limen-ai 1.0.0

package/dist/api/agents/agent_api.js

@@ -0,0 +1,467 @@
+/**
+ * Agent management API wrapper for the API surface.
+ * S ref: S12 (agent definitions), DL-2 (agent lifecycle), UC-4 (agent pipeline),
+ *        I-08 (agent identity persistence), I-09 (trust progression),
+ *        I-13 (RBAC), I-17 (governance boundary)
+ *
+ * Phase: Sprint 2 (Trust & Learning — I-09 Trust Progression)
+ * Implements: SDD §7 build order item 9
+ *
+ * I-08: "Identity persists across engine restarts. Stored, not configured.
+ * Agent versions immutable once deployed."
+ *
+ * I-09: "No agent starts with admin trust. Progression: untrusted → probationary
+ * → trusted → admin (human grant only). Revocable on safety violation."
+ *
+ * All agent state persisted in core_agents table (migration v32).
+ * Trust transitions recorded in core_trust_transitions (migration v33).
+ * Safety violations recorded in core_safety_violations (migration v33).
+ * No in-memory cache — single source of truth is SQLite.
+ * Tenant isolation via COALESCE(tenant_id, '__NULL__') pattern on all queries.
+ *
+ * All mutations delegate to kernel database via getConnection().
+ *
+ * Invariants enforced: I-08, I-09, I-13 (RBAC), I-17 (governance boundary), FM-10 (tenant isolation)
+ */
+import { LimenError } from '../errors/limen_error.js';
+import { requirePermission } from '../enforcement/rbac_guard.js';
+import { requireRateLimit } from '../enforcement/rate_guard.js';
+import { getNextTrustLevel, validatePromotion, checkSelfPromotion, getDemotionTarget, } from './trust_progression.js';
+// ============================================================================
+// AgentApiImpl
+// ============================================================================
+/**
+ * S12, DL-2, I-08: Agent management API implementation.
+ *
+ * Agent records are stored in the core_agents table (migration v32).
+ * All queries are tenant-scoped via COALESCE pattern.
+ * Triggers enforce version/name/id immutability and retired terminal state.
+ */
+// CF-014: Maximum registered agents per tenant
+const MAX_AGENTS = 1_000;
+// CF-028: Maximum capabilities per agent (prevent unbounded JSON)
+const MAX_CAPABILITIES = 50;
+// CF-028: Maximum domains per agent (prevent unbounded JSON)
+const MAX_DOMAINS = 20;
+/**
+ * Map a database row to a frozen AgentView.
+ * Only exposes fields declared in the AgentView interface (frozen zone).
+ * C-07: Deep freeze on all returned objects.
+ */
+function rowToView(row) {
+    let capabilities = [];
+    let domains = [];
+    try {
+        const parsed = JSON.parse(row.capabilities);
+        if (Array.isArray(parsed))
+            capabilities = parsed;
+    }
+    catch { /* malformed JSON → empty array */ }
+    try {
+        const parsed = JSON.parse(row.domains);
+        if (Array.isArray(parsed))
+            domains = parsed;
+    }
+    catch { /* malformed JSON → empty array */ }
+    return Object.freeze({
+        id: row.id,
+        name: row.name,
+        version: row.version,
+        trustLevel: row.trust_level,
+        status: row.status,
+        capabilities: Object.freeze([...capabilities]),
+        domains: Object.freeze([...domains]),
+        createdAt: row.created_at,
+    });
+}
+export class AgentApiImpl {
+    rbac;
+    rateLimiter;
+    getConnection;
+    getContext;
+    time;
+    constructor(rbac, rateLimiter, getConnection, getContext, time) {
+        this.rbac = rbac;
+        this.rateLimiter = rateLimiter;
+        this.getConnection = getConnection;
+        this.getContext = getContext;
+        this.time = time;
+    }
+    /**
+     * CF-028: Agent name validation pattern.
+     * Alphanumeric, hyphens, underscores, dots. 1-128 chars.
+     * S ref: S12 (agent definitions), I-07 (isolation), FM-10 (tenant scoping)
+     */
+    static AGENT_NAME_PATTERN = /^[a-zA-Z0-9._-]{1,128}$/;
+    /**
+     * S12, I-08: Register a new agent.
+     * Permission: 'create_agent'
+     * CF-028: Validates agent name before registration.
+     * CF-014: Enforces max agent count per tenant.
+     * FM-10: Tenant isolation via COALESCE pattern.
+     *
+     * Agent state persisted in core_agents table. No in-memory cache.
+     */
+    async register(config) {
+        const conn = this.getConnection();
+        const ctx = this.getContext();
+        requirePermission(this.rbac, ctx, 'create_agent');
+        requireRateLimit(this.rateLimiter, conn, ctx, 'api_calls');
+        // CF-028: Validate agent name to prevent injection
+        if (!AgentApiImpl.AGENT_NAME_PATTERN.test(config.name)) {
+            throw new LimenError('INVALID_INPUT', `Agent name must match [a-zA-Z0-9._-]{1,128}, got '${config.name.slice(0, 40)}'.`);
+        }
+        // CF-028: Validate capabilities array
+        const capabilities = config.capabilities ? [...config.capabilities] : [];
+        if (capabilities.length > MAX_CAPABILITIES) {
+            throw new LimenError('INVALID_INPUT', `Agent capabilities exceed maximum of ${MAX_CAPABILITIES}.`);
+        }
+        for (const cap of capabilities) {
+            if (!AgentApiImpl.AGENT_NAME_PATTERN.test(cap)) {
+                throw new LimenError('INVALID_INPUT', `Capability name must match [a-zA-Z0-9._-]{1,128}, got '${String(cap).slice(0, 40)}'.`);
+            }
+        }
+        // CF-028: Validate domains array
+        const domains = config.domains ? [...config.domains] : [];
+        if (domains.length > MAX_DOMAINS) {
+            throw new LimenError('INVALID_INPUT', `Agent domains exceed maximum of ${MAX_DOMAINS}.`);
+        }
+        for (const domain of domains) {
+            if (!AgentApiImpl.AGENT_NAME_PATTERN.test(domain)) {
+                throw new LimenError('INVALID_INPUT', `Domain name must match [a-zA-Z0-9._-]{1,128}, got '${String(domain).slice(0, 40)}'.`);
+            }
+        }
+        const tenantId = ctx.tenantId ?? null;
+        // CF-014: Count existing agents for this tenant
+        const countRow = conn.get('SELECT COUNT(*) as cnt FROM core_agents WHERE COALESCE(tenant_id, \'__NULL__\') = COALESCE(?, \'__NULL__\')', [tenantId]);
+        if (countRow && countRow.cnt >= MAX_AGENTS) {
+            throw new LimenError('RATE_LIMITED', `Maximum registered agents (${MAX_AGENTS}) exceeded. Retire unused agents first.`);
+        }
+        const agentId = crypto.randomUUID();
+        const now = (this.time ?? { nowISO: () => new Date().toISOString() }).nowISO();
+        // Insert into core_agents with unique constraint on (tenant_id, name)
+        try {
+            conn.run(`INSERT INTO core_agents (id, tenant_id, name, version, trust_level, status, system_prompt, capabilities, domains, template, hitl, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+                agentId,
+                tenantId,
+                config.name,
+                1,
+                'untrusted',
+                'registered',
+                config.systemPrompt ?? null,
+                JSON.stringify(capabilities),
+                JSON.stringify(domains),
+                config.template ?? null,
+                config.hitl ? 1 : 0,
+                now,
+                now,
+            ]);
+        }
+        catch (err) {
+            // Handle UNIQUE constraint violation on (tenant_id, name)
+            const message = err instanceof Error ? err.message : String(err);
+            if (message.includes('UNIQUE constraint failed') || message.includes('idx_core_agents_tenant_name')) {
+                throw new LimenError('INVALID_INPUT', `Agent with name '${config.name}' already exists for this tenant.`);
+            }
+            throw err;
+        }
+        // Read back and return frozen view
+        const row = conn.get('SELECT * FROM core_agents WHERE id = ?', [agentId]);
+        if (!row) {
+            throw new LimenError('ENGINE_UNHEALTHY', 'Agent insert succeeded but read-back failed.');
+        }
+        return rowToView(row);
+    }
+    /**
+     * DL-2, I-08: Pause an agent.
+     * Permission: 'modify_agent'
+     * FM-10: Tenant-scoped query via COALESCE pattern.
+     * I-08: Retired agents rejected by trigger (AGENT_RETIRED_TERMINAL).
+     */
+    async pause(name) {
+        const conn = this.getConnection();
+        const ctx = this.getContext();
+        requirePermission(this.rbac, ctx, 'modify_agent');
+        requireRateLimit(this.rateLimiter, conn, ctx, 'api_calls');
+        const tenantId = ctx.tenantId ?? null;
+        const row = conn.get('SELECT * FROM core_agents WHERE COALESCE(tenant_id, \'__NULL__\') = COALESCE(?, \'__NULL__\') AND name = ?', [tenantId, name]);
+        if (!row) {
+            throw new LimenError('AGENT_NOT_FOUND', `Agent '${name}' not found.`);
+        }
+        if (row.status === 'retired') {
+            throw new LimenError('INVALID_INPUT', `Agent '${name}' is retired and cannot be modified.`);
+        }
+        const now = (this.time ?? { nowISO: () => new Date().toISOString() }).nowISO();
+        conn.run('UPDATE core_agents SET status = ?, updated_at = ? WHERE id = ?', ['paused', now, row.id]);
+    }
+    /**
+     * DL-2, I-08: Resume a paused agent.
+     * Permission: 'modify_agent'
+     * FM-10: Tenant-scoped query via COALESCE pattern.
+     * Only paused agents can be resumed. Returns to 'registered' status.
+     */
+    async resume(name) {
+        const conn = this.getConnection();
+        const ctx = this.getContext();
+        requirePermission(this.rbac, ctx, 'modify_agent');
+        requireRateLimit(this.rateLimiter, conn, ctx, 'api_calls');
+        const tenantId = ctx.tenantId ?? null;
+        const row = conn.get('SELECT * FROM core_agents WHERE COALESCE(tenant_id, \'__NULL__\') = COALESCE(?, \'__NULL__\') AND name = ?', [tenantId, name]);
+        if (!row) {
+            throw new LimenError('AGENT_NOT_FOUND', `Agent '${name}' not found.`);
+        }
+        if (row.status !== 'paused') {
+            throw new LimenError('INVALID_INPUT', `Agent '${name}' is not paused (current status: ${row.status}).`);
+        }
+        const now = (this.time ?? { nowISO: () => new Date().toISOString() }).nowISO();
+        conn.run('UPDATE core_agents SET status = ?, updated_at = ? WHERE id = ?', ['registered', now, row.id]);
+    }
+    /**
+     * DL-2, I-08: Retire an agent permanently.
+     * Permission: 'delete_agent'
+     * FM-10: Tenant-scoped query via COALESCE pattern.
+     * I-08: Retirement is terminal — trigger prevents further mutation.
+     */
+    async retire(name) {
+        const conn = this.getConnection();
+        const ctx = this.getContext();
+        requirePermission(this.rbac, ctx, 'delete_agent');
+        requireRateLimit(this.rateLimiter, conn, ctx, 'api_calls');
+        const tenantId = ctx.tenantId ?? null;
+        const row = conn.get('SELECT * FROM core_agents WHERE COALESCE(tenant_id, \'__NULL__\') = COALESCE(?, \'__NULL__\') AND name = ?', [tenantId, name]);
+        if (!row) {
+            throw new LimenError('AGENT_NOT_FOUND', `Agent '${name}' not found.`);
+        }
+        if (row.status === 'retired') {
+            throw new LimenError('INVALID_INPUT', `Agent '${name}' is already retired.`);
+        }
+        const now = (this.time ?? { nowISO: () => new Date().toISOString() }).nowISO();
+        conn.run('UPDATE core_agents SET status = ?, updated_at = ? WHERE id = ?', ['retired', now, row.id]);
+    }
+    /**
+     * S12, I-08: Get agent by name.
+     * FM-10: Tenant-scoped lookup prevents cross-tenant data leakage.
+     * C-07: Returns frozen AgentView or null.
+     */
+    async get(name) {
+        const conn = this.getConnection();
+        const ctx = this.getContext();
+        const tenantId = ctx.tenantId ?? null;
+        const row = conn.get('SELECT * FROM core_agents WHERE COALESCE(tenant_id, \'__NULL__\') = COALESCE(?, \'__NULL__\') AND name = ?', [tenantId, name]);
+        if (!row)
+            return null;
+        return rowToView(row);
+    }
+    /**
+     * S12, I-08: List all agents for current tenant.
+     * FM-10: COALESCE pattern for tenant isolation.
+     * C-07: Returns frozen array of frozen AgentViews.
+     */
+    async list() {
+        const conn = this.getConnection();
+        const ctx = this.getContext();
+        const tenantId = ctx.tenantId ?? null;
+        const rows = conn.query('SELECT * FROM core_agents WHERE COALESCE(tenant_id, \'__NULL__\') = COALESCE(?, \'__NULL__\')', [tenantId]);
+        return Object.freeze(rows.map(rowToView));
+    }
+    /**
+     * I-09: Promote agent trust level.
+     * Permission: 'modify_agent'
+     * FM-10: Tenant-scoped query via COALESCE pattern.
+     *
+     * Trust state machine (I-09):
+     *   Forward: untrusted→probationary, probationary→trusted, trusted→admin
+     *   Admin requires actorType='human' (application-level AND trigger enforcement)
+     *   No skipping levels (untrusted→trusted is INVALID)
+     *   Retired agents cannot be promoted (blocked by retired terminal trigger)
+     *   Self-promotion is blocked (Security critical finding)
+     *
+     * In a transaction:
+     *   1. INSERT into core_trust_transitions (audit log)
+     *   2. UPDATE core_agents trust_level
+     *   3. Return updated AgentView
+     */
+    async promote(name, options) {
+        const conn = this.getConnection();
+        const ctx = this.getContext();
+        requirePermission(this.rbac, ctx, 'modify_agent');
+        requireRateLimit(this.rateLimiter, conn, ctx, 'api_calls');
+        const tenantId = ctx.tenantId ?? null;
+        const row = conn.get('SELECT * FROM core_agents WHERE COALESCE(tenant_id, \'__NULL__\') = COALESCE(?, \'__NULL__\') AND name = ?', [tenantId, name]);
+        if (!row) {
+            throw new LimenError('AGENT_NOT_FOUND', `Agent '${name}' not found.`);
+        }
+        // Retired agents cannot be promoted (terminal state)
+        if (row.status === 'retired') {
+            throw new LimenError('INVALID_INPUT', `Agent '${name}' is retired and cannot be promoted.`);
+        }
+        // Self-promotion prevention (Security critical)
+        const selfCheck = checkSelfPromotion(ctx.agentId, row.id);
+        if (!selfCheck.allowed) {
+            throw new LimenError('INVALID_INPUT', selfCheck.reason);
+        }
+        const currentLevel = row.trust_level;
+        const actorType = options?.actorType ?? 'system';
+        // Determine target level
+        let targetLevel;
+        if (options?.targetLevel) {
+            targetLevel = options.targetLevel;
+        }
+        else {
+            const next = getNextTrustLevel(currentLevel);
+            if (!next) {
+                throw new LimenError('INVALID_INPUT', `Agent '${name}' is already at admin trust level.`);
+            }
+            targetLevel = next;
+        }
+        // Validate the promotion via state machine
+        const validation = validatePromotion(currentLevel, targetLevel, actorType);
+        if (!validation.valid) {
+            throw new LimenError('INVALID_INPUT', validation.reason);
+        }
+        const now = (this.time ?? { nowISO: () => new Date().toISOString() }).nowISO();
+        const transitionId = crypto.randomUUID();
+        // Transaction: INSERT transition record + UPDATE trust level
+        // The trigger on core_agents will verify the transition record exists for admin promotion
+        conn.transaction(() => {
+            // 1. INSERT transition audit record
+            conn.run(`INSERT INTO core_trust_transitions (id, tenant_id, agent_id, from_level, to_level, actor_type, actor_id, reason, criteria_snapshot, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+                transitionId,
+                tenantId,
+                row.id,
+                currentLevel,
+                targetLevel,
+                actorType,
+                options?.actorId ?? null,
+                options?.reason ?? `Promoted from ${currentLevel} to ${targetLevel}`,
+                JSON.stringify({}),
+                now,
+            ]);
+            // 2. UPDATE agent trust level
+            // For admin promotion, the trg_core_agents_trust_admin_guard_v2 trigger
+            // will verify the transition record exists with actor_type='human'
+            conn.run('UPDATE core_agents SET trust_level = ?, updated_at = ? WHERE id = ?', [targetLevel, now, row.id]);
+        });
+        // Read back and return frozen view
+        const updatedRow = conn.get('SELECT * FROM core_agents WHERE id = ?', [row.id]);
+        if (!updatedRow) {
+            throw new LimenError('ENGINE_UNHEALTHY', 'Trust promotion succeeded but read-back failed.');
+        }
+        return rowToView(updatedRow);
+    }
+    /**
+     * I-09: Record a safety violation against an agent.
+     * Permission: 'modify_agent'
+     * FM-10: Tenant-scoped query via COALESCE pattern.
+     *
+     * Records the violation and determines automatic trust demotion:
+     *   critical/high severity → demote to untrusted
+     *   low/medium on admin → demote to trusted
+     *   low/medium on trusted → demote to probationary
+     *   low/medium on probationary → demote to untrusted
+     *   any on untrusted → no demotion (already lowest)
+     *
+     * In a transaction:
+     *   1. INSERT into core_safety_violations
+     *   2. If demotion needed: INSERT into core_trust_transitions + UPDATE core_agents
+     *   3. Return updated AgentView
+     */
+    async recordViolation(name, violation) {
+        const conn = this.getConnection();
+        const ctx = this.getContext();
+        requirePermission(this.rbac, ctx, 'modify_agent');
+        requireRateLimit(this.rateLimiter, conn, ctx, 'api_calls');
+        const tenantId = ctx.tenantId ?? null;
+        const row = conn.get('SELECT * FROM core_agents WHERE COALESCE(tenant_id, \'__NULL__\') = COALESCE(?, \'__NULL__\') AND name = ?', [tenantId, name]);
+        if (!row) {
+            throw new LimenError('AGENT_NOT_FOUND', `Agent '${name}' not found.`);
+        }
+        const currentLevel = row.trust_level;
+        const now = (this.time ?? { nowISO: () => new Date().toISOString() }).nowISO();
+        const violationId = crypto.randomUUID();
+        // F-S2-001: Retired agents — record violation but skip demotion path.
+        // The retired terminal trigger (trg_core_agents_retired_terminal) ABORTs any UPDATE
+        // on core_agents for retired agents. If we attempt demotion inside the same transaction
+        // as the violation INSERT, the rollback loses the violation record entirely.
+        // Fix: detect retired status BEFORE the transaction, and handle separately.
+        if (row.status === 'retired') {
+            // Record the violation outside a transaction that would touch core_agents.
+            // demotion_applied = 0: retired agents cannot be demoted (terminal state).
+            conn.run(`INSERT INTO core_safety_violations (id, tenant_id, agent_id, violation_type, severity, description, evidence_json, demotion_applied, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+                violationId,
+                tenantId,
+                row.id,
+                violation.violationType,
+                violation.severity,
+                violation.description,
+                JSON.stringify(violation.evidence ?? {}),
+                0,
+                now,
+            ]);
+            // Return agent view as-is — no mutation on retired agents.
+            return rowToView(row);
+        }
+        const demotionTarget = getDemotionTarget(currentLevel, violation.severity);
+        conn.transaction(() => {
+            // 1. INSERT safety violation record
+            conn.run(`INSERT INTO core_safety_violations (id, tenant_id, agent_id, violation_type, severity, description, evidence_json, demotion_applied, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+                violationId,
+                tenantId,
+                row.id,
+                violation.violationType,
+                violation.severity,
+                violation.description,
+                JSON.stringify(violation.evidence ?? {}),
+                demotionTarget ? 1 : 0,
+                now,
+            ]);
+            // 2. If demotion needed, record transition and update trust level
+            if (demotionTarget) {
+                const transitionId = crypto.randomUUID();
+                conn.run(`INSERT INTO core_trust_transitions (id, tenant_id, agent_id, from_level, to_level, actor_type, actor_id, reason, criteria_snapshot, created_at)
+           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+                    transitionId,
+                    tenantId,
+                    row.id,
+                    currentLevel,
+                    demotionTarget,
+                    'policy',
+                    'safety-violation-demotion',
+                    `Automatic demotion due to ${violation.severity} ${violation.violationType} violation: ${violation.description}`,
+                    JSON.stringify({ violationId, severity: violation.severity, violationType: violation.violationType }),
+                    now,
+                ]);
+                conn.run('UPDATE core_agents SET trust_level = ?, updated_at = ? WHERE id = ?', [demotionTarget, now, row.id]);
+            }
+        });
+        // Read back and return frozen view
+        const updatedRow = conn.get('SELECT * FROM core_agents WHERE id = ?', [row.id]);
+        if (!updatedRow) {
+            throw new LimenError('ENGINE_UNHEALTHY', 'Violation recording succeeded but read-back failed.');
+        }
+        return rowToView(updatedRow);
+    }
+    /**
+     * UC-4, A-05: Create a typed agent pipeline for sequential processing.
+     * Internally creates a mission with a linear task graph (A-05).
+     */
+    pipeline(_stages) {
+        const impl = this;
+        return {
+            async execute(_input) {
+                const conn = impl.getConnection();
+                const ctx = impl.getContext();
+                requirePermission(impl.rbac, ctx, 'create_mission');
+                requireRateLimit(impl.rateLimiter, conn, ctx, 'api_calls');
+                // Pipeline creates a mission per stage and chains them
+                // This is a convenience wrapper; actual implementation would use SC-1, SC-2
+                throw new LimenError('ENGINE_UNHEALTHY', 'Pipeline execution requires full orchestration wiring.');
+            },
+        };
+    }
+}
+//# sourceMappingURL=agent_api.js.map

package/dist/api/agents/agent_api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent_api.js","sourceRoot":"","sources":["../../../src/api/agents/agent_api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAUH,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAEL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAEhC,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E;;;;;;GAMG;AACH,+CAA+C;AAC/C,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,6DAA6D;AAC7D,MAAM,WAAW,GAAG,EAAE,CAAC;AAsBvB;;;;GAIG;AACH,SAAS,SAAS,CAAC,GAAa;IAC9B,IAAI,YAAY,GAAsB,EAAE,CAAC;IACzC,IAAI,OAAO,GAAsB,EAAE,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,YAAY,GAAG,MAAM,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,MAAM,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;IAE9C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,GAAG,CAAC,EAAa;QACrB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,WAAsC;QACtD,MAAM,EAAE,GAAG,CAAC,MAA6B;QACzC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC;QAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QACpC,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,YAAY;IAEJ;IACA;IACA;IACA;IACA;IALnB,YACmB,IAAgB,EAChB,WAAwB,EACxB,aAAuC,EACvC,UAAkC,EAClC,IAA6D;QAJ7D,SAAI,GAAJ,IAAI,CAAY;QAChB,gBAAW,GAAX,WAAW,CAAa;QACxB,kBAAa,GAAb,aAAa,CAA0B;QACvC,eAAU,GAAV,UAAU,CAAwB;QAClC,SAAI,GAAJ,IAAI,CAAyD;IAC7E,CAAC;IAEJ;;;;OAIG;IACK,MAAM,CAAU,kBAAkB,GAAG,yBAAyB,CAAC;IAEvE;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CAAC,MAAyB;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE9B,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QAClD,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAE3D,mDAAmD;QACnD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,UAAU,CAAC,eAAe,EAClC,qDAAqD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACvF,CAAC;QAED,sCAAsC;QACtC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,IAAI,YAAY,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAC3C,MAAM,IAAI,UAAU,CAAC,eAAe,EAClC,wCAAwC,gBAAgB,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,UAAU,CAAC,eAAe,EAClC,0DAA0D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,UAAU,CAAC,eAAe,EAClC,mCAAmC,WAAW,GAAG,CAAC,CAAC;QACvD,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,UAAU,CAAC,eAAe,EAClC,sDAAsD,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;QAEtC,gDAAgD;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,6GAA6G,EAC7G,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;YAC3C,MAAM,IAAI,UAAU,CAAC,cAAc,EACjC,8BAA8B,UAAU,yCAAyC,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAa,CAAC;QAC/C,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAE/E,sEAAsE;QACtE,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CACN;wDACgD,EAChD;gBACE,OAAO;gBACP,QAAQ;gBACR,MAAM,CAAC,IAAI;gBACX,CAAC;gBACD,WAAW;gBACX,YAAY;gBACZ,MAAM,CAAC,YAAY,IAAI,IAAI;gBAC3B,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;gBAC5B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBACvB,MAAM,CAAC,QAAQ,IAAI,IAAI;gBACvB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnB,GAAG;gBACH,GAAG;aACJ,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,0DAA0D;YAC1D,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBACpG,MAAM,IAAI,UAAU,CAAC,eAAe,EAClC,oBAAoB,MAAM,CAAC,IAAI,mCAAmC,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,mCAAmC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,wCAAwC,EACxC,CAAC,OAAO,CAAC,CACV,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,8CAA8C,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE9B,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QAClD,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,4GAA4G,EAC5G,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,UAAU,IAAI,cAAc,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,UAAU,IAAI,sCAAsC,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/E,IAAI,CAAC,GAAG,CACN,gEAAgE,EAChE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE9B,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QAClD,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,4GAA4G,EAC5G,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,UAAU,IAAI,cAAc,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,UAAU,IAAI,oCAAoC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/E,IAAI,CAAC,GAAG,CACN,gEAAgE,EAChE,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAC5B,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE9B,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QAClD,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,4GAA4G,EAC5G,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,UAAU,IAAI,cAAc,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,UAAU,IAAI,uBAAuB,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/E,IAAI,CAAC,GAAG,CACN,gEAAgE,EAChE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CACzB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;QAEtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,4GAA4G,EAC5G,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;QACF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;QAEtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,+FAA+F,EAC/F,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAA+B;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE9B,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QAClD,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,4GAA4G,EAC5G,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,UAAU,IAAI,cAAc,CAAC,CAAC;QACxE,CAAC;QAED,qDAAqD;QACrD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,UAAU,IAAI,sCAAsC,CAAC,CAAC;QAC9F,CAAC;QAED,gDAAgD;QAChD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,WAAyB,CAAC;QACnD,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC;QAEjD,yBAAyB;QACzB,IAAI,WAAuB,CAAC;QAC5B,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,UAAU,IAAI,oCAAoC,CAAC,CAAC;YAC5F,CAAC;YACD,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,2CAA2C;QAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/E,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEzC,6DAA6D;QAC7D,0FAA0F;QAC1F,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACpB,oCAAoC;YACpC,IAAI,CAAC,GAAG,CACN;+CACuC,EACvC;gBACE,YAAY;gBACZ,QAAQ;gBACR,GAAG,CAAC,EAAE;gBACN,YAAY;gBACZ,WAAW;gBACX,SAAS;gBACT,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,OAAO,EAAE,MAAM,IAAI,iBAAiB,YAAY,OAAO,WAAW,EAAE;gBACpE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClB,GAAG;aACJ,CACF,CAAC;YAEF,8BAA8B;YAC9B,wEAAwE;YACxE,mEAAmE;YACnE,IAAI,CAAC,GAAG,CACN,qEAAqE,EACrE,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,mCAAmC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,wCAAwC,EACxC,CAAC,GAAG,CAAC,EAAE,CAAC,CACT,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,iDAAiD,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,SAA+B;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE9B,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QAClD,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,4GAA4G,EAC5G,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,UAAU,IAAI,cAAc,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,WAAyB,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/E,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAExC,sEAAsE;QACtE,oFAAoF;QACpF,wFAAwF;QACxF,6EAA6E;QAC7E,4EAA4E;QAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,2EAA2E;YAC3E,2EAA2E;YAC3E,IAAI,CAAC,GAAG,CACN;4CACoC,EACpC;gBACE,WAAW;gBACX,QAAQ;gBACR,GAAG,CAAC,EAAE;gBACN,SAAS,CAAC,aAAa;gBACvB,SAAS,CAAC,QAAQ;gBAClB,SAAS,CAAC,WAAW;gBACrB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACxC,CAAC;gBACD,GAAG;aACJ,CACF,CAAC;YAEF,2DAA2D;YAC3D,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,cAAc,GAAG,iBAAiB,CAAC,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE3E,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACpB,oCAAoC;YACpC,IAAI,CAAC,GAAG,CACN;4CACoC,EACpC;gBACE,WAAW;gBACX,QAAQ;gBACR,GAAG,CAAC,EAAE;gBACN,SAAS,CAAC,aAAa;gBACvB,SAAS,CAAC,QAAQ;gBAClB,SAAS,CAAC,WAAW;gBACrB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACxC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtB,GAAG;aACJ,CACF,CAAC;YAEF,kEAAkE;YAClE,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBACzC,IAAI,CAAC,GAAG,CACN;iDACuC,EACvC;oBACE,YAAY;oBACZ,QAAQ;oBACR,GAAG,CAAC,EAAE;oBACN,YAAY;oBACZ,cAAc;oBACd,QAAQ;oBACR,2BAA2B;oBAC3B,6BAA6B,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,eAAe,SAAS,CAAC,WAAW,EAAE;oBAChH,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC;oBACrG,GAAG;iBACJ,CACF,CAAC;gBAEF,IAAI,CAAC,GAAG,CACN,qEAAqE,EACrE,CAAC,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAC9B,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,mCAAmC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,wCAAwC,EACxC,CAAC,GAAG,CAAC,EAAE,CAAC,CACT,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,qDAAqD,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,OAAiC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC;QAElB,OAAO;YACL,KAAK,CAAC,OAAO,CAAC,MAA+B;gBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAE9B,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;gBACpD,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAE3D,uDAAuD;gBACvD,4EAA4E;gBAC5E,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,wDAAwD,CAAC,CAAC;YACrG,CAAC;SACF,CAAC;IACJ,CAAC"}

package/dist/api/agents/trust_progression.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Trust Progression Logic — I-09 (Trust is Earned)
+ * Store-level implementation: trust state machine + safety demotion.
+ *
+ * Phase: Sprint 2 (Trust & Learning)
+ * Spec ref: I-09 "No agent starts with admin trust. Progression:
+ *           untrusted → probationary → trusted → admin (human grant only).
+ *           Revocable on safety violation."
+ *
+ * Trust State Machine:
+ *   Forward: untrusted→probationary, probationary→trusted, trusted→admin
+ *   Admin requires actorType='human' (application-level AND trigger enforcement)
+ *   No skipping levels (untrusted→trusted is INVALID)
+ *   Retired agents cannot be promoted (blocked by retired terminal trigger)
+ *
+ * Demotion on Safety Violation:
+ *   critical/high on trusted/admin → untrusted
+ *   critical/high on probationary → untrusted
+ *   low/medium on trusted → probationary
+ *   low/medium on probationary → untrusted
+ *   low/medium on admin → trusted
+ *
+ * Security: Self-promotion prevention — agents cannot promote themselves.
+ */
+import type { AgentId } from '../../kernel/interfaces/index.js';
+export type TrustLevel = 'untrusted' | 'probationary' | 'trusted' | 'admin';
+/**
+ * Determine the next trust level for a given current level.
+ * Returns null if already at admin (no forward progression possible).
+ */
+export declare function getNextTrustLevel(current: TrustLevel): TrustLevel | null;
+/**
+ * Validate that a trust level transition is valid (single step forward).
+ * Returns { valid: true } if the transition is allowed,
+ * or { valid: false, reason: string } if not.
+ *
+ * Rules:
+ *   1. from !== to (no self-transition)
+ *   2. to must be exactly one step above from
+ *   3. admin requires human actor type
+ */
+export declare function validatePromotion(fromLevel: TrustLevel, targetLevel: TrustLevel, actorType: 'system' | 'human'): {
+    valid: true;
+} | {
+    valid: false;
+    reason: string;
+};
+/**
+ * Validate self-promotion is not occurring.
+ * Security-critical: agents cannot promote themselves.
+ *
+ * @param ctxAgentId - The agent ID from the operation context (caller's identity)
+ * @param targetAgentId - The agent being promoted
+ * @returns { allowed: true } if not self-promotion, { allowed: false } if blocked
+ */
+export declare function checkSelfPromotion(ctxAgentId: AgentId | null | undefined, targetAgentId: string): {
+    allowed: true;
+} | {
+    allowed: false;
+    reason: string;
+};
+/**
+ * Severity levels for safety violations.
+ */
+export type ViolationSeverity = 'low' | 'medium' | 'high' | 'critical';
+/**
+ * Determine the demotion target level after a safety violation.
+ * Returns the new trust level if demotion is needed, or null if no demotion applies.
+ *
+ * Demotion matrix (I-09 spec):
+ *   critical/high on any level above untrusted → untrusted
+ *   low/medium on admin → trusted
+ *   low/medium on trusted → probationary
+ *   low/medium on probationary → untrusted
+ *   any on untrusted → null (already at lowest)
+ */
+export declare function getDemotionTarget(currentLevel: TrustLevel, severity: ViolationSeverity): TrustLevel | null;
+//# sourceMappingURL=trust_progression.d.ts.map

package/dist/api/agents/trust_progression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust_progression.d.ts","sourceRoot":"","sources":["../../../src/api/agents/trust_progression.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAIhE,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC;AAgB5E;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAExE;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,UAAU,EACvB,SAAS,EAAE,QAAQ,GAAG,OAAO,GAC5B;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA4BpD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EACtC,aAAa,EAAE,MAAM,GACpB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAQxD;AAID;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEvE;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,UAAU,EACxB,QAAQ,EAAE,iBAAiB,GAC1B,UAAU,GAAG,IAAI,CAmBnB"}