@yiaany/ghostapi 0.1.6 → 0.1.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +48 -2
- package/CONTRIBUTING.md +119 -117
- package/LICENSE +21 -21
- package/README.md +208 -185
- package/SECURITY.md +53 -37
- package/dist/actions/gateway.d.ts +179 -0
- package/dist/actions/gateway.js +514 -0
- package/dist/actions/gateway.js.map +1 -0
- package/dist/actions/index.d.ts +2 -0
- package/dist/actions/index.js +2 -0
- package/dist/actions/index.js.map +1 -0
- package/dist/ai/aiClient.js +4 -4
- package/dist/ai/aiClient.js.map +1 -1
- package/dist/ai/aiGenerator.d.ts +2 -2
- package/dist/ai/aiGenerator.js +21 -72
- package/dist/ai/aiGenerator.js.map +1 -1
- package/dist/ai/prompts.js +51 -51
- package/dist/ai/prompts.js.map +1 -1
- package/dist/approvals/approvalInbox.d.ts +150 -0
- package/dist/approvals/approvalInbox.js +412 -0
- package/dist/approvals/approvalInbox.js.map +1 -0
- package/dist/approvals/index.d.ts +2 -0
- package/dist/approvals/index.js +2 -0
- package/dist/approvals/index.js.map +1 -0
- package/dist/behavior/behaviorStore.d.ts +2 -0
- package/dist/behavior/behaviorStore.js +50 -46
- package/dist/behavior/behaviorStore.js.map +1 -1
- package/dist/cache/index.d.ts +2 -0
- package/dist/cache/index.js +58 -14
- package/dist/cache/index.js.map +1 -1
- package/dist/cli/index.js +438 -58
- package/dist/cli/index.js.map +1 -1
- package/dist/cli/openUrl.d.ts +10 -0
- package/dist/cli/openUrl.js +31 -0
- package/dist/cli/openUrl.js.map +1 -0
- package/dist/cli/parser.d.ts +155 -0
- package/dist/cli/parser.js +504 -2
- package/dist/cli/parser.js.map +1 -1
- package/dist/config/dataPaths.d.ts +31 -0
- package/dist/config/dataPaths.js +45 -0
- package/dist/config/dataPaths.js.map +1 -0
- package/dist/config/localConfig.d.ts +1 -2
- package/dist/config/localConfig.js +27 -21
- package/dist/config/localConfig.js.map +1 -1
- package/dist/config/serverConfig.d.ts +2 -0
- package/dist/config/serverConfig.js +8 -1
- package/dist/config/serverConfig.js.map +1 -1
- package/dist/contracts/contract.d.ts +76 -0
- package/dist/contracts/contract.js +603 -0
- package/dist/contracts/contract.js.map +1 -0
- package/dist/contracts/index.d.ts +2 -0
- package/dist/contracts/index.js +2 -0
- package/dist/contracts/index.js.map +1 -0
- package/dist/credentials/credentialBroker.d.ts +207 -0
- package/dist/credentials/credentialBroker.js +588 -0
- package/dist/credentials/credentialBroker.js.map +1 -0
- package/dist/credentials/index.d.ts +2 -0
- package/dist/credentials/index.js +2 -0
- package/dist/credentials/index.js.map +1 -0
- package/dist/dashboard/app.js +685 -615
- package/dist/dashboard/index.html +13 -7
- package/dist/dashboard/styles.css +349 -349
- package/dist/egress/capabilities.d.ts +32 -0
- package/dist/egress/capabilities.js +165 -0
- package/dist/egress/capabilities.js.map +1 -0
- package/dist/egress/linuxBootstrap.d.ts +1 -0
- package/dist/egress/linuxBootstrap.js +121 -0
- package/dist/egress/linuxBootstrap.js.map +1 -0
- package/dist/egress/run.d.ts +18 -0
- package/dist/egress/run.js +305 -0
- package/dist/egress/run.js.map +1 -0
- package/dist/errors/errorEngine.d.ts +2 -2
- package/dist/errors/errorEngine.js +3 -40
- package/dist/errors/errorEngine.js.map +1 -1
- package/dist/evals/evals.d.ts +126 -0
- package/dist/evals/evals.js +466 -0
- package/dist/evals/evals.js.map +1 -0
- package/dist/evals/index.d.ts +2 -0
- package/dist/evals/index.js +2 -0
- package/dist/evals/index.js.map +1 -0
- package/dist/evidence/index.d.ts +2 -0
- package/dist/evidence/index.js +2 -0
- package/dist/evidence/index.js.map +1 -0
- package/dist/evidence/report.d.ts +143 -0
- package/dist/evidence/report.js +556 -0
- package/dist/evidence/report.js.map +1 -0
- package/dist/fault/faultLab.d.ts +5 -4
- package/dist/fault/faultLab.js +66 -24
- package/dist/fault/faultLab.js.map +1 -1
- package/dist/index.d.ts +46 -0
- package/dist/index.js +23 -0
- package/dist/index.js.map +1 -1
- package/dist/inventory/analysis.d.ts +12 -0
- package/dist/inventory/analysis.js +457 -0
- package/dist/inventory/analysis.js.map +1 -0
- package/dist/inventory/index.d.ts +5 -0
- package/dist/inventory/index.js +4 -0
- package/dist/inventory/index.js.map +1 -0
- package/dist/inventory/inventoryController.d.ts +53 -0
- package/dist/inventory/inventoryController.js +1044 -0
- package/dist/inventory/inventoryController.js.map +1 -0
- package/dist/inventory/types.d.ts +579 -0
- package/dist/inventory/types.js +787 -0
- package/dist/inventory/types.js.map +1 -0
- package/dist/landing/assets/index-CxWsopzP.css +1 -0
- package/dist/landing/assets/index-DZlpyhqd.js +55 -0
- package/dist/landing/assets/index-Dk-Xezs3.js +55 -0
- package/dist/landing/index.html +15 -15
- package/dist/ledger/actionLedger.d.ts +125 -0
- package/dist/ledger/actionLedger.js +594 -0
- package/dist/ledger/actionLedger.js.map +1 -0
- package/dist/ledger/index.d.ts +2 -0
- package/dist/ledger/index.js +2 -0
- package/dist/ledger/index.js.map +1 -0
- package/dist/mcp/server.js +4 -3
- package/dist/mcp/server.js.map +1 -1
- package/dist/policy/index.d.ts +3 -0
- package/dist/policy/index.js +2 -0
- package/dist/policy/index.js.map +1 -0
- package/dist/policy/policy.d.ts +14 -0
- package/dist/policy/policy.js +282 -0
- package/dist/policy/policy.js.map +1 -0
- package/dist/policy/types.d.ts +52 -0
- package/dist/policy/types.js +2 -0
- package/dist/policy/types.js.map +1 -0
- package/dist/productTelemetry/index.d.ts +16 -0
- package/dist/productTelemetry/index.js +142 -0
- package/dist/productTelemetry/index.js.map +1 -0
- package/dist/providers/conformance.d.ts +7 -0
- package/dist/providers/conformance.js +48 -0
- package/dist/providers/conformance.js.map +1 -0
- package/dist/providers/index.d.ts +4 -2
- package/dist/providers/index.js +3 -1
- package/dist/providers/index.js.map +1 -1
- package/dist/providers/packs/resendPack.d.ts +2 -0
- package/dist/providers/packs/resendPack.js +147 -0
- package/dist/providers/packs/resendPack.js.map +1 -0
- package/dist/providers/packs/stripePack.d.ts +2 -0
- package/dist/providers/packs/stripePack.js +852 -0
- package/dist/providers/packs/stripePack.js.map +1 -0
- package/dist/providers/registry.d.ts +7 -3
- package/dist/providers/registry.js +55 -4
- package/dist/providers/registry.js.map +1 -1
- package/dist/providers/resend.js +2 -11
- package/dist/providers/resend.js.map +1 -1
- package/dist/providers/runtime.d.ts +8 -0
- package/dist/providers/runtime.js +48 -0
- package/dist/providers/runtime.js.map +1 -0
- package/dist/providers/stripeWebhook.d.ts +13 -0
- package/dist/providers/stripeWebhook.js +50 -0
- package/dist/providers/stripeWebhook.js.map +1 -0
- package/dist/providers/types.d.ts +153 -0
- package/dist/proxy/cacheKey.js +3 -3
- package/dist/proxy/cacheKey.js.map +1 -1
- package/dist/proxy/providerDetector.d.ts +2 -7
- package/dist/proxy/providerDetector.js +4 -4
- package/dist/proxy/providerDetector.js.map +1 -1
- package/dist/proxy/proxyHandler.js +116 -12
- package/dist/proxy/proxyHandler.js.map +1 -1
- package/dist/proxy/requestNormalizer.d.ts +0 -1
- package/dist/proxy/requestNormalizer.js +2 -5
- package/dist/proxy/requestNormalizer.js.map +1 -1
- package/dist/reliability/costGovernance.d.ts +175 -0
- package/dist/reliability/costGovernance.js +515 -0
- package/dist/reliability/costGovernance.js.map +1 -0
- package/dist/reliability/index.d.ts +8 -0
- package/dist/reliability/index.js +5 -0
- package/dist/reliability/index.js.map +1 -0
- package/dist/reliability/reconciliation.d.ts +157 -0
- package/dist/reliability/reconciliation.js +522 -0
- package/dist/reliability/reconciliation.js.map +1 -0
- package/dist/reliability/runtimeHealth.d.ts +60 -0
- package/dist/reliability/runtimeHealth.js +356 -0
- package/dist/reliability/runtimeHealth.js.map +1 -0
- package/dist/reliability/slo.d.ts +131 -0
- package/dist/reliability/slo.js +375 -0
- package/dist/reliability/slo.js.map +1 -0
- package/dist/report/safetyReport.js +7 -3
- package/dist/report/safetyReport.js.map +1 -1
- package/dist/safety/index.d.ts +2 -0
- package/dist/safety/index.js +2 -0
- package/dist/safety/index.js.map +1 -0
- package/dist/safety/safetyController.d.ts +187 -0
- package/dist/safety/safetyController.js +477 -0
- package/dist/safety/safetyController.js.map +1 -0
- package/dist/scenarios/scenarioBundle.d.ts +75 -0
- package/dist/scenarios/scenarioBundle.js +750 -0
- package/dist/scenarios/scenarioBundle.js.map +1 -0
- package/dist/scenarios/scenarioStore.d.ts +1 -0
- package/dist/scenarios/scenarioStore.js +47 -32
- package/dist/scenarios/scenarioStore.js.map +1 -1
- package/dist/security/headerSanitizer.d.ts +2 -0
- package/dist/security/headerSanitizer.js +36 -1
- package/dist/security/headerSanitizer.js.map +1 -1
- package/dist/security/secrets.js +24 -4
- package/dist/security/secrets.js.map +1 -1
- package/dist/server/accessControl.d.ts +5 -0
- package/dist/server/accessControl.js +100 -0
- package/dist/server/accessControl.js.map +1 -0
- package/dist/server/createServer.d.ts +0 -5
- package/dist/server/createServer.js +9 -29
- package/dist/server/createServer.js.map +1 -1
- package/dist/server/eventsStore.d.ts +6 -1
- package/dist/server/eventsStore.js +83 -15
- package/dist/server/eventsStore.js.map +1 -1
- package/dist/server/routes.js +36 -10
- package/dist/server/routes.js.map +1 -1
- package/dist/server/sse.d.ts +2 -1
- package/dist/server/sse.js +15 -3
- package/dist/server/sse.js.map +1 -1
- package/dist/setup/setupGenerator.js +53 -6
- package/dist/setup/setupGenerator.js.map +1 -1
- package/dist/state/stateStore.d.ts +5 -0
- package/dist/state/stateStore.js +48 -62
- package/dist/state/stateStore.js.map +1 -1
- package/dist/storage/fileStore.d.ts +10 -0
- package/dist/storage/fileStore.js +131 -0
- package/dist/storage/fileStore.js.map +1 -0
- package/dist/teamControl/controlPlane.d.ts +255 -0
- package/dist/teamControl/controlPlane.js +918 -0
- package/dist/teamControl/controlPlane.js.map +1 -0
- package/dist/teamControl/deployment.d.ts +33 -0
- package/dist/teamControl/deployment.js +67 -0
- package/dist/teamControl/deployment.js.map +1 -0
- package/dist/teamControl/index.d.ts +4 -0
- package/dist/teamControl/index.js +3 -0
- package/dist/teamControl/index.js.map +1 -0
- package/dist/tests/testGenerator.js +4 -1
- package/dist/tests/testGenerator.js.map +1 -1
- package/dist/trust/index.d.ts +2 -0
- package/dist/trust/index.js +2 -0
- package/dist/trust/index.js.map +1 -0
- package/dist/trust/trustLadder.d.ts +182 -0
- package/dist/trust/trustLadder.js +560 -0
- package/dist/trust/trustLadder.js.map +1 -0
- package/dist/worlds/index.d.ts +2 -0
- package/dist/worlds/index.js +2 -0
- package/dist/worlds/index.js.map +1 -0
- package/dist/worlds/worlds.d.ts +160 -0
- package/dist/worlds/worlds.js +491 -0
- package/dist/worlds/worlds.js.map +1 -0
- package/docs/assets/dashboard.png +0 -0
- package/docs/ci.md +49 -0
- package/docs/commercial/README.md +29 -0
- package/docs/commercial/data-inventory.md +36 -0
- package/docs/commercial/manual-invoicing.md +44 -0
- package/docs/commercial/metrics.md +51 -0
- package/docs/commercial/pricing.md +103 -0
- package/docs/commercial/privacy-policy-draft.md +41 -0
- package/docs/commercial/terms-topics-for-counsel.md +51 -0
- package/docs/design-partners/README.md +52 -0
- package/docs/design-partners/demo-narratives.md +33 -0
- package/docs/design-partners/design-partner-offer.md +39 -0
- package/docs/design-partners/discovery-questions.md +28 -0
- package/docs/design-partners/feedback-capture-template.md +48 -0
- package/docs/design-partners/icp-one-pager.md +43 -0
- package/docs/design-partners/onboarding-checklist.md +33 -0
- package/docs/design-partners/pilot-success-criteria.md +27 -0
- package/docs/design-partners/pricing-interview-script.md +18 -0
- package/docs/design-partners/telemetry-plan.md +48 -0
- package/docs/development/baseline.md +114 -0
- package/docs/development/onboarding-smoke.md +37 -0
- package/docs/development/verification-0.1.8.md +25 -0
- package/docs/enterprise-product-roadmap-ru.md +1879 -0
- package/docs/fundraising/README.md +87 -0
- package/docs/fundraising/data-room-checklist.md +72 -0
- package/docs/fundraising/demo-script.md +52 -0
- package/docs/fundraising/design-partners-50.md +74 -0
- package/docs/fundraising/launch-posts.md +37 -0
- package/docs/fundraising/metrics-and-evidence.md +30 -0
- package/docs/fundraising/roadmap-12-month.md +25 -0
- package/docs/fundraising/technical-due-diligence-index.md +37 -0
- package/docs/fundraising/yc-application.md +25 -0
- package/docs/github-actions.md +84 -0
- package/docs/hosted-pilot.md +111 -0
- package/docs/mcp.md +52 -50
- package/docs/operations/disaster-recovery-runbook.md +81 -0
- package/docs/operations/kill-switch-runbook.md +32 -0
- package/docs/policy.md +61 -0
- package/docs/providers/authoring-packs.md +175 -0
- package/docs/providers/stripe-core-pack.md +82 -0
- package/docs/release-checklist.md +83 -71
- package/docs/release-migration-and-rollback.md +63 -0
- package/docs/release-readiness.md +39 -0
- package/docs/security/action-gateway-threat-model.md +34 -0
- package/docs/security/action-ledger-incident-replay-threat-model.md +42 -0
- package/docs/security/approval-inbox-threat-model.md +35 -0
- package/docs/security/credential-broker-threat-model.md +52 -0
- package/docs/security/egress-threat-model.md +126 -0
- package/docs/security/inventory-threat-model.md +104 -0
- package/docs/security/kill-switch-budgets-threat-model.md +37 -0
- package/docs/security/reliability-threat-model.md +111 -0
- package/docs/security/trust-ladder-threat-model.md +33 -0
- package/docs/team-control-plane.md +72 -0
- package/docs/usage.md +571 -57
- package/examples/README.md +10 -0
- package/examples/agent-instructions/README.md +39 -39
- package/examples/ci-smoke/README.md +21 -0
- package/examples/ci-smoke/ghostapi.policy.yaml +22 -0
- package/examples/ci-smoke/package.json +9 -0
- package/examples/ci-smoke/production-egress.mjs +2 -0
- package/examples/ci-smoke/safe.mjs +17 -0
- package/examples/evals/README.md +24 -0
- package/examples/evals/retry-after.eval.json +52 -0
- package/examples/generic-rest/README.md +27 -27
- package/examples/github-fetch/README.md +35 -35
- package/examples/openai-streaming/README.md +16 -0
- package/examples/openai-streaming/streaming-tool-call.mjs +31 -0
- package/examples/policy/ghostapi.policy.yaml +27 -0
- package/examples/record-replay/README.md +19 -0
- package/examples/record-replay/replay-requests.json +22 -0
- package/examples/record-replay/stripe-checkout.har.json +30 -0
- package/examples/resend-node/README.md +22 -22
- package/examples/stripe-node/README.md +35 -29
- package/examples/stripe-node/checkout-flow.mjs +61 -0
- package/examples/twilio-node/README.md +21 -21
- package/examples/worlds/README.md +19 -0
- package/examples/worlds/subscription-recovery.mjs +12 -0
- package/package.json +26 -11
- package/dist/providers/stripe.d.ts +0 -2
- package/dist/providers/stripe.js +0 -15
- package/dist/providers/stripe.js.map +0 -1
- package/docs/assets/ghostapi-avatar.png +0 -0
|
@@ -0,0 +1,375 @@
|
|
|
1
|
+
import { randomUUID } from "node:crypto";
|
|
2
|
+
import { lstat, readFile } from "node:fs/promises";
|
|
3
|
+
import { dirname } from "node:path";
|
|
4
|
+
import { getDataPaths } from "../config/dataPaths.js";
|
|
5
|
+
import { sanitizeSecretString } from "../security/secrets.js";
|
|
6
|
+
import { atomicWriteJson, ensurePrivateDirectory, withFileLock } from "../storage/fileStore.js";
|
|
7
|
+
const SCHEMA_VERSION = 1;
|
|
8
|
+
const KIND = "ghostapi.slo";
|
|
9
|
+
const MAX_STORE_BYTES = 4 * 1024 * 1024;
|
|
10
|
+
const MAX_TARGETS = 32;
|
|
11
|
+
const MAX_SAMPLES_PER_METRIC = 5_000;
|
|
12
|
+
const MAX_SAMPLES = 10_000;
|
|
13
|
+
const MAX_RECORD_BATCH = 1_000;
|
|
14
|
+
const MIN_WINDOW_MS = 60 * 60 * 1000;
|
|
15
|
+
const MAX_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
|
|
16
|
+
const IDENTIFIER = /^[a-z0-9][a-z0-9._-]{0,127}$/;
|
|
17
|
+
export const SLO_METRICS = ["policy_decision", "approval_delivery", "execution_latency", "availability", "duplicate_prevention", "receipt_verification"];
|
|
18
|
+
export const SLO_LATENCY_METRICS = ["approval_delivery", "execution_latency"];
|
|
19
|
+
export class SloError extends Error {
|
|
20
|
+
constructor(message) {
|
|
21
|
+
super(message);
|
|
22
|
+
this.name = "SloError";
|
|
23
|
+
}
|
|
24
|
+
}
|
|
25
|
+
const sloRecordCapabilities = new WeakSet();
|
|
26
|
+
export function createSloRecordIdentity() {
|
|
27
|
+
const capability = Object.freeze({});
|
|
28
|
+
sloRecordCapabilities.add(capability);
|
|
29
|
+
return capability;
|
|
30
|
+
}
|
|
31
|
+
export function createLocalSloController(options = {}) {
|
|
32
|
+
return new LocalSloController(options);
|
|
33
|
+
}
|
|
34
|
+
export class LocalSloController {
|
|
35
|
+
path;
|
|
36
|
+
now;
|
|
37
|
+
operatorAuthorizer;
|
|
38
|
+
constructor(options = {}) {
|
|
39
|
+
this.path = options.path ?? getDataPaths().sloStore;
|
|
40
|
+
this.now = options.now ?? (() => new Date());
|
|
41
|
+
this.operatorAuthorizer = options.operatorAuthorizer ?? createDisabledSloOperatorAuthorizer();
|
|
42
|
+
}
|
|
43
|
+
async configureTarget(input) {
|
|
44
|
+
await this.authorize(input.identity, "slo.configure");
|
|
45
|
+
const target = validateTarget(input.target);
|
|
46
|
+
return this.mutate((state) => {
|
|
47
|
+
const existing = state.targets.find((candidate) => candidate.id === target.id);
|
|
48
|
+
if (existing === undefined) {
|
|
49
|
+
if (state.targets.length >= MAX_TARGETS)
|
|
50
|
+
throw new SloError("SLO target limit was reached.");
|
|
51
|
+
state.targets.push(target);
|
|
52
|
+
}
|
|
53
|
+
else {
|
|
54
|
+
Object.assign(existing, target);
|
|
55
|
+
}
|
|
56
|
+
return clone(target);
|
|
57
|
+
});
|
|
58
|
+
}
|
|
59
|
+
async removeTarget(input) {
|
|
60
|
+
await this.authorize(input.identity, "slo.configure");
|
|
61
|
+
const targetId = identifier(input.targetId, "SLO target id");
|
|
62
|
+
await this.mutate((state) => {
|
|
63
|
+
const index = state.targets.findIndex((candidate) => candidate.id === targetId);
|
|
64
|
+
if (index === -1)
|
|
65
|
+
throw new SloError("SLO target was not found.");
|
|
66
|
+
state.targets.splice(index, 1);
|
|
67
|
+
});
|
|
68
|
+
}
|
|
69
|
+
async recordSample(input, capability) {
|
|
70
|
+
this.assertRecordPermission(capability);
|
|
71
|
+
const sample = validateSample(input, this.now().toISOString());
|
|
72
|
+
return this.mutate((state) => {
|
|
73
|
+
trimSamples(state, this.windowBoundary());
|
|
74
|
+
state.samples.push(sample);
|
|
75
|
+
trimSamples(state, this.windowBoundary());
|
|
76
|
+
return clone(sample);
|
|
77
|
+
});
|
|
78
|
+
}
|
|
79
|
+
async recordSamples(input, capability) {
|
|
80
|
+
this.assertRecordPermission(capability);
|
|
81
|
+
if (input.length > MAX_RECORD_BATCH)
|
|
82
|
+
throw new SloError(`SLO record batch is too large; limit is ${MAX_RECORD_BATCH} samples per call.`);
|
|
83
|
+
const now = this.now().toISOString();
|
|
84
|
+
const recorded = input.map((sample) => validateSample(sample, now));
|
|
85
|
+
return this.mutate((state) => {
|
|
86
|
+
trimSamples(state, this.windowBoundary());
|
|
87
|
+
for (const sample of recorded)
|
|
88
|
+
state.samples.push(sample);
|
|
89
|
+
trimSamples(state, this.windowBoundary());
|
|
90
|
+
return clone(recorded);
|
|
91
|
+
});
|
|
92
|
+
}
|
|
93
|
+
async evaluate(input) {
|
|
94
|
+
await this.authorize(input.identity, "slo.inspect");
|
|
95
|
+
const now = this.timestamp();
|
|
96
|
+
const runId = input.runId === undefined ? `slo-${randomUUID().replace(/-/g, "").slice(0, 32)}` : identifier(input.runId, "SLO run id");
|
|
97
|
+
const state = await this.read();
|
|
98
|
+
const windowEnd = now;
|
|
99
|
+
const windowStart = new Date(Date.parse(windowEnd) - MAX_WINDOW_MS).toISOString();
|
|
100
|
+
const evaluations = state.targets.map((target) => evaluateTarget(target, state.samples, now));
|
|
101
|
+
return { schemaVersion: 1, kind: "ghostapi.slo-report", generatedAt: now, runId, windowStart, windowEnd, evaluations };
|
|
102
|
+
}
|
|
103
|
+
async inspect(input) {
|
|
104
|
+
await this.authorize(input.identity, "slo.inspect");
|
|
105
|
+
const state = await this.read();
|
|
106
|
+
const sampleCounts = Object.fromEntries(SLO_METRICS.map((metric) => [metric, state.samples.filter((sample) => sample.metric === metric).length]));
|
|
107
|
+
return { targets: clone(state.targets), sampleCounts };
|
|
108
|
+
}
|
|
109
|
+
assertRecordPermission(capability) {
|
|
110
|
+
if (capability !== null && typeof capability === "object" && sloRecordCapabilities.has(capability))
|
|
111
|
+
return;
|
|
112
|
+
throw new SloError("SLO sample recording requires a verified record capability.");
|
|
113
|
+
}
|
|
114
|
+
async authorize(identity, permission) {
|
|
115
|
+
const operator = validateOperator(await this.operatorAuthorizer.authenticate(identity));
|
|
116
|
+
if (!operator.permissions.includes(permission))
|
|
117
|
+
throw new SloError(`SLO operator lacks required permission: ${permission}.`);
|
|
118
|
+
return operator;
|
|
119
|
+
}
|
|
120
|
+
windowBoundary() {
|
|
121
|
+
return new Date(Date.parse(this.timestamp()) - MAX_WINDOW_MS).toISOString();
|
|
122
|
+
}
|
|
123
|
+
timestamp() {
|
|
124
|
+
const value = this.now();
|
|
125
|
+
if (!(value instanceof Date) || !Number.isFinite(value.getTime()))
|
|
126
|
+
throw new SloError("SLO clock is invalid.");
|
|
127
|
+
return value.toISOString();
|
|
128
|
+
}
|
|
129
|
+
async read() {
|
|
130
|
+
await ensurePrivateDirectory(dirname(this.path));
|
|
131
|
+
const info = await lstat(this.path).catch((error) => isErrorCode(error, "ENOENT") ? null : Promise.reject(error));
|
|
132
|
+
if (info === null)
|
|
133
|
+
return emptyState();
|
|
134
|
+
if (!info.isFile() || info.isSymbolicLink())
|
|
135
|
+
throw new SloError("SLO store must be a regular non-symlink file.");
|
|
136
|
+
const source = await readFile(this.path, "utf8");
|
|
137
|
+
if (Buffer.byteLength(source, "utf8") > MAX_STORE_BYTES)
|
|
138
|
+
throw new SloError("SLO store exceeds its size limit.");
|
|
139
|
+
try {
|
|
140
|
+
return validateState(JSON.parse(source));
|
|
141
|
+
}
|
|
142
|
+
catch (error) {
|
|
143
|
+
if (error instanceof SloError)
|
|
144
|
+
throw error;
|
|
145
|
+
throw new SloError("SLO store is not valid JSON.");
|
|
146
|
+
}
|
|
147
|
+
}
|
|
148
|
+
async mutate(operation) {
|
|
149
|
+
return withFileLock(this.path, async () => {
|
|
150
|
+
const state = await this.read();
|
|
151
|
+
const result = operation(state);
|
|
152
|
+
await atomicWriteJson(this.path, validateState(state));
|
|
153
|
+
return result;
|
|
154
|
+
});
|
|
155
|
+
}
|
|
156
|
+
}
|
|
157
|
+
export function createDisabledSloOperatorAuthorizer() {
|
|
158
|
+
return { async authenticate() { throw new SloError("SLO operator authorization is not configured."); } };
|
|
159
|
+
}
|
|
160
|
+
export function createTestSloOperatorAuthorizer() {
|
|
161
|
+
const issued = new WeakSet();
|
|
162
|
+
return {
|
|
163
|
+
authorizer: { async authenticate(identity) { if (identity === null || typeof identity !== "object" || !issued.has(identity))
|
|
164
|
+
throw new SloError("SLO operator identity is not authenticated."); return validateOperator(identity); } },
|
|
165
|
+
issue(input) { const operator = Object.freeze(validateOperator(input)); issued.add(operator); return operator; }
|
|
166
|
+
};
|
|
167
|
+
}
|
|
168
|
+
export function examplePilotSloTargets() {
|
|
169
|
+
return [
|
|
170
|
+
{ id: "pilot.availability", metric: "availability", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 9_990, description: "Example pilot target: 99.9% of executed actions complete without a failed or ambiguous outcome." },
|
|
171
|
+
{ id: "pilot.duplicate_prevention", metric: "duplicate_prevention", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 10_000, description: "Example pilot target: no action produces more than one provider receipt in the local ledger." },
|
|
172
|
+
{ id: "pilot.receipt_verification", metric: "receipt_verification", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 9_950, description: "Example pilot target: committed actions carry a verified provider receipt." },
|
|
173
|
+
{ id: "pilot.execution_latency", metric: "execution_latency", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 9_900, latencyMaxMs: 5_000, description: "Example pilot target: 99% of executions finish within 5 seconds." },
|
|
174
|
+
{ id: "pilot.policy_decision", metric: "policy_decision", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 9_990, description: "Example pilot target: policy decisions recorded in the ledger are always admitted." },
|
|
175
|
+
{ id: "pilot.approval_delivery", metric: "approval_delivery", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 9_990, latencyMaxMs: 5 * 60 * 1000, description: "Example pilot target: approval artifacts reach execution within 5 minutes." }
|
|
176
|
+
];
|
|
177
|
+
}
|
|
178
|
+
export function formatSloReport(report) {
|
|
179
|
+
const lines = [`SLO report ${report.runId} at ${report.generatedAt}`];
|
|
180
|
+
if (report.evaluations.length === 0)
|
|
181
|
+
lines.push(" (no SLO targets configured)");
|
|
182
|
+
for (const evaluation of report.evaluations) {
|
|
183
|
+
const status = evaluation.status === "met" ? "met" : evaluation.status === "breached" ? "BREACHED" : "insufficient data";
|
|
184
|
+
const budget = evaluation.status === "met" ? ` (budget remaining ${evaluation.budgetRemainingBps} bps)` : evaluation.status === "breached" ? ` (short ${Math.abs(evaluation.budgetRemainingBps)} bps)` : "";
|
|
185
|
+
lines.push(` ${evaluation.metric} [${evaluation.targetId}] ${status} ok ${evaluation.okCount}/${evaluation.sampleCount} = ${evaluation.okRateBps} bps vs ${evaluation.targetBps} bps${budget}${evaluation.latencyMaxMs === undefined ? "" : ` (latency max ${evaluation.latencyMaxMs} ms)`}`);
|
|
186
|
+
}
|
|
187
|
+
return lines.join("\n");
|
|
188
|
+
}
|
|
189
|
+
function emptyState() {
|
|
190
|
+
return { schemaVersion: 1, kind: "ghostapi.slo", targets: [], samples: [] };
|
|
191
|
+
}
|
|
192
|
+
function validateState(value) {
|
|
193
|
+
const state = object(value, "SLO store must be an object.");
|
|
194
|
+
exactKeys(state, ["schemaVersion", "kind", "targets", "samples"], "SLO store");
|
|
195
|
+
if (state.schemaVersion !== SCHEMA_VERSION || state.kind !== KIND)
|
|
196
|
+
throw new SloError("Unsupported SLO store schema.");
|
|
197
|
+
const targets = array(state.targets, "SLO targets", MAX_TARGETS).map(validateTarget);
|
|
198
|
+
unique(targets.map((target) => target.id), "SLO target ids");
|
|
199
|
+
const samples = array(state.samples, "SLO samples", MAX_SAMPLES).map(validateStoredSample);
|
|
200
|
+
return { schemaVersion: 1, kind: "ghostapi.slo", targets, samples };
|
|
201
|
+
}
|
|
202
|
+
function validateTarget(value) {
|
|
203
|
+
const target = object(value, "SLO target is invalid.");
|
|
204
|
+
exactKeys(target, ["id", "metric", "windowMs", "minimumSamples", "targetBps", "latencyMaxMs", "description"], "SLO target", ["latencyMaxMs", "description"]);
|
|
205
|
+
if (!SLO_METRICS.includes(target.metric))
|
|
206
|
+
throw new SloError("SLO target metric is invalid.");
|
|
207
|
+
const result = {
|
|
208
|
+
id: identifier(target.id, "SLO target id"),
|
|
209
|
+
metric: target.metric,
|
|
210
|
+
windowMs: boundedMs(target.windowMs, "SLO target window"),
|
|
211
|
+
minimumSamples: positive(target.minimumSamples, "SLO target minimum samples", MAX_SAMPLES_PER_METRIC),
|
|
212
|
+
targetBps: bps(target.targetBps, "SLO target rate"),
|
|
213
|
+
...(target.latencyMaxMs === undefined ? {} : { latencyMaxMs: nonNegative(target.latencyMaxMs, "SLO target latency", 24 * 60 * 60 * 1000) }),
|
|
214
|
+
...(target.description === undefined ? {} : { description: text(target.description, "SLO target description", 240) })
|
|
215
|
+
};
|
|
216
|
+
if (SLO_LATENCY_METRICS.includes(result.metric) && result.latencyMaxMs === undefined)
|
|
217
|
+
throw new SloError("Latency SLO targets require a latencyMaxMs bound.");
|
|
218
|
+
return result;
|
|
219
|
+
}
|
|
220
|
+
function validateStoredSample(value) {
|
|
221
|
+
const sample = object(value, "SLO sample is invalid.");
|
|
222
|
+
exactKeys(sample, ["schemaVersion", "kind", "sampleId", "metric", "ok", "durationMs", "recordedAt", "runId", "actionId", "labels"], "SLO sample", ["durationMs", "runId", "actionId"]);
|
|
223
|
+
if (sample.schemaVersion !== SCHEMA_VERSION || sample.kind !== "ghostapi.slo-sample")
|
|
224
|
+
throw new SloError("Unsupported SLO sample schema.");
|
|
225
|
+
if (!SLO_METRICS.includes(sample.metric) || typeof sample.ok !== "boolean")
|
|
226
|
+
throw new SloError("SLO sample metric or ok flag is invalid.");
|
|
227
|
+
return {
|
|
228
|
+
schemaVersion: 1,
|
|
229
|
+
kind: "ghostapi.slo-sample",
|
|
230
|
+
sampleId: identifier(sample.sampleId, "SLO sample id"),
|
|
231
|
+
metric: sample.metric,
|
|
232
|
+
ok: sample.ok,
|
|
233
|
+
...(sample.durationMs === undefined ? {} : { durationMs: nonNegative(sample.durationMs, "SLO sample duration", 24 * 60 * 60 * 1000) }),
|
|
234
|
+
recordedAt: timestamp(sample.recordedAt, "SLO sample time"),
|
|
235
|
+
...(sample.runId === undefined ? {} : { runId: identifier(sample.runId, "SLO sample run id") }),
|
|
236
|
+
...(sample.actionId === undefined ? {} : { actionId: identifier(sample.actionId, "SLO sample action id") }),
|
|
237
|
+
labels: validateLabels(sample.labels)
|
|
238
|
+
};
|
|
239
|
+
}
|
|
240
|
+
function validateSample(input, now) {
|
|
241
|
+
if (!SLO_METRICS.includes(input.metric))
|
|
242
|
+
throw new SloError("SLO sample metric is invalid.");
|
|
243
|
+
if (typeof input.ok !== "boolean")
|
|
244
|
+
throw new SloError("SLO sample ok flag is invalid.");
|
|
245
|
+
const result = {
|
|
246
|
+
schemaVersion: 1,
|
|
247
|
+
kind: "ghostapi.slo-sample",
|
|
248
|
+
sampleId: `sample-${randomUUID().replace(/-/g, "").slice(0, 32)}`,
|
|
249
|
+
metric: input.metric,
|
|
250
|
+
ok: input.ok,
|
|
251
|
+
...(input.durationMs === undefined ? {} : { durationMs: nonNegative(input.durationMs, "SLO sample duration", 24 * 60 * 60 * 1000) }),
|
|
252
|
+
recordedAt: now,
|
|
253
|
+
...(input.runId === undefined ? {} : { runId: identifier(input.runId, "SLO sample run id") }),
|
|
254
|
+
...(input.actionId === undefined ? {} : { actionId: identifier(input.actionId, "SLO sample action id") }),
|
|
255
|
+
labels: input.labels === undefined ? {} : validateLabels(input.labels)
|
|
256
|
+
};
|
|
257
|
+
return result;
|
|
258
|
+
}
|
|
259
|
+
function validateLabels(value) {
|
|
260
|
+
const labels = object(value ?? {}, "SLO sample labels are invalid.");
|
|
261
|
+
exactKeys(labels, ["tenantId", "agentId", "projectId", "provider", "actionClass", "workflowId"], "SLO sample labels");
|
|
262
|
+
const result = {};
|
|
263
|
+
for (const key of ["tenantId", "agentId", "projectId", "provider", "actionClass", "workflowId"]) {
|
|
264
|
+
if (labels[key] !== undefined)
|
|
265
|
+
result[key] = identifier(labels[key], `SLO label ${key}`);
|
|
266
|
+
}
|
|
267
|
+
return result;
|
|
268
|
+
}
|
|
269
|
+
function evaluateTarget(target, samples, now) {
|
|
270
|
+
const windowStart = Date.parse(now) - target.windowMs;
|
|
271
|
+
const inWindow = samples.filter((sample) => sample.metric === target.metric && Date.parse(sample.recordedAt) >= windowStart && Date.parse(sample.recordedAt) <= Date.parse(now) + 1_000);
|
|
272
|
+
if (inWindow.length < target.minimumSamples) {
|
|
273
|
+
return { targetId: target.id, metric: target.metric, targetBps: target.targetBps, status: "insufficient_data", windowMs: target.windowMs, sampleCount: inWindow.length, okCount: 0, okRateBps: 0, budgetRemainingBps: 0, ...(target.latencyMaxMs === undefined ? {} : { latencyMaxMs: target.latencyMaxMs }) };
|
|
274
|
+
}
|
|
275
|
+
let okCount = 0;
|
|
276
|
+
for (const sample of inWindow) {
|
|
277
|
+
if (SLO_LATENCY_METRICS.includes(sample.metric)) {
|
|
278
|
+
if (sample.ok && sample.durationMs !== undefined && sample.durationMs <= target.latencyMaxMs)
|
|
279
|
+
okCount += 1;
|
|
280
|
+
}
|
|
281
|
+
else if (sample.ok) {
|
|
282
|
+
okCount += 1;
|
|
283
|
+
}
|
|
284
|
+
}
|
|
285
|
+
const okRateBps = rateBps(okCount, inWindow.length);
|
|
286
|
+
const status = okRateBps >= target.targetBps ? "met" : "breached";
|
|
287
|
+
return { targetId: target.id, metric: target.metric, targetBps: target.targetBps, status, windowMs: target.windowMs, sampleCount: inWindow.length, okCount, okRateBps, budgetRemainingBps: okRateBps - target.targetBps, ...(target.latencyMaxMs === undefined ? {} : { latencyMaxMs: target.latencyMaxMs }) };
|
|
288
|
+
}
|
|
289
|
+
function trimSamples(state, boundary) {
|
|
290
|
+
const boundaryMs = Date.parse(boundary);
|
|
291
|
+
state.samples = state.samples.filter((sample) => Date.parse(sample.recordedAt) >= boundaryMs);
|
|
292
|
+
for (const metric of SLO_METRICS) {
|
|
293
|
+
const metricSamples = state.samples.filter((sample) => sample.metric === metric);
|
|
294
|
+
if (metricSamples.length > MAX_SAMPLES_PER_METRIC) {
|
|
295
|
+
const ids = new Set(metricSamples.slice(0, metricSamples.length - MAX_SAMPLES_PER_METRIC).map((sample) => sample.sampleId));
|
|
296
|
+
state.samples = state.samples.filter((sample) => sample.metric !== metric || !ids.has(sample.sampleId));
|
|
297
|
+
}
|
|
298
|
+
}
|
|
299
|
+
if (state.samples.length > MAX_SAMPLES) {
|
|
300
|
+
state.samples = state.samples.slice(state.samples.length - MAX_SAMPLES);
|
|
301
|
+
}
|
|
302
|
+
}
|
|
303
|
+
function validateOperator(value) {
|
|
304
|
+
const operator = object(value, "SLO operator is invalid.");
|
|
305
|
+
exactKeys(operator, ["id", "principalId", "permissions"], "SLO operator");
|
|
306
|
+
const permissions = array(operator.permissions, "SLO operator permissions", 8).map((permission) => {
|
|
307
|
+
if (permission !== "slo.configure" && permission !== "slo.inspect")
|
|
308
|
+
throw new SloError("SLO operator permission is invalid.");
|
|
309
|
+
return permission;
|
|
310
|
+
});
|
|
311
|
+
unique(permissions, "SLO operator permissions");
|
|
312
|
+
return { id: identifier(operator.id, "SLO operator id"), principalId: identifier(operator.principalId, "SLO operator principal id"), permissions };
|
|
313
|
+
}
|
|
314
|
+
function boundedMs(value, label) {
|
|
315
|
+
if (typeof value !== "number" || !Number.isInteger(value) || value < MIN_WINDOW_MS || value > MAX_WINDOW_MS)
|
|
316
|
+
throw new SloError(`${label} must be between one hour and 30 days.`);
|
|
317
|
+
return value;
|
|
318
|
+
}
|
|
319
|
+
function positive(value, label, max) {
|
|
320
|
+
if (typeof value !== "number" || !Number.isInteger(value) || value < 1 || value > max)
|
|
321
|
+
throw new SloError(`${label} is invalid.`);
|
|
322
|
+
return value;
|
|
323
|
+
}
|
|
324
|
+
function nonNegative(value, label, max) {
|
|
325
|
+
if (typeof value !== "number" || !Number.isInteger(value) || value < 0 || value > max)
|
|
326
|
+
throw new SloError(`${label} is invalid.`);
|
|
327
|
+
return value;
|
|
328
|
+
}
|
|
329
|
+
function bps(value, label) {
|
|
330
|
+
return nonNegative(value, label, 10_000);
|
|
331
|
+
}
|
|
332
|
+
function rateBps(count, total) {
|
|
333
|
+
return total === 0 ? 0 : Math.floor((count * 10_000) / total);
|
|
334
|
+
}
|
|
335
|
+
function identifier(value, label) {
|
|
336
|
+
if (typeof value !== "string" || !IDENTIFIER.test(value) || sanitizeSecretString(value) !== value)
|
|
337
|
+
throw new SloError(`${label} must be a safe identifier.`);
|
|
338
|
+
return value;
|
|
339
|
+
}
|
|
340
|
+
function timestamp(value, label) {
|
|
341
|
+
if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value) || !Number.isFinite(Date.parse(value)))
|
|
342
|
+
throw new SloError(`${label} must be an ISO UTC timestamp.`);
|
|
343
|
+
return value;
|
|
344
|
+
}
|
|
345
|
+
function text(value, label, max) {
|
|
346
|
+
if (typeof value !== "string" || value.trim() === "" || value.length > max || /[\u0000-\u001f]/.test(value) || sanitizeSecretString(value) !== value)
|
|
347
|
+
throw new SloError(`${label} is invalid.`);
|
|
348
|
+
return value.trim();
|
|
349
|
+
}
|
|
350
|
+
function object(value, message) {
|
|
351
|
+
if (value === null || typeof value !== "object" || Array.isArray(value))
|
|
352
|
+
throw new SloError(message);
|
|
353
|
+
return value;
|
|
354
|
+
}
|
|
355
|
+
function array(value, label, max) {
|
|
356
|
+
if (!Array.isArray(value) || value.length > max)
|
|
357
|
+
throw new SloError(`${label} is invalid.`);
|
|
358
|
+
return value;
|
|
359
|
+
}
|
|
360
|
+
function exactKeys(value, keys, label, optional = []) {
|
|
361
|
+
for (const key of Object.keys(value))
|
|
362
|
+
if (!keys.includes(key) || (value[key] === undefined && !optional.includes(key)))
|
|
363
|
+
throw new SloError(`${label} contains unsupported field: ${key}`);
|
|
364
|
+
}
|
|
365
|
+
function unique(values, label) {
|
|
366
|
+
if (new Set(values).size !== values.length)
|
|
367
|
+
throw new SloError(`${label} must be unique.`);
|
|
368
|
+
}
|
|
369
|
+
function clone(value) {
|
|
370
|
+
return structuredClone(value);
|
|
371
|
+
}
|
|
372
|
+
function isErrorCode(error, code) {
|
|
373
|
+
return error instanceof Error && "code" in error && error.code === code;
|
|
374
|
+
}
|
|
375
|
+
//# sourceMappingURL=slo.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"slo.js","sourceRoot":"","sources":["../../src/reliability/slo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEhG,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,IAAI,GAAG,cAAc,CAAC;AAC5B,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAElD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,sBAAsB,EAAE,sBAAsB,CAAU,CAAC;AAElK,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAU,CAAC;AAyEvF,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAAU,CAAC;AAEpD,MAAM,UAAU,uBAAuB;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAgC,EAAE;IACzE,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,OAAO,kBAAkB;IACZ,IAAI,CAAS;IACb,GAAG,CAAa;IAChB,kBAAkB,CAAwB;IAE3D,YAAY,UAAgC,EAAE;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC,QAAQ,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,mCAAmC,EAAE,CAAC;IAChG,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAA6C;QACjE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW;oBAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;gBAC7F,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAA8C;QAC/D,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YAChF,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,CAAC,CAAC;YAClE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAA2B,EAAE,UAAkB;QAChE,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA6B,EAAE,UAAkB;QACnE,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;YAAE,MAAM,IAAI,QAAQ,CAAC,2CAA2C,gBAAgB,oBAAoB,CAAC,CAAC;QACzI,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1C,KAAK,MAAM,MAAM,IAAI,QAAQ;gBAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1D,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA4C;QACzD,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACvI,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,GAAG,CAAC;QACtB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9F,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACzH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA4B;QACxC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAA8B,CAAC;QAC/K,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzD,CAAC;IAEO,sBAAsB,CAAC,UAAkB;QAC/C,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO;QAC3G,MAAM,IAAI,QAAQ,CAAC,6DAA6D,CAAC,CAAC;IACpF,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,QAAiB,EAAE,UAAiC;QAC1E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,2CAA2C,UAAU,GAAG,CAAC,CAAC;QAC7H,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9E,CAAC;IAEO,SAAS;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QAC/G,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3H,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QACjH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe;YAAE,MAAM,IAAI,QAAQ,CAAC,mCAAmC,CAAC,CAAC;QACjH,IAAI,CAAC;YACH,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,QAAQ;gBAAE,MAAM,KAAK,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAAC,8BAA8B,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAI,SAAsC;QAC5D,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,mCAAmC;IACjD,OAAO,EAAE,KAAK,CAAC,YAAY,KAAqB,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3H,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,MAAM,MAAM,GAAG,IAAI,OAAO,EAAU,CAAC;IACrC,OAAO;QACL,UAAU,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,QAAiB,IAA0B,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,6CAA6C,CAAC,CAAC,CAAC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;QACrQ,KAAK,CAAC,KAAK,IAAiB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC;KAC9H,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,EAAE,EAAE,EAAE,oBAAoB,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,iGAAiG,EAAE;QACpO,EAAE,EAAE,EAAE,4BAA4B,EAAE,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,8FAA8F,EAAE;QAClP,EAAE,EAAE,EAAE,4BAA4B,EAAE,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,4EAA4E,EAAE;QAC/N,EAAE,EAAE,EAAE,yBAAyB,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,kEAAkE,EAAE;QACpO,EAAE,EAAE,EAAE,uBAAuB,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,oFAAoF,EAAE;QAC7N,EAAE,EAAE,EAAE,yBAAyB,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,4EAA4E,EAAE;KACvP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,MAAM,KAAK,GAAG,CAAC,cAAc,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjF,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACzH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,sBAAsB,UAAU,CAAC,kBAAkB,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5M,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ,KAAK,MAAM,OAAO,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,WAAW,MAAM,UAAU,CAAC,SAAS,WAAW,UAAU,CAAC,SAAS,OAAO,MAAM,GAAG,UAAU,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,UAAU,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC;IACjS,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;IAC5D,SAAS,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,aAAa,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IACvH,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACrF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC3F,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACvD,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7J,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAmB,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IAC3G,MAAM,MAAM,GAAc;QACxB,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC,MAAmB;QAClC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC;QACzD,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,4BAA4B,EAAE,sBAAsB,CAAC;QACrG,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAC3I,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,wBAAwB,EAAE,GAAG,CAAC,EAAE,CAAC;KACtH,CAAC;IACF,IAAK,mBAAyC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,QAAQ,CAAC,mDAAmD,CAAC,CAAC;IACrL,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACvD,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IACvL,IAAI,MAAM,CAAC,aAAa,KAAK,cAAc,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB;QAAE,MAAM,IAAI,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IAC3I,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAmB,CAAC,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,QAAQ,CAAC,0CAA0C,CAAC,CAAC;IACxJ,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;QACtD,MAAM,EAAE,MAAM,CAAC,MAAmB;QAClC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACtI,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAC3G,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAA2B,EAAE,GAAW;IAC9D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IAC7F,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAc;QACxB,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,UAAU,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACjE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACpI,UAAU,EAAE,GAAG;QACf,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAC7F,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACzG,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;KACvE,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,gCAAgC,CAAC,CAAC;IACrE,SAAS,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACtH,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,CAAU,EAAE,CAAC;QACzG,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,MAAiB,EAAE,OAAoB,EAAE,GAAW;IAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACzL,IAAI,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC;IACjT,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAK,mBAAyC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,YAAa;gBAAE,OAAO,IAAI,CAAC,CAAC;QAC9G,CAAC;aAAM,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC;AACjT,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB,EAAE,QAAgB;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,CAAC;IAC9F,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjF,IAAI,aAAa,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5H,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACvC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,cAAc,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAChG,IAAI,UAAU,KAAK,eAAe,IAAI,UAAU,KAAK,aAAa;YAAE,MAAM,IAAI,QAAQ,CAAC,qCAAqC,CAAC,CAAC;QAC9H,OAAO,UAAmC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC,EAAE,WAAW,EAAE,CAAC;AACrJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,aAAa,IAAI,KAAK,GAAG,aAAa;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IAClL,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,GAAG,CAAC,KAAc,EAAE,KAAa;IACxC,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,KAAa;IAC3C,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IAC7J,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IACnM,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IACjM,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,OAAe;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrG,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAc,EAAE,KAAa,EAAE,WAAqB,EAAE;IACvG,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,gCAAgC,GAAG,EAAE,CAAC,CAAC;AAC5L,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB,EAAE,KAAa;IAC7C,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,KAAK,CAAI,KAAQ;IACxB,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAC1E,CAAC"}
|
|
@@ -10,11 +10,12 @@ export async function generateSafetyReport(projectRoot = process.cwd()) {
|
|
|
10
10
|
const files = await collectFiles(projectRoot, projectRoot, 250);
|
|
11
11
|
for (const file of files) {
|
|
12
12
|
const content = await readFile(join(projectRoot, file), "utf8");
|
|
13
|
+
const fixture = isFixturePath(file);
|
|
13
14
|
if (/api\.stripe\.com|api\.openai\.com|api\.twilio\.com/i.test(content)) {
|
|
14
|
-
findings.push({ severity: "high", message: "Production provider host appears in source.", file });
|
|
15
|
+
findings.push({ severity: fixture ? "low" : "high", message: fixture ? "Production provider host appears in a test, documentation, or example fixture." : "Production provider host appears in source.", file });
|
|
15
16
|
}
|
|
16
|
-
if (/sk_live_[A-Za-z0-9]
|
|
17
|
-
findings.push({ severity: "high", message: "Live-looking Stripe key appears in source.", file });
|
|
17
|
+
if (/sk_live_[A-Za-z0-9]{16,}/.test(content)) {
|
|
18
|
+
findings.push({ severity: fixture ? "low" : "high", message: fixture ? "Live-looking Stripe key appears in a test, documentation, or example fixture." : "Live-looking Stripe key appears in source.", file });
|
|
18
19
|
}
|
|
19
20
|
if (/STRIPE_SECRET_KEY|OPENAI_API_KEY|TWILIO_AUTH_TOKEN/.test(content) && !/GHOSTAPI_|host:|baseURL/.test(content)) {
|
|
20
21
|
findings.push({ severity: "medium", message: "Provider secret is referenced without an obvious GhostAPI local override nearby.", file });
|
|
@@ -27,6 +28,9 @@ export async function generateSafetyReport(projectRoot = process.cwd()) {
|
|
|
27
28
|
recommendations: buildRecommendations(detected, findings)
|
|
28
29
|
};
|
|
29
30
|
}
|
|
31
|
+
function isFixturePath(file) {
|
|
32
|
+
return /^(?:test|docs|examples)\//.test(file) || /(?:^|\/)(?:fixtures?|__fixtures__)(?:\/|$)/.test(file);
|
|
33
|
+
}
|
|
30
34
|
async function collectFiles(root, dir, limit, acc = []) {
|
|
31
35
|
if (acc.length >= limit)
|
|
32
36
|
return acc;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"safetyReport.js","sourceRoot":"","sources":["../../src/report/safetyReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAoB,MAAM,yBAAyB,CAAC;AAexF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AACrF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEnG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;IACpE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,6CAA6C,EAAE,IAAI,EAAE,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"safetyReport.js","sourceRoot":"","sources":["../../src/report/safetyReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAoB,MAAM,yBAAyB,CAAC;AAexF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AACrF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEnG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;IACpE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,gFAAgF,CAAC,CAAC,CAAC,6CAA6C,EAAE,IAAI,EAAE,CAAC,CAAC;QACnN,CAAC;QACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,+EAA+E,CAAC,CAAC,CAAC,4CAA4C,EAAE,IAAI,EAAE,CAAC,CAAC;QACjN,CAAC;QACD,IAAI,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnH,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,kFAAkF,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,QAAQ;QACR,QAAQ;QACR,eAAe,EAAE,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3G,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW,EAAE,KAAa,EAAE,MAAgB,EAAE;IACtF,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO;YAAE,SAAS;QAClC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAuB,EAAE,QAAyB;IAC9E,MAAM,eAAe,GAAG,CAAC,sEAAsE,EAAE,0DAA0D,CAAC,CAAC;IAC7J,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,eAAe,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;IAC7J,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,eAAe,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;IAC5J,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC;QAAE,eAAe,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC/J,OAAO,eAAe,CAAC;AACzB,CAAC"}
|
|
@@ -0,0 +1,2 @@
|
|
|
1
|
+
export { LocalSafetyController, SafetyControllerError, SAFETY_SCOPE_KINDS, createDisabledSafetyEmergencyAuthorizer, createLocalSafetyController, createTestSafetyEmergencyAuthorizer } from "./safetyController.js";
|
|
2
|
+
export type { SafetyAction, SafetyAuditRecord, SafetyBudget, SafetyBudgetLimits, SafetyCircuit, SafetyControllerOptions, SafetyControllerState, SafetyDeadLetter, SafetyEmergencyAuthorizer, SafetyLease, SafetyOperator, SafetyOperatorPermission, SafetyQueueItem, SafetyScope, SafetyScopeKind } from "./safetyController.js";
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/safety/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,uCAAuC,EAAE,2BAA2B,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC"}
|