@yiaany/ghostapi 0.1.6 → 0.1.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (323) hide show
  1. package/CHANGELOG.md +48 -2
  2. package/CONTRIBUTING.md +119 -117
  3. package/LICENSE +21 -21
  4. package/README.md +208 -185
  5. package/SECURITY.md +53 -37
  6. package/dist/actions/gateway.d.ts +179 -0
  7. package/dist/actions/gateway.js +514 -0
  8. package/dist/actions/gateway.js.map +1 -0
  9. package/dist/actions/index.d.ts +2 -0
  10. package/dist/actions/index.js +2 -0
  11. package/dist/actions/index.js.map +1 -0
  12. package/dist/ai/aiClient.js +4 -4
  13. package/dist/ai/aiClient.js.map +1 -1
  14. package/dist/ai/aiGenerator.d.ts +2 -2
  15. package/dist/ai/aiGenerator.js +21 -72
  16. package/dist/ai/aiGenerator.js.map +1 -1
  17. package/dist/ai/prompts.js +51 -51
  18. package/dist/ai/prompts.js.map +1 -1
  19. package/dist/approvals/approvalInbox.d.ts +150 -0
  20. package/dist/approvals/approvalInbox.js +412 -0
  21. package/dist/approvals/approvalInbox.js.map +1 -0
  22. package/dist/approvals/index.d.ts +2 -0
  23. package/dist/approvals/index.js +2 -0
  24. package/dist/approvals/index.js.map +1 -0
  25. package/dist/behavior/behaviorStore.d.ts +2 -0
  26. package/dist/behavior/behaviorStore.js +50 -46
  27. package/dist/behavior/behaviorStore.js.map +1 -1
  28. package/dist/cache/index.d.ts +2 -0
  29. package/dist/cache/index.js +58 -14
  30. package/dist/cache/index.js.map +1 -1
  31. package/dist/cli/index.js +438 -58
  32. package/dist/cli/index.js.map +1 -1
  33. package/dist/cli/openUrl.d.ts +10 -0
  34. package/dist/cli/openUrl.js +31 -0
  35. package/dist/cli/openUrl.js.map +1 -0
  36. package/dist/cli/parser.d.ts +155 -0
  37. package/dist/cli/parser.js +504 -2
  38. package/dist/cli/parser.js.map +1 -1
  39. package/dist/config/dataPaths.d.ts +31 -0
  40. package/dist/config/dataPaths.js +45 -0
  41. package/dist/config/dataPaths.js.map +1 -0
  42. package/dist/config/localConfig.d.ts +1 -2
  43. package/dist/config/localConfig.js +27 -21
  44. package/dist/config/localConfig.js.map +1 -1
  45. package/dist/config/serverConfig.d.ts +2 -0
  46. package/dist/config/serverConfig.js +8 -1
  47. package/dist/config/serverConfig.js.map +1 -1
  48. package/dist/contracts/contract.d.ts +76 -0
  49. package/dist/contracts/contract.js +603 -0
  50. package/dist/contracts/contract.js.map +1 -0
  51. package/dist/contracts/index.d.ts +2 -0
  52. package/dist/contracts/index.js +2 -0
  53. package/dist/contracts/index.js.map +1 -0
  54. package/dist/credentials/credentialBroker.d.ts +207 -0
  55. package/dist/credentials/credentialBroker.js +588 -0
  56. package/dist/credentials/credentialBroker.js.map +1 -0
  57. package/dist/credentials/index.d.ts +2 -0
  58. package/dist/credentials/index.js +2 -0
  59. package/dist/credentials/index.js.map +1 -0
  60. package/dist/dashboard/app.js +685 -615
  61. package/dist/dashboard/index.html +13 -7
  62. package/dist/dashboard/styles.css +349 -349
  63. package/dist/egress/capabilities.d.ts +32 -0
  64. package/dist/egress/capabilities.js +165 -0
  65. package/dist/egress/capabilities.js.map +1 -0
  66. package/dist/egress/linuxBootstrap.d.ts +1 -0
  67. package/dist/egress/linuxBootstrap.js +121 -0
  68. package/dist/egress/linuxBootstrap.js.map +1 -0
  69. package/dist/egress/run.d.ts +18 -0
  70. package/dist/egress/run.js +305 -0
  71. package/dist/egress/run.js.map +1 -0
  72. package/dist/errors/errorEngine.d.ts +2 -2
  73. package/dist/errors/errorEngine.js +3 -40
  74. package/dist/errors/errorEngine.js.map +1 -1
  75. package/dist/evals/evals.d.ts +126 -0
  76. package/dist/evals/evals.js +466 -0
  77. package/dist/evals/evals.js.map +1 -0
  78. package/dist/evals/index.d.ts +2 -0
  79. package/dist/evals/index.js +2 -0
  80. package/dist/evals/index.js.map +1 -0
  81. package/dist/evidence/index.d.ts +2 -0
  82. package/dist/evidence/index.js +2 -0
  83. package/dist/evidence/index.js.map +1 -0
  84. package/dist/evidence/report.d.ts +143 -0
  85. package/dist/evidence/report.js +556 -0
  86. package/dist/evidence/report.js.map +1 -0
  87. package/dist/fault/faultLab.d.ts +5 -4
  88. package/dist/fault/faultLab.js +66 -24
  89. package/dist/fault/faultLab.js.map +1 -1
  90. package/dist/index.d.ts +46 -0
  91. package/dist/index.js +23 -0
  92. package/dist/index.js.map +1 -1
  93. package/dist/inventory/analysis.d.ts +12 -0
  94. package/dist/inventory/analysis.js +457 -0
  95. package/dist/inventory/analysis.js.map +1 -0
  96. package/dist/inventory/index.d.ts +5 -0
  97. package/dist/inventory/index.js +4 -0
  98. package/dist/inventory/index.js.map +1 -0
  99. package/dist/inventory/inventoryController.d.ts +53 -0
  100. package/dist/inventory/inventoryController.js +1044 -0
  101. package/dist/inventory/inventoryController.js.map +1 -0
  102. package/dist/inventory/types.d.ts +579 -0
  103. package/dist/inventory/types.js +787 -0
  104. package/dist/inventory/types.js.map +1 -0
  105. package/dist/landing/assets/index-CxWsopzP.css +1 -0
  106. package/dist/landing/assets/index-DZlpyhqd.js +55 -0
  107. package/dist/landing/assets/index-Dk-Xezs3.js +55 -0
  108. package/dist/landing/index.html +15 -15
  109. package/dist/ledger/actionLedger.d.ts +125 -0
  110. package/dist/ledger/actionLedger.js +594 -0
  111. package/dist/ledger/actionLedger.js.map +1 -0
  112. package/dist/ledger/index.d.ts +2 -0
  113. package/dist/ledger/index.js +2 -0
  114. package/dist/ledger/index.js.map +1 -0
  115. package/dist/mcp/server.js +4 -3
  116. package/dist/mcp/server.js.map +1 -1
  117. package/dist/policy/index.d.ts +3 -0
  118. package/dist/policy/index.js +2 -0
  119. package/dist/policy/index.js.map +1 -0
  120. package/dist/policy/policy.d.ts +14 -0
  121. package/dist/policy/policy.js +282 -0
  122. package/dist/policy/policy.js.map +1 -0
  123. package/dist/policy/types.d.ts +52 -0
  124. package/dist/policy/types.js +2 -0
  125. package/dist/policy/types.js.map +1 -0
  126. package/dist/productTelemetry/index.d.ts +16 -0
  127. package/dist/productTelemetry/index.js +142 -0
  128. package/dist/productTelemetry/index.js.map +1 -0
  129. package/dist/providers/conformance.d.ts +7 -0
  130. package/dist/providers/conformance.js +48 -0
  131. package/dist/providers/conformance.js.map +1 -0
  132. package/dist/providers/index.d.ts +4 -2
  133. package/dist/providers/index.js +3 -1
  134. package/dist/providers/index.js.map +1 -1
  135. package/dist/providers/packs/resendPack.d.ts +2 -0
  136. package/dist/providers/packs/resendPack.js +147 -0
  137. package/dist/providers/packs/resendPack.js.map +1 -0
  138. package/dist/providers/packs/stripePack.d.ts +2 -0
  139. package/dist/providers/packs/stripePack.js +852 -0
  140. package/dist/providers/packs/stripePack.js.map +1 -0
  141. package/dist/providers/registry.d.ts +7 -3
  142. package/dist/providers/registry.js +55 -4
  143. package/dist/providers/registry.js.map +1 -1
  144. package/dist/providers/resend.js +2 -11
  145. package/dist/providers/resend.js.map +1 -1
  146. package/dist/providers/runtime.d.ts +8 -0
  147. package/dist/providers/runtime.js +48 -0
  148. package/dist/providers/runtime.js.map +1 -0
  149. package/dist/providers/stripeWebhook.d.ts +13 -0
  150. package/dist/providers/stripeWebhook.js +50 -0
  151. package/dist/providers/stripeWebhook.js.map +1 -0
  152. package/dist/providers/types.d.ts +153 -0
  153. package/dist/proxy/cacheKey.js +3 -3
  154. package/dist/proxy/cacheKey.js.map +1 -1
  155. package/dist/proxy/providerDetector.d.ts +2 -7
  156. package/dist/proxy/providerDetector.js +4 -4
  157. package/dist/proxy/providerDetector.js.map +1 -1
  158. package/dist/proxy/proxyHandler.js +116 -12
  159. package/dist/proxy/proxyHandler.js.map +1 -1
  160. package/dist/proxy/requestNormalizer.d.ts +0 -1
  161. package/dist/proxy/requestNormalizer.js +2 -5
  162. package/dist/proxy/requestNormalizer.js.map +1 -1
  163. package/dist/reliability/costGovernance.d.ts +175 -0
  164. package/dist/reliability/costGovernance.js +515 -0
  165. package/dist/reliability/costGovernance.js.map +1 -0
  166. package/dist/reliability/index.d.ts +8 -0
  167. package/dist/reliability/index.js +5 -0
  168. package/dist/reliability/index.js.map +1 -0
  169. package/dist/reliability/reconciliation.d.ts +157 -0
  170. package/dist/reliability/reconciliation.js +522 -0
  171. package/dist/reliability/reconciliation.js.map +1 -0
  172. package/dist/reliability/runtimeHealth.d.ts +60 -0
  173. package/dist/reliability/runtimeHealth.js +356 -0
  174. package/dist/reliability/runtimeHealth.js.map +1 -0
  175. package/dist/reliability/slo.d.ts +131 -0
  176. package/dist/reliability/slo.js +375 -0
  177. package/dist/reliability/slo.js.map +1 -0
  178. package/dist/report/safetyReport.js +7 -3
  179. package/dist/report/safetyReport.js.map +1 -1
  180. package/dist/safety/index.d.ts +2 -0
  181. package/dist/safety/index.js +2 -0
  182. package/dist/safety/index.js.map +1 -0
  183. package/dist/safety/safetyController.d.ts +187 -0
  184. package/dist/safety/safetyController.js +477 -0
  185. package/dist/safety/safetyController.js.map +1 -0
  186. package/dist/scenarios/scenarioBundle.d.ts +75 -0
  187. package/dist/scenarios/scenarioBundle.js +750 -0
  188. package/dist/scenarios/scenarioBundle.js.map +1 -0
  189. package/dist/scenarios/scenarioStore.d.ts +1 -0
  190. package/dist/scenarios/scenarioStore.js +47 -32
  191. package/dist/scenarios/scenarioStore.js.map +1 -1
  192. package/dist/security/headerSanitizer.d.ts +2 -0
  193. package/dist/security/headerSanitizer.js +36 -1
  194. package/dist/security/headerSanitizer.js.map +1 -1
  195. package/dist/security/secrets.js +24 -4
  196. package/dist/security/secrets.js.map +1 -1
  197. package/dist/server/accessControl.d.ts +5 -0
  198. package/dist/server/accessControl.js +100 -0
  199. package/dist/server/accessControl.js.map +1 -0
  200. package/dist/server/createServer.d.ts +0 -5
  201. package/dist/server/createServer.js +9 -29
  202. package/dist/server/createServer.js.map +1 -1
  203. package/dist/server/eventsStore.d.ts +6 -1
  204. package/dist/server/eventsStore.js +83 -15
  205. package/dist/server/eventsStore.js.map +1 -1
  206. package/dist/server/routes.js +36 -10
  207. package/dist/server/routes.js.map +1 -1
  208. package/dist/server/sse.d.ts +2 -1
  209. package/dist/server/sse.js +15 -3
  210. package/dist/server/sse.js.map +1 -1
  211. package/dist/setup/setupGenerator.js +53 -6
  212. package/dist/setup/setupGenerator.js.map +1 -1
  213. package/dist/state/stateStore.d.ts +5 -0
  214. package/dist/state/stateStore.js +48 -62
  215. package/dist/state/stateStore.js.map +1 -1
  216. package/dist/storage/fileStore.d.ts +10 -0
  217. package/dist/storage/fileStore.js +131 -0
  218. package/dist/storage/fileStore.js.map +1 -0
  219. package/dist/teamControl/controlPlane.d.ts +255 -0
  220. package/dist/teamControl/controlPlane.js +918 -0
  221. package/dist/teamControl/controlPlane.js.map +1 -0
  222. package/dist/teamControl/deployment.d.ts +33 -0
  223. package/dist/teamControl/deployment.js +67 -0
  224. package/dist/teamControl/deployment.js.map +1 -0
  225. package/dist/teamControl/index.d.ts +4 -0
  226. package/dist/teamControl/index.js +3 -0
  227. package/dist/teamControl/index.js.map +1 -0
  228. package/dist/tests/testGenerator.js +4 -1
  229. package/dist/tests/testGenerator.js.map +1 -1
  230. package/dist/trust/index.d.ts +2 -0
  231. package/dist/trust/index.js +2 -0
  232. package/dist/trust/index.js.map +1 -0
  233. package/dist/trust/trustLadder.d.ts +182 -0
  234. package/dist/trust/trustLadder.js +560 -0
  235. package/dist/trust/trustLadder.js.map +1 -0
  236. package/dist/worlds/index.d.ts +2 -0
  237. package/dist/worlds/index.js +2 -0
  238. package/dist/worlds/index.js.map +1 -0
  239. package/dist/worlds/worlds.d.ts +160 -0
  240. package/dist/worlds/worlds.js +491 -0
  241. package/dist/worlds/worlds.js.map +1 -0
  242. package/docs/assets/dashboard.png +0 -0
  243. package/docs/ci.md +49 -0
  244. package/docs/commercial/README.md +29 -0
  245. package/docs/commercial/data-inventory.md +36 -0
  246. package/docs/commercial/manual-invoicing.md +44 -0
  247. package/docs/commercial/metrics.md +51 -0
  248. package/docs/commercial/pricing.md +103 -0
  249. package/docs/commercial/privacy-policy-draft.md +41 -0
  250. package/docs/commercial/terms-topics-for-counsel.md +51 -0
  251. package/docs/design-partners/README.md +52 -0
  252. package/docs/design-partners/demo-narratives.md +33 -0
  253. package/docs/design-partners/design-partner-offer.md +39 -0
  254. package/docs/design-partners/discovery-questions.md +28 -0
  255. package/docs/design-partners/feedback-capture-template.md +48 -0
  256. package/docs/design-partners/icp-one-pager.md +43 -0
  257. package/docs/design-partners/onboarding-checklist.md +33 -0
  258. package/docs/design-partners/pilot-success-criteria.md +27 -0
  259. package/docs/design-partners/pricing-interview-script.md +18 -0
  260. package/docs/design-partners/telemetry-plan.md +48 -0
  261. package/docs/development/baseline.md +114 -0
  262. package/docs/development/onboarding-smoke.md +37 -0
  263. package/docs/development/verification-0.1.8.md +25 -0
  264. package/docs/enterprise-product-roadmap-ru.md +1879 -0
  265. package/docs/fundraising/README.md +87 -0
  266. package/docs/fundraising/data-room-checklist.md +72 -0
  267. package/docs/fundraising/demo-script.md +52 -0
  268. package/docs/fundraising/design-partners-50.md +74 -0
  269. package/docs/fundraising/launch-posts.md +37 -0
  270. package/docs/fundraising/metrics-and-evidence.md +30 -0
  271. package/docs/fundraising/roadmap-12-month.md +25 -0
  272. package/docs/fundraising/technical-due-diligence-index.md +37 -0
  273. package/docs/fundraising/yc-application.md +25 -0
  274. package/docs/github-actions.md +84 -0
  275. package/docs/hosted-pilot.md +111 -0
  276. package/docs/mcp.md +52 -50
  277. package/docs/operations/disaster-recovery-runbook.md +81 -0
  278. package/docs/operations/kill-switch-runbook.md +32 -0
  279. package/docs/policy.md +61 -0
  280. package/docs/providers/authoring-packs.md +175 -0
  281. package/docs/providers/stripe-core-pack.md +82 -0
  282. package/docs/release-checklist.md +83 -71
  283. package/docs/release-migration-and-rollback.md +63 -0
  284. package/docs/release-readiness.md +39 -0
  285. package/docs/security/action-gateway-threat-model.md +34 -0
  286. package/docs/security/action-ledger-incident-replay-threat-model.md +42 -0
  287. package/docs/security/approval-inbox-threat-model.md +35 -0
  288. package/docs/security/credential-broker-threat-model.md +52 -0
  289. package/docs/security/egress-threat-model.md +126 -0
  290. package/docs/security/inventory-threat-model.md +104 -0
  291. package/docs/security/kill-switch-budgets-threat-model.md +37 -0
  292. package/docs/security/reliability-threat-model.md +111 -0
  293. package/docs/security/trust-ladder-threat-model.md +33 -0
  294. package/docs/team-control-plane.md +72 -0
  295. package/docs/usage.md +571 -57
  296. package/examples/README.md +10 -0
  297. package/examples/agent-instructions/README.md +39 -39
  298. package/examples/ci-smoke/README.md +21 -0
  299. package/examples/ci-smoke/ghostapi.policy.yaml +22 -0
  300. package/examples/ci-smoke/package.json +9 -0
  301. package/examples/ci-smoke/production-egress.mjs +2 -0
  302. package/examples/ci-smoke/safe.mjs +17 -0
  303. package/examples/evals/README.md +24 -0
  304. package/examples/evals/retry-after.eval.json +52 -0
  305. package/examples/generic-rest/README.md +27 -27
  306. package/examples/github-fetch/README.md +35 -35
  307. package/examples/openai-streaming/README.md +16 -0
  308. package/examples/openai-streaming/streaming-tool-call.mjs +31 -0
  309. package/examples/policy/ghostapi.policy.yaml +27 -0
  310. package/examples/record-replay/README.md +19 -0
  311. package/examples/record-replay/replay-requests.json +22 -0
  312. package/examples/record-replay/stripe-checkout.har.json +30 -0
  313. package/examples/resend-node/README.md +22 -22
  314. package/examples/stripe-node/README.md +35 -29
  315. package/examples/stripe-node/checkout-flow.mjs +61 -0
  316. package/examples/twilio-node/README.md +21 -21
  317. package/examples/worlds/README.md +19 -0
  318. package/examples/worlds/subscription-recovery.mjs +12 -0
  319. package/package.json +26 -11
  320. package/dist/providers/stripe.d.ts +0 -2
  321. package/dist/providers/stripe.js +0 -15
  322. package/dist/providers/stripe.js.map +0 -1
  323. package/docs/assets/ghostapi-avatar.png +0 -0
@@ -0,0 +1,375 @@
1
+ import { randomUUID } from "node:crypto";
2
+ import { lstat, readFile } from "node:fs/promises";
3
+ import { dirname } from "node:path";
4
+ import { getDataPaths } from "../config/dataPaths.js";
5
+ import { sanitizeSecretString } from "../security/secrets.js";
6
+ import { atomicWriteJson, ensurePrivateDirectory, withFileLock } from "../storage/fileStore.js";
7
+ const SCHEMA_VERSION = 1;
8
+ const KIND = "ghostapi.slo";
9
+ const MAX_STORE_BYTES = 4 * 1024 * 1024;
10
+ const MAX_TARGETS = 32;
11
+ const MAX_SAMPLES_PER_METRIC = 5_000;
12
+ const MAX_SAMPLES = 10_000;
13
+ const MAX_RECORD_BATCH = 1_000;
14
+ const MIN_WINDOW_MS = 60 * 60 * 1000;
15
+ const MAX_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
16
+ const IDENTIFIER = /^[a-z0-9][a-z0-9._-]{0,127}$/;
17
+ export const SLO_METRICS = ["policy_decision", "approval_delivery", "execution_latency", "availability", "duplicate_prevention", "receipt_verification"];
18
+ export const SLO_LATENCY_METRICS = ["approval_delivery", "execution_latency"];
19
+ export class SloError extends Error {
20
+ constructor(message) {
21
+ super(message);
22
+ this.name = "SloError";
23
+ }
24
+ }
25
+ const sloRecordCapabilities = new WeakSet();
26
+ export function createSloRecordIdentity() {
27
+ const capability = Object.freeze({});
28
+ sloRecordCapabilities.add(capability);
29
+ return capability;
30
+ }
31
+ export function createLocalSloController(options = {}) {
32
+ return new LocalSloController(options);
33
+ }
34
+ export class LocalSloController {
35
+ path;
36
+ now;
37
+ operatorAuthorizer;
38
+ constructor(options = {}) {
39
+ this.path = options.path ?? getDataPaths().sloStore;
40
+ this.now = options.now ?? (() => new Date());
41
+ this.operatorAuthorizer = options.operatorAuthorizer ?? createDisabledSloOperatorAuthorizer();
42
+ }
43
+ async configureTarget(input) {
44
+ await this.authorize(input.identity, "slo.configure");
45
+ const target = validateTarget(input.target);
46
+ return this.mutate((state) => {
47
+ const existing = state.targets.find((candidate) => candidate.id === target.id);
48
+ if (existing === undefined) {
49
+ if (state.targets.length >= MAX_TARGETS)
50
+ throw new SloError("SLO target limit was reached.");
51
+ state.targets.push(target);
52
+ }
53
+ else {
54
+ Object.assign(existing, target);
55
+ }
56
+ return clone(target);
57
+ });
58
+ }
59
+ async removeTarget(input) {
60
+ await this.authorize(input.identity, "slo.configure");
61
+ const targetId = identifier(input.targetId, "SLO target id");
62
+ await this.mutate((state) => {
63
+ const index = state.targets.findIndex((candidate) => candidate.id === targetId);
64
+ if (index === -1)
65
+ throw new SloError("SLO target was not found.");
66
+ state.targets.splice(index, 1);
67
+ });
68
+ }
69
+ async recordSample(input, capability) {
70
+ this.assertRecordPermission(capability);
71
+ const sample = validateSample(input, this.now().toISOString());
72
+ return this.mutate((state) => {
73
+ trimSamples(state, this.windowBoundary());
74
+ state.samples.push(sample);
75
+ trimSamples(state, this.windowBoundary());
76
+ return clone(sample);
77
+ });
78
+ }
79
+ async recordSamples(input, capability) {
80
+ this.assertRecordPermission(capability);
81
+ if (input.length > MAX_RECORD_BATCH)
82
+ throw new SloError(`SLO record batch is too large; limit is ${MAX_RECORD_BATCH} samples per call.`);
83
+ const now = this.now().toISOString();
84
+ const recorded = input.map((sample) => validateSample(sample, now));
85
+ return this.mutate((state) => {
86
+ trimSamples(state, this.windowBoundary());
87
+ for (const sample of recorded)
88
+ state.samples.push(sample);
89
+ trimSamples(state, this.windowBoundary());
90
+ return clone(recorded);
91
+ });
92
+ }
93
+ async evaluate(input) {
94
+ await this.authorize(input.identity, "slo.inspect");
95
+ const now = this.timestamp();
96
+ const runId = input.runId === undefined ? `slo-${randomUUID().replace(/-/g, "").slice(0, 32)}` : identifier(input.runId, "SLO run id");
97
+ const state = await this.read();
98
+ const windowEnd = now;
99
+ const windowStart = new Date(Date.parse(windowEnd) - MAX_WINDOW_MS).toISOString();
100
+ const evaluations = state.targets.map((target) => evaluateTarget(target, state.samples, now));
101
+ return { schemaVersion: 1, kind: "ghostapi.slo-report", generatedAt: now, runId, windowStart, windowEnd, evaluations };
102
+ }
103
+ async inspect(input) {
104
+ await this.authorize(input.identity, "slo.inspect");
105
+ const state = await this.read();
106
+ const sampleCounts = Object.fromEntries(SLO_METRICS.map((metric) => [metric, state.samples.filter((sample) => sample.metric === metric).length]));
107
+ return { targets: clone(state.targets), sampleCounts };
108
+ }
109
+ assertRecordPermission(capability) {
110
+ if (capability !== null && typeof capability === "object" && sloRecordCapabilities.has(capability))
111
+ return;
112
+ throw new SloError("SLO sample recording requires a verified record capability.");
113
+ }
114
+ async authorize(identity, permission) {
115
+ const operator = validateOperator(await this.operatorAuthorizer.authenticate(identity));
116
+ if (!operator.permissions.includes(permission))
117
+ throw new SloError(`SLO operator lacks required permission: ${permission}.`);
118
+ return operator;
119
+ }
120
+ windowBoundary() {
121
+ return new Date(Date.parse(this.timestamp()) - MAX_WINDOW_MS).toISOString();
122
+ }
123
+ timestamp() {
124
+ const value = this.now();
125
+ if (!(value instanceof Date) || !Number.isFinite(value.getTime()))
126
+ throw new SloError("SLO clock is invalid.");
127
+ return value.toISOString();
128
+ }
129
+ async read() {
130
+ await ensurePrivateDirectory(dirname(this.path));
131
+ const info = await lstat(this.path).catch((error) => isErrorCode(error, "ENOENT") ? null : Promise.reject(error));
132
+ if (info === null)
133
+ return emptyState();
134
+ if (!info.isFile() || info.isSymbolicLink())
135
+ throw new SloError("SLO store must be a regular non-symlink file.");
136
+ const source = await readFile(this.path, "utf8");
137
+ if (Buffer.byteLength(source, "utf8") > MAX_STORE_BYTES)
138
+ throw new SloError("SLO store exceeds its size limit.");
139
+ try {
140
+ return validateState(JSON.parse(source));
141
+ }
142
+ catch (error) {
143
+ if (error instanceof SloError)
144
+ throw error;
145
+ throw new SloError("SLO store is not valid JSON.");
146
+ }
147
+ }
148
+ async mutate(operation) {
149
+ return withFileLock(this.path, async () => {
150
+ const state = await this.read();
151
+ const result = operation(state);
152
+ await atomicWriteJson(this.path, validateState(state));
153
+ return result;
154
+ });
155
+ }
156
+ }
157
+ export function createDisabledSloOperatorAuthorizer() {
158
+ return { async authenticate() { throw new SloError("SLO operator authorization is not configured."); } };
159
+ }
160
+ export function createTestSloOperatorAuthorizer() {
161
+ const issued = new WeakSet();
162
+ return {
163
+ authorizer: { async authenticate(identity) { if (identity === null || typeof identity !== "object" || !issued.has(identity))
164
+ throw new SloError("SLO operator identity is not authenticated."); return validateOperator(identity); } },
165
+ issue(input) { const operator = Object.freeze(validateOperator(input)); issued.add(operator); return operator; }
166
+ };
167
+ }
168
+ export function examplePilotSloTargets() {
169
+ return [
170
+ { id: "pilot.availability", metric: "availability", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 9_990, description: "Example pilot target: 99.9% of executed actions complete without a failed or ambiguous outcome." },
171
+ { id: "pilot.duplicate_prevention", metric: "duplicate_prevention", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 10_000, description: "Example pilot target: no action produces more than one provider receipt in the local ledger." },
172
+ { id: "pilot.receipt_verification", metric: "receipt_verification", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 9_950, description: "Example pilot target: committed actions carry a verified provider receipt." },
173
+ { id: "pilot.execution_latency", metric: "execution_latency", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 9_900, latencyMaxMs: 5_000, description: "Example pilot target: 99% of executions finish within 5 seconds." },
174
+ { id: "pilot.policy_decision", metric: "policy_decision", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 9_990, description: "Example pilot target: policy decisions recorded in the ledger are always admitted." },
175
+ { id: "pilot.approval_delivery", metric: "approval_delivery", windowMs: 60 * 60 * 1000, minimumSamples: 10, targetBps: 9_990, latencyMaxMs: 5 * 60 * 1000, description: "Example pilot target: approval artifacts reach execution within 5 minutes." }
176
+ ];
177
+ }
178
+ export function formatSloReport(report) {
179
+ const lines = [`SLO report ${report.runId} at ${report.generatedAt}`];
180
+ if (report.evaluations.length === 0)
181
+ lines.push(" (no SLO targets configured)");
182
+ for (const evaluation of report.evaluations) {
183
+ const status = evaluation.status === "met" ? "met" : evaluation.status === "breached" ? "BREACHED" : "insufficient data";
184
+ const budget = evaluation.status === "met" ? ` (budget remaining ${evaluation.budgetRemainingBps} bps)` : evaluation.status === "breached" ? ` (short ${Math.abs(evaluation.budgetRemainingBps)} bps)` : "";
185
+ lines.push(` ${evaluation.metric} [${evaluation.targetId}] ${status} ok ${evaluation.okCount}/${evaluation.sampleCount} = ${evaluation.okRateBps} bps vs ${evaluation.targetBps} bps${budget}${evaluation.latencyMaxMs === undefined ? "" : ` (latency max ${evaluation.latencyMaxMs} ms)`}`);
186
+ }
187
+ return lines.join("\n");
188
+ }
189
+ function emptyState() {
190
+ return { schemaVersion: 1, kind: "ghostapi.slo", targets: [], samples: [] };
191
+ }
192
+ function validateState(value) {
193
+ const state = object(value, "SLO store must be an object.");
194
+ exactKeys(state, ["schemaVersion", "kind", "targets", "samples"], "SLO store");
195
+ if (state.schemaVersion !== SCHEMA_VERSION || state.kind !== KIND)
196
+ throw new SloError("Unsupported SLO store schema.");
197
+ const targets = array(state.targets, "SLO targets", MAX_TARGETS).map(validateTarget);
198
+ unique(targets.map((target) => target.id), "SLO target ids");
199
+ const samples = array(state.samples, "SLO samples", MAX_SAMPLES).map(validateStoredSample);
200
+ return { schemaVersion: 1, kind: "ghostapi.slo", targets, samples };
201
+ }
202
+ function validateTarget(value) {
203
+ const target = object(value, "SLO target is invalid.");
204
+ exactKeys(target, ["id", "metric", "windowMs", "minimumSamples", "targetBps", "latencyMaxMs", "description"], "SLO target", ["latencyMaxMs", "description"]);
205
+ if (!SLO_METRICS.includes(target.metric))
206
+ throw new SloError("SLO target metric is invalid.");
207
+ const result = {
208
+ id: identifier(target.id, "SLO target id"),
209
+ metric: target.metric,
210
+ windowMs: boundedMs(target.windowMs, "SLO target window"),
211
+ minimumSamples: positive(target.minimumSamples, "SLO target minimum samples", MAX_SAMPLES_PER_METRIC),
212
+ targetBps: bps(target.targetBps, "SLO target rate"),
213
+ ...(target.latencyMaxMs === undefined ? {} : { latencyMaxMs: nonNegative(target.latencyMaxMs, "SLO target latency", 24 * 60 * 60 * 1000) }),
214
+ ...(target.description === undefined ? {} : { description: text(target.description, "SLO target description", 240) })
215
+ };
216
+ if (SLO_LATENCY_METRICS.includes(result.metric) && result.latencyMaxMs === undefined)
217
+ throw new SloError("Latency SLO targets require a latencyMaxMs bound.");
218
+ return result;
219
+ }
220
+ function validateStoredSample(value) {
221
+ const sample = object(value, "SLO sample is invalid.");
222
+ exactKeys(sample, ["schemaVersion", "kind", "sampleId", "metric", "ok", "durationMs", "recordedAt", "runId", "actionId", "labels"], "SLO sample", ["durationMs", "runId", "actionId"]);
223
+ if (sample.schemaVersion !== SCHEMA_VERSION || sample.kind !== "ghostapi.slo-sample")
224
+ throw new SloError("Unsupported SLO sample schema.");
225
+ if (!SLO_METRICS.includes(sample.metric) || typeof sample.ok !== "boolean")
226
+ throw new SloError("SLO sample metric or ok flag is invalid.");
227
+ return {
228
+ schemaVersion: 1,
229
+ kind: "ghostapi.slo-sample",
230
+ sampleId: identifier(sample.sampleId, "SLO sample id"),
231
+ metric: sample.metric,
232
+ ok: sample.ok,
233
+ ...(sample.durationMs === undefined ? {} : { durationMs: nonNegative(sample.durationMs, "SLO sample duration", 24 * 60 * 60 * 1000) }),
234
+ recordedAt: timestamp(sample.recordedAt, "SLO sample time"),
235
+ ...(sample.runId === undefined ? {} : { runId: identifier(sample.runId, "SLO sample run id") }),
236
+ ...(sample.actionId === undefined ? {} : { actionId: identifier(sample.actionId, "SLO sample action id") }),
237
+ labels: validateLabels(sample.labels)
238
+ };
239
+ }
240
+ function validateSample(input, now) {
241
+ if (!SLO_METRICS.includes(input.metric))
242
+ throw new SloError("SLO sample metric is invalid.");
243
+ if (typeof input.ok !== "boolean")
244
+ throw new SloError("SLO sample ok flag is invalid.");
245
+ const result = {
246
+ schemaVersion: 1,
247
+ kind: "ghostapi.slo-sample",
248
+ sampleId: `sample-${randomUUID().replace(/-/g, "").slice(0, 32)}`,
249
+ metric: input.metric,
250
+ ok: input.ok,
251
+ ...(input.durationMs === undefined ? {} : { durationMs: nonNegative(input.durationMs, "SLO sample duration", 24 * 60 * 60 * 1000) }),
252
+ recordedAt: now,
253
+ ...(input.runId === undefined ? {} : { runId: identifier(input.runId, "SLO sample run id") }),
254
+ ...(input.actionId === undefined ? {} : { actionId: identifier(input.actionId, "SLO sample action id") }),
255
+ labels: input.labels === undefined ? {} : validateLabels(input.labels)
256
+ };
257
+ return result;
258
+ }
259
+ function validateLabels(value) {
260
+ const labels = object(value ?? {}, "SLO sample labels are invalid.");
261
+ exactKeys(labels, ["tenantId", "agentId", "projectId", "provider", "actionClass", "workflowId"], "SLO sample labels");
262
+ const result = {};
263
+ for (const key of ["tenantId", "agentId", "projectId", "provider", "actionClass", "workflowId"]) {
264
+ if (labels[key] !== undefined)
265
+ result[key] = identifier(labels[key], `SLO label ${key}`);
266
+ }
267
+ return result;
268
+ }
269
+ function evaluateTarget(target, samples, now) {
270
+ const windowStart = Date.parse(now) - target.windowMs;
271
+ const inWindow = samples.filter((sample) => sample.metric === target.metric && Date.parse(sample.recordedAt) >= windowStart && Date.parse(sample.recordedAt) <= Date.parse(now) + 1_000);
272
+ if (inWindow.length < target.minimumSamples) {
273
+ return { targetId: target.id, metric: target.metric, targetBps: target.targetBps, status: "insufficient_data", windowMs: target.windowMs, sampleCount: inWindow.length, okCount: 0, okRateBps: 0, budgetRemainingBps: 0, ...(target.latencyMaxMs === undefined ? {} : { latencyMaxMs: target.latencyMaxMs }) };
274
+ }
275
+ let okCount = 0;
276
+ for (const sample of inWindow) {
277
+ if (SLO_LATENCY_METRICS.includes(sample.metric)) {
278
+ if (sample.ok && sample.durationMs !== undefined && sample.durationMs <= target.latencyMaxMs)
279
+ okCount += 1;
280
+ }
281
+ else if (sample.ok) {
282
+ okCount += 1;
283
+ }
284
+ }
285
+ const okRateBps = rateBps(okCount, inWindow.length);
286
+ const status = okRateBps >= target.targetBps ? "met" : "breached";
287
+ return { targetId: target.id, metric: target.metric, targetBps: target.targetBps, status, windowMs: target.windowMs, sampleCount: inWindow.length, okCount, okRateBps, budgetRemainingBps: okRateBps - target.targetBps, ...(target.latencyMaxMs === undefined ? {} : { latencyMaxMs: target.latencyMaxMs }) };
288
+ }
289
+ function trimSamples(state, boundary) {
290
+ const boundaryMs = Date.parse(boundary);
291
+ state.samples = state.samples.filter((sample) => Date.parse(sample.recordedAt) >= boundaryMs);
292
+ for (const metric of SLO_METRICS) {
293
+ const metricSamples = state.samples.filter((sample) => sample.metric === metric);
294
+ if (metricSamples.length > MAX_SAMPLES_PER_METRIC) {
295
+ const ids = new Set(metricSamples.slice(0, metricSamples.length - MAX_SAMPLES_PER_METRIC).map((sample) => sample.sampleId));
296
+ state.samples = state.samples.filter((sample) => sample.metric !== metric || !ids.has(sample.sampleId));
297
+ }
298
+ }
299
+ if (state.samples.length > MAX_SAMPLES) {
300
+ state.samples = state.samples.slice(state.samples.length - MAX_SAMPLES);
301
+ }
302
+ }
303
+ function validateOperator(value) {
304
+ const operator = object(value, "SLO operator is invalid.");
305
+ exactKeys(operator, ["id", "principalId", "permissions"], "SLO operator");
306
+ const permissions = array(operator.permissions, "SLO operator permissions", 8).map((permission) => {
307
+ if (permission !== "slo.configure" && permission !== "slo.inspect")
308
+ throw new SloError("SLO operator permission is invalid.");
309
+ return permission;
310
+ });
311
+ unique(permissions, "SLO operator permissions");
312
+ return { id: identifier(operator.id, "SLO operator id"), principalId: identifier(operator.principalId, "SLO operator principal id"), permissions };
313
+ }
314
+ function boundedMs(value, label) {
315
+ if (typeof value !== "number" || !Number.isInteger(value) || value < MIN_WINDOW_MS || value > MAX_WINDOW_MS)
316
+ throw new SloError(`${label} must be between one hour and 30 days.`);
317
+ return value;
318
+ }
319
+ function positive(value, label, max) {
320
+ if (typeof value !== "number" || !Number.isInteger(value) || value < 1 || value > max)
321
+ throw new SloError(`${label} is invalid.`);
322
+ return value;
323
+ }
324
+ function nonNegative(value, label, max) {
325
+ if (typeof value !== "number" || !Number.isInteger(value) || value < 0 || value > max)
326
+ throw new SloError(`${label} is invalid.`);
327
+ return value;
328
+ }
329
+ function bps(value, label) {
330
+ return nonNegative(value, label, 10_000);
331
+ }
332
+ function rateBps(count, total) {
333
+ return total === 0 ? 0 : Math.floor((count * 10_000) / total);
334
+ }
335
+ function identifier(value, label) {
336
+ if (typeof value !== "string" || !IDENTIFIER.test(value) || sanitizeSecretString(value) !== value)
337
+ throw new SloError(`${label} must be a safe identifier.`);
338
+ return value;
339
+ }
340
+ function timestamp(value, label) {
341
+ if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value) || !Number.isFinite(Date.parse(value)))
342
+ throw new SloError(`${label} must be an ISO UTC timestamp.`);
343
+ return value;
344
+ }
345
+ function text(value, label, max) {
346
+ if (typeof value !== "string" || value.trim() === "" || value.length > max || /[\u0000-\u001f]/.test(value) || sanitizeSecretString(value) !== value)
347
+ throw new SloError(`${label} is invalid.`);
348
+ return value.trim();
349
+ }
350
+ function object(value, message) {
351
+ if (value === null || typeof value !== "object" || Array.isArray(value))
352
+ throw new SloError(message);
353
+ return value;
354
+ }
355
+ function array(value, label, max) {
356
+ if (!Array.isArray(value) || value.length > max)
357
+ throw new SloError(`${label} is invalid.`);
358
+ return value;
359
+ }
360
+ function exactKeys(value, keys, label, optional = []) {
361
+ for (const key of Object.keys(value))
362
+ if (!keys.includes(key) || (value[key] === undefined && !optional.includes(key)))
363
+ throw new SloError(`${label} contains unsupported field: ${key}`);
364
+ }
365
+ function unique(values, label) {
366
+ if (new Set(values).size !== values.length)
367
+ throw new SloError(`${label} must be unique.`);
368
+ }
369
+ function clone(value) {
370
+ return structuredClone(value);
371
+ }
372
+ function isErrorCode(error, code) {
373
+ return error instanceof Error && "code" in error && error.code === code;
374
+ }
375
+ //# sourceMappingURL=slo.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"slo.js","sourceRoot":"","sources":["../../src/reliability/slo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEhG,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,IAAI,GAAG,cAAc,CAAC;AAC5B,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAElD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,sBAAsB,EAAE,sBAAsB,CAAU,CAAC;AAElK,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAU,CAAC;AAyEvF,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAAU,CAAC;AAEpD,MAAM,UAAU,uBAAuB;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAgC,EAAE;IACzE,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,OAAO,kBAAkB;IACZ,IAAI,CAAS;IACb,GAAG,CAAa;IAChB,kBAAkB,CAAwB;IAE3D,YAAY,UAAgC,EAAE;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC,QAAQ,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,mCAAmC,EAAE,CAAC;IAChG,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAA6C;QACjE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW;oBAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;gBAC7F,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAA8C;QAC/D,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YAChF,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,CAAC,CAAC;YAClE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAA2B,EAAE,UAAkB;QAChE,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA6B,EAAE,UAAkB;QACnE,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;YAAE,MAAM,IAAI,QAAQ,CAAC,2CAA2C,gBAAgB,oBAAoB,CAAC,CAAC;QACzI,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1C,KAAK,MAAM,MAAM,IAAI,QAAQ;gBAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1D,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA4C;QACzD,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACvI,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,GAAG,CAAC;QACtB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9F,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACzH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA4B;QACxC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAA8B,CAAC;QAC/K,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzD,CAAC;IAEO,sBAAsB,CAAC,UAAkB;QAC/C,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO;QAC3G,MAAM,IAAI,QAAQ,CAAC,6DAA6D,CAAC,CAAC;IACpF,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,QAAiB,EAAE,UAAiC;QAC1E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,2CAA2C,UAAU,GAAG,CAAC,CAAC;QAC7H,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9E,CAAC;IAEO,SAAS;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QAC/G,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3H,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QACjH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe;YAAE,MAAM,IAAI,QAAQ,CAAC,mCAAmC,CAAC,CAAC;QACjH,IAAI,CAAC;YACH,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,QAAQ;gBAAE,MAAM,KAAK,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAAC,8BAA8B,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAI,SAAsC;QAC5D,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,mCAAmC;IACjD,OAAO,EAAE,KAAK,CAAC,YAAY,KAAqB,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3H,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,MAAM,MAAM,GAAG,IAAI,OAAO,EAAU,CAAC;IACrC,OAAO;QACL,UAAU,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,QAAiB,IAA0B,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,6CAA6C,CAAC,CAAC,CAAC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;QACrQ,KAAK,CAAC,KAAK,IAAiB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC;KAC9H,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,EAAE,EAAE,EAAE,oBAAoB,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,iGAAiG,EAAE;QACpO,EAAE,EAAE,EAAE,4BAA4B,EAAE,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,8FAA8F,EAAE;QAClP,EAAE,EAAE,EAAE,4BAA4B,EAAE,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,4EAA4E,EAAE;QAC/N,EAAE,EAAE,EAAE,yBAAyB,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,kEAAkE,EAAE;QACpO,EAAE,EAAE,EAAE,uBAAuB,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,oFAAoF,EAAE;QAC7N,EAAE,EAAE,EAAE,yBAAyB,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,4EAA4E,EAAE;KACvP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,MAAM,KAAK,GAAG,CAAC,cAAc,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjF,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACzH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,sBAAsB,UAAU,CAAC,kBAAkB,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5M,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ,KAAK,MAAM,OAAO,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,WAAW,MAAM,UAAU,CAAC,SAAS,WAAW,UAAU,CAAC,SAAS,OAAO,MAAM,GAAG,UAAU,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,UAAU,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC;IACjS,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;IAC5D,SAAS,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,aAAa,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IACvH,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACrF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC3F,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACvD,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7J,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAmB,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IAC3G,MAAM,MAAM,GAAc;QACxB,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC,MAAmB;QAClC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC;QACzD,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,4BAA4B,EAAE,sBAAsB,CAAC;QACrG,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAC3I,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,wBAAwB,EAAE,GAAG,CAAC,EAAE,CAAC;KACtH,CAAC;IACF,IAAK,mBAAyC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,QAAQ,CAAC,mDAAmD,CAAC,CAAC;IACrL,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACvD,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IACvL,IAAI,MAAM,CAAC,aAAa,KAAK,cAAc,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB;QAAE,MAAM,IAAI,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IAC3I,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAmB,CAAC,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,QAAQ,CAAC,0CAA0C,CAAC,CAAC;IACxJ,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;QACtD,MAAM,EAAE,MAAM,CAAC,MAAmB;QAClC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACtI,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAC3G,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAA2B,EAAE,GAAW;IAC9D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IAC7F,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAc;QACxB,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,UAAU,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACjE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACpI,UAAU,EAAE,GAAG;QACf,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAC7F,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACzG,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;KACvE,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,gCAAgC,CAAC,CAAC;IACrE,SAAS,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACtH,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,CAAU,EAAE,CAAC;QACzG,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,MAAiB,EAAE,OAAoB,EAAE,GAAW;IAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACzL,IAAI,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC;IACjT,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAK,mBAAyC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,YAAa;gBAAE,OAAO,IAAI,CAAC,CAAC;QAC9G,CAAC;aAAM,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC;AACjT,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB,EAAE,QAAgB;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,CAAC;IAC9F,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjF,IAAI,aAAa,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5H,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACvC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,cAAc,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAChG,IAAI,UAAU,KAAK,eAAe,IAAI,UAAU,KAAK,aAAa;YAAE,MAAM,IAAI,QAAQ,CAAC,qCAAqC,CAAC,CAAC;QAC9H,OAAO,UAAmC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC,EAAE,WAAW,EAAE,CAAC;AACrJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,aAAa,IAAI,KAAK,GAAG,aAAa;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IAClL,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,GAAG,CAAC,KAAc,EAAE,KAAa;IACxC,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,KAAa;IAC3C,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IAC7J,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IACnM,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IACjM,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,OAAe;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrG,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAc,EAAE,KAAa,EAAE,WAAqB,EAAE;IACvG,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,gCAAgC,GAAG,EAAE,CAAC,CAAC;AAC5L,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB,EAAE,KAAa;IAC7C,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,KAAK,CAAI,KAAQ;IACxB,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAC1E,CAAC"}
@@ -10,11 +10,12 @@ export async function generateSafetyReport(projectRoot = process.cwd()) {
10
10
  const files = await collectFiles(projectRoot, projectRoot, 250);
11
11
  for (const file of files) {
12
12
  const content = await readFile(join(projectRoot, file), "utf8");
13
+ const fixture = isFixturePath(file);
13
14
  if (/api\.stripe\.com|api\.openai\.com|api\.twilio\.com/i.test(content)) {
14
- findings.push({ severity: "high", message: "Production provider host appears in source.", file });
15
+ findings.push({ severity: fixture ? "low" : "high", message: fixture ? "Production provider host appears in a test, documentation, or example fixture." : "Production provider host appears in source.", file });
15
16
  }
16
- if (/sk_live_[A-Za-z0-9]+/.test(content)) {
17
- findings.push({ severity: "high", message: "Live-looking Stripe key appears in source.", file });
17
+ if (/sk_live_[A-Za-z0-9]{16,}/.test(content)) {
18
+ findings.push({ severity: fixture ? "low" : "high", message: fixture ? "Live-looking Stripe key appears in a test, documentation, or example fixture." : "Live-looking Stripe key appears in source.", file });
18
19
  }
19
20
  if (/STRIPE_SECRET_KEY|OPENAI_API_KEY|TWILIO_AUTH_TOKEN/.test(content) && !/GHOSTAPI_|host:|baseURL/.test(content)) {
20
21
  findings.push({ severity: "medium", message: "Provider secret is referenced without an obvious GhostAPI local override nearby.", file });
@@ -27,6 +28,9 @@ export async function generateSafetyReport(projectRoot = process.cwd()) {
27
28
  recommendations: buildRecommendations(detected, findings)
28
29
  };
29
30
  }
31
+ function isFixturePath(file) {
32
+ return /^(?:test|docs|examples)\//.test(file) || /(?:^|\/)(?:fixtures?|__fixtures__)(?:\/|$)/.test(file);
33
+ }
30
34
  async function collectFiles(root, dir, limit, acc = []) {
31
35
  if (acc.length >= limit)
32
36
  return acc;
@@ -1 +1 @@
1
- {"version":3,"file":"safetyReport.js","sourceRoot":"","sources":["../../src/report/safetyReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAoB,MAAM,yBAAyB,CAAC;AAexF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AACrF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEnG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;IACpE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,6CAA6C,EAAE,IAAI,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE,IAAI,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnH,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,kFAAkF,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,QAAQ;QACR,QAAQ;QACR,eAAe,EAAE,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW,EAAE,KAAa,EAAE,MAAgB,EAAE;IACtF,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO;YAAE,SAAS;QAClC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAuB,EAAE,QAAyB;IAC9E,MAAM,eAAe,GAAG,CAAC,sEAAsE,EAAE,0DAA0D,CAAC,CAAC;IAC7J,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,eAAe,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;IAC7J,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,eAAe,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;IAC5J,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC;QAAE,eAAe,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC/J,OAAO,eAAe,CAAC;AACzB,CAAC"}
1
+ {"version":3,"file":"safetyReport.js","sourceRoot":"","sources":["../../src/report/safetyReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAoB,MAAM,yBAAyB,CAAC;AAexF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AACrF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEnG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;IACpE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,gFAAgF,CAAC,CAAC,CAAC,6CAA6C,EAAE,IAAI,EAAE,CAAC,CAAC;QACnN,CAAC;QACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,+EAA+E,CAAC,CAAC,CAAC,4CAA4C,EAAE,IAAI,EAAE,CAAC,CAAC;QACjN,CAAC;QACD,IAAI,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnH,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,kFAAkF,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,QAAQ;QACR,QAAQ;QACR,eAAe,EAAE,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3G,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW,EAAE,KAAa,EAAE,MAAgB,EAAE;IACtF,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO;YAAE,SAAS;QAClC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAuB,EAAE,QAAyB;IAC9E,MAAM,eAAe,GAAG,CAAC,sEAAsE,EAAE,0DAA0D,CAAC,CAAC;IAC7J,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,eAAe,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;IAC7J,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,eAAe,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;IAC5J,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC;QAAE,eAAe,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC/J,OAAO,eAAe,CAAC;AACzB,CAAC"}
@@ -0,0 +1,2 @@
1
+ export { LocalSafetyController, SafetyControllerError, SAFETY_SCOPE_KINDS, createDisabledSafetyEmergencyAuthorizer, createLocalSafetyController, createTestSafetyEmergencyAuthorizer } from "./safetyController.js";
2
+ export type { SafetyAction, SafetyAuditRecord, SafetyBudget, SafetyBudgetLimits, SafetyCircuit, SafetyControllerOptions, SafetyControllerState, SafetyDeadLetter, SafetyEmergencyAuthorizer, SafetyLease, SafetyOperator, SafetyOperatorPermission, SafetyQueueItem, SafetyScope, SafetyScopeKind } from "./safetyController.js";
@@ -0,0 +1,2 @@
1
+ export { LocalSafetyController, SafetyControllerError, SAFETY_SCOPE_KINDS, createDisabledSafetyEmergencyAuthorizer, createLocalSafetyController, createTestSafetyEmergencyAuthorizer } from "./safetyController.js";
2
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/safety/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,uCAAuC,EAAE,2BAA2B,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC"}