@agent-deck/backend 1.10.1 → 1.10.2

package/dist/execution-authority/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/execution-authority/ledger.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,6CAAyC;AAEzC,+CAAqD;AAErD,oDAA8E;AAe9E,SAAS,KAAK,CAAC,IAAqC;IAClD,OAAO,IAAA,wBAAe,EAAC,IAAI,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;AAC7C,CAAC;AAYD,SAAS,cAAc,CAAC,SAA6B;IACnD,OAAO;QACL,GAAG,SAAS;QACZ,eAAe,EAAE,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC;QAC/C,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAAgB,EAAE,CAAgB;IACpD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,CAAc,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,QAA4B,EAAE,KAAyB;IAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnF,OAAO,CACL,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC9B,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACtC,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAChC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QACpC,WAAW,KAAK,KAAK,CAAC,KAAK;QAC3B,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,KAAK,CAAC,eAAe,CAAC,MAAM;QAChE,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxE,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CACtD,CAAC;AACJ,CAAC;AAOD;;;GAGG;AACH,MAAa,wBAAwB;IAClB,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;IACvD,sBAAsB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,8CAA8C;IACrF,KAAK,GAAiB,EAAE,CAAC;IACzB,GAAG,CAAa;IAEjC,YAAY,UAA2C,EAAE;QACvD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,WAAW;QACT,OAAO;YACL,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtD,GAAG,CAAC;gBACJ,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;aACtC,CAAC,CAAC;YACH,sBAAsB,EAAE,CAAC,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CACpE,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAC/D;YACD,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;YAC/D,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjF,WAAW;gBACX,UAAU;aACX,CAAC,CAAC;YACH,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE;gBAClE,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;YACvD,CAAC,CAAC;YACF,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAChC,GAAG,KAAK;gBACR,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE;gBACrC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;aACvD,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,KAAkB;QAC7B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE;gBAC5C,GAAG,UAAU;gBACb,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;YAC/C,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACrC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACpF,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACd,GAAG,KAAK;gBACR,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE;gBACrC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,aAAa,CAAC,YAAoB;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAClC,OAAO,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG,CAAC;YACJ,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;SACtC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,sBAAsB,CAAC,YAAoB,EAAE,MAAc;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,IAAA,yBAAiB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,qBAAqB,CAAC,WAAmB,EAAE,MAAc;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,IAAA,yBAAiB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,iBAAiB,CAAC,KAGjB;QACC,MAAM,UAAU,GAA0B;YACxC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;YACzC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,MAAM,gBAAgB,GAAG,QAAQ,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACnG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,IAAA,uBAAe,EAAC,gBAAgB,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE;YACnC,YAAY,EAAE,UAAU,CAAC,YAAY;SACtC,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3C,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,UAAU,EAAE;oBACV,GAAG,UAAU;oBACb,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC;iBAC/C;gBACD,gBAAgB;aACjB;SACF,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,0BAA0B;gBACtC,OAAO,EAAE,oBAAoB;gBAC7B,WAAW,EAAE,EAAE,YAAY,EAAE;aAC9B,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC;QAC9C,CAAC;QACD,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC;QAC9B,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAEvD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,YAAY,KAAK,YAAY;gBAAE,SAAS;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM;gBAAE,SAAS;YACxD,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE;gBAClC,YAAY;gBACZ,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED,aAAa,CAAC,KAAyB;QACrC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,kBAAkB;gBAC1B,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;aAClD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,0BAA0B;gBACtC,OAAO,EAAE,oBAAoB;gBAC7B,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,oBAAoB;gBAChC,OAAO,EAAE,uBAAuB;gBAChC,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,uBAAuB;gBACnC,OAAO,EAAE,wCAAwC;gBACjD,MAAM,EAAE,oBAAoB;gBAC5B,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;aACxE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAE,CAAC;YAC1D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;gBACtC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,UAAU,EAAE,0BAA0B;oBACtC,OAAO,EAAE,uDAAuD;oBAChE,MAAM,EAAE,iBAAiB;oBACzB,WAAW,EAAE;wBACX,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;wBACjC,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB;iBACF,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/B,uFAAuF;gBACvF,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE;wBACJ,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC;wBACnC,eAAe,EAAE,IAAI;wBACrB,YAAY,EAAE,KAAK;qBACpB;iBACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB;gBACrF,OAAO,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE;gBAC/C,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;gBACrE,WAAW,EAAE;oBACX,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACxB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAuB;YACpC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC;YAC3B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC;YAC3C,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACvD,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;YAChC,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC;QACF,MAAM,eAAe,GAAG,QAAQ,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QAClG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,IAAA,uBAAe,EAAC,eAAe,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE;YACjC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;gBACpC,eAAe;gBACf,YAAY,EAAE,IAAI;aACnB;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,WAAmB;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,OAAO,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW,EAAE,EAAE,WAAW,EAAE;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE;YACpC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,eAAe,CAAC,WAAmB;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW,EAAE,EAAE,WAAW,EAAE;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE;gBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAClB,KAA0B;QAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,WAAW,GAAqB;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,WAAW,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;QAClD,WAAW,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QACpC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QAC5C,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAEtC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,CAAC,YAAY,IAAI,CAAC,IAAA,yBAAiB,EAAC,KAAK,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,CAAC;YAC7E,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,0BAA0B;gBACtC,OAAO,EAAE,0BAA0B;gBACnC,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE;gBACzC,MAAM,EAAE,mBAAmB;gBAC3B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,MAAM,EAAE,KAAK,CAAC,QAAQ;aACvB,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mDAAmD;gBAC5D,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAClE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW;aACZ,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAClE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,MAAM,EAAE,iBAAiB;gBACzB,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC/E,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,yDAAyD;gBAClE,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE;gBACzC,MAAM,EAAE,sBAAsB;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,uBAAuB;gBACnC,OAAO,EAAE,gCAAgC;gBACzC,MAAM,EAAE,sBAAsB;gBAC9B,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,EAAE;YAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,IAAI;aACb;SACF,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,SAMZ,EAAE;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;YAC5B,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC3D,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvE,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAAE,OAAO,KAAK,CAAC;YAC7E,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;gBAAE,OAAO,KAAK,CAAC;YAChF,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,SAA6B,EAAE,SAAiB,EAAE,QAAgB;QACpF,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,CAChC,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CACzE,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,WAAmB;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3F,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE;gBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,SAAS,CACf,IAAoB,EACpB,WAA6B,EAC7B,MAAgC;QAEhC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;YACrB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI;YACJ,WAAW,EAAE,EAAE,GAAG,WAAW,EAAE;YAC/B,MAAM;SACP,CAAC,CAAC;IACL,CAAC;CACF;AAlfD,4DAkfC"}

package/dist/execution-authority/store.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Durable SQLite-backed execution-authority store (NOT-86).
+ * Logic lives in ExecutionAuthorityLedger; this module hydrates/persists snapshots.
+ */
+import type Database from 'better-sqlite3';
+import type { AuthorizedCallInput, ContractResult, CoordinatorEnrollment, EnrollCoordinatorResult, ExecutionAuthority, MintAuthorityInput, MintAuthorityResult, AuditEvent } from './types';
+export type ExecutionAuthorityStoreOptions = {
+    now?: () => Date;
+};
+export declare class ExecutionAuthorityStore {
+    private readonly db;
+    private readonly ledger;
+    constructor(db: Database.Database, options?: ExecutionAuthorityStoreOptions);
+    /** Test helper: replace clock without losing durable state. */
+    withNow(now: () => Date): ExecutionAuthorityStore;
+    private ensureTables;
+    private hydrate;
+    private persist;
+    private runMutating;
+    enrollCoordinator(input: {
+        coordinatorId: string;
+        allowedDeckIds: string[];
+    }): ContractResult<EnrollCoordinatorResult>;
+    revokeEnrollment(enrollmentId: string): ContractResult<{
+        enrollmentId: string;
+    }>;
+    mintAuthority(input: MintAuthorityInput): ContractResult<MintAuthorityResult>;
+    /** Non-auditing existence/ownership lookup (see ledger.peekAuthority). */
+    peekAuthority(authorityId: string): ExecutionAuthority | undefined;
+    inspectAuthority(authorityId: string): ContractResult<ExecutionAuthority>;
+    revokeAuthority(authorityId: string): ContractResult<{
+        authorityId: string;
+    }>;
+    invokeAuthorizedCall(input: AuthorizedCallInput): ContractResult<{
+        serviceId: string;
+        toolName: string;
+        result: string;
+    }>;
+    listAuditEvents(filter?: {
+        runId?: string;
+        attemptId?: string;
+        authorityId?: string;
+        enrollmentId?: string;
+        requestId?: string;
+    }): AuditEvent[];
+    getEnrollment(enrollmentId: string): CoordinatorEnrollment | undefined;
+    listEnrollments(): CoordinatorEnrollment[];
+    verifyEnrollmentSecret(enrollmentId: string, secret: string): boolean;
+    verifyAuthoritySecret(authorityId: string, secret: string): boolean;
+    /**
+     * Validate authority id+secret and return current authority (may transition to expired).
+     */
+    authenticateAuthority(authorityId: string, authoritySecret: string): ContractResult<ExecutionAuthority>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/execution-authority/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/execution-authority/store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACX,MAAM,SAAS,CAAC;AAEjB,MAAM,MAAM,8BAA8B,GAAG;IAC3C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,qBAAa,uBAAuB;IAIhC,OAAO,CAAC,QAAQ,CAAC,EAAE;IAHrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;gBAG/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACtC,OAAO,GAAE,8BAAmC;IAO9C,+DAA+D;IAC/D,OAAO,CAAC,GAAG,EAAE,MAAM,IAAI,GAAG,uBAAuB;IAKjD,OAAO,CAAC,YAAY;IA0CpB,OAAO,CAAC,OAAO;IAiGf,OAAO,CAAC,OAAO;IA+Ef,OAAO,CAAC,WAAW;IAMnB,iBAAiB,CAAC,KAAK,EAAE;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,GAAG,cAAc,CAAC,uBAAuB,CAAC;IAI3C,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAMhF,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,cAAc,CAAC,mBAAmB,CAAC;IAI7E,0EAA0E;IAC1E,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIlE,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAAC,kBAAkB,CAAC;IAIzE,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAM7E,oBAAoB,CAClB,KAAK,EAAE,mBAAmB,GACzB,cAAc,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ1E,eAAe,CAAC,MAAM,GAAE;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,UAAU,EAAE;IAIrB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS;IAItE,eAAe,IAAI,qBAAqB,EAAE;IAI1C,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAIrE,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAInE;;OAEG;IACH,qBAAqB,CACnB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,GACtB,cAAc,CAAC,kBAAkB,CAAC;CA6CtC"}

package/dist/execution-authority/store.js

@@ -0,0 +1,256 @@
+"use strict";
+/**
+ * Durable SQLite-backed execution-authority store (NOT-86).
+ * Logic lives in ExecutionAuthorityLedger; this module hydrates/persists snapshots.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutionAuthorityStore = void 0;
+const ledger_1 = require("./ledger");
+class ExecutionAuthorityStore {
+    db;
+    ledger;
+    constructor(db, options = {}) {
+        this.db = db;
+        this.ensureTables();
+        this.ledger = new ledger_1.ExecutionAuthorityLedger({ now: options.now });
+        this.hydrate();
+    }
+    /** Test helper: replace clock without losing durable state. */
+    withNow(now) {
+        const next = new ExecutionAuthorityStore(this.db, { now });
+        return next;
+    }
+    ensureTables() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS ea_enrollments (
+        enrollment_id TEXT PRIMARY KEY,
+        coordinator_id TEXT NOT NULL,
+        status TEXT NOT NULL CHECK (status IN ('active', 'revoked')),
+        allowed_deck_ids TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        revoked_at TEXT,
+        secret_hash TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS ea_authorities (
+        authority_id TEXT PRIMARY KEY,
+        enrollment_id TEXT NOT NULL,
+        run_id TEXT NOT NULL,
+        attempt_id TEXT NOT NULL,
+        deck_id TEXT NOT NULL,
+        audience TEXT NOT NULL,
+        allowed_services TEXT NOT NULL,
+        allowed_tools TEXT NOT NULL,
+        issued_at TEXT NOT NULL,
+        expires_at TEXT NOT NULL,
+        status TEXT NOT NULL CHECK (status IN ('live', 'expired', 'revoked')),
+        idempotency_key TEXT NOT NULL,
+        secret_hash TEXT NOT NULL,
+        FOREIGN KEY (enrollment_id) REFERENCES ea_enrollments (enrollment_id)
+      );
+
+      CREATE UNIQUE INDEX IF NOT EXISTS ea_authorities_mint_idempotency
+        ON ea_authorities (enrollment_id, idempotency_key);
+
+      CREATE TABLE IF NOT EXISTS ea_audit_events (
+        event_id TEXT PRIMARY KEY,
+        at TEXT NOT NULL,
+        kind TEXT NOT NULL,
+        correlation_json TEXT NOT NULL,
+        detail_json TEXT
+      );
+    `);
+    }
+    hydrate() {
+        const enrollments = this.db
+            .prepare(`SELECT enrollment_id, coordinator_id, status, allowed_deck_ids, created_at, revoked_at, secret_hash
+         FROM ea_enrollments`)
+            .all();
+        const authorities = this.db
+            .prepare(`SELECT authority_id, enrollment_id, run_id, attempt_id, deck_id, audience,
+                allowed_services, allowed_tools, issued_at, expires_at, status, idempotency_key, secret_hash
+         FROM ea_authorities`)
+            .all();
+        const audit = this.db
+            .prepare(`SELECT event_id, at, kind, correlation_json, detail_json FROM ea_audit_events ORDER BY at ASC, event_id ASC`)
+            .all();
+        const state = {
+            enrollments: enrollments.map((row) => ({
+                enrollmentId: row.enrollment_id,
+                coordinatorId: row.coordinator_id,
+                status: row.status,
+                allowedDeckIds: JSON.parse(row.allowed_deck_ids),
+                createdAt: row.created_at,
+                revokedAt: row.revoked_at,
+            })),
+            enrollmentSecretHashes: enrollments.map((row) => ({
+                enrollmentId: row.enrollment_id,
+                secretHash: row.secret_hash,
+            })),
+            authorities: authorities.map((row) => ({
+                authorityId: row.authority_id,
+                enrollmentId: row.enrollment_id,
+                runId: row.run_id,
+                attemptId: row.attempt_id,
+                deckId: row.deck_id,
+                audience: row.audience,
+                allowedServices: JSON.parse(row.allowed_services),
+                allowedTools: JSON.parse(row.allowed_tools),
+                issuedAt: row.issued_at,
+                expiresAt: row.expires_at,
+                status: row.status,
+                idempotencyKey: row.idempotency_key,
+            })),
+            secretHashes: authorities.map((row) => ({
+                authorityId: row.authority_id,
+                secretHash: row.secret_hash,
+            })),
+            mintIndex: authorities.map((row) => ({
+                enrollmentId: row.enrollment_id,
+                idempotencyKey: row.idempotency_key,
+                authorityId: row.authority_id,
+            })),
+            audit: audit.map((row) => ({
+                eventId: row.event_id,
+                at: row.at,
+                kind: row.kind,
+                correlation: JSON.parse(row.correlation_json),
+                detail: row.detail_json
+                    ? JSON.parse(row.detail_json)
+                    : undefined,
+            })),
+        };
+        this.ledger.replaceState(state);
+    }
+    persist() {
+        const state = this.ledger.exportState();
+        const tx = this.db.transaction(() => {
+            this.db.exec(`
+        DELETE FROM ea_audit_events;
+        DELETE FROM ea_authorities;
+        DELETE FROM ea_enrollments;
+      `);
+            const insertEnrollment = this.db.prepare(`INSERT INTO ea_enrollments
+           (enrollment_id, coordinator_id, status, allowed_deck_ids, created_at, revoked_at, secret_hash)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`);
+            const hashByEnrollment = new Map(state.enrollmentSecretHashes.map((r) => [r.enrollmentId, r.secretHash]));
+            for (const enrollment of state.enrollments) {
+                const secretHash = hashByEnrollment.get(enrollment.enrollmentId);
+                if (!secretHash) {
+                    throw new Error(`Missing enrollment secret hash for ${enrollment.enrollmentId}`);
+                }
+                insertEnrollment.run(enrollment.enrollmentId, enrollment.coordinatorId, enrollment.status, JSON.stringify(enrollment.allowedDeckIds), enrollment.createdAt, enrollment.revokedAt, secretHash);
+            }
+            const insertAuthority = this.db.prepare(`INSERT INTO ea_authorities
+           (authority_id, enrollment_id, run_id, attempt_id, deck_id, audience,
+            allowed_services, allowed_tools, issued_at, expires_at, status, idempotency_key, secret_hash)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);
+            const hashByAuthority = new Map(state.secretHashes.map((r) => [r.authorityId, r.secretHash]));
+            for (const authority of state.authorities) {
+                const secretHash = hashByAuthority.get(authority.authorityId);
+                if (!secretHash) {
+                    throw new Error(`Missing authority secret hash for ${authority.authorityId}`);
+                }
+                insertAuthority.run(authority.authorityId, authority.enrollmentId, authority.runId, authority.attemptId, authority.deckId, authority.audience, JSON.stringify(authority.allowedServices), JSON.stringify(authority.allowedTools), authority.issuedAt, authority.expiresAt, authority.status, authority.idempotencyKey, secretHash);
+            }
+            const insertAudit = this.db.prepare(`INSERT INTO ea_audit_events (event_id, at, kind, correlation_json, detail_json)
+         VALUES (?, ?, ?, ?, ?)`);
+            for (const event of state.audit) {
+                insertAudit.run(event.eventId, event.at, event.kind, JSON.stringify(event.correlation), event.detail ? JSON.stringify(event.detail) : null);
+            }
+        });
+        tx();
+    }
+    runMutating(fn) {
+        const result = fn();
+        this.persist();
+        return result;
+    }
+    enrollCoordinator(input) {
+        return this.runMutating(() => this.ledger.enrollCoordinator(input));
+    }
+    revokeEnrollment(enrollmentId) {
+        return this.runMutating(() => this.ledger.revokeEnrollment(enrollmentId));
+    }
+    mintAuthority(input) {
+        return this.runMutating(() => this.ledger.mintAuthority(input));
+    }
+    /** Non-auditing existence/ownership lookup (see ledger.peekAuthority). */
+    peekAuthority(authorityId) {
+        return this.ledger.peekAuthority(authorityId);
+    }
+    inspectAuthority(authorityId) {
+        return this.runMutating(() => this.ledger.inspectAuthority(authorityId));
+    }
+    revokeAuthority(authorityId) {
+        return this.runMutating(() => this.ledger.revokeAuthority(authorityId));
+    }
+    invokeAuthorizedCall(input) {
+        return this.runMutating(() => this.ledger.invokeAuthorizedCall(input));
+    }
+    listAuditEvents(filter = {}) {
+        return this.ledger.listAuditEvents(filter);
+    }
+    getEnrollment(enrollmentId) {
+        return this.ledger.getEnrollment(enrollmentId);
+    }
+    listEnrollments() {
+        return this.ledger.listEnrollments();
+    }
+    verifyEnrollmentSecret(enrollmentId, secret) {
+        return this.ledger.verifyEnrollmentSecret(enrollmentId, secret);
+    }
+    verifyAuthoritySecret(authorityId, secret) {
+        return this.ledger.verifyAuthoritySecret(authorityId, secret);
+    }
+    /**
+     * Validate authority id+secret and return current authority (may transition to expired).
+     */
+    authenticateAuthority(authorityId, authoritySecret) {
+        const inspected = this.ledger.inspectAuthority(authorityId);
+        this.persist();
+        if (!inspected.ok) {
+            return inspected;
+        }
+        if (!this.ledger.verifyAuthoritySecret(authorityId, authoritySecret)) {
+            return {
+                ok: false,
+                error_code: 'AUTHORITY_SECRET_INVALID',
+                message: 'Invalid authority secret',
+                correlation: { authorityId },
+            };
+        }
+        if (inspected.data.status === 'expired') {
+            return {
+                ok: false,
+                error_code: 'AUTHORITY_EXPIRED',
+                message: 'Authority expired',
+                correlation: {
+                    authorityId,
+                    enrollmentId: inspected.data.enrollmentId,
+                    runId: inspected.data.runId,
+                    attemptId: inspected.data.attemptId,
+                    deckId: inspected.data.deckId,
+                },
+            };
+        }
+        if (inspected.data.status === 'revoked') {
+            return {
+                ok: false,
+                error_code: 'AUTHORITY_REVOKED',
+                message: 'Authority revoked',
+                reason: 'explicit_revoke',
+                correlation: {
+                    authorityId,
+                    enrollmentId: inspected.data.enrollmentId,
+                    runId: inspected.data.runId,
+                    attemptId: inspected.data.attemptId,
+                    deckId: inspected.data.deckId,
+                },
+            };
+        }
+        return inspected;
+    }
+}
+exports.ExecutionAuthorityStore = ExecutionAuthorityStore;
+//# sourceMappingURL=store.js.map

package/dist/execution-authority/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/execution-authority/store.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAIH,qCAAsE;AAgBtE,MAAa,uBAAuB;IAIf;IAHF,MAAM,CAA2B;IAElD,YACmB,EAAqB,EACtC,UAA0C,EAAE;QAD3B,OAAE,GAAF,EAAE,CAAmB;QAGtC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,iCAAwB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,+DAA+D;IAC/D,OAAO,CAAC,GAAe;QACrB,MAAM,IAAI,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsCZ,CAAC,CAAC;IACL,CAAC;IAEO,OAAO;QACb,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;aACxB,OAAO,CACN;6BACqB,CACtB;aACA,GAAG,EAQJ,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;aACxB,OAAO,CACN;;6BAEqB,CACtB;aACA,GAAG,EAcJ,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;aAClB,OAAO,CAAC,6GAA6G,CAAC;aACtH,GAAG,EAMJ,CAAC;QAEH,MAAM,KAAK,GAAgB;YACzB,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrC,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,aAAa,EAAE,GAAG,CAAC,cAAc;gBACjC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAa;gBAC5D,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,SAAS,EAAE,GAAG,CAAC,UAAU;aAC1B,CAAC,CAAC;YACH,sBAAsB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAChD,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;aAC5B,CAAC,CAAC;YACH,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrC,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,KAAK,EAAE,GAAG,CAAC,MAAM;gBACjB,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAa;gBAC7D,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAuC;gBACjF,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,CAAC,eAAe;aACpC,CAAC,CAAC;YACH,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACtC,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;aAC5B,CAAC,CAAC;YACH,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACnC,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,cAAc,EAAE,GAAG,CAAC,eAAe;gBACnC,WAAW,EAAE,GAAG,CAAC,YAAY;aAC9B,CAAC,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA8B;gBAC1E,MAAM,EAAE,GAAG,CAAC,WAAW;oBACrB,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA6B;oBAC1D,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;SACJ,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,OAAO;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;OAIZ,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACtC;;sCAE8B,CAC/B,CAAC;YACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CACxE,CAAC;YACF,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACjE,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;gBACnF,CAAC;gBACD,gBAAgB,CAAC,GAAG,CAClB,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,MAAM,EACjB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,EACzC,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,SAAS,EACpB,UAAU,CACX,CAAC;YACJ,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACrC;;;wDAGgD,CACjD,CAAC;YACF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9F,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;gBAChF,CAAC;gBACD,eAAe,CAAC,GAAG,CACjB,SAAS,CAAC,WAAW,EACrB,SAAS,CAAC,YAAY,EACtB,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,QAAQ,EAClB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,EACzC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,EACtC,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,cAAc,EACxB,UAAU,CACX,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACjC;gCACwB,CACzB,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChC,WAAW,CAAC,GAAG,CACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EACjC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CACnD,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;IACP,CAAC;IAEO,WAAW,CAAI,EAA+B;QACpD,MAAM,MAAM,GAAG,EAAE,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB,CAAC,KAGjB;QACC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAA4C,CAAC;IACjH,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAEtE,CAAC;IACL,CAAC;IAED,aAAa,CAAC,KAAyB;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAwC,CAAC;IACzG,CAAC;IAED,0EAA0E;IAC1E,aAAa,CAAC,WAAmB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAuC,CAAC;IACjH,CAAC;IAED,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAEpE,CAAC;IACL,CAAC;IAED,oBAAoB,CAClB,KAA0B;QAE1B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAInE,CAAC;IACL,CAAC;IAED,eAAe,CAAC,SAMZ,EAAE;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,aAAa,CAAC,YAAoB;QAChC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;IACvC,CAAC;IAED,sBAAsB,CAAC,YAAoB,EAAE,MAAc;QACzD,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,qBAAqB,CAAC,WAAmB,EAAE,MAAc;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,WAAmB,EACnB,eAAuB;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,0BAA0B;gBACtC,OAAO,EAAE,0BAA0B;gBACnC,WAAW,EAAE,EAAE,WAAW,EAAE;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW,EAAE;oBACX,WAAW;oBACX,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY;oBACzC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;oBAC3B,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS;oBACnC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;iBAC9B;aACF,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,MAAM,EAAE,iBAAiB;gBACzB,WAAW,EAAE;oBACX,WAAW;oBACX,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY;oBACzC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;oBAC3B,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS;oBACnC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;iBAC9B;aACF,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAzWD,0DAyWC"}

package/dist/execution-authority/types.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Trusted unattended execution contract types (NOT-85).
+ * Authoritative design: docs/superpowers/specs/2026-09-12-trusted-unattended-execution-contract-design.md
+ *
+ * Interactive workspace grants remain separate (PRD_TRUSTED_AGENT_SESSIONS).
+ */
+export type EnrollmentStatus = 'active' | 'revoked';
+export type AuthorityStatus = 'live' | 'expired' | 'revoked';
+export type AuthorityAudience = 'dealer-worker';
+export type ContractErrorCode = 'GRANT_REQUIRED' | 'AUTHORITY_EXPIRED' | 'AUTHORITY_REVOKED' | 'AUTHORITY_UNKNOWN' | 'AUTHORITY_SECRET_INVALID' | 'RESOURCE_OUT_OF_SCOPE' | 'INTERACTION_REQUIRED' | 'ENROLLMENT_REVOKED' | 'COORDINATOR_NOT_ENROLLED' | 'IDEMPOTENCY_KEY_CONFLICT' | 'INVALID_MINT_REQUEST' | 'AUDIENCE_MISMATCH';
+/** Fine-grained cause when one error_code covers multiple recovery paths. */
+export type ContractErrorReason = 'deck_not_permitted' | 'deck_not_found' | 'tool_not_in_snapshot' | 'enrollment_revoked' | 'explicit_revoke' | 'params_mismatch' | 'ttl_non_positive';
+export type AuditEventKind = 'enrollment_created' | 'enrollment_revoked' | 'authority_minted' | 'authority_inspected' | 'authority_revoked' | 'authority_expired' | 'call_allowed' | 'call_denied';
+export interface AllowedTool {
+    serviceId: string;
+    toolName: string;
+}
+export interface CoordinatorEnrollment {
+    enrollmentId: string;
+    coordinatorId: string;
+    status: EnrollmentStatus;
+    allowedDeckIds: string[];
+    createdAt: string;
+    revokedAt: string | null;
+}
+export interface ExecutionAuthority {
+    authorityId: string;
+    enrollmentId: string;
+    runId: string;
+    attemptId: string;
+    deckId: string;
+    audience: AuthorityAudience;
+    allowedServices: string[];
+    allowedTools: AllowedTool[];
+    issuedAt: string;
+    expiresAt: string;
+    status: AuthorityStatus;
+    idempotencyKey: string;
+}
+export interface AuditCorrelation {
+    enrollmentId?: string;
+    authorityId?: string;
+    runId?: string;
+    attemptId?: string;
+    deckId?: string;
+    requestId?: string;
+}
+export interface AuditEvent {
+    eventId: string;
+    at: string;
+    kind: AuditEventKind;
+    correlation: AuditCorrelation;
+    detail?: Record<string, unknown>;
+}
+export interface ContractError {
+    ok: false;
+    error_code: ContractErrorCode;
+    message: string;
+    reason?: ContractErrorReason;
+    correlation?: AuditCorrelation;
+}
+export interface ContractSuccess<T> {
+    ok: true;
+    data: T;
+}
+export type ContractResult<T> = ContractSuccess<T> | ContractError;
+export interface EnrollCoordinatorResult {
+    enrollment: CoordinatorEnrollment;
+    /** One-time secret for coordinator mint/metadata auth (`enrs_…`). */
+    enrollmentSecret: string;
+}
+export interface MintAuthorityInput {
+    enrollmentId: string;
+    runId: string;
+    attemptId: string;
+    deckId: string;
+    audience: AuthorityAudience;
+    idempotencyKey: string;
+    /**
+     * Pre-materialized Deck policy snapshot.
+     * HTTP mint authors these from deck policy; optional toolScopeHint may only narrow.
+     */
+    allowedServices: string[];
+    allowedTools: AllowedTool[];
+    /** TTL in milliseconds from mint time; must be > 0. */
+    ttlMs: number;
+}
+/** Coordinator-supplied mint body before Deck authors the tool snapshot. */
+export interface MintAuthorityRequest {
+    enrollmentId: string;
+    runId: string;
+    attemptId: string;
+    deckId: string;
+    audience: AuthorityAudience;
+    idempotencyKey: string;
+    ttlMs: number;
+    /** Optional narrowing hint; Deck intersects with current deck policy. */
+    toolScopeHint?: AllowedTool[];
+}
+export interface MintAuthorityResult {
+    authority: ExecutionAuthority;
+    /**
+     * One-time secret when `secretIssued` is true.
+     * Null on idempotent remint — Dealer must retain the launcher handle from first mint.
+     */
+    authoritySecret: string | null;
+    secretIssued: boolean;
+}
+export interface AuthorizedCallInput {
+    authorityId: string;
+    authoritySecret: string;
+    /** Must match the authority's audience (stolen-authority binding). */
+    audience: string;
+    serviceId: string;
+    toolName: string;
+    /** When true, Deck returns INTERACTION_REQUIRED instead of executing. */
+    requiresInteraction?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/execution-authority/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/execution-authority/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAC;AACpD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAC7D,MAAM,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAEhD,MAAM,MAAM,iBAAiB,GACzB,gBAAgB,GAChB,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,0BAA0B,GAC1B,uBAAuB,GACvB,sBAAsB,GACtB,oBAAoB,GACpB,0BAA0B,GAC1B,0BAA0B,GAC1B,sBAAsB,GACtB,mBAAmB,CAAC;AAExB,6EAA6E;AAC7E,MAAM,MAAM,mBAAmB,GAC3B,oBAAoB,GACpB,gBAAgB,GAChB,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,mBAAmB,GACnB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,KAAK,CAAC;IACV,UAAU,EAAE,iBAAiB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,WAAW,CAAC,EAAE,gBAAgB,CAAC;CAChC;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;AAEnE,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,qBAAqB,CAAC;IAClC,qEAAqE;IACrE,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,kBAAkB,CAAC;IAC9B;;;OAGG;IACH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B"}

package/dist/execution-authority/types.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Trusted unattended execution contract types (NOT-85).
+ * Authoritative design: docs/superpowers/specs/2026-09-12-trusted-unattended-execution-contract-design.md
+ *
+ * Interactive workspace grants remain separate (PRD_TRUSTED_AGENT_SESSIONS).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/execution-authority/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/execution-authority/types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/lib/execution-authority-http.d.ts

@@ -0,0 +1,23 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import type { ContractError } from '../execution-authority/types';
+import type { ExecutionAuthorityStore } from '../execution-authority/store';
+export declare function isExecutionAuthorityHttpAllowed(method: string, pathname: string): boolean;
+/** Contract-shaped auth/containment failure for execution-authority principals. */
+export declare class AuthorityContractAuthError extends Error {
+    readonly contract: ContractError;
+    constructor(contract: ContractError);
+}
+export declare function statusForContract(error: ContractError): number;
+export declare function sendContractError(reply: FastifyReply, error: ContractError, status?: number): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
+/**
+ * Authorize one service tool call via the ledger (audience + audit).
+ * No-op for non-authority principals.
+ */
+export declare function authorizeAuthorityServiceCall(request: FastifyRequest, store: ExecutionAuthorityStore, serviceId: string, toolName: string): void;
+/** Filter discovered tools to the minted authority snapshot. */
+export declare function filterToolsForAuthority(request: FastifyRequest, serviceId: string, tools: Array<{
+    name: string;
+}>): Array<{
+    name: string;
+}>;
+//# sourceMappingURL=execution-authority-http.d.ts.map

package/dist/lib/execution-authority-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-authority-http.d.ts","sourceRoot":"","sources":["../../src/lib/execution-authority-http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAI5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAqB5E,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGzF;AAED,mFAAmF;AACnF,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,QAAQ,EAAE,aAAa;gBAAvB,QAAQ,EAAE,aAAa;CAIpD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAa9D;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,aAAa,EACpB,MAAM,SAA2B,6RAGlC;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,uBAAuB,EAC9B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,IAAI,CA2BN;AAED,gEAAgE;AAChE,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7B,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAWzB"}

package/dist/lib/execution-authority-http.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorityContractAuthError = void 0;
+exports.isExecutionAuthorityHttpAllowed = isExecutionAuthorityHttpAllowed;
+exports.statusForContract = statusForContract;
+exports.sendContractError = sendContractError;
+exports.authorizeAuthorityServiceCall = authorizeAuthorityServiceCall;
+exports.filterToolsForAuthority = filterToolsForAuthority;
+const http_auth_1 = require("./http-auth");
+const bearer_1 = require("../execution-authority/bearer");
+/**
+ * HTTP routes an execution-authority principal may use (worker-facing reads + tool call).
+ * Live-display is intentionally excluded — unattended workers must not mutate global
+ * session display state (NOT-86 containment).
+ * Everything else is control-plane / out of containment → INTERACTION_REQUIRED.
+ */
+const ALLOWED = [
+    { methods: ['GET'], pattern: /^\/api\/scope\/deck$/ },
+    { methods: ['GET'], pattern: /^\/api\/decks\/[^/]+$/ },
+    { methods: ['GET'], pattern: /^\/api\/decks\/[^/]+\/services$/ },
+    { methods: ['GET'], pattern: /^\/api\/services\/[^/]+$/ },
+    { methods: ['GET'], pattern: /^\/api\/services\/[^/]+\/tools$/ },
+    { methods: ['POST'], pattern: /^\/api\/services\/[^/]+\/call$/ },
+    { methods: ['GET'], pattern: /^\/api\/playbooks\/[^/]+$/ },
+    { methods: ['GET'], pattern: /^\/api\/playbooks$/ },
+    { methods: ['GET'], pattern: /^\/api\/playbooks\/summaries$/ },
+    { methods: ['GET'], pattern: /^\/api\/credentials\/[^/]+$/ },
+];
+function isExecutionAuthorityHttpAllowed(method, pathname) {
+    const m = method.toUpperCase();
+    return ALLOWED.some((rule) => rule.methods.includes(m) && rule.pattern.test(pathname));
+}
+/** Contract-shaped auth/containment failure for execution-authority principals. */
+class AuthorityContractAuthError extends Error {
+    contract;
+    constructor(contract) {
+        super(contract.message);
+        this.contract = contract;
+        this.name = 'AuthorityContractAuthError';
+    }
+}
+exports.AuthorityContractAuthError = AuthorityContractAuthError;
+function statusForContract(error) {
+    switch (error.error_code) {
+        case 'COORDINATOR_NOT_ENROLLED':
+        case 'AUTHORITY_UNKNOWN':
+            return 404;
+        case 'INVALID_MINT_REQUEST':
+        case 'IDEMPOTENCY_KEY_CONFLICT':
+            return 400;
+        case 'AUTHORITY_SECRET_INVALID':
+            return 401;
+        default:
+            return 403;
+    }
+}
+function sendContractError(reply, error, status = statusForContract(error)) {
+    return reply.status(status).send(error);
+}
+/**
+ * Authorize one service tool call via the ledger (audience + audit).
+ * No-op for non-authority principals.
+ */
+function authorizeAuthorityServiceCall(request, store, serviceId, toolName) {
+    const principal = request.requestPrincipal;
+    if (principal?.kind !== 'execution-authority') {
+        return;
+    }
+    const bearer = (0, http_auth_1.parseBearerToken)(request);
+    const creds = bearer ? (0, bearer_1.parseAuthorityBearer)(bearer) : null;
+    if (!creds) {
+        throw new AuthorityContractAuthError({
+            ok: false,
+            error_code: 'AUTHORITY_SECRET_INVALID',
+            message: 'Invalid authority secret',
+            correlation: { authorityId: principal.authority.authorityId },
+        });
+    }
+    const result = store.invokeAuthorizedCall({
+        authorityId: creds.authorityId,
+        authoritySecret: creds.secret,
+        audience: principal.authority.audience,
+        serviceId,
+        toolName,
+    });
+    if (!result.ok) {
+        throw new AuthorityContractAuthError(result);
+    }
+}
+/** Filter discovered tools to the minted authority snapshot. */
+function filterToolsForAuthority(request, serviceId, tools) {
+    const principal = request.requestPrincipal;
+    if (principal?.kind !== 'execution-authority') {
+        return tools;
+    }
+    const allowed = new Set(principal.authority.allowedTools
+        .filter((t) => t.serviceId === serviceId)
+        .map((t) => t.toolName));
+    return tools.filter((t) => allowed.has(t.name));
+}
+//# sourceMappingURL=execution-authority-http.js.map

package/dist/lib/execution-authority-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-authority-http.js","sourceRoot":"","sources":["../../src/lib/execution-authority-http.ts"],"names":[],"mappings":";;;AA0BA,0EAGC;AAUD,8CAaC;AAED,8CAMC;AAMD,sEAgCC;AAGD,0DAeC;AAlHD,2CAA+C;AAC/C,0DAAqE;AAIrE;;;;;GAKG;AACH,MAAM,OAAO,GAAkD;IAC7D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACrD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE;IACtD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACzD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE;IAC1D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE;IACnD,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE;IAC9D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE;CAC7D,CAAC;AAEF,SAAgB,+BAA+B,CAAC,MAAc,EAAE,QAAgB;IAC9E,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAC/B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,mFAAmF;AACnF,MAAa,0BAA2B,SAAQ,KAAK;IACvB;IAA5B,YAA4B,QAAuB;QACjD,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QADE,aAAQ,GAAR,QAAQ,CAAe;QAEjD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AALD,gEAKC;AAED,SAAgB,iBAAiB,CAAC,KAAoB;IACpD,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,0BAA0B,CAAC;QAChC,KAAK,mBAAmB;YACtB,OAAO,GAAG,CAAC;QACb,KAAK,sBAAsB,CAAC;QAC5B,KAAK,0BAA0B;YAC7B,OAAO,GAAG,CAAC;QACb,KAAK,0BAA0B;YAC7B,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAmB,EACnB,KAAoB,EACpB,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC;IAEjC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,SAAgB,6BAA6B,CAC3C,OAAuB,EACvB,KAA8B,EAC9B,SAAiB,EACjB,QAAgB;IAEhB,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC3C,IAAI,SAAS,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAA,6BAAoB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,0BAA0B,CAAC;YACnC,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,0BAA0B;YACtC,OAAO,EAAE,0BAA0B;YACnC,WAAW,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,CAAC;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,MAAM;QAC7B,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ;QACtC,SAAS;QACT,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,SAAgB,uBAAuB,CACrC,OAAuB,EACvB,SAAiB,EACjB,KAA8B;IAE9B,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC3C,IAAI,SAAS,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,SAAS,CAAC,SAAS,CAAC,YAAY;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC1B,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC"}