patchwork-os 0.2.0-beta.9.canary.93 → 1.1.0-beta.1

package/dist/workerGateDecisionLog.d.ts

@@ -0,0 +1,141 @@
+import type { Logger } from "./logger.js";
+import type { Reversibility } from "./workers/actionClass.js";
+/**
+ * WorkerGateDecisionLog — the immutable record of every worker-autonomy gate
+ * decision, with the INPUTS that produced it.
+ *
+ * The first concrete slice of the "Decision Record" north star
+ * (docs/worker-autonomy-policy-gate.md): `decideWorkerAction` computes a rich
+ * `WorkerGateDecision` (earned level, ceiling, context-risk de-rate, reason)
+ * and — before this log — discarded it, persisting only a human-readable
+ * `summary` string into the approval queue. So an autonomous `allow` left NO
+ * trail at all, and a `gate` kept only its summary; a decision could not be
+ * replayed or explained from the log.
+ *
+ * This captures the decision + its inputs on BOTH paths (allow AND gate) so an
+ * operator can answer "why did the worker (auto-)act / gate here, on what
+ * evidence, under which policy version?" — explainable from stored evidence
+ * (replay ≠ bit-exact re-execution; the world drifts). Retention is bounded by
+ * the rotation caps below (most-recent 10k rows / 1 MB), like the sibling logs;
+ * a longer/archival horizon for compliance is a deliberate follow-up, not a
+ * promise this file makes today.
+ *
+ * Same battle-tested JSONL machinery as DecisionTraceLog / RecipeRunLog:
+ * append-only + cross-process flock (ADR-0007 torn-row guard) + bounded
+ * in-memory ring + size/line rotation + tail-on-read so a sibling bridge's
+ * appends become visible. Schema is additive.
+ */
+export type GateAction = "allow" | "gate";
+export interface GateDecisionRecord {
+    /** Monotonic sequence id within the process — stable for pagination. */
+    seq: number;
+    /** ms epoch when the decision was made. */
+    decidedAt: number;
+    recipeName: string;
+    workerId: string;
+    toolName: string;
+    action: GateAction;
+    /** `${domain}:${reversibility}:${blastTier}` — the trust unit. */
+    classKey: string;
+    domain: string;
+    owned: boolean;
+    /** "low" | "medium" | "high" (RiskTier, kept as string to decouple). */
+    blastTier: string;
+    reversibility: Reversibility;
+    /** Trust earned on this class as of the decision. */
+    earnedLevel: number;
+    autonomyCeiling: number;
+    /** min(earned, ceiling, contextCeiling), 0 if unowned — what the gate acted on. */
+    effectiveLevel: number;
+    /** Descending ceiling from live context-risk (present only when supplied). */
+    contextCeiling?: number;
+    /** Context-risk score 0..1 (present only when a context-risk was resolved). */
+    contextRiskScore?: number;
+    /** Human reasons the situation was risky (e.g. "huge uncommitted diff"). */
+    contextRiskReasons?: string[];
+    /** Human-readable rationale for the action. */
+    reason: string;
+    /** The gate-policy version (thresholds/constants) that produced this row.
+     *  Replay is not reproducible without knowing which policy decided. */
+    gatePolicyVersion: string;
+}
+export type RecordGateDecisionInput = Omit<GateDecisionRecord, "seq" | "decidedAt">;
+export interface WorkerGateDecisionLogOptions {
+    dir: string;
+    logger?: Logger;
+    memoryCap?: number;
+    now?: () => number;
+}
+export interface GateDecisionQuery {
+    workerId?: string;
+    classKey?: string;
+    recipeName?: string;
+    action?: GateAction;
+    /** Only return rows with seq > after. */
+    after?: number;
+    /** Only return rows with decidedAt >= since. */
+    since?: number;
+    limit?: number;
+}
+export declare class WorkerGateDecisionLog {
+    private readonly opts;
+    private records;
+    private seq;
+    private readonly file;
+    private readonly memoryCap;
+    private readonly now;
+    /** Byte offset up to which `file` has been loaded (ADR-0007 tail-on-read). */
+    private lastReadOffset;
+    constructor(opts: WorkerGateDecisionLogOptions);
+    /**
+     * Record one gate decision. Validates the required identity fields and clips
+     * free-form text so a runaway reason can't bloat the audit log. Returns the
+     * stored record. The caller appends this fail-soft (a logging failure must
+     * never block the gate) — so this throws only on programmer error (missing
+     * required fields), which the caller catches.
+     */
+    record(input: RecordGateDecisionInput): GateDecisionRecord;
+    query(q?: GateDecisionQuery): GateDecisionRecord[];
+    size(): number;
+    private append;
+    /** Trim to the most recent MAX_PERSIST_LINES / MAX_PERSIST_BYTES. Best-effort. */
+    private rotateDisk;
+    private loadExisting;
+    /** Read rows appended since `lastReadOffset` and merge them (ADR-0007). */
+    private tailDisk;
+    private consumeRawJsonl;
+}
+/**
+ * Render one `GateDecisionRecord` as plain-English prose — the "explain this
+ * decision" formatter behind `patchwork gate explain`. Every field it prints
+ * is already on the record (no new data, no gate-logic change); this exists
+ * because today the only way to read a decision is to know the JSONL schema
+ * and grep the file by hand.
+ */
+export declare function formatGateDecision(rec: GateDecisionRecord): string;
+/** Render a most-recent-first list of decisions (e.g. `query()`'s output) as
+ *  a simple chronological history — the same formatter, one entry per record,
+ *  separated for readability. Empty input renders an empty string; callers
+ *  print their own "no decisions found" message. */
+export declare function formatGateDecisionHistory(recs: GateDecisionRecord[]): string;
+/** One field that changed between two decisions on the same worker × class. */
+export interface GateDecisionFieldDiff {
+    field: string;
+    from: string;
+    to: string;
+}
+/**
+ * Compare two decisions on the same worker × action-class and report what
+ * changed — Tier 2 of the "explain trust movement" legibility layer. Pure
+ * over two already-persisted records; no new gate logic, no I/O.
+ *
+ * Field order is oldest→newest-agnostic: callers pass whichever record they
+ * consider "newer"/"older" (typically `query()`'s [0] and [1], since it
+ * sorts most-recent-first); the diff reports `from` (older) → `to` (newer).
+ */
+export declare function diffGateDecisions(newer: GateDecisionRecord, older: GateDecisionRecord): GateDecisionFieldDiff[];
+/** Render `diffGateDecisions`' output as prose: a header identifying both
+ *  decisions being compared, then one line per changed field, or an explicit
+ *  "no change" line when nothing differs (e.g. two identical gates in a row —
+ *  itself a meaningful, if unexciting, answer). */
+export declare function formatGateDecisionDiff(newer: GateDecisionRecord, older: GateDecisionRecord): string;

package/dist/workerGateDecisionLog.js

@@ -0,0 +1,361 @@
+import { appendFileSync, closeSync, mkdirSync, openSync, readFileSync, readSync, renameSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
+import path from "node:path";
+import { withFileLockSync } from "./fileLockSync.js";
+const DEFAULT_MEMORY_CAP = 2_000;
+const MAX_PERSIST_BYTES = 1024 * 1024; // 1 MB
+const MAX_PERSIST_LINES = 10_000;
+const MAX_REASON_LEN = 1_000;
+const MAX_CONTEXT_REASONS = 16;
+export class WorkerGateDecisionLog {
+    opts;
+    records = [];
+    seq = 0;
+    file;
+    memoryCap;
+    now;
+    /** Byte offset up to which `file` has been loaded (ADR-0007 tail-on-read). */
+    lastReadOffset = 0;
+    constructor(opts) {
+        this.opts = opts;
+        this.file = path.join(opts.dir, "worker_gate_decisions.jsonl");
+        this.memoryCap = opts.memoryCap ?? DEFAULT_MEMORY_CAP;
+        this.now = opts.now ?? Date.now;
+        try {
+            mkdirSync(opts.dir, { recursive: true, mode: 0o700 });
+        }
+        catch (err) {
+            opts.logger?.warn?.(`[gate-decision-log] could not create ${opts.dir}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        this.loadExisting();
+    }
+    /**
+     * Record one gate decision. Validates the required identity fields and clips
+     * free-form text so a runaway reason can't bloat the audit log. Returns the
+     * stored record. The caller appends this fail-soft (a logging failure must
+     * never block the gate) — so this throws only on programmer error (missing
+     * required fields), which the caller catches.
+     */
+    record(input) {
+        const recipeName = input.recipeName.trim();
+        const workerId = input.workerId.trim();
+        const toolName = input.toolName.trim();
+        const classKey = input.classKey.trim();
+        if (!recipeName)
+            throw new Error("recipeName is required");
+        if (!workerId)
+            throw new Error("workerId is required");
+        if (!toolName)
+            throw new Error("toolName is required");
+        if (!classKey)
+            throw new Error("classKey is required");
+        if (input.action !== "allow" && input.action !== "gate") {
+            throw new Error(`invalid action: ${String(input.action)}`);
+        }
+        const reasons = (input.contextRiskReasons ?? [])
+            .map((r) => String(r).trim())
+            .filter((r) => r.length > 0)
+            .slice(0, MAX_CONTEXT_REASONS);
+        this.seq += 1;
+        const rec = {
+            seq: this.seq,
+            decidedAt: this.now(),
+            recipeName,
+            workerId,
+            toolName,
+            action: input.action,
+            classKey,
+            domain: input.domain,
+            owned: input.owned,
+            blastTier: input.blastTier,
+            reversibility: input.reversibility,
+            earnedLevel: input.earnedLevel,
+            autonomyCeiling: input.autonomyCeiling,
+            effectiveLevel: input.effectiveLevel,
+            ...(input.contextCeiling !== undefined && {
+                contextCeiling: input.contextCeiling,
+            }),
+            ...(input.contextRiskScore !== undefined && {
+                contextRiskScore: input.contextRiskScore,
+            }),
+            ...(reasons.length > 0 && { contextRiskReasons: reasons }),
+            reason: input.reason.slice(0, MAX_REASON_LEN),
+            gatePolicyVersion: input.gatePolicyVersion,
+        };
+        this.records.push(rec);
+        if (this.records.length > this.memoryCap) {
+            this.records.splice(0, this.records.length - this.memoryCap);
+        }
+        this.append(rec);
+        return rec;
+    }
+    query(q = {}) {
+        this.tailDisk();
+        const out = [];
+        for (const r of this.records) {
+            if (q.workerId && r.workerId !== q.workerId)
+                continue;
+            if (q.classKey && r.classKey !== q.classKey)
+                continue;
+            if (q.recipeName && r.recipeName !== q.recipeName)
+                continue;
+            if (q.action && r.action !== q.action)
+                continue;
+            if (q.after !== undefined && r.seq <= q.after)
+                continue;
+            if (q.since !== undefined && r.decidedAt < q.since)
+                continue;
+            out.push(r);
+        }
+        out.sort((a, b) => b.seq - a.seq);
+        const limit = Math.min(Math.max(q.limit ?? 100, 1), 1_000);
+        return out.slice(0, limit);
+    }
+    size() {
+        return this.records.length;
+    }
+    append(rec) {
+        try {
+            try {
+                const st = statSync(this.file);
+                if (st.size > MAX_PERSIST_BYTES)
+                    this.rotateDisk();
+            }
+            catch (err) {
+                const code = err.code;
+                if (code !== "ENOENT")
+                    throw err;
+            }
+            // Cross-process flock around the append (ADR-0007): two bridges sharing
+            // $HOME can interleave bytes within one JSONL row; the torn line then
+            // fails JSON.parse and is silently skipped on every reader.
+            withFileLockSync(this.file, () => {
+                appendFileSync(this.file, `${JSON.stringify(rec)}\n`, { mode: 0o600 });
+                // Advance the tail offset past our own write so the next query() doesn't
+                // re-read this row (we already pushed it in `record`).
+                try {
+                    this.lastReadOffset = statSync(this.file).size;
+                }
+                catch {
+                    /* the next tailDisk() reloads cleanly if this ever fails */
+                }
+            });
+        }
+        catch (err) {
+            this.opts.logger?.warn?.(`[gate-decision-log] append failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    /** Trim to the most recent MAX_PERSIST_LINES / MAX_PERSIST_BYTES. Best-effort. */
+    rotateDisk() {
+        try {
+            const raw = readFileSync(this.file, "utf-8");
+            let lines = raw.split("\n").filter((l) => l.trim());
+            if (lines.length > MAX_PERSIST_LINES)
+                lines = lines.slice(-MAX_PERSIST_LINES);
+            let joined = lines.join("\n");
+            while (joined.length + 1 > MAX_PERSIST_BYTES && lines.length > 1) {
+                lines = lines.slice(-Math.max(1, Math.floor(lines.length / 2)));
+                joined = lines.join("\n");
+            }
+            if (lines.length === 1 && joined.length + 1 > MAX_PERSIST_BYTES) {
+                this.opts.logger?.warn?.(`[gate-decision-log] rotate dropped 1 oversized row (${joined.length} bytes)`);
+                lines = [];
+                joined = "";
+            }
+            const tmp = `${this.file}.tmp`;
+            writeFileSync(tmp, joined.length > 0 ? `${joined}\n` : "", {
+                mode: 0o600,
+            });
+            try {
+                renameSync(tmp, this.file);
+            }
+            catch (renameErr) {
+                if (process.platform === "win32" &&
+                    renameErr.code === "EEXIST") {
+                    try {
+                        unlinkSync(this.file);
+                    }
+                    catch {
+                        /* best-effort */
+                    }
+                    renameSync(tmp, this.file);
+                }
+                else {
+                    throw renameErr;
+                }
+            }
+        }
+        catch (err) {
+            this.opts.logger?.warn?.(`[gate-decision-log] rotate failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    loadExisting() {
+        let size;
+        try {
+            size = statSync(this.file).size;
+        }
+        catch {
+            this.lastReadOffset = 0;
+            return;
+        }
+        let raw;
+        try {
+            raw = readFileSync(this.file, "utf-8");
+        }
+        catch (err) {
+            this.opts.logger?.warn?.(`[gate-decision-log] read failed: ${err instanceof Error ? err.message : String(err)}`);
+            return;
+        }
+        this.consumeRawJsonl(raw);
+        this.lastReadOffset = size;
+        if (this.records.length > this.memoryCap) {
+            this.records.splice(0, this.records.length - this.memoryCap);
+        }
+    }
+    /** Read rows appended since `lastReadOffset` and merge them (ADR-0007). */
+    tailDisk() {
+        let size;
+        try {
+            size = statSync(this.file).size;
+        }
+        catch {
+            return;
+        }
+        if (size === this.lastReadOffset)
+            return;
+        if (size < this.lastReadOffset) {
+            // Rotated/truncated by a sibling — full reload.
+            this.records.length = 0;
+            this.lastReadOffset = 0;
+            this.loadExisting();
+            return;
+        }
+        let buf;
+        try {
+            const fd = openSync(this.file, "r");
+            try {
+                const len = size - this.lastReadOffset;
+                buf = Buffer.alloc(len);
+                readSync(fd, buf, 0, len, this.lastReadOffset);
+            }
+            finally {
+                closeSync(fd);
+            }
+        }
+        catch (err) {
+            this.opts.logger?.warn?.(`[gate-decision-log] tail read failed: ${err instanceof Error ? err.message : String(err)}`);
+            return;
+        }
+        this.consumeRawJsonl(buf.toString("utf-8"));
+        this.lastReadOffset = size;
+        if (this.records.length > this.memoryCap) {
+            this.records.splice(0, this.records.length - this.memoryCap);
+        }
+    }
+    consumeRawJsonl(raw) {
+        for (const line of raw.split("\n")) {
+            if (!line)
+                continue;
+            try {
+                const parsed = JSON.parse(line);
+                if (typeof parsed.seq !== "number" ||
+                    typeof parsed.workerId !== "string" ||
+                    typeof parsed.toolName !== "string" ||
+                    (parsed.action !== "allow" && parsed.action !== "gate")) {
+                    continue;
+                }
+                this.records.push(parsed);
+                if (parsed.seq > this.seq)
+                    this.seq = parsed.seq;
+            }
+            catch {
+                // skip malformed row
+            }
+        }
+    }
+}
+/**
+ * Render one `GateDecisionRecord` as plain-English prose — the "explain this
+ * decision" formatter behind `patchwork gate explain`. Every field it prints
+ * is already on the record (no new data, no gate-logic change); this exists
+ * because today the only way to read a decision is to know the JSONL schema
+ * and grep the file by hand.
+ */
+export function formatGateDecision(rec) {
+    const when = new Date(rec.decidedAt).toISOString();
+    const verb = rec.action === "allow" ? "ALLOWED" : "GATED (asked for approval)";
+    const lines = [
+        `${when} — ${rec.workerId} → ${rec.toolName} (${rec.classKey})`,
+        `  Result: ${verb}`,
+        `  Owned by this worker: ${rec.owned ? "yes" : "no"}`,
+        `  Earned trust level: L${rec.earnedLevel} (autonomy ceiling L${rec.autonomyCeiling})`,
+    ];
+    if (rec.contextCeiling !== undefined) {
+        const score = rec.contextRiskScore !== undefined
+            ? ` (risk score ${rec.contextRiskScore.toFixed(2)})`
+            : "";
+        lines.push(`  Situational risk ceiling: L${rec.contextCeiling}${score}`);
+        if (rec.contextRiskReasons?.length) {
+            lines.push(`    Reasons: ${rec.contextRiskReasons.join(", ")}`);
+        }
+    }
+    lines.push(`  Effective level used for this decision: L${rec.effectiveLevel}`, `  Why: ${rec.reason}`, `  Recipe: ${rec.recipeName} · Policy: ${rec.gatePolicyVersion}`);
+    return lines.join("\n");
+}
+/** Render a most-recent-first list of decisions (e.g. `query()`'s output) as
+ *  a simple chronological history — the same formatter, one entry per record,
+ *  separated for readability. Empty input renders an empty string; callers
+ *  print their own "no decisions found" message. */
+export function formatGateDecisionHistory(recs) {
+    return recs.map(formatGateDecision).join("\n\n");
+}
+/** Fields compared by `diffGateDecisions`/`formatGateDecisionDiff`, in the
+ *  order they're reported. `contextCeiling` renders "—" when absent so an
+ *  appear/disappear transition still shows a readable from/to pair rather
+ *  than "undefined". */
+const DIFF_FIELDS = [
+    { field: "action", read: (r) => r.action },
+    { field: "owned", read: (r) => String(r.owned) },
+    { field: "earnedLevel", read: (r) => `L${r.earnedLevel}` },
+    { field: "autonomyCeiling", read: (r) => `L${r.autonomyCeiling}` },
+    {
+        field: "contextCeiling",
+        read: (r) => r.contextCeiling !== undefined ? `L${r.contextCeiling}` : "—",
+    },
+    { field: "effectiveLevel", read: (r) => `L${r.effectiveLevel}` },
+    { field: "reason", read: (r) => r.reason },
+];
+/**
+ * Compare two decisions on the same worker × action-class and report what
+ * changed — Tier 2 of the "explain trust movement" legibility layer. Pure
+ * over two already-persisted records; no new gate logic, no I/O.
+ *
+ * Field order is oldest→newest-agnostic: callers pass whichever record they
+ * consider "newer"/"older" (typically `query()`'s [0] and [1], since it
+ * sorts most-recent-first); the diff reports `from` (older) → `to` (newer).
+ */
+export function diffGateDecisions(newer, older) {
+    const diffs = [];
+    for (const { field, read } of DIFF_FIELDS) {
+        const from = read(older);
+        const to = read(newer);
+        if (from !== to)
+            diffs.push({ field, from, to });
+    }
+    return diffs;
+}
+/** Render `diffGateDecisions`' output as prose: a header identifying both
+ *  decisions being compared, then one line per changed field, or an explicit
+ *  "no change" line when nothing differs (e.g. two identical gates in a row —
+ *  itself a meaningful, if unexciting, answer). */
+export function formatGateDecisionDiff(newer, older) {
+    const fmtWhen = (r) => new Date(r.decidedAt).toISOString();
+    const header = `Comparing decision seq ${older.seq} (${fmtWhen(older)}) → ` +
+        `seq ${newer.seq} (${fmtWhen(newer)}) for ${newer.workerId} on ${newer.classKey}`;
+    const diffs = diffGateDecisions(newer, older);
+    if (diffs.length === 0) {
+        return `${header}\n  No change — identical decision.`;
+    }
+    const lines = diffs.map((d) => `  ${d.field}: ${d.from} → ${d.to}`);
+    return [header, ...lines].join("\n");
+}
+//# sourceMappingURL=workerGateDecisionLog.js.map

package/dist/workerGateDecisionLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerGateDecisionLog.js","sourceRoot":"","sources":["../src/workerGateDecisionLog.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAuErD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAC9C,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAqB/B,MAAM,OAAO,qBAAqB;IASH;IARrB,OAAO,GAAyB,EAAE,CAAC;IACnC,GAAG,GAAG,CAAC,CAAC;IACC,IAAI,CAAS;IACb,SAAS,CAAS;IAClB,GAAG,CAAe;IACnC,8EAA8E;IACtE,cAAc,GAAG,CAAC,CAAC;IAE3B,YAA6B,IAAkC;QAAlC,SAAI,GAAJ,IAAI,CAA8B;QAC7D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,wCAAwC,IAAI,CAAC,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAA8B;QACnC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC;aAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aAC3B,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAEjC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,MAAM,GAAG,GAAuB;YAC9B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU;YACV,QAAQ;YACR,QAAQ;YACR,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ;YACR,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI;gBACxC,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;YACF,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI;gBAC1C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,CAAC;YACF,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;YAC1D,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC;YAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;SAC3C,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAuB,EAAE;QAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,MAAM,GAAG,GAAyB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;gBAAE,SAAS;YACtD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;gBAAE,SAAS;YACtD,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;gBAAE,SAAS;YAC5D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBAAE,SAAS;YAChD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK;gBAAE,SAAS;YACxD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK;gBAAE,SAAS;YAC7D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAEO,MAAM,CAAC,GAAuB;QACpC,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,EAAE,CAAC,IAAI,GAAG,iBAAiB;oBAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;gBACjD,IAAI,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;YACnC,CAAC;YACD,wEAAwE;YACxE,sEAAsE;YACtE,4DAA4D;YAC5D,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBAC/B,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,yEAAyE;gBACzE,uDAAuD;gBACvD,IAAI,CAAC;oBACH,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBACjD,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kFAAkF;IAC1E,UAAU;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB;gBAClC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC1C,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,iBAAiB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,iBAAiB,EAAE,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,uDAAuD,MAAM,CAAC,MAAM,SAAS,CAC9E,CAAC;gBACF,KAAK,GAAG,EAAE,CAAC;gBACX,MAAM,GAAG,EAAE,CAAC;YACd,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC;YAC/B,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACzD,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;oBAC3B,SAAmC,CAAC,IAAI,KAAK,QAAQ,EACtD,CAAC;oBACD,IAAI,CAAC;wBACH,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACP,iBAAiB;oBACnB,CAAC;oBACD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvF,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,2EAA2E;IACnE,QAAQ;QACd,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,CAAC,cAAc;YAAE,OAAO;QACzC,IAAI,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/B,gDAAgD;YAChD,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;gBACvC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxB,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACjD,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5F,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,GAAW;QACjC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;gBACtD,IACE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;oBAC9B,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;oBACnC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;oBACnC,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,EACvD,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG;oBAAE,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAuB;IACxD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,IAAI,GACR,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC;IACpE,MAAM,KAAK,GAAa;QACtB,GAAG,IAAI,MAAM,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,GAAG;QAC/D,aAAa,IAAI,EAAE;QACnB,2BAA2B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QACrD,0BAA0B,GAAG,CAAC,WAAW,uBAAuB,GAAG,CAAC,eAAe,GAAG;KACvF,CAAC;IACF,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,KAAK,GACT,GAAG,CAAC,gBAAgB,KAAK,SAAS;YAChC,CAAC,CAAC,gBAAgB,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;YACpD,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,gCAAgC,GAAG,CAAC,cAAc,GAAG,KAAK,EAAE,CAAC,CAAC;QACzE,IAAI,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CACR,8CAA8C,GAAG,CAAC,cAAc,EAAE,EAClE,UAAU,GAAG,CAAC,MAAM,EAAE,EACtB,aAAa,GAAG,CAAC,UAAU,cAAc,GAAG,CAAC,iBAAiB,EAAE,CACjE,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;oDAGoD;AACpD,MAAM,UAAU,yBAAyB,CAAC,IAA0B;IAClE,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AASD;;;wBAGwB;AACxB,MAAM,WAAW,GAGZ;IACH,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE;IAC1C,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;IAChD,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;IAC1D,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE;IAClE;QACE,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,GAAG;KAChE;IACD,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE;IAChE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE;CAC3C,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAyB,EACzB,KAAyB;IAEzB,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,IAAI,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;mDAGmD;AACnD,MAAM,UAAU,sBAAsB,CACpC,KAAyB,EACzB,KAAyB;IAEzB,MAAM,OAAO,GAAG,CAAC,CAAqB,EAAE,EAAE,CACxC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,MAAM,GACV,0BAA0B,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM;QAC5D,OAAO,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,CAAC,QAAQ,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACpF,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,MAAM,qCAAqC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/dist/workers/actionClass.d.ts

@@ -0,0 +1,38 @@
+import { type RiskTier } from "../riskTier.js";
+/**
+ * Worker trust is scoped per (worker × action-class), never globally. An
+ * action-class is the unit that accumulates evidence. It is intentionally
+ * COARSE enough to graduate (a worker touches only a handful) yet keyed on
+ * blast-tier so that a rarer, higher-blast action in the same domain is a
+ * DISTINCT, less-trusted class — competence on routine `git status` can never
+ * transfer to `git push --force`. (worker-ramp-v0)
+ */
+export type Reversibility = "reversible" | "compensable" | "irreversible";
+export interface ActionClass {
+    /** Stable identity: `${domain}:${reversibility}:${blastTier}`. */
+    key: string;
+    domain: string;
+    reversibility: Reversibility;
+    blastTier: RiskTier;
+    /**
+     * Brand/reputational exposure — a DISTINCT gating dimension from safety blast
+     * radius (cf. Arts & Media: low safety risk, high reputational risk). An
+     * externally-visible action (outbound message, public PR/push, issue) whose
+     * failure damages reputation rather than (or as well as) systems. Folds into
+     * the failure weight so reputational mistakes demote trust harder.
+     */
+    brandExposed: boolean;
+}
+/**
+ * The tool names this module can classify (MCP names + recipe-tool ids). Exposed
+ * so the worker-agent sandbox can enumerate every risky tool to consider
+ * blocking. NOT exhaustive of the whole MCP surface — any unknown tool classifies
+ * as `other:irreversible` and is gated at the per-step gate regardless.
+ */
+export declare function knownActionTools(): string[];
+export declare function classifyActionClass(toolName: string, _params?: Record<string, unknown>): ActionClass;
+export declare function outcomeWeight(actionClass: ActionClass, good: boolean): number;
+/** Which ramp rungs are reachable for a class. Irreversible classes skip the
+ * safety-net rungs L2/L3 (no compensating action exists), so they must clear a
+ * higher bar to reach L4. */
+export declare function reachableLevels(actionClass: ActionClass): number[];