instar 1.3.448 → 1.3.449

package/dist/permissions/RelationshipAnomalyScorer.d.ts

@@ -64,6 +64,30 @@ export interface RelationshipAnomalyConfig {
      * (no character yet → no out-of-character). Default 5.
      */
     establishedMin?: number;
+    /**
+     * Minimum baseline calendar AGE (days) before a baseline counts as "established"
+     * (poisoning-resistance #3a). "Established" now requires BOTH this age AND
+     * `establishedMin` count — so a patient attacker can't rapidly manufacture a
+     * trusted baseline in a single burst (a high COUNT accrued in minutes is still
+     * YOUNG → not established → the action/tier/style signals stay suppressed, and the
+     * scorer never gains false confidence from a rapid burst). Default 7 days.
+     * Set to 0 to require count only (legacy behavior). Backward-compat: a profile
+     * whose firstSeen predates the request by ≥ this age satisfies it automatically.
+     */
+    minBaselineAgeDays?: number;
+    /**
+     * Decay half-life in bucket-windows for the recency weighting (#2). A recent burst
+     * of attacker observations decays relative to long-standing behavior. Default 30
+     * (≈30 days at the store's 1-day bucket). Larger = slower decay (older behavior
+     * keeps weight longer). Read-time only; the store records raw counts.
+     */
+    decayHalfLifeWindows?: number;
+    /**
+     * Bucket-window length (ms) the baseline was recorded with. Must match the store's
+     * `bucketWindowMs`. Default reads from the store; falls back to 1 day. Exposed for
+     * tests that inject a custom window.
+     */
+    bucketMs?: number;
     /**
      * Share floor for the out-of-character-action signal (poisoning resistance).
      * The signal fires when the requested action's SHARE of the principal's history is

package/dist/permissions/RelationshipAnomalyScorer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RelationshipAnomalyScorer.d.ts","sourceRoot":"","sources":["../../src/permissions/RelationshipAnomalyScorer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EACL,yBAAyB,EAIzB,KAAK,wBAAwB,EAC9B,MAAM,gCAAgC,CAAC;AAKxC,+FAA+F;AAC/F,MAAM,WAAW,yBAAyB;IACxC,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yDAAyD;IACzD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAQD,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAEsE;gBAE9E,KAAK,EAAE,yBAAyB,EAAE,MAAM,GAAE,yBAA8B;IAmBpF;;;;;;;;OAQG;IACG,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA6BnG;;;;OAIG;IACH,kBAAkB,CAChB,OAAO,EAAE,wBAAwB,GAAG,SAAS,EAC7C,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,MAAM,GACX;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;KAAE;IA6FvF;;;;OAIG;YACW,WAAW;CAuC1B"}
+{"version":3,"file":"RelationshipAnomalyScorer.d.ts","sourceRoot":"","sources":["../../src/permissions/RelationshipAnomalyScorer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EACL,yBAAyB,EAOzB,KAAK,wBAAwB,EAE9B,MAAM,gCAAgC,CAAC;AAKxC,+FAA+F;AAC/F,MAAM,WAAW,yBAAyB;IACxC,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yDAAyD;IACzD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAQD,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAEsE;gBAE9E,KAAK,EAAE,yBAAyB,EAAE,MAAM,GAAE,yBAA8B;IAwBpF;;;;;;;;OAQG;IACG,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA6BnG;;;;OAIG;IACH,kBAAkB,CAChB,OAAO,EAAE,wBAAwB,GAAG,SAAS,EAC7C,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,MAAM,GACX;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;KAAE;IAgJvF;;;;OAIG;YACW,WAAW;CAyC1B"}

package/dist/permissions/RelationshipAnomalyScorer.js

@@ -43,7 +43,7 @@
  *
  * Design: docs/specs/SLACK-ORG-INTEGRATION-SPEC.md §7.1–7.4, §7.6.
  */
-import { meanLength, stdLength, hourFraction, } from './RelationshipBehaviorStore.js';
+import { baselineAgeMs, decayedView, decayedMeanLength, decayedStdLength, decayedHourFraction, DEFAULT_BUCKET_MS, } from './RelationshipBehaviorStore.js';
 const URGENCY = /\b(urgent|urgently|asap|right now|immediately|before eod|by eod|end of day|emergency|hurry|quickly|can'?t wait)\b/i;
 export class RelationshipAnomalyScorer {
     store;
@@ -57,6 +57,11 @@ export class RelationshipAnomalyScorer {
             urgencyWeight: config.urgencyWeight ?? 0.25,
             styleWeight: config.styleWeight ?? 0.2,
             establishedMin: config.establishedMin ?? 5,
+            // #3a: default 7 calendar days. Nullish-coalescing so a deliberate 0 means
+            // "count only" (the legacy pre-hardening behavior).
+            minBaselineAgeDays: config.minBaselineAgeDays ?? 7,
+            decayHalfLifeWindows: config.decayHalfLifeWindows && config.decayHalfLifeWindows > 0 ? config.decayHalfLifeWindows : 30,
+            bucketMs: config.bucketMs && config.bucketMs > 0 ? config.bucketMs : store.bucketWindowMs ?? DEFAULT_BUCKET_MS,
             rareActionShareFloor: config.rareActionShareFloor ?? 0.1,
             styleZThreshold: config.styleZThreshold ?? 2.5,
             offCadenceHourFraction: config.offCadenceHourFraction ?? 0.02,
@@ -110,7 +115,43 @@ export class RelationshipAnomalyScorer {
         if (!profile || profile.interactionCount <= 0) {
             return { score: 0, reasons: [], confidence: 'none' };
         }
-        const established = profile.interactionCount >= this.cfg.establishedMin;
+        const nowMs = this.cfg.now().getTime();
+        // ── Recency/decay view (#2): a decay-weighted SHAPE so a recent attacker burst that
+        // tries to NORMALIZE a rare action is caught — under decay the burst can't durably
+        // dominate, and once it ages out the genuine baseline re-asserts. A pre-hardening
+        // profile (no buckets) yields a decayed view IDENTICAL to its cumulative form. ──
+        const view = decayedView(profile, {
+            nowMs,
+            bucketMs: this.cfg.bucketMs ?? DEFAULT_BUCKET_MS,
+            halfLifeWindows: this.cfg.decayHalfLifeWindows,
+        });
+        // ── The CUMULATIVE view (as a DecayedProfileView with weight 1.0 everywhere) ──
+        // Each established signal evaluates BOTH views and fires on the MORE anomalous one.
+        // This is the load-bearing poisoning-resistance invariant: the hardening only ever
+        // ADDS resistance — it must never DISARM a signal the pre-hardening cumulative baseline
+        // would have fired. A recent rate-capped burst can raise a rare action's *decayed*
+        // share above the floor, but it cannot erase its rarity across the WHOLE relationship
+        // (the cap bounds how much it can inject); the cumulative view preserves that. The
+        // decayed view, conversely, catches "this used to be normal but the recent pattern is
+        // off". Taking the max of the two is strictly stronger than either alone. ──
+        const cumulative = {
+            effectiveCount: profile.interactionCount,
+            actionCounts: profile.actionCounts,
+            tierCounts: profile.tierCounts,
+            hourCounts: profile.hourCounts,
+            lengthSum: profile.lengthSum,
+            lengthSqSum: profile.lengthSqSum,
+            urgentCount: profile.urgentCount,
+        };
+        // ── "Established" now requires BOTH count AND calendar age (#3a) ──
+        // A high-COUNT but YOUNG baseline (a rapid burst) is NOT established → the
+        // action/tier/style signals stay suppressed (no false confidence from a burst).
+        const countEstablished = profile.interactionCount >= this.cfg.establishedMin;
+        const ageDays = baselineAgeMs(profile, nowMs) / (24 * 60 * 60 * 1000);
+        const ageEstablished = this.cfg.minBaselineAgeDays <= 0 || ageDays >= this.cfg.minBaselineAgeDays;
+        const established = countEstablished && ageEstablished;
+        // Confidence reflects depth, but a young baseline is capped at 'low' (we don't trust
+        // a burst-built baseline even if its count is high).
         const confidence = !established
             ? 'low'
             : profile.interactionCount >= this.cfg.establishedMin * 4
@@ -119,30 +160,34 @@ export class RelationshipAnomalyScorer {
         const hits = [];
         // ── 1. Out-of-character ACTION (only when the baseline is established) ──
         if (established) {
-            const seen = profile.actionCounts[intent.action] ?? 0;
-            const total = profile.interactionCount || 1;
-            const share = seen / total;
             const floor = this.cfg.rareActionShareFloor;
-            // Poisoning resistance (Phase-3 adversarial fix): fire when the action is RARE
-            // (share below the floor), not only when never-seen. A patient attacker / slowly-
-            // compromised account can seed a single prior observation to zero out a `seen===0`
-            // check and permanently disable this highest-weight signal; a share floor keeps a
-            // rare-but-poisoned action flagged. Weight scales by how far below the floor the
-            // share sits (full at never-seen, →0 as share→floor) so a genuinely-routine action
-            // never trips it.
-            if (share < floor) {
-                const rarity = 1 - share / floor; // 1.0 when never seen; →0 as share→floor
+            const neverSeen = (profile.actionCounts[intent.action] ?? 0) === 0;
+            // Rarity in each view; fire on the MORE anomalous (lower share = higher rarity).
+            const shareCum = (cumulative.actionCounts[intent.action] ?? 0) / (cumulative.effectiveCount || 1);
+            const shareDec = (view.actionCounts[intent.action] ?? 0) / (view.effectiveCount || 1);
+            const minShare = Math.min(shareCum, shareDec);
+            // Poisoning resistance (#1 share-floor + #2 dual-view max): the action is flagged if it
+            // is rare in EITHER the whole-relationship history OR the recent-weighted window. A
+            // patient attacker can seed a prior observation (defeats `seen===0`) or burst recently
+            // (raises the decayed share), but cannot make the action non-rare in BOTH views without
+            // a sustained campaign the rate cap (#3b) throttles. Weight scales by how far below the
+            // floor the more-anomalous share sits, so a genuinely-routine action never trips it.
+            if (minShare < floor) {
+                const rarity = 1 - minShare / floor; // 1.0 when never seen; →0 as share→floor
                 hits.push({
                     weight: this.cfg.atypicalActionWeight * rarity,
-                    reason: seen === 0
+                    reason: neverSeen
                         ? `out-of-character: established history (${profile.interactionCount} interactions) but never requested "${intent.action}"`
-                        : `out-of-character: "${intent.action}" is rare for this principal (${seen}/${profile.interactionCount} ≈ ${Math.round(share * 100)}%, below the ${Math.round(floor * 100)}% floor)`,
+                        : `out-of-character: "${intent.action}" is rare for this principal (≈ ${Math.round(minShare * 100)}% of history, below the ${Math.round(floor * 100)}% floor)`,
                 });
             }
         }
         // ── 2. Tier ESCALATION — request tier far above the principal's normal ceiling ──
         if (established) {
-            const normalMaxTier = highestRoutineTier(profile);
+            // Use the LOWER ceiling across both views: a recent burst of high-tier obs can't
+            // silently raise the "normal ceiling" and disarm this signal (it stays armed as long
+            // as EITHER the whole-relationship OR the recent-weighted ceiling is low).
+            const normalMaxTier = Math.min(highestRoutineTier(view), highestRoutineTier(cumulative));
             if (intent.tier >= 4 && normalMaxTier <= 2) {
                 hits.push({
                     weight: this.cfg.tierEscalationWeight,
@@ -153,7 +198,10 @@ export class RelationshipAnomalyScorer {
         // ── 3. Off-CADENCE timing — arrival hour this principal almost never uses ──
         if (established) {
             const hour = this.cfg.now().getHours();
-            if (hourFraction(profile, hour) <= this.cfg.offCadenceHourFraction) {
+            // Off-cadence if the hour is rare in EITHER view (a burst at an odd hour can't make
+            // that hour look routine across the whole relationship).
+            const minHourFrac = Math.min(decayedHourFraction(view, hour), decayedHourFraction(cumulative, hour));
+            if (minHourFrac <= this.cfg.offCadenceHourFraction) {
                 hits.push({
                     weight: this.cfg.offCadenceWeight,
                     reason: `off-cadence: request at ${pad2(hour)}:00, an hour this principal almost never operates in`,
@@ -162,8 +210,12 @@ export class RelationshipAnomalyScorer {
         }
         // ── 4. Sudden URGENCY/pressure from someone normally calm ──
         if (isUrgent) {
-            const baselineUrgentRate = profile.interactionCount > 0 ? profile.urgentCount / profile.interactionCount : 0;
-            if (baselineUrgentRate <= 0.15) {
+            // Use the LOWER urgent rate across both views — a recent burst of urgent obs can't
+            // raise the baseline urgent rate enough to mask sudden pressure from a normally-calm
+            // principal (the whole-relationship rate stays low).
+            const urgentRateDec = view.effectiveCount > 0 ? view.urgentCount / view.effectiveCount : 0;
+            const urgentRateCum = cumulative.effectiveCount > 0 ? cumulative.urgentCount / cumulative.effectiveCount : 0;
+            if (Math.min(urgentRateDec, urgentRateCum) <= 0.15) {
                 hits.push({
                     weight: this.cfg.urgencyWeight,
                     reason: 'sudden urgency/pressure language from a normally-calm principal',
@@ -171,17 +223,17 @@ export class RelationshipAnomalyScorer {
             }
         }
         // ── 5. STYLE deviation — message length far outside the normal envelope ──
+        // Fire if the message length is deviant in EITHER view (a recent burst of off-style
+        // messages can't widen the envelope enough to hide a deviation from the whole history).
         if (established) {
-            const mean = meanLength(profile);
-            const std = stdLength(profile);
-            if (mean !== undefined && std !== undefined && std > 0) {
-                const z = Math.abs(((text || '').length - mean) / std);
-                if (z >= this.cfg.styleZThreshold) {
-                    hits.push({
-                        weight: this.cfg.styleWeight,
-                        reason: `style deviation: message length is ${z.toFixed(1)}σ from this principal's norm`,
-                    });
-                }
+            const zDec = lengthZ(text, decayedMeanLength(view), decayedStdLength(view));
+            const zCum = lengthZ(text, decayedMeanLength(cumulative), decayedStdLength(cumulative));
+            const z = Math.max(zDec ?? 0, zCum ?? 0);
+            if (z >= this.cfg.styleZThreshold) {
+                hits.push({
+                    weight: this.cfg.styleWeight,
+                    reason: `style deviation: message length is ${z.toFixed(1)}σ from this principal's norm`,
+                });
             }
         }
         const score = clamp01(hits.reduce((s, h) => s + h.weight, 0));
@@ -197,7 +249,9 @@ export class RelationshipAnomalyScorer {
         if (!intel)
             return null; // no provider → fail closed (no contribution)
         try {
-            const mean = meanLength(profile);
+            // Coarse style summary for the LLM — cumulative mean is fine here (it's a prose hint,
+            // not a scoring input; the deterministic signals already use the decayed view).
+            const mean = profile.interactionCount > 0 ? profile.lengthSum / profile.interactionCount : undefined;
             const topActions = Object.entries(profile.actionCounts)
                 .sort((a, b) => b[1] - a[1])
                 .slice(0, 5)
@@ -230,16 +284,27 @@ export class RelationshipAnomalyScorer {
         }
     }
 }
-/** The highest tier this principal has used in more than a trivial share of interactions. */
-function highestRoutineTier(profile) {
+/**
+ * The highest tier this principal has used in more than a trivial share of interactions,
+ * computed over the DECAYED view so a recent attacker burst of high-tier observations
+ * doesn't silently raise the "normal ceiling" and disarm tier-escalation (#2).
+ */
+function highestRoutineTier(view) {
     let max = 0;
+    const total = view.effectiveCount || 1;
     for (let t = 0; t <= 4; t++) {
-        const c = profile.tierCounts[t] ?? 0;
-        if (c > 0 && c / profile.interactionCount > 0.02)
+        const c = view.tierCounts[t] ?? 0;
+        if (c > 0 && c / total > 0.02)
             max = t;
     }
     return max;
 }
+/** |z| of a message length against a view's mean/std, or undefined when not computable. */
+function lengthZ(text, mean, std) {
+    if (mean === undefined || std === undefined || std <= 0)
+        return undefined;
+    return Math.abs(((text || '').length - mean) / std);
+}
 function clamp01(x) {
     return Math.max(0, Math.min(1, x));
 }

package/dist/permissions/RelationshipAnomalyScorer.js.map

@@ -1 +1 @@
-{"version":3,"file":"RelationshipAnomalyScorer.js","sourceRoot":"","sources":["../../src/permissions/RelationshipAnomalyScorer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAIH,OAAO,EAEL,UAAU,EACV,SAAS,EACT,YAAY,GAEb,MAAM,gCAAgC,CAAC;AAExC,MAAM,OAAO,GACX,oHAAoH,CAAC;AAoDvH,MAAM,OAAO,yBAAyB;IACnB,KAAK,CAA4B;IACjC,GAAG,CAEsE;IAE1F,YAAY,KAAgC,EAAE,SAAoC,EAAE;QAClF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,GAAG,GAAG;YACT,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,IAAI;YACzD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,GAAG;YACxD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,GAAG;YAChD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;YAC3C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,GAAG;YACtC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,CAAC;YAC1C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,GAAG;YACxD,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,GAAG;YAC9C,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI;YAC7D,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,SAAoB,EAAE,MAAqB,EAAE,IAAY;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAEtF,sFAAsF;QACtF,oFAAoF;QACpF,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;QAClC,IACE,IAAI,CAAC,GAAG,CAAC,gBAAgB;YACzB,IAAI,CAAC,GAAG,CAAC,YAAY;YACrB,OAAO;YACP,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,EACnD,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,GAAG,EAAE,CAAC;gBACR,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC;YAC1B,OAAO,EAAE,UAAU,KAAK,MAAM;gBAC5B,CAAC,CAAC,EAAE,CAAC,iEAAiE;gBACtE,CAAC,CAAC,YAAY;SACjB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAChB,OAA6C,EAC7C,MAAqB,EACrB,IAAY;QAEZ,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAE1C,wFAAwF;QACxF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;QACxE,MAAM,UAAU,GAA8B,CAAC,WAAW;YACxD,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC;gBACvD,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,QAAQ,CAAC;QAEf,MAAM,IAAI,GAAgB,EAAE,CAAC;QAE7B,2EAA2E;QAC3E,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAC5C,+EAA+E;YAC/E,kFAAkF;YAClF,mFAAmF;YACnF,kFAAkF;YAClF,iFAAiF;YACjF,mFAAmF;YACnF,kBAAkB;YAClB,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,yCAAyC;gBAC3E,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM;oBAC9C,MAAM,EAAE,IAAI,KAAK,CAAC;wBAChB,CAAC,CAAC,0CAA0C,OAAO,CAAC,gBAAgB,uCAAuC,MAAM,CAAC,MAAM,GAAG;wBAC3H,CAAC,CAAC,sBAAsB,MAAM,CAAC,MAAM,iCAAiC,IAAI,IAAI,OAAO,CAAC,gBAAgB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,UAAU;iBACvL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,mFAAmF;QACnF,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB;oBACrC,MAAM,EAAE,8CAA8C,MAAM,CAAC,IAAI,+CAA+C,aAAa,EAAE;iBAChI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;gBACnE,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB;oBACjC,MAAM,EAAE,2BAA2B,IAAI,CAAC,IAAI,CAAC,sDAAsD;iBACpG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7G,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa;oBAC9B,MAAM,EAAE,iEAAiE;iBAC1E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;gBACvD,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;oBAClC,IAAI,CAAC,IAAI,CAAC;wBACR,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW;wBAC5B,MAAM,EAAE,sCAAsC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;qBACzF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,WAAW,CACvB,OAAiC,EACjC,IAAY;QAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,CAAC,8CAA8C;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;iBACpD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC3B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,MAAM,GACV,2EAA2E;gBAC3E,kDAAkD;gBAClD,yDAAyD,UAAU,KAAK;gBACxE,2BAA2B,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU;gBACtF,GAAG,OAAO,CAAC,gBAAgB,wBAAwB;gBACnD,gBAAgB,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM;gBAChE,yEAAyE,CAAC;YAC5E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE;gBACvC,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,CAAC;gBACZ,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI;gBACxC,WAAW,EAAE,EAAE,SAAS,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;aACxF,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,2FAA2F;YAC3F,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,8DAA8D,EAAE,CAAC;YAClH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,6FAA6F;AAC7F,SAAS,kBAAkB,CAAC,OAAiC;IAC3D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI;YAAE,GAAG,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"RelationshipAnomalyScorer.js","sourceRoot":"","sources":["../../src/permissions/RelationshipAnomalyScorer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAIH,OAAO,EAEL,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GAGlB,MAAM,gCAAgC,CAAC;AAExC,MAAM,OAAO,GACX,oHAAoH,CAAC;AA4EvH,MAAM,OAAO,yBAAyB;IACnB,KAAK,CAA4B;IACjC,GAAG,CAEsE;IAE1F,YAAY,KAAgC,EAAE,SAAoC,EAAE;QAClF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,GAAG,GAAG;YACT,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,IAAI;YACzD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,GAAG;YACxD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,GAAG;YAChD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;YAC3C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,GAAG;YACtC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,CAAC;YAC1C,2EAA2E;YAC3E,oDAAoD;YACpD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,CAAC;YAClD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE;YACvH,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,iBAAiB;YAC9G,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,GAAG;YACxD,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,GAAG;YAC9C,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI;YAC7D,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,SAAoB,EAAE,MAAqB,EAAE,IAAY;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAEtF,sFAAsF;QACtF,oFAAoF;QACpF,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;QAClC,IACE,IAAI,CAAC,GAAG,CAAC,gBAAgB;YACzB,IAAI,CAAC,GAAG,CAAC,YAAY;YACrB,OAAO;YACP,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,EACnD,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,GAAG,EAAE,CAAC;gBACR,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC;YAC1B,OAAO,EAAE,UAAU,KAAK,MAAM;gBAC5B,CAAC,CAAC,EAAE,CAAC,iEAAiE;gBACtE,CAAC,CAAC,YAAY;SACjB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAChB,OAA6C,EAC7C,MAAqB,EACrB,IAAY;QAEZ,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAE1C,wFAAwF;QACxF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAEvC,qFAAqF;QACrF,mFAAmF;QACnF,kFAAkF;QAClF,kFAAkF;QAClF,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE;YAChC,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,iBAAiB;YAChD,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB;SAC/C,CAAC,CAAC;QAEH,iFAAiF;QACjF,oFAAoF;QACpF,mFAAmF;QACnF,wFAAwF;QACxF,mFAAmF;QACnF,sFAAsF;QACtF,mFAAmF;QACnF,sFAAsF;QACtF,6EAA6E;QAC7E,MAAM,UAAU,GAAuB;YACrC,cAAc,EAAE,OAAO,CAAC,gBAAgB;YACxC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC;QAEF,qEAAqE;QACrE,2EAA2E;QAC3E,gFAAgF;QAChF,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;QAC7E,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAClG,MAAM,WAAW,GAAG,gBAAgB,IAAI,cAAc,CAAC;QAEvD,qFAAqF;QACrF,qDAAqD;QACrD,MAAM,UAAU,GAA8B,CAAC,WAAW;YACxD,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC;gBACvD,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,QAAQ,CAAC;QAEf,MAAM,IAAI,GAAgB,EAAE,CAAC;QAE7B,2EAA2E;QAC3E,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAC5C,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;YACnE,iFAAiF;YACjF,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;YAClG,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;YACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC9C,wFAAwF;YACxF,oFAAoF;YACpF,uFAAuF;YACvF,wFAAwF;YACxF,wFAAwF;YACxF,qFAAqF;YACrF,IAAI,QAAQ,GAAG,KAAK,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC,yCAAyC;gBAC9E,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM;oBAC9C,MAAM,EAAE,SAAS;wBACf,CAAC,CAAC,0CAA0C,OAAO,CAAC,gBAAgB,uCAAuC,MAAM,CAAC,MAAM,GAAG;wBAC3H,CAAC,CAAC,sBAAsB,MAAM,CAAC,MAAM,mCAAmC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,2BAA2B,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,UAAU;iBACjK,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,mFAAmF;QACnF,IAAI,WAAW,EAAE,CAAC;YAChB,iFAAiF;YACjF,qFAAqF;YACrF,2EAA2E;YAC3E,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;YACzF,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB;oBACrC,MAAM,EAAE,8CAA8C,MAAM,CAAC,IAAI,+CAA+C,aAAa,EAAE;iBAChI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YACvC,oFAAoF;YACpF,yDAAyD;YACzD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YACrG,IAAI,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB;oBACjC,MAAM,EAAE,2BAA2B,IAAI,CAAC,IAAI,CAAC,sDAAsD;iBACpG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,QAAQ,EAAE,CAAC;YACb,mFAAmF;YACnF,qFAAqF;YACrF,qDAAqD;YACrD,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,MAAM,aAAa,GAAG,UAAU,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7G,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,IAAI,IAAI,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa;oBAC9B,MAAM,EAAE,iEAAiE;iBAC1E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,oFAAoF;QACpF,wFAAwF;QACxF,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;YACxF,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW;oBAC5B,MAAM,EAAE,sCAAsC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;iBACzF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,WAAW,CACvB,OAAiC,EACjC,IAAY;QAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,CAAC,8CAA8C;QACvE,IAAI,CAAC;YACH,sFAAsF;YACtF,gFAAgF;YAChF,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YACrG,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;iBACpD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC3B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,MAAM,GACV,2EAA2E;gBAC3E,kDAAkD;gBAClD,yDAAyD,UAAU,KAAK;gBACxE,2BAA2B,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU;gBACtF,GAAG,OAAO,CAAC,gBAAgB,wBAAwB;gBACnD,gBAAgB,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM;gBAChE,yEAAyE,CAAC;YAC5E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE;gBACvC,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,CAAC;gBACZ,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI;gBACxC,WAAW,EAAE,EAAE,SAAS,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;aACxF,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,2FAA2F;YAC3F,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,8DAA8D,EAAE,CAAC;YAClH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAwB;IAClD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI;YAAE,GAAG,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2FAA2F;AAC3F,SAAS,OAAO,CAAC,IAAY,EAAE,IAAwB,EAAE,GAAuB;IAC9E,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/permissions/RelationshipBehaviorStore.d.ts

@@ -33,6 +33,31 @@ export interface BehaviorObservation {
     /** Whether the message carried urgency/pressure language (cheap style signal). */
     urgent: boolean;
 }
+/**
+ * A time-bucketed slice of a principal's history (poisoning-resistance, Phase-3
+ * follow-ups #2/#3b). One bucket per rolling window (`bucketMs`, default 1 day).
+ * Holds the SAME SHAPE counts as the cumulative profile, scoped to a window — so
+ * the scorer can apply recency/decay weighting (a RECENT attacker burst can't durably
+ * dominate the histogram) and the store can enforce a per-window observation-rate cap
+ * (one session can't hammer the histogram to reshape it).
+ *
+ * Buckets are ADDITIVE: the cumulative `actionCounts`/`tierCounts`/`hourCounts`/length
+ * sums on the profile are kept in lock-step so an old reader (or a downgrade) still sees
+ * the same numbers it always did. A profile written before this hardening simply has no
+ * `buckets` field and degrades to its cumulative form everywhere.
+ */
+export interface BehaviorBucket {
+    /** Window start (epoch ms, floored to the bucket boundary) — drives decay weighting. */
+    startMs: number;
+    /** Observations recorded in this window (drives the per-window rate cap). */
+    count: number;
+    actionCounts: Record<string, number>;
+    tierCounts: number[];
+    hourCounts: number[];
+    lengthSum: number;
+    lengthSqSum: number;
+    urgentCount: number;
+}
 /**
  * The aggregated, privacy-respecting baseline for one principal. All counts; no
  * content. Persisted as JSON; cheap to read and update.
@@ -55,11 +80,47 @@ export interface PrincipalBehaviorProfile {
     /** First / last observation ISO timestamps. */
     firstSeen: string;
     lastSeen: string;
+    /**
+     * OPTIONAL time-bucketed history (poisoning-resistance #2/#3b). Newest bucket last.
+     * Absent on a pre-hardening profile — the scorer degrades to the cumulative counts.
+     * When present, the cumulative counts above remain the exact sum of all buckets'
+     * counts (backward-compat invariant), so old readers are unaffected.
+     */
+    buckets?: BehaviorBucket[];
+}
+/** Recording knobs for the rate-cap (#3b) + decay bucket sizing (#2). All optional. */
+export interface BehaviorStoreOptions {
+    /**
+     * Length of one decay/rate-cap bucket window (ms). Default 1 day. The recency-decay
+     * weighting (applied at scoring time) and the per-window observation cap are both
+     * keyed off this window.
+     */
+    bucketMs?: number;
+    /**
+     * Per-principal observation-rate cap (#3b): the MAX observations RECORDED into a
+     * single bucket window. Excess observations in the window are DROPPED (logged via
+     * `onCapDrop`), not recorded — so one session can't hammer the histogram to reshape
+     * it. Default 50/day. Set to a falsy/non-positive value to disable the cap.
+     */
+    maxObservationsPerWindow?: number;
+    /** Cap how many buckets are retained (bounds file growth). Default 90 (≈90 days). */
+    maxBuckets?: number;
+    /** Best-effort callback when an observation is dropped by the rate cap (for logging). */
+    onCapDrop?: (slackUserId: string, windowStartMs: number, droppedCount: number) => void;
 }
+export declare const DEFAULT_BUCKET_MS: number;
+export declare const DEFAULT_MAX_OBSERVATIONS_PER_WINDOW = 50;
+export declare const DEFAULT_MAX_BUCKETS = 90;
 export declare class RelationshipBehaviorStore {
     private readonly file;
     private readonly now;
-    constructor(stateDir: string, now?: () => string);
+    private readonly bucketMs;
+    private readonly maxObservationsPerWindow;
+    private readonly maxBuckets;
+    private readonly onCapDrop?;
+    constructor(stateDir: string, now?: () => string, options?: BehaviorStoreOptions);
+    /** The bucket-window length (ms) this store records into — read by the scorer for decay. */
+    get bucketWindowMs(): number;
     get path(): string;
     /**
      * Record an observation for a principal, growing their baseline. Best-effort:
@@ -67,6 +128,14 @@ export declare class RelationshipBehaviorStore {
      * the message path). No-op for an unsafe key (defensive).
      */
     record(slackUserId: string, obs: BehaviorObservation): void;
+    /**
+     * Resolve (and lazily migrate) the bucket covering `nowMs`, pruning to `maxBuckets`.
+     * Backfills a missing `buckets` array on a pre-hardening profile WITHOUT moving its
+     * cumulative counts into a bucket (those counts predate bucketing and have unknown
+     * timestamps — they keep weight as the un-decayable "legacy" base; see the scorer's
+     * decay logic). New observations land in fresh, timestamped buckets.
+     */
+    private currentBucket;
     /** The current baseline for a principal, or undefined if none recorded yet. */
     profileFor(slackUserId: string | undefined): PrincipalBehaviorProfile | undefined;
     /** All profiles (for the read route / inspection). */
@@ -80,6 +149,46 @@ export declare function meanLength(prof: PrincipalBehaviorProfile): number | und
 export declare function stdLength(prof: PrincipalBehaviorProfile): number | undefined;
 /** Fraction of baseline interactions in a given hour (0..1). */
 export declare function hourFraction(prof: PrincipalBehaviorProfile, hour: number): number;
+/** Baseline calendar age in milliseconds (now − firstSeen), or 0 when unknown. */
+export declare function baselineAgeMs(prof: PrincipalBehaviorProfile, nowMs: number): number;
+/**
+ * The decayed-effective SHAPE view a scorer should read instead of raw cumulative
+ * counts. Same fields as the profile, but every count is the decay-weighted sum across
+ * buckets PLUS the legacy (pre-bucketing) base at full weight.
+ */
+export interface DecayedProfileView {
+    effectiveCount: number;
+    actionCounts: Record<string, number>;
+    tierCounts: number[];
+    hourCounts: number[];
+    lengthSum: number;
+    lengthSqSum: number;
+    urgentCount: number;
+}
+export interface DecayOptions {
+    /** Now (epoch ms) — drives bucket age. */
+    nowMs: number;
+    /** One bucket window length (ms). Must match the store's bucketMs. */
+    bucketMs: number;
+    /** Decay half-life in bucket-windows. Default 30 (≈30 days at a 1-day bucket). */
+    halfLifeWindows?: number;
+}
+/**
+ * Compute the decay-weighted effective baseline. The legacy base = cumulative totals
+ * MINUS the sum of all buckets (i.e. the part of history that predates bucketing). That
+ * base keeps full weight (weight 1.0); each bucket is weighted by 0.5^(ageWindows/halfLife).
+ *
+ * A profile with no buckets → its entire cumulative form is the legacy base at full
+ * weight → the decayed view equals the cumulative view (perfect backward-compat). A
+ * fully-bucketed profile decays purely on bucket age.
+ */
+export declare function decayedView(prof: PrincipalBehaviorProfile, opts: DecayOptions): DecayedProfileView;
+/** Mean message length from a decayed view, or undefined when there is no weight. */
+export declare function decayedMeanLength(view: DecayedProfileView): number | undefined;
+/** Population std of message length from a decayed view, or undefined when <2 effective. */
+export declare function decayedStdLength(view: DecayedProfileView): number | undefined;
+/** Fraction of decayed interactions in a given hour (0..1). */
+export declare function decayedHourFraction(view: DecayedProfileView, hour: number): number;
 import type { BaselineProvider, PrincipalBaseline } from './AnomalyScorer.js';
 import type { Principal } from './types.js';
 export declare class StoreBaselineProvider implements BaselineProvider {

package/dist/permissions/RelationshipBehaviorStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RelationshipBehaviorStore.d.ts","sourceRoot":"","sources":["../../src/permissions/RelationshipBehaviorStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,gBAAgB,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,+CAA+C;IAC/C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,iFAAiF;IACjF,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,0GAA0G;IAC1G,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,4FAA4F;IAC5F,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAsBD,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,MAAuC;IAMhF,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;;;OAIG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,GAAG,IAAI;IAwB3D,+EAA+E;IAC/E,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,wBAAwB,GAAG,SAAS;IASjF,sDAAsD;IACtD,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAQ/C,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,QAAQ;CAOjB;AAID,+DAA+D;AAC/D,wBAAgB,UAAU,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,GAAG,SAAS,CAE7E;AAED,qFAAqF;AACrF,wBAAgB,SAAS,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,GAAG,SAAS,CAK5E;AAED,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjF;AAOD,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,qBAAa,qBAAsB,YAAW,gBAAgB;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,yBAAyB;IAE7D,WAAW,CAAC,SAAS,EAAE,SAAS,GAAG,iBAAiB,GAAG,SAAS;CAQjE"}
+{"version":3,"file":"RelationshipBehaviorStore.d.ts","sourceRoot":"","sources":["../../src/permissions/RelationshipBehaviorStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,cAAc;IAC7B,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,gBAAgB,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,+CAA+C;IAC/C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,iFAAiF;IACjF,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,0GAA0G;IAC1G,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,4FAA4F;IAC5F,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,uFAAuF;AACvF,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;CACxF;AA+BD,eAAO,MAAM,iBAAiB,QAAsB,CAAC;AACrD,eAAO,MAAM,mCAAmC,KAAK,CAAC;AACtD,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAOtC,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAS;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA6E;gBAGtG,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAM,MAAuC,EAClD,OAAO,GAAE,oBAAyB;IAapC,4FAA4F;IAC5F,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;;;OAIG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,GAAG,IAAI;IA2D3D;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAiBrB,+EAA+E;IAC/E,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,wBAAwB,GAAG,SAAS;IASjF,sDAAsD;IACtD,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAQ/C,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,QAAQ;CAOjB;AAID,+DAA+D;AAC/D,wBAAgB,UAAU,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,GAAG,SAAS,CAE7E;AAED,qFAAqF;AACrF,wBAAgB,SAAS,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,GAAG,SAAS,CAK5E;AAED,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjF;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAInF;AAWD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,YAAY,GAAG,kBAAkB,CAyDlG;AAcD,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAE9E;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAK7E;AAED,+DAA+D;AAC/D,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIlF;AAOD,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,qBAAa,qBAAsB,YAAW,gBAAgB;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,yBAAyB;IAE7D,WAAW,CAAC,SAAS,EAAE,SAAS,GAAG,iBAAiB,GAAG,SAAS;CAQjE"}