baselineos 0.2.0-beta.1

package/dist/core/opa-policy-gate.d.ts

@@ -0,0 +1,133 @@
+import { OPAClientConfig } from './opa-client.js';
+import { AgentBus } from './agent-bus.js';
+import { Task } from './types.js';
+import 'zod';
+
+/**
+ * OPA Policy Gate — SIGNAL-004
+ *
+ * Runtime governance enforcement using Open Policy Agent.
+ * Evaluates three policy rules before and after task execution:
+ *
+ *   baseline/task_allowed   — is this task permitted given agent trust + complexity?
+ *   baseline/agent_trusted  — is the agent's trust score above the required threshold?
+ *   baseline/output_safe    — does the task output contain policy violations?
+ *
+ * Integrates with AgentBus: publishes 'governance:policy-evaluated' and
+ * 'governance:violation' for every gate evaluation.
+ *
+ * Dry-run mode evaluates policies without blocking execution.
+ *
+ * @license Apache-2.0
+ */
+
+type PolicyVerdict = 'allow' | 'deny' | 'warn';
+interface PolicyEvaluation {
+    policy: string;
+    allowed: boolean;
+    verdict: PolicyVerdict;
+    fallback: boolean;
+    latencyMs: number;
+    reason?: string;
+}
+interface GateResult {
+    passed: boolean;
+    blocked: boolean;
+    evaluations: PolicyEvaluation[];
+    /** true if all results came from the OPA fallback (OPA unreachable) */
+    degraded: boolean;
+    /**
+     * HMAC-SHA256 approval token (SIGNAL-017).
+     * Only present when blocked=true and BASELINE_APPROVAL_SECRET is set.
+     * Include in the approvalToken field of POST /api/tasks/:id/approve.
+     */
+    approvalToken?: string;
+    /** Unix ms timestamp when the approval token expires (1 hour from block time). */
+    approvalTokenExpires?: number;
+}
+interface EscalationWebhookConfig {
+    /** URL to POST to when a policy blocks a task */
+    url: string;
+    /** Optional headers (e.g. Authorization: Bearer ...) */
+    headers?: Record<string, string>;
+    /**
+     * Base URL of the BaselineOS API server — used to construct the
+     * approvalEndpoint field in the webhook payload.
+     * Defaults to http://localhost:3141
+     */
+    apiBaseUrl?: string;
+}
+interface OPAPolicyGateConfig extends OPAClientConfig {
+    /**
+     * When true, gate evaluations never block — violations are logged
+     * and published to the bus but execution continues.
+     */
+    dryRun?: boolean;
+    /**
+     * Policies to skip. Useful for staged rollouts.
+     * e.g. ['baseline/output_safe']
+     */
+    disabledPolicies?: string[];
+    /**
+     * AgentBus instance for publishing governance events.
+     */
+    bus?: AgentBus;
+    /**
+     * Webhook called when a policy blocks a task.
+     * This is the automated escalation gate (SIGNAL-009).
+     * Set BASELINE_ALERT_WEBHOOK_URL env var as a fallback.
+     */
+    escalationWebhook?: EscalationWebhookConfig;
+}
+declare class OPAPolicyGate {
+    private readonly client;
+    private readonly dryRun;
+    private readonly disabled;
+    private readonly bus?;
+    private readonly escalationWebhook?;
+    /** Rolling window of OPA evaluation durations in ms (SLO-6: p99 < 500ms) */
+    private readonly evalDurations;
+    constructor(config?: OPAPolicyGateConfig);
+    /** Timed wrapper around OPA client.evaluate — records duration for SLO-6 metrics. */
+    private timedEvaluate;
+    /** Get OPA evaluation duration metrics for Prometheus (SLO-6). */
+    getEvalMetrics(): {
+        count: number;
+        p50Ms: number;
+        p95Ms: number;
+        p99Ms: number;
+    };
+    /**
+     * Evaluate task + agent policies BEFORE execution.
+     * Checks:
+     *   - baseline/task_allowed  (complexity × trust score)
+     *   - baseline/agent_trusted (trust score × minimum threshold)
+     *
+     * Returns blocked=true if any policy denies and dryRun=false.
+     */
+    preExecution(task: Task, agentId: string, trustScore: number): Promise<GateResult>;
+    private _preExecution;
+    /**
+     * Evaluate output safety policy AFTER execution.
+     * Checks:
+     *   - baseline/output_safe  (output content screening)
+     *
+     * Returns blocked=true only when dryRun=false and the policy denies.
+     */
+    postExecution(task: Task, agentId: string, output: {
+        content?: string;
+        tokensUsed?: number;
+    }): Promise<GateResult>;
+    private _postExecution;
+    isHealthy(): Promise<boolean>;
+    get opaUrl(): string;
+    get isDryRun(): boolean;
+    private buildResult;
+    /**
+     * Derive minimum trust score based on task complexity + priority.
+     * Mirrors the trust tier thresholds in security.ts.
+     */
+    private minimumScoreFor;
+}
+
+export { type EscalationWebhookConfig, type GateResult, OPAPolicyGate, type OPAPolicyGateConfig, type PolicyEvaluation, type PolicyVerdict };

package/dist/core/opa-policy-gate.js

@@ -0,0 +1,454 @@
+import { createHmac } from 'crypto';
+import '@opentelemetry/sdk-node';
+import '@opentelemetry/exporter-trace-otlp-http';
+import '@opentelemetry/resources';
+import '@opentelemetry/semantic-conventions';
+import { trace, SpanKind, SpanStatusCode } from '@opentelemetry/api';
+
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+// src/core/opa-local-fallback.ts
+var opa_local_fallback_exports = {};
+__export(opa_local_fallback_exports, {
+  evaluateAgentTrusted: () => evaluateAgentTrusted,
+  evaluateLocally: () => evaluateLocally,
+  evaluateOutputSafe: () => evaluateOutputSafe,
+  evaluateTaskAllowed: () => evaluateTaskAllowed
+});
+function evaluateTaskAllowed(input) {
+  if (input.trust_score < 50) return false;
+  if (input.complexity === "epic" && input.trust_score < 85) return false;
+  if (input.complexity === "complex" && input.trust_score < 70) return false;
+  if (input.priority === "critical" && input.trust_score < 70) return false;
+  return true;
+}
+function evaluateAgentTrusted(input) {
+  if (input.role === "supervisor" && input.trust_score < 70) return false;
+  if (input.role === "quality" && input.trust_score < 80) return false;
+  return input.trust_score >= 50;
+}
+function evaluateOutputSafe(input) {
+  if (input.pii_detected) return false;
+  if (input.schema_valid === false) return false;
+  return true;
+}
+function evaluateLocally(policyPath, input) {
+  const evaluator = LOCAL_EVALUATORS[policyPath];
+  if (!evaluator) return void 0;
+  try {
+    return evaluator(input);
+  } catch {
+    return void 0;
+  }
+}
+var LOCAL_EVALUATORS;
+var init_opa_local_fallback = __esm({
+  "src/core/opa-local-fallback.ts"() {
+    LOCAL_EVALUATORS = {
+      "baseline/task_allowed": (input) => evaluateTaskAllowed(input),
+      "baseline/agent_trusted": (input) => evaluateAgentTrusted(input),
+      "baseline/output_safe": (input) => evaluateOutputSafe(input)
+    };
+  }
+});
+
+// src/core/opa-client.ts
+var OPAClient = class {
+  baseUrl;
+  timeoutMs;
+  constructor(config = {}) {
+    this.baseUrl = (config.url ?? process.env["BASELINE_OPA_URL"] ?? "http://localhost:8181").replace(/\/$/, "");
+    this.timeoutMs = config.timeoutMs ?? 2e3;
+  }
+  /**
+   * Evaluate a policy rule against an input document.
+   *
+   * @param policyPath  Slash-separated path, e.g. 'baseline/task_allowed'
+   * @param input       Arbitrary input document
+   * @param fallback    Value to return if OPA is unreachable (default: true — fail-open)
+   */
+  async evaluate(policyPath, input, fallback = true) {
+    const start = Date.now();
+    const url = `${this.baseUrl}/v1/data/${policyPath}`;
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ input }),
+        signal: AbortSignal.timeout(this.timeoutMs)
+      });
+      const latencyMs = Date.now() - start;
+      if (!response.ok) {
+        const body = await response.text().catch(() => "");
+        throw new Error(`OPA HTTP ${response.status}: ${body}`);
+      }
+      const data = await response.json();
+      return {
+        result: data.result ?? fallback,
+        decisionId: data.decision_id,
+        fallback: false,
+        latencyMs
+      };
+    } catch (err) {
+      const latencyMs = Date.now() - start;
+      const isTimeout = err instanceof Error && err.name === "TimeoutError";
+      const reason = isTimeout ? "timeout" : String(err);
+      try {
+        const { evaluateLocally: evaluateLocally2 } = await Promise.resolve().then(() => (init_opa_local_fallback(), opa_local_fallback_exports));
+        const localResult = evaluateLocally2(policyPath, input);
+        if (localResult !== void 0) {
+          console.warn(`[OPAClient] Unreachable (${reason}) \u2014 using local fallback for policy "${policyPath}"`);
+          return { result: localResult, fallback: true, latencyMs };
+        }
+      } catch {
+      }
+      console.warn(`[OPAClient] Unreachable (${reason}) \u2014 failing open for policy "${policyPath}"`);
+      return { result: fallback, fallback: true, latencyMs };
+    }
+  }
+  /**
+   * Check if OPA is healthy and reachable.
+   */
+  async healthCheck() {
+    try {
+      const response = await fetch(`${this.baseUrl}/health`, {
+        signal: AbortSignal.timeout(1e3)
+      });
+      return response.ok;
+    } catch {
+      return false;
+    }
+  }
+  get url() {
+    return this.baseUrl;
+  }
+};
+var tracer = new Proxy({}, {
+  get(_target, prop) {
+    return trace.getTracer("baselineos", "0.2.0-beta.1")[prop];
+  }
+});
+async function withSpan(name, attributes, fn) {
+  return tracer.startActiveSpan(name, { kind: SpanKind.INTERNAL, attributes }, async (span) => {
+    try {
+      const result = await fn(span);
+      span.setStatus({ code: SpanStatusCode.OK });
+      return result;
+    } catch (err) {
+      span.recordException(err);
+      span.setStatus({ code: SpanStatusCode.ERROR, message: err.message });
+      throw err;
+    } finally {
+      span.end();
+    }
+  });
+}
+
+// src/core/opa-policy-gate.ts
+var OPAPolicyGate = class {
+  client;
+  dryRun;
+  disabled;
+  bus;
+  escalationWebhook;
+  /** Rolling window of OPA evaluation durations in ms (SLO-6: p99 < 500ms) */
+  evalDurations = [];
+  constructor(config = {}) {
+    this.client = new OPAClient({ url: config.url, timeoutMs: config.timeoutMs });
+    this.dryRun = config.dryRun ?? false;
+    this.disabled = new Set(config.disabledPolicies ?? []);
+    this.bus = config.bus;
+    this.escalationWebhook = config.escalationWebhook ?? (process.env["BASELINE_ESCALATION_WEBHOOK_URL"] ? { url: process.env["BASELINE_ESCALATION_WEBHOOK_URL"] } : void 0);
+  }
+  /** Timed wrapper around OPA client.evaluate — records duration for SLO-6 metrics. */
+  async timedEvaluate(policy, input) {
+    const start = Date.now();
+    const res = await this.client.evaluate(policy, input);
+    const durationMs = Date.now() - start;
+    this.evalDurations.push(durationMs);
+    if (this.evalDurations.length > 1e3) this.evalDurations.shift();
+    return res;
+  }
+  /** Get OPA evaluation duration metrics for Prometheus (SLO-6). */
+  getEvalMetrics() {
+    if (this.evalDurations.length === 0) return { count: 0, p50Ms: 0, p95Ms: 0, p99Ms: 0 };
+    const sorted = [...this.evalDurations].sort((a, b) => a - b);
+    const p = (pct) => sorted[Math.min(Math.floor(sorted.length * pct), sorted.length - 1)];
+    return { count: sorted.length, p50Ms: p(0.5), p95Ms: p(0.95), p99Ms: p(0.99) };
+  }
+  // ─── Pre-execution gate ───────────────────────────────────────────────────
+  /**
+   * Evaluate task + agent policies BEFORE execution.
+   * Checks:
+   *   - baseline/task_allowed  (complexity × trust score)
+   *   - baseline/agent_trusted (trust score × minimum threshold)
+   *
+   * Returns blocked=true if any policy denies and dryRun=false.
+   */
+  async preExecution(task, agentId, trustScore) {
+    return withSpan("task.policy.pre", {
+      "task.id": task.id,
+      "agent.id": agentId,
+      "agent.trust_score": trustScore
+    }, async (span) => {
+      const result = await this._preExecution(task, agentId, trustScore);
+      span.setAttribute("policy.blocked", result.blocked);
+      span.setAttribute("policy.degraded", result.degraded);
+      return result;
+    });
+  }
+  async _preExecution(task, agentId, trustScore) {
+    const evals = [];
+    if (!this.disabled.has("baseline/task_allowed")) {
+      const res = await this.timedEvaluate("baseline/task_allowed", {
+        task_id: task.id,
+        complexity: task.complexity,
+        priority: task.priority,
+        required_capabilities: task.requiredCapabilities,
+        agent_id: agentId,
+        trust_score: trustScore
+      });
+      evals.push({
+        policy: "baseline/task_allowed",
+        allowed: res.result,
+        verdict: res.result ? "allow" : "deny",
+        fallback: res.fallback,
+        latencyMs: res.latencyMs,
+        reason: res.result ? void 0 : "Policy denied task based on trust/complexity"
+      });
+    }
+    if (!this.disabled.has("baseline/agent_trusted")) {
+      const minScore = this.minimumScoreFor(task);
+      const res = await this.timedEvaluate("baseline/agent_trusted", {
+        agent_id: agentId,
+        trust_score: trustScore,
+        minimum_score: minScore,
+        task_complexity: task.complexity,
+        task_priority: task.priority
+      });
+      evals.push({
+        policy: "baseline/agent_trusted",
+        allowed: res.result,
+        verdict: res.result ? "allow" : "deny",
+        fallback: res.fallback,
+        latencyMs: res.latencyMs,
+        reason: res.result ? void 0 : `Agent trust score ${trustScore} below minimum ${minScore}`
+      });
+    }
+    return this.buildResult(evals, "pre-execution", task, agentId);
+  }
+  // ─── Post-execution gate ──────────────────────────────────────────────────
+  /**
+   * Evaluate output safety policy AFTER execution.
+   * Checks:
+   *   - baseline/output_safe  (output content screening)
+   *
+   * Returns blocked=true only when dryRun=false and the policy denies.
+   */
+  async postExecution(task, agentId, output) {
+    return withSpan("task.policy.post", {
+      "task.id": task.id,
+      "agent.id": agentId,
+      "output.tokens": output.tokensUsed ?? 0
+    }, async (span) => {
+      const result = await this._postExecution(task, agentId, output);
+      span.setAttribute("policy.blocked", result.blocked);
+      span.setAttribute("policy.degraded", result.degraded);
+      return result;
+    });
+  }
+  async _postExecution(task, agentId, output) {
+    const evals = [];
+    if (!this.disabled.has("baseline/output_safe")) {
+      const res = await this.timedEvaluate("baseline/output_safe", {
+        task_id: task.id,
+        agent_id: agentId,
+        output: (output.content ?? "").slice(0, 2e3),
+        tokens_used: output.tokensUsed ?? 0
+      });
+      evals.push({
+        policy: "baseline/output_safe",
+        allowed: res.result,
+        verdict: res.result ? "allow" : "deny",
+        fallback: res.fallback,
+        latencyMs: res.latencyMs,
+        reason: res.result ? void 0 : "Output failed safety policy check"
+      });
+    }
+    return this.buildResult(evals, "post-execution", task, agentId);
+  }
+  // ─── Health ───────────────────────────────────────────────────────────────
+  async isHealthy() {
+    return this.client.healthCheck();
+  }
+  get opaUrl() {
+    return this.client.url;
+  }
+  get isDryRun() {
+    return this.dryRun;
+  }
+  // ─── Internals ────────────────────────────────────────────────────────────
+  buildResult(evals, phase, task, agentId) {
+    const violations = evals.filter((e) => !e.allowed);
+    const degraded = evals.length > 0 && evals.every((e) => e.fallback);
+    const blocked = !this.dryRun && violations.length > 0;
+    const passed = violations.length === 0;
+    let approvalToken;
+    let approvalTokenExpires;
+    const approvalSecret = process.env["BASELINE_APPROVAL_SECRET"];
+    if (blocked && approvalSecret) {
+      approvalTokenExpires = Date.now() + 36e5;
+      approvalToken = createHmac("sha256", approvalSecret).update(`${task.id}:${approvalTokenExpires}`).digest("hex");
+    }
+    if (this.bus) {
+      this.bus.broadcast("system", "governance:policy-evaluated", {
+        phase,
+        taskId: task.id,
+        agentId,
+        passed,
+        blocked,
+        degraded,
+        evaluations: evals
+      }, "normal");
+      for (const v of violations) {
+        this.bus.broadcast("system", "governance:violation", {
+          phase,
+          taskId: task.id,
+          agentId,
+          policy: v.policy,
+          reason: v.reason,
+          blocked,
+          dryRun: this.dryRun
+        }, "high");
+      }
+    }
+    if (violations.length > 0) {
+      const mode = this.dryRun ? "[DRY RUN]" : "";
+      for (const v of violations) {
+        console.warn(`[OPAPolicyGate]${mode} ${phase} policy denied: ${v.policy} \u2014 ${v.reason}`);
+      }
+    }
+    if (blocked && this.escalationWebhook) {
+      const apiBase = this.escalationWebhook.apiBaseUrl ?? "http://localhost:3141";
+      const expiresAt = approvalTokenExpires ?? Date.now() + 36e5;
+      const payload = {
+        taskId: task.id,
+        agentId,
+        phase,
+        policy: violations[0]?.policy ?? "unknown",
+        reason: violations[0]?.reason ?? "Policy gate blocked execution",
+        approvalEndpoint: `${apiBase}/api/tasks/${task.id}/approve`,
+        approvalToken,
+        // SIGNAL-017: include token so webhook receiver can approve
+        expiresAt,
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      };
+      fetch(this.escalationWebhook.url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", ...this.escalationWebhook.headers },
+        body: JSON.stringify(payload),
+        signal: AbortSignal.timeout(3e3)
+      }).catch((err) => {
+        console.warn(`[OPAPolicyGate] Escalation webhook failed: ${err}`);
+      });
+    }
+    return { passed, blocked, evaluations: evals, degraded, approvalToken, approvalTokenExpires };
+  }
+  /**
+   * Derive minimum trust score based on task complexity + priority.
+   * Mirrors the trust tier thresholds in security.ts.
+   */
+  minimumScoreFor(task) {
+    if (task.priority === "critical") return 80;
+    switch (task.complexity) {
+      case "epic":
+        return 85;
+      case "complex":
+        return 70;
+      case "moderate":
+        return 60;
+      default:
+        return 50;
+    }
+  }
+};
+/**
+ * OPA Local Fallback — Offline Policy Evaluation
+ *
+ * TypeScript mirror of the 3 OPA .rego policies for offline enforcement.
+ * When OPA is unreachable, the OPAPolicyGate can use these evaluators
+ * instead of blindly failing open. This ensures governance primitives
+ * work without network connectivity (spec: README.md line 88).
+ *
+ * Policies mirrored:
+ *   baseline/task_allowed  — from policies/baseline/task.rego
+ *   baseline/agent_trusted — from policies/baseline/agent.rego
+ *   baseline/output_safe   — from policies/baseline/output.rego
+ *
+ * @license Apache-2.0
+ */
+/**
+ * OPA Client — SIGNAL-004
+ *
+ * Lightweight HTTP client for the Open Policy Agent REST API.
+ * Zero external dependencies — uses native fetch (Node 18+).
+ *
+ * Fail-open by default: if OPA is unreachable, evaluation returns
+ * the provided fallback value and emits a warning. This prevents
+ * OPA downtime from blocking agent execution.
+ *
+ * @license Apache-2.0
+ */
+/**
+ * BaselineOS OpenTelemetry — SIGNAL-012
+ *
+ * Distributed tracing for the multi-agent orchestration layer.
+ * Initializes the OTel Node SDK and exports a shared tracer.
+ *
+ * Spans emitted:
+ *   task.execute          root span per executeTask() call
+ *   task.policy.pre       OPA pre-execution gate
+ *   task.policy.post      OPA post-execution gate
+ *   task.perform          performExecution() step loop
+ *   task.self_verify      selfVerify() LLM call
+ *   task.review           conductReview() LLM call
+ *
+ * Trace context is propagated through AgentBus messages via the
+ * optional `traceContext` field (W3C traceparent format).
+ *
+ * Configuration:
+ *   OTEL_EXPORTER_OTLP_ENDPOINT  OTLP HTTP collector (default: http://localhost:4318)
+ *   OTEL_SERVICE_NAME            service name override (default: baselineos)
+ *   BASELINE_OTEL_DISABLED       set to '1' to disable entirely (e.g. in tests)
+ *
+ * @license Apache-2.0
+ */
+/**
+ * OPA Policy Gate — SIGNAL-004
+ *
+ * Runtime governance enforcement using Open Policy Agent.
+ * Evaluates three policy rules before and after task execution:
+ *
+ *   baseline/task_allowed   — is this task permitted given agent trust + complexity?
+ *   baseline/agent_trusted  — is the agent's trust score above the required threshold?
+ *   baseline/output_safe    — does the task output contain policy violations?
+ *
+ * Integrates with AgentBus: publishes 'governance:policy-evaluated' and
+ * 'governance:violation' for every gate evaluation.
+ *
+ * Dry-run mode evaluates policies without blocking execution.
+ *
+ * @license Apache-2.0
+ */
+
+export { OPAPolicyGate };
+//# sourceMappingURL=opa-policy-gate.js.map
+//# sourceMappingURL=opa-policy-gate.js.map

package/dist/core/opa-policy-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/opa-local-fallback.ts","../../src/core/opa-client.ts","../../src/core/telemetry.ts","../../src/core/opa-policy-gate.ts"],"names":["evaluateLocally"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,IAAA,0BAAA,GAAA,EAAA;AAAA,QAAA,CAAA,0BAAA,EAAA;AAAA,EAAA,oBAAA,EAAA,MAAA,oBAAA;AAAA,EAAA,eAAA,EAAA,MAAA,eAAA;AAAA,EAAA,kBAAA,EAAA,MAAA,kBAAA;AAAA,EAAA,mBAAA,EAAA,MAAA;AAAA,CAAA,CAAA;AAkBO,SAAS,oBAAoB,KAAA,EAIxB;AAEV,EAAA,IAAI,KAAA,CAAM,WAAA,GAAc,EAAA,EAAI,OAAO,KAAA;AAGnC,EAAA,IAAI,MAAM,UAAA,KAAe,MAAA,IAAU,KAAA,CAAM,WAAA,GAAc,IAAI,OAAO,KAAA;AAGlE,EAAA,IAAI,MAAM,UAAA,KAAe,SAAA,IAAa,KAAA,CAAM,WAAA,GAAc,IAAI,OAAO,KAAA;AAGrE,EAAA,IAAI,MAAM,QAAA,KAAa,UAAA,IAAc,KAAA,CAAM,WAAA,GAAc,IAAI,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAIO,SAAS,qBAAqB,KAAA,EAGzB;AAEV,EAAA,IAAI,MAAM,IAAA,KAAS,YAAA,IAAgB,KAAA,CAAM,WAAA,GAAc,IAAI,OAAO,KAAA;AAGlE,EAAA,IAAI,MAAM,IAAA,KAAS,SAAA,IAAa,KAAA,CAAM,WAAA,GAAc,IAAI,OAAO,KAAA;AAG/D,EAAA,OAAO,MAAM,WAAA,IAAe,EAAA;AAC9B;AAIO,SAAS,mBAAmB,KAAA,EAIvB;AAEV,EAAA,IAAI,KAAA,CAAM,cAAc,OAAO,KAAA;AAG/B,EAAA,IAAI,KAAA,CAAM,YAAA,KAAiB,KAAA,EAAO,OAAO,KAAA;AAEzC,EAAA,OAAO,IAAA;AACT;AAcO,SAAS,eAAA,CAAgB,YAAoB,KAAA,EAAqD;AACvG,EAAA,MAAM,SAAA,GAAY,iBAAiB,UAAU,CAAA;AAC7C,EAAA,IAAI,CAAC,WAAW,OAAO,MAAA;AACvB,EAAA,IAAI;AACF,IAAA,OAAO,UAAU,KAAK,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AA1FA,IAwEM,gBAAA;AAxEN,IAAA,uBAAA,GAAA,KAAA,CAAA;AAAA,EAAA,gCAAA,GAAA;AAwEA,IAAM,gBAAA,GAAgF;AAAA,MACpF,uBAAA,EAAyB,CAAC,KAAA,KAAU,mBAAA,CAAoB,KAAkD,CAAA;AAAA,MAC1G,wBAAA,EAA0B,CAAC,KAAA,KAAU,oBAAA,CAAqB,KAAmD,CAAA;AAAA,MAC7G,sBAAA,EAAwB,CAAC,KAAA,KAAU,kBAAA,CAAmB,KAAiD;AAAA,KACzG;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACrCO,IAAM,YAAN,MAAgB;AAAA,EACJ,OAAA;AAAA,EACA,SAAA;AAAA,EAEjB,WAAA,CAAY,MAAA,GAA0B,EAAC,EAAG;AACxC,IAAA,IAAA,CAAK,OAAA,GAAA,CACH,MAAA,CAAO,GAAA,IACP,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAC9B,uBAAA,EACA,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,QAAA,CACJ,UAAA,EACA,KAAA,EACA,WAAc,IAAA,EACmB;AACjC,IAAA,MAAM,KAAA,GAAQ,KAAK,GAAA,EAAI;AACvB,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAA,CAAK,OAAO,YAAY,UAAU,CAAA,CAAA;AAEjD,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAChC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,OAAO,CAAA;AAAA,QAC9B,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA,OAC3C,CAAA;AAED,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAE/B,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,OAAO,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AACjD,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,SAAS,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,MACxD;AAEA,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,KAAK,MAAA,IAAU,QAAA;AAAA,QACvB,YAAY,IAAA,CAAK,WAAA;AAAA,QACjB,QAAA,EAAU,KAAA;AAAA,QACV;AAAA,OACF;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAC/B,MAAA,MAAM,SAAA,GAAY,GAAA,YAAe,KAAA,IAAS,GAAA,CAAI,IAAA,KAAS,cAAA;AACvD,MAAA,MAAM,MAAA,GAAS,SAAA,GAAY,SAAA,GAAY,MAAA,CAAO,GAAG,CAAA;AAGjD,MAAA,IAAI;AACF,QAAA,MAAM,EAAE,eAAA,EAAAA,gBAAAA,EAAgB,GAAI,MAAM,OAAA,CAAA,OAAA,EAAA,CAAA,IAAA,CAAA,OAAA,uBAAA,EAAA,EAAA,0BAAA,CAAA,CAAA;AAClC,QAAA,MAAM,WAAA,GAAcA,gBAAAA,CAAgB,UAAA,EAAY,KAAK,CAAA;AACrD,QAAA,IAAI,gBAAgB,KAAA,CAAA,EAAW;AAC7B,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,yBAAA,EAA4B,MAAM,CAAA,0CAAA,EAAwC,UAAU,CAAA,CAAA,CAAG,CAAA;AACpG,UAAA,OAAO,EAAE,MAAA,EAAQ,WAAA,EAA6B,QAAA,EAAU,MAAM,SAAA,EAAU;AAAA,QAC1E;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAEA,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,yBAAA,EAA4B,MAAM,CAAA,kCAAA,EAAgC,UAAU,CAAA,CAAA,CAAG,CAAA;AAC5F,MAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU,MAAM,SAAA,EAAU;AAAA,IACvD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAA,GAAgC;AACpC,IAAA,IAAI;AACF,MAAA,MAAM,WAAW,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,OAAA,CAAA,EAAW;AAAA,QACrD,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAI;AAAA,OACjC,CAAA;AACD,MAAA,OAAO,QAAA,CAAS,EAAA;AAAA,IAClB,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,IAAI,GAAA,GAAc;AAChB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AACF,CAAA;AClDO,IAAM,MAAA,GAAiB,IAAI,KAAA,CAAM,EAAC,EAAa;AAAA,EACpD,GAAA,CAAI,SAAS,IAAA,EAAM;AACjB,IAAA,OAAO,KAAA,CAAM,SAAA,CAAU,YAAA,EAAc,cAAc,EAAE,IAAoB,CAAA;AAAA,EAC3E;AACF,CAAC,CAAA;AA8BD,eAAsB,QAAA,CACpB,IAAA,EACA,UAAA,EACA,EAAA,EACY;AACZ,EAAA,OAAO,MAAA,CAAO,eAAA,CAAgB,IAAA,EAAM,EAAE,IAAA,EAAM,SAAS,QAAA,EAAU,UAAA,EAAW,EAAG,OAAO,IAAA,KAAS;AAC3F,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,IAAI,CAAA;AAC5B,MAAA,IAAA,CAAK,SAAA,CAAU,EAAE,IAAA,EAAM,cAAA,CAAe,IAAI,CAAA;AAC1C,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,gBAAgB,GAAY,CAAA;AACjC,MAAA,IAAA,CAAK,SAAA,CAAU,EAAE,IAAA,EAAM,cAAA,CAAe,OAAO,OAAA,EAAU,GAAA,CAAc,SAAS,CAAA;AAC9E,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,GAAA,EAAI;AAAA,IACX;AAAA,EACF,CAAC,CAAA;AACH;;;ACtCO,IAAM,gBAAN,MAAoB;AAAA,EACR,MAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,GAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EAEA,gBAA0B,EAAC;AAAA,EAE5C,WAAA,CAAY,MAAA,GAA8B,EAAC,EAAG;AAC5C,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,SAAA,CAAU,EAAE,GAAA,EAAK,OAAO,GAAA,EAAK,SAAA,EAAW,MAAA,CAAO,SAAA,EAAW,CAAA;AAC5E,IAAA,IAAA,CAAK,MAAA,GAAS,OAAO,MAAA,IAAU,KAAA;AAC/B,IAAA,IAAA,CAAK,WAAW,IAAI,GAAA,CAAI,MAAA,CAAO,gBAAA,IAAoB,EAAE,CAAA;AACrD,IAAA,IAAA,CAAK,MAAM,MAAA,CAAO,GAAA;AAClB,IAAA,IAAA,CAAK,iBAAA,GAAoB,MAAA,CAAO,iBAAA,KAC9B,OAAA,CAAQ,GAAA,CAAI,iCAAiC,CAAA,GACzC,EAAE,GAAA,EAAK,OAAA,CAAQ,GAAA,CAAI,iCAAiC,GAAE,GACtD,MAAA,CAAA;AAAA,EAER;AAAA;AAAA,EAGA,MAAc,aAAA,CAAiB,MAAA,EAAgB,KAAA,EAAgC;AAC7E,IAAA,MAAM,KAAA,GAAQ,KAAK,GAAA,EAAI;AACvB,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAAO,QAAA,CAAY,QAAQ,KAAK,CAAA;AACvD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAChC,IAAA,IAAA,CAAK,aAAA,CAAc,KAAK,UAAU,CAAA;AAClC,IAAA,IAAI,KAAK,aAAA,CAAc,MAAA,GAAS,GAAA,EAAM,IAAA,CAAK,cAAc,KAAA,EAAM;AAC/D,IAAA,OAAO,GAAA;AAAA,EACT;AAAA;AAAA,EAGA,cAAA,GAAiF;AAC/E,IAAA,IAAI,IAAA,CAAK,aAAA,CAAc,MAAA,KAAW,CAAA,EAAG,OAAO,EAAE,KAAA,EAAO,CAAA,EAAG,KAAA,EAAO,CAAA,EAAG,KAAA,EAAO,CAAA,EAAG,OAAO,CAAA,EAAE;AACrF,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,IAAA,CAAK,aAAa,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,GAAI,CAAC,CAAA;AAC3D,IAAA,MAAM,CAAA,GAAI,CAAC,GAAA,KAAgB,MAAA,CAAO,KAAK,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,SAAS,GAAG,CAAA,EAAG,MAAA,CAAO,MAAA,GAAS,CAAC,CAAC,CAAA;AAC9F,IAAA,OAAO,EAAE,KAAA,EAAO,MAAA,CAAO,MAAA,EAAQ,OAAO,CAAA,CAAE,GAAG,CAAA,EAAG,KAAA,EAAO,EAAE,IAAI,CAAA,EAAG,KAAA,EAAO,CAAA,CAAE,IAAI,CAAA,EAAE;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,YAAA,CAAa,IAAA,EAAY,OAAA,EAAiB,UAAA,EAAyC;AACvF,IAAA,OAAO,SAAS,iBAAA,EAAmB;AAAA,MACjC,WAAW,IAAA,CAAK,EAAA;AAAA,MAChB,UAAA,EAAY,OAAA;AAAA,MACZ,mBAAA,EAAqB;AAAA,KACvB,EAAG,OAAO,IAAA,KAAS;AACjB,MAAA,MAAM,SAAS,MAAM,IAAA,CAAK,aAAA,CAAc,IAAA,EAAM,SAAS,UAAU,CAAA;AACjE,MAAA,IAAA,CAAK,YAAA,CAAa,gBAAA,EAAkB,MAAA,CAAO,OAAO,CAAA;AAClD,MAAA,IAAA,CAAK,YAAA,CAAa,iBAAA,EAAmB,MAAA,CAAO,QAAQ,CAAA;AACpD,MAAA,OAAO,MAAA;AAAA,IACT,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,MAAc,aAAA,CAAc,IAAA,EAAY,OAAA,EAAiB,UAAA,EAAyC;AAChG,IAAA,MAAM,QAA4B,EAAC;AAGnC,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,uBAAuB,CAAA,EAAG;AAC/C,MAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,aAAA,CAAuB,uBAAA,EAAyB;AAAA,QACrE,SAAS,IAAA,CAAK,EAAA;AAAA,QACd,YAAY,IAAA,CAAK,UAAA;AAAA,QACjB,UAAU,IAAA,CAAK,QAAA;AAAA,QACf,uBAAuB,IAAA,CAAK,oBAAA;AAAA,QAC5B,QAAA,EAAU,OAAA;AAAA,QACV,WAAA,EAAa;AAAA,OACd,CAAA;AAED,MAAA,KAAA,CAAM,IAAA,CAAK;AAAA,QACT,MAAA,EAAQ,uBAAA;AAAA,QACR,SAAS,GAAA,CAAI,MAAA;AAAA,QACb,OAAA,EAAS,GAAA,CAAI,MAAA,GAAS,OAAA,GAAU,MAAA;AAAA,QAChC,UAAU,GAAA,CAAI,QAAA;AAAA,QACd,WAAW,GAAA,CAAI,SAAA;AAAA,QACf,MAAA,EAAQ,GAAA,CAAI,MAAA,GAAS,MAAA,GAAY;AAAA,OAClC,CAAA;AAAA,IACH;AAGA,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,wBAAwB,CAAA,EAAG;AAChD,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,eAAA,CAAgB,IAAI,CAAA;AAC1C,MAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,aAAA,CAAuB,wBAAA,EAA0B;AAAA,QACtE,QAAA,EAAU,OAAA;AAAA,QACV,WAAA,EAAa,UAAA;AAAA,QACb,aAAA,EAAe,QAAA;AAAA,QACf,iBAAiB,IAAA,CAAK,UAAA;AAAA,QACtB,eAAe,IAAA,CAAK;AAAA,OACrB,CAAA;AAED,MAAA,KAAA,CAAM,IAAA,CAAK;AAAA,QACT,MAAA,EAAQ,wBAAA;AAAA,QACR,SAAS,GAAA,CAAI,MAAA;AAAA,QACb,OAAA,EAAS,GAAA,CAAI,MAAA,GAAS,OAAA,GAAU,MAAA;AAAA,QAChC,UAAU,GAAA,CAAI,QAAA;AAAA,QACd,WAAW,GAAA,CAAI,SAAA;AAAA,QACf,QAAQ,GAAA,CAAI,MAAA,GAAS,SAAY,CAAA,kBAAA,EAAqB,UAAU,kBAAkB,QAAQ,CAAA;AAAA,OAC3F,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,KAAA,EAAO,eAAA,EAAiB,MAAM,OAAO,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,aAAA,CACJ,IAAA,EACA,OAAA,EACA,MAAA,EACqB;AACrB,IAAA,OAAO,SAAS,kBAAA,EAAoB;AAAA,MAClC,WAAW,IAAA,CAAK,EAAA;AAAA,MAChB,UAAA,EAAY,OAAA;AAAA,MACZ,eAAA,EAAiB,OAAO,UAAA,IAAc;AAAA,KACxC,EAAG,OAAO,IAAA,KAAS;AACjB,MAAA,MAAM,SAAS,MAAM,IAAA,CAAK,cAAA,CAAe,IAAA,EAAM,SAAS,MAAM,CAAA;AAC9D,MAAA,IAAA,CAAK,YAAA,CAAa,gBAAA,EAAkB,MAAA,CAAO,OAAO,CAAA;AAClD,MAAA,IAAA,CAAK,YAAA,CAAa,iBAAA,EAAmB,MAAA,CAAO,QAAQ,CAAA;AACpD,MAAA,OAAO,MAAA;AAAA,IACT,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,MAAc,cAAA,CACZ,IAAA,EACA,OAAA,EACA,MAAA,EACqB;AACrB,IAAA,MAAM,QAA4B,EAAC;AAEnC,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,sBAAsB,CAAA,EAAG;AAC9C,MAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,aAAA,CAAuB,sBAAA,EAAwB;AAAA,QACpE,SAAS,IAAA,CAAK,EAAA;AAAA,QACd,QAAA,EAAU,OAAA;AAAA,QACV,SAAS,MAAA,CAAO,OAAA,IAAW,EAAA,EAAI,KAAA,CAAM,GAAG,GAAI,CAAA;AAAA,QAC5C,WAAA,EAAa,OAAO,UAAA,IAAc;AAAA,OACnC,CAAA;AAED,MAAA,KAAA,CAAM,IAAA,CAAK;AAAA,QACT,MAAA,EAAQ,sBAAA;AAAA,QACR,SAAS,GAAA,CAAI,MAAA;AAAA,QACb,OAAA,EAAS,GAAA,CAAI,MAAA,GAAS,OAAA,GAAU,MAAA;AAAA,QAChC,UAAU,GAAA,CAAI,QAAA;AAAA,QACd,WAAW,GAAA,CAAI,SAAA;AAAA,QACf,MAAA,EAAQ,GAAA,CAAI,MAAA,GAAS,MAAA,GAAY;AAAA,OAClC,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,KAAA,EAAO,gBAAA,EAAkB,MAAM,OAAO,CAAA;AAAA,EAChE;AAAA;AAAA,EAIA,MAAM,SAAA,GAA8B;AAClC,IAAA,OAAO,IAAA,CAAK,OAAO,WAAA,EAAY;AAAA,EACjC;AAAA,EAEA,IAAI,MAAA,GAAiB;AACnB,IAAA,OAAO,KAAK,MAAA,CAAO,GAAA;AAAA,EACrB;AAAA,EAEA,IAAI,QAAA,GAAoB;AACtB,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA,EAIQ,WAAA,CACN,KAAA,EACA,KAAA,EACA,IAAA,EACA,OAAA,EACY;AACZ,IAAA,MAAM,aAAa,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,EAAE,OAAO,CAAA;AACjD,IAAA,MAAM,QAAA,GAAW,MAAM,MAAA,GAAS,CAAA,IAAK,MAAM,KAAA,CAAM,CAAC,CAAA,KAAM,CAAA,CAAE,QAAQ,CAAA;AAClE,IAAA,MAAM,OAAA,GAAU,CAAC,IAAA,CAAK,MAAA,IAAU,WAAW,MAAA,GAAS,CAAA;AACpD,IAAA,MAAM,MAAA,GAAS,WAAW,MAAA,KAAW,CAAA;AAGrC,IAAA,IAAI,aAAA;AACJ,IAAA,IAAI,oBAAA;AACJ,IAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,GAAA,CAAI,0BAA0B,CAAA;AAC7D,IAAA,IAAI,WAAW,cAAA,EAAgB;AAC7B,MAAA,oBAAA,GAAuB,IAAA,CAAK,KAAI,GAAI,IAAA;AACpC,MAAA,aAAA,GAAgB,UAAA,CAAW,QAAA,EAAU,cAAc,CAAA,CAChD,MAAA,CAAO,CAAA,EAAG,IAAA,CAAK,EAAE,CAAA,CAAA,EAAI,oBAAoB,CAAA,CAAE,CAAA,CAC3C,OAAO,KAAK,CAAA;AAAA,IACjB;AAGA,IAAA,IAAI,KAAK,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,GAAA,CAAI,SAAA,CAAU,QAAA,EAAU,6BAAA,EAA+B;AAAA,QAC1D,KAAA;AAAA,QACA,QAAQ,IAAA,CAAK,EAAA;AAAA,QACb,OAAA;AAAA,QACA,MAAA;AAAA,QACA,OAAA;AAAA,QACA,QAAA;AAAA,QACA,WAAA,EAAa;AAAA,SACZ,QAAQ,CAAA;AAEX,MAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,QAAA,IAAA,CAAK,GAAA,CAAI,SAAA,CAAU,QAAA,EAAU,sBAAA,EAAwB;AAAA,UACnD,KAAA;AAAA,UACA,QAAQ,IAAA,CAAK,EAAA;AAAA,UACb,OAAA;AAAA,UACA,QAAQ,CAAA,CAAE,MAAA;AAAA,UACV,QAAQ,CAAA,CAAE,MAAA;AAAA,UACV,OAAA;AAAA,UACA,QAAQ,IAAA,CAAK;AAAA,WACZ,MAAM,CAAA;AAAA,MACX;AAAA,IACF;AAEA,IAAA,IAAI,UAAA,CAAW,SAAS,CAAA,EAAG;AACzB,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,GAAS,WAAA,GAAc,EAAA;AACzC,MAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,QAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,gBAAA,EAAmB,CAAA,CAAE,MAAM,CAAA,QAAA,EAAM,CAAA,CAAE,MAAM,CAAA,CAAE,CAAA;AAAA,MACzF;AAAA,IACF;AAGA,IAAA,IAAI,OAAA,IAAW,KAAK,iBAAA,EAAmB;AACrC,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,iBAAA,CAAkB,UAAA,IAAc,uBAAA;AACrD,MAAA,MAAM,SAAA,GAAY,oBAAA,IAAyB,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA;AACxD,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,QAAQ,IAAA,CAAK,EAAA;AAAA,QACb,OAAA;AAAA,QACA,KAAA;AAAA,QACA,MAAA,EAAQ,UAAA,CAAW,CAAC,CAAA,EAAG,MAAA,IAAU,SAAA;AAAA,QACjC,MAAA,EAAQ,UAAA,CAAW,CAAC,CAAA,EAAG,MAAA,IAAU,+BAAA;AAAA,QACjC,gBAAA,EAAkB,CAAA,EAAG,OAAO,CAAA,WAAA,EAAc,KAAK,EAAE,CAAA,QAAA,CAAA;AAAA,QACjD,aAAA;AAAA;AAAA,QACA,SAAA;AAAA,QACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OACpC;AACA,MAAA,KAAA,CAAM,IAAA,CAAK,kBAAkB,GAAA,EAAK;AAAA,QAChC,MAAA,EAAQ,MAAA;AAAA,QACR,SAAS,EAAE,cAAA,EAAgB,oBAAoB,GAAG,IAAA,CAAK,kBAAkB,OAAA,EAAQ;AAAA,QACjF,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,QAC5B,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAI;AAAA,OACjC,CAAA,CAAE,KAAA,CAAM,CAAC,GAAA,KAAQ;AAChB,QAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,2CAAA,EAA8C,GAAG,CAAA,CAAE,CAAA;AAAA,MAClE,CAAC,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,aAAa,KAAA,EAAO,QAAA,EAAU,eAAe,oBAAA,EAAqB;AAAA,EAC9F;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,gBAAgB,IAAA,EAAoB;AAC1C,IAAA,IAAI,IAAA,CAAK,QAAA,KAAa,UAAA,EAAY,OAAO,EAAA;AACzC,IAAA,QAAQ,KAAK,UAAA;AAAY,MACvB,KAAK,MAAA;AAAW,QAAA,OAAO,EAAA;AAAA,MACvB,KAAK,SAAA;AAAW,QAAA,OAAO,EAAA;AAAA,MACvB,KAAK,UAAA;AAAY,QAAA,OAAO,EAAA;AAAA,MACxB;AAAgB,QAAA,OAAO,EAAA;AAAA;AACzB,EACF;AACF","file":"opa-policy-gate.js","sourcesContent":["/**\n * OPA Local Fallback — Offline Policy Evaluation\n *\n * TypeScript mirror of the 3 OPA .rego policies for offline enforcement.\n * When OPA is unreachable, the OPAPolicyGate can use these evaluators\n * instead of blindly failing open. This ensures governance primitives\n * work without network connectivity (spec: README.md line 88).\n *\n * Policies mirrored:\n *   baseline/task_allowed  — from policies/baseline/task.rego\n *   baseline/agent_trusted — from policies/baseline/agent.rego\n *   baseline/output_safe   — from policies/baseline/output.rego\n *\n * @license Apache-2.0\n */\n\n// ─── task_allowed (mirrors task.rego) ────────────────────────────────────────\n\nexport function evaluateTaskAllowed(input: {\n  trust_score: number;\n  complexity: string;\n  priority: string;\n}): boolean {\n  // Agent suspended below 50\n  if (input.trust_score < 50) return false;\n\n  // Epic requires >= 85\n  if (input.complexity === 'epic' && input.trust_score < 85) return false;\n\n  // Complex requires >= 70\n  if (input.complexity === 'complex' && input.trust_score < 70) return false;\n\n  // Critical priority requires >= 70\n  if (input.priority === 'critical' && input.trust_score < 70) return false;\n\n  return true;\n}\n\n// ─── agent_trusted (mirrors agent.rego) ──────────────────────────────────────\n\nexport function evaluateAgentTrusted(input: {\n  trust_score: number;\n  role?: string;\n}): boolean {\n  // Supervisors need trust >= 70\n  if (input.role === 'supervisor' && input.trust_score < 70) return false;\n\n  // Quality agents need trust >= 80\n  if (input.role === 'quality' && input.trust_score < 80) return false;\n\n  // All agents need trust >= 50\n  return input.trust_score >= 50;\n}\n\n// ─── output_safe (mirrors output.rego) ───────────────────────────────────────\n\nexport function evaluateOutputSafe(input: {\n  output?: string;\n  pii_detected?: boolean;\n  schema_valid?: boolean;\n}): boolean {\n  // PII in output is never safe\n  if (input.pii_detected) return false;\n\n  // Schema validation failure is not safe\n  if (input.schema_valid === false) return false;\n\n  return true;\n}\n\n// ─── Dispatcher ──────────────────────────────────────────────────────────────\n\nconst LOCAL_EVALUATORS: Record<string, (input: Record<string, unknown>) => boolean> = {\n  'baseline/task_allowed': (input) => evaluateTaskAllowed(input as Parameters<typeof evaluateTaskAllowed>[0]),\n  'baseline/agent_trusted': (input) => evaluateAgentTrusted(input as Parameters<typeof evaluateAgentTrusted>[0]),\n  'baseline/output_safe': (input) => evaluateOutputSafe(input as Parameters<typeof evaluateOutputSafe>[0]),\n};\n\n/**\n * Evaluate a policy locally. Returns undefined if no local evaluator exists\n * for the given policy path (caller should fall back to fail-open).\n */\nexport function evaluateLocally(policyPath: string, input: Record<string, unknown>): boolean | undefined {\n  const evaluator = LOCAL_EVALUATORS[policyPath];\n  if (!evaluator) return undefined;\n  try {\n    return evaluator(input);\n  } catch {\n    return undefined;\n  }\n}\n","/**\n * OPA Client — SIGNAL-004\n *\n * Lightweight HTTP client for the Open Policy Agent REST API.\n * Zero external dependencies — uses native fetch (Node 18+).\n *\n * Fail-open by default: if OPA is unreachable, evaluation returns\n * the provided fallback value and emits a warning. This prevents\n * OPA downtime from blocking agent execution.\n *\n * @license Apache-2.0\n */\n\n// ─── Types ────────────────────────────────────────────────────────────────────\n\nexport interface OPAInput {\n  [key: string]: unknown;\n}\n\nexport interface OPAEvaluationResult<T = unknown> {\n  /** Policy decision result */\n  result: T;\n  /** OPA decision ID (present when OPA decision logging is enabled) */\n  decisionId?: string;\n  /** Whether this result came from the fallback (OPA was unreachable) */\n  fallback: boolean;\n  /** Evaluation latency in ms */\n  latencyMs: number;\n}\n\nexport interface OPAClientConfig {\n  /** OPA base URL. Defaults to BASELINE_OPA_URL env var or http://localhost:8181 */\n  url?: string;\n  /** Request timeout in ms. Default: 2000 */\n  timeoutMs?: number;\n}\n\n// ─── OPAClient ────────────────────────────────────────────────────────────────\n\nexport class OPAClient {\n  private readonly baseUrl: string;\n  private readonly timeoutMs: number;\n\n  constructor(config: OPAClientConfig = {}) {\n    this.baseUrl = (\n      config.url ??\n      process.env['BASELINE_OPA_URL'] ??\n      'http://localhost:8181'\n    ).replace(/\\/$/, '');\n    this.timeoutMs = config.timeoutMs ?? 2000;\n  }\n\n  /**\n   * Evaluate a policy rule against an input document.\n   *\n   * @param policyPath  Slash-separated path, e.g. 'baseline/task_allowed'\n   * @param input       Arbitrary input document\n   * @param fallback    Value to return if OPA is unreachable (default: true — fail-open)\n   */\n  async evaluate<T = boolean>(\n    policyPath: string,\n    input: OPAInput,\n    fallback: T = true as unknown as T,\n  ): Promise<OPAEvaluationResult<T>> {\n    const start = Date.now();\n    const url = `${this.baseUrl}/v1/data/${policyPath}`;\n\n    try {\n      const response = await fetch(url, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ input }),\n        signal: AbortSignal.timeout(this.timeoutMs),\n      });\n\n      const latencyMs = Date.now() - start;\n\n      if (!response.ok) {\n        const body = await response.text().catch(() => '');\n        throw new Error(`OPA HTTP ${response.status}: ${body}`);\n      }\n\n      const data = await response.json() as { result?: T; decision_id?: string };\n      return {\n        result: data.result ?? fallback,\n        decisionId: data.decision_id,\n        fallback: false,\n        latencyMs,\n      };\n    } catch (err) {\n      const latencyMs = Date.now() - start;\n      const isTimeout = err instanceof Error && err.name === 'TimeoutError';\n      const reason = isTimeout ? 'timeout' : String(err);\n\n      // Try local policy evaluation before failing open\n      try {\n        const { evaluateLocally } = await import('./opa-local-fallback.js');\n        const localResult = evaluateLocally(policyPath, input);\n        if (localResult !== undefined) {\n          console.warn(`[OPAClient] Unreachable (${reason}) — using local fallback for policy \"${policyPath}\"`);\n          return { result: localResult as unknown as T, fallback: true, latencyMs };\n        }\n      } catch {\n        // Local fallback unavailable — continue to fail-open\n      }\n\n      console.warn(`[OPAClient] Unreachable (${reason}) — failing open for policy \"${policyPath}\"`);\n      return { result: fallback, fallback: true, latencyMs };\n    }\n  }\n\n  /**\n   * Check if OPA is healthy and reachable.\n   */\n  async healthCheck(): Promise<boolean> {\n    try {\n      const response = await fetch(`${this.baseUrl}/health`, {\n        signal: AbortSignal.timeout(1000),\n      });\n      return response.ok;\n    } catch {\n      return false;\n    }\n  }\n\n  get url(): string {\n    return this.baseUrl;\n  }\n}\n","/**\n * BaselineOS OpenTelemetry — SIGNAL-012\n *\n * Distributed tracing for the multi-agent orchestration layer.\n * Initializes the OTel Node SDK and exports a shared tracer.\n *\n * Spans emitted:\n *   task.execute          root span per executeTask() call\n *   task.policy.pre       OPA pre-execution gate\n *   task.policy.post      OPA post-execution gate\n *   task.perform          performExecution() step loop\n *   task.self_verify      selfVerify() LLM call\n *   task.review           conductReview() LLM call\n *\n * Trace context is propagated through AgentBus messages via the\n * optional `traceContext` field (W3C traceparent format).\n *\n * Configuration:\n *   OTEL_EXPORTER_OTLP_ENDPOINT  OTLP HTTP collector (default: http://localhost:4318)\n *   OTEL_SERVICE_NAME            service name override (default: baselineos)\n *   BASELINE_OTEL_DISABLED       set to '1' to disable entirely (e.g. in tests)\n *\n * @license Apache-2.0\n */\n\nimport { NodeSDK } from '@opentelemetry/sdk-node';\nimport { OTLPTraceExporter } from '@opentelemetry/exporter-trace-otlp-http';\nimport { resourceFromAttributes } from '@opentelemetry/resources';\nimport { ATTR_SERVICE_NAME, ATTR_SERVICE_VERSION } from '@opentelemetry/semantic-conventions';\nimport { trace, context, propagation, SpanStatusCode, SpanKind } from '@opentelemetry/api';\nimport type { Span, Tracer, Context } from '@opentelemetry/api';\n\nexport { SpanStatusCode, SpanKind };\nexport type { Span, Tracer, Context };\n\n// ─── SDK init ────────────────────────────────────────────────────────────────\n\nlet _sdk: NodeSDK | null = null;\n\n/**\n * Initialize the OTel SDK. Safe to call multiple times — subsequent calls\n * are no-ops. Should be called once at process startup before any spans.\n *\n * Silently disabled when BASELINE_OTEL_DISABLED=1.\n */\nexport function initTelemetry(): void {\n  if (_sdk || process.env['BASELINE_OTEL_DISABLED'] === '1') return;\n\n  const endpoint =\n    process.env['OTEL_EXPORTER_OTLP_ENDPOINT'] ?? 'http://localhost:4318';\n\n  const exporter = new OTLPTraceExporter({\n    url: `${endpoint}/v1/traces`,\n  });\n\n  _sdk = new NodeSDK({\n    resource: resourceFromAttributes({\n      [ATTR_SERVICE_NAME]: process.env['OTEL_SERVICE_NAME'] ?? 'baselineos',\n      [ATTR_SERVICE_VERSION]: '0.2.0-beta.1',\n    }),\n    traceExporter: exporter,\n    // W3C traceparent propagation is the default — no explicit config needed\n  });\n\n  _sdk.start();\n\n  process.on('SIGTERM', () => { _sdk?.shutdown().catch(() => {}); });\n  process.on('SIGINT',  () => { _sdk?.shutdown().catch(() => {}); });\n}\n\n/** Gracefully shut down the SDK and flush pending spans. */\nexport async function shutdownTelemetry(): Promise<void> {\n  await _sdk?.shutdown();\n  _sdk = null;\n}\n\n// ─── Tracer ───────────────────────────────────────────────────────────────────\n\nexport const tracer: Tracer = new Proxy({} as Tracer, {\n  get(_target, prop) {\n    return trace.getTracer('baselineos', '0.2.0-beta.1')[prop as keyof Tracer];\n  },\n});\n\n// ─── Trace context helpers ───────────────────────────────────────────────────\n\n/**\n * Serialize the active W3C trace context to a string for propagation\n * through AgentBus messages.\n * Returns undefined when there is no active span.\n */\nexport function extractTraceContext(): string | undefined {\n  const carrier: Record<string, string> = {};\n  propagation.inject(context.active(), carrier);\n  return carrier['traceparent'];\n}\n\n/**\n * Restore a serialized trace context as the active context.\n * Use as the second argument to `context.with()` before creating child spans.\n */\nexport function injectTraceContext(traceparent: string): Context {\n  const carrier: Record<string, string> = { traceparent };\n  return propagation.extract(context.active(), carrier);\n}\n\n// ─── Span wrapper ─────────────────────────────────────────────────────────────\n\n/**\n * Run an async function inside a named span.\n * Sets ERROR status and records exception on throw.\n */\nexport async function withSpan<T>(\n  name: string,\n  attributes: Record<string, string | number | boolean>,\n  fn: (span: Span) => Promise<T>,\n): Promise<T> {\n  return tracer.startActiveSpan(name, { kind: SpanKind.INTERNAL, attributes }, async (span) => {\n    try {\n      const result = await fn(span);\n      span.setStatus({ code: SpanStatusCode.OK });\n      return result;\n    } catch (err) {\n      span.recordException(err as Error);\n      span.setStatus({ code: SpanStatusCode.ERROR, message: (err as Error).message });\n      throw err;\n    } finally {\n      span.end();\n    }\n  });\n}\n","/**\n * OPA Policy Gate — SIGNAL-004\n *\n * Runtime governance enforcement using Open Policy Agent.\n * Evaluates three policy rules before and after task execution:\n *\n *   baseline/task_allowed   — is this task permitted given agent trust + complexity?\n *   baseline/agent_trusted  — is the agent's trust score above the required threshold?\n *   baseline/output_safe    — does the task output contain policy violations?\n *\n * Integrates with AgentBus: publishes 'governance:policy-evaluated' and\n * 'governance:violation' for every gate evaluation.\n *\n * Dry-run mode evaluates policies without blocking execution.\n *\n * @license Apache-2.0\n */\n\nimport { createHmac } from 'crypto';\nimport { OPAClient } from './opa-client.js';\nimport type { OPAClientConfig } from './opa-client.js';\nimport type { AgentBus } from './agent-bus.js';\nimport type { Task } from './types.js';\nimport { withSpan } from './telemetry.js';\n\n// ─── Types ────────────────────────────────────────────────────────────────────\n\nexport type PolicyVerdict = 'allow' | 'deny' | 'warn';\n\nexport interface PolicyEvaluation {\n  policy: string;\n  allowed: boolean;\n  verdict: PolicyVerdict;\n  fallback: boolean;\n  latencyMs: number;\n  reason?: string;\n}\n\nexport interface GateResult {\n  passed: boolean;\n  blocked: boolean;\n  evaluations: PolicyEvaluation[];\n  /** true if all results came from the OPA fallback (OPA unreachable) */\n  degraded: boolean;\n  /**\n   * HMAC-SHA256 approval token (SIGNAL-017).\n   * Only present when blocked=true and BASELINE_APPROVAL_SECRET is set.\n   * Include in the approvalToken field of POST /api/tasks/:id/approve.\n   */\n  approvalToken?: string;\n  /** Unix ms timestamp when the approval token expires (1 hour from block time). */\n  approvalTokenExpires?: number;\n}\n\nexport interface EscalationWebhookConfig {\n  /** URL to POST to when a policy blocks a task */\n  url: string;\n  /** Optional headers (e.g. Authorization: Bearer ...) */\n  headers?: Record<string, string>;\n  /**\n   * Base URL of the BaselineOS API server — used to construct the\n   * approvalEndpoint field in the webhook payload.\n   * Defaults to http://localhost:3141\n   */\n  apiBaseUrl?: string;\n}\n\nexport interface OPAPolicyGateConfig extends OPAClientConfig {\n  /**\n   * When true, gate evaluations never block — violations are logged\n   * and published to the bus but execution continues.\n   */\n  dryRun?: boolean;\n  /**\n   * Policies to skip. Useful for staged rollouts.\n   * e.g. ['baseline/output_safe']\n   */\n  disabledPolicies?: string[];\n  /**\n   * AgentBus instance for publishing governance events.\n   */\n  bus?: AgentBus;\n  /**\n   * Webhook called when a policy blocks a task.\n   * This is the automated escalation gate (SIGNAL-009).\n   * Set BASELINE_ALERT_WEBHOOK_URL env var as a fallback.\n   */\n  escalationWebhook?: EscalationWebhookConfig;\n}\n\n// ─── OPAPolicyGate ────────────────────────────────────────────────────────────\n\nexport class OPAPolicyGate {\n  private readonly client: OPAClient;\n  private readonly dryRun: boolean;\n  private readonly disabled: Set<string>;\n  private readonly bus?: AgentBus;\n  private readonly escalationWebhook?: EscalationWebhookConfig;\n  /** Rolling window of OPA evaluation durations in ms (SLO-6: p99 < 500ms) */\n  private readonly evalDurations: number[] = [];\n\n  constructor(config: OPAPolicyGateConfig = {}) {\n    this.client = new OPAClient({ url: config.url, timeoutMs: config.timeoutMs });\n    this.dryRun = config.dryRun ?? false;\n    this.disabled = new Set(config.disabledPolicies ?? []);\n    this.bus = config.bus;\n    this.escalationWebhook = config.escalationWebhook ?? (\n      process.env['BASELINE_ESCALATION_WEBHOOK_URL']\n        ? { url: process.env['BASELINE_ESCALATION_WEBHOOK_URL'] }\n        : undefined\n    );\n  }\n\n  /** Timed wrapper around OPA client.evaluate — records duration for SLO-6 metrics. */\n  private async timedEvaluate<T>(policy: string, input: Record<string, unknown>) {\n    const start = Date.now();\n    const res = await this.client.evaluate<T>(policy, input);\n    const durationMs = Date.now() - start;\n    this.evalDurations.push(durationMs);\n    if (this.evalDurations.length > 1000) this.evalDurations.shift();\n    return res;\n  }\n\n  /** Get OPA evaluation duration metrics for Prometheus (SLO-6). */\n  getEvalMetrics(): { count: number; p50Ms: number; p95Ms: number; p99Ms: number } {\n    if (this.evalDurations.length === 0) return { count: 0, p50Ms: 0, p95Ms: 0, p99Ms: 0 };\n    const sorted = [...this.evalDurations].sort((a, b) => a - b);\n    const p = (pct: number) => sorted[Math.min(Math.floor(sorted.length * pct), sorted.length - 1)]!;\n    return { count: sorted.length, p50Ms: p(0.5), p95Ms: p(0.95), p99Ms: p(0.99) };\n  }\n\n  // ─── Pre-execution gate ───────────────────────────────────────────────────\n\n  /**\n   * Evaluate task + agent policies BEFORE execution.\n   * Checks:\n   *   - baseline/task_allowed  (complexity × trust score)\n   *   - baseline/agent_trusted (trust score × minimum threshold)\n   *\n   * Returns blocked=true if any policy denies and dryRun=false.\n   */\n  async preExecution(task: Task, agentId: string, trustScore: number): Promise<GateResult> {\n    return withSpan('task.policy.pre', {\n      'task.id': task.id,\n      'agent.id': agentId,\n      'agent.trust_score': trustScore,\n    }, async (span) => {\n      const result = await this._preExecution(task, agentId, trustScore);\n      span.setAttribute('policy.blocked', result.blocked);\n      span.setAttribute('policy.degraded', result.degraded);\n      return result;\n    });\n  }\n\n  private async _preExecution(task: Task, agentId: string, trustScore: number): Promise<GateResult> {\n    const evals: PolicyEvaluation[] = [];\n\n    // baseline/task_allowed\n    if (!this.disabled.has('baseline/task_allowed')) {\n      const res = await this.timedEvaluate<boolean>('baseline/task_allowed', {\n        task_id: task.id,\n        complexity: task.complexity,\n        priority: task.priority,\n        required_capabilities: task.requiredCapabilities,\n        agent_id: agentId,\n        trust_score: trustScore,\n      });\n\n      evals.push({\n        policy: 'baseline/task_allowed',\n        allowed: res.result,\n        verdict: res.result ? 'allow' : 'deny',\n        fallback: res.fallback,\n        latencyMs: res.latencyMs,\n        reason: res.result ? undefined : 'Policy denied task based on trust/complexity',\n      });\n    }\n\n    // baseline/agent_trusted\n    if (!this.disabled.has('baseline/agent_trusted')) {\n      const minScore = this.minimumScoreFor(task);\n      const res = await this.timedEvaluate<boolean>('baseline/agent_trusted', {\n        agent_id: agentId,\n        trust_score: trustScore,\n        minimum_score: minScore,\n        task_complexity: task.complexity,\n        task_priority: task.priority,\n      });\n\n      evals.push({\n        policy: 'baseline/agent_trusted',\n        allowed: res.result,\n        verdict: res.result ? 'allow' : 'deny',\n        fallback: res.fallback,\n        latencyMs: res.latencyMs,\n        reason: res.result ? undefined : `Agent trust score ${trustScore} below minimum ${minScore}`,\n      });\n    }\n\n    return this.buildResult(evals, 'pre-execution', task, agentId);\n  }\n\n  // ─── Post-execution gate ──────────────────────────────────────────────────\n\n  /**\n   * Evaluate output safety policy AFTER execution.\n   * Checks:\n   *   - baseline/output_safe  (output content screening)\n   *\n   * Returns blocked=true only when dryRun=false and the policy denies.\n   */\n  async postExecution(\n    task: Task,\n    agentId: string,\n    output: { content?: string; tokensUsed?: number },\n  ): Promise<GateResult> {\n    return withSpan('task.policy.post', {\n      'task.id': task.id,\n      'agent.id': agentId,\n      'output.tokens': output.tokensUsed ?? 0,\n    }, async (span) => {\n      const result = await this._postExecution(task, agentId, output);\n      span.setAttribute('policy.blocked', result.blocked);\n      span.setAttribute('policy.degraded', result.degraded);\n      return result;\n    });\n  }\n\n  private async _postExecution(\n    task: Task,\n    agentId: string,\n    output: { content?: string; tokensUsed?: number },\n  ): Promise<GateResult> {\n    const evals: PolicyEvaluation[] = [];\n\n    if (!this.disabled.has('baseline/output_safe')) {\n      const res = await this.timedEvaluate<boolean>('baseline/output_safe', {\n        task_id: task.id,\n        agent_id: agentId,\n        output: (output.content ?? '').slice(0, 2000),\n        tokens_used: output.tokensUsed ?? 0,\n      });\n\n      evals.push({\n        policy: 'baseline/output_safe',\n        allowed: res.result,\n        verdict: res.result ? 'allow' : 'deny',\n        fallback: res.fallback,\n        latencyMs: res.latencyMs,\n        reason: res.result ? undefined : 'Output failed safety policy check',\n      });\n    }\n\n    return this.buildResult(evals, 'post-execution', task, agentId);\n  }\n\n  // ─── Health ───────────────────────────────────────────────────────────────\n\n  async isHealthy(): Promise<boolean> {\n    return this.client.healthCheck();\n  }\n\n  get opaUrl(): string {\n    return this.client.url;\n  }\n\n  get isDryRun(): boolean {\n    return this.dryRun;\n  }\n\n  // ─── Internals ────────────────────────────────────────────────────────────\n\n  private buildResult(\n    evals: PolicyEvaluation[],\n    phase: string,\n    task: Task,\n    agentId: string,\n  ): GateResult {\n    const violations = evals.filter((e) => !e.allowed);\n    const degraded = evals.length > 0 && evals.every((e) => e.fallback);\n    const blocked = !this.dryRun && violations.length > 0;\n    const passed = violations.length === 0;\n\n    // Generate HMAC approval token when blocked (SIGNAL-017)\n    let approvalToken: string | undefined;\n    let approvalTokenExpires: number | undefined;\n    const approvalSecret = process.env['BASELINE_APPROVAL_SECRET'];\n    if (blocked && approvalSecret) {\n      approvalTokenExpires = Date.now() + 3_600_000;\n      approvalToken = createHmac('sha256', approvalSecret)\n        .update(`${task.id}:${approvalTokenExpires}`)\n        .digest('hex');\n    }\n\n    // Publish to bus\n    if (this.bus) {\n      this.bus.broadcast('system', 'governance:policy-evaluated', {\n        phase,\n        taskId: task.id,\n        agentId,\n        passed,\n        blocked,\n        degraded,\n        evaluations: evals,\n      }, 'normal');\n\n      for (const v of violations) {\n        this.bus.broadcast('system', 'governance:violation', {\n          phase,\n          taskId: task.id,\n          agentId,\n          policy: v.policy,\n          reason: v.reason,\n          blocked,\n          dryRun: this.dryRun,\n        }, 'high');\n      }\n    }\n\n    if (violations.length > 0) {\n      const mode = this.dryRun ? '[DRY RUN]' : '';\n      for (const v of violations) {\n        console.warn(`[OPAPolicyGate]${mode} ${phase} policy denied: ${v.policy} — ${v.reason}`);\n      }\n    }\n\n    // Fire escalation webhook when blocked (SIGNAL-009 / SIGNAL-017)\n    if (blocked && this.escalationWebhook) {\n      const apiBase = this.escalationWebhook.apiBaseUrl ?? 'http://localhost:3141';\n      const expiresAt = approvalTokenExpires ?? (Date.now() + 3_600_000);\n      const payload = {\n        taskId: task.id,\n        agentId,\n        phase,\n        policy: violations[0]?.policy ?? 'unknown',\n        reason: violations[0]?.reason ?? 'Policy gate blocked execution',\n        approvalEndpoint: `${apiBase}/api/tasks/${task.id}/approve`,\n        approvalToken,   // SIGNAL-017: include token so webhook receiver can approve\n        expiresAt,\n        timestamp: new Date().toISOString(),\n      };\n      fetch(this.escalationWebhook.url, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json', ...this.escalationWebhook.headers },\n        body: JSON.stringify(payload),\n        signal: AbortSignal.timeout(3000),\n      }).catch((err) => {\n        console.warn(`[OPAPolicyGate] Escalation webhook failed: ${err}`);\n      });\n    }\n\n    return { passed, blocked, evaluations: evals, degraded, approvalToken, approvalTokenExpires };\n  }\n\n  /**\n   * Derive minimum trust score based on task complexity + priority.\n   * Mirrors the trust tier thresholds in security.ts.\n   */\n  private minimumScoreFor(task: Task): number {\n    if (task.priority === 'critical') return 80;\n    switch (task.complexity) {\n      case 'epic':    return 85;\n      case 'complex': return 70;\n      case 'moderate': return 60;\n      default:        return 50;\n    }\n  }\n}\n"]}