@agent-deck/backend 1.7.7 → 1.8.0

package/dist/execution-authority/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/execution-authority/ledger.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,6CAAyC;AAEzC,+CAAqD;AAErD,oDAA8E;AAe9E,SAAS,KAAK,CAAC,IAAqC;IAClD,OAAO,IAAA,wBAAe,EAAC,IAAI,EAAE,IAAA,wBAAU,GAAE,CAAC,CAAC;AAC7C,CAAC;AAYD,SAAS,cAAc,CAAC,SAA6B;IACnD,OAAO;QACL,GAAG,SAAS;QACZ,eAAe,EAAE,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC;QAC/C,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAAgB,EAAE,CAAgB;IACpD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,CAAc,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,QAA4B,EAAE,KAAyB;IAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnF,OAAO,CACL,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC9B,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACtC,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAChC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QACpC,WAAW,KAAK,KAAK,CAAC,KAAK;QAC3B,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,KAAK,CAAC,eAAe,CAAC,MAAM;QAChE,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxE,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CACtD,CAAC;AACJ,CAAC;AAOD;;;GAGG;AACH,MAAa,wBAAwB;IAClB,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;IACvD,sBAAsB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,8CAA8C;IACrF,KAAK,GAAiB,EAAE,CAAC;IACzB,GAAG,CAAa;IAEjC,YAAY,UAA2C,EAAE;QACvD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,WAAW;QACT,OAAO;YACL,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtD,GAAG,CAAC;gBACJ,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;aACtC,CAAC,CAAC;YACH,sBAAsB,EAAE,CAAC,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CACpE,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAC/D;YACD,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;YAC/D,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjF,WAAW;gBACX,UAAU;aACX,CAAC,CAAC;YACH,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE;gBAClE,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;YACvD,CAAC,CAAC;YACF,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAChC,GAAG,KAAK;gBACR,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE;gBACrC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;aACvD,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,KAAkB;QAC7B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE;gBAC5C,GAAG,UAAU;gBACb,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;YAC/C,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACrC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACpF,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACd,GAAG,KAAK;gBACR,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE;gBACrC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,aAAa,CAAC,YAAoB;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAClC,OAAO,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG,CAAC;YACJ,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;SACtC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,sBAAsB,CAAC,YAAoB,EAAE,MAAc;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,IAAA,yBAAiB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,qBAAqB,CAAC,WAAmB,EAAE,MAAc;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,IAAA,yBAAiB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,iBAAiB,CAAC,KAGjB;QACC,MAAM,UAAU,GAA0B;YACxC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;YACzC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,MAAM,gBAAgB,GAAG,QAAQ,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACnG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,IAAA,uBAAe,EAAC,gBAAgB,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE;YACnC,YAAY,EAAE,UAAU,CAAC,YAAY;SACtC,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3C,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,UAAU,EAAE;oBACV,GAAG,UAAU;oBACb,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC;iBAC/C;gBACD,gBAAgB;aACjB;SACF,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,0BAA0B;gBACtC,OAAO,EAAE,oBAAoB;gBAC7B,WAAW,EAAE,EAAE,YAAY,EAAE;aAC9B,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC;QAC9C,CAAC;QACD,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC;QAC9B,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAEvD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,YAAY,KAAK,YAAY;gBAAE,SAAS;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM;gBAAE,SAAS;YACxD,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE;gBAClC,YAAY;gBACZ,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED,aAAa,CAAC,KAAyB;QACrC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,kBAAkB;gBAC1B,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;aAClD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,0BAA0B;gBACtC,OAAO,EAAE,oBAAoB;gBAC7B,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,oBAAoB;gBAChC,OAAO,EAAE,uBAAuB;gBAChC,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,uBAAuB;gBACnC,OAAO,EAAE,wCAAwC;gBACjD,MAAM,EAAE,oBAAoB;gBAC5B,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;aACxE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAE,CAAC;YAC1D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;gBACtC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,UAAU,EAAE,0BAA0B;oBACtC,OAAO,EAAE,uDAAuD;oBAChE,MAAM,EAAE,iBAAiB;oBACzB,WAAW,EAAE;wBACX,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;wBACjC,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB;iBACF,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/B,uFAAuF;gBACvF,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE;wBACJ,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC;wBACnC,eAAe,EAAE,IAAI;wBACrB,YAAY,EAAE,KAAK;qBACpB;iBACF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB;gBACrF,OAAO,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE;gBAC/C,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;gBACrE,WAAW,EAAE;oBACX,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACxB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAuB;YACpC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC;YAC3B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC;YAC3C,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACvD,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;YAChC,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC;QACF,MAAM,eAAe,GAAG,QAAQ,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QAClG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,IAAA,uBAAe,EAAC,eAAe,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE;YACjC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;gBACpC,eAAe;gBACf,YAAY,EAAE,IAAI;aACnB;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,WAAmB;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,OAAO,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW,EAAE,EAAE,WAAW,EAAE;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE;YACpC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,eAAe,CAAC,WAAmB;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW,EAAE,EAAE,WAAW,EAAE;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE;gBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAClB,KAA0B;QAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,WAAW,GAAqB;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,WAAW,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;QAClD,WAAW,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QACpC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QAC5C,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAEtC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,CAAC,YAAY,IAAI,CAAC,IAAA,yBAAiB,EAAC,KAAK,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,CAAC;YAC7E,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,0BAA0B;gBACtC,OAAO,EAAE,0BAA0B;gBACnC,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE;gBACzC,MAAM,EAAE,mBAAmB;gBAC3B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,MAAM,EAAE,KAAK,CAAC,QAAQ;aACvB,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mDAAmD;gBAC5D,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAClE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW;aACZ,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAClE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,MAAM,EAAE,iBAAiB;gBACzB,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC/E,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,yDAAyD;gBAClE,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE;gBACzC,MAAM,EAAE,sBAAsB;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,uBAAuB;gBACnC,OAAO,EAAE,gCAAgC;gBACzC,MAAM,EAAE,sBAAsB;gBAC9B,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,EAAE;YAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,IAAI;aACb;SACF,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,SAMZ,EAAE;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;YAC5B,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC3D,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvE,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAAE,OAAO,KAAK,CAAC;YAC7E,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;gBAAE,OAAO,KAAK,CAAC;YAChF,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,SAA6B,EAAE,SAAiB,EAAE,QAAgB;QACpF,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,CAChC,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CACzE,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,WAAmB;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3F,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE;gBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,SAAS,CACf,IAAoB,EACpB,WAA6B,EAC7B,MAAgC;QAEhC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;YACrB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI;YACJ,WAAW,EAAE,EAAE,GAAG,WAAW,EAAE;YAC/B,MAAM;SACP,CAAC,CAAC;IACL,CAAC;CACF;AAlfD,4DAkfC"}

package/dist/execution-authority/store.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Durable SQLite-backed execution-authority store (NOT-86).
+ * Logic lives in ExecutionAuthorityLedger; this module hydrates/persists snapshots.
+ */
+import type Database from 'better-sqlite3';
+import type { AuthorizedCallInput, ContractResult, CoordinatorEnrollment, EnrollCoordinatorResult, ExecutionAuthority, MintAuthorityInput, MintAuthorityResult, AuditEvent } from './types';
+export type ExecutionAuthorityStoreOptions = {
+    now?: () => Date;
+};
+export declare class ExecutionAuthorityStore {
+    private readonly db;
+    private readonly ledger;
+    constructor(db: Database.Database, options?: ExecutionAuthorityStoreOptions);
+    /** Test helper: replace clock without losing durable state. */
+    withNow(now: () => Date): ExecutionAuthorityStore;
+    private ensureTables;
+    private hydrate;
+    private persist;
+    private runMutating;
+    enrollCoordinator(input: {
+        coordinatorId: string;
+        allowedDeckIds: string[];
+    }): ContractResult<EnrollCoordinatorResult>;
+    revokeEnrollment(enrollmentId: string): ContractResult<{
+        enrollmentId: string;
+    }>;
+    mintAuthority(input: MintAuthorityInput): ContractResult<MintAuthorityResult>;
+    /** Non-auditing existence/ownership lookup (see ledger.peekAuthority). */
+    peekAuthority(authorityId: string): ExecutionAuthority | undefined;
+    inspectAuthority(authorityId: string): ContractResult<ExecutionAuthority>;
+    revokeAuthority(authorityId: string): ContractResult<{
+        authorityId: string;
+    }>;
+    invokeAuthorizedCall(input: AuthorizedCallInput): ContractResult<{
+        serviceId: string;
+        toolName: string;
+        result: string;
+    }>;
+    listAuditEvents(filter?: {
+        runId?: string;
+        attemptId?: string;
+        authorityId?: string;
+        enrollmentId?: string;
+        requestId?: string;
+    }): AuditEvent[];
+    getEnrollment(enrollmentId: string): CoordinatorEnrollment | undefined;
+    listEnrollments(): CoordinatorEnrollment[];
+    verifyEnrollmentSecret(enrollmentId: string, secret: string): boolean;
+    verifyAuthoritySecret(authorityId: string, secret: string): boolean;
+    /**
+     * Validate authority id+secret and return current authority (may transition to expired).
+     */
+    authenticateAuthority(authorityId: string, authoritySecret: string): ContractResult<ExecutionAuthority>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/execution-authority/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/execution-authority/store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACX,MAAM,SAAS,CAAC;AAEjB,MAAM,MAAM,8BAA8B,GAAG;IAC3C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,qBAAa,uBAAuB;IAIhC,OAAO,CAAC,QAAQ,CAAC,EAAE;IAHrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;gBAG/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACtC,OAAO,GAAE,8BAAmC;IAO9C,+DAA+D;IAC/D,OAAO,CAAC,GAAG,EAAE,MAAM,IAAI,GAAG,uBAAuB;IAKjD,OAAO,CAAC,YAAY;IA0CpB,OAAO,CAAC,OAAO;IAiGf,OAAO,CAAC,OAAO;IA+Ef,OAAO,CAAC,WAAW;IAMnB,iBAAiB,CAAC,KAAK,EAAE;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,GAAG,cAAc,CAAC,uBAAuB,CAAC;IAI3C,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAMhF,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,cAAc,CAAC,mBAAmB,CAAC;IAI7E,0EAA0E;IAC1E,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIlE,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAAC,kBAAkB,CAAC;IAIzE,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAM7E,oBAAoB,CAClB,KAAK,EAAE,mBAAmB,GACzB,cAAc,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ1E,eAAe,CAAC,MAAM,GAAE;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,UAAU,EAAE;IAIrB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS;IAItE,eAAe,IAAI,qBAAqB,EAAE;IAI1C,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAIrE,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAInE;;OAEG;IACH,qBAAqB,CACnB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,GACtB,cAAc,CAAC,kBAAkB,CAAC;CA6CtC"}

package/dist/execution-authority/store.js

@@ -0,0 +1,256 @@
+"use strict";
+/**
+ * Durable SQLite-backed execution-authority store (NOT-86).
+ * Logic lives in ExecutionAuthorityLedger; this module hydrates/persists snapshots.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutionAuthorityStore = void 0;
+const ledger_1 = require("./ledger");
+class ExecutionAuthorityStore {
+    db;
+    ledger;
+    constructor(db, options = {}) {
+        this.db = db;
+        this.ensureTables();
+        this.ledger = new ledger_1.ExecutionAuthorityLedger({ now: options.now });
+        this.hydrate();
+    }
+    /** Test helper: replace clock without losing durable state. */
+    withNow(now) {
+        const next = new ExecutionAuthorityStore(this.db, { now });
+        return next;
+    }
+    ensureTables() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS ea_enrollments (
+        enrollment_id TEXT PRIMARY KEY,
+        coordinator_id TEXT NOT NULL,
+        status TEXT NOT NULL CHECK (status IN ('active', 'revoked')),
+        allowed_deck_ids TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        revoked_at TEXT,
+        secret_hash TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS ea_authorities (
+        authority_id TEXT PRIMARY KEY,
+        enrollment_id TEXT NOT NULL,
+        run_id TEXT NOT NULL,
+        attempt_id TEXT NOT NULL,
+        deck_id TEXT NOT NULL,
+        audience TEXT NOT NULL,
+        allowed_services TEXT NOT NULL,
+        allowed_tools TEXT NOT NULL,
+        issued_at TEXT NOT NULL,
+        expires_at TEXT NOT NULL,
+        status TEXT NOT NULL CHECK (status IN ('live', 'expired', 'revoked')),
+        idempotency_key TEXT NOT NULL,
+        secret_hash TEXT NOT NULL,
+        FOREIGN KEY (enrollment_id) REFERENCES ea_enrollments (enrollment_id)
+      );
+
+      CREATE UNIQUE INDEX IF NOT EXISTS ea_authorities_mint_idempotency
+        ON ea_authorities (enrollment_id, idempotency_key);
+
+      CREATE TABLE IF NOT EXISTS ea_audit_events (
+        event_id TEXT PRIMARY KEY,
+        at TEXT NOT NULL,
+        kind TEXT NOT NULL,
+        correlation_json TEXT NOT NULL,
+        detail_json TEXT
+      );
+    `);
+    }
+    hydrate() {
+        const enrollments = this.db
+            .prepare(`SELECT enrollment_id, coordinator_id, status, allowed_deck_ids, created_at, revoked_at, secret_hash
+         FROM ea_enrollments`)
+            .all();
+        const authorities = this.db
+            .prepare(`SELECT authority_id, enrollment_id, run_id, attempt_id, deck_id, audience,
+                allowed_services, allowed_tools, issued_at, expires_at, status, idempotency_key, secret_hash
+         FROM ea_authorities`)
+            .all();
+        const audit = this.db
+            .prepare(`SELECT event_id, at, kind, correlation_json, detail_json FROM ea_audit_events ORDER BY at ASC, event_id ASC`)
+            .all();
+        const state = {
+            enrollments: enrollments.map((row) => ({
+                enrollmentId: row.enrollment_id,
+                coordinatorId: row.coordinator_id,
+                status: row.status,
+                allowedDeckIds: JSON.parse(row.allowed_deck_ids),
+                createdAt: row.created_at,
+                revokedAt: row.revoked_at,
+            })),
+            enrollmentSecretHashes: enrollments.map((row) => ({
+                enrollmentId: row.enrollment_id,
+                secretHash: row.secret_hash,
+            })),
+            authorities: authorities.map((row) => ({
+                authorityId: row.authority_id,
+                enrollmentId: row.enrollment_id,
+                runId: row.run_id,
+                attemptId: row.attempt_id,
+                deckId: row.deck_id,
+                audience: row.audience,
+                allowedServices: JSON.parse(row.allowed_services),
+                allowedTools: JSON.parse(row.allowed_tools),
+                issuedAt: row.issued_at,
+                expiresAt: row.expires_at,
+                status: row.status,
+                idempotencyKey: row.idempotency_key,
+            })),
+            secretHashes: authorities.map((row) => ({
+                authorityId: row.authority_id,
+                secretHash: row.secret_hash,
+            })),
+            mintIndex: authorities.map((row) => ({
+                enrollmentId: row.enrollment_id,
+                idempotencyKey: row.idempotency_key,
+                authorityId: row.authority_id,
+            })),
+            audit: audit.map((row) => ({
+                eventId: row.event_id,
+                at: row.at,
+                kind: row.kind,
+                correlation: JSON.parse(row.correlation_json),
+                detail: row.detail_json
+                    ? JSON.parse(row.detail_json)
+                    : undefined,
+            })),
+        };
+        this.ledger.replaceState(state);
+    }
+    persist() {
+        const state = this.ledger.exportState();
+        const tx = this.db.transaction(() => {
+            this.db.exec(`
+        DELETE FROM ea_audit_events;
+        DELETE FROM ea_authorities;
+        DELETE FROM ea_enrollments;
+      `);
+            const insertEnrollment = this.db.prepare(`INSERT INTO ea_enrollments
+           (enrollment_id, coordinator_id, status, allowed_deck_ids, created_at, revoked_at, secret_hash)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`);
+            const hashByEnrollment = new Map(state.enrollmentSecretHashes.map((r) => [r.enrollmentId, r.secretHash]));
+            for (const enrollment of state.enrollments) {
+                const secretHash = hashByEnrollment.get(enrollment.enrollmentId);
+                if (!secretHash) {
+                    throw new Error(`Missing enrollment secret hash for ${enrollment.enrollmentId}`);
+                }
+                insertEnrollment.run(enrollment.enrollmentId, enrollment.coordinatorId, enrollment.status, JSON.stringify(enrollment.allowedDeckIds), enrollment.createdAt, enrollment.revokedAt, secretHash);
+            }
+            const insertAuthority = this.db.prepare(`INSERT INTO ea_authorities
+           (authority_id, enrollment_id, run_id, attempt_id, deck_id, audience,
+            allowed_services, allowed_tools, issued_at, expires_at, status, idempotency_key, secret_hash)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);
+            const hashByAuthority = new Map(state.secretHashes.map((r) => [r.authorityId, r.secretHash]));
+            for (const authority of state.authorities) {
+                const secretHash = hashByAuthority.get(authority.authorityId);
+                if (!secretHash) {
+                    throw new Error(`Missing authority secret hash for ${authority.authorityId}`);
+                }
+                insertAuthority.run(authority.authorityId, authority.enrollmentId, authority.runId, authority.attemptId, authority.deckId, authority.audience, JSON.stringify(authority.allowedServices), JSON.stringify(authority.allowedTools), authority.issuedAt, authority.expiresAt, authority.status, authority.idempotencyKey, secretHash);
+            }
+            const insertAudit = this.db.prepare(`INSERT INTO ea_audit_events (event_id, at, kind, correlation_json, detail_json)
+         VALUES (?, ?, ?, ?, ?)`);
+            for (const event of state.audit) {
+                insertAudit.run(event.eventId, event.at, event.kind, JSON.stringify(event.correlation), event.detail ? JSON.stringify(event.detail) : null);
+            }
+        });
+        tx();
+    }
+    runMutating(fn) {
+        const result = fn();
+        this.persist();
+        return result;
+    }
+    enrollCoordinator(input) {
+        return this.runMutating(() => this.ledger.enrollCoordinator(input));
+    }
+    revokeEnrollment(enrollmentId) {
+        return this.runMutating(() => this.ledger.revokeEnrollment(enrollmentId));
+    }
+    mintAuthority(input) {
+        return this.runMutating(() => this.ledger.mintAuthority(input));
+    }
+    /** Non-auditing existence/ownership lookup (see ledger.peekAuthority). */
+    peekAuthority(authorityId) {
+        return this.ledger.peekAuthority(authorityId);
+    }
+    inspectAuthority(authorityId) {
+        return this.runMutating(() => this.ledger.inspectAuthority(authorityId));
+    }
+    revokeAuthority(authorityId) {
+        return this.runMutating(() => this.ledger.revokeAuthority(authorityId));
+    }
+    invokeAuthorizedCall(input) {
+        return this.runMutating(() => this.ledger.invokeAuthorizedCall(input));
+    }
+    listAuditEvents(filter = {}) {
+        return this.ledger.listAuditEvents(filter);
+    }
+    getEnrollment(enrollmentId) {
+        return this.ledger.getEnrollment(enrollmentId);
+    }
+    listEnrollments() {
+        return this.ledger.listEnrollments();
+    }
+    verifyEnrollmentSecret(enrollmentId, secret) {
+        return this.ledger.verifyEnrollmentSecret(enrollmentId, secret);
+    }
+    verifyAuthoritySecret(authorityId, secret) {
+        return this.ledger.verifyAuthoritySecret(authorityId, secret);
+    }
+    /**
+     * Validate authority id+secret and return current authority (may transition to expired).
+     */
+    authenticateAuthority(authorityId, authoritySecret) {
+        const inspected = this.ledger.inspectAuthority(authorityId);
+        this.persist();
+        if (!inspected.ok) {
+            return inspected;
+        }
+        if (!this.ledger.verifyAuthoritySecret(authorityId, authoritySecret)) {
+            return {
+                ok: false,
+                error_code: 'AUTHORITY_SECRET_INVALID',
+                message: 'Invalid authority secret',
+                correlation: { authorityId },
+            };
+        }
+        if (inspected.data.status === 'expired') {
+            return {
+                ok: false,
+                error_code: 'AUTHORITY_EXPIRED',
+                message: 'Authority expired',
+                correlation: {
+                    authorityId,
+                    enrollmentId: inspected.data.enrollmentId,
+                    runId: inspected.data.runId,
+                    attemptId: inspected.data.attemptId,
+                    deckId: inspected.data.deckId,
+                },
+            };
+        }
+        if (inspected.data.status === 'revoked') {
+            return {
+                ok: false,
+                error_code: 'AUTHORITY_REVOKED',
+                message: 'Authority revoked',
+                reason: 'explicit_revoke',
+                correlation: {
+                    authorityId,
+                    enrollmentId: inspected.data.enrollmentId,
+                    runId: inspected.data.runId,
+                    attemptId: inspected.data.attemptId,
+                    deckId: inspected.data.deckId,
+                },
+            };
+        }
+        return inspected;
+    }
+}
+exports.ExecutionAuthorityStore = ExecutionAuthorityStore;
+//# sourceMappingURL=store.js.map

package/dist/execution-authority/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/execution-authority/store.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAIH,qCAAsE;AAgBtE,MAAa,uBAAuB;IAIf;IAHF,MAAM,CAA2B;IAElD,YACmB,EAAqB,EACtC,UAA0C,EAAE;QAD3B,OAAE,GAAF,EAAE,CAAmB;QAGtC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,iCAAwB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,+DAA+D;IAC/D,OAAO,CAAC,GAAe;QACrB,MAAM,IAAI,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsCZ,CAAC,CAAC;IACL,CAAC;IAEO,OAAO;QACb,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;aACxB,OAAO,CACN;6BACqB,CACtB;aACA,GAAG,EAQJ,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;aACxB,OAAO,CACN;;6BAEqB,CACtB;aACA,GAAG,EAcJ,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;aAClB,OAAO,CAAC,6GAA6G,CAAC;aACtH,GAAG,EAMJ,CAAC;QAEH,MAAM,KAAK,GAAgB;YACzB,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrC,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,aAAa,EAAE,GAAG,CAAC,cAAc;gBACjC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAa;gBAC5D,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,SAAS,EAAE,GAAG,CAAC,UAAU;aAC1B,CAAC,CAAC;YACH,sBAAsB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAChD,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;aAC5B,CAAC,CAAC;YACH,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrC,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,KAAK,EAAE,GAAG,CAAC,MAAM;gBACjB,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAa;gBAC7D,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAuC;gBACjF,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,CAAC,eAAe;aACpC,CAAC,CAAC;YACH,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACtC,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;aAC5B,CAAC,CAAC;YACH,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACnC,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,cAAc,EAAE,GAAG,CAAC,eAAe;gBACnC,WAAW,EAAE,GAAG,CAAC,YAAY;aAC9B,CAAC,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA8B;gBAC1E,MAAM,EAAE,GAAG,CAAC,WAAW;oBACrB,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA6B;oBAC1D,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;SACJ,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,OAAO;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;OAIZ,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACtC;;sCAE8B,CAC/B,CAAC;YACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CACxE,CAAC;YACF,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACjE,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;gBACnF,CAAC;gBACD,gBAAgB,CAAC,GAAG,CAClB,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,MAAM,EACjB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,EACzC,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,SAAS,EACpB,UAAU,CACX,CAAC;YACJ,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACrC;;;wDAGgD,CACjD,CAAC;YACF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9F,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;gBAChF,CAAC;gBACD,eAAe,CAAC,GAAG,CACjB,SAAS,CAAC,WAAW,EACrB,SAAS,CAAC,YAAY,EACtB,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,QAAQ,EAClB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,EACzC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,EACtC,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,cAAc,EACxB,UAAU,CACX,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACjC;gCACwB,CACzB,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChC,WAAW,CAAC,GAAG,CACb,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EACjC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CACnD,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;IACP,CAAC;IAEO,WAAW,CAAI,EAA+B;QACpD,MAAM,MAAM,GAAG,EAAE,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB,CAAC,KAGjB;QACC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAA4C,CAAC;IACjH,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAEtE,CAAC;IACL,CAAC;IAED,aAAa,CAAC,KAAyB;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAwC,CAAC;IACzG,CAAC;IAED,0EAA0E;IAC1E,aAAa,CAAC,WAAmB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAuC,CAAC;IACjH,CAAC;IAED,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAEpE,CAAC;IACL,CAAC;IAED,oBAAoB,CAClB,KAA0B;QAE1B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAInE,CAAC;IACL,CAAC;IAED,eAAe,CAAC,SAMZ,EAAE;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,aAAa,CAAC,YAAoB;QAChC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;IACvC,CAAC;IAED,sBAAsB,CAAC,YAAoB,EAAE,MAAc;QACzD,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,qBAAqB,CAAC,WAAmB,EAAE,MAAc;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,WAAmB,EACnB,eAAuB;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,0BAA0B;gBACtC,OAAO,EAAE,0BAA0B;gBACnC,WAAW,EAAE,EAAE,WAAW,EAAE;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,WAAW,EAAE;oBACX,WAAW;oBACX,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY;oBACzC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;oBAC3B,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS;oBACnC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;iBAC9B;aACF,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE,mBAAmB;gBAC5B,MAAM,EAAE,iBAAiB;gBACzB,WAAW,EAAE;oBACX,WAAW;oBACX,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY;oBACzC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;oBAC3B,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS;oBACnC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;iBAC9B;aACF,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAzWD,0DAyWC"}

package/dist/execution-authority/types.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Trusted unattended execution contract types (NOT-85).
+ * Authoritative design: docs/superpowers/specs/2026-09-12-trusted-unattended-execution-contract-design.md
+ *
+ * Interactive workspace grants remain separate (PRD_TRUSTED_AGENT_SESSIONS).
+ */
+export type EnrollmentStatus = 'active' | 'revoked';
+export type AuthorityStatus = 'live' | 'expired' | 'revoked';
+export type AuthorityAudience = 'dealer-worker';
+export type ContractErrorCode = 'GRANT_REQUIRED' | 'AUTHORITY_EXPIRED' | 'AUTHORITY_REVOKED' | 'AUTHORITY_UNKNOWN' | 'AUTHORITY_SECRET_INVALID' | 'RESOURCE_OUT_OF_SCOPE' | 'INTERACTION_REQUIRED' | 'ENROLLMENT_REVOKED' | 'COORDINATOR_NOT_ENROLLED' | 'IDEMPOTENCY_KEY_CONFLICT' | 'INVALID_MINT_REQUEST' | 'AUDIENCE_MISMATCH';
+/** Fine-grained cause when one error_code covers multiple recovery paths. */
+export type ContractErrorReason = 'deck_not_permitted' | 'tool_not_in_snapshot' | 'enrollment_revoked' | 'explicit_revoke' | 'params_mismatch' | 'ttl_non_positive';
+export type AuditEventKind = 'enrollment_created' | 'enrollment_revoked' | 'authority_minted' | 'authority_inspected' | 'authority_revoked' | 'authority_expired' | 'call_allowed' | 'call_denied';
+export interface AllowedTool {
+    serviceId: string;
+    toolName: string;
+}
+export interface CoordinatorEnrollment {
+    enrollmentId: string;
+    coordinatorId: string;
+    status: EnrollmentStatus;
+    allowedDeckIds: string[];
+    createdAt: string;
+    revokedAt: string | null;
+}
+export interface ExecutionAuthority {
+    authorityId: string;
+    enrollmentId: string;
+    runId: string;
+    attemptId: string;
+    deckId: string;
+    audience: AuthorityAudience;
+    allowedServices: string[];
+    allowedTools: AllowedTool[];
+    issuedAt: string;
+    expiresAt: string;
+    status: AuthorityStatus;
+    idempotencyKey: string;
+}
+export interface AuditCorrelation {
+    enrollmentId?: string;
+    authorityId?: string;
+    runId?: string;
+    attemptId?: string;
+    deckId?: string;
+    requestId?: string;
+}
+export interface AuditEvent {
+    eventId: string;
+    at: string;
+    kind: AuditEventKind;
+    correlation: AuditCorrelation;
+    detail?: Record<string, unknown>;
+}
+export interface ContractError {
+    ok: false;
+    error_code: ContractErrorCode;
+    message: string;
+    reason?: ContractErrorReason;
+    correlation?: AuditCorrelation;
+}
+export interface ContractSuccess<T> {
+    ok: true;
+    data: T;
+}
+export type ContractResult<T> = ContractSuccess<T> | ContractError;
+export interface EnrollCoordinatorResult {
+    enrollment: CoordinatorEnrollment;
+    /** One-time secret for coordinator mint/metadata auth (`enrs_…`). */
+    enrollmentSecret: string;
+}
+export interface MintAuthorityInput {
+    enrollmentId: string;
+    runId: string;
+    attemptId: string;
+    deckId: string;
+    audience: AuthorityAudience;
+    idempotencyKey: string;
+    /**
+     * Pre-materialized Deck policy snapshot.
+     * HTTP mint authors these from deck policy; optional toolScopeHint may only narrow.
+     */
+    allowedServices: string[];
+    allowedTools: AllowedTool[];
+    /** TTL in milliseconds from mint time; must be > 0. */
+    ttlMs: number;
+}
+/** Coordinator-supplied mint body before Deck authors the tool snapshot. */
+export interface MintAuthorityRequest {
+    enrollmentId: string;
+    runId: string;
+    attemptId: string;
+    deckId: string;
+    audience: AuthorityAudience;
+    idempotencyKey: string;
+    ttlMs: number;
+    /** Optional narrowing hint; Deck intersects with current deck policy. */
+    toolScopeHint?: AllowedTool[];
+}
+export interface MintAuthorityResult {
+    authority: ExecutionAuthority;
+    /**
+     * One-time secret when `secretIssued` is true.
+     * Null on idempotent remint — Dealer must retain the launcher handle from first mint.
+     */
+    authoritySecret: string | null;
+    secretIssued: boolean;
+}
+export interface AuthorizedCallInput {
+    authorityId: string;
+    authoritySecret: string;
+    /** Must match the authority's audience (stolen-authority binding). */
+    audience: string;
+    serviceId: string;
+    toolName: string;
+    /** When true, Deck returns INTERACTION_REQUIRED instead of executing. */
+    requiresInteraction?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/execution-authority/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/execution-authority/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAC;AACpD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAC7D,MAAM,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAEhD,MAAM,MAAM,iBAAiB,GACzB,gBAAgB,GAChB,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,0BAA0B,GAC1B,uBAAuB,GACvB,sBAAsB,GACtB,oBAAoB,GACpB,0BAA0B,GAC1B,0BAA0B,GAC1B,sBAAsB,GACtB,mBAAmB,CAAC;AAExB,6EAA6E;AAC7E,MAAM,MAAM,mBAAmB,GAC3B,oBAAoB,GACpB,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,mBAAmB,GACnB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,KAAK,CAAC;IACV,UAAU,EAAE,iBAAiB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,WAAW,CAAC,EAAE,gBAAgB,CAAC;CAChC;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;AAEnE,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,qBAAqB,CAAC;IAClC,qEAAqE;IACrE,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,kBAAkB,CAAC;IAC9B;;;OAGG;IACH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B"}

package/dist/execution-authority/types.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Trusted unattended execution contract types (NOT-85).
+ * Authoritative design: docs/superpowers/specs/2026-09-12-trusted-unattended-execution-contract-design.md
+ *
+ * Interactive workspace grants remain separate (PRD_TRUSTED_AGENT_SESSIONS).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/execution-authority/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/execution-authority/types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/lib/agent-deck-context.d.ts

@@ -4,7 +4,7 @@ export declare class AgentDeckContextError extends Error {
     readonly errorCode?: string | undefined;
     constructor(message: string, errorCode?: string | undefined);
 }
-/** Resolve bound deck from authenticated runtime session (PRD C3). */
+/** Resolve bound deck from authenticated runtime session or execution authority (PRD C3 / NOT-86). */
 export declare function resolveAgentDeckId(request: FastifyRequest, db: DatabaseManager): Promise<string>;
 export declare function resolveAgentMode(request: FastifyRequest): Promise<'normal' | 'agent-admin'>;
 //# sourceMappingURL=agent-deck-context.d.ts.map

package/dist/lib/agent-deck-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-deck-context.d.ts","sourceRoot":"","sources":["../../src/lib/agent-deck-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,qBAAa,qBAAsB,SAAQ,KAAK;aAG5B,SAAS,CAAC,EAAE,MAAM;gBADlC,OAAO,EAAE,MAAM,EACC,SAAS,CAAC,EAAE,MAAM,YAAA;CAKrC;AAOD,sEAAsE;AACtE,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,MAAM,CAAC,CA4CjB;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,QAAQ,GAAG,aAAa,CAAC,CAOnC"}
+{"version":3,"file":"agent-deck-context.d.ts","sourceRoot":"","sources":["../../src/lib/agent-deck-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,qBAAa,qBAAsB,SAAQ,KAAK;aAG5B,SAAS,CAAC,EAAE,MAAM;gBADlC,OAAO,EAAE,MAAM,EACC,SAAS,CAAC,EAAE,MAAM,YAAA;CAKrC;AAOD,sGAAsG;AACtG,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,MAAM,CAAC,CAyDjB;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,QAAQ,GAAG,aAAa,CAAC,CAWnC"}

package/dist/lib/agent-deck-context.js

@@ -18,8 +18,17 @@ function headerValue(request, name) {
     const value = request.headers[name];
     return typeof value === 'string' && value.trim() ? value.trim() : undefined;
 }
-/** Resolve bound deck from authenticated runtime session (PRD C3). */
+/** Resolve bound deck from authenticated runtime session or execution authority (PRD C3 / NOT-86). */
 async function resolveAgentDeckId(request, db) {
+    const principal = request.requestPrincipal;
+    if (principal?.kind === 'execution-authority') {
+        const deckId = principal.authority.deckId;
+        const deck = await db.getDeck(deckId);
+        if (!deck) {
+            throw new AgentDeckContextError((0, shared_1.trustedSessionError)('RESOURCE_OUT_OF_SCOPE', 'Authority deck not found').error, 'RESOURCE_OUT_OF_SCOPE');
+        }
+        return deckId;
+    }
     const sessionId = headerValue(request, shared_1.AGENT_DECK_SESSION_HEADER);
     if (!sessionId) {
         throw new AgentDeckContextError((0, shared_1.trustedSessionError)('GRANT_REQUIRED', 'No valid workspace grant').error, 'GRANT_REQUIRED');
@@ -46,6 +55,10 @@ async function resolveAgentDeckId(request, db) {
     return session.deckId;
 }
 async function resolveAgentMode(request) {
+    const principal = request.requestPrincipal;
+    if (principal?.kind === 'execution-authority') {
+        return 'normal';
+    }
     const sessionId = headerValue(request, shared_1.AGENT_DECK_SESSION_HEADER);
     if (!sessionId) {
         return 'normal';

package/dist/lib/agent-deck-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-deck-context.js","sourceRoot":"","sources":["../../src/lib/agent-deck-context.ts"],"names":[],"mappings":";;;AAqBA,gDA+CC;AAED,4CASC;AA9ED,+CAAoF;AAEpF,kDAA2D;AAE3D,MAAa,qBAAsB,SAAQ,KAAK;IAG5B;IAFlB,YACE,OAAe,EACC,SAAkB;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,cAAS,GAAT,SAAS,CAAS;QAGlC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AARD,sDAQC;AAED,SAAS,WAAW,CAAC,OAAuB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,sEAAsE;AAC/D,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,EAAmB;IAEnB,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,kCAAyB,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC,KAAK,EACvE,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;IACjD,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC,KAAK,EACjF,iBAAiB,CAClB,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAC,KAAK,EACvG,iBAAiB,CAClB,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC,KAAK,EACjF,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC,KAAK,EACjF,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,OAAuB;IAEvB,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,kCAAyB,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC/E,OAAO,GAAG,EAAE,IAAI,IAAI,QAAQ,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"agent-deck-context.js","sourceRoot":"","sources":["../../src/lib/agent-deck-context.ts"],"names":[],"mappings":";;;AAqBA,gDA4DC;AAED,4CAaC;AA/FD,+CAAoF;AAEpF,kDAA2D;AAE3D,MAAa,qBAAsB,SAAQ,KAAK;IAG5B;IAFlB,YACE,OAAe,EACC,SAAkB;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,cAAS,GAAT,SAAS,CAAS;QAGlC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AARD,sDAQC;AAED,SAAS,WAAW,CAAC,OAAuB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,sGAAsG;AAC/F,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,EAAmB;IAEnB,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC3C,IAAI,SAAS,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,uBAAuB,EAAE,0BAA0B,CAAC,CAAC,KAAK,EAC9E,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,kCAAyB,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC,KAAK,EACvE,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;IACjD,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC,KAAK,EACjF,iBAAiB,CAClB,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAC,KAAK,EACvG,iBAAiB,CAClB,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC,KAAK,EACjF,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,qBAAqB,CAC7B,IAAA,4BAAmB,EAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC,KAAK,EACjF,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,uBAAgB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,OAAuB;IAEvB,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC3C,IAAI,SAAS,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,kCAAyB,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC/E,OAAO,GAAG,EAAE,IAAI,IAAI,QAAQ,CAAC;AAC/B,CAAC"}

package/dist/lib/backend-api-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend-api-error.d.ts","sourceRoot":"","sources":["../../src/lib/backend-api-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,MAAM,EAAE,MAAM;aACd,SAAS,CAAC,EAAE,uBAAuB;gBAFnD,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,uBAAuB,YAAA;CAKtD;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAmBnF"}
+{"version":3,"file":"backend-api-error.d.ts","sourceRoot":"","sources":["../../src/lib/backend-api-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,MAAM,EAAE,MAAM;aACd,SAAS,CAAC,EAAE,uBAAuB;gBAFnD,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,uBAAuB,YAAA;CAKtD;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CA0BnF"}

package/dist/lib/backend-api-error.js

@@ -21,7 +21,11 @@ function parseBackendErrorBody(text, status) {
         if (body.error) {
             message = String(body.error);
         }
+        else if (body.message) {
+            message = String(body.message);
+        }
         if (body.error_code) {
+            // May be a trusted-session code or an execution-authority contract code.
             errorCode = body.error_code;
         }
     }

package/dist/lib/backend-api-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend-api-error.js","sourceRoot":"","sources":["../../src/lib/backend-api-error.ts"],"names":[],"mappings":";;;AAaA,sDAmBC;AA9BD,MAAa,eAAgB,SAAQ,KAAK;IAGtB;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,SAAmC;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,cAAS,GAAT,SAAS,CAA0B;QAGnD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AATD,0CASC;AAED,SAAgB,qBAAqB,CAAC,IAAY,EAAE,MAAc;IAChE,IAAI,OAAO,GAAG,sBAAsB,MAAM,EAAE,CAAC;IAC7C,IAAI,SAA8C,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6D,CAAC;QAC1F,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAChB,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACzD,CAAC"}
+{"version":3,"file":"backend-api-error.js","sourceRoot":"","sources":["../../src/lib/backend-api-error.ts"],"names":[],"mappings":";;;AAaA,sDA0BC;AArCD,MAAa,eAAgB,SAAQ,KAAK;IAGtB;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,SAAmC;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,cAAS,GAAT,SAAS,CAA0B;QAGnD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AATD,0CASC;AAED,SAAgB,qBAAqB,CAAC,IAAY,EAAE,MAAc;IAChE,IAAI,OAAO,GAAG,sBAAsB,MAAM,EAAE,CAAC;IAC7C,IAAI,SAA8C,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAI3B,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,yEAAyE;YACzE,SAAS,GAAG,IAAI,CAAC,UAAqC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAChB,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACzD,CAAC"}

package/dist/lib/bound-deck-scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bound-deck-scope.d.ts","sourceRoot":"","sources":["../../src/lib/bound-deck-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,EAAE,mBAAmB,EAAE,KAAK,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAEvF,qBAAa,mBAAoB,SAAQ,KAAK;aAG1B,SAAS,EAAE,uBAAuB;gBADlD,OAAO,SAAuC,EAC9B,SAAS,GAAE,uBAAiD;CAK/E;AAED,6FAA6F;AAC7F,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,eAAe,EACnB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAajB;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,eAAe,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,eAAe,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,eAAe,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAef;AAED,iBAAS,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAC/C,CAgBA;AAED,OAAO,EAAE,sBAAsB,EAAE,CAAC"}
+{"version":3,"file":"bound-deck-scope.d.ts","sourceRoot":"","sources":["../../src/lib/bound-deck-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,EAAE,mBAAmB,EAAE,KAAK,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAEvF,qBAAa,mBAAoB,SAAQ,KAAK;aAG1B,SAAS,EAAE,uBAAuB;gBADlD,OAAO,SAAuC,EAC9B,SAAS,GAAE,uBAAiD;CAK/E;AAED,6FAA6F;AAC7F,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,eAAe,EACnB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAqBjB;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,eAAe,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,eAAe,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,eAAe,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAef;AAED,iBAAS,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAC/C,CAgBA;AAED,OAAO,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/lib/bound-deck-scope.js

@@ -23,6 +23,10 @@ async function requireBoundDeckScope(request, db, deckId) {
     if ((0, client_scope_1.isDashboardClient)(request)) {
         return deckId;
     }
+    // Defense in depth: execution authority never mutates deck composition (NOT-86).
+    if (request.requestPrincipal?.kind === 'execution-authority') {
+        throw new BoundDeckScopeError('Control-plane decision required; do not hold the worker', 'INTERACTION_REQUIRED');
+    }
     const boundDeckId = await (0, agent_deck_context_1.resolveAgentDeckId)(request, db);
     if (deckId !== boundDeckId) {
         throw new BoundDeckScopeError(`Agent may only modify bound deck ${boundDeckId}, not ${deckId}`);

package/dist/lib/bound-deck-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"bound-deck-scope.js","sourceRoot":"","sources":["../../src/lib/bound-deck-scope.ts"],"names":[],"mappings":";;;AAiBA,sDAiBC;AAED,8DAmBC;AAED,oEAgBC;AAED,gEAmBC;AAyBQ,wDAAsB;AArH/B,6DAAiF;AACjF,iDAAmD;AACnD,+CAAuF;AAEvF,MAAa,mBAAoB,SAAQ,KAAK;IAG1B;IAFlB,YACE,OAAO,GAAG,oCAAoC,EAC9B,YAAqC,uBAAuB;QAE5E,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,cAAS,GAAT,SAAS,CAAmD;QAG5E,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AARD,kDAQC;AAED,6FAA6F;AACtF,KAAK,UAAU,qBAAqB,CACzC,OAAuB,EACvB,EAAmB,EACnB,MAAc;IAEd,IAAI,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,IAAA,uCAAkB,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,mBAAmB,CAC3B,oCAAoC,WAAW,SAAS,MAAM,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAC7C,OAAuB,EACvB,EAAmB,EACnB,SAAiB;IAEjB,IAAI,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,uCAAkB,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,0CAAqB,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,IAAI,KAAK,CAAC;IACnF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAChD,OAAuB,EACvB,EAAmB,EACnB,YAAoB;IAEpB,IAAI,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,uCAAkB,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC1C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,YAAY,CAAC,IAAI,KAAK,CAC3F,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAC9C,OAAuB,EACvB,EAAmB,EACnB,UAAkB;IAElB,IAAI,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,uCAAkB,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,0CAAqB,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,CAAC,IAAI,KAAK,CAAC;IACvF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,mCAAmC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAM5C,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QACzC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,IAAI,EAAE,IAAA,4BAAmB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,0CAAqB,EAAE,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;KAClE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"bound-deck-scope.js","sourceRoot":"","sources":["../../src/lib/bound-deck-scope.ts"],"names":[],"mappings":";;;AAiBA,sDAyBC;AAED,8DAmBC;AAED,oEAgBC;AAED,gEAmBC;AAyBQ,wDAAsB;AA7H/B,6DAAiF;AACjF,iDAAmD;AACnD,+CAAuF;AAEvF,MAAa,mBAAoB,SAAQ,KAAK;IAG1B;IAFlB,YACE,OAAO,GAAG,oCAAoC,EAC9B,YAAqC,uBAAuB;QAE5E,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,cAAS,GAAT,SAAS,CAAmD;QAG5E,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AARD,kDAQC;AAED,6FAA6F;AACtF,KAAK,UAAU,qBAAqB,CACzC,OAAuB,EACvB,EAAmB,EACnB,MAAc;IAEd,IAAI,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iFAAiF;IACjF,IAAI,OAAO,CAAC,gBAAgB,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC7D,MAAM,IAAI,mBAAmB,CAC3B,yDAAyD,EACzD,sBAAsB,CACvB,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,IAAA,uCAAkB,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,mBAAmB,CAC3B,oCAAoC,WAAW,SAAS,MAAM,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAC7C,OAAuB,EACvB,EAAmB,EACnB,SAAiB;IAEjB,IAAI,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,uCAAkB,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,0CAAqB,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,IAAI,KAAK,CAAC;IACnF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAChD,OAAuB,EACvB,EAAmB,EACnB,YAAoB;IAEpB,IAAI,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,uCAAkB,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC1C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,YAAY,CAAC,IAAI,KAAK,CAC3F,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAC9C,OAAuB,EACvB,EAAmB,EACnB,UAAkB;IAElB,IAAI,IAAA,gCAAiB,EAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,uCAAkB,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,0CAAqB,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,CAAC,IAAI,KAAK,CAAC;IACvF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC,mCAAmC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAM5C,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QACzC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,IAAI,EAAE,IAAA,4BAAmB,EAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,0CAAqB,EAAE,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;KAClE,CAAC;AACJ,CAAC"}