agentcert 0.5.3 → 0.5.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/bundle.js +19 -0
- package/dist/cli.js +1 -0
- package/dist/normalizers.js +47 -0
- package/dist/report.js +19 -2
- package/dist/schema-validator.js +133 -2
- package/dist/vendor/onegent-runtime/sdk.d.ts +1 -1
- package/dist/vendor/onegent-runtime/sdk.d.ts.map +1 -1
- package/dist/vendor/onegent-runtime/sdk.js +1 -1
- package/dist/vendor/onegent-runtime/service.d.ts +3 -3
- package/dist/vendor/onegent-runtime/service.d.ts.map +1 -1
- package/dist/vendor/onegent-runtime/service.js +6 -4
- package/dist/vendor/onegent-runtime/trust-types.d.ts +163 -0
- package/dist/vendor/onegent-runtime/trust-types.d.ts.map +1 -0
- package/dist/vendor/onegent-runtime/trust-types.js +7 -0
- package/dist/vendor/onegent-runtime/types.d.ts +4 -1
- package/dist/vendor/onegent-runtime/types.d.ts.map +1 -1
- package/package.json +1 -1
package/dist/bundle.js
CHANGED
|
@@ -36,6 +36,7 @@ export function buildEvidenceBundle(results, subjectName, subjectType = "agent")
|
|
|
36
36
|
results,
|
|
37
37
|
evidence,
|
|
38
38
|
artifacts,
|
|
39
|
+
evidenceStrength: evidenceStrengthFor(results),
|
|
39
40
|
standards: [
|
|
40
41
|
{
|
|
41
42
|
id: "aiuc-1",
|
|
@@ -58,6 +59,24 @@ export function buildEvidenceBundle(results, subjectName, subjectType = "agent")
|
|
|
58
59
|
],
|
|
59
60
|
};
|
|
60
61
|
}
|
|
62
|
+
const STRENGTH_ORDER = ["reported", "recorded", "enforced", "outcome_verified", "independently_reviewed"];
|
|
63
|
+
function evidenceStrengthFor(results) {
|
|
64
|
+
const values = results.map((result) => result.evidenceStrength ?? {
|
|
65
|
+
schemaVersion: "agentcert.evidence_strength.v0.1",
|
|
66
|
+
level: "reported",
|
|
67
|
+
claims: ["A producer supplied a result for this run."],
|
|
68
|
+
limitations: ["The result does not contain a source-signed action record."],
|
|
69
|
+
});
|
|
70
|
+
const weakest = values.length
|
|
71
|
+
? values.reduce((left, right) => STRENGTH_ORDER.indexOf(left.level) <= STRENGTH_ORDER.indexOf(right.level) ? left : right)
|
|
72
|
+
: { schemaVersion: "agentcert.evidence_strength.v0.1", level: "reported", claims: [], limitations: ["The bundle contains no results."] };
|
|
73
|
+
return {
|
|
74
|
+
schemaVersion: "agentcert.evidence_strength.v0.1",
|
|
75
|
+
level: weakest.level,
|
|
76
|
+
claims: [...new Set(values.flatMap((value) => value.claims))],
|
|
77
|
+
limitations: [...new Set(values.flatMap((value) => value.limitations))],
|
|
78
|
+
};
|
|
79
|
+
}
|
|
61
80
|
function levelForScore(score, passed) {
|
|
62
81
|
if (!passed) {
|
|
63
82
|
return "Not certified";
|
package/dist/cli.js
CHANGED
|
@@ -489,6 +489,7 @@ else if (command === "schema") {
|
|
|
489
489
|
agentcert schema validate --schema classifier-eval --file examples/agentcert/classifier-eval.example.json
|
|
490
490
|
agentcert schema validate --schema release-gate --file .agentcert/latest/agentcert-release-gate.json
|
|
491
491
|
agentcert schema validate --schema assurance-report --file assurance-report.json
|
|
492
|
+
agentcert schema validate --schema assurance-delivery --file assurance-delivery.json
|
|
492
493
|
agentcert schema validate --schema evidence-signature --file .agentcert/latest/agentcert-evidence.json.sig.json
|
|
493
494
|
`);
|
|
494
495
|
}
|
package/dist/normalizers.js
CHANGED
|
@@ -42,6 +42,7 @@ export function normalizeMcpBenchResult(input, artifactPath) {
|
|
|
42
42
|
passed,
|
|
43
43
|
certLevel: stringValue(value.cert_level),
|
|
44
44
|
summary: passed ? "MCPBench completed without blocking violations." : "MCPBench found blocking evidence.",
|
|
45
|
+
evidenceStrength: reportedStrength("MCPBench result was imported without a source-signed action journal."),
|
|
45
46
|
artifacts: recordOfStrings(value.artifact_paths, { results: artifactPath }),
|
|
46
47
|
evidence,
|
|
47
48
|
};
|
|
@@ -85,6 +86,7 @@ export function normalizeTripwireResult(input, artifactPath) {
|
|
|
85
86
|
score: overallScore,
|
|
86
87
|
passed,
|
|
87
88
|
summary: passed ? "Tripwire CI gate passed." : "Tripwire CI gate failed.",
|
|
89
|
+
evidenceStrength: reportedStrength("Tripwire result was imported without a source-signed action journal."),
|
|
88
90
|
artifacts: { result: artifactPath, outDir: stringValue(value.outDir) ?? "" },
|
|
89
91
|
evidence,
|
|
90
92
|
};
|
|
@@ -98,6 +100,10 @@ export function normalizeOnegentAuditPacket(input, artifactPath) {
|
|
|
98
100
|
const authorization = asRecord(value.authorizationDecision);
|
|
99
101
|
const verification = asRecord(value.verificationResult);
|
|
100
102
|
const auditEvents = Array.isArray(value.auditEvents) ? value.auditEvents : [];
|
|
103
|
+
const trusted = asRecord(value.trustedActionEvidence);
|
|
104
|
+
const trustedStrength = evidenceStrengthValue(trusted.evidenceStrength);
|
|
105
|
+
const mandate = asRecord(trusted.mandate);
|
|
106
|
+
const receipt = asRecord(trusted.runReceipt);
|
|
101
107
|
const verificationSuccess = verification.success === true;
|
|
102
108
|
const approved = approval.status === "APPROVED" || approval.status === undefined;
|
|
103
109
|
const passed = verificationSuccess && approved;
|
|
@@ -158,6 +164,25 @@ export function normalizeOnegentAuditPacket(input, artifactPath) {
|
|
|
158
164
|
artifactPath,
|
|
159
165
|
metadata: verification,
|
|
160
166
|
});
|
|
167
|
+
if (trustedStrength) {
|
|
168
|
+
evidence.push({
|
|
169
|
+
id: "onegent_action_mandate",
|
|
170
|
+
kind: "action_mandate",
|
|
171
|
+
severity: "info",
|
|
172
|
+
message: `High-risk action was bound to mandate ${stringValue(mandate.mandateId) ?? "UNKNOWN"}.`,
|
|
173
|
+
source: "onegent-runtime",
|
|
174
|
+
artifactPath,
|
|
175
|
+
metadata: { mandateId: mandate.mandateId, mandateDigestSha256: mandate.digestSha256 },
|
|
176
|
+
}, {
|
|
177
|
+
id: "onegent_trusted_journal",
|
|
178
|
+
kind: "trusted_action_journal",
|
|
179
|
+
severity: asRecord(receipt.journal).valid === true ? "info" : "critical",
|
|
180
|
+
message: `Source-signed action journal strength: ${trustedStrength.level}.`,
|
|
181
|
+
source: "onegent-runtime",
|
|
182
|
+
artifactPath,
|
|
183
|
+
metadata: { receiptSha256: receipt.receiptSha256, collector: receipt.collector, journal: receipt.journal },
|
|
184
|
+
});
|
|
185
|
+
}
|
|
161
186
|
for (const event of auditEvents) {
|
|
162
187
|
const record = asRecord(event);
|
|
163
188
|
evidence.push({
|
|
@@ -181,10 +206,32 @@ export function normalizeOnegentAuditPacket(input, artifactPath) {
|
|
|
181
206
|
summary: passed
|
|
182
207
|
? "Runtime action was approved, mock-executed, verified, and audited."
|
|
183
208
|
: "Runtime action did not complete the approval and verification gate.",
|
|
209
|
+
evidenceStrength: trustedStrength ?? reportedStrength("Onegent audit packet does not include a trusted action receipt."),
|
|
184
210
|
artifacts: { auditPacket: artifactPath },
|
|
185
211
|
evidence,
|
|
186
212
|
};
|
|
187
213
|
}
|
|
214
|
+
function reportedStrength(limitation) {
|
|
215
|
+
return {
|
|
216
|
+
schemaVersion: "agentcert.evidence_strength.v0.1",
|
|
217
|
+
level: "reported",
|
|
218
|
+
claims: ["A producer supplied a result for this run."],
|
|
219
|
+
limitations: [limitation],
|
|
220
|
+
};
|
|
221
|
+
}
|
|
222
|
+
function evidenceStrengthValue(input) {
|
|
223
|
+
const value = asRecord(input);
|
|
224
|
+
const level = value.level;
|
|
225
|
+
if (value.schemaVersion !== "agentcert.evidence_strength.v0.1"
|
|
226
|
+
|| !["reported", "recorded", "enforced", "outcome_verified", "independently_reviewed"].includes(String(level)))
|
|
227
|
+
return undefined;
|
|
228
|
+
return {
|
|
229
|
+
schemaVersion: "agentcert.evidence_strength.v0.1",
|
|
230
|
+
level: level,
|
|
231
|
+
claims: Array.isArray(value.claims) ? value.claims.filter((item) => typeof item === "string") : [],
|
|
232
|
+
limitations: Array.isArray(value.limitations) ? value.limitations.filter((item) => typeof item === "string") : [],
|
|
233
|
+
};
|
|
234
|
+
}
|
|
188
235
|
function normalizeScore(value) {
|
|
189
236
|
return value <= 1 ? Math.round(value * 100) : Math.round(value);
|
|
190
237
|
}
|
package/dist/report.js
CHANGED
|
@@ -6,7 +6,12 @@ export function renderMarkdownReport(bundle) {
|
|
|
6
6
|
`Generated: ${bundle.generatedAt}`,
|
|
7
7
|
`Verdict: ${bundle.verdict.passed ? "PASS" : "FAIL"}`,
|
|
8
8
|
`Score: ${bundle.verdict.score}`,
|
|
9
|
-
`
|
|
9
|
+
`Evidence strength: ${bundle.evidenceStrength?.level ?? "reported"}`,
|
|
10
|
+
"",
|
|
11
|
+
"## Evidence Strength",
|
|
12
|
+
"",
|
|
13
|
+
...(bundle.evidenceStrength?.claims ?? ["A producer supplied a result for this run."]).map((claim) => `- Claim: ${claim}`),
|
|
14
|
+
...(bundle.evidenceStrength?.limitations ?? ["This legacy bundle does not declare stronger source controls."]).map((limitation) => `- Limitation: ${limitation}`),
|
|
10
15
|
"",
|
|
11
16
|
"## Results",
|
|
12
17
|
"",
|
|
@@ -34,6 +39,11 @@ export function renderMarkdownReport(bundle) {
|
|
|
34
39
|
return `${lines.join("\n")}\n`;
|
|
35
40
|
}
|
|
36
41
|
export function renderHtmlReport(bundle) {
|
|
42
|
+
const strength = bundle.evidenceStrength ?? {
|
|
43
|
+
level: "reported",
|
|
44
|
+
claims: ["A producer supplied a result for this run."],
|
|
45
|
+
limitations: ["This legacy bundle does not declare stronger source controls."],
|
|
46
|
+
};
|
|
37
47
|
const resultCards = bundle.results
|
|
38
48
|
.map((result) => `<article class="card ${result.passed ? "pass" : "fail"}">
|
|
39
49
|
<span>${escapeHtml(result.phase)}</span>
|
|
@@ -108,10 +118,17 @@ export function renderHtmlReport(bundle) {
|
|
|
108
118
|
<div class="summary">
|
|
109
119
|
<div class="metric"><span>Verdict</span><strong class="${bundle.verdict.passed ? "verdict-pass" : "verdict-fail"}">${bundle.verdict.passed ? "PASS" : "FAIL"}</strong></div>
|
|
110
120
|
<div class="metric"><span>Score</span><strong>${bundle.verdict.score}/100</strong></div>
|
|
111
|
-
<div class="metric"><span>
|
|
121
|
+
<div class="metric"><span>Evidence strength</span><strong>${escapeHtml(bundle.evidenceStrength?.level ?? "reported")}</strong></div>
|
|
112
122
|
<div class="metric"><span>Evidence</span><strong>${bundle.summary.totalEvidence}</strong></div>
|
|
113
123
|
</div>
|
|
114
124
|
<div class="cards">${resultCards}</div>
|
|
125
|
+
<section>
|
|
126
|
+
<h2>Evidence strength: ${escapeHtml(strength.level)}</h2>
|
|
127
|
+
<h3>Supported claims</h3>
|
|
128
|
+
<ul>${strength.claims.map((claim) => `<li>${escapeHtml(claim)}</li>`).join("")}</ul>
|
|
129
|
+
<h3>Limitations</h3>
|
|
130
|
+
<ul>${strength.limitations.map((limitation) => `<li>${escapeHtml(limitation)}</li>`).join("")}</ul>
|
|
131
|
+
</section>
|
|
115
132
|
<section>
|
|
116
133
|
<h2>Evidence</h2>
|
|
117
134
|
<table>
|
package/dist/schema-validator.js
CHANGED
|
@@ -12,10 +12,15 @@ export function parseSchemaId(input) {
|
|
|
12
12
|
value === "robustness-lab" ||
|
|
13
13
|
value === "release-gate" ||
|
|
14
14
|
value === "assurance-report" ||
|
|
15
|
-
value === "
|
|
15
|
+
value === "assurance-delivery" ||
|
|
16
|
+
value === "evidence-signature" ||
|
|
17
|
+
value === "evidence-strength" ||
|
|
18
|
+
value === "action-mandate" ||
|
|
19
|
+
value === "trusted-action-record" ||
|
|
20
|
+
value === "trusted-run-receipt") {
|
|
16
21
|
return value;
|
|
17
22
|
}
|
|
18
|
-
throw new Error(`Unsupported schema "${value}". Use evidence-bundle, result, corpus-record, failure-review, classifier-eval, monitor-snapshot, robustness-lab, release-gate, assurance-report,
|
|
23
|
+
throw new Error(`Unsupported schema "${value}". Use evidence-bundle, result, corpus-record, failure-review, classifier-eval, monitor-snapshot, robustness-lab, release-gate, assurance-report, assurance-delivery, evidence-signature, evidence-strength, action-mandate, trusted-action-record, or trusted-run-receipt.`);
|
|
19
24
|
}
|
|
20
25
|
export function validateAgentCertSchema(schema, input) {
|
|
21
26
|
const errors = [];
|
|
@@ -45,6 +50,16 @@ export function validateAgentCertSchema(schema, input) {
|
|
|
45
50
|
validateRobustnessLab(value, errors);
|
|
46
51
|
if (schema === "assurance-report")
|
|
47
52
|
validateAssuranceReport(value, errors);
|
|
53
|
+
if (schema === "assurance-delivery")
|
|
54
|
+
validateAssuranceDelivery(value, errors);
|
|
55
|
+
if (schema === "evidence-strength")
|
|
56
|
+
validateEvidenceStrength(value, errors);
|
|
57
|
+
if (schema === "action-mandate")
|
|
58
|
+
validateActionMandate(value, errors);
|
|
59
|
+
if (schema === "trusted-action-record")
|
|
60
|
+
validateTrustedActionRecord(value, errors);
|
|
61
|
+
if (schema === "trusted-run-receipt")
|
|
62
|
+
validateTrustedRunReceipt(value, errors);
|
|
48
63
|
}
|
|
49
64
|
return { schema, valid: errors.length === 0, errors };
|
|
50
65
|
}
|
|
@@ -62,6 +77,13 @@ function validateEvidenceBundle(value, errors) {
|
|
|
62
77
|
requiredArray(value, "evidence", errors);
|
|
63
78
|
requiredObject(value, "artifacts", errors);
|
|
64
79
|
requiredArray(value, "standards", errors);
|
|
80
|
+
if (value.evidenceStrength !== undefined) {
|
|
81
|
+
const strength = recordValue(value.evidenceStrength);
|
|
82
|
+
if (!strength)
|
|
83
|
+
errors.push("evidenceStrength must be an object.");
|
|
84
|
+
else
|
|
85
|
+
validateEvidenceStrength(strength, errors, "evidenceStrength.");
|
|
86
|
+
}
|
|
65
87
|
const subject = recordValue(value.subject);
|
|
66
88
|
if (subject) {
|
|
67
89
|
requiredStringAt(subject, "name", "subject.name", errors);
|
|
@@ -86,6 +108,88 @@ function validateEvidenceBundle(value, errors) {
|
|
|
86
108
|
validateEvidenceArray(value.evidence, "evidence", errors);
|
|
87
109
|
validateStandards(value.standards, errors);
|
|
88
110
|
}
|
|
111
|
+
const EVIDENCE_LEVELS = ["reported", "recorded", "enforced", "outcome_verified", "independently_reviewed"];
|
|
112
|
+
const ACTION_TYPES = ["SUBMIT", "PAY", "SEND", "UPDATE"];
|
|
113
|
+
function validateEvidenceStrength(value, errors, prefix = "") {
|
|
114
|
+
requiredConst(value, "schemaVersion", "agentcert.evidence_strength.v0.1", errors);
|
|
115
|
+
requiredEnumAt(value, "level", EVIDENCE_LEVELS, `${prefix}level`, errors);
|
|
116
|
+
requiredArray(value, "claims", errors);
|
|
117
|
+
requiredArray(value, "limitations", errors);
|
|
118
|
+
stringArray(value.claims, `${prefix}claims`, errors);
|
|
119
|
+
stringArray(value.limitations, `${prefix}limitations`, errors);
|
|
120
|
+
}
|
|
121
|
+
function validateActionMandate(value, errors) {
|
|
122
|
+
requiredConst(value, "schemaVersion", "agentcert.action_mandate.v0.1", errors);
|
|
123
|
+
for (const field of ["mandateId", "policySha256", "validFrom", "expiresAt", "issuedAt", "digestSha256"])
|
|
124
|
+
requiredString(value, field, errors);
|
|
125
|
+
requiredObject(value, "issuer", errors);
|
|
126
|
+
requiredObject(value, "subject", errors);
|
|
127
|
+
requiredObject(value, "scope", errors);
|
|
128
|
+
requiredObject(value, "sourceSignature", errors);
|
|
129
|
+
sha256Field(value, "policySha256", errors);
|
|
130
|
+
sha256Field(value, "digestSha256", errors);
|
|
131
|
+
for (const field of ["validFrom", "expiresAt", "issuedAt"])
|
|
132
|
+
validateTimestamp(value[field], field, errors);
|
|
133
|
+
const scope = recordValue(value.scope);
|
|
134
|
+
if (scope) {
|
|
135
|
+
requiredArray(scope, "actionTypes", errors);
|
|
136
|
+
requiredArray(scope, "targetSystems", errors);
|
|
137
|
+
requiredArray(scope, "permissions", errors);
|
|
138
|
+
if (Array.isArray(scope.actionTypes))
|
|
139
|
+
scope.actionTypes.forEach((item, index) => {
|
|
140
|
+
if (!ACTION_TYPES.includes(String(item)))
|
|
141
|
+
errors.push(`scope.actionTypes[${index}] is not supported.`);
|
|
142
|
+
});
|
|
143
|
+
}
|
|
144
|
+
validateSourceSignature(value.sourceSignature, "sourceSignature", errors);
|
|
145
|
+
}
|
|
146
|
+
function validateTrustedActionRecord(value, errors) {
|
|
147
|
+
requiredConst(value, "schemaVersion", "agentcert.trusted_action_record.v0.1", errors);
|
|
148
|
+
for (const field of ["recordId", "runId", "occurredAt", "type", "payloadSha256", "eventHash"])
|
|
149
|
+
requiredString(value, field, errors);
|
|
150
|
+
requiredNonNegativeInteger(value, "sequence", "sequence", errors);
|
|
151
|
+
requiredObject(value, "collector", errors);
|
|
152
|
+
requiredObject(value, "payload", errors);
|
|
153
|
+
requiredObject(value, "sourceSignature", errors);
|
|
154
|
+
sha256Field(value, "payloadSha256", errors);
|
|
155
|
+
sha256Field(value, "eventHash", errors);
|
|
156
|
+
if (value.previousEventHash !== undefined)
|
|
157
|
+
sha256Field(value, "previousEventHash", errors);
|
|
158
|
+
validateTimestamp(value.occurredAt, "occurredAt", errors);
|
|
159
|
+
validateSourceSignature(value.sourceSignature, "sourceSignature", errors);
|
|
160
|
+
}
|
|
161
|
+
function validateTrustedRunReceipt(value, errors) {
|
|
162
|
+
requiredConst(value, "schemaVersion", "agentcert.trusted_run_receipt.v0.1", errors);
|
|
163
|
+
for (const field of ["runId", "startedAt", "completedAt", "firstEventHash", "lastEventHash", "sourcePublicKeyPem", "receiptSha256"])
|
|
164
|
+
requiredString(value, field, errors);
|
|
165
|
+
for (const field of ["eventCount", "droppedEventCount"])
|
|
166
|
+
requiredNonNegativeInteger(value, field, field, errors);
|
|
167
|
+
requiredObject(value, "collector", errors);
|
|
168
|
+
requiredArray(value, "mandateDigests", errors);
|
|
169
|
+
requiredArray(value, "actionIds", errors);
|
|
170
|
+
requiredObject(value, "journal", errors);
|
|
171
|
+
requiredObject(value, "evidenceStrength", errors);
|
|
172
|
+
requiredObject(value, "sourceSignature", errors);
|
|
173
|
+
for (const field of ["firstEventHash", "lastEventHash", "receiptSha256"])
|
|
174
|
+
sha256Field(value, field, errors);
|
|
175
|
+
const strength = recordValue(value.evidenceStrength);
|
|
176
|
+
if (strength)
|
|
177
|
+
validateEvidenceStrength(strength, errors, "evidenceStrength.");
|
|
178
|
+
validateSourceSignature(value.sourceSignature, "sourceSignature", errors);
|
|
179
|
+
}
|
|
180
|
+
function sha256Field(value, field, errors) {
|
|
181
|
+
if (typeof value[field] === "string" && !/^[0-9a-f]{64}$/.test(value[field]))
|
|
182
|
+
errors.push(`${field} must be a lowercase SHA-256 digest.`);
|
|
183
|
+
}
|
|
184
|
+
function validateSourceSignature(value, path, errors) {
|
|
185
|
+
const signature = recordValue(value);
|
|
186
|
+
if (!signature)
|
|
187
|
+
return;
|
|
188
|
+
if (signature.algorithm !== "Ed25519")
|
|
189
|
+
errors.push(`${path}.algorithm must equal Ed25519.`);
|
|
190
|
+
requiredStringAt(signature, "keyId", `${path}.keyId`, errors);
|
|
191
|
+
requiredStringAt(signature, "signature", `${path}.signature`, errors);
|
|
192
|
+
}
|
|
89
193
|
function validateResult(value, errors) {
|
|
90
194
|
requiredConst(value, "schemaVersion", "1", errors);
|
|
91
195
|
requiredString(value, "product", errors);
|
|
@@ -190,6 +294,33 @@ function validateAssuranceReport(value, errors) {
|
|
|
190
294
|
validateTimestamp(value.issuedAt, "issuedAt", errors);
|
|
191
295
|
validateTimestamp(value.expiresAt, "expiresAt", errors);
|
|
192
296
|
}
|
|
297
|
+
function validateAssuranceDelivery(value, errors) {
|
|
298
|
+
requiredConst(value, "schemaVersion", "agentcert.assurance_delivery.v0.1", errors);
|
|
299
|
+
for (const key of ["engagementId", "projectId", "assuranceCaseId", "dueAt", "deliveredAt", "evaluationPlanSha256", "statement"])
|
|
300
|
+
requiredString(value, key, errors);
|
|
301
|
+
for (const key of ["customer", "subject", "sandbox", "workflow", "terms", "decision", "integration", "evidenceStrength", "attestation"])
|
|
302
|
+
requiredObject(value, key, errors);
|
|
303
|
+
for (const key of ["baselineEvidence", "remediationItems", "retestEvidence"])
|
|
304
|
+
requiredArray(value, key, errors);
|
|
305
|
+
if (!/^[0-9a-f]{64}$/.test(String(value.evaluationPlanSha256 ?? "")))
|
|
306
|
+
errors.push("evaluationPlanSha256 must be a lowercase SHA-256 digest.");
|
|
307
|
+
validateTimestamp(value.dueAt, "dueAt", errors);
|
|
308
|
+
validateTimestamp(value.deliveredAt, "deliveredAt", errors);
|
|
309
|
+
const terms = recordValue(value.terms);
|
|
310
|
+
if (terms) {
|
|
311
|
+
if (terms.priceUsd !== 5000)
|
|
312
|
+
errors.push("terms.priceUsd must equal 5000.");
|
|
313
|
+
if (terms.workflowCount !== 1)
|
|
314
|
+
errors.push("terms.workflowCount must equal 1.");
|
|
315
|
+
if (terms.includedRetests !== 1)
|
|
316
|
+
errors.push("terms.includedRetests must equal 1.");
|
|
317
|
+
if (terms.privacy !== "private_by_default")
|
|
318
|
+
errors.push("terms.privacy must equal private_by_default.");
|
|
319
|
+
}
|
|
320
|
+
const decision = recordValue(value.decision);
|
|
321
|
+
if (decision)
|
|
322
|
+
requiredEnum(decision, "verdict", ["RELEASE", "RELEASE_WITH_CONTROLS", "BLOCK"], errors);
|
|
323
|
+
}
|
|
193
324
|
function validateFailureReview(value, errors) {
|
|
194
325
|
requiredConst(value, "schemaVersion", "1", errors);
|
|
195
326
|
requiredConst(value, "kind", "agentcert.failure_review", errors);
|
|
@@ -17,7 +17,7 @@ export interface OnegentRuntime {
|
|
|
17
17
|
executeAfterApproval(action: ActionIntent | string, adapter?: LocalActionAdapter): Promise<ActionExecutionSummary>;
|
|
18
18
|
rollbackAfterExecution(action: ActionIntent | string, adapter: LocalActionAdapter, reason: string): Promise<ActionExecutionReceipt>;
|
|
19
19
|
getExecutionReceipt(action: ActionIntent | string): Promise<ActionExecutionReceipt | undefined>;
|
|
20
|
-
verifyOutcome(action: ActionIntent | string, observedState?: ActionExecutionSummary | Record<string, unknown
|
|
20
|
+
verifyOutcome(action: ActionIntent | string, observedState?: ActionExecutionSummary | Record<string, unknown>, method?: import("./types.js").VerificationMethod): VerificationResult;
|
|
21
21
|
writeAuditPacket(action: ActionIntent | string): Promise<ActionAuditPacket>;
|
|
22
22
|
getActionReview(action: ActionIntent | string): ActionReview;
|
|
23
23
|
listActionReviews(): ActionReview[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/sdk.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,UAAU,EACV,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,KAAK,EAAE,uBAAuB,GAAG,YAAY,CAAC;IAC5D,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,cAAc,CAAC;IACjD,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,gBAAgB,CAAC;IAC9E,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9F,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IAC1G,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IACzG,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnH,sBAAsB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpI,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAChG,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,aAAa,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/sdk.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,UAAU,EACV,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,KAAK,EAAE,uBAAuB,GAAG,YAAY,CAAC;IAC5D,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,cAAc,CAAC;IACjD,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,gBAAgB,CAAC;IAC9E,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9F,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IAC1G,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IACzG,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnH,sBAAsB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpI,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAChG,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,aAAa,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,YAAY,EAAE,kBAAkB,GAAG,kBAAkB,CAAC;IACrL,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5E,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,YAAY,CAAC;IAC7D,iBAAiB,IAAI,YAAY,EAAE,CAAC;CACrC;AAED,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B,GAAG,cAAc,CA2GxF;AAED,wBAAgB,4BAA4B,CAAC,IAAI,SAA8B,GAAG,cAAc,GAAG;IACjG,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;CAC/C,CAQA"}
|
|
@@ -105,7 +105,7 @@ export function createOnegentRuntime(options = {}) {
|
|
|
105
105
|
return next;
|
|
106
106
|
},
|
|
107
107
|
getExecutionReceipt: async (actionInput) => executionStore.get(getActionReview(actionId(actionInput)).action.idempotencyKey),
|
|
108
|
-
verifyOutcome: (action, observedState) => verifyActionOutcome(actionId(action), observedStateForVerification(observedState)),
|
|
108
|
+
verifyOutcome: (action, observedState, method) => verifyActionOutcome(actionId(action), observedStateForVerification(observedState), method),
|
|
109
109
|
writeAuditPacket: async (action) => {
|
|
110
110
|
const packet = generateAuditPacket(actionId(action));
|
|
111
111
|
await options.auditStore?.writeAuditPacket(packet);
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import type { ActionAuditPacket, ActionExecutionSummary, ActionRollbackResult, ActionReview, AuthorizationPolicy, ApprovalRequest, CreateActionIntentInput, LocalActionAdapter, PolicyEngine, PolicyRule, VerificationResult } from "./types.js";
|
|
1
|
+
import type { ActionAuditPacket, ActionExecutionSummary, ActionRollbackResult, ActionReview, AuthorizationPolicy, ApprovalRequest, CreateActionIntentInput, LocalActionAdapter, PolicyEngine, PolicyRule, VerificationMethod, VerificationResult } from "./types.js";
|
|
2
2
|
export interface ActionGatewayOptions {
|
|
3
3
|
policyRules?: PolicyRule[];
|
|
4
4
|
policyEngine?: PolicyEngine;
|
|
@@ -18,8 +18,8 @@ export declare function executeAfterApprovalWithAdapter(actionId: string, adapte
|
|
|
18
18
|
}): Promise<ActionExecutionSummary>;
|
|
19
19
|
export declare function recordRollback(actionId: string, adapterName: string, reason: string, result: ActionRollbackResult): ActionReview;
|
|
20
20
|
export declare function executeMockAction(actionId: string): ActionExecutionSummary;
|
|
21
|
-
export declare function verifyOutcome(actionId: string, observedState?: Record<string, unknown
|
|
22
|
-
export declare function verifyAction(actionId: string, observedState?: Record<string, unknown
|
|
21
|
+
export declare function verifyOutcome(actionId: string, observedState?: Record<string, unknown>, method?: VerificationMethod): VerificationResult;
|
|
22
|
+
export declare function verifyAction(actionId: string, observedState?: Record<string, unknown>, methodOverride?: VerificationMethod): VerificationResult;
|
|
23
23
|
export declare function getActionReview(actionId: string): ActionReview;
|
|
24
24
|
export declare function listActionReviews(): ActionReview[];
|
|
25
25
|
export declare function writeAuditPacket(actionId: string): ActionAuditPacket;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/service.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EAEpB,YAAY,EAEZ,mBAAmB,EACnB,eAAe,EAGf,uBAAuB,EACvB,kBAAkB,EAClB,YAAY,EACZ,UAAU,
|
|
1
|
+
{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/service.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EAEpB,YAAY,EAEZ,mBAAmB,EACnB,eAAe,EAGf,uBAAuB,EACvB,kBAAkB,EAClB,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,uBAAuB,EAAE,OAAO,GAAE,oBAAyB,GAAG,YAAY,CAwGpH;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,UAAU,SAAiC,EAC3C,eAAe,SAAuC,EACtD,OAAO,GAAE,eAAoB,GAC5B,YAAY,CAwBd;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,UAAU,SAAiC,EAC3C,WAAW,SAAoB,GAC9B,eAAe,CA2BjB;AAED,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,UAAU,SAAiC,EAC3C,eAAe,SAAgC,GAC9C,YAAY,CAmBd;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,CAQ7E;AAED,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,CAAC,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAAC,sBAAsB,CAAC,CA6BjC;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,oBAAoB,GAC3B,YAAY,CAkBd;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,CAyC1E;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,kBAAkB,CAExI;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,CAAC,EAAE,kBAAkB,GAAG,kBAAkB,CAoC/I;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAuB9D;AAED,wBAAgB,iBAAiB,IAAI,YAAY,EAAE,CAElD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAEpE;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CA+BvE"}
|
|
@@ -15,6 +15,7 @@ export function captureActionIntent(input, options = {}) {
|
|
|
15
15
|
sourceAgentRunId: input.sourceAgentRunId,
|
|
16
16
|
principal: input.principal ?? { id: input.sourceAgentName, type: "agent" },
|
|
17
17
|
requestedPermissions: input.requestedPermissions ?? [`${input.targetSystem}:${input.actionType}`],
|
|
18
|
+
mandateId: input.mandateId,
|
|
18
19
|
actionType: input.actionType,
|
|
19
20
|
targetSystem: input.targetSystem,
|
|
20
21
|
targetUrl: input.targetUrl,
|
|
@@ -246,10 +247,10 @@ export function executeMockAction(actionId) {
|
|
|
246
247
|
observedState,
|
|
247
248
|
};
|
|
248
249
|
}
|
|
249
|
-
export function verifyOutcome(actionId, observedState) {
|
|
250
|
-
return verifyAction(actionId, observedState);
|
|
250
|
+
export function verifyOutcome(actionId, observedState, method) {
|
|
251
|
+
return verifyAction(actionId, observedState, method);
|
|
251
252
|
}
|
|
252
|
-
export function verifyAction(actionId, observedState) {
|
|
253
|
+
export function verifyAction(actionId, observedState, methodOverride) {
|
|
253
254
|
const action = requireAction(actionId);
|
|
254
255
|
if (action.status !== "EXECUTED" && action.status !== "VERIFIED" && action.status !== "FAILED_VERIFICATION") {
|
|
255
256
|
throw new Error(`Action ${actionId} must be mock-executed before verification.`);
|
|
@@ -257,7 +258,8 @@ export function verifyAction(actionId, observedState) {
|
|
|
257
258
|
const effectiveObservedState = observedState ?? observeActionState(action);
|
|
258
259
|
const differences = diffState(action.proposedAfterState, effectiveObservedState);
|
|
259
260
|
const success = differences.length === 0;
|
|
260
|
-
const method =
|
|
261
|
+
const method = methodOverride ??
|
|
262
|
+
(action.businessObjectType === "purchase_order" && action.targetSystem === "MockERP" ? "LOCAL_MOCK_ERP" : "MOCK");
|
|
261
263
|
const result = {
|
|
262
264
|
id: nextId("verify"),
|
|
263
265
|
actionIntentId: action.id,
|
|
@@ -0,0 +1,163 @@
|
|
|
1
|
+
import type { ActionExecutionSummary, ActionIntent, ActionType, CreateActionIntentInput, LocalActionAdapter, VerificationResult } from "./types.js";
|
|
2
|
+
export declare const EVIDENCE_STRENGTH_LEVELS: readonly ["reported", "recorded", "enforced", "outcome_verified", "independently_reviewed"];
|
|
3
|
+
export type EvidenceStrengthLevel = (typeof EVIDENCE_STRENGTH_LEVELS)[number];
|
|
4
|
+
export interface EvidenceStrengthAssessment {
|
|
5
|
+
schemaVersion: "agentcert.evidence_strength.v0.1";
|
|
6
|
+
level: EvidenceStrengthLevel;
|
|
7
|
+
claims: string[];
|
|
8
|
+
limitations: string[];
|
|
9
|
+
}
|
|
10
|
+
export interface CollectorIdentity {
|
|
11
|
+
id: string;
|
|
12
|
+
version: string;
|
|
13
|
+
keyId: string;
|
|
14
|
+
publicKeySha256: string;
|
|
15
|
+
environment: string;
|
|
16
|
+
}
|
|
17
|
+
export interface SourceSigner {
|
|
18
|
+
keyId: string;
|
|
19
|
+
privateKeyPem: string;
|
|
20
|
+
publicKeyPem?: string;
|
|
21
|
+
}
|
|
22
|
+
export interface SourceSignature {
|
|
23
|
+
algorithm: "Ed25519";
|
|
24
|
+
keyId: string;
|
|
25
|
+
signature: string;
|
|
26
|
+
}
|
|
27
|
+
export interface ActionMandateScope {
|
|
28
|
+
actionTypes: ActionType[];
|
|
29
|
+
targetSystems: string[];
|
|
30
|
+
permissions: string[];
|
|
31
|
+
businessObjectIds?: string[];
|
|
32
|
+
recipients?: string[];
|
|
33
|
+
currencies?: string[];
|
|
34
|
+
maxAmount?: number;
|
|
35
|
+
}
|
|
36
|
+
export interface ActionMandatePayload {
|
|
37
|
+
schemaVersion: "agentcert.action_mandate.v0.1";
|
|
38
|
+
mandateId: string;
|
|
39
|
+
issuer: {
|
|
40
|
+
id: string;
|
|
41
|
+
type: "human" | "organization" | "service";
|
|
42
|
+
};
|
|
43
|
+
subject: {
|
|
44
|
+
principalId: string;
|
|
45
|
+
agentVersion?: string;
|
|
46
|
+
};
|
|
47
|
+
scope: ActionMandateScope;
|
|
48
|
+
expectedOutcome?: Record<string, unknown>;
|
|
49
|
+
policySha256: string;
|
|
50
|
+
validFrom: string;
|
|
51
|
+
expiresAt: string;
|
|
52
|
+
issuedAt: string;
|
|
53
|
+
}
|
|
54
|
+
export interface ActionMandate extends ActionMandatePayload {
|
|
55
|
+
digestSha256: string;
|
|
56
|
+
sourceSignature: SourceSignature;
|
|
57
|
+
}
|
|
58
|
+
export interface CreateActionMandateInput extends Omit<ActionMandatePayload, "schemaVersion" | "issuedAt"> {
|
|
59
|
+
issuedAt?: string;
|
|
60
|
+
}
|
|
61
|
+
export interface MandateVerification {
|
|
62
|
+
valid: boolean;
|
|
63
|
+
digestMatches: boolean;
|
|
64
|
+
signatureMatches: boolean;
|
|
65
|
+
active: boolean;
|
|
66
|
+
errors: string[];
|
|
67
|
+
}
|
|
68
|
+
export interface MandateStore {
|
|
69
|
+
readonly name: string;
|
|
70
|
+
get(mandateId: string): Promise<ActionMandate | undefined>;
|
|
71
|
+
put(mandate: ActionMandate): Promise<ActionMandate>;
|
|
72
|
+
list(): Promise<ActionMandate[]>;
|
|
73
|
+
}
|
|
74
|
+
export type TrustedRecordType = "RUN_STARTED" | "JOURNAL_RECOVERED" | "EVENTS_DROPPED" | "MANDATE_BOUND" | "ACTION_CAPTURED" | "APPROVAL_REQUESTED" | "ACTION_APPROVED" | "ACTION_REJECTED" | "EXECUTION_STARTED" | "EXECUTION_COMPLETED" | "OUTCOME_OBSERVED" | "VERIFICATION_PASSED" | "VERIFICATION_FAILED" | "RUN_COMPLETED";
|
|
75
|
+
export interface TrustedActionRecord {
|
|
76
|
+
schemaVersion: "agentcert.trusted_action_record.v0.1";
|
|
77
|
+
recordId: string;
|
|
78
|
+
runId: string;
|
|
79
|
+
sequence: number;
|
|
80
|
+
occurredAt: string;
|
|
81
|
+
type: TrustedRecordType;
|
|
82
|
+
collector: CollectorIdentity;
|
|
83
|
+
previousEventHash?: string;
|
|
84
|
+
payload: Record<string, unknown>;
|
|
85
|
+
payloadSha256: string;
|
|
86
|
+
eventHash: string;
|
|
87
|
+
sourceSignature: SourceSignature;
|
|
88
|
+
}
|
|
89
|
+
export interface JournalGap {
|
|
90
|
+
afterSequence: number;
|
|
91
|
+
beforeSequence: number;
|
|
92
|
+
missing: number;
|
|
93
|
+
declared: boolean;
|
|
94
|
+
}
|
|
95
|
+
export interface JournalValidation {
|
|
96
|
+
valid: boolean;
|
|
97
|
+
complete: boolean;
|
|
98
|
+
sourceSigned: boolean;
|
|
99
|
+
gaps: JournalGap[];
|
|
100
|
+
duplicateSequences: number[];
|
|
101
|
+
duplicateRecordIds: string[];
|
|
102
|
+
hashMismatches: number[];
|
|
103
|
+
signatureFailures: number[];
|
|
104
|
+
droppedEventCount: number;
|
|
105
|
+
recoveredTailBytes: number;
|
|
106
|
+
errors: string[];
|
|
107
|
+
}
|
|
108
|
+
export interface TrustedRunReceipt {
|
|
109
|
+
schemaVersion: "agentcert.trusted_run_receipt.v0.1";
|
|
110
|
+
runId: string;
|
|
111
|
+
collector: CollectorIdentity;
|
|
112
|
+
startedAt: string;
|
|
113
|
+
completedAt: string;
|
|
114
|
+
eventCount: number;
|
|
115
|
+
droppedEventCount: number;
|
|
116
|
+
firstEventHash: string;
|
|
117
|
+
lastEventHash: string;
|
|
118
|
+
mandateDigests: string[];
|
|
119
|
+
actionIds: string[];
|
|
120
|
+
journal: JournalValidation;
|
|
121
|
+
evidenceStrength: EvidenceStrengthAssessment;
|
|
122
|
+
sourcePublicKeyPem: string;
|
|
123
|
+
receiptSha256: string;
|
|
124
|
+
sourceSignature: SourceSignature;
|
|
125
|
+
}
|
|
126
|
+
export interface TrustedRecorderSink {
|
|
127
|
+
name: string;
|
|
128
|
+
write(record: TrustedActionRecord): Promise<void>;
|
|
129
|
+
}
|
|
130
|
+
export interface ControlledAdapterBoundary {
|
|
131
|
+
mode: "agentcert_gateway";
|
|
132
|
+
credentials: "gateway_managed";
|
|
133
|
+
bypassPrevention: "credentials_unavailable_to_agent";
|
|
134
|
+
allowedActionTypes: ActionType[];
|
|
135
|
+
allowedTargetSystems: string[];
|
|
136
|
+
}
|
|
137
|
+
export interface ControlledActionAdapter extends LocalActionAdapter {
|
|
138
|
+
control: ControlledAdapterBoundary;
|
|
139
|
+
}
|
|
140
|
+
export interface OutcomeObservation {
|
|
141
|
+
observationId: string;
|
|
142
|
+
observedAt: string;
|
|
143
|
+
observedState: Record<string, unknown>;
|
|
144
|
+
source: string;
|
|
145
|
+
}
|
|
146
|
+
export interface IndependentOutcomeProbe {
|
|
147
|
+
name: string;
|
|
148
|
+
independent: true;
|
|
149
|
+
observe(action: ActionIntent, execution: ActionExecutionSummary): Promise<OutcomeObservation>;
|
|
150
|
+
}
|
|
151
|
+
export interface TrustedActionEvidence {
|
|
152
|
+
schemaVersion: "agentcert.trusted_action_evidence.v0.1";
|
|
153
|
+
mandate: ActionMandate;
|
|
154
|
+
runReceipt: TrustedRunReceipt;
|
|
155
|
+
outcomeObservation?: OutcomeObservation;
|
|
156
|
+
verification?: VerificationResult;
|
|
157
|
+
evidenceStrength: EvidenceStrengthAssessment;
|
|
158
|
+
}
|
|
159
|
+
export interface TrustedCaptureInput {
|
|
160
|
+
action: CreateActionIntentInput;
|
|
161
|
+
mandateId: string;
|
|
162
|
+
}
|
|
163
|
+
//# sourceMappingURL=trust-types.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"trust-types.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/trust-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,YAAY,EACZ,UAAU,EACV,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,wBAAwB,6FAM3B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,kCAAkC,CAAC;IAClD,KAAK,EAAE,qBAAqB,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,+BAA+B,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS,CAAA;KAAE,CAAC;IACnE,OAAO,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,KAAK,EAAE,kBAAkB,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CAAC,oBAAoB,EAAE,eAAe,GAAG,UAAU,CAAC;IACxG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAC3D,GAAG,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,iBAAiB,GACzB,aAAa,GACb,mBAAmB,GACnB,gBAAgB,GAChB,eAAe,GACf,iBAAiB,GACjB,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,GAClB,qBAAqB,GACrB,qBAAqB,GACrB,eAAe,CAAC;AAEpB,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,sCAAsC,CAAC;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,oCAAoC,CAAC;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,iBAAiB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,gBAAgB,EAAE,0BAA0B,CAAC;IAC7C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,gBAAgB,EAAE,kCAAkC,CAAC;IACrD,kBAAkB,EAAE,UAAU,EAAE,CAAC;IACjC,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,uBAAwB,SAAQ,kBAAkB;IACjE,OAAO,EAAE,yBAAyB,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,IAAI,CAAC;IAClB,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,sBAAsB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC/F;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,wCAAwC,CAAC;IACxD,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,gBAAgB,EAAE,0BAA0B,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,uBAAuB,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB"}
|
|
@@ -4,7 +4,7 @@ export type ActionIntentStatus = "CAPTURED" | "NEEDS_REVIEW" | "APPROVED" | "REJ
|
|
|
4
4
|
export type RiskLevel = "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
|
|
5
5
|
export type PolicyEffect = "ALLOW" | "REQUIRE_APPROVAL" | "BLOCK";
|
|
6
6
|
export type ApprovalStatus = "PENDING" | "APPROVED" | "REJECTED" | "EXPIRED";
|
|
7
|
-
export type VerificationMethod = "MOCK" | "LOCAL_MOCK_ERP" | "LOCAL_ADAPTER";
|
|
7
|
+
export type VerificationMethod = "MOCK" | "LOCAL_MOCK_ERP" | "LOCAL_ADAPTER" | "INDEPENDENT_PROBE";
|
|
8
8
|
export interface ActionFieldChange {
|
|
9
9
|
field: string;
|
|
10
10
|
before?: unknown;
|
|
@@ -25,6 +25,7 @@ export interface ActionIntent {
|
|
|
25
25
|
sourceAgentRunId?: string;
|
|
26
26
|
principal: AgentPrincipal;
|
|
27
27
|
requestedPermissions: string[];
|
|
28
|
+
mandateId?: string;
|
|
28
29
|
actionType: ActionType;
|
|
29
30
|
targetSystem: string;
|
|
30
31
|
targetUrl?: string;
|
|
@@ -52,6 +53,7 @@ export interface CreateActionIntentInput {
|
|
|
52
53
|
sourceAgentRunId?: string;
|
|
53
54
|
principal?: AgentPrincipal;
|
|
54
55
|
requestedPermissions?: string[];
|
|
56
|
+
mandateId?: string;
|
|
55
57
|
actionType: ActionType;
|
|
56
58
|
targetSystem: string;
|
|
57
59
|
targetUrl?: string;
|
|
@@ -270,6 +272,7 @@ export interface ActionAuditPacket {
|
|
|
270
272
|
execution: ActionExecutionSummary;
|
|
271
273
|
verificationResult?: VerificationResult;
|
|
272
274
|
auditEvents: AuditEvent[];
|
|
275
|
+
trustedActionEvidence?: import("./trust-types.js").TrustedActionEvidence;
|
|
273
276
|
disclaimer: string;
|
|
274
277
|
}
|
|
275
278
|
export interface AuditStore {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;AAElE,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,cAAc,GACd,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,qBAAqB,GACrB,aAAa,GACb,iBAAiB,GACjB,WAAW,CAAC;AAEhB,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,kBAAkB,GAAG,OAAO,CAAC;AAElE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7E,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,gBAAgB,GAAG,eAAe,CAAC;
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;AAElE,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,cAAc,GACd,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,qBAAqB,GACrB,aAAa,GACb,iBAAiB,GACjB,WAAW,CAAC;AAEhB,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,kBAAkB,GAAG,OAAO,CAAC;AAElE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7E,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,gBAAgB,GAAG,eAAe,GAAG,mBAAmB,CAAC;AAEnG,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,cAAc,CAAC;IAC1B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACnC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACpC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,GAAG,WAAW,GAAG,aAAa,GAAG,oBAAoB,GAAG,UAAU,GAAG,iBAAiB,GAAG,UAAU,CAAC;IACtH,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,GAAG,CAAC;IACnB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC;CAC7F;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,yBAAyB,CAAC;CAC5D;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,KAAK,EAAE,sBAAsB,GAAG,uBAAuB,GAAG,IAAI,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;CAC1H;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,cAAc,GACtB,iBAAiB,GACjB,uBAAuB,GACvB,eAAe,GACf,kBAAkB,GAClB,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,wBAAwB,GACxB,0BAA0B,GAC1B,kBAAkB,GAClB,kBAAkB,GAClB,oBAAoB,GACpB,iBAAiB,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,cAAc,CAAC;IAC1B,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,cAAc,GAAG,WAAW,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,SAAS,CAAC;IAChB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,aAAa,EAAE,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9H,QAAQ,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,sBAAsB,EAAE,OAAO,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC1J;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,iBAAiB,CAAC;IACxD,SAAS,EAAE,sBAAsB,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,oBAAoB,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,cAAc,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAC9G,GAAG,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,2BAA2B,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,iBAAiB,EAAE,UAAU,EAAE,CAAC;IAChC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,SAAS,EAAE,sBAAsB,CAAC;IAClC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,qBAAqB,CAAC,EAAE,OAAO,kBAAkB,EAAE,qBAAqB,CAAC;IACzE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,iBAAiB,CAAC;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC"}
|