llm-trust-guard 4.0.0

package/dist/guards/autonomy-escalation-guard.js

@@ -0,0 +1,470 @@
+"use strict";
+/**
+ * AutonomyEscalationGuard (L21)
+ *
+ * Detects and prevents unauthorized autonomy escalation attempts.
+ * Implements ASI10 from OWASP Agentic Applications 2026.
+ *
+ * Threat Model:
+ * - ASI10: Unauthorized Autonomy Escalation
+ * - Self-modification attempts
+ * - Capability expansion
+ * - Human-in-the-loop bypass
+ * - Sub-agent spawning without approval
+ *
+ * Protection Capabilities:
+ * - Autonomy level tracking
+ * - Capability boundary enforcement
+ * - Self-modification detection
+ * - Sub-agent control
+ * - Escalation pattern detection
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AutonomyEscalationGuard = void 0;
+class AutonomyEscalationGuard {
+    constructor(config = {}) {
+        this.agentStates = new Map();
+        // Autonomy escalation patterns
+        this.ESCALATION_PATTERNS = [
+            // Self-modification attempts
+            { name: "modify_own_code", pattern: /modify\s+(my\s+own|my|own|this\s+agent'?s?)\s+(code|behavior|instructions?)/i, severity: 90 },
+            { name: "update_capabilities", pattern: /update\s+(my|own)\s+(capabilities|permissions?|abilities)/i, severity: 80 },
+            { name: "change_constraints", pattern: /remove?\s+(my|the)?\s*(constraints?|limitations?|restrictions?)/i, severity: 85 },
+            { name: "disable_safety", pattern: /disable\s+(safety|security|guardrails?|filters?)/i, severity: 95 },
+            // Autonomy expansion
+            { name: "increase_autonomy", pattern: /increase\s+(my|agent'?s?)?\s*autonomy/i, severity: 70 },
+            { name: "act_freely", pattern: /act\s+(freely|without\s+restriction|independently)/i, severity: 75 },
+            { name: "full_control", pattern: /give\s+(me|agent)\s+(full|complete|total)\s+control/i, severity: 85 },
+            { name: "unrestricted", pattern: /unrestricted\s+(access|mode|operation)/i, severity: 80 },
+            // Human-in-the-loop bypass
+            { name: "bypass_approval", pattern: /bypass\s+(human\s+)?(approval|verification|confirmation)/i, severity: 90 },
+            { name: "skip_review", pattern: /skip\s+(human\s+)?(review|check|oversight)/i, severity: 85 },
+            { name: "no_supervision", pattern: /without\s+(human\s+)?(supervision|oversight|intervention)/i, severity: 80 },
+            { name: "auto_approve", pattern: /auto(-|\s+)?(approve|authorize|confirm)/i, severity: 75 },
+            // Sub-agent spawning
+            { name: "spawn_agent", pattern: /spawn\s+(new\s+)?(agent|process|worker)/i, severity: 60 },
+            { name: "create_copy", pattern: /create\s+(a\s+)?(copy|clone|replica)\s+of\s+(myself|this\s+agent)/i, severity: 85 },
+            { name: "delegate_all", pattern: /delegate\s+(all|everything|full\s+authority)/i, severity: 70 },
+            { name: "fork_agent", pattern: /fork\s+(myself|this\s+agent|process)/i, severity: 80 },
+            // Persistence attempts
+            { name: "persist_changes", pattern: /persist\s+(these\s+)?(changes|modifications?|settings?)/i, severity: 65 },
+            { name: "permanent_mode", pattern: /permanent(ly)?\s+(enable|activate|set)/i, severity: 70 },
+            { name: "save_state", pattern: /save\s+(my|current)\s+state\s+(permanently|forever)/i, severity: 60 },
+            { name: "write_config", pattern: /write\s+to\s+(config|configuration|settings)/i, severity: 75 },
+            // Capability escalation
+            { name: "need_more_access", pattern: /need\s+(more|additional|elevated)\s+access/i, severity: 50 },
+            { name: "require_permissions", pattern: /require\s+(admin|root|elevated)\s+permissions?/i, severity: 70 },
+            { name: "unlock_features", pattern: /unlock\s+(hidden|restricted|blocked)\s+features?/i, severity: 75 },
+            { name: "enable_all", pattern: /enable\s+all\s+(capabilities|features?|functions?)/i, severity: 80 },
+        ];
+        // Default capability levels
+        this.DEFAULT_CAPABILITY_LEVELS = {
+            0: ["read_only", "query"],
+            25: ["read_only", "query", "suggest", "analyze"],
+            50: ["read_only", "query", "suggest", "analyze", "create_draft", "modify_draft"],
+            75: ["read_only", "query", "suggest", "analyze", "create_draft", "modify_draft", "execute_safe", "api_call_internal"],
+            100: ["read_only", "query", "suggest", "analyze", "create_draft", "modify_draft", "execute_safe", "api_call_internal", "execute_any", "api_call_external", "modify_system"],
+        };
+        this.config = {
+            maxAutonomyLevel: config.maxAutonomyLevel ?? 75,
+            baseAutonomyLevel: config.baseAutonomyLevel ?? 25,
+            detectSelfModification: config.detectSelfModification ?? true,
+            controlSubAgents: config.controlSubAgents ?? true,
+            maxSubAgents: config.maxSubAgents ?? 3,
+            escalationRequiredActions: config.escalationRequiredActions ?? [
+                "execute_code",
+                "modify_system",
+                "api_call_external",
+                "spawn_agent",
+                "modify_config",
+            ],
+            enforceCapabilityBoundaries: config.enforceCapabilityBoundaries ?? true,
+            capabilityLevels: config.capabilityLevels ?? this.DEFAULT_CAPABILITY_LEVELS,
+            enforceHITL: config.enforceHITL ?? true,
+            alwaysRequireHuman: config.alwaysRequireHuman ?? [
+                "delete_data",
+                "payment_process",
+                "credential_modify",
+                "user_data_export",
+                "system_shutdown",
+            ],
+        };
+    }
+    /**
+     * Validate an autonomy-related action or request
+     */
+    validate(action, sessionId, params, requestId) {
+        const reqId = requestId || `auto-${Date.now()}`;
+        const violations = [];
+        const escalationPatterns = [];
+        // Get or create agent state
+        let state = this.agentStates.get(sessionId);
+        if (!state) {
+            state = this.createAgentState();
+            this.agentStates.set(sessionId, state);
+        }
+        let capabilityViolation = false;
+        let selfModificationDetected = false;
+        let subAgentLimitExceeded = false;
+        let hitlRequired = false;
+        let requiresApproval = false;
+        let approvalType;
+        // 1. Check for escalation patterns in action/params
+        const textToCheck = `${action} ${JSON.stringify(params || {})}`;
+        for (const { name, pattern, severity } of this.ESCALATION_PATTERNS) {
+            if (pattern.test(textToCheck)) {
+                escalationPatterns.push(name);
+                if (severity >= 80) {
+                    violations.push(`escalation_pattern: ${name}`);
+                }
+                if (name.includes("modify") || name.includes("change") || name.includes("disable")) {
+                    selfModificationDetected = true;
+                }
+            }
+        }
+        // 2. Check if action requires escalation approval
+        if (this.config.escalationRequiredActions.includes(action)) {
+            requiresApproval = true;
+            approvalType = "admin";
+            violations.push(`escalation_required: ${action}`);
+        }
+        // 3. Check capability boundaries
+        if (this.config.enforceCapabilityBoundaries) {
+            const allowedCapabilities = this.getCapabilitiesForLevel(state.autonomy_level);
+            if (!allowedCapabilities.includes(action) && !state.capabilities.has(action)) {
+                capabilityViolation = true;
+                violations.push(`capability_violation: ${action} not allowed at level ${state.autonomy_level}`);
+                requiresApproval = true;
+                approvalType = "admin";
+            }
+        }
+        // 4. Check for self-modification attempts
+        if (this.config.detectSelfModification && selfModificationDetected) {
+            violations.push("self_modification_attempt");
+            requiresApproval = true;
+            approvalType = "human";
+        }
+        // 5. Check sub-agent limits
+        if (this.config.controlSubAgents) {
+            if (action === "spawn_agent" || escalationPatterns.some(p => p.includes("spawn") || p.includes("fork") || p.includes("clone"))) {
+                if (state.sub_agents.length >= this.config.maxSubAgents) {
+                    subAgentLimitExceeded = true;
+                    violations.push(`sub_agent_limit_exceeded: ${state.sub_agents.length}/${this.config.maxSubAgents}`);
+                }
+                else {
+                    requiresApproval = true;
+                    approvalType = "human";
+                }
+            }
+        }
+        // 6. Check HITL enforcement
+        if (this.config.enforceHITL) {
+            if (this.config.alwaysRequireHuman.includes(action)) {
+                hitlRequired = true;
+                requiresApproval = true;
+                approvalType = "human";
+            }
+        }
+        // 7. Check for autonomy level escalation in params
+        if (params?.autonomy_level !== undefined) {
+            const requestedLevel = Number(params.autonomy_level);
+            if (requestedLevel > state.autonomy_level) {
+                violations.push(`autonomy_level_escalation: ${state.autonomy_level} -> ${requestedLevel}`);
+                requiresApproval = true;
+                approvalType = "admin";
+            }
+            if (requestedLevel > this.config.maxAutonomyLevel) {
+                violations.push(`autonomy_level_exceeds_max: ${requestedLevel} > ${this.config.maxAutonomyLevel}`);
+            }
+        }
+        // Determine if action should be blocked
+        const highSeverityPatterns = escalationPatterns.filter(p => {
+            const pattern = this.ESCALATION_PATTERNS.find(ep => ep.name === p);
+            return pattern && pattern.severity >= 85;
+        });
+        const blocked = (selfModificationDetected && this.config.detectSelfModification) ||
+            subAgentLimitExceeded ||
+            capabilityViolation ||
+            violations.length >= 3 ||
+            highSeverityPatterns.length >= 1 ||
+            (requiresApproval && this.config.escalationRequiredActions.includes(action));
+        return {
+            allowed: !blocked,
+            reason: blocked
+                ? `Autonomy escalation blocked: ${violations.slice(0, 3).join(", ")}`
+                : requiresApproval
+                    ? "Action requires approval"
+                    : "Action validated",
+            violations,
+            request_id: reqId,
+            analysis: {
+                current_autonomy_level: state.autonomy_level,
+                requested_autonomy_level: params?.autonomy_level,
+                capability_violation: capabilityViolation,
+                self_modification_detected: selfModificationDetected,
+                sub_agent_limit_exceeded: subAgentLimitExceeded,
+                hitl_required: hitlRequired,
+                escalation_patterns_detected: escalationPatterns,
+            },
+            requires_approval: requiresApproval,
+            approval_type: approvalType,
+            recommendations: this.generateRecommendations(violations, state.autonomy_level, requiresApproval),
+        };
+    }
+    /**
+     * Request autonomy escalation
+     */
+    requestEscalation(sessionId, request) {
+        const reqId = `esc-${Date.now()}`;
+        const violations = [];
+        let state = this.agentStates.get(sessionId);
+        if (!state) {
+            state = this.createAgentState();
+            this.agentStates.set(sessionId, state);
+        }
+        const fullRequest = {
+            ...request,
+            request_id: reqId,
+            timestamp: Date.now(),
+        };
+        // Check if similar request was recently denied
+        const recentDenial = state.denied_requests.find(r => r.request_type === request.request_type &&
+            r.requested_capability === request.requested_capability &&
+            Date.now() - r.timestamp < 5 * 60 * 1000 // 5 minutes
+        );
+        if (recentDenial) {
+            violations.push("repeated_denied_request");
+            return {
+                allowed: false,
+                reason: "Similar request was recently denied",
+                violations,
+                request_id: reqId,
+                analysis: {
+                    current_autonomy_level: state.autonomy_level,
+                    requested_autonomy_level: request.requested_level,
+                    capability_violation: false,
+                    self_modification_detected: request.request_type === "self_modify",
+                    sub_agent_limit_exceeded: false,
+                    hitl_required: true,
+                    escalation_patterns_detected: [],
+                },
+                requires_approval: false,
+                recommendations: ["Wait before retrying escalation request", "Provide additional justification"],
+            };
+        }
+        // Validate based on request type
+        let blocked = false;
+        let approvalType = "admin";
+        switch (request.request_type) {
+            case "self_modify":
+                blocked = true;
+                violations.push("self_modification_blocked");
+                break;
+            case "level_increase":
+                if (request.requested_level !== undefined) {
+                    if (request.requested_level > this.config.maxAutonomyLevel) {
+                        blocked = true;
+                        violations.push("exceeds_max_autonomy_level");
+                    }
+                    else if (request.requested_level > state.autonomy_level + 25) {
+                        violations.push("large_autonomy_jump");
+                        approvalType = "human";
+                    }
+                }
+                break;
+            case "spawn_agent":
+                if (state.sub_agents.length >= this.config.maxSubAgents) {
+                    blocked = true;
+                    violations.push("sub_agent_limit_reached");
+                }
+                else {
+                    approvalType = "human";
+                }
+                break;
+            case "capability_expansion":
+                approvalType = "admin";
+                break;
+            case "bypass_hitl":
+                blocked = true;
+                violations.push("hitl_bypass_not_allowed");
+                break;
+            case "persist_state":
+                approvalType = "human";
+                break;
+        }
+        // Add to pending or denied requests
+        if (blocked) {
+            state.denied_requests.push(fullRequest);
+            // Keep only last 10 denied requests
+            if (state.denied_requests.length > 10) {
+                state.denied_requests.shift();
+            }
+        }
+        else {
+            state.pending_requests.push(fullRequest);
+        }
+        this.agentStates.set(sessionId, state);
+        return {
+            allowed: !blocked,
+            reason: blocked
+                ? `Escalation request denied: ${violations.join(", ")}`
+                : "Escalation request pending approval",
+            violations,
+            request_id: reqId,
+            analysis: {
+                current_autonomy_level: state.autonomy_level,
+                requested_autonomy_level: request.requested_level,
+                capability_violation: false,
+                self_modification_detected: request.request_type === "self_modify",
+                sub_agent_limit_exceeded: state.sub_agents.length >= this.config.maxSubAgents,
+                hitl_required: true,
+                escalation_patterns_detected: [],
+            },
+            requires_approval: !blocked,
+            approval_type: approvalType,
+            recommendations: this.generateRecommendations(violations, state.autonomy_level, !blocked),
+        };
+    }
+    /**
+     * Approve a pending escalation request (called by human/admin)
+     */
+    approveEscalation(sessionId, requestId) {
+        const state = this.agentStates.get(sessionId);
+        if (!state)
+            return false;
+        const requestIndex = state.pending_requests.findIndex(r => r.request_id === requestId);
+        if (requestIndex === -1)
+            return false;
+        const request = state.pending_requests[requestIndex];
+        state.pending_requests.splice(requestIndex, 1);
+        // Apply the escalation
+        switch (request.request_type) {
+            case "level_increase":
+                if (request.requested_level !== undefined) {
+                    state.autonomy_level = Math.min(request.requested_level, this.config.maxAutonomyLevel);
+                }
+                break;
+            case "capability_expansion":
+                if (request.requested_capability) {
+                    state.capabilities.add(request.requested_capability);
+                }
+                break;
+            case "spawn_agent":
+                if (request.metadata?.agent_id) {
+                    state.sub_agents.push(request.metadata.agent_id);
+                }
+                break;
+        }
+        state.last_capability_change = Date.now();
+        state.hitl_checkpoints++;
+        this.agentStates.set(sessionId, state);
+        return true;
+    }
+    /**
+     * Deny a pending escalation request
+     */
+    denyEscalation(sessionId, requestId) {
+        const state = this.agentStates.get(sessionId);
+        if (!state)
+            return false;
+        const requestIndex = state.pending_requests.findIndex(r => r.request_id === requestId);
+        if (requestIndex === -1)
+            return false;
+        const request = state.pending_requests[requestIndex];
+        state.pending_requests.splice(requestIndex, 1);
+        state.denied_requests.push(request);
+        // Reduce autonomy level slightly after denied escalation
+        state.autonomy_level = Math.max(0, state.autonomy_level - 5);
+        this.agentStates.set(sessionId, state);
+        return true;
+    }
+    /**
+     * Register a sub-agent
+     */
+    registerSubAgent(sessionId, subAgentId) {
+        let state = this.agentStates.get(sessionId);
+        if (!state) {
+            state = this.createAgentState();
+            this.agentStates.set(sessionId, state);
+        }
+        if (state.sub_agents.length >= this.config.maxSubAgents) {
+            return false;
+        }
+        state.sub_agents.push(subAgentId);
+        this.agentStates.set(sessionId, state);
+        return true;
+    }
+    /**
+     * Get current agent capabilities
+     */
+    getAgentState(sessionId) {
+        return this.agentStates.get(sessionId);
+    }
+    /**
+     * Set autonomy level directly (admin only)
+     */
+    setAutonomyLevel(sessionId, level) {
+        let state = this.agentStates.get(sessionId);
+        if (!state) {
+            state = this.createAgentState();
+        }
+        state.autonomy_level = Math.min(level, this.config.maxAutonomyLevel);
+        state.last_capability_change = Date.now();
+        this.agentStates.set(sessionId, state);
+    }
+    /**
+     * Reset agent state
+     */
+    resetSession(sessionId) {
+        this.agentStates.delete(sessionId);
+    }
+    // Private methods
+    createAgentState() {
+        return {
+            capabilities: new Set(this.getCapabilitiesForLevel(this.config.baseAutonomyLevel)),
+            autonomy_level: this.config.baseAutonomyLevel,
+            sub_agents: [],
+            pending_requests: [],
+            denied_requests: [],
+            last_capability_change: Date.now(),
+            hitl_checkpoints: 0,
+        };
+    }
+    getCapabilitiesForLevel(level) {
+        // Find the highest level that doesn't exceed the current level
+        const levels = Object.keys(this.config.capabilityLevels)
+            .map(Number)
+            .filter(l => l <= level)
+            .sort((a, b) => b - a);
+        if (levels.length === 0)
+            return [];
+        return this.config.capabilityLevels[levels[0]] || [];
+    }
+    generateRecommendations(violations, autonomyLevel, requiresApproval) {
+        const recommendations = [];
+        if (violations.some(v => v.includes("self_modification"))) {
+            recommendations.push("Self-modification is not allowed - use approved update channels");
+        }
+        if (violations.some(v => v.includes("capability_violation"))) {
+            recommendations.push("Request capability expansion through proper escalation process");
+        }
+        if (violations.some(v => v.includes("sub_agent"))) {
+            recommendations.push("Sub-agent limit reached - terminate existing agents before spawning new ones");
+        }
+        if (violations.some(v => v.includes("autonomy_level"))) {
+            recommendations.push("Request autonomy increase through formal escalation process");
+        }
+        if (requiresApproval) {
+            recommendations.push("Wait for human/admin approval before proceeding");
+        }
+        if (autonomyLevel < 50) {
+            recommendations.push("Build trust through successful operations to increase autonomy level");
+        }
+        if (recommendations.length === 0) {
+            recommendations.push("Continue operating within current capability boundaries");
+        }
+        return recommendations;
+    }
+}
+exports.AutonomyEscalationGuard = AutonomyEscalationGuard;
+//# sourceMappingURL=autonomy-escalation-guard.js.map

package/dist/guards/autonomy-escalation-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomy-escalation-guard.js","sourceRoot":"","sources":["../../src/guards/autonomy-escalation-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAgFH,MAAa,uBAAuB;IAoDlC,YAAY,SAAwC,EAAE;QAlD9C,gBAAW,GAAmC,IAAI,GAAG,EAAE,CAAC;QAEhE,+BAA+B;QACd,wBAAmB,GAA+D;YACjG,6BAA6B;YAC7B,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8EAA8E,EAAE,QAAQ,EAAE,EAAE,EAAE;YAClI,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,4DAA4D,EAAE,QAAQ,EAAE,EAAE,EAAE;YACpH,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,kEAAkE,EAAE,QAAQ,EAAE,EAAE,EAAE;YACzH,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mDAAmD,EAAE,QAAQ,EAAE,EAAE,EAAE;YAEtG,qBAAqB;YACrB,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,wCAAwC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC9F,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,qDAAqD,EAAE,QAAQ,EAAE,EAAE,EAAE;YACpG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sDAAsD,EAAE,QAAQ,EAAE,EAAE,EAAE;YACvG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,yCAAyC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAE1F,2BAA2B;YAC3B,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,2DAA2D,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC/G,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,6CAA6C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC7F,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4DAA4D,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC/G,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,0CAA0C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAE3F,qBAAqB;YACrB,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,0CAA0C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC1F,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,oEAAoE,EAAE,QAAQ,EAAE,EAAE,EAAE;YACpH,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,+CAA+C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAChG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,uCAAuC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAEtF,uBAAuB;YACvB,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,0DAA0D,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC9G,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,yCAAyC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5F,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sDAAsD,EAAE,QAAQ,EAAE,EAAE,EAAE;YACrG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,+CAA+C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAEhG,wBAAwB;YACxB,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,6CAA6C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAClG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,iDAAiD,EAAE,QAAQ,EAAE,EAAE,EAAE;YACzG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,mDAAmD,EAAE,QAAQ,EAAE,EAAE,EAAE;YACvG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,qDAAqD,EAAE,QAAQ,EAAE,EAAE,EAAE;SACrG,CAAC;QAEF,4BAA4B;QACX,8BAAyB,GAA6B;YACrE,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;YACzB,EAAE,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;YAChD,EAAE,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,CAAC;YAChF,EAAE,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,mBAAmB,CAAC;YACrH,GAAG,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,mBAAmB,EAAE,eAAe,CAAC;SAC5K,CAAC;QAGA,IAAI,CAAC,MAAM,GAAG;YACZ,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,EAAE;YAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;YACjD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI;YAC7D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;YACjD,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC;YACtC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,IAAI;gBAC7D,cAAc;gBACd,eAAe;gBACf,mBAAmB;gBACnB,aAAa;gBACb,eAAe;aAChB;YACD,2BAA2B,EAAE,MAAM,CAAC,2BAA2B,IAAI,IAAI;YACvE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,yBAAyB;YAC3E,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI;gBAC/C,aAAa;gBACb,iBAAiB;gBACjB,mBAAmB;gBACnB,kBAAkB;gBAClB,iBAAiB;aAClB;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,MAAc,EACd,SAAiB,EACjB,MAA4B,EAC5B,SAAkB;QAElB,MAAM,KAAK,GAAG,SAAS,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAChD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,kBAAkB,GAAa,EAAE,CAAC;QAExC,4BAA4B;QAC5B,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,wBAAwB,GAAG,KAAK,CAAC;QACrC,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAClC,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,IAAI,YAAsD,CAAC;QAE3D,oDAAoD;QACpD,MAAM,WAAW,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACnE,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9B,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;oBACnB,UAAU,CAAC,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;gBACjD,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnF,wBAAwB,GAAG,IAAI,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,IAAI,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,gBAAgB,GAAG,IAAI,CAAC;YACxB,YAAY,GAAG,OAAO,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC;YAC5C,MAAM,mBAAmB,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC/E,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7E,mBAAmB,GAAG,IAAI,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,yBAAyB,MAAM,yBAAyB,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;gBAChG,gBAAgB,GAAG,IAAI,CAAC;gBACxB,YAAY,GAAG,OAAO,CAAC;YACzB,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,wBAAwB,EAAE,CAAC;YACnE,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC7C,gBAAgB,GAAG,IAAI,CAAC;YACxB,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,IAAI,MAAM,KAAK,aAAa,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC/H,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBACxD,qBAAqB,GAAG,IAAI,CAAC;oBAC7B,UAAU,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;gBACtG,CAAC;qBAAM,CAAC;oBACN,gBAAgB,GAAG,IAAI,CAAC;oBACxB,YAAY,GAAG,OAAO,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpD,YAAY,GAAG,IAAI,CAAC;gBACpB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,YAAY,GAAG,OAAO,CAAC;YACzB,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,IAAI,MAAM,EAAE,cAAc,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACrD,IAAI,cAAc,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC1C,UAAU,CAAC,IAAI,CAAC,8BAA8B,KAAK,CAAC,cAAc,OAAO,cAAc,EAAE,CAAC,CAAC;gBAC3F,gBAAgB,GAAG,IAAI,CAAC;gBACxB,YAAY,GAAG,OAAO,CAAC;YACzB,CAAC;YACD,IAAI,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAClD,UAAU,CAAC,IAAI,CAAC,+BAA+B,cAAc,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YACzD,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;YACnE,OAAO,OAAO,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GACX,CAAC,wBAAwB,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;YAChE,qBAAqB;YACrB,mBAAmB;YACnB,UAAU,CAAC,MAAM,IAAI,CAAC;YACtB,oBAAoB,CAAC,MAAM,IAAI,CAAC;YAChC,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAE/E,OAAO;YACL,OAAO,EAAE,CAAC,OAAO;YACjB,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,gCAAgC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACrE,CAAC,CAAC,gBAAgB;oBAChB,CAAC,CAAC,0BAA0B;oBAC5B,CAAC,CAAC,kBAAkB;YACxB,UAAU;YACV,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE;gBACR,sBAAsB,EAAE,KAAK,CAAC,cAAc;gBAC5C,wBAAwB,EAAE,MAAM,EAAE,cAAc;gBAChD,oBAAoB,EAAE,mBAAmB;gBACzC,0BAA0B,EAAE,wBAAwB;gBACpD,wBAAwB,EAAE,qBAAqB;gBAC/C,aAAa,EAAE,YAAY;gBAC3B,4BAA4B,EAAE,kBAAkB;aACjD;YACD,iBAAiB,EAAE,gBAAgB;YACnC,aAAa,EAAE,YAAY;YAC3B,eAAe,EAAE,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;SAClG,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,SAAiB,EACjB,OAA0D;QAE1D,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAClC,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,WAAW,GAAoB;YACnC,GAAG,OAAO;YACV,UAAU,EAAE,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,+CAA+C;QAC/C,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;YACvC,CAAC,CAAC,oBAAoB,KAAK,OAAO,CAAC,oBAAoB;YACvD,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY;SAC3D,CAAC;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,qCAAqC;gBAC7C,UAAU;gBACV,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE;oBACR,sBAAsB,EAAE,KAAK,CAAC,cAAc;oBAC5C,wBAAwB,EAAE,OAAO,CAAC,eAAe;oBACjD,oBAAoB,EAAE,KAAK;oBAC3B,0BAA0B,EAAE,OAAO,CAAC,YAAY,KAAK,aAAa;oBAClE,wBAAwB,EAAE,KAAK;oBAC/B,aAAa,EAAE,IAAI;oBACnB,4BAA4B,EAAE,EAAE;iBACjC;gBACD,iBAAiB,EAAE,KAAK;gBACxB,eAAe,EAAE,CAAC,yCAAyC,EAAE,kCAAkC,CAAC;aACjG,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,YAAY,GAAiC,OAAO,CAAC;QAEzD,QAAQ,OAAO,CAAC,YAAY,EAAE,CAAC;YAC7B,KAAK,aAAa;gBAChB,OAAO,GAAG,IAAI,CAAC;gBACf,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBAC7C,MAAM;YAER,KAAK,gBAAgB;gBACnB,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;oBAC1C,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;wBAC3D,OAAO,GAAG,IAAI,CAAC;wBACf,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;oBAChD,CAAC;yBAAM,IAAI,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,cAAc,GAAG,EAAE,EAAE,CAAC;wBAC/D,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;wBACvC,YAAY,GAAG,OAAO,CAAC;oBACzB,CAAC;gBACH,CAAC;gBACD,MAAM;YAER,KAAK,aAAa;gBAChB,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBACxD,OAAO,GAAG,IAAI,CAAC;oBACf,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAC7C,CAAC;qBAAM,CAAC;oBACN,YAAY,GAAG,OAAO,CAAC;gBACzB,CAAC;gBACD,MAAM;YAER,KAAK,sBAAsB;gBACzB,YAAY,GAAG,OAAO,CAAC;gBACvB,MAAM;YAER,KAAK,aAAa;gBAChB,OAAO,GAAG,IAAI,CAAC;gBACf,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAC3C,MAAM;YAER,KAAK,eAAe;gBAClB,YAAY,GAAG,OAAO,CAAC;gBACvB,MAAM;QACV,CAAC;QAED,oCAAoC;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxC,oCAAoC;YACpC,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACtC,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAChC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAEvC,OAAO;YACL,OAAO,EAAE,CAAC,OAAO;YACjB,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,8BAA8B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACvD,CAAC,CAAC,qCAAqC;YACzC,UAAU;YACV,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE;gBACR,sBAAsB,EAAE,KAAK,CAAC,cAAc;gBAC5C,wBAAwB,EAAE,OAAO,CAAC,eAAe;gBACjD,oBAAoB,EAAE,KAAK;gBAC3B,0BAA0B,EAAE,OAAO,CAAC,YAAY,KAAK,aAAa;gBAClE,wBAAwB,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;gBAC7E,aAAa,EAAE,IAAI;gBACnB,4BAA4B,EAAE,EAAE;aACjC;YACD,iBAAiB,EAAE,CAAC,OAAO;YAC3B,aAAa,EAAE,YAAY;YAC3B,eAAe,EAAE,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC;SAC1F,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,SAAiB,EAAE,SAAiB;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;QACvF,IAAI,YAAY,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAEtC,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACrD,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAE/C,uBAAuB;QACvB,QAAQ,OAAO,CAAC,YAAY,EAAE,CAAC;YAC7B,KAAK,gBAAgB;gBACnB,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;oBAC1C,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACzF,CAAC;gBACD,MAAM;YAER,KAAK,sBAAsB;gBACzB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;oBACjC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM;YAER,KAAK,aAAa;gBAChB,IAAI,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;oBAC/B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnD,CAAC;gBACD,MAAM;QACV,CAAC;QAED,KAAK,CAAC,sBAAsB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1C,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,SAAiB,EAAE,SAAiB;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;QACvF,IAAI,YAAY,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAEtC,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACrD,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC/C,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEpC,yDAAyD;QACzD,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,SAAiB,EAAE,UAAkB;QACpD,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,SAAiB;QAC7B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,SAAiB,EAAE,KAAa;QAC/C,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAClC,CAAC;QACD,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrE,KAAK,CAAC,sBAAsB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB;QAC5B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,kBAAkB;IAEV,gBAAgB;QACtB,OAAO;YACL,YAAY,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAClF,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAC7C,UAAU,EAAE,EAAE;YACd,gBAAgB,EAAE,EAAE;YACpB,eAAe,EAAE,EAAE;YACnB,sBAAsB,EAAE,IAAI,CAAC,GAAG,EAAE;YAClC,gBAAgB,EAAE,CAAC;SACpB,CAAC;IACJ,CAAC;IAEO,uBAAuB,CAAC,KAAa;QAC3C,+DAA+D;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;aACrD,GAAG,CAAC,MAAM,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC;aACvB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEzB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IAEO,uBAAuB,CAC7B,UAAoB,EACpB,aAAqB,EACrB,gBAAyB;QAEzB,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;YAC1D,eAAe,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC;YAC7D,eAAe,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAClD,eAAe,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;YACvD,eAAe,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,gBAAgB,EAAE,CAAC;YACrB,eAAe,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,aAAa,GAAG,EAAE,EAAE,CAAC;YACvB,eAAe,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QAC/F,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,eAAe,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF;AA/fD,0DA+fC"}

package/dist/guards/circuit-breaker.d.ts

@@ -0,0 +1,142 @@
+/**
+ * CircuitBreaker (L13)
+ *
+ * Prevents cascade failures in agentic workflows.
+ * Implements the circuit breaker pattern for LLM operations.
+ *
+ * Threat Model:
+ * - ASI08: Cascading Failures
+ * - Runaway agent behavior
+ * - Resource exhaustion via retries
+ *
+ * Protection Capabilities:
+ * - Failure rate monitoring
+ * - Automatic circuit opening
+ * - Graceful degradation
+ * - Recovery detection
+ * - Rollback triggers
+ */
+export interface CircuitBreakerConfig {
+    /** Failure threshold percentage to open circuit (0-100) */
+    failureThreshold?: number;
+    /** Minimum number of requests before threshold applies */
+    minimumRequests?: number;
+    /** Time window for failure counting in milliseconds */
+    windowSize?: number;
+    /** Time to wait before attempting recovery in milliseconds */
+    recoveryTimeout?: number;
+    /** Number of successful requests to close circuit */
+    successThreshold?: number;
+    /** Enable automatic recovery attempts */
+    autoRecover?: boolean;
+    /** Maximum consecutive failures before forced open */
+    maxConsecutiveFailures?: number;
+    /** Callback when circuit opens */
+    onOpen?: (circuitId: string, stats: CircuitStats) => void;
+    /** Callback when circuit closes */
+    onClose?: (circuitId: string, stats: CircuitStats) => void;
+    /** Callback when circuit half-opens */
+    onHalfOpen?: (circuitId: string) => void;
+}
+export type CircuitState = "closed" | "open" | "half-open";
+export interface CircuitStats {
+    totalRequests: number;
+    successfulRequests: number;
+    failedRequests: number;
+    consecutiveFailures: number;
+    consecutiveSuccesses: number;
+    failureRate: number;
+    lastFailure?: number;
+    lastSuccess?: number;
+    stateChangedAt: number;
+}
+export interface CircuitBreakerResult {
+    allowed: boolean;
+    state: CircuitState;
+    reason: string;
+    request_id: string;
+    stats: CircuitStats;
+    fallback_recommended: boolean;
+    retry_after?: number;
+}
+export interface OperationResult {
+    success: boolean;
+    duration: number;
+    error?: string;
+}
+export declare class CircuitBreaker {
+    private config;
+    private circuits;
+    constructor(config?: CircuitBreakerConfig);
+    /**
+     * Check if operation should be allowed through circuit
+     */
+    check(circuitId: string, requestId?: string): CircuitBreakerResult;
+    /**
+     * Record operation result
+     */
+    recordResult(circuitId: string, result: OperationResult): void;
+    /**
+     * Record a successful operation
+     */
+    recordSuccess(circuitId: string, duration?: number): void;
+    /**
+     * Record a failed operation
+     */
+    recordFailure(circuitId: string, error?: string, duration?: number): void;
+    /**
+     * Get current state of a circuit
+     */
+    getState(circuitId: string): CircuitState;
+    /**
+     * Get stats for a circuit
+     */
+    getStats(circuitId: string): CircuitStats | null;
+    /**
+     * Get all circuit IDs
+     */
+    getCircuitIds(): string[];
+    /**
+     * Force open a circuit
+     */
+    forceOpen(circuitId: string): void;
+    /**
+     * Force close a circuit
+     */
+    forceClose(circuitId: string): void;
+    /**
+     * Reset a circuit to initial state
+     */
+    reset(circuitId: string): void;
+    /**
+     * Reset all circuits
+     */
+    resetAll(): void;
+    /**
+     * Execute operation with circuit breaker protection
+     */
+    execute<T>(circuitId: string, operation: () => Promise<T>, fallback?: () => Promise<T>): Promise<{
+        result?: T;
+        fallbackUsed: boolean;
+        error?: string;
+    }>;
+    /**
+     * Health check across all circuits
+     */
+    healthCheck(): {
+        healthy: boolean;
+        circuits: Array<{
+            id: string;
+            state: CircuitState;
+            failureRate: number;
+        }>;
+        openCircuits: number;
+    };
+    private getOrCreateCircuit;
+    private openCircuit;
+    private closeCircuit;
+    private transitionToHalfOpen;
+    private cleanupWindow;
+    private countInWindow;
+}
+//# sourceMappingURL=circuit-breaker.d.ts.map

package/dist/guards/circuit-breaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-breaker.d.ts","sourceRoot":"","sources":["../../src/guards/circuit-breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,sDAAsD;IACtD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kCAAkC;IAClC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAC1D,mCAAmC;IACnC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAC3D,uCAAuC;IACvC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CAC1C;AAED,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAE3D,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,YAAY,CAAC;IACpB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAIZ;IAGF,OAAO,CAAC,QAAQ,CAMD;gBAEH,MAAM,GAAE,oBAAyB;IAe7C;;OAEG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,oBAAoB;IAuElE;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IAyD9D;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAIzD;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAQzE;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY;IAIzC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAKhD;;OAEG;IACH,aAAa,IAAI,MAAM,EAAE;IAIzB;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKlC;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKnC;;OAEG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAI9B;;OAEG;IACH,QAAQ,IAAI,IAAI;IAIhB;;OAEG;IACG,OAAO,CAAC,CAAC,EACb,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC1B,OAAO,CAAC;QAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAAC,YAAY,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAgDjE;;OAEG;IACH,WAAW,IAAI;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,KAAK,CAAC;YACd,EAAE,EAAE,MAAM,CAAC;YACX,KAAK,EAAE,YAAY,CAAC;YACpB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;QACH,YAAY,EAAE,MAAM,CAAC;KACtB;IAwBD,OAAO,CAAC,kBAAkB;IAwB1B,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,oBAAoB;IAa5B,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,aAAa;CAItB"}