires this to the capability registry's revision history.
+     */
+    readonly resolveCapabilityRevision?: (id: string, revision: string) => boolean;
+    /** Injected clock (epoch ms); defaults to `Date.now`. */
+    readonly clock?: () => number;
+}
+/**
+ * Owns registered agent artifacts and compiled agent profiles for one
+ * runtime composition. Not a global registry: every composition carries
+ * its own.
+ */
+export declare class AgentProfileRegistry {
+    #private;
+    constructor(options?: AgentProfileRegistryOptions);
+    /** Register one artifact atomically; duplicates of the same (id, revision) fail. */
+    registerArtifact(artifact: AgentArtifact): void;
+    /**
+     * Register many artifacts atomically: ALL or NOTHING.
+     *
+     * Preflight (before anything becomes observable):
+     * 1. every artifact is validated and staged;
+     * 2. every staged key is checked against the EXISTING registry content;
+     * 3. every staged key is checked against the OTHER staged entries
+     *    (intra-batch duplicates).
+     *
+     * If any artifact is invalid or conflicting, nothing from the batch is
+     * committed — the registry is byte-for-byte unchanged, and a corrected
+     * batch can be retried.
+     */
+    installArtifacts(artifacts: readonly AgentArtifact[]): void;
+    /**
+     * Resolve one artifact by kind + exact revision. The result is a FRESH
+     * defensive descriptor: data members are deep-copied and frozen, function
+     * references are preserved by reference, and the registry's internal
+     * objects are never exposed. Mutating a resolved value cannot alter a
+     * later resolution or an activation.
+     */
+    resolveArtifact<T extends AgentArtifact>(kind: T['kind'], id: string, revision: string): T | undefined;
+    /**
+     * Register a compiled agent profile atomically. Duplicate registration
+     * of the same (id, revision) fails; a NEW revision for the same id adds
+     * a resolvable revision for exact pinned restoration.
+     */
+    registerProfile(profile: AgentProfileAuthoring): {
+        readonly agentProfileVersion: string;
+    };
+    /**
+     * Intentional replacement: registers a new profile revision and REPLACES
+     * the current pointer only when the caller pins the expected previous
+     * revision. Affects only later activations — never an active snapshot.
+     */
+    replaceProfile(options: {
+        readonly profile: AgentProfileAuthoring;
+        readonly expectedPreviousRevision: string;
+    }): {
+        readonly agentProfileVersion: string;
+    };
+    /** Resolve a compiled profile by id + exact revision (default: current). */
+    resolveProfile(id: string, revision?: string): CompiledAgentProfile | undefined;
+    /**
+     * Activate an agent profile: resolve EVERY revisioned component to its
+     * exact revision — including a declared structured-output contract —
+     * verify the capability envelope (fail closed when a resolver is missing),
+     * and capture an immutable snapshot. Missing or mismatched artifacts fail
+     * closed; identity-only references are never treated as executable
+     * bindings.
+     */
+    activateAgentProfile(options: {
+        readonly id: string;
+        readonly revision?: string;
+    }): AgentProfileActivation;
+    /**
+     * Restore an activation from its persisted identity record: the record is
+     * identity, NOT executable code, and it is NEVER trusted on identity
+     * strings alone. Restoration:
+     *
+     * 1. structurally validates the record (closed field sets, canonical
+     *    version forms, well-formed artifact entries — extra or
+     *    secret-bearing injected fields fail);
+     * 2. re-activates from the exact pinned revision (re-resolving EVERY
+     *    artifact — a newer live definition never substitutes);
+     * 3. recomputes the canonical activation manifest (including the resolved
+     *    sub-agent identities) and compares the stored manifest BYTES exactly
+     *    (tampered manifests, and activations whose resolved sub-agent
+     *    profiles differ from the pinned ones, fail);
+     * 4. compares both derived identities (profile + activation versions);
+     * 5. compares the stored artifact list against the reconstructed
+     *    activation for exact kind/id/revision equality in canonical order
+     *    (missing, additional, reordered, or inconsistent entries fail);
+     * 6. preserves the stored activation `createdAt`: the restored snapshot
+     *    carries the PERSISTED creation time, never the current clock of the
+     *    restoring process.
+     */
+    restoreActivation(record: AgentActivationRecord): AgentActivationRestoreResult;
+}