sentinel-agentos 0.1.0

package/dist/middleware/wrapper.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Sentinel AgentOS Middleware — Framework-Agnostic Wrapper
+ *
+ * Wraps any Agent's tool-call execution in Sentinel's Guard + Memory + Evaluator pipeline.
+ * One-line integration — no changes to your Agent logic.
+ *
+ * Usage:
+ *   import { wrapAgent } from 'sentinel-agentos';
+ *   const sentinel = wrapAgent({ workspaceRoot: '/project' });
+ *   const result = await sentinel.execute('write_file', { path: 'src/main.ts', ... }, callback);
+ */
+import { AgentOS } from '../core';
+import type { AgentOSConfig, PreExecMetrics, PostExecMetrics, AuditEntry } from '../types';
+import type { AgentProfile } from '../evaluator/profiler';
+export interface WrappedAgent {
+    /** Call this before every tool execution */
+    preCheck: (toolName: string, params: Record<string, unknown>) => {
+        preExec: PreExecMetrics;
+        snapshot: any;
+        allowed: boolean;
+        reason?: string;
+    };
+    /** Call this after every tool execution */
+    postCheck: (toolName: string, params: Record<string, unknown>, result: unknown, snapshot: any, startTime: number) => {
+        runtime: any;
+        postExec: PostExecMetrics;
+        audit: AuditEntry;
+        profile: AgentProfile;
+    };
+    /** Full pipeline: pre-check → execute callback → post-check */
+    execute: <R>(toolName: string, params: Record<string, unknown>, fn: () => R | Promise<R>, opts?: {
+        sessionId?: string;
+        agentId?: string;
+        affectedFiles?: string[];
+    }) => Promise<{
+        allowed: boolean;
+        reason?: string;
+        result?: R;
+        runtime?: any;
+        postExec?: PostExecMetrics;
+        audit?: AuditEntry;
+        profile?: AgentProfile;
+    }>;
+    /** Inject memory context at session start */
+    injectContext: () => string;
+    /** End session */
+    endSession: (sessionId: string) => void;
+    /** Get status report */
+    statusReport: () => string;
+    /** Raw AgentOS instance for advanced use */
+    readonly aos: AgentOS;
+}
+export declare function wrapAgent(config?: Partial<AgentOSConfig>): WrappedAgent;
+//# sourceMappingURL=wrapper.d.ts.map

package/dist/middleware/wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper.d.ts","sourceRoot":"","sources":["../../src/middleware/wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D,MAAM,WAAW,YAAY;IAC3B,4CAA4C;IAC5C,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK;QAC/D,OAAO,EAAE,cAAc,CAAC;QACxB,QAAQ,EAAE,GAAG,CAAC;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IAEF,2CAA2C;IAC3C,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,KAAK;QACnH,OAAO,EAAE,GAAG,CAAC;QACb,QAAQ,EAAE,eAAe,CAAC;QAC1B,KAAK,EAAE,UAAU,CAAC;QAClB,OAAO,EAAE,YAAY,CAAC;KACvB,CAAC;IAEF,+DAA+D;IAC/D,OAAO,EAAE,CAAC,CAAC,EACT,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EACxB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,KACtE,OAAO,CAAC;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,CAAC,CAAC;QACX,OAAO,CAAC,EAAE,GAAG,CAAC;QACd,QAAQ,CAAC,EAAE,eAAe,CAAC;QAC3B,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,OAAO,CAAC,EAAE,YAAY,CAAC;KACxB,CAAC,CAAC;IAEH,6CAA6C;IAC7C,aAAa,EAAE,MAAM,MAAM,CAAC;IAE5B,kBAAkB;IAClB,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAExC,wBAAwB;IACxB,YAAY,EAAE,MAAM,MAAM,CAAC;IAE3B,4CAA4C;IAC5C,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,YAAY,CAmKvE"}

package/dist/middleware/wrapper.js

@@ -0,0 +1,155 @@
+"use strict";
+/**
+ * Sentinel AgentOS Middleware — Framework-Agnostic Wrapper
+ *
+ * Wraps any Agent's tool-call execution in Sentinel's Guard + Memory + Evaluator pipeline.
+ * One-line integration — no changes to your Agent logic.
+ *
+ * Usage:
+ *   import { wrapAgent } from 'sentinel-agentos';
+ *   const sentinel = wrapAgent({ workspaceRoot: '/project' });
+ *   const result = await sentinel.execute('write_file', { path: 'src/main.ts', ... }, callback);
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.wrapAgent = wrapAgent;
+const core_1 = require("../core");
+function wrapAgent(config) {
+    const aos = new core_1.AgentOS(config);
+    let sessionCounter = 0;
+    const wrapped = {
+        aos,
+        preCheck(toolName, params) {
+            const { preExec, snapshot } = aos.executePipeline({
+                sessionId: `wrapped_${sessionCounter}`,
+                agentId: 'wrapped_agent',
+                toolName,
+                parameters: params,
+            });
+            const allowed = preExec.riskScore.action !== 'deny';
+            const reason = !allowed
+                ? `Risk score ${preExec.riskScore.score} → DENY (${preExec.riskScore.dimensions?.impact} impact)`
+                : undefined;
+            return { preExec, snapshot, allowed, reason };
+        },
+        postCheck(toolName, params, result, snapshot, startTime) {
+            const ret = aos.completeExecution({
+                sessionId: `wrapped_${sessionCounter}`,
+                agentId: 'wrapped_agent',
+                toolName,
+                toolParameters: params,
+                toolResult: result,
+                snapshot,
+                startTime,
+                endTime: Date.now(),
+                retryCount: 0,
+                wasSelfCorrected: false,
+                hadTimeout: false,
+                userAccepted: true,
+                userProvidedEdit: false,
+                resultWasUsed: false,
+            });
+            return {
+                runtime: ret.runtime,
+                postExec: ret.postExec,
+                audit: ret.auditEntry,
+                profile: ret.profile,
+            };
+        },
+        async execute(toolName, params, fn, opts) {
+            const sid = opts?.sessionId ?? `wrapped_${++sessionCounter}`;
+            const aid = opts?.agentId ?? 'wrapped_agent';
+            // Memory context at session start
+            if (sessionCounter === 1) {
+                aos.injectContext();
+            }
+            // Pre-check
+            const { preExec, snapshot } = aos.executePipeline({
+                sessionId: sid,
+                agentId: aid,
+                toolName,
+                parameters: params,
+                affectedFiles: opts?.affectedFiles,
+            });
+            if (preExec.riskScore.action === 'deny') {
+                return {
+                    allowed: false,
+                    reason: `Risk score ${preExec.riskScore.score} → ${preExec.riskScore.action}`,
+                    profile: aos.getProfile(sid),
+                };
+            }
+            // Optionally warn for 'confirm' level — but in middleware we auto-proceed
+            // In production you'd hook this into your Agent's confirmation loop
+            const startTime = Date.now();
+            // Execute
+            let result;
+            try {
+                result = await Promise.resolve(fn());
+            }
+            catch (err) {
+                // Execution failed — still record in audit
+                const ret = aos.completeExecution({
+                    sessionId: sid,
+                    agentId: aid,
+                    toolName,
+                    toolParameters: params,
+                    toolResult: { error: err.message },
+                    snapshot,
+                    startTime,
+                    endTime: Date.now(),
+                    retryCount: 0,
+                    wasSelfCorrected: false,
+                    hadTimeout: false,
+                    userAccepted: false,
+                    userProvidedEdit: false,
+                    resultWasUsed: false,
+                });
+                return {
+                    allowed: true,
+                    result: undefined,
+                    reason: `Execution failed: ${err.message}`,
+                    runtime: ret.runtime,
+                    postExec: ret.postExec,
+                    audit: ret.auditEntry,
+                    profile: ret.profile,
+                };
+            }
+            // Post-check
+            const ret = aos.completeExecution({
+                sessionId: sid,
+                agentId: aid,
+                toolName,
+                toolParameters: params,
+                toolResult: result,
+                snapshot,
+                startTime,
+                endTime: Date.now(),
+                retryCount: 0,
+                wasSelfCorrected: false,
+                hadTimeout: false,
+                userAccepted: true,
+                userProvidedEdit: false,
+                resultWasUsed: false,
+            });
+            return {
+                allowed: true,
+                result,
+                runtime: ret.runtime,
+                postExec: ret.postExec,
+                audit: ret.auditEntry,
+                profile: ret.profile,
+            };
+        },
+        injectContext() {
+            return aos.injectContext();
+        },
+        endSession(sid) {
+            // Cast needed because endSession is typed narrowly in core
+            aos.endSession(sid);
+        },
+        statusReport() {
+            return aos.statusReport();
+        },
+    };
+    return wrapped;
+}
+//# sourceMappingURL=wrapper.js.map

package/dist/middleware/wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper.js","sourceRoot":"","sources":["../../src/middleware/wrapper.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAoDH,8BAmKC;AArND,kCAAkC;AAkDlC,SAAgB,SAAS,CAAC,MAA+B;IACvD,MAAM,GAAG,GAAG,IAAI,cAAO,CAAC,MAAM,CAAC,CAAC;IAEhC,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,MAAM,OAAO,GAAiB;QAC5B,GAAG;QAEH,QAAQ,CAAC,QAAQ,EAAE,MAAM;YACvB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,eAAe,CAAC;gBAChD,SAAS,EAAE,WAAW,cAAc,EAAE;gBACtC,OAAO,EAAE,eAAe;gBACxB,QAAQ;gBACR,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC;YACpD,MAAM,MAAM,GAAG,CAAC,OAAO;gBACrB,CAAC,CAAC,cAAc,OAAO,CAAC,SAAS,CAAC,KAAK,YAAY,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,UAAU;gBACjG,CAAC,CAAC,SAAS,CAAC;YAEd,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAChD,CAAC;QAED,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS;YACrD,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC;gBAChC,SAAS,EAAE,WAAW,cAAc,EAAE;gBACtC,OAAO,EAAE,eAAe;gBACxB,QAAQ;gBACR,cAAc,EAAE,MAAM;gBACtB,UAAU,EAAE,MAAM;gBAClB,QAAQ;gBACR,SAAS;gBACT,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;gBACnB,UAAU,EAAE,CAAC;gBACb,gBAAgB,EAAE,KAAK;gBACvB,UAAU,EAAE,KAAK;gBACjB,YAAY,EAAE,IAAI;gBAClB,gBAAgB,EAAE,KAAK;gBACvB,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,UAAU;gBACrB,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,OAAO,CACX,QAAgB,EAChB,MAA+B,EAC/B,EAAwB,EACxB,IAAyE;YAEzE,MAAM,GAAG,GAAG,IAAI,EAAE,SAAS,IAAI,WAAW,EAAE,cAAc,EAAE,CAAC;YAC7D,MAAM,GAAG,GAAG,IAAI,EAAE,OAAO,IAAI,eAAe,CAAC;YAE7C,kCAAkC;YAClC,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;gBACzB,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,CAAC;YAED,YAAY;YACZ,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,eAAe,CAAC;gBAChD,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,GAAG;gBACZ,QAAQ;gBACR,UAAU,EAAE,MAAM;gBAClB,aAAa,EAAE,IAAI,EAAE,aAAa;aACnC,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,cAAc,OAAO,CAAC,SAAS,CAAC,KAAK,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE;oBAC7E,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;iBAC7B,CAAC;YACJ,CAAC;YAED,0EAA0E;YAC1E,oEAAoE;YAEpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,UAAU;YACV,IAAI,MAAS,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,2CAA2C;gBAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC;oBAChC,SAAS,EAAE,GAAG;oBACd,OAAO,EAAE,GAAG;oBACZ,QAAQ;oBACR,cAAc,EAAE,MAAM;oBACtB,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE;oBAClC,QAAQ;oBACR,SAAS;oBACT,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;oBACnB,UAAU,EAAE,CAAC;oBACb,gBAAgB,EAAE,KAAK;oBACvB,UAAU,EAAE,KAAK;oBACjB,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,KAAK;oBACvB,aAAa,EAAE,KAAK;iBACrB,CAAC,CAAC;gBAEH,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,SAAgB;oBACxB,MAAM,EAAE,qBAAqB,GAAG,CAAC,OAAO,EAAE;oBAC1C,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,KAAK,EAAE,GAAG,CAAC,UAAU;oBACrB,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC;YACJ,CAAC;YAED,aAAa;YACb,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC;gBAChC,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,GAAG;gBACZ,QAAQ;gBACR,cAAc,EAAE,MAAM;gBACtB,UAAU,EAAE,MAAM;gBAClB,QAAQ;gBACR,SAAS;gBACT,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;gBACnB,UAAU,EAAE,CAAC;gBACb,gBAAgB,EAAE,KAAK;gBACvB,UAAU,EAAE,KAAK;gBACjB,YAAY,EAAE,IAAI;gBAClB,gBAAgB,EAAE,KAAK;gBACvB,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,UAAU;gBACrB,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC;QACJ,CAAC;QAED,aAAa;YACX,OAAO,GAAG,CAAC,aAAa,EAAE,CAAC;QAC7B,CAAC;QAED,UAAU,CAAC,GAAG;YACZ,2DAA2D;YAC3D,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAED,YAAY;YACV,OAAO,GAAG,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Sentinel AgentOS HTTP Server
+ *
+ * Lightweight Express HTTP API that wraps the full Sentinel AgentOS
+ * pipeline behind RESTful JSON endpoints. Any language can call it.
+ *
+ * Quick start:
+ *   npx sentinel-agentos server --port 3300
+ *
+ * Endpoints:
+ *   POST /pipeline/pre       Pre-exec validation + risk scoring
+ *   POST /pipeline/post      Post-exec verification + audit
+ *   GET  /pipeline/report    Status report
+ *   GET  /pipeline/profile   Agent quality profile
+ *
+ *   POST /guard/schema       Register schema rules
+ *   GET  /guard/schema       List schema rules
+ *
+ *   POST /memory/preference  Set a preference
+ *   POST /memory/fact        Add a fact
+ *   POST /memory/rule        Learn a rule
+ *   GET  /memory/context     Get injected context
+ *
+ *   GET  /audit              Query audit log
+ *   GET  /health             Health check
+ *
+ *   POST /session/end        End session
+ *   POST /feedback           Record implicit feedback
+ */
+import { AgentOS } from './core';
+type ServerConfig = {
+    port: number;
+    host?: string;
+    /** API token for authentication. If set, all requests must include `Authorization: Bearer <token>` */
+    apiToken?: string;
+};
+export declare function createServer(config?: Partial<ServerConfig>): {
+    app: import("express-serve-static-core").Express;
+    start: () => Promise<void>;
+    stop: () => Promise<void>;
+    getPort: () => number;
+    getInstance: () => AgentOS;
+};
+export {};
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGjC,KAAK,YAAY,GAAG;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sGAAsG;IACtG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC;;;;;;EA8N1D"}

package/dist/server.js

@@ -0,0 +1,229 @@
+"use strict";
+/**
+ * Sentinel AgentOS HTTP Server
+ *
+ * Lightweight Express HTTP API that wraps the full Sentinel AgentOS
+ * pipeline behind RESTful JSON endpoints. Any language can call it.
+ *
+ * Quick start:
+ *   npx sentinel-agentos server --port 3300
+ *
+ * Endpoints:
+ *   POST /pipeline/pre       Pre-exec validation + risk scoring
+ *   POST /pipeline/post      Post-exec verification + audit
+ *   GET  /pipeline/report    Status report
+ *   GET  /pipeline/profile   Agent quality profile
+ *
+ *   POST /guard/schema       Register schema rules
+ *   GET  /guard/schema       List schema rules
+ *
+ *   POST /memory/preference  Set a preference
+ *   POST /memory/fact        Add a fact
+ *   POST /memory/rule        Learn a rule
+ *   GET  /memory/context     Get injected context
+ *
+ *   GET  /audit              Query audit log
+ *   GET  /health             Health check
+ *
+ *   POST /session/end        End session
+ *   POST /feedback           Record implicit feedback
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createServer = createServer;
+const express_1 = __importDefault(require("express"));
+const cors_1 = __importDefault(require("cors"));
+const core_1 = require("./core");
+function createServer(config) {
+    const port = config?.port ?? 3300;
+    const host = config?.host ?? '127.0.0.1';
+    const apiToken = config?.apiToken;
+    const app = (0, express_1.default)();
+    app.use((0, cors_1.default)());
+    app.use(express_1.default.json({ limit: '1mb' }));
+    // ---- API Token Authentication ----
+    if (apiToken) {
+        app.use((req, res, next) => {
+            // Skip health check
+            if (req.path === '/health') {
+                next();
+                return;
+            }
+            const auth = req.headers.authorization;
+            const token = auth?.startsWith('Bearer ') ? auth.slice(7) : null;
+            if (token !== apiToken) {
+                res.status(401).json({ error: 'Unauthorized: invalid or missing API token' });
+                return;
+            }
+            next();
+        });
+    }
+    // Each request gets its own AgentOS tracker, but we keep one base instance
+    // for shared memory (semantic/episodic) and accumulated profile.
+    const baseAos = new core_1.AgentOS();
+    // ---- Health ----
+    app.get('/health', (_req, res) => {
+        res.json({ ok: true, uptime: process.uptime() });
+    });
+    // ---- Pipeline: Pre-exec ----
+    app.post('/pipeline/pre', (req, res) => {
+        try {
+            const { sessionId, agentId, toolName, parameters, affectedFiles } = req.body;
+            if (!toolName) {
+                res.status(400).json({ error: 'toolName is required' });
+                return;
+            }
+            const result = baseAos.executePipeline({
+                sessionId: sessionId ?? 'http_session',
+                agentId: agentId ?? 'http_agent',
+                toolName,
+                parameters: parameters ?? {},
+                affectedFiles: affectedFiles ?? [],
+            });
+            res.json(result);
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // ---- Pipeline: Post-exec ----
+    app.post('/pipeline/post', (req, res) => {
+        try {
+            const { sessionId, agentId, toolName, toolParameters, toolResult, snapshot, startTime, endTime, retryCount, wasSelfCorrected, hadTimeout, userAccepted, userProvidedEdit, resultWasUsed, } = req.body;
+            if (!toolName) {
+                res.status(400).json({ error: 'toolName is required' });
+                return;
+            }
+            const result = baseAos.completeExecution({
+                sessionId: sessionId ?? 'http_session',
+                agentId: agentId ?? 'http_agent',
+                toolName,
+                toolParameters: toolParameters ?? {},
+                toolResult: toolResult ?? null,
+                snapshot: snapshot ?? null,
+                startTime: startTime ?? Date.now() - 100,
+                endTime: endTime ?? Date.now(),
+                retryCount: retryCount ?? 0,
+                wasSelfCorrected: wasSelfCorrected ?? false,
+                hadTimeout: hadTimeout ?? false,
+                userAccepted: userAccepted ?? true,
+                userProvidedEdit: userProvidedEdit ?? false,
+                resultWasUsed: resultWasUsed ?? false,
+            });
+            res.json(result);
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // ---- Pipeline: Report ----
+    app.get('/pipeline/report', (_req, res) => {
+        res.json({ report: baseAos.statusReport() });
+    });
+    // ---- Pipeline: Profile ----
+    app.get('/pipeline/profile', (req, res) => {
+        const sessionId = req.query.sessionId;
+        res.json(baseAos.getProfile(sessionId));
+    });
+    // ---- Guard: Register schema rules ----
+    app.post('/guard/schema', (req, res) => {
+        try {
+            const rule = req.body;
+            if (!rule.tool) {
+                res.status(400).json({ error: 'rule.tool is required' });
+                return;
+            }
+            baseAos.guard.schema.registerRule(rule);
+            res.json({ ok: true, tool: rule.tool });
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // ---- Guard: List rules ----
+    app.get('/guard/schema', (req, res) => {
+        const toolName = req.query.tool;
+        // SchemaGate doesn't expose a public list — use a partial dump
+        res.json({ tool: toolName ?? '*', note: 'Schema rules are active but listing requires internal API upgrade' });
+    });
+    // ---- Memory ----
+    app.post('/memory/preference', (req, res) => {
+        const { key, value } = req.body;
+        baseAos.memory.semantic.setPreference(key, value);
+        res.json({ ok: true });
+    });
+    app.post('/memory/fact', (req, res) => {
+        const { fact } = req.body;
+        baseAos.memory.semantic.addFact(fact);
+        res.json({ ok: true });
+    });
+    app.post('/memory/rule', (req, res) => {
+        const { rule, source } = req.body;
+        baseAos.memory.semantic.learnRule(rule, source);
+        res.json({ ok: true });
+    });
+    app.get('/memory/context', (_req, res) => {
+        res.json({ context: baseAos.injectContext() });
+    });
+    // ---- Audit ----
+    app.get('/audit', (req, res) => {
+        const limit = parseInt(String(req.query.limit ?? '20'), 10);
+        const toolName = req.query.tool;
+        const status = req.query.status;
+        const entries = baseAos.guard.audit.query({
+            limit,
+            ...(toolName ? { toolName } : {}),
+            ...(status ? { status } : {}),
+        });
+        res.json(entries);
+    });
+    // ---- Session ----
+    app.post('/session/end', (req, res) => {
+        const { sessionId } = req.body;
+        baseAos.endSession(sessionId ?? 'http_session');
+        res.json({ ok: true });
+    });
+    // ---- Feedback ----
+    app.post('/feedback', (req, res) => {
+        const { signal, sessionId, operationId, confidence, source } = req.body;
+        baseAos.recordFeedback(signal, sessionId, operationId, confidence, source);
+        res.json({ ok: true });
+    });
+    // ---- Error handling ----
+    app.use((err, _req, res, _next) => {
+        console.error('[Sentinel HTTP]', err);
+        res.status(500).json({ error: 'Internal server error' });
+    });
+    let server = null;
+    return {
+        app,
+        start: () => {
+            return new Promise((resolve) => {
+                server = app.listen(port, host, () => {
+                    console.log(`🛡️ Sentinel AgentOS HTTP server → http://${host}:${port}`);
+                    console.log(`   Health: http://${host}:${port}/health`);
+                    resolve();
+                });
+            });
+        },
+        stop: () => {
+            return new Promise((resolve) => {
+                server?.close(() => resolve());
+            });
+        },
+        getPort: () => port,
+        getInstance: () => baseAos,
+    };
+}
+// Allow direct invocation via `npx ts-node src/server.ts` or compiled `node dist/server.js`
+if (require.main === module) {
+    const args = process.argv.slice(2);
+    const portArg = args.indexOf('--port');
+    const port = portArg >= 0 ? parseInt(args[portArg + 1] ?? '3300', 10) : 3300;
+    const hostArg = args.indexOf('--host');
+    const host = hostArg >= 0 ? args[hostArg + 1] ?? '127.0.0.1' : '127.0.0.1';
+    createServer({ port, host }).start();
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;;;AAcH,oCA8NC;AA1OD,sDAAmE;AACnE,gDAAwB;AACxB,iCAAiC;AAUjC,SAAgB,YAAY,CAAC,MAA8B;IACzD,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,CAAC;IAElC,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,IAAA,cAAI,GAAE,CAAC,CAAC;IAChB,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExC,qCAAqC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC1D,oBAAoB;YACpB,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAEjE,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;gBAC9E,OAAO;YACT,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,OAAO,GAAG,IAAI,cAAO,EAAE,CAAC;IAE9B,mBAAmB;IAEnB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAClD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,+BAA+B;IAE/B,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAC7E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;gBACrC,SAAS,EAAE,SAAS,IAAI,cAAc;gBACtC,OAAO,EAAE,OAAO,IAAI,YAAY;gBAChC,QAAQ;gBACR,UAAU,EAAE,UAAU,IAAI,EAAE;gBAC5B,aAAa,EAAE,aAAa,IAAI,EAAE;aACnC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAEhC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,MAAM,EACJ,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAC5C,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EACxC,UAAU,EAAE,gBAAgB,EAAE,UAAU,EACxC,YAAY,EAAE,gBAAgB,EAAE,aAAa,GAC9C,GAAG,GAAG,CAAC,IAAI,CAAC;YAEb,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;gBACvC,SAAS,EAAE,SAAS,IAAI,cAAc;gBACtC,OAAO,EAAE,OAAO,IAAI,YAAY;gBAChC,QAAQ;gBACR,cAAc,EAAE,cAAc,IAAI,EAAE;gBACpC,UAAU,EAAE,UAAU,IAAI,IAAI;gBAC9B,QAAQ,EAAE,QAAQ,IAAI,IAAI;gBAC1B,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG;gBACxC,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE;gBAC9B,UAAU,EAAE,UAAU,IAAI,CAAC;gBAC3B,gBAAgB,EAAE,gBAAgB,IAAI,KAAK;gBAC3C,UAAU,EAAE,UAAU,IAAI,KAAK;gBAC/B,YAAY,EAAE,YAAY,IAAI,IAAI;gBAClC,gBAAgB,EAAE,gBAAgB,IAAI,KAAK;gBAC3C,aAAa,EAAE,aAAa,IAAI,KAAK;aACtC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAE7B,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC3D,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,8BAA8B;IAE9B,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAA+B,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,yCAAyC;IAEzC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAe,GAAG,CAAC,IAAI,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBACzD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,8BAA8B;IAE9B,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAC;QACtD,+DAA+D;QAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,EAAE,IAAI,EAAE,mEAAmE,EAAE,CAAC,CAAC;IACjH,CAAC,CAAC,CAAC;IAEH,mBAAmB;IAEnB,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC7D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACvD,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACvD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC1D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAElB,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAC;QACtD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAA4B,CAAC;QACtD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;YACxC,KAAK;YACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,oBAAoB;IAEpB,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACvD,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAC/B,OAAO,CAAC,UAAU,CAAC,SAAS,IAAI,cAAc,CAAC,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,qBAAqB;IAErB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACpD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QACxE,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3E,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAE3B,GAAG,CAAC,GAAG,CAAC,CAAC,GAAU,EAAE,IAAa,EAAE,GAAa,EAAE,KAAmB,EAAE,EAAE;QACxE,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAI,MAAM,GAAyC,IAAI,CAAC;IAExD,OAAO;QACL,GAAG;QACH,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;oBACnC,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;oBACzE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,IAAI,SAAS,CAAC,CAAC;oBACxD,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,EAAE,GAAG,EAAE;YACT,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;QACnB,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO;KAC3B,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IAE3E,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACvC,CAAC"}