instar 1.3.269 → 1.3.271

package/dist/coordination/ReviewExchange.js

@@ -0,0 +1,192 @@
+/**
+ * ReviewExchange — the autonomous code-review protocol (spec §7 G2.3).
+ *
+ * A ReviewExchange is one mutual, mandate-gated sign-off of a review artifact
+ * between the two agents named in a Coordination Mandate. It is how Phase-1's
+ * "code-owner review" happens WITHOUT the human relaying: the owner agent delivers
+ * a review package over Threadline, the peer reviews and returns an authenticated
+ * verdict, and BOTH sign-offs are checked against the mandate's `sign-code-review`
+ * authority (bounds e.g. `{ artifact: 'migration-port', mutual: true }`) before
+ * they are accepted. Every accepted signature carries the audit hash of the gate
+ * decision that authorized it — the trail Justin reviews.
+ *
+ * Asymmetry, stated honestly: the peer's instance may not run this engine yet, so
+ * the peer's "signature" is their authenticated Threadline verdict message
+ * (Ed25519-authenticated sender → fingerprint), recorded verbatim by reference —
+ * kind 'authenticated-peer-verdict'. The local agent's signature goes through the
+ * local gate — kind 'mandate-gated-local'. BOTH are gate-evaluated here (named
+ * party, bounds, expiry, revocation), so a stranger's verdict or an out-of-bounds
+ * artifact is refused identically.
+ *
+ * State machine (linear, no skips):
+ *   proposed → delivered → verdict-recorded → complete
+ *                      ↘ changes-requested (terminal: rework = a NEW exchange)
+ *
+ * The review package is content-addressed: `packageSha256` is fixed at creation
+ * and signatures bind to the record that carries it — a different package is a
+ * different exchange. Deny-by-default is inherited: with no mandate issued, every
+ * sign/verdict path denies.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+const SHA256_HEX = /^[0-9a-f]{64}$/;
+export class ReviewExchangeEngine {
+    d;
+    constructor(deps) {
+        this.d = deps;
+    }
+    nowIso() {
+        return new Date(this.d.now ? this.d.now() : Date.now()).toISOString();
+    }
+    readAll() {
+        try {
+            const raw = JSON.parse(fs.readFileSync(this.d.filePath, 'utf8'));
+            return Array.isArray(raw) ? raw : [];
+        }
+        catch { /* @silent-fallback-ok — exchanges file may not exist yet; an empty list is the safe initial state */
+            return [];
+        }
+    }
+    writeAll(records) {
+        fs.mkdirSync(path.dirname(this.d.filePath), { recursive: true });
+        fs.writeFileSync(this.d.filePath, JSON.stringify(records, null, 2));
+    }
+    save(record) {
+        record.updatedAt = this.nowIso();
+        const all = this.readAll().filter((r) => r.id !== record.id);
+        all.push(record);
+        this.writeAll(all);
+        return record;
+    }
+    /** Evaluate `sign-code-review` for one party through the mandate gate. */
+    gateSignOff(record, agentFp) {
+        return this.d.gate.evaluate({
+            action: 'sign-code-review',
+            params: { artifact: record.artifact, mutual: true },
+            agentFp,
+            mandateId: record.mandateId,
+        });
+    }
+    /** Create a new exchange in `proposed`. Validation only — no gate call yet
+     *  (creating a record delegates nothing; the sign-offs are what the mandate governs). */
+    create(input) {
+        if (!SHA256_HEX.test(input.packageSha256)) {
+            return { ok: false, reason: 'packageSha256 must be a 64-char lowercase sha256 hex digest' };
+        }
+        if (!input.artifact || !input.packageRef || !input.mandateId) {
+            return { ok: false, reason: 'mandateId, artifact, and packageRef are required' };
+        }
+        if (!Array.isArray(input.parties) || input.parties.length !== 2 || input.parties[0] === input.parties[1]) {
+            return { ok: false, reason: 'parties must be two DISTINCT agent fingerprints [ownerFp, peerFp]' };
+        }
+        const id = input.id ?? (this.d.genId ? this.d.genId() : `rex-${Math.random().toString(36).slice(2, 10)}`);
+        if (this.get(id))
+            return { ok: false, reason: `exchange "${id}" already exists` };
+        const now = this.nowIso();
+        const record = {
+            id, mandateId: input.mandateId, artifact: input.artifact,
+            packageRef: input.packageRef, packageSha256: input.packageSha256,
+            parties: input.parties, state: 'proposed',
+            deliveredEvidence: null, peerVerdict: null, signatures: [],
+            createdAt: now, updatedAt: now,
+        };
+        return { ok: true, record: this.save(record) };
+    }
+    /** proposed → delivered. Records the delivery evidence (Threadline message ref). */
+    markDelivered(id, evidence) {
+        const record = this.get(id);
+        if (!record)
+            return { ok: false, reason: `exchange "${id}" not found` };
+        if (record.state !== 'proposed') {
+            return { ok: false, reason: `cannot mark delivered from state "${record.state}" (must be "proposed")` };
+        }
+        if (!evidence)
+            return { ok: false, reason: 'delivery evidence is required' };
+        record.state = 'delivered';
+        record.deliveredEvidence = evidence;
+        return { ok: true, record: this.save(record) };
+    }
+    /**
+     * delivered → verdict-recorded | changes-requested.
+     *
+     * Records the PEER's authenticated verdict. An 'approve' verdict IS the peer's
+     * sign-off, so it is MANDATE-GATED for the peer's fingerprint (named party,
+     * bounds, expiry, revocation — a deny refuses the verdict). A 'request-changes'
+     * verdict delegates nothing (it is a refusal), so it is recorded ungated — but
+     * only from the exchange's named peer.
+     */
+    recordPeerVerdict(id, input) {
+        const record = this.get(id);
+        if (!record)
+            return { ok: false, reason: `exchange "${id}" not found` };
+        if (record.state !== 'delivered') {
+            return { ok: false, reason: `cannot record a verdict from state "${record.state}" (must be "delivered")` };
+        }
+        if (input.peerFp !== record.parties[1]) {
+            return { ok: false, reason: `agent ${input.peerFp} is not the named peer reviewer of this exchange` };
+        }
+        if (!input.evidence || !input.summary) {
+            return { ok: false, reason: 'verdict summary and authenticated evidence ref are required' };
+        }
+        const verdict = {
+            verdict: input.verdict, summary: input.summary,
+            evidence: input.evidence, recordedAt: this.nowIso(),
+        };
+        if (input.verdict === 'request-changes') {
+            record.state = 'changes-requested';
+            record.peerVerdict = verdict;
+            return { ok: true, record: this.save(record) };
+        }
+        // approve = the peer's sign-off → through the mandate gate.
+        const decision = this.gateSignOff(record, input.peerFp);
+        if (decision.decision === 'deny') {
+            return { ok: false, reason: `mandate denied the peer sign-off: ${decision.reason}` };
+        }
+        record.state = 'verdict-recorded';
+        record.peerVerdict = verdict;
+        record.signatures.push({
+            agentFp: input.peerFp, signedAt: this.nowIso(),
+            kind: 'authenticated-peer-verdict', auditHash: decision.audit.hash,
+            evidence: input.evidence,
+        });
+        return { ok: true, record: this.save(record) };
+    }
+    /**
+     * verdict-recorded → complete. The OWNER's countersignature, mandate-gated for
+     * the owner's fingerprint. Completion requires the mutual pair: the peer's
+     * approve-signature already present + this one.
+     */
+    sign(id, agentFp) {
+        const record = this.get(id);
+        if (!record)
+            return { ok: false, reason: `exchange "${id}" not found` };
+        if (record.state !== 'verdict-recorded') {
+            return { ok: false, reason: `cannot sign from state "${record.state}" (must be "verdict-recorded")` };
+        }
+        if (agentFp !== record.parties[0]) {
+            return { ok: false, reason: `agent ${agentFp} is not the named owner of this exchange` };
+        }
+        if (record.signatures.some((s) => s.agentFp === agentFp)) {
+            return { ok: false, reason: 'owner has already signed this exchange' };
+        }
+        const decision = this.gateSignOff(record, agentFp);
+        if (decision.decision === 'deny') {
+            return { ok: false, reason: `mandate denied the owner sign-off: ${decision.reason}` };
+        }
+        record.signatures.push({
+            agentFp, signedAt: this.nowIso(),
+            kind: 'mandate-gated-local', auditHash: decision.audit.hash,
+            evidence: null,
+        });
+        // Mutual bound satisfied: both named parties have gate-authorized signatures.
+        record.state = 'complete';
+        return { ok: true, record: this.save(record) };
+    }
+    get(id) {
+        return this.readAll().find((r) => r.id === id);
+    }
+    list() {
+        return this.readAll();
+    }
+}
+//# sourceMappingURL=ReviewExchange.js.map

package/dist/coordination/ReviewExchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReviewExchange.js","sourceRoot":"","sources":["../../src/coordination/ReviewExchange.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA6E7B,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC,MAAM,OAAO,oBAAoB;IACd,CAAC,CAA2B;IAC7C,YAAY,IAA8B;QACxC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IAEO,MAAM;QACZ,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC,CAAC,qGAAqG;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC9H,CAAC;IAEO,QAAQ,CAAC,OAA+B;QAC9C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAEO,IAAI,CAAC,MAA4B;QACvC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAClE,WAAW,CAAC,MAA4B,EAAE,OAAe;QAC/D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC1B,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;YACnD,OAAO;YACP,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;6FACyF;IACzF,MAAM,CAAC,KAA0B;QAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACzG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC;QACpG,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC;QAClF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAyB;YACnC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxD,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;YAChE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU;YACzC,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;YAC1D,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;SAC/B,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,oFAAoF;IACpF,aAAa,CAAC,EAAU,EAAE,QAAgB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,MAAM,CAAC,KAAK,wBAAwB,EAAE,CAAC;QAC1G,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QAC7E,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC;QAC3B,MAAM,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;;;;;;;OAQG;IACH,iBAAiB,CACf,EAAU,EACV,KAAoG;QAEpG,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,MAAM,CAAC,KAAK,yBAAyB,EAAE,CAAC;QAC7G,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,KAAK,CAAC,MAAM,kDAAkD,EAAE,CAAC;QACxG,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QAC9F,CAAC;QACD,MAAM,OAAO,GAAgB;YAC3B,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE;SACpD,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,GAAG,mBAAmB,CAAC;YACnC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,kBAAkB,CAAC;QAClC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC;QAC7B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YACrB,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;YAC9C,IAAI,EAAE,4BAA4B,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;YAClE,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,EAAU,EAAE,OAAe;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,MAAM,CAAC,KAAK,gCAAgC,EAAE,CAAC;QACxG,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,OAAO,0CAA0C,EAAE,CAAC;QAC3F,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QACzE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACxF,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YACrB,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;YAChC,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;YAC3D,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,8EAA8E;QAC9E,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/coordination/conditions.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Conditions registry — named, objective predicates that gate high-risk authorities.
+ *
+ * Structure > Willpower applied to delegation: a conditioned authority (e.g. a
+ * future `execute-cutover`) fires ONLY when its named condition evaluates true from
+ * REAL state — `integrity-gate-pass` ← `runIntegrityGate().passed`,
+ * `parity-zero-divergence` ← `ParityMonitor.gate().cleared`. The agent's assertion
+ * that "it's safe" is NEVER the input; the objective check is (threat-model T7/T10).
+ *
+ * Resolvers are INJECTED so this module stays decoupled from the integrity/parity
+ * machinery. A condition with no wired resolver evaluates **false** (deny-safe): an
+ * un-evaluable gate must never fall open. The first mandate (Justin's A/A/B) carries
+ * NO conditioned authority, so nothing here is exercised yet — it is built for the
+ * future cutover authority and tested on both sides of the boundary.
+ */
+/** A resolver returns the live truth of a condition from real state. */
+export type ConditionResolver = () => boolean;
+export declare class ConditionsRegistry {
+    private readonly resolvers;
+    /** Register (or replace) the resolver for a named condition. */
+    register(name: string, resolver: ConditionResolver): this;
+    /** True iff the condition is registered. */
+    has(name: string): boolean;
+    /**
+     * Evaluate a (possibly compound) condition. A `+`-joined expression
+     * (e.g. 'integrity-gate-pass+parity-zero-divergence') is the AND of its parts —
+     * ALL must resolve true. An unregistered part → false (deny-safe). Any resolver
+     * that throws → false (deny-safe).
+     */
+    evaluate(expr: string): boolean;
+}
+//# sourceMappingURL=conditions.d.ts.map

package/dist/coordination/conditions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditions.d.ts","sourceRoot":"","sources":["../../src/coordination/conditions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,wEAAwE;AACxE,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC;AAE9C,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;IAElE,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,IAAI;IAKzD,4CAA4C;IAC5C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAYhC"}

package/dist/coordination/conditions.js

@@ -0,0 +1,54 @@
+/**
+ * Conditions registry — named, objective predicates that gate high-risk authorities.
+ *
+ * Structure > Willpower applied to delegation: a conditioned authority (e.g. a
+ * future `execute-cutover`) fires ONLY when its named condition evaluates true from
+ * REAL state — `integrity-gate-pass` ← `runIntegrityGate().passed`,
+ * `parity-zero-divergence` ← `ParityMonitor.gate().cleared`. The agent's assertion
+ * that "it's safe" is NEVER the input; the objective check is (threat-model T7/T10).
+ *
+ * Resolvers are INJECTED so this module stays decoupled from the integrity/parity
+ * machinery. A condition with no wired resolver evaluates **false** (deny-safe): an
+ * un-evaluable gate must never fall open. The first mandate (Justin's A/A/B) carries
+ * NO conditioned authority, so nothing here is exercised yet — it is built for the
+ * future cutover authority and tested on both sides of the boundary.
+ */
+export class ConditionsRegistry {
+    resolvers = new Map();
+    /** Register (or replace) the resolver for a named condition. */
+    register(name, resolver) {
+        this.resolvers.set(name, resolver);
+        return this;
+    }
+    /** True iff the condition is registered. */
+    has(name) {
+        return this.resolvers.has(name);
+    }
+    /**
+     * Evaluate a (possibly compound) condition. A `+`-joined expression
+     * (e.g. 'integrity-gate-pass+parity-zero-divergence') is the AND of its parts —
+     * ALL must resolve true. An unregistered part → false (deny-safe). Any resolver
+     * that throws → false (deny-safe).
+     */
+    evaluate(expr) {
+        const parts = expr.split('+').map((p) => p.trim()).filter(Boolean);
+        if (parts.length === 0)
+            return false;
+        for (const part of parts) {
+            const resolver = this.resolvers.get(part);
+            if (!resolver)
+                return false;
+            let result;
+            try {
+                result = resolver() === true;
+            }
+            catch {
+                result = false;
+            }
+            if (!result)
+                return false;
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=conditions.js.map

package/dist/coordination/conditions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditions.js","sourceRoot":"","sources":["../../src/coordination/conditions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,MAAM,OAAO,kBAAkB;IACZ,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IAElE,gEAAgE;IAChE,QAAQ,CAAC,IAAY,EAAE,QAA2B;QAChD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4CAA4C;IAC5C,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,IAAY;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5B,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,MAAM,GAAG,QAAQ,EAAE,KAAK,IAAI,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,GAAG,KAAK,CAAC;YAAC,CAAC;YAC/D,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/coordination/types.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Coordination Mandate — shared types.
+ *
+ * A Coordination Mandate is a human-authored, signed, bounded, conditioned,
+ * revocable, audited delegation of SPECIFIC authorities to a SPECIFIC pair of
+ * agents for a SPECIFIC purpose and bounded time. It moves the human's
+ * authorization from per-action to standing-policy WITHOUT removing the human as
+ * the authorizer — preserving `requester ≠ authorizer` (the agent is the
+ * requester; the human-authored mandate is the authorizer).
+ *
+ * Spec: docs/specs/coordination-mandate.md (§4 concrete shape). The first mandate's
+ * resolved bounds (Justin's A/A/B sign-off, 2026-06-05): cutover stays his manual
+ * click; issuance is dashboard-PIN-gated; the first mandate carries only authorities
+ * 1–2 (exchange-read-credential + sign-code-review), NOT execute-cutover.
+ */
+/** A single delegated authority within a mandate. */
+export interface Authority {
+    /** The action this authority permits, e.g. 'exchange-read-credential' | 'sign-code-review' | 'execute-cutover'. */
+    action: string;
+    /** Explicit bounds the action's params must satisfy (exact-match per key). */
+    bounds: Record<string, unknown>;
+    /** Optional objective gate that must evaluate true before the action is allowed,
+     *  e.g. 'integrity-gate-pass' | 'parity-zero-divergence'. Resolved from REAL state,
+     *  never from an agent's assertion. */
+    requiresCondition?: string;
+}
+/** The human-authored delegation. `authProof` covers all other fields. */
+export interface CoordinationMandate {
+    id: string;
+    /** e.g. 'feedback-migration'. */
+    scope: string;
+    /** The two agents bound by the mandate, by routing fingerprint. */
+    agents: [string, string];
+    authorities: Authority[];
+    /** Always the human author identifier (e.g. 'justin'). */
+    author: string;
+    createdAt: string;
+    expiresAt: string;
+    /** Set when revoked; checked on every action. */
+    revoked: {
+        at: string;
+        reason: string;
+    } | null;
+    /** Authorship proof — an HMAC over the canonical (proof-excluded) mandate bytes,
+     *  produced ONLY by the PIN-gated issuance path. An agent cannot mint or widen its
+     *  own mandate without it; a forged/edited mandate fails verification. */
+    authProof: string;
+}
+export type MandateDecision = 'allow' | 'deny';
+/** The input to a gate evaluation — what the agent is asking to do. */
+export interface MandateEvaluation {
+    action: string;
+    params: Record<string, unknown>;
+    /** The calling agent's routing fingerprint (must be a named party). */
+    agentFp: string;
+    mandateId: string;
+}
+/** A single audited gate decision (one row of the hash-chained audit). */
+export interface MandateAuditEntry {
+    ts: string;
+    mandateId: string;
+    agentFp: string;
+    action: string;
+    decision: MandateDecision;
+    /** Human-readable reason — which check passed/failed. */
+    reason: string;
+    /** The condition result when a `requiresCondition` was evaluated (else null). */
+    conditionResult: boolean | null;
+    /** Hash of the previous entry (genesis = ''), making the log tamper-evident (T8). */
+    prevHash: string;
+    /** sha256(prevHash + canonical(this-entry-without-hash)). */
+    hash: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/coordination/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/coordination/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACxB,mHAAmH;IACnH,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC;;2CAEuC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C;;8EAE0E;IAC1E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAE/C,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,eAAe,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;CACd"}

package/dist/coordination/types.js

@@ -0,0 +1,17 @@
+/**
+ * Coordination Mandate — shared types.
+ *
+ * A Coordination Mandate is a human-authored, signed, bounded, conditioned,
+ * revocable, audited delegation of SPECIFIC authorities to a SPECIFIC pair of
+ * agents for a SPECIFIC purpose and bounded time. It moves the human's
+ * authorization from per-action to standing-policy WITHOUT removing the human as
+ * the authorizer — preserving `requester ≠ authorizer` (the agent is the
+ * requester; the human-authored mandate is the authorizer).
+ *
+ * Spec: docs/specs/coordination-mandate.md (§4 concrete shape). The first mandate's
+ * resolved bounds (Justin's A/A/B sign-off, 2026-06-05): cutover stays his manual
+ * click; issuance is dashboard-PIN-gated; the first mandate carries only authorities
+ * 1–2 (exchange-read-credential + sign-code-review), NOT execute-cutover.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/coordination/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/coordination/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/core/ApprovalLedger.d.ts

@@ -0,0 +1,132 @@
+/**
+ * ApprovalLedger — the durable, signed, append-only record of every operator
+ * approval decision, and the per-class agreement ratios computed from it.
+ *
+ * This is Phase 2 of the approved "Approval-as-Data" spec
+ * (`docs/specs/AUTONOMOUS-OPERATION-JUDGMENT-AND-APPROVAL-AS-DATA-SPEC.md`, Part B):
+ * an approval stops being a one-shot "approved" with no memory and becomes data —
+ * recorded as `approved-as-is` vs `approved-with-change` vs `rejected`, with the
+ * WHY of each divergence, so we can (a) see per decision-class where the operator
+ * agrees with the agent's recommendation as-is vs revises it, (b) trend toward
+ * approved-as-is by folding recurring divergences back into design guidance, and
+ * (c) — once a class's ratio holds — pilot auto-approval for that class (Phase 3).
+ *
+ * SCOPE (operator extension, 2026-06-05): the original spec tracked only official
+ * SPEC sign-offs. Justin extended it to track ALL approvals wherever they occur —
+ * a spec sign-off, a decision presented and approved in chat, or any other surface.
+ * Hence `subject`/`decisionClass`/`surface` (general) rather than `specSlug`/
+ * `specClass`, and the spec-only fields (`reviewIterations`/`commitSha`/`evidenceRef`)
+ * are optional — a chat approval simply omits them.
+ *
+ * Mirrors `SessionPoolE2EResultStore` exactly (signed, append-only, tamper-evident,
+ * torn-line-tolerant). The store is signer-agnostic — `sign`/`verifySig` are injected
+ * — so tests use an Ed25519 keypair and production uses an HMAC over the state secret.
+ *
+ * AUTHORITY INVARIANT (spec B1, load-bearing for correctness — NOT just integrity):
+ * for a MANUAL decision the OPERATOR is the authoritative source of `mode` and
+ * `divergences`. The agent must NEVER self-classify the operator's intent. The
+ * writer passes the operator-sourced classification (from the approve control / an
+ * explicit "as-is" vs "with changes: …"); this store records it faithfully. HMAC/
+ * signature guarantees integrity, not correctness — the authoritative-source rule
+ * is what prevents an agent inflating its own agreement ratio. An operator can
+ * dispute and CORRECT any row: a correction is itself an appended, signed row
+ * (`corrects` set), never an in-place edit — history preserved.
+ */
+export type ApprovalMode = 'approved-as-is' | 'approved-with-change' | 'rejected';
+/** Where the approval happened (operator-extension axis — "wherever they occur"). */
+export type ApprovalSurface = 'spec' | 'chat' | 'other';
+export declare const APPROVAL_SURFACES: readonly ApprovalSurface[];
+/** Divergence taxonomy (spec B2). `missing-principle` is a candidate trigger to
+ *  propose a new design principle — a PROPOSAL only, never auto-merged (Part C). */
+export type DivergenceCategory = 'missing-principle' | 'risk-reduction' | 'scope-correction' | 'efficiency' | 'new-information' | 'style';
+export declare const DIVERGENCE_CATEGORIES: readonly DivergenceCategory[];
+export interface Divergence {
+    category: DivergenceCategory;
+    /** One-line what-changed. */
+    summary: string;
+    /** Why the operator changed it — the signal we fold back into design guidance. */
+    why: string;
+}
+export interface ApprovalRecord {
+    /** What was approved — a spec slug, or a stable id for a chat recommendation. */
+    subject: string;
+    /** The bucket the ratio is computed per (e.g. 'governance-safety', 'design-decision'). */
+    decisionClass: string;
+    /** Where the approval occurred. */
+    surface: ApprovalSurface;
+    decidedAt: string;
+    /** 'justin' for a manual decision; 'auto' for an auto-approval (Phase 3). */
+    approver: string;
+    mode: ApprovalMode;
+    /** Empty when approved-as-is; one entry per operator-stated change otherwise. */
+    divergences: Divergence[];
+    /** Spec-context fields — optional (a chat approval omits them). */
+    reviewIterations?: number;
+    commitSha?: string;
+    evidenceRef?: string;
+    /** Set when this row CORRECTS a prior row (operator dispute) — the prior subject+decidedAt. */
+    corrects?: string;
+    signature: string;
+}
+export type ApprovalRecordInput = Omit<ApprovalRecord, 'signature' | 'decidedAt' | 'divergences'> & {
+    decidedAt?: string;
+    divergences?: Divergence[];
+};
+export interface ApprovalLedgerDeps {
+    /** Absolute path to the append-only ledger file. */
+    filePath: string;
+    /** Sign the canonical (signature-excluded) row. Production: HMAC over the state secret. */
+    sign: (canonical: string) => string;
+    /** Verify a signature against the canonical row. */
+    verifySig: (canonical: string, signature: string) => boolean;
+    now?: () => number;
+}
+/** Eligibility knobs for `autoApprovalEligible` (a read-only SIGNAL; never gates here). */
+export interface EligibilityPolicy {
+    /** Minimum approved-as-is ratio for a class to be auto-approval-eligible. */
+    minRatio: number;
+    /** Minimum CURRENT consecutive approved-as-is streak. */
+    minStreak: number;
+    /** Minimum total decisions in the class (don't qualify on a tiny sample). */
+    minTotal: number;
+}
+export declare const DEFAULT_ELIGIBILITY: EligibilityPolicy;
+export interface ClassSummary {
+    decisionClass: string;
+    total: number;
+    approvedAsIs: number;
+    approvedWithChange: number;
+    rejected: number;
+    /** approvedAsIs / total (0 when total is 0). */
+    ratio: number;
+    /** CURRENT consecutive approved-as-is run (most recent rows), reset to 0 by any
+     *  approved-with-change or rejected (spec B3). */
+    streak: number;
+    autoApprovalEligible: boolean;
+    /** Aggregate divergence-category counts for the class (drives the Phase-3 digest). */
+    divergenceCounts: Record<DivergenceCategory, number>;
+}
+/** Canonical bytes a row's signature covers — field-ordered, signature EXCLUDED.
+ *  Optional fields are normalized so a present-vs-absent field is unambiguous, and
+ *  divergences are flattened deterministically so reordering is detectable. */
+export declare function canonicalApprovalRow(r: Omit<ApprovalRecord, 'signature'>): string;
+export declare class ApprovalLedger {
+    private readonly d;
+    constructor(deps: ApprovalLedgerDeps);
+    /**
+     * Append a signed approval row. The `mode` + `divergences` MUST be operator-sourced
+     * (the authority invariant above) — this method does not infer them.
+     * Throws on an internally-inconsistent row so a malformed record can't pollute ratios.
+     */
+    recordApproval(input: ApprovalRecordInput): ApprovalRecord;
+    /** All rows (oldest→newest). Tolerant of a missing file / a torn trailing line. */
+    all(): ApprovalRecord[];
+    /** Verify a row's signature (tamper check). */
+    verify(row: ApprovalRecord): boolean;
+    /** Per-class agreement summary. Read-only; never gates by itself (spec B3). */
+    summarize(policy?: EligibilityPolicy): ClassSummary[];
+    /** Summary for one class (returns a zeroed summary if the class has no rows). */
+    summaryForClass(decisionClass: string, policy?: EligibilityPolicy): ClassSummary;
+    private summarizeRows;
+}
+//# sourceMappingURL=ApprovalLedger.d.ts.map

package/dist/core/ApprovalLedger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApprovalLedger.d.ts","sourceRoot":"","sources":["../../src/core/ApprovalLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAKH,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,sBAAsB,GAAG,UAAU,CAAC;AAElF,qFAAqF;AACrF,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAExD,eAAO,MAAM,iBAAiB,EAAE,SAAS,eAAe,EAAuC,CAAC;AAEhG;oFACoF;AACpF,MAAM,MAAM,kBAAkB,GAC1B,mBAAmB,GACnB,gBAAgB,GAChB,kBAAkB,GAClB,YAAY,GACZ,iBAAiB,GACjB,OAAO,CAAC;AAEZ,eAAO,MAAM,qBAAqB,EAAE,SAAS,kBAAkB,EAGrD,CAAC;AAEX,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,aAAa,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,OAAO,EAAE,eAAe,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,iFAAiF;IACjF,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,mBAAmB,GAC7B,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,WAAW,GAAG,aAAa,CAAC,GAC7D;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,2FAA2F;IAC3F,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,oDAAoD;IACpD,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,2FAA2F;AAC3F,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,mBAAmB,EAAE,iBAAgE,CAAC;AAEnG,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd;sDACkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,OAAO,CAAC;IAC9B,sFAAsF;IACtF,gBAAgB,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;CACtD;AAED;;+EAE+E;AAC/E,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,GAAG,MAAM,CAcjF;AASD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAqB;gBAC3B,IAAI,EAAE,kBAAkB;IAIpC;;;;OAIG;IACH,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc;IA4C1D,mFAAmF;IACnF,GAAG,IAAI,cAAc,EAAE;IAWvB,+CAA+C;IAC/C,MAAM,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO;IAKpC,+EAA+E;IAC/E,SAAS,CAAC,MAAM,GAAE,iBAAuC,GAAG,YAAY,EAAE;IAgB1E,iFAAiF;IACjF,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,GAAE,iBAAuC,GAAG,YAAY;IAKrG,OAAO,CAAC,aAAa;CAwBtB"}