usertrust 1.4.0 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (133) hide show
  1. package/README.md +17 -1
  2. package/dist/anomaly/detector.d.ts.map +1 -1
  3. package/dist/anomaly/detector.js +36 -11
  4. package/dist/anomaly/detector.js.map +1 -1
  5. package/dist/anomaly/index.d.ts +2 -2
  6. package/dist/anomaly/index.d.ts.map +1 -1
  7. package/dist/anomaly/index.js +1 -1
  8. package/dist/anomaly/index.js.map +1 -1
  9. package/dist/anomaly/signals/spend-velocity.d.ts +39 -12
  10. package/dist/anomaly/signals/spend-velocity.d.ts.map +1 -1
  11. package/dist/anomaly/signals/spend-velocity.js +66 -43
  12. package/dist/anomaly/signals/spend-velocity.js.map +1 -1
  13. package/dist/anomaly/signals/token-rate.d.ts +33 -13
  14. package/dist/anomaly/signals/token-rate.d.ts.map +1 -1
  15. package/dist/anomaly/signals/token-rate.js +124 -38
  16. package/dist/anomaly/signals/token-rate.js.map +1 -1
  17. package/dist/anomaly/types.d.ts +28 -6
  18. package/dist/anomaly/types.d.ts.map +1 -1
  19. package/dist/audit/anchor-doctor.d.ts +42 -0
  20. package/dist/audit/anchor-doctor.d.ts.map +1 -0
  21. package/dist/audit/anchor-doctor.js +285 -0
  22. package/dist/audit/anchor-doctor.js.map +1 -0
  23. package/dist/audit/anchor-verify.d.ts +229 -0
  24. package/dist/audit/anchor-verify.d.ts.map +1 -0
  25. package/dist/audit/anchor-verify.js +809 -0
  26. package/dist/audit/anchor-verify.js.map +1 -0
  27. package/dist/audit/anchor.d.ts +177 -0
  28. package/dist/audit/anchor.d.ts.map +1 -0
  29. package/dist/audit/anchor.js +922 -0
  30. package/dist/audit/anchor.js.map +1 -0
  31. package/dist/audit/canonical.js +1 -1
  32. package/dist/audit/canonical.js.map +1 -1
  33. package/dist/audit/chain.d.ts.map +1 -1
  34. package/dist/audit/chain.js +21 -7
  35. package/dist/audit/chain.js.map +1 -1
  36. package/dist/audit/read.d.ts +19 -0
  37. package/dist/audit/read.d.ts.map +1 -0
  38. package/dist/audit/read.js +94 -0
  39. package/dist/audit/read.js.map +1 -0
  40. package/dist/audit/rekor-verify.d.ts +116 -0
  41. package/dist/audit/rekor-verify.d.ts.map +1 -0
  42. package/dist/audit/rekor-verify.js +533 -0
  43. package/dist/audit/rekor-verify.js.map +1 -0
  44. package/dist/audit/rekor.d.ts +71 -0
  45. package/dist/audit/rekor.d.ts.map +1 -0
  46. package/dist/audit/rekor.js +556 -0
  47. package/dist/audit/rekor.js.map +1 -0
  48. package/dist/audit/rotation.js +1 -1
  49. package/dist/audit/rotation.js.map +1 -1
  50. package/dist/audit/sigv4.d.ts +44 -0
  51. package/dist/audit/sigv4.d.ts.map +1 -0
  52. package/dist/audit/sigv4.js +134 -0
  53. package/dist/audit/sigv4.js.map +1 -0
  54. package/dist/audit/verify.d.ts +78 -0
  55. package/dist/audit/verify.d.ts.map +1 -1
  56. package/dist/audit/verify.js +195 -1
  57. package/dist/audit/verify.js.map +1 -1
  58. package/dist/cli/anchor.d.ts +3 -0
  59. package/dist/cli/anchor.d.ts.map +1 -0
  60. package/dist/cli/anchor.js +626 -0
  61. package/dist/cli/anchor.js.map +1 -0
  62. package/dist/cli/completions.js +1 -1
  63. package/dist/cli/export.d.ts +3 -0
  64. package/dist/cli/export.d.ts.map +1 -0
  65. package/dist/cli/export.js +58 -0
  66. package/dist/cli/export.js.map +1 -0
  67. package/dist/cli/health.js.map +1 -1
  68. package/dist/cli/init.d.ts.map +1 -1
  69. package/dist/cli/init.js +99 -2
  70. package/dist/cli/init.js.map +1 -1
  71. package/dist/cli/inspect.d.ts.map +1 -1
  72. package/dist/cli/inspect.js +4 -34
  73. package/dist/cli/inspect.js.map +1 -1
  74. package/dist/cli/main.d.ts +2 -2
  75. package/dist/cli/main.d.ts.map +1 -1
  76. package/dist/cli/main.js +20 -1
  77. package/dist/cli/main.js.map +1 -1
  78. package/dist/cli/pricing.js +1 -1
  79. package/dist/cli/pricing.js.map +1 -1
  80. package/dist/cli/ui.d.ts +3 -0
  81. package/dist/cli/ui.d.ts.map +1 -0
  82. package/dist/cli/ui.js +35 -0
  83. package/dist/cli/ui.js.map +1 -0
  84. package/dist/cli/verify.d.ts.map +1 -1
  85. package/dist/cli/verify.js +342 -3
  86. package/dist/cli/verify.js.map +1 -1
  87. package/dist/config.d.ts.map +1 -1
  88. package/dist/config.js.map +1 -1
  89. package/dist/detect.d.ts +71 -16
  90. package/dist/detect.d.ts.map +1 -1
  91. package/dist/detect.js +141 -6
  92. package/dist/detect.js.map +1 -1
  93. package/dist/export/markdown.d.ts +12 -0
  94. package/dist/export/markdown.d.ts.map +1 -0
  95. package/dist/export/markdown.js +142 -0
  96. package/dist/export/markdown.js.map +1 -0
  97. package/dist/govern.d.ts +67 -3
  98. package/dist/govern.d.ts.map +1 -1
  99. package/dist/govern.js +1011 -219
  100. package/dist/govern.js.map +1 -1
  101. package/dist/headless.d.ts +41 -2
  102. package/dist/headless.d.ts.map +1 -1
  103. package/dist/headless.js +58 -7
  104. package/dist/headless.js.map +1 -1
  105. package/dist/index.d.ts +33 -25
  106. package/dist/index.d.ts.map +1 -1
  107. package/dist/index.js +30 -23
  108. package/dist/index.js.map +1 -1
  109. package/dist/ledger/client.d.ts.map +1 -1
  110. package/dist/ledger/client.js +57 -46
  111. package/dist/ledger/client.js.map +1 -1
  112. package/dist/ledger/engine.d.ts.map +1 -1
  113. package/dist/ledger/engine.js +22 -13
  114. package/dist/ledger/engine.js.map +1 -1
  115. package/dist/ledger/pricing.d.ts +54 -0
  116. package/dist/ledger/pricing.d.ts.map +1 -1
  117. package/dist/ledger/pricing.js +128 -8
  118. package/dist/ledger/pricing.js.map +1 -1
  119. package/dist/shared/types.d.ts +154 -340
  120. package/dist/shared/types.d.ts.map +1 -1
  121. package/dist/shared/types.js +67 -17
  122. package/dist/shared/types.js.map +1 -1
  123. package/dist/snapshot/checkpoint.d.ts.map +1 -1
  124. package/dist/snapshot/checkpoint.js +20 -2
  125. package/dist/snapshot/checkpoint.js.map +1 -1
  126. package/dist/streaming.d.ts +13 -3
  127. package/dist/streaming.d.ts.map +1 -1
  128. package/dist/streaming.js +88 -30
  129. package/dist/streaming.js.map +1 -1
  130. package/dist/supply-chain/sign.d.ts.map +1 -1
  131. package/dist/supply-chain/sign.js +3 -0
  132. package/dist/supply-chain/sign.js.map +1 -1
  133. package/package.json +6 -4
@@ -1,4 +1,18 @@
1
1
  import { z } from "zod";
2
+ /** Settlement scope of an endpoint: local (self-hosted) or cloud (metered provider). */
3
+ export type EndpointClass = "local" | "cloud";
4
+ /** Best-effort runtime label for a local endpoint (receipt/UX metadata only). */
5
+ export type LocalRuntime = "ollama" | "vllm" | "lmstudio" | "openai-compat" | "unknown";
6
+ /** Result of endpoint classification — selects the settlement regime for a call. */
7
+ export interface EndpointInfo {
8
+ class: EndpointClass;
9
+ runtime: LocalRuntime;
10
+ baseURL?: string | undefined;
11
+ }
12
+ /** Denomination of a settled cost: real-dollar proxy or nominal bookkeeping units. */
13
+ export type CostBasis = "usd-proxy" | "nominal";
14
+ /** Where the applied rates came from during resolution. */
15
+ export type RateSource = "table" | "custom" | "local-model" | "local-default" | "fallback";
2
16
  export interface TrustReceipt {
3
17
  transferId: string;
4
18
  cost: number;
@@ -18,6 +32,17 @@ export interface TrustReceipt {
18
32
  chunksDelivered?: number;
19
33
  /** Action kind for governed non-LLM actions. Absent for LLM calls (backward compat). */
20
34
  actionKind?: ActionKind;
35
+ /** Endpoint classification for this call. Absent on pre-M2 receipts. */
36
+ endpoint?: {
37
+ class: EndpointClass;
38
+ runtime: LocalRuntime;
39
+ };
40
+ /** Metering provenance: denomination and rate origin of the settled cost. */
41
+ meter?: {
42
+ costBasis: CostBasis;
43
+ rateSource: RateSource;
44
+ computeMs?: number;
45
+ };
21
46
  }
22
47
  export interface TrustedResponse<T> {
23
48
  response: T;
@@ -25,355 +50,156 @@ export interface TrustedResponse<T> {
25
50
  }
26
51
  export declare const TrustConfigSchema: z.ZodObject<{
27
52
  budget: z.ZodNumber;
28
- tier: z.ZodDefault<z.ZodEnum<["free", "mini", "pro", "mega", "ultra"]>>;
53
+ tier: z.ZodDefault<z.ZodEnum<{
54
+ free: "free";
55
+ mini: "mini";
56
+ pro: "pro";
57
+ mega: "mega";
58
+ ultra: "ultra";
59
+ }>>;
29
60
  proxy: z.ZodOptional<z.ZodString>;
30
61
  key: z.ZodOptional<z.ZodString>;
31
62
  policies: z.ZodDefault<z.ZodString>;
32
- pii: z.ZodDefault<z.ZodEnum<["redact", "warn", "block", "off"]>>;
33
- injection: z.ZodDefault<z.ZodEnum<["block", "warn", "off"]>>;
34
- board: z.ZodDefault<z.ZodObject<{
35
- enabled: z.ZodDefault<z.ZodBoolean>;
36
- vetoThreshold: z.ZodDefault<z.ZodEnum<["low", "medium", "high", "critical"]>>;
37
- }, "strip", z.ZodTypeAny, {
38
- enabled: boolean;
39
- vetoThreshold: "low" | "medium" | "high" | "critical";
40
- }, {
41
- enabled?: boolean | undefined;
42
- vetoThreshold?: "low" | "medium" | "high" | "critical" | undefined;
63
+ pii: z.ZodDefault<z.ZodEnum<{
64
+ redact: "redact";
65
+ warn: "warn";
66
+ block: "block";
67
+ off: "off";
68
+ }>>;
69
+ injection: z.ZodDefault<z.ZodEnum<{
70
+ warn: "warn";
71
+ block: "block";
72
+ off: "off";
43
73
  }>>;
44
- circuitBreaker: z.ZodDefault<z.ZodObject<{
74
+ board: z.ZodPrefault<z.ZodObject<{
75
+ enabled: z.ZodDefault<z.ZodBoolean>;
76
+ vetoThreshold: z.ZodDefault<z.ZodEnum<{
77
+ low: "low";
78
+ medium: "medium";
79
+ high: "high";
80
+ critical: "critical";
81
+ }>>;
82
+ }, z.core.$strip>>;
83
+ circuitBreaker: z.ZodPrefault<z.ZodObject<{
45
84
  failureThreshold: z.ZodDefault<z.ZodNumber>;
46
85
  resetTimeout: z.ZodDefault<z.ZodNumber>;
47
- }, "strip", z.ZodTypeAny, {
48
- failureThreshold: number;
49
- resetTimeout: number;
50
- }, {
51
- failureThreshold?: number | undefined;
52
- resetTimeout?: number | undefined;
53
- }>>;
54
- patterns: z.ZodDefault<z.ZodObject<{
86
+ }, z.core.$strip>>;
87
+ patterns: z.ZodPrefault<z.ZodObject<{
55
88
  enabled: z.ZodDefault<z.ZodBoolean>;
56
89
  feedProxy: z.ZodDefault<z.ZodBoolean>;
57
- }, "strip", z.ZodTypeAny, {
58
- enabled: boolean;
59
- feedProxy: boolean;
60
- }, {
61
- enabled?: boolean | undefined;
62
- feedProxy?: boolean | undefined;
63
- }>>;
64
- audit: z.ZodDefault<z.ZodObject<{
65
- rotation: z.ZodDefault<z.ZodEnum<["daily", "weekly", "none"]>>;
90
+ }, z.core.$strip>>;
91
+ audit: z.ZodPrefault<z.ZodObject<{
92
+ rotation: z.ZodDefault<z.ZodEnum<{
93
+ daily: "daily";
94
+ weekly: "weekly";
95
+ none: "none";
96
+ }>>;
66
97
  indexLimit: z.ZodDefault<z.ZodNumber>;
67
98
  failClosed: z.ZodDefault<z.ZodBoolean>;
68
- }, "strip", z.ZodTypeAny, {
69
- rotation: "daily" | "weekly" | "none";
70
- indexLimit: number;
71
- failClosed: boolean;
72
- }, {
73
- rotation?: "daily" | "weekly" | "none" | undefined;
74
- indexLimit?: number | undefined;
75
- failClosed?: boolean | undefined;
76
- }>>;
77
- tigerbeetle: z.ZodDefault<z.ZodObject<{
78
- addresses: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
99
+ }, z.core.$strip>>;
100
+ tigerbeetle: z.ZodPrefault<z.ZodObject<{
101
+ addresses: z.ZodDefault<z.ZodArray<z.ZodString>>;
79
102
  clusterId: z.ZodDefault<z.ZodNumber>;
80
- }, "strip", z.ZodTypeAny, {
81
- addresses: string[];
82
- clusterId: number;
83
- }, {
84
- addresses?: string[] | undefined;
85
- clusterId?: number | undefined;
86
- }>>;
103
+ }, z.core.$strip>>;
87
104
  providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
88
105
  name: z.ZodString;
89
- models: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
90
- }, "strip", z.ZodTypeAny, {
91
- name: string;
92
- models: string[];
93
- }, {
94
- name: string;
95
- models?: string[] | undefined;
96
- }>, "many">>;
97
- pricing: z.ZodDefault<z.ZodEnum<["recommended", "custom"]>>;
106
+ models: z.ZodDefault<z.ZodArray<z.ZodString>>;
107
+ }, z.core.$strip>>>;
108
+ pricing: z.ZodDefault<z.ZodEnum<{
109
+ custom: "custom";
110
+ recommended: "recommended";
111
+ }>>;
98
112
  customRates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
99
113
  inputPer1k: z.ZodNumber;
100
114
  outputPer1k: z.ZodNumber;
101
- }, "strip", z.ZodTypeAny, {
102
- inputPer1k: number;
103
- outputPer1k: number;
104
- }, {
105
- inputPer1k: number;
106
- outputPer1k: number;
107
- }>>>;
108
- supplyChain: z.ZodDefault<z.ZodObject<{
115
+ }, z.core.$strip>>>;
116
+ endpoints: z.ZodDefault<z.ZodArray<z.ZodObject<{
117
+ match: z.ZodString;
118
+ class: z.ZodDefault<z.ZodEnum<{
119
+ local: "local";
120
+ cloud: "cloud";
121
+ }>>;
122
+ runtime: z.ZodDefault<z.ZodEnum<{
123
+ ollama: "ollama";
124
+ vllm: "vllm";
125
+ lmstudio: "lmstudio";
126
+ "openai-compat": "openai-compat";
127
+ unknown: "unknown";
128
+ }>>;
129
+ }, z.core.$strip>>>;
130
+ local: z.ZodPrefault<z.ZodObject<{
131
+ autoDetectLoopback: z.ZodDefault<z.ZodBoolean>;
132
+ defaultRate: z.ZodDefault<z.ZodObject<{
133
+ inputPer1k: z.ZodNumber;
134
+ outputPer1k: z.ZodNumber;
135
+ }, z.core.$strip>>;
136
+ rateClass: z.ZodDefault<z.ZodEnum<{
137
+ nominal: "nominal";
138
+ "amortized-usd": "amortized-usd";
139
+ }>>;
140
+ models: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
141
+ inputPer1k: z.ZodNumber;
142
+ outputPer1k: z.ZodNumber;
143
+ }, z.core.$strip>>>;
144
+ injectUsageOptions: z.ZodDefault<z.ZodBoolean>;
145
+ }, z.core.$strip>>;
146
+ unknownModelPolicy: z.ZodDefault<z.ZodEnum<{
147
+ fallback: "fallback";
148
+ warn: "warn";
149
+ deny: "deny";
150
+ }>>;
151
+ supplyChain: z.ZodPrefault<z.ZodObject<{
109
152
  enabled: z.ZodDefault<z.ZodBoolean>;
110
- trustedPublishers: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
111
- publisherKeys: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
112
- allowedPermissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["llm_call", "tool_use", "file_read", "file_write", "shell_command", "network_access", "credential_access"]>, "many">>;
153
+ trustedPublishers: z.ZodDefault<z.ZodArray<z.ZodString>>;
154
+ publisherKeys: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
155
+ allowedPermissions: z.ZodDefault<z.ZodArray<z.ZodEnum<{
156
+ llm_call: "llm_call";
157
+ tool_use: "tool_use";
158
+ shell_command: "shell_command";
159
+ file_read: "file_read";
160
+ file_write: "file_write";
161
+ network_access: "network_access";
162
+ credential_access: "credential_access";
163
+ }>>>;
113
164
  requireSignature: z.ZodDefault<z.ZodBoolean>;
114
- }, "strip", z.ZodTypeAny, {
115
- enabled: boolean;
116
- trustedPublishers: string[];
117
- publisherKeys: Record<string, string[]>;
118
- allowedPermissions: ("llm_call" | "tool_use" | "shell_command" | "file_read" | "file_write" | "network_access" | "credential_access")[];
119
- requireSignature: boolean;
120
- }, {
121
- enabled?: boolean | undefined;
122
- trustedPublishers?: string[] | undefined;
123
- publisherKeys?: Record<string, string[]> | undefined;
124
- allowedPermissions?: ("llm_call" | "tool_use" | "shell_command" | "file_read" | "file_write" | "network_access" | "credential_access")[] | undefined;
125
- requireSignature?: boolean | undefined;
126
- }>>;
127
- vault: z.ZodDefault<z.ZodObject<{
165
+ }, z.core.$strip>>;
166
+ vault: z.ZodPrefault<z.ZodObject<{
128
167
  enabled: z.ZodDefault<z.ZodBoolean>;
129
168
  masterKeyEnv: z.ZodDefault<z.ZodString>;
130
169
  auditAccess: z.ZodDefault<z.ZodBoolean>;
131
- defaultScope: z.ZodDefault<z.ZodObject<{
132
- agents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
133
- actions: z.ZodDefault<z.ZodArray<z.ZodEnum<["llm_call", "tool_use", "file_access", "shell_command", "api_request"]>, "many">>;
170
+ defaultScope: z.ZodPrefault<z.ZodObject<{
171
+ agents: z.ZodDefault<z.ZodArray<z.ZodString>>;
172
+ actions: z.ZodDefault<z.ZodArray<z.ZodEnum<{
173
+ llm_call: "llm_call";
174
+ tool_use: "tool_use";
175
+ file_access: "file_access";
176
+ shell_command: "shell_command";
177
+ api_request: "api_request";
178
+ }>>>;
134
179
  expiresAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
135
- }, "strip", z.ZodTypeAny, {
136
- agents: string[];
137
- actions: ("llm_call" | "tool_use" | "file_access" | "shell_command" | "api_request")[];
138
- expiresAt: string | null;
139
- }, {
140
- agents?: string[] | undefined;
141
- actions?: ("llm_call" | "tool_use" | "file_access" | "shell_command" | "api_request")[] | undefined;
142
- expiresAt?: string | null | undefined;
143
- }>>;
144
- }, "strip", z.ZodTypeAny, {
145
- enabled: boolean;
146
- masterKeyEnv: string;
147
- auditAccess: boolean;
148
- defaultScope: {
149
- agents: string[];
150
- actions: ("llm_call" | "tool_use" | "file_access" | "shell_command" | "api_request")[];
151
- expiresAt: string | null;
152
- };
153
- }, {
154
- enabled?: boolean | undefined;
155
- masterKeyEnv?: string | undefined;
156
- auditAccess?: boolean | undefined;
157
- defaultScope?: {
158
- agents?: string[] | undefined;
159
- actions?: ("llm_call" | "tool_use" | "file_access" | "shell_command" | "api_request")[] | undefined;
160
- expiresAt?: string | null | undefined;
161
- } | undefined;
162
- }>>;
163
- anomaly: z.ZodDefault<z.ZodObject<{
180
+ }, z.core.$strip>>;
181
+ }, z.core.$strip>>;
182
+ anomaly: z.ZodPrefault<z.ZodObject<{
164
183
  enabled: z.ZodDefault<z.ZodBoolean>;
165
- tokenRate: z.ZodDefault<z.ZodObject<{
184
+ tokenRate: z.ZodPrefault<z.ZodObject<{
166
185
  thresholdTokPerSec: z.ZodDefault<z.ZodNumber>;
186
+ localThresholdTokPerSec: z.ZodDefault<z.ZodNumber>;
187
+ perModel: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>;
167
188
  windowMs: z.ZodDefault<z.ZodNumber>;
168
189
  consecutiveWindows: z.ZodDefault<z.ZodNumber>;
169
- }, "strip", z.ZodTypeAny, {
170
- thresholdTokPerSec: number;
171
- windowMs: number;
172
- consecutiveWindows: number;
173
- }, {
174
- thresholdTokPerSec?: number | undefined;
175
- windowMs?: number | undefined;
176
- consecutiveWindows?: number | undefined;
177
- }>>;
178
- spendVelocity: z.ZodDefault<z.ZodObject<{
190
+ }, z.core.$strip>>;
191
+ spendVelocity: z.ZodPrefault<z.ZodObject<{
179
192
  thresholdDollarsPerMin: z.ZodDefault<z.ZodNumber>;
193
+ localThresholdUsertokensPerMin: z.ZodDefault<z.ZodNumber>;
180
194
  windowMs: z.ZodDefault<z.ZodNumber>;
181
- }, "strip", z.ZodTypeAny, {
182
- windowMs: number;
183
- thresholdDollarsPerMin: number;
184
- }, {
185
- windowMs?: number | undefined;
186
- thresholdDollarsPerMin?: number | undefined;
187
- }>>;
188
- injectionCascade: z.ZodDefault<z.ZodObject<{
195
+ }, z.core.$strip>>;
196
+ injectionCascade: z.ZodPrefault<z.ZodObject<{
189
197
  eventCount: z.ZodDefault<z.ZodNumber>;
190
198
  windowMs: z.ZodDefault<z.ZodNumber>;
191
- }, "strip", z.ZodTypeAny, {
192
- windowMs: number;
193
- eventCount: number;
194
- }, {
195
- windowMs?: number | undefined;
196
- eventCount?: number | undefined;
197
- }>>;
199
+ }, z.core.$strip>>;
198
200
  cooldownMs: z.ZodDefault<z.ZodNumber>;
199
- }, "strip", z.ZodTypeAny, {
200
- enabled: boolean;
201
- tokenRate: {
202
- thresholdTokPerSec: number;
203
- windowMs: number;
204
- consecutiveWindows: number;
205
- };
206
- spendVelocity: {
207
- windowMs: number;
208
- thresholdDollarsPerMin: number;
209
- };
210
- injectionCascade: {
211
- windowMs: number;
212
- eventCount: number;
213
- };
214
- cooldownMs: number;
215
- }, {
216
- enabled?: boolean | undefined;
217
- tokenRate?: {
218
- thresholdTokPerSec?: number | undefined;
219
- windowMs?: number | undefined;
220
- consecutiveWindows?: number | undefined;
221
- } | undefined;
222
- spendVelocity?: {
223
- windowMs?: number | undefined;
224
- thresholdDollarsPerMin?: number | undefined;
225
- } | undefined;
226
- injectionCascade?: {
227
- windowMs?: number | undefined;
228
- eventCount?: number | undefined;
229
- } | undefined;
230
- cooldownMs?: number | undefined;
231
- }>>;
232
- }, "strip", z.ZodTypeAny, {
233
- audit: {
234
- rotation: "daily" | "weekly" | "none";
235
- indexLimit: number;
236
- failClosed: boolean;
237
- };
238
- budget: number;
239
- tier: "free" | "mini" | "pro" | "mega" | "ultra";
240
- policies: string;
241
- pii: "redact" | "warn" | "block" | "off";
242
- injection: "warn" | "block" | "off";
243
- board: {
244
- enabled: boolean;
245
- vetoThreshold: "low" | "medium" | "high" | "critical";
246
- };
247
- circuitBreaker: {
248
- failureThreshold: number;
249
- resetTimeout: number;
250
- };
251
- patterns: {
252
- enabled: boolean;
253
- feedProxy: boolean;
254
- };
255
- tigerbeetle: {
256
- addresses: string[];
257
- clusterId: number;
258
- };
259
- providers: {
260
- name: string;
261
- models: string[];
262
- }[];
263
- pricing: "custom" | "recommended";
264
- supplyChain: {
265
- enabled: boolean;
266
- trustedPublishers: string[];
267
- publisherKeys: Record<string, string[]>;
268
- allowedPermissions: ("llm_call" | "tool_use" | "shell_command" | "file_read" | "file_write" | "network_access" | "credential_access")[];
269
- requireSignature: boolean;
270
- };
271
- vault: {
272
- enabled: boolean;
273
- masterKeyEnv: string;
274
- auditAccess: boolean;
275
- defaultScope: {
276
- agents: string[];
277
- actions: ("llm_call" | "tool_use" | "file_access" | "shell_command" | "api_request")[];
278
- expiresAt: string | null;
279
- };
280
- };
281
- anomaly: {
282
- enabled: boolean;
283
- tokenRate: {
284
- thresholdTokPerSec: number;
285
- windowMs: number;
286
- consecutiveWindows: number;
287
- };
288
- spendVelocity: {
289
- windowMs: number;
290
- thresholdDollarsPerMin: number;
291
- };
292
- injectionCascade: {
293
- windowMs: number;
294
- eventCount: number;
295
- };
296
- cooldownMs: number;
297
- };
298
- proxy?: string | undefined;
299
- key?: string | undefined;
300
- customRates?: Record<string, {
301
- inputPer1k: number;
302
- outputPer1k: number;
303
- }> | undefined;
304
- }, {
305
- budget: number;
306
- audit?: {
307
- rotation?: "daily" | "weekly" | "none" | undefined;
308
- indexLimit?: number | undefined;
309
- failClosed?: boolean | undefined;
310
- } | undefined;
311
- tier?: "free" | "mini" | "pro" | "mega" | "ultra" | undefined;
312
- proxy?: string | undefined;
313
- key?: string | undefined;
314
- policies?: string | undefined;
315
- pii?: "redact" | "warn" | "block" | "off" | undefined;
316
- injection?: "warn" | "block" | "off" | undefined;
317
- board?: {
318
- enabled?: boolean | undefined;
319
- vetoThreshold?: "low" | "medium" | "high" | "critical" | undefined;
320
- } | undefined;
321
- circuitBreaker?: {
322
- failureThreshold?: number | undefined;
323
- resetTimeout?: number | undefined;
324
- } | undefined;
325
- patterns?: {
326
- enabled?: boolean | undefined;
327
- feedProxy?: boolean | undefined;
328
- } | undefined;
329
- tigerbeetle?: {
330
- addresses?: string[] | undefined;
331
- clusterId?: number | undefined;
332
- } | undefined;
333
- providers?: {
334
- name: string;
335
- models?: string[] | undefined;
336
- }[] | undefined;
337
- pricing?: "custom" | "recommended" | undefined;
338
- customRates?: Record<string, {
339
- inputPer1k: number;
340
- outputPer1k: number;
341
- }> | undefined;
342
- supplyChain?: {
343
- enabled?: boolean | undefined;
344
- trustedPublishers?: string[] | undefined;
345
- publisherKeys?: Record<string, string[]> | undefined;
346
- allowedPermissions?: ("llm_call" | "tool_use" | "shell_command" | "file_read" | "file_write" | "network_access" | "credential_access")[] | undefined;
347
- requireSignature?: boolean | undefined;
348
- } | undefined;
349
- vault?: {
350
- enabled?: boolean | undefined;
351
- masterKeyEnv?: string | undefined;
352
- auditAccess?: boolean | undefined;
353
- defaultScope?: {
354
- agents?: string[] | undefined;
355
- actions?: ("llm_call" | "tool_use" | "file_access" | "shell_command" | "api_request")[] | undefined;
356
- expiresAt?: string | null | undefined;
357
- } | undefined;
358
- } | undefined;
359
- anomaly?: {
360
- enabled?: boolean | undefined;
361
- tokenRate?: {
362
- thresholdTokPerSec?: number | undefined;
363
- windowMs?: number | undefined;
364
- consecutiveWindows?: number | undefined;
365
- } | undefined;
366
- spendVelocity?: {
367
- windowMs?: number | undefined;
368
- thresholdDollarsPerMin?: number | undefined;
369
- } | undefined;
370
- injectionCascade?: {
371
- windowMs?: number | undefined;
372
- eventCount?: number | undefined;
373
- } | undefined;
374
- cooldownMs?: number | undefined;
375
- } | undefined;
376
- }>;
201
+ }, z.core.$strip>>;
202
+ }, z.core.$strip>;
377
203
  export type TrustConfig = z.infer<typeof TrustConfigSchema>;
378
204
  export type PolicyEffect = "deny" | "warn";
379
205
  export type PolicyEnforcement = "hard" | "soft";
@@ -489,32 +315,20 @@ export declare const SkillManifestSchema: z.ZodObject<{
489
315
  id: z.ZodString;
490
316
  name: z.ZodString;
491
317
  publisher: z.ZodString;
492
- permissions: z.ZodArray<z.ZodEnum<["llm_call", "tool_use", "file_read", "file_write", "shell_command", "network_access", "credential_access"]>, "many">;
318
+ permissions: z.ZodArray<z.ZodEnum<{
319
+ llm_call: "llm_call";
320
+ tool_use: "tool_use";
321
+ shell_command: "shell_command";
322
+ file_read: "file_read";
323
+ file_write: "file_write";
324
+ network_access: "network_access";
325
+ credential_access: "credential_access";
326
+ }>>;
493
327
  entryHash: z.ZodString;
494
328
  signedAt: z.ZodString;
495
329
  signature: z.ZodString;
496
330
  publicKey: z.ZodString;
497
- }, "strip", z.ZodTypeAny, {
498
- name: string;
499
- version: 1;
500
- id: string;
501
- publisher: string;
502
- permissions: ("llm_call" | "tool_use" | "shell_command" | "file_read" | "file_write" | "network_access" | "credential_access")[];
503
- entryHash: string;
504
- signedAt: string;
505
- signature: string;
506
- publicKey: string;
507
- }, {
508
- name: string;
509
- version: 1;
510
- id: string;
511
- publisher: string;
512
- permissions: ("llm_call" | "tool_use" | "shell_command" | "file_read" | "file_write" | "network_access" | "credential_access")[];
513
- entryHash: string;
514
- signedAt: string;
515
- signature: string;
516
- publicKey: string;
517
- }>;
331
+ }, z.core.$strip>;
518
332
  /** Scope constraining when/how a credential can be accessed. */
519
333
  export interface CredentialScope {
520
334
  /** Agents allowed to access this credential (empty = all). */
@@ -1 +1 @@
1
- {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,WAAW,YAAY;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,UAAU,GAAG,WAAW,CAAC;IACvC,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wFAAwF;IACxF,UAAU,CAAC,EAAE,UAAU,CAAC;CACxB;AAGD,MAAM,WAAW,eAAe,CAAC,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC;IACZ,OAAO,EAAE,YAAY,CAAC;CACtB;AAGD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgI5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAG5D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAC3C,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAC;AAChD,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE7E,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,UAAU,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,aAAa,GACtB,QAAQ,GACR,YAAY,GACZ,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,QAAQ,GACR,UAAU,GACV,OAAO,CAAC;AAEX,MAAM,WAAW,cAAc;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAGD,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAGD,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AACjE,MAAM,MAAM,WAAW,GACpB,eAAe,GACf,MAAM,GACN,QAAQ,GACR,aAAa,GACb,gBAAgB,GAChB,kBAAkB,CAAC;AACtB,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAG1D,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAI9D,kDAAkD;AAClD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,GAAG,aAAa,CAAC;AAEnG,wCAAwC;AACxC,MAAM,WAAW,gBAAgB;IAChC,yCAAyC;IACzC,IAAI,EAAE,UAAU,CAAC;IACjB,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,2CAA2C;AAC3C,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC;IACV,OAAO,EAAE,YAAY,CAAC;CACtB;AAID,iDAAiD;AACjD,MAAM,WAAW,kBAAkB;IAClC,uDAAuD;IACvD,QAAQ,EAAE,OAAO,CAAC;IAClB,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4FAA4F;IAC5F,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC3B,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;CACf;AAID,6CAA6C;AAC7C,MAAM,MAAM,eAAe,GACxB,UAAU,GACV,UAAU,GACV,WAAW,GACX,YAAY,GACZ,eAAe,GACf,gBAAgB,GAChB,mBAAmB,CAAC;AAEvB,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC7B,gDAAgD;IAChD,OAAO,EAAE,CAAC,CAAC;IACX,yDAAyD;IACzD,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,4CAA4C;AAC5C,MAAM,WAAW,iBAAiB;IACjC,+CAA+C;IAC/C,KAAK,EAAE,OAAO,CAAC;IACf,8DAA8D;IAC9D,kBAAkB,EAAE,OAAO,CAAC;IAC5B,8CAA8C;IAC9C,iBAAiB,EAAE,eAAe,EAAE,CAAC;IACrC,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoB9B,CAAC;AAIH,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC/B,8DAA8D;IAC9D,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iEAAiE;IACjE,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,yDAAyD;IACzD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC/B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,KAAK,EAAE,eAAe,CAAC;IACvB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,6CAA6C;AAC7C,MAAM,WAAW,sBAAsB;IACtC,kCAAkC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB"}
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAE9C,iFAAiF;AACjF,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,eAAe,GAAG,SAAS,CAAC;AAExF,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC5B,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,sFAAsF;AACtF,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAEhD,2DAA2D;AAC3D,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,aAAa,GAAG,eAAe,GAAG,UAAU,CAAC;AAG3F,MAAM,WAAW,YAAY;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,UAAU,GAAG,WAAW,CAAC;IACvC,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wFAAwF;IACxF,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,YAAY,CAAA;KAAE,CAAC;IAC3D,6EAA6E;IAC7E,KAAK,CAAC,EAAE;QAAE,SAAS,EAAE,SAAS,CAAC;QAAC,UAAU,EAAE,UAAU,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7E;AAGD,MAAM,WAAW,eAAe,CAAC,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC;IACZ,OAAO,EAAE,YAAY,CAAC;CACtB;AAUD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4K5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAG5D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAC3C,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAC;AAChD,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE7E,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,UAAU,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,aAAa,GACtB,QAAQ,GACR,YAAY,GACZ,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,QAAQ,GACR,UAAU,GACV,OAAO,CAAC;AAEX,MAAM,WAAW,cAAc;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAGD,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAGD,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AACjE,MAAM,MAAM,WAAW,GACpB,eAAe,GACf,MAAM,GACN,QAAQ,GACR,aAAa,GACb,gBAAgB,GAChB,kBAAkB,CAAC;AACtB,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAG1D,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAI9D,kDAAkD;AAClD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,GAAG,aAAa,CAAC;AAEnG,wCAAwC;AACxC,MAAM,WAAW,gBAAgB;IAChC,yCAAyC;IACzC,IAAI,EAAE,UAAU,CAAC;IACjB,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,2CAA2C;AAC3C,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC;IACV,OAAO,EAAE,YAAY,CAAC;CACtB;AAID,iDAAiD;AACjD,MAAM,WAAW,kBAAkB;IAClC,uDAAuD;IACvD,QAAQ,EAAE,OAAO,CAAC;IAClB,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4FAA4F;IAC5F,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC3B,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;CACf;AAID,6CAA6C;AAC7C,MAAM,MAAM,eAAe,GACxB,UAAU,GACV,UAAU,GACV,WAAW,GACX,YAAY,GACZ,eAAe,GACf,gBAAgB,GAChB,mBAAmB,CAAC;AAEvB,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC7B,gDAAgD;IAChD,OAAO,EAAE,CAAC,CAAC;IACX,yDAAyD;IACzD,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,4CAA4C;AAC5C,MAAM,WAAW,iBAAiB;IACjC,+CAA+C;IAC/C,KAAK,EAAE,OAAO,CAAC;IACf,8DAA8D;IAC9D,kBAAkB,EAAE,OAAO,CAAC;IAC5B,8CAA8C;IAC9C,iBAAiB,EAAE,eAAe,EAAE,CAAC;IACrC,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;iBAoB9B,CAAC;AAIH,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC/B,8DAA8D;IAC9D,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iEAAiE;IACjE,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,yDAAyD;IACzD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC/B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,KAAK,EAAE,eAAe,CAAC;IACvB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,6CAA6C;AAC7C,MAAM,WAAW,sBAAsB;IACtC,kCAAkC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB"}