instar 0.28.107 → 0.28.108

package/dist/monitoring/BurnDetector.d.ts

@@ -0,0 +1,84 @@
+/**
+ * BurnDetector — emits a structured signal when a single attribution_key
+ * crosses configured spend thresholds.
+ *
+ * Phase 3 of docs/specs/token-burn-detection-and-self-heal.md.
+ *
+ * Signal-only (per umbrella spec §"Signal-vs-Authority Decomposition"): the
+ * detector emits to the existing DegradationReporter. The Phase 4 runbook
+ * (Tier-2 Remediator surface) is the only authority that decides whether
+ * to alert / throttle / both. The BurnDetector cannot decide anything.
+ *
+ * Triggers (OR'd):
+ *   1. Absolute share — a single attribution_key consumed > absoluteShareThreshold
+ *      of total 24h spend.
+ *   2. Baseline divergence — the key's last-1h rate is > rollingBaselineMultiplier ×
+ *      its trailing-7-day median rate, AND the 1h rate exceeds rollingBaselineFloor
+ *      tokens/h.
+ *
+ * Cold-start (per umbrella spec §"Threshold logic"): the baseline-divergence
+ * trigger only fires after a key has been observed for 7 days. Until then,
+ * absolute-share is the only signal — that's the trigger that would have
+ * caught the 2026-05-15 incident.
+ *
+ * Polling cadence: 60s, decoupled from the ledger writer. The detector does
+ * its own clock (injected `now`) so tests don't need to fake timers globally.
+ */
+import type { TokenLedger } from './TokenLedger.js';
+import type { DegradationReporter } from './DegradationReporter.js';
+export interface BurnDetectionConfig {
+    enabled: boolean;
+    /** Default 0.25 (25%). */
+    absoluteShareThreshold: number;
+    /** Default 2 (2x). */
+    rollingBaselineMultiplier: number;
+    /** Default 10_000_000 tokens/hour. */
+    rollingBaselineFloor: number;
+    /** Per-key alert cooldown (default 3_600_000ms = 1h). */
+    perKeyAlertCooldownMs: number;
+    /** Poll interval (default 60_000ms = 60s). */
+    pollIntervalMs: number;
+    /** Cold-start duration (default 7d). Baseline-divergence trigger disabled until elapsed. */
+    coldStartMs: number;
+}
+export declare const DEFAULT_BURN_DETECTION_CONFIG: BurnDetectionConfig;
+export interface BurnSignal {
+    attributionKey: string;
+    trigger: 'absolute-share' | 'baseline-divergence';
+    emittedAt: string;
+    observed: {
+        tokens24h: number;
+        share24h: number;
+        tokensLast1h: number;
+        projectedDaily: number;
+    };
+    /** Trailing-7d median tokens/h. Only populated for `baseline-divergence`. */
+    baselineMedian7d?: number;
+}
+export interface BurnDetectorDeps {
+    ledger: Pick<TokenLedger, 'byAttributionKey' | 'summary'>;
+    reporter: Pick<DegradationReporter, 'report'>;
+    config?: Partial<BurnDetectionConfig>;
+    /** Injectable clock for tests. Defaults to `Date.now`. */
+    now?: () => number;
+}
+export declare class BurnDetector {
+    private readonly ledger;
+    private readonly reporter;
+    private readonly config;
+    private readonly now;
+    /** First time a given attribution_key was seen. Used for cold-start cutoff. */
+    private readonly firstSeen;
+    /** Last alert emit time per key — gates per-key alert cooldown. */
+    private readonly lastAlertAt;
+    private timer;
+    constructor(deps: BurnDetectorDeps);
+    start(): void;
+    stop(): void;
+    /**
+     * One detector cycle. Returns the signals emitted on this tick — useful
+     * for tests, and the production loop ignores the return.
+     */
+    tick(): BurnSignal[];
+}
+//# sourceMappingURL=BurnDetector.d.ts.map

package/dist/monitoring/BurnDetector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BurnDetector.d.ts","sourceRoot":"","sources":["../../src/monitoring/BurnDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAqB,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,0BAA0B;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sBAAsB;IACtB,yBAAyB,EAAE,MAAM,CAAC;IAClC,sCAAsC;IACtC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,qBAAqB,EAAE,MAAM,CAAC;IAC9B,8CAA8C;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,4FAA4F;IAC5F,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,6BAA6B,EAAE,mBAQ3C,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,gBAAgB,GAAG,qBAAqB,CAAC;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,kBAAkB,GAAG,SAAS,CAAC,CAAC;IAC1D,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtC,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+B;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,mEAAmE;IACnE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,KAAK,CAA+C;gBAEhD,IAAI,EAAE,gBAAgB;IAOlC,KAAK,IAAI,IAAI;IAgBb,IAAI,IAAI,IAAI;IAOZ;;;OAGG;IACH,IAAI,IAAI,UAAU,EAAE;CAkGrB"}

package/dist/monitoring/BurnDetector.js

@@ -0,0 +1,169 @@
+/**
+ * BurnDetector — emits a structured signal when a single attribution_key
+ * crosses configured spend thresholds.
+ *
+ * Phase 3 of docs/specs/token-burn-detection-and-self-heal.md.
+ *
+ * Signal-only (per umbrella spec §"Signal-vs-Authority Decomposition"): the
+ * detector emits to the existing DegradationReporter. The Phase 4 runbook
+ * (Tier-2 Remediator surface) is the only authority that decides whether
+ * to alert / throttle / both. The BurnDetector cannot decide anything.
+ *
+ * Triggers (OR'd):
+ *   1. Absolute share — a single attribution_key consumed > absoluteShareThreshold
+ *      of total 24h spend.
+ *   2. Baseline divergence — the key's last-1h rate is > rollingBaselineMultiplier ×
+ *      its trailing-7-day median rate, AND the 1h rate exceeds rollingBaselineFloor
+ *      tokens/h.
+ *
+ * Cold-start (per umbrella spec §"Threshold logic"): the baseline-divergence
+ * trigger only fires after a key has been observed for 7 days. Until then,
+ * absolute-share is the only signal — that's the trigger that would have
+ * caught the 2026-05-15 incident.
+ *
+ * Polling cadence: 60s, decoupled from the ledger writer. The detector does
+ * its own clock (injected `now`) so tests don't need to fake timers globally.
+ */
+export const DEFAULT_BURN_DETECTION_CONFIG = {
+    enabled: true,
+    absoluteShareThreshold: 0.25,
+    rollingBaselineMultiplier: 2,
+    rollingBaselineFloor: 10_000_000,
+    perKeyAlertCooldownMs: 3_600_000,
+    pollIntervalMs: 60_000,
+    coldStartMs: 7 * 24 * 60 * 60 * 1000,
+};
+export class BurnDetector {
+    ledger;
+    reporter;
+    config;
+    now;
+    /** First time a given attribution_key was seen. Used for cold-start cutoff. */
+    firstSeen = new Map();
+    /** Last alert emit time per key — gates per-key alert cooldown. */
+    lastAlertAt = new Map();
+    timer = null;
+    constructor(deps) {
+        this.ledger = deps.ledger;
+        this.reporter = deps.reporter;
+        this.config = { ...DEFAULT_BURN_DETECTION_CONFIG, ...(deps.config ?? {}) };
+        this.now = deps.now ?? (() => Date.now());
+    }
+    start() {
+        if (!this.config.enabled || this.timer)
+            return;
+        this.timer = setInterval(() => {
+            try {
+                this.tick();
+            }
+            catch (err) {
+                console.warn(`[burn-detector] tick error (non-fatal): ${err.message}`);
+            }
+        }, this.config.pollIntervalMs);
+        // Prevent the interval from keeping the process alive on its own — the
+        // server's lifecycle owns shutdown.
+        if (this.timer && typeof this.timer.unref === 'function') {
+            this.timer.unref();
+        }
+    }
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    /**
+     * One detector cycle. Returns the signals emitted on this tick — useful
+     * for tests, and the production loop ignores the return.
+     */
+    tick() {
+        if (!this.config.enabled)
+            return [];
+        const now = this.now();
+        const since24h = now - 24 * 60 * 60 * 1000;
+        const since1h = now - 60 * 60 * 1000;
+        const since7d = now - 7 * 24 * 60 * 60 * 1000;
+        const keys24h = this.ledger.byAttributionKey({ sinceMs: since24h });
+        if (keys24h.length === 0)
+            return [];
+        const total24h = keys24h.reduce((sum, k) => sum + k.totalTokens, 0);
+        if (total24h <= 0)
+            return [];
+        // Update first-seen map.
+        for (const k of keys24h) {
+            if (!this.firstSeen.has(k.attributionKey)) {
+                this.firstSeen.set(k.attributionKey, k.firstTs);
+            }
+        }
+        const signals = [];
+        const keys1h = this.ledger.byAttributionKey({ sinceMs: since1h });
+        const keys1hMap = new Map(keys1h.map((k) => [k.attributionKey, k]));
+        for (const key24h of keys24h) {
+            const share = key24h.totalTokens / total24h;
+            const key1h = keys1hMap.get(key24h.attributionKey);
+            const tokens1h = key1h ? key1h.totalTokens : 0;
+            const projectedDaily = tokens1h * 24;
+            // Skip exempt runbook self-attribution prefix (defence in depth — Phase 4
+            // runbook also exempts itself at the gate level).
+            if (key24h.attributionKey.startsWith('burn-throttle-runbook::'))
+                continue;
+            // Cooldown.
+            const lastAlert = this.lastAlertAt.get(key24h.attributionKey) ?? 0;
+            if (now - lastAlert < this.config.perKeyAlertCooldownMs)
+                continue;
+            let trigger = null;
+            let baselineMedian7d;
+            // Trigger 1 — absolute share.
+            if (share > this.config.absoluteShareThreshold) {
+                trigger = 'absolute-share';
+            }
+            // Trigger 2 — baseline divergence (only after cold-start window).
+            if (!trigger) {
+                const firstSeen = this.firstSeen.get(key24h.attributionKey) ?? key24h.firstTs;
+                if (now - firstSeen >= this.config.coldStartMs && tokens1h >= this.config.rollingBaselineFloor) {
+                    // 7-day median rate (tokens/h). Use the simple per-key 7d total / 168
+                    // as a proxy when the table doesn't store hourly buckets — Phase 4 may
+                    // refine to a true median.
+                    const keys7d = this.ledger.byAttributionKey({ sinceMs: since7d });
+                    const key7d = keys7d.find((k) => k.attributionKey === key24h.attributionKey);
+                    if (key7d) {
+                        baselineMedian7d = key7d.totalTokens / (7 * 24);
+                        if (tokens1h > this.config.rollingBaselineMultiplier * baselineMedian7d) {
+                            trigger = 'baseline-divergence';
+                        }
+                    }
+                }
+            }
+            if (!trigger)
+                continue;
+            const signal = {
+                attributionKey: key24h.attributionKey,
+                trigger,
+                emittedAt: new Date(now).toISOString(),
+                observed: {
+                    tokens24h: key24h.totalTokens,
+                    share24h: share,
+                    tokensLast1h: tokens1h,
+                    projectedDaily,
+                },
+                baselineMedian7d,
+            };
+            signals.push(signal);
+            this.lastAlertAt.set(key24h.attributionKey, now);
+            // Emit to DegradationReporter. The runbook in Phase 4 will subscribe via
+            // the existing Remediator dispatch and decide alert vs throttle.
+            this.reporter.report({
+                feature: 'token-burn-detection',
+                primary: `attribution_key ${key24h.attributionKey} sustained spend within thresholds`,
+                fallback: `signal-only: detector flagged the key (Phase 4 runbook will decide alert vs throttle)`,
+                reason: trigger === 'absolute-share'
+                    ? `${key24h.attributionKey} consumed ${(share * 100).toFixed(1)}% of 24h spend (threshold ${(this.config.absoluteShareThreshold * 100).toFixed(0)}%)`
+                    : `${key24h.attributionKey} last-1h rate ${tokens1h.toLocaleString()} tok/h, baseline ${baselineMedian7d?.toLocaleString() ?? '?'} tok/h (multiplier ${this.config.rollingBaselineMultiplier}x)`,
+                impact: `Projected ${projectedDaily.toLocaleString()} tokens in next 24h at current rate. ` +
+                    `Phase 3 is observation-only; Phase 4 wires alerting and bounded auto-throttle.`,
+            });
+        }
+        return signals;
+    }
+}
+//# sourceMappingURL=BurnDetector.js.map

package/dist/monitoring/BurnDetector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BurnDetector.js","sourceRoot":"","sources":["../../src/monitoring/BurnDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAqBH,MAAM,CAAC,MAAM,6BAA6B,GAAwB;IAChE,OAAO,EAAE,IAAI;IACb,sBAAsB,EAAE,IAAI;IAC5B,yBAAyB,EAAE,CAAC;IAC5B,oBAAoB,EAAE,UAAU;IAChC,qBAAqB,EAAE,SAAS;IAChC,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;CACrC,CAAC;AAwBF,MAAM,OAAO,YAAY;IACN,MAAM,CAA6B;IACnC,QAAQ,CAA+B;IACvC,MAAM,CAAsB;IAC5B,GAAG,CAAe;IACnC,+EAA+E;IAC9D,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvD,mEAAmE;IAClD,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,GAA0C,IAAI,CAAC;IAE5D,YAAY,IAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,6BAA6B,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QAC/C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,2CAA4C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/B,uEAAuE;QACvE,oCAAoC;QACpC,IAAI,IAAI,CAAC,KAAK,IAAI,OAAQ,IAAI,CAAC,KAAgC,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACpF,IAAI,CAAC,KAA+B,CAAC,KAAK,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAE9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACpE,IAAI,QAAQ,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QAE7B,yBAAyB;QACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC;YAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,cAAc,GAAG,QAAQ,GAAG,EAAE,CAAC;YAErC,0EAA0E;YAC1E,kDAAkD;YAClD,IAAI,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,yBAAyB,CAAC;gBAAE,SAAS;YAE1E,YAAY;YACZ,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,GAAG,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB;gBAAE,SAAS;YAElE,IAAI,OAAO,GAAiC,IAAI,CAAC;YACjD,IAAI,gBAAoC,CAAC;YAEzC,8BAA8B;YAC9B,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBAC/C,OAAO,GAAG,gBAAgB,CAAC;YAC7B,CAAC;YAED,kEAAkE;YAClE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;gBAC9E,IAAI,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;oBAC/F,sEAAsE;oBACtE,uEAAuE;oBACvE,2BAA2B;oBAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;oBAClE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,CAAC,CAAC;oBAC7E,IAAI,KAAK,EAAE,CAAC;wBACV,gBAAgB,GAAG,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;wBAChD,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,GAAG,gBAAgB,EAAE,CAAC;4BACxE,OAAO,GAAG,qBAAqB,CAAC;wBAClC,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,MAAM,MAAM,GAAe;gBACzB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,OAAO;gBACP,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;gBACtC,QAAQ,EAAE;oBACR,SAAS,EAAE,MAAM,CAAC,WAAW;oBAC7B,QAAQ,EAAE,KAAK;oBACf,YAAY,EAAE,QAAQ;oBACtB,cAAc;iBACf;gBACD,gBAAgB;aACjB,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YAEjD,yEAAyE;YACzE,iEAAiE;YACjE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACnB,OAAO,EAAE,sBAAsB;gBAC/B,OAAO,EAAE,mBAAmB,MAAM,CAAC,cAAc,oCAAoC;gBACrF,QAAQ,EAAE,uFAAuF;gBACjG,MAAM,EACJ,OAAO,KAAK,gBAAgB;oBAC1B,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,aAAa,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;oBACrJ,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,iBAAiB,QAAQ,CAAC,cAAc,EAAE,oBAAoB,gBAAgB,EAAE,cAAc,EAAE,IAAI,GAAG,sBAAsB,IAAI,CAAC,MAAM,CAAC,yBAAyB,IAAI;gBACpM,MAAM,EACJ,aAAa,cAAc,CAAC,cAAc,EAAE,uCAAuC;oBACnF,gFAAgF;aACnF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/monitoring/BurnThrottleRunbook.d.ts

@@ -0,0 +1,97 @@
+/**
+ * BurnThrottleRunbook — Tier-2 authority surface for burn-detection signals.
+ *
+ * Phase 4 of docs/specs/token-burn-detection-and-self-heal.md. This is the
+ * ONLY blocking surface in the burn-detection pipeline. The BurnDetector
+ * (Phase 3) emits structured signals via DegradationReporter; this runbook
+ * subscribes via the existing handler hook and decides:
+ *   - alert-only (default for `unknown::*` keys and any caller config disables)
+ *   - throttle (default for known component names)
+ *   - both (the umbrella spec's primary policy)
+ *
+ * Authority shape (per umbrella spec §"Signal-vs-Authority Decomposition"):
+ * the runbook is the only piece in this pipeline with blocking authority.
+ * The detector emits; the gate enforces; the runbook decides.
+ *
+ * Self-reinforcing-loop guard: the runbook never throttles a key starting
+ * with `burn-throttle-runbook::*` — defence-in-depth (the gate also refuses
+ * to install such throttles, the detector also exempts the prefix). This
+ * three-layer guard is from the convergence audit.
+ */
+import { LlmRateGate, type InstalledThrottle } from './LlmRateGate.js';
+import type { DegradationEvent } from './DegradationReporter.js';
+export interface BurnThrottleConfig {
+    /** Whether to auto-throttle (true) or alert-only (false). Default true. */
+    autoThrottle: boolean;
+    /**
+     * Whether to auto-throttle keys with no known component (`unknown::*`).
+     * Default false — the umbrella spec is conservative here: an unknown key
+     * may be a user extension the agent doesn't recognise, and throttling
+     * something the agent doesn't understand can break user workflows.
+     * Operators opt in to auto-throttle on unknown explicitly.
+     */
+    autoThrottleOnUnknown: boolean;
+    /** Throttle duration (default 60min). */
+    throttleDurationMs: number;
+}
+export declare const DEFAULT_BURN_THROTTLE_CONFIG: BurnThrottleConfig;
+export type RunbookOutcomeKind = 'alert-only-unknown' | 'alert-only-config-disabled' | 'alert-only-self-attribution' | 'throttle-installed' | 'throttle-failed';
+export interface RunbookOutcome {
+    kind: RunbookOutcomeKind;
+    attributionKey: string;
+    decidedAt: string;
+    trigger: string;
+    /** When kind === 'throttle-installed', the actually-installed throttle. */
+    throttle?: InstalledThrottle;
+    /** Free-text reason for the decision. */
+    reason: string;
+}
+/** Telegram emit function. Phase 5 upgrades to principal-bound buttons. */
+export type TelegramAlertSender = (topicId: number, text: string) => void | Promise<void>;
+export interface BurnThrottleRunbookDeps {
+    gate: LlmRateGate;
+    config?: Partial<BurnThrottleConfig>;
+    /** Telegram emit. Optional — when missing, decisions still happen, just no alert. */
+    sendTelegram?: TelegramAlertSender;
+    /** Telegram topic ID for alerts. */
+    alertTopicId?: number;
+    /** Injectable clock for tests. */
+    now?: () => number;
+}
+/** Identity tag the runbook uses when installing throttles. */
+export declare const RUNBOOK_ISSUER = "burn-throttle-runbook";
+export declare class BurnThrottleRunbook {
+    private readonly gate;
+    private readonly config;
+    private readonly sendTelegram;
+    private readonly alertTopicId;
+    private readonly now;
+    constructor(deps: BurnThrottleRunbookDeps);
+    /**
+     * Handle a burn-detection signal. Called from a subscriber hook on
+     * DegradationReporter for feature='token-burn-detection' events.
+     *
+     * Returns the outcome so tests + audit + the verification step (Phase 6)
+     * can inspect what happened.
+     */
+    handle(event: DegradationEvent): RunbookOutcome;
+    private fireTelegram;
+}
+/**
+ * Extract the attribution key from a burn-detection DegradationEvent. The
+ * BurnDetector formats the `primary` field as "attribution_key <KEY>
+ * sustained spend within thresholds" — we parse it back here. The wire
+ * shape is internal to the burn-detection pipeline; if it changes, change
+ * both ends in the same PR.
+ */
+export declare function extractAttributionKey(event: DegradationEvent): string;
+/**
+ * Extract the trigger label from the event's reason field. Returns
+ * 'absolute-share' or 'baseline-divergence' or 'unknown-trigger'.
+ */
+export declare function extractTrigger(event: DegradationEvent): string;
+/** Is the attribution key one of the unknown::* fallback shapes? */
+export declare function isUnknownKey(attributionKey: string): boolean;
+/** Compose the ELI16 alert text for Telegram. No backticks, no camelCase config keys, narrative tone. */
+export declare function composeAlertText(event: DegradationEvent, attributionKey: string, trigger: string): string;
+//# sourceMappingURL=BurnThrottleRunbook.d.ts.map

package/dist/monitoring/BurnThrottleRunbook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BurnThrottleRunbook.d.ts","sourceRoot":"","sources":["../../src/monitoring/BurnThrottleRunbook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,WAAW,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,MAAM,WAAW,kBAAkB;IACjC,2EAA2E;IAC3E,YAAY,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,qBAAqB,EAAE,OAAO,CAAC;IAC/B,yCAAyC;IACzC,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,4BAA4B,EAAE,kBAI1C,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B,oBAAoB,GACpB,4BAA4B,GAC5B,6BAA6B,GAC7B,oBAAoB,GACpB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,2EAA2E;AAC3E,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1F,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrC,qFAAqF;IACrF,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,+DAA+D;AAC/D,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAEtD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkC;IAC/D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,IAAI,EAAE,uBAAuB;IAQzC;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,cAAc;IA8F/C,OAAO,CAAC,YAAY;CAYrB;AAID;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAGrE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAI9D;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,yGAAyG;AACzG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAazG"}

package/dist/monitoring/BurnThrottleRunbook.js

@@ -0,0 +1,202 @@
+/**
+ * BurnThrottleRunbook — Tier-2 authority surface for burn-detection signals.
+ *
+ * Phase 4 of docs/specs/token-burn-detection-and-self-heal.md. This is the
+ * ONLY blocking surface in the burn-detection pipeline. The BurnDetector
+ * (Phase 3) emits structured signals via DegradationReporter; this runbook
+ * subscribes via the existing handler hook and decides:
+ *   - alert-only (default for `unknown::*` keys and any caller config disables)
+ *   - throttle (default for known component names)
+ *   - both (the umbrella spec's primary policy)
+ *
+ * Authority shape (per umbrella spec §"Signal-vs-Authority Decomposition"):
+ * the runbook is the only piece in this pipeline with blocking authority.
+ * The detector emits; the gate enforces; the runbook decides.
+ *
+ * Self-reinforcing-loop guard: the runbook never throttles a key starting
+ * with `burn-throttle-runbook::*` — defence-in-depth (the gate also refuses
+ * to install such throttles, the detector also exempts the prefix). This
+ * three-layer guard is from the convergence audit.
+ */
+export const DEFAULT_BURN_THROTTLE_CONFIG = {
+    autoThrottle: true,
+    autoThrottleOnUnknown: false,
+    throttleDurationMs: 60 * 60 * 1000,
+};
+/** Identity tag the runbook uses when installing throttles. */
+export const RUNBOOK_ISSUER = 'burn-throttle-runbook';
+export class BurnThrottleRunbook {
+    gate;
+    config;
+    sendTelegram;
+    alertTopicId;
+    now;
+    constructor(deps) {
+        this.gate = deps.gate;
+        this.config = { ...DEFAULT_BURN_THROTTLE_CONFIG, ...(deps.config ?? {}) };
+        this.sendTelegram = deps.sendTelegram;
+        this.alertTopicId = deps.alertTopicId ?? 8615;
+        this.now = deps.now ?? (() => Date.now());
+    }
+    /**
+     * Handle a burn-detection signal. Called from a subscriber hook on
+     * DegradationReporter for feature='token-burn-detection' events.
+     *
+     * Returns the outcome so tests + audit + the verification step (Phase 6)
+     * can inspect what happened.
+     */
+    handle(event) {
+        const attributionKey = extractAttributionKey(event);
+        const trigger = extractTrigger(event);
+        const decidedAt = new Date(this.now()).toISOString();
+        const signalId = `${event.timestamp}:${attributionKey}`;
+        // 1. Self-attribution: refuse to throttle the runbook itself, AND emit
+        //    a high-severity escalation alert. Per Phase 4 second-pass review §3:
+        //    silent swallow is the wrong response here — if the runbook itself
+        //    is being attributed-to as a burn source, something is structurally
+        //    wrong (a bug in the runbook's own LLM-bound code, or attribution
+        //    being mis-applied to a legitimate runbook call). Either way, that's
+        //    exactly the case a user needs to know about. So we DO send Telegram.
+        if (attributionKey.startsWith(`${RUNBOOK_ISSUER}::`)) {
+            this.fireTelegram(`URGENT: the burn-throttle runbook itself is being flagged as a burn source ` +
+                `(${attributionKey}). I refused to throttle myself by design, but this likely ` +
+                `means either the runbook has a bug producing too many LLM calls, or attribution ` +
+                `is being mis-applied to legitimate runbook work. Please investigate.`);
+            return {
+                kind: 'alert-only-self-attribution',
+                attributionKey,
+                decidedAt,
+                trigger,
+                reason: 'Refusing to throttle the runbook itself (self-reinforcing-loop guard); escalation alert sent.',
+            };
+        }
+        // Compose the alert text now so we send it regardless of throttle outcome.
+        const alertText = composeAlertText(event, attributionKey, trigger);
+        // 2. Caller config disables auto-throttle.
+        if (!this.config.autoThrottle) {
+            this.fireTelegram(alertText);
+            return {
+                kind: 'alert-only-config-disabled',
+                attributionKey,
+                decidedAt,
+                trigger,
+                reason: 'autoThrottle is disabled in config; alert sent but no throttle installed.',
+            };
+        }
+        // 3. Unknown attribution + caller has not opted in to auto-throttle on unknown.
+        if (isUnknownKey(attributionKey) && !this.config.autoThrottleOnUnknown) {
+            this.fireTelegram(alertText);
+            return {
+                kind: 'alert-only-unknown',
+                attributionKey,
+                decidedAt,
+                trigger,
+                reason: 'Attribution key has no known component; operator must opt in to auto-throttle on unknown.',
+            };
+        }
+        // 4. Install throttle, send alert.
+        const token = this.gate.computeCapabilityToken({
+            attributionKey,
+            durationMs: this.config.throttleDurationMs,
+            issuer: RUNBOOK_ISSUER,
+            signalId,
+        }) ?? undefined;
+        try {
+            const throttle = this.gate.installThrottle({
+                attributionKey,
+                durationMs: this.config.throttleDurationMs,
+                reason: `${trigger} trigger crossed threshold; runbook installed bounded throttle.`,
+                issuer: RUNBOOK_ISSUER,
+                signalId,
+                capabilityToken: token,
+            });
+            this.fireTelegram(`${alertText}\n\nI have slowed this component down. It will resume automatically in ${Math.round(this.config.throttleDurationMs / 60000)} minutes, or you can reply STOP to release it sooner.`);
+            return {
+                kind: 'throttle-installed',
+                attributionKey,
+                decidedAt,
+                trigger,
+                throttle,
+                reason: 'Throttle installed, alert sent.',
+            };
+        }
+        catch (err) {
+            this.fireTelegram(`${alertText}\n\nI tried to slow it down automatically but the slowdown did not take effect. You may need to look at this one.`);
+            return {
+                kind: 'throttle-failed',
+                attributionKey,
+                decidedAt,
+                trigger,
+                reason: `Throttle install failed: ${err.message}`,
+            };
+        }
+    }
+    fireTelegram(text) {
+        if (!this.sendTelegram)
+            return;
+        try {
+            // Caller may return a promise; we don't await — the runbook is on the
+            // signal-handling hot path and must not block. Errors are swallowed:
+            // a failed alert can't block the throttle decision, which is the
+            // important part.
+            void this.sendTelegram(this.alertTopicId, text);
+        }
+        catch {
+            // Intentional swallow.
+        }
+    }
+}
+/* ---------- pure helpers (exported for tests) ---------- */
+/**
+ * Extract the attribution key from a burn-detection DegradationEvent. The
+ * BurnDetector formats the `primary` field as "attribution_key <KEY>
+ * sustained spend within thresholds" — we parse it back here. The wire
+ * shape is internal to the burn-detection pipeline; if it changes, change
+ * both ends in the same PR.
+ */
+export function extractAttributionKey(event) {
+    const m = /attribution_key\s+(\S+)/.exec(event.primary || '');
+    return m && m[1] ? m[1] : 'unknown::no-key';
+}
+/**
+ * Extract the trigger label from the event's reason field. Returns
+ * 'absolute-share' or 'baseline-divergence' or 'unknown-trigger'.
+ */
+export function extractTrigger(event) {
+    if (/% of 24h spend/.test(event.reason || ''))
+        return 'absolute-share';
+    if (/baseline/i.test(event.reason || ''))
+        return 'baseline-divergence';
+    return 'unknown-trigger';
+}
+/** Is the attribution key one of the unknown::* fallback shapes? */
+export function isUnknownKey(attributionKey) {
+    return attributionKey.startsWith('unknown::');
+}
+/** Compose the ELI16 alert text for Telegram. No backticks, no camelCase config keys, narrative tone. */
+export function composeAlertText(event, attributionKey, trigger) {
+    const friendlyName = humanize(attributionKey);
+    const triggerNarrative = trigger === 'absolute-share'
+        ? 'is using more than a quarter of the agent\'s total token budget over the last day'
+        : trigger === 'baseline-divergence'
+            ? 'has more than doubled its normal rate in the last hour, and the absolute amount is large enough to matter'
+            : 'crossed one of the burn thresholds';
+    return (`Heads up: ${friendlyName} ${triggerNarrative}.\n\n` +
+        `${event.reason}\n\n` +
+        `${event.impact}`);
+}
+function humanize(attributionKey) {
+    if (attributionKey.startsWith('unknown::'))
+        return 'an unknown component';
+    if (attributionKey.startsWith('user-job:')) {
+        const m = /^user-job:([^:]+)/.exec(attributionKey);
+        return m ? `your scheduled job "${m[1]}"` : 'a scheduled job';
+    }
+    if (attributionKey.startsWith('user-hook:')) {
+        const m = /^user-hook:([^:]+)/.exec(attributionKey);
+        return m ? `your hook "${m[1]}"` : 'a hook';
+    }
+    const m = /^([^:]+)::/.exec(attributionKey);
+    return m ? `the ${m[1]} component` : attributionKey;
+}
+//# sourceMappingURL=BurnThrottleRunbook.js.map

package/dist/monitoring/BurnThrottleRunbook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BurnThrottleRunbook.js","sourceRoot":"","sources":["../../src/monitoring/BurnThrottleRunbook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAoBH,MAAM,CAAC,MAAM,4BAA4B,GAAuB;IAC9D,YAAY,EAAE,IAAI;IAClB,qBAAqB,EAAE,KAAK;IAC5B,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;CACnC,CAAC;AAkCF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAEtD,MAAM,OAAO,mBAAmB;IACb,IAAI,CAAc;IAClB,MAAM,CAAqB;IAC3B,YAAY,CAAkC;IAC9C,YAAY,CAAS;IACrB,GAAG,CAAe;IAEnC,YAAY,IAA6B;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,4BAA4B,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;QAC9C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAuB;QAC5B,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,cAAc,EAAE,CAAC;QAExD,uEAAuE;QACvE,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,cAAc,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,YAAY,CACf,6EAA6E;gBAC7E,IAAI,cAAc,6DAA6D;gBAC/E,kFAAkF;gBAClF,sEAAsE,CACvE,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,6BAA6B;gBACnC,cAAc;gBACd,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,+FAA+F;aACxG,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QAEnE,2CAA2C;QAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO;gBACL,IAAI,EAAE,4BAA4B;gBAClC,cAAc;gBACd,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,2EAA2E;aACpF,CAAC;QACJ,CAAC;QAED,gFAAgF;QAChF,IAAI,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACvE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,cAAc;gBACd,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,2FAA2F;aACpG,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;YAC7C,cAAc;YACd,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;YAC1C,MAAM,EAAE,cAAc;YACtB,QAAQ;SACT,CAAC,IAAI,SAAS,CAAC;QAEhB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;gBACzC,cAAc;gBACd,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAC1C,MAAM,EAAE,GAAG,OAAO,iEAAiE;gBACnF,MAAM,EAAE,cAAc;gBACtB,QAAQ;gBACR,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,GAAG,SAAS,0EAA0E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACnN,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,cAAc;gBACd,SAAS;gBACT,OAAO;gBACP,QAAQ;gBACR,MAAM,EAAE,iCAAiC;aAC1C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,YAAY,CAAC,GAAG,SAAS,mHAAmH,CAAC,CAAC;YACnJ,OAAO;gBACL,IAAI,EAAE,iBAAiB;gBACvB,cAAc;gBACd,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,4BAA6B,GAAa,CAAC,OAAO,EAAE;aAC7D,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC/B,IAAI,CAAC;YACH,sEAAsE;YACtE,qEAAqE;YACrE,iEAAiE;YACjE,kBAAkB;YAClB,KAAK,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;CACF;AAED,6DAA6D;AAE7D;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAuB;IAC3D,MAAM,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAuB;IACpD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACvE,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACvE,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,cAAsB;IACjD,OAAO,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChD,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,gBAAgB,CAAC,KAAuB,EAAE,cAAsB,EAAE,OAAe;IAC/F,MAAM,YAAY,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GACpB,OAAO,KAAK,gBAAgB;QAC1B,CAAC,CAAC,mFAAmF;QACrF,CAAC,CAAC,OAAO,KAAK,qBAAqB;YACnC,CAAC,CAAC,2GAA2G;YAC7G,CAAC,CAAC,oCAAoC,CAAC;IAC3C,OAAO,CACL,aAAa,YAAY,IAAI,gBAAgB,OAAO;QACpD,GAAG,KAAK,CAAC,MAAM,MAAM;QACrB,GAAG,KAAK,CAAC,MAAM,EAAE,CAClB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,cAAsB;IACtC,IAAI,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC1E,IAAI,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAChE,CAAC;IACD,IAAI,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9C,CAAC;IACD,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC;AACtD,CAAC"}