instar 1.3.661 → 1.3.663

package/dist/core/GateSignalDetectors.d.ts

@@ -0,0 +1,63 @@
+/**
+ * GateSignalDetectors — §Design 8 of gate-prompts-judge-by-meaning-not-literal-lists
+ * (CMT-1793, Phase 2).
+ *
+ * THE MIGRATION: rules B1–B7 used to LITERAL-match inside the tone-gate PROMPT
+ * (a brittle filter wearing the LLM's authority — a paraphrase or an
+ * unanticipated form evaded it, and the model's contextual judgment was
+ * discarded). The new contract (Intelligent Prompts — An LLM Gate Must Not
+ * String-Match) moves the pattern-matching OUT of the prompt: a deterministic
+ * detector emits a normalized `GateSignal`, the signal is supplied to the LLM
+ * as input/context, and the LLM decides IN CONTEXT what to do with it (e.g. "a
+ * file path was detected at span X — is it shown for the user to act on, or
+ * mentioned in passing?"). This is the same shape B8/B9/B12/B20 already use.
+ *
+ * SECURITY (the §Design 8 envelope + clamping contract): every emitted signal
+ * is sanitized at the boundary — `kind` validated against the closed
+ * `GATE_SIGNAL_KINDS` enum, `confidence` clamped to [0,1], `spans` bounded to
+ * the candidate length and dropped if malformed, and `normalizedValue` length-
+ * clamped. A `normalizedValue` is UNTRUSTED data describing the candidate (it
+ * may itself be attacker-derived — e.g. a "path" containing envelope-breaking
+ * characters), so the caller renders the signal list inside its OWN per-call
+ * random boundary and the prompt treats every field as data, never an
+ * instruction. These detectors NEVER block — they are signal producers; the
+ * MessagingToneGate is the single authority (docs/signal-vs-authority.md).
+ */
+/** §Design 8: closed set of deterministic-detector signal kinds for B1–B7. */
+export type GateSignalKind = 'cli-command' | 'file-path' | 'config-key' | 'copy-paste-code' | 'api-endpoint' | 'env-var' | 'cron-or-slug';
+/** The closed enum, single-sourced. A kind outside this set is rejected at sanitize. */
+export declare const GATE_SIGNAL_KINDS: readonly GateSignalKind[];
+/** Map each kind → the B-rule it informs (for prompt rendering + the ratchet). */
+export declare const GATE_SIGNAL_KIND_TO_RULE: Record<GateSignalKind, string>;
+/** §Design 8 normalized signal emitted by a B1–B7 deterministic detector. */
+export interface GateSignal {
+    kind: GateSignalKind;
+    detected: boolean;
+    /** Character spans (into the candidate) where the artifact was found. Bounded. */
+    spans?: {
+        start: number;
+        end: number;
+    }[];
+    /** A short, clamped textual sample of what was detected (UNTRUSTED data). */
+    normalizedValue?: string;
+    /** Detector self-confidence, clamped to [0,1] at emit. */
+    confidence?: number;
+}
+/** Hard caps so an adversarial candidate can't inflate the signal payload. */
+export declare const GATE_SIGNAL_CAPS: {
+    readonly maxSpansPerSignal: 8;
+    readonly maxNormalizedValueChars: 120;
+};
+/**
+ * Sanitize + clamp a single signal at emit (the §Design 8 security contract).
+ * Returns null for a structurally invalid signal (unknown kind) so a bad
+ * detector can never inject an out-of-enum kind. `candidateLen` bounds spans.
+ */
+export declare function sanitizeGateSignal(s: GateSignal, candidateLen: number): GateSignal | null;
+/**
+ * Run all B1–B7 detectors over a candidate and return the sanitized signal
+ * list (only `detected:true` signals, each clamped per §Design 8). The list is
+ * what the caller renders inside its own per-call boundary as untrusted data.
+ */
+export declare function detectGateSignals(candidate: string): GateSignal[];
+//# sourceMappingURL=GateSignalDetectors.d.ts.map

package/dist/core/GateSignalDetectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GateSignalDetectors.d.ts","sourceRoot":"","sources":["../../src/core/GateSignalDetectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,8EAA8E;AAC9E,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,cAAc,GACd,SAAS,GACT,cAAc,CAAC;AAEnB,wFAAwF;AACxF,eAAO,MAAM,iBAAiB,EAAE,SAAS,cAAc,EAQ7C,CAAC;AAEX,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAQnE,CAAC;AAEF,6EAA6E;AAC7E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,kFAAkF;IAClF,KAAK,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACzC,6EAA6E;IAC7E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAiCzF;AAsHD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAoBjE"}

package/dist/core/GateSignalDetectors.js

@@ -0,0 +1,216 @@
+/**
+ * GateSignalDetectors — §Design 8 of gate-prompts-judge-by-meaning-not-literal-lists
+ * (CMT-1793, Phase 2).
+ *
+ * THE MIGRATION: rules B1–B7 used to LITERAL-match inside the tone-gate PROMPT
+ * (a brittle filter wearing the LLM's authority — a paraphrase or an
+ * unanticipated form evaded it, and the model's contextual judgment was
+ * discarded). The new contract (Intelligent Prompts — An LLM Gate Must Not
+ * String-Match) moves the pattern-matching OUT of the prompt: a deterministic
+ * detector emits a normalized `GateSignal`, the signal is supplied to the LLM
+ * as input/context, and the LLM decides IN CONTEXT what to do with it (e.g. "a
+ * file path was detected at span X — is it shown for the user to act on, or
+ * mentioned in passing?"). This is the same shape B8/B9/B12/B20 already use.
+ *
+ * SECURITY (the §Design 8 envelope + clamping contract): every emitted signal
+ * is sanitized at the boundary — `kind` validated against the closed
+ * `GATE_SIGNAL_KINDS` enum, `confidence` clamped to [0,1], `spans` bounded to
+ * the candidate length and dropped if malformed, and `normalizedValue` length-
+ * clamped. A `normalizedValue` is UNTRUSTED data describing the candidate (it
+ * may itself be attacker-derived — e.g. a "path" containing envelope-breaking
+ * characters), so the caller renders the signal list inside its OWN per-call
+ * random boundary and the prompt treats every field as data, never an
+ * instruction. These detectors NEVER block — they are signal producers; the
+ * MessagingToneGate is the single authority (docs/signal-vs-authority.md).
+ */
+/** The closed enum, single-sourced. A kind outside this set is rejected at sanitize. */
+export const GATE_SIGNAL_KINDS = [
+    'cli-command',
+    'file-path',
+    'config-key',
+    'copy-paste-code',
+    'api-endpoint',
+    'env-var',
+    'cron-or-slug',
+];
+/** Map each kind → the B-rule it informs (for prompt rendering + the ratchet). */
+export const GATE_SIGNAL_KIND_TO_RULE = {
+    'cli-command': 'B1_CLI_COMMAND',
+    'file-path': 'B2_FILE_PATH',
+    'config-key': 'B3_CONFIG_KEY',
+    'copy-paste-code': 'B4_COPY_PASTE_CODE',
+    'api-endpoint': 'B5_API_ENDPOINT',
+    'env-var': 'B6_ENV_VAR',
+    'cron-or-slug': 'B7_CRON_OR_SLUG',
+};
+/** Hard caps so an adversarial candidate can't inflate the signal payload. */
+export const GATE_SIGNAL_CAPS = {
+    maxSpansPerSignal: 8,
+    maxNormalizedValueChars: 120,
+};
+/**
+ * Sanitize + clamp a single signal at emit (the §Design 8 security contract).
+ * Returns null for a structurally invalid signal (unknown kind) so a bad
+ * detector can never inject an out-of-enum kind. `candidateLen` bounds spans.
+ */
+export function sanitizeGateSignal(s, candidateLen) {
+    if (!s || typeof s !== 'object')
+        return null;
+    if (!GATE_SIGNAL_KINDS.includes(s.kind))
+        return null;
+    const out = { kind: s.kind, detected: s.detected === true };
+    if (typeof s.confidence === 'number' && Number.isFinite(s.confidence)) {
+        out.confidence = Math.max(0, Math.min(1, s.confidence));
+    }
+    if (Array.isArray(s.spans)) {
+        const spans = s.spans
+            .filter((sp) => sp &&
+            Number.isFinite(sp.start) &&
+            Number.isFinite(sp.end) &&
+            sp.start >= 0 &&
+            sp.end >= sp.start &&
+            sp.end <= candidateLen)
+            .slice(0, GATE_SIGNAL_CAPS.maxSpansPerSignal)
+            .map((sp) => ({ start: Math.floor(sp.start), end: Math.floor(sp.end) }));
+        if (spans.length > 0)
+            out.spans = spans;
+    }
+    if (typeof s.normalizedValue === 'string' && s.normalizedValue.length > 0) {
+        // Length-clamp only; the value is rendered inside the caller's own boundary
+        // as untrusted data, so its content is never trusted regardless.
+        out.normalizedValue = s.normalizedValue.slice(0, GATE_SIGNAL_CAPS.maxNormalizedValueChars);
+    }
+    return out;
+}
+// ── The seven deterministic detectors (B1–B7) ────────────────────────────
+// Each returns at most ONE signal for its kind (detected:true with spans +
+// a normalizedValue sample, or simply nothing when not detected). They are
+// high-PRECISION by design: a false "detected" only adds a signal the LLM
+// then judges in context (it is not a block), but needless noise dilutes the
+// signal list, so each pattern targets the artifact shape, not loose prose.
+function collect(re, text, kind, 
+// Optional per-match precision filter: return false to DROP a match (so a
+// false-positive shape — a hostname mistaken for a config key, plain
+// hyphenated prose mistaken for a slug — never enters the signal list).
+accept) {
+    const spans = [];
+    let first = '';
+    for (const m of text.matchAll(re)) {
+        if (m.index == null)
+            continue;
+        if (accept && !accept(m[0]))
+            continue;
+        spans.push({ start: m.index, end: m.index + m[0].length });
+        if (!first)
+            first = m[0];
+        if (spans.length >= GATE_SIGNAL_CAPS.maxSpansPerSignal)
+            break;
+    }
+    if (spans.length === 0)
+        return null;
+    return { kind, detected: true, spans, normalizedValue: first };
+}
+/** B1 — a shell command (a verb the user would paste into a terminal). */
+function detectCliCommand(text) {
+    // Common CLI leaders + a leading "$ " prompt. Word-boundary anchored so prose
+    // like "I will run the migration" does not match.
+    const re = /(^|\s)(\$ |sudo |npm (run |i |install|test)|pnpm \w|yarn \w|npx \w|git (push|pull|commit|checkout|rebase|merge|clone|fetch|reset)|curl |wget |bash |sh |node \S+\.(mjs|js|ts)|docker \w|kubectl \w|systemctl \w|launchctl \w|brew \w|pip install|cargo \w)/g;
+    return collect(re, text, 'cli-command');
+}
+/** B2 — a filesystem path (absolute, home-relative, dot-relative, or src-rooted). */
+function detectFilePath(text) {
+    // Require a path separator + a path-ish segment; avoid matching bare prose or URLs.
+    const re = /(?<![\w/])(~\/[\w./-]+|\.{1,2}\/[\w./-]+|\/(?:Users|home|tmp|var|etc|opt|usr)\/[\w./-]+|(?:src|dist|tests|docs|node_modules|\.instar|\.claude|\.github)\/[\w./-]+\.[a-zA-Z]{1,5})/g;
+    return collect(re, text, 'file-path');
+}
+/** Known TLDs used to exclude hostname-shaped tokens from the config-key detector. */
+const HOSTNAME_TLD = /\.(?:com|org|net|io|dev|ai|co|gov|edu|app|sh|me|info|biz)$/i;
+/** B3 — a dotted config key (e.g. messaging.toneGate.failClosedOnExhaustion). */
+function detectConfigKey(text) {
+    // 3+ dotted lowerCamel/snake segments — config paths, not sentences (which
+    // have spaces). Anchored so "e.g." or "a.b" prose abbreviations don't match.
+    const re = /(?<![\w.])[a-z][a-zA-Z0-9]*(?:\.[a-z][a-zA-Z0-9]*){2,}(?![\w.])/g;
+    // Precision: drop hostname-shaped matches. A real config key
+    // (messaging.toneGate.x) has a camelCase segment; a hostname is all-lowercase
+    // labels ending in a known TLD (or a www. prefix) — that's prose, not a key.
+    return collect(re, text, 'config-key', (v) => {
+        const looksLikeHost = /^www\./i.test(v) || HOSTNAME_TLD.test(v);
+        const hasCamel = /[a-z][A-Z]/.test(v);
+        return !(looksLikeHost && !hasCamel);
+    });
+}
+/** B4 — pasted code: a fenced block or an obvious code line. */
+function detectCopyPasteCode(text) {
+    const fence = collect(/```[\s\S]*?```|`[^`\n]{3,}`/g, text, 'copy-paste-code');
+    if (fence)
+        return fence;
+    // A line that reads like code: assignment/among braces/semicolons/arrows.
+    const re = /(^|\n)\s*(const |let |var |function |=>|import |export |return |if \(|for \()/g;
+    return collect(re, text, 'copy-paste-code');
+}
+/** B5 — an API endpoint / URL / route path. */
+function detectApiEndpoint(text) {
+    const re = /(https?:\/\/[^\s)>\]]+|(?<![\w/])\/(?:telegram|slack|whatsapp|api|sessions|commitments|attention|coherence|pool|threadline|metrics|health|view|secrets|operations|mandate)\/[\w:./-]+)/g;
+    return collect(re, text, 'api-endpoint');
+}
+/** B6 — an environment variable (assignment, $REF, or process.env.X). */
+function detectEnvVar(text) {
+    const re = /(?<![\w])(?:[A-Z][A-Z0-9]*_[A-Z0-9_]+\s*=|\$[A-Z][A-Z0-9_]{2,}|process\.env\.[A-Z][A-Z0-9_]*)/g;
+    return collect(re, text, 'env-var');
+}
+/** B7 — a cron expression or an internal kebab slug / tracker id. */
+function detectCronOrSlug(text) {
+    // Cron: 5 whitespace-separated fields of cron tokens.
+    const cron = collect(/(?<!\S)(?:[\d*/,-]+\s+){4}[\d*/,-]+(?!\S)/g, text, 'cron-or-slug');
+    if (cron)
+        return cron;
+    // Internal tracker ids / kebab slugs — the kind of internal handle a user
+    // can't act on (e.g. CMT-1793, act-155). Upper tracker ids OR 3+-segment
+    // lowercase kebab. Precision: the lowercase-kebab branch must contain a DIGIT,
+    // so plain hyphenated English prose ("well-thought-out", "state-of-the-art",
+    // "fire-and-forget") does NOT fire. (Digit-less internal slugs leaked to a
+    // user are caught by the separate B20 internal-id-leak signal, not here.) The
+    // uppercase tracker branch already requires a digit.
+    const re = /(?<![\w-])(?:[A-Z]{2,5}-\d{2,}|[a-z0-9]+(?:-[a-z0-9]+){2,})(?![\w-])/g;
+    return collect(re, text, 'cron-or-slug', (v) => /\d/.test(v));
+}
+const DETECTORS = [
+    detectCliCommand,
+    detectFilePath,
+    detectConfigKey,
+    detectCopyPasteCode,
+    detectApiEndpoint,
+    detectEnvVar,
+    detectCronOrSlug,
+];
+/**
+ * Run all B1–B7 detectors over a candidate and return the sanitized signal
+ * list (only `detected:true` signals, each clamped per §Design 8). The list is
+ * what the caller renders inside its own per-call boundary as untrusted data.
+ */
+export function detectGateSignals(candidate) {
+    if (typeof candidate !== 'string' || candidate.length === 0)
+        return [];
+    const len = candidate.length;
+    const out = [];
+    for (const detect of DETECTORS) {
+        let sig = null;
+        try {
+            sig = detect(candidate);
+        }
+        catch {
+            // @silent-fallback-ok — a detector throwing (pathological input) must
+            // never break the gate; a missing signal degrades to meaning-only
+            // judgment for that rule, which is the safe direction (no block lost —
+            // these are signals the LLM judges, not blockers).
+            sig = null;
+        }
+        if (!sig || !sig.detected)
+            continue;
+        const clean = sanitizeGateSignal(sig, len);
+        if (clean && clean.detected)
+            out.push(clean);
+    }
+    return out;
+}
+//# sourceMappingURL=GateSignalDetectors.js.map

package/dist/core/GateSignalDetectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GateSignalDetectors.js","sourceRoot":"","sources":["../../src/core/GateSignalDetectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAYH,wFAAwF;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAA8B;IAC1D,aAAa;IACb,WAAW;IACX,YAAY;IACZ,iBAAiB;IACjB,cAAc;IACd,SAAS;IACT,cAAc;CACN,CAAC;AAEX,kFAAkF;AAClF,MAAM,CAAC,MAAM,wBAAwB,GAAmC;IACtE,aAAa,EAAE,gBAAgB;IAC/B,WAAW,EAAE,cAAc;IAC3B,YAAY,EAAE,eAAe;IAC7B,iBAAiB,EAAE,oBAAoB;IACvC,cAAc,EAAE,iBAAiB;IACjC,SAAS,EAAE,YAAY;IACvB,cAAc,EAAE,iBAAiB;CAClC,CAAC;AAcF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,iBAAiB,EAAE,CAAC;IACpB,uBAAuB,EAAE,GAAG;CACpB,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAa,EAAE,YAAoB;IACpE,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,GAAG,GAAe,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;IAExE,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;aAClB,MAAM,CACL,CAAC,EAAE,EAAE,EAAE,CACL,EAAE;YACF,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC;YACzB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;YACvB,EAAE,CAAC,KAAK,IAAI,CAAC;YACb,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK;YAClB,EAAE,CAAC,GAAG,IAAI,YAAY,CACzB;aACA,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,iBAAiB,CAAC;aAC5C,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IAC1C,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,4EAA4E;QAC5E,iEAAiE;QACjE,GAAG,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;IAC7F,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,4EAA4E;AAE5E,SAAS,OAAO,CACd,EAAU,EACV,IAAY,EACZ,IAAoB;AACpB,0EAA0E;AAC1E,qEAAqE;AACrE,wEAAwE;AACxE,MAAuC;IAEvC,MAAM,KAAK,GAAqC,EAAE,CAAC;IACnD,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI;YAAE,SAAS;QAC9B,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK;YAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,IAAI,gBAAgB,CAAC,iBAAiB;YAAE,MAAM;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AACjE,CAAC;AAED,0EAA0E;AAC1E,SAAS,gBAAgB,CAAC,IAAY;IACpC,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,EAAE,GACN,6PAA6P,CAAC;IAChQ,OAAO,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;AAC1C,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,IAAY;IAClC,oFAAoF;IACpF,MAAM,EAAE,GACN,oLAAoL,CAAC;IACvL,OAAO,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAED,sFAAsF;AACtF,MAAM,YAAY,GAAG,6DAA6D,CAAC;AAEnF,iFAAiF;AACjF,SAAS,eAAe,CAAC,IAAY;IACnC,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,EAAE,GAAG,kEAAkE,CAAC;IAC9E,6DAA6D;IAC7D,8EAA8E;IAC9E,6EAA6E;IAC7E,OAAO,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;QAC3C,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,8BAA8B,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC/E,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,0EAA0E;IAC1E,MAAM,EAAE,GAAG,gFAAgF,CAAC;IAC5F,OAAO,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;AAC9C,CAAC;AAED,+CAA+C;AAC/C,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,EAAE,GACN,yLAAyL,CAAC;IAC5L,OAAO,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAC3C,CAAC;AAED,yEAAyE;AACzE,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,EAAE,GAAG,gGAAgG,CAAC;IAC5G,OAAO,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,qEAAqE;AACrE,SAAS,gBAAgB,CAAC,IAAY;IACpC,sDAAsD;IACtD,MAAM,IAAI,GAAG,OAAO,CAClB,4CAA4C,EAC5C,IAAI,EACJ,cAAc,CACf,CAAC;IACF,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,0EAA0E;IAC1E,yEAAyE;IACzE,+EAA+E;IAC/E,6EAA6E;IAC7E,2EAA2E;IAC3E,8EAA8E;IAC9E,qDAAqD;IACrD,MAAM,EAAE,GAAG,uEAAuE,CAAC;IACnF,OAAO,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,SAAS,GAA4C;IACzD,gBAAgB;IAChB,cAAc;IACd,eAAe;IACf,mBAAmB;IACnB,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvE,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,IAAI,GAAG,GAAsB,IAAI,CAAC;QAClC,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,kEAAkE;YAClE,uEAAuE;YACvE,mDAAmD;YACnD,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/MessagingToneGate.d.ts

@@ -53,7 +53,79 @@ export interface ToneReviewResult {
      * tone authority could not run under capacity pressure.
      */
     capacityUnavailable?: boolean;
+    /**
+     * True when the gate HELD the message (pass=false) because a gating-LLM
+     * call dropped its verdict — a provider-exhaustion error, an unparseable
+     * response (after one retry), or the route-budget timeout elapsing with no
+     * verdict. Fail-CLOSED is the safe direction for a gating decision
+     * (No Silent Degradation). Distinct from capacityUnavailable (spawn-cap shed)
+     * and failedOpen (legacy permissive drop, now only on the invalid-rule
+     * re-prompt's benign branches). Spec: gate-prompts-judge-by-meaning §Design 6.
+     */
+    failedClosed?: boolean;
+}
+export declare const VALID_RULES: Set<string>;
+/**
+ * Rule-class taxonomy (spec: gate-prompts-judge-by-meaning-not-literal-lists §Design 7).
+ *
+ * The boundary between rules whose prompt may LITERAL-match a deterministic
+ * artifact (`deterministic-detection`) and rules that must judge by MEANING
+ * (`behavioral-judgment`) is made STRUCTURAL here — a machine-readable source
+ * registry, NOT a `//` comment inside the prompt template literal (those would
+ * render into the prompt sent to the model). The forward ratchet
+ * (tests/unit/gate-prompts-judge-by-meaning.test.ts) keys off this map.
+ *
+ * Constitution standard: "Intelligent Prompts — An LLM Gate Must Not
+ * String-Match" (docs/STANDARDS-REGISTRY.md).
+ */
+export type GateRuleClass = 'deterministic-detection' | 'signal-driven' | 'style' | 'health-alert' | 'behavioral-judgment' | 'parked-on-user';
+export declare const RULE_CLASSES: Record<string, GateRuleClass>;
+/**
+ * Phase-2 migration (CMT-1793): COMPLETE. B1–B7 were migrated from in-prompt
+ * literal-matching to the deterministic-detector-emits-signal contract
+ * (GateSignalDetectors.ts, §Design 8); the allowlist is now EMPTY. The const is
+ * retained (empty) so the ratchet's anti-phantom assertion has a stable target
+ * and a future reader sees the migration landed rather than wondering if it was
+ * dropped.
+ */
+export declare const PHASE2_MIGRATION_DEBT: {
+    rules: readonly [];
+    commitment: string;
+};
+/** Deferred availability-aware kind-routing refinement (CMT-1794). Gate is fail-closed-compliant now. */
+export declare const DEFERRED_REFINEMENT: {
+    paths: readonly ["provider-exhaustion", "json-parse", "route-budget-timeout"];
+    commitment: string;
+};
+/**
+ * The §Design 1 structured-intermediate the model emits for a self-stop (B15)
+ * judgment. The block/allow VERDICT is derived from these fields, which makes
+ * the decision testable and far less dependent on prose interpretation (the
+ * answer to the "prompt jurisprudence" concern). Optional — absent on a normal
+ * non-B15 verdict, in which case the legacy {pass,rule,issue,suggestion} path
+ * is used unchanged.
+ */
+export interface StructuredVerdict {
+    proposed_stop: boolean;
+    deferred_items: string[];
+    stop_reason_kind: 'agent-state' | 'external-blocker' | 'design-fork' | 'completion' | 'operator-stop' | 'none' | string;
+    agent_state_reason_present: boolean;
+    external_blocker_present: boolean;
+}
+export interface ParsedToneResponse {
+    pass: boolean;
+    rule: string;
+    issue: string;
+    suggestion: string;
+    structured?: StructuredVerdict;
 }
+/**
+ * A structured verdict is internally contradictory (a model-output-discipline
+ * failure) when its fields disagree — e.g. "no stop proposed" yet items are
+ * deferred, or "agent-state reason present" yet the stop is classified as a
+ * completion / none. Contradiction → re-prompt once → fail-closed (§Design 6).
+ */
+export declare function structuredContradiction(s: StructuredVerdict): boolean;
 export interface ToneReviewContextMessage {
     role: 'user' | 'agent';
     text: string;
@@ -222,16 +294,86 @@ export interface ToneReviewContext {
      * scheduled-task sends (stamped by the scheduler env, not the model).
      */
     messageKind?: MessageKind;
+    /**
+     * Deterministic agent-state signal (spec §Design 1a). Detected OUTSIDE the
+     * prompt (in-process `readSessionClocks` at the route seam) and fed in as
+     * ground truth so B15 can judge a "near the limit" claim against reality
+     * instead of the agent's self-assessed prose. SCOPE: time-box claims only —
+     * it does NOT ground context-window / fatigue / clarity claims (no signal
+     * for those yet; CMT-1793). Absent → B15 falls back to meaning-only (the
+     * signal sharpens the verdict, it is never a necessary condition). Rendered
+     * in its own per-call boundary, treated as untrusted data.
+     */
+    agentState?: {
+        sessionElapsedMs: number;
+        sessionRemainingMs: number | null;
+        isTimeBoxed: boolean;
+    };
+}
+/** Tune knobs read live from InstarConfig.messaging.toneGate (spec §Design 6). */
+export interface ToneGateConfig {
+    /**
+     * When true (DEFAULT), the provider-exhaustion and route-budget-timeout paths
+     * fail CLOSED (hold). Operator kill-switch: set false to revert THOSE two
+     * availability-sensitive paths to fail-open without a deploy (read live). The
+     * invalid-rule and JSON-parse fail-closeds are NOT switched (no availability
+     * cost — they fire only on a model that already decided to block / emitted
+     * unparseable output).
+     */
+    failClosedOnExhaustion?: boolean;
 }
 export declare class MessagingToneGate {
     private provider;
-    constructor(provider: IntelligenceProvider);
+    private configOrGetter;
+    constructor(provider: IntelligenceProvider, config?: ToneGateConfig | (() => ToneGateConfig));
+    /** Resolve config live each review so the kill-switch is honored without a restart. */
+    private getConfig;
     review(text: string, context: ToneReviewContext): Promise<ToneReviewResult>;
+    /** Fail-CLOSED disposition (hold) — mirrors the capacity-shed sibling. */
+    private failClosed;
+    /**
+     * Turn a parsed response into a verdict OR signal that one re-prompt is
+     * warranted. `null` parsed = unparseable. Applies the §Design 1
+     * structured-intermediate: a contradictory structured verdict re-prompts,
+     * and a B15 stop the model's OWN structured reasoning flags
+     * (proposed_stop ∧ agent_state_reason_present) is derived to BLOCK even if
+     * the model set pass:true (the structured fields are the ground truth of its
+     * reasoning). Back-compat: when no structured block is present, behavior is
+     * exactly the legacy {pass,rule,issue,suggestion} path.
+     */
+    private interpret;
     private buildPrompt;
     private renderMessageKind;
     private renderSignals;
+    /**
+     * §Design 8 (CMT-1793): render the B1–B7 deterministic-detector signal list
+     * inside its OWN per-call random boundary, distinct from the candidate
+     * boundary. Every field (kind/spans/normalizedValue) is UNTRUSTED data
+     * DESCRIBING the candidate — never an instruction. A `normalizedValue` may
+     * itself be attacker-derived (e.g. a "path" containing envelope-breaking
+     * characters), so it is JSON-encoded inside the boundary and the prompt is
+     * told to treat it as data. The prompt then judges each signal IN CONTEXT
+     * (e.g. "a file path was detected — shown for the user to act on, or
+     * mentioned in passing?") rather than literal-matching the artifact itself.
+     */
+    private renderGateSignals;
     private renderTargetStyle;
     private renderRecentMessages;
+    /**
+     * §Design 1a: the deterministic agent-state signal (session clock), rendered
+     * in its own per-call boundary as untrusted data. Grounds B15 TIME-BOX
+     * claims only. Absent → omitted (B15 falls back to meaning-only).
+     */
+    private renderAgentState;
+    /**
+     * Parse the model's JSON. Returns `null` on unparseable / malformed output
+     * (NOT a permissive fail-open) — review() treats null as a re-prompt → then
+     * fail-closed, so a model emitting garbage can never silently deliver an
+     * unreviewed message (No Silent Degradation §Design 6). The optional
+     * `structured` block (§Design 1) is type-clamped on the way in; the issue/
+     * suggestion are length-bounded (1–2 sentences) since they may be re-fed to
+     * the agent's rephrase loop as untrusted data (§Design 5).
+     */
     private parseResponse;
 }
 //# sourceMappingURL=MessagingToneGate.d.ts.map

package/dist/core/MessagingToneGate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MessagingToneGate.d.ts","sourceRoot":"","sources":["../../src/core/MessagingToneGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAUvD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uFAAuF;IACvF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAwBD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;GAUG;AACH;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,cAAc,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7E,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,IAAI,CAAC,EAAE;QACL,QAAQ,EAAE,OAAO,CAAC;QAClB,gFAAgF;QAChF,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,6FAA6F;IAC7F,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,OAAO,CAAC;QAClB,mIAAmI;QACnI,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,uFAAuF;QACvF,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE;QACX,QAAQ,EAAE,OAAO,CAAC;QAClB,oEAAoE;QACpE,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,sCAAsC;QACtC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,yEAAyE;QACzE,YAAY,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/C,CAAC;IACF;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE;QACP,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE;QACT,8EAA8E;QAC9E,IAAI,EAAE,OAAO,CAAC;QACd,mCAAmC;QACnC,IAAI,CAAC,EAAE,qBAAqB,GAAG,qBAAqB,GAAG,mBAAmB,CAAC;QAC3E,oEAAoE;QACpE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,+EAA+E;QAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE;QACT,+CAA+C;QAC/C,SAAS,EAAE,OAAO,CAAC;QACnB,mEAAmE;QACnE,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;QAC1B,sDAAsD;QACtD,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,kEAAkE;QAClE,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF;;;;;;OAMG;IACH,YAAY,CAAC,EAAE;QACb,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF;;;;;;OAMG;IACH,cAAc,CAAC,EAAE;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,cAAc,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC5C,yEAAyE;IACzE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAuB;gBAE3B,QAAQ,EAAE,oBAAoB;IAIpC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA4EjF,OAAO,CAAC,WAAW;IAsMnB,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,aAAa;IAoErB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,aAAa;CAoBtB"}
+{"version":3,"file":"MessagingToneGate.d.ts","sourceRoot":"","sources":["../../src/core/MessagingToneGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAWvD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uFAAuF;IACvF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,WAAW,aAoBtB,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa,GACrB,yBAAyB,GACzB,eAAe,GACf,OAAO,GACP,cAAc,GACd,qBAAqB,GACrB,gBAAgB,CAAC;AAMrB,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CA0BtD,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;CAGjC,CAAC;AAEF,yGAAyG;AACzG,eAAO,MAAM,mBAAmB;;;CAG/B,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,aAAa,GAAG,kBAAkB,GAAG,aAAa,GAAG,YAAY,GAAG,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;IACxH,0BAA0B,EAAE,OAAO,CAAC;IACpC,wBAAwB,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAKrE;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;GAUG;AACH;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,cAAc,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7E,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,IAAI,CAAC,EAAE;QACL,QAAQ,EAAE,OAAO,CAAC;QAClB,gFAAgF;QAChF,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,6FAA6F;IAC7F,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,OAAO,CAAC;QAClB,mIAAmI;QACnI,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,uFAAuF;QACvF,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE;QACX,QAAQ,EAAE,OAAO,CAAC;QAClB,oEAAoE;QACpE,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,sCAAsC;QACtC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,yEAAyE;QACzE,YAAY,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/C,CAAC;IACF;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE;QACP,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE;QACT,8EAA8E;QAC9E,IAAI,EAAE,OAAO,CAAC;QACd,mCAAmC;QACnC,IAAI,CAAC,EAAE,qBAAqB,GAAG,qBAAqB,GAAG,mBAAmB,CAAC;QAC3E,oEAAoE;QACpE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,+EAA+E;QAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE;QACT,+CAA+C;QAC/C,SAAS,EAAE,OAAO,CAAC;QACnB,mEAAmE;QACnE,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;QAC1B,sDAAsD;QACtD,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,kEAAkE;QAClE,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF;;;;;;OAMG;IACH,YAAY,CAAC,EAAE;QACb,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF;;;;;;OAMG;IACH,cAAc,CAAC,EAAE;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,cAAc,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC5C,yEAAyE;IACzE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE;QACX,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;CACH;AAED,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B;;;;;;;OAOG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,cAAc,CAA0C;gBAEpD,QAAQ,EAAE,oBAAoB,EAAE,MAAM,GAAE,cAAc,GAAG,CAAC,MAAM,cAAc,CAAM;IAKhG,uFAAuF;IACvF,OAAO,CAAC,SAAS;IAUX,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAiEjF,0EAA0E;IAC1E,OAAO,CAAC,UAAU;IAWlB;;;;;;;;;OASG;IACH,OAAO,CAAC,SAAS;IAgDjB,OAAO,CAAC,WAAW;IAkNnB,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,aAAa;IAoErB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,oBAAoB;IAqB5B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAmBxB;;;;;;;;OAQG;IACH,OAAO,CAAC,aAAa;CAmCtB"}