@almadar/core 10.129.0 → 11.0.1

package/dist/chunk-V5VNGRVU.js

@@ -1,66 +0,0 @@
-// src/access/entityAccess.ts
-function orbitalInlineEntities(orbital) {
-  const out = [];
-  const refs = [orbital.entity, ...orbital.auxiliaryEntities ?? []];
-  for (const ref of refs) {
-    if (typeof ref === "object" && ref !== null && "fields" in ref) {
-      out.push(ref);
-    }
-  }
-  return out;
-}
-function entityOwnerOrbital(schema, entityType) {
-  return schema.orbitals.find((orbital) => orbitalInlineEntities(orbital).some((entity) => entity.name === entityType));
-}
-function inlineEntities(schema) {
-  return (schema.orbitals ?? []).flatMap(orbitalInlineEntities);
-}
-function isDeclared(p) {
-  return p.read !== void 0 || p.create !== void 0 || p.update !== void 0 || p.delete !== void 0;
-}
-function entityAccessTable(schema) {
-  const table = /* @__PURE__ */ new Map();
-  const collectionOf = /* @__PURE__ */ new Map();
-  for (const def of inlineEntities(schema)) {
-    table.set(def.name, {
-      read: def.read_policy,
-      create: def.create_policy,
-      update: def.update_policy,
-      delete: def.delete_policy
-    });
-    if (def.collection) collectionOf.set(def.name, def.collection);
-  }
-  const byCollection = /* @__PURE__ */ new Map();
-  for (const [name, policies] of table) {
-    const collection = collectionOf.get(name);
-    if (collection && isDeclared(policies) && !byCollection.has(collection)) {
-      byCollection.set(collection, policies);
-    }
-  }
-  for (const [name, policies] of table) {
-    if (isDeclared(policies)) continue;
-    const collection = collectionOf.get(name);
-    const inherited = collection ? byCollection.get(collection) : void 0;
-    if (inherited) table.set(name, { ...inherited });
-  }
-  return table;
-}
-function entityAccessPolicies(schema, entityName) {
-  return entityAccessTable(schema).get(entityName);
-}
-function entityAccessPoliciesByStoreKey(schema) {
-  const collectionOf = /* @__PURE__ */ new Map();
-  for (const def of inlineEntities(schema)) {
-    if (def.collection) collectionOf.set(def.name, def.collection);
-  }
-  const byKey = /* @__PURE__ */ new Map();
-  for (const [name, policies] of entityAccessTable(schema)) {
-    const key = collectionOf.get(name) ?? name.toLowerCase();
-    if (!byKey.has(key) && isDeclared(policies)) byKey.set(key, policies);
-  }
-  return byKey;
-}
-
-export { entityAccessPolicies, entityAccessPoliciesByStoreKey, entityAccessTable, entityOwnerOrbital, orbitalInlineEntities };
-//# sourceMappingURL=chunk-V5VNGRVU.js.map
-//# sourceMappingURL=chunk-V5VNGRVU.js.map

package/dist/chunk-V5VNGRVU.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/access/entityAccess.ts"],"names":[],"mappings":";AA4BO,SAAS,sBAAsB,OAAA,EAA6C;AACjF,EAAA,MAAM,MAAuB,EAAC;AAC9B,EAAA,MAAM,IAAA,GAAoB,CAAC,OAAA,CAAQ,MAAA,EAAQ,GAAI,OAAA,CAAQ,iBAAA,IAAqB,EAAG,CAAA;AAC/E,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,KAAQ,IAAA,IAAQ,YAAY,GAAA,EAAK;AAC9D,MAAA,GAAA,CAAI,KAAK,GAAoB,CAAA;AAAA,IAC/B;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,kBAAA,CAAmB,QAAuB,UAAA,EAAmD;AAC3G,EAAA,OAAO,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,CAAC,YAAY,qBAAA,CAAsB,OAAO,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,KAAW,MAAA,CAAO,IAAA,KAAS,UAAU,CAAC,CAAA;AACtH;AAIA,SAAS,eAAe,MAAA,EAAwC;AAC9D,EAAA,OAAA,CAAQ,MAAA,CAAO,QAAA,IAAY,EAAC,EAAG,QAAQ,qBAAqB,CAAA;AAC9D;AAaA,SAAS,WAAW,CAAA,EAAkC;AACpD,EAAA,OACE,CAAA,CAAE,IAAA,KAAS,MAAA,IACX,CAAA,CAAE,MAAA,KAAW,UACb,CAAA,CAAE,MAAA,KAAW,MAAA,IACb,CAAA,CAAE,MAAA,KAAW,MAAA;AAEjB;AAwBO,SAAS,kBAAkB,MAAA,EAA0D;AAC1F,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAkC;AACpD,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAoB;AAE7C,EAAA,KAAA,MAAW,GAAA,IAAO,cAAA,CAAe,MAAM,CAAA,EAAG;AACxC,IAAA,KAAA,CAAM,GAAA,CAAI,IAAI,IAAA,EAAM;AAAA,MAClB,MAAM,GAAA,CAAI,WAAA;AAAA,MACV,QAAQ,GAAA,CAAI,aAAA;AAAA,MACZ,QAAQ,GAAA,CAAI,aAAA;AAAA,MACZ,QAAQ,GAAA,CAAI;AAAA,KACb,CAAA;AACD,IAAA,IAAI,IAAI,UAAA,EAAY,YAAA,CAAa,IAAI,GAAA,CAAI,IAAA,EAAM,IAAI,UAAU,CAAA;AAAA,EAC/D;AAEA,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAkC;AAC3D,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,QAAQ,CAAA,IAAK,KAAA,EAAO;AACpC,IAAA,MAAM,UAAA,GAAa,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA;AACxC,IAAA,IAAI,UAAA,IAAc,WAAW,QAAQ,CAAA,IAAK,CAAC,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA,EAAG;AACvE,MAAA,YAAA,CAAa,GAAA,CAAI,YAAY,QAAQ,CAAA;AAAA,IACvC;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,QAAQ,CAAA,IAAK,KAAA,EAAO;AACpC,IAAA,IAAI,UAAA,CAAW,QAAQ,CAAA,EAAG;AAC1B,IAAA,MAAM,UAAA,GAAa,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA;AACxC,IAAA,MAAM,SAAA,GAAY,UAAA,GAAa,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA,GAAI,MAAA;AAC9D,IAAA,IAAI,WAAW,KAAA,CAAM,GAAA,CAAI,MAAM,EAAE,GAAG,WAAW,CAAA;AAAA,EACjD;AAEA,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,oBAAA,CACd,QACA,UAAA,EACkC;AAClC,EAAA,OAAO,iBAAA,CAAkB,MAAM,CAAA,CAAE,GAAA,CAAI,UAAU,CAAA;AACjD;AAaO,SAAS,+BACd,MAAA,EACmC;AACnC,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAoB;AAC7C,EAAA,KAAA,MAAW,GAAA,IAAO,cAAA,CAAe,MAAM,CAAA,EAAG;AACxC,IAAA,IAAI,IAAI,UAAA,EAAY,YAAA,CAAa,IAAI,GAAA,CAAI,IAAA,EAAM,IAAI,UAAU,CAAA;AAAA,EAC/D;AACA,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAkC;AACpD,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,QAAQ,CAAA,IAAK,iBAAA,CAAkB,MAAM,CAAA,EAAG;AACxD,IAAA,MAAM,MAAM,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA,IAAK,KAAK,WAAA,EAAY;AACvD,IAAA,IAAI,CAAC,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA,IAAK,UAAA,CAAW,QAAQ,CAAA,EAAG,KAAA,CAAM,GAAA,CAAI,GAAA,EAAK,QAAQ,CAAA;AAAA,EACtE;AACA,EAAA,OAAO,KAAA;AACT","file":"chunk-V5VNGRVU.js","sourcesContent":["/**\n * Entity access policies — the declared `@read`/`@create`/`@update`/`@delete`\n * directives, keyed by entity name.\n *\n * The JS mirror of `orbital-core/src/runtime/entity_access.rs`'s\n * `EntityAccessPolicies`/`EntityAccessTable`. Both paths must agree: a\n * directive is a per-row predicate (`@entity` = the candidate row, or for\n * `@create` the incoming data; `@user` = the viewer), enforced once for\n * every trait that touches the entity — the un-bypassable twin of a\n * call-site `filter:`, which sibling traits can skip simply by not\n * declaring one.\n *\n * @packageDocumentation\n */\n\nimport type { OrbitalEntity } from '../types/entity.js';\nimport type { EntityRef, OrbitalDefinition } from '../types/orbital.js';\nimport type { OrbitalSchema } from '../types/schema.js';\nimport type { SExpr } from '../types/expression.js';\n\n/**\n * One orbital's own inline entity definitions: its primary entity plus any\n * auxiliaries an import brought along (`auxiliaryEntities` — a linkedEntity\n * naming an imported atom's own entity resolves here, not among any\n * orbital's primary entity alone). Skips unresolved `string`/`EntityCall`\n * refs — those are pre-inline-phase forms that never reach this by the time\n * a schema is served.\n */\nexport function orbitalInlineEntities(orbital: OrbitalDefinition): OrbitalEntity[] {\n  const out: OrbitalEntity[] = [];\n  const refs: EntityRef[] = [orbital.entity, ...(orbital.auxiliaryEntities ?? [])];\n  for (const ref of refs) {\n    if (typeof ref === 'object' && ref !== null && 'fields' in ref) {\n      out.push(ref as OrbitalEntity);\n    }\n  }\n  return out;\n}\n\n/** The orbital of `schema` that declares the entity `entityType` inline, when one does. */\nexport function entityOwnerOrbital(schema: OrbitalSchema, entityType: string): OrbitalDefinition | undefined {\n  return schema.orbitals.find((orbital) => orbitalInlineEntities(orbital).some((entity) => entity.name === entityType));\n}\n\n/** Inline entity definitions of every orbital in a schema: each orbital's\n * primary entity plus any auxiliaries. */\nfunction inlineEntities(schema: OrbitalSchema): OrbitalEntity[] {\n  return (schema.orbitals ?? []).flatMap(orbitalInlineEntities);\n}\n\n/** An entity's four declared directives. Any may be absent — an absent\n * directive means \"no restriction\" for that operation, exactly like an\n * absent fetch `filter:`. */\nexport interface EntityAccessPolicies {\n  read?: SExpr;\n  create?: SExpr;\n  update?: SExpr;\n  delete?: SExpr;\n}\n\n/** Whether the author declared any of the four directives on this entity. */\nfunction isDeclared(p: EntityAccessPolicies): boolean {\n  return (\n    p.read !== undefined ||\n    p.create !== undefined ||\n    p.update !== undefined ||\n    p.delete !== undefined\n  );\n}\n\n/**\n * Every entity's access policies, keyed by entity name.\n *\n * A policy governs the **collection**, not the declaration. A `persistent:`\n * collection is one table, and two entity declarations over one table cannot\n * honestly carry different visibility rules. Keying by entity name alone let an\n * organism declare `@read` on its own entity and still ship an ALLOW-ALL list\n * wherever a page rendered through a std-atom trait that fetched the ATOM's\n * entity on the same collection — measured on `std-customer-success`, where\n * `/health-scores` returned 6 rows for every persona while the organism's own\n * `/cs-accounts` correctly returned 3 vs 6. 36 of 54 app organisms share a\n * collection this way (`R-SHADOW-ENTITY-SHARES-COLLECTION-DIRECTIVES-DONT-APPLY`).\n *\n * So an entity that declares nothing adopts the policy declared on its\n * collection. This can only ever ADD a restriction: an entity with its own\n * directives keeps exactly those, and an entity whose collection carries no\n * declared policy is untouched. Conflicting declarations on one collection are\n * rejected at validate time by `ORB_S_COLLECTION_POLICY_CONFLICT`.\n *\n * Mirrors `resolve_collection_inheritance` in\n * `orbital-rust/crates/orbital-core/src/runtime/entity_access.rs`.\n */\nexport function entityAccessTable(schema: OrbitalSchema): Map<string, EntityAccessPolicies> {\n  const table = new Map<string, EntityAccessPolicies>();\n  const collectionOf = new Map<string, string>();\n\n  for (const def of inlineEntities(schema)) {\n    table.set(def.name, {\n      read: def.read_policy,\n      create: def.create_policy,\n      update: def.update_policy,\n      delete: def.delete_policy,\n    });\n    if (def.collection) collectionOf.set(def.name, def.collection);\n  }\n\n  const byCollection = new Map<string, EntityAccessPolicies>();\n  for (const [name, policies] of table) {\n    const collection = collectionOf.get(name);\n    if (collection && isDeclared(policies) && !byCollection.has(collection)) {\n      byCollection.set(collection, policies);\n    }\n  }\n\n  for (const [name, policies] of table) {\n    if (isDeclared(policies)) continue;\n    const collection = collectionOf.get(name);\n    const inherited = collection ? byCollection.get(collection) : undefined;\n    if (inherited) table.set(name, { ...inherited });\n  }\n\n  return table;\n}\n\n/** One entity's access policies, or `undefined` when it declares none. */\nexport function entityAccessPolicies(\n  schema: OrbitalSchema,\n  entityName: string,\n): EntityAccessPolicies | undefined {\n  return entityAccessTable(schema).get(entityName);\n}\n\n/**\n * Access policies keyed the way the mock store keys its tables: the declared\n * `persistent:` collection, else the lowercased entity name. The mock\n * adapter's owner-restamp consults this map to decide whether a persona the\n * dev host switches to could have CREATED a row before re-pointing its owner\n * column — a reader persona must not inherit authorship of a draft just\n * because the demo store follows the viewer (the `@create` directive is the\n * single authority on who authors; no role heuristics here). First declared\n * policy per collection wins, the same collection-inheritance rule as\n * `entityAccessTable`.\n */\nexport function entityAccessPoliciesByStoreKey(\n  schema: OrbitalSchema,\n): Map<string, EntityAccessPolicies> {\n  const collectionOf = new Map<string, string>();\n  for (const def of inlineEntities(schema)) {\n    if (def.collection) collectionOf.set(def.name, def.collection);\n  }\n  const byKey = new Map<string, EntityAccessPolicies>();\n  for (const [name, policies] of entityAccessTable(schema)) {\n    const key = collectionOf.get(name) ?? name.toLowerCase();\n    if (!byKey.has(key) && isDeclared(policies)) byKey.set(key, policies);\n  }\n  return byKey;\n}\n"]}

package/dist/chunk-X4SC7FGF.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/behavior-package.ts"],"names":["readdirSync","join","relative"],"mappings":";;;;;;;;;AAuBA,IAAM,EAAE,YAAW,GAAI,UAAA;AACvB,IAAM,EAAE,YAAA,EAAc,UAAA,EAAY,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,YAAA,EAAc,YAAA,EAAc,UAAA,EAAY,MAAA,EAAQ,QAAA,EAAU,aAAA,EAAc,GAAI,MAAA;AACtI,IAAM,EAAE,eAAc,GAAI,UAAA;AAC1B,IAAM,EAAE,SAAQ,GAAI,MAAA;AACpB,IAAM,EAAE,SAAS,UAAA,EAAY,IAAA,EAAAC,OAAM,QAAA,EAAAC,SAAAA,EAAU,OAAA,EAAS,GAAA,EAAI,GAAI,QAAA;AAEvD,IAAM,6BAAA,GAAgC,EAC1C,MAAA,CAAO;AAAA,EACR,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAExB,UAAU,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA;AAAA,EAErC,QAAQ,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACnC,SAAS,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACpC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAC1B,CAAC,CAAA,CACA,OAAO,CAAC,GAAA,KAAQ,IAAI,QAAA,KAAa,MAAA,IAAa,GAAA,CAAI,MAAA,KAAW,MAAA,EAAW;AAAA,EACvE,OAAA,EAAS;AACX,CAAC;AAIH,IAAM,qBAAA,GAAwB,EAAE,MAAA,CAAO;AAAA,EACrC,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,EAAE,CAAA;AAAA,EAC3B,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,EAAE,CAAA;AAAA,EAC9B,GAAA,EAAK,8BAA8B,QAAA;AACrC,CAAC,CAAA;AAGM,IAAM,iBAAA,GAAoB,EAAE,MAAA,CAAO;AAAA,EACxC,OAAA,EAAS,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAA;AAAA,EACpB,OAAO,CAAA,CAAE,MAAA;AAAA,IACP,EAAE,MAAA,EAAO;AAAA,IACT,EAAE,MAAA,CAAO;AAAA,MACP,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,gBAAgB,CAAA;AAAA,MACzC,OAAO,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,WAAA,EAAY;AAAA,MACpC,GAAA,EAAK,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA;AAAI,KACrB;AAAA;AAEL,CAAC;AAyBM,IAAM,oBAAA,GAAN,cAAmC,KAAA,CAAM;AAAA,EAC9C,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AAAA,EACd;AACF;AAGO,SAAS,oBAAoB,IAAA,EAA+B;AACjE,EAAA,MAAM,QAAA,GAAWD,KAAAA,CAAK,IAAA,EAAM,cAAc,CAAA;AAC1C,EAAA,MAAM,MAAA,GAAS,sBAAsB,SAAA,CAAU,IAAA,CAAK,MAAM,YAAA,CAAa,QAAA,EAAU,MAAM,CAAC,CAAC,CAAA;AACzF,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,qBAAqB,CAAA,EAAG,QAAQ,oCAA+B,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,EACjG;AACA,EAAA,MAAM,EAAE,IAAA,EAAM,OAAA,EAAS,GAAA,KAAQ,MAAA,CAAO,IAAA;AACtC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,QAAQ,CAAA,wDAAA,CAAqD,CAAA;AAAA,EACjG;AACA,EAAA,OAAO,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,KAAK,IAAA,EAAM,eAAA,CAAgB,IAAI,CAAA,EAAE;AACjE;AAGO,IAAM,iBAAA,GAAoB;AAE1B,IAAM,sBAAA,GAAyB;AAG/B,SAAS,YAAA,CAAa,IAAA,EAAc,QAAA,GAAmB,iBAAA,EAAuC;AACnG,EAAA,MAAM,QAAA,GAAWA,KAAAA,CAAK,IAAA,EAAM,QAAQ,CAAA;AACpC,EAAA,IAAI,CAAC,UAAA,CAAW,QAAQ,CAAA,EAAG,OAAO,IAAA;AAClC,EAAA,MAAM,MAAA,GAAS,kBAAkB,SAAA,CAAU,IAAA,CAAK,MAAM,YAAA,CAAa,QAAA,EAAU,MAAM,CAAC,CAAC,CAAA;AACrF,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,QAAQ,CAAA,YAAA,EAAe,QAAQ,CAAA,QAAA,EAAM,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,EAC/F;AACA,EAAA,OAAO,MAAA,CAAO,IAAA;AAChB;AAEA,SAAS,gBAAgB,IAAA,EAAkC;AACzD,EAAA,OAAO,YAAA,CAAa,MAAM,iBAAiB,CAAA;AAC7C;AAEO,SAAS,eAAA,GAA0B;AACxC,EAAA,OAAO,OAAA,CAAQ,IAAI,uBAAuB,CAAA,IAAKA,MAAK,OAAA,EAAQ,EAAG,YAAY,UAAU,CAAA;AACvF;AAEA,IAAM,YAAA,GAA6B,OAAO,GAAA,KAAQ;AAChD,EAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAG,CAAA;AAChC,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAC3D,EAAA,OAAO,IAAI,UAAA,CAAW,MAAM,QAAA,CAAS,aAAa,CAAA;AACpD,CAAA;AAEA,SAAS,QAAQ,GAAA,EAAqB;AACpC,EAAA,OAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,IAAA;AACtB;AAEA,SAAS,YAAA,CAAa,GAAA,EAAgD,OAAA,EAAiB,KAAA,EAAyB,MAAA,EAAsC;AACpJ,EAAA,OAAO,IAAI,oBAAA;AAAA,IACT,CAAA,2BAAA,EAA8B,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,IAAI,OAAO,CAAA,CAAA,EAAI,OAAO,CAAA,wBAAA,EAAsB,MAAM,MAAM,CAAA,EAAA,EAAK,KAAA,CAAM,KAAK,YAAY,MAAM,CAAA;AAAA,GACtI;AACF;AAEA,SAAS,WAAA,CAAY,GAAA,EAAsB,OAAA,EAAiB,KAAA,EAAuB;AACjF,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,OAAO,CAAA;AAC1C,EAAA,MAAM,GAAA,GAAMC,SAAAA,CAAS,GAAA,CAAI,IAAA,EAAM,QAAQ,CAAA;AACvC,EAAA,IAAI,IAAI,UAAA,CAAW,IAAI,CAAA,IAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AAC3C,IAAA,MAAM,IAAI,qBAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,EAAA,EAAK,KAAK,CAAA,IAAA,EAAO,OAAO,CAAA,4BAAA,CAA8B,CAAA;AAAA,EAClG;AACA,EAAA,IAAI,CAAC,UAAA,CAAW,QAAQ,CAAA,EAAG;AACzB,IAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,GAAA,CAAI,OAAO,CAAA,EAAA,EAAK,KAAK,CAAA,WAAA,EAAc,OAAO,CAAA,8BAAA,CAAgC,CAAA;AAAA,EAC1H;AACA,EAAA,OAAO,QAAA;AACT;AAMO,SAAS,oBAAoB,GAAA,EAAsB,OAAA,EAAiB,UAA0B,EAAC,EAAG,QAAQ,eAAA,EAAyB;AACxI,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,IAAA,EAAM,KAAA,CAAM,OAAO,CAAA;AACrC,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,WAAA,CAAY,GAAA,EAAK,SAAS,KAAK,CAAA;AAClD,EAAA,MAAM,SAASD,KAAAA,CAAK,OAAA,CAAQ,YAAY,eAAA,EAAgB,EAAG,MAAM,MAAM,CAAA;AACvE,EAAA,IAAI,CAAC,UAAA,CAAW,MAAM,CAAA,EAAG;AACvB,IAAA,MAAM,IAAI,oBAAA;AAAA,MACR,CAAA,wBAAA,EAA2B,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,GAAA,CAAI,OAAO,CAAA,CAAA,EAAI,OAAO,CAAA,SAAA,EAAY,KAAA,CAAM,MAAM,CAAA,4GAAA;AAAA,KACvF;AAAA,EACF;AACA,EAAA,IAAI,SAAS,MAAM,CAAA,CAAE,IAAA,KAAS,KAAA,CAAM,OAAO,MAAM,YAAA,CAAa,GAAA,EAAK,OAAA,EAAS,OAAO,CAAA,gBAAA,EAAmB,QAAA,CAAS,MAAM,CAAA,CAAE,IAAI,CAAA,MAAA,CAAQ,CAAA;AACnI,EAAA,OAAO,MAAA;AACT;AAGA,eAAsB,gBACpB,GAAA,EACA,OAAA,EACA,KAAA,EACA,OAAA,GAA0B,EAAC,EACV;AACjB,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,QAAA,IAAY,eAAA,EAAgB;AACrD,EAAA,MAAM,MAAA,GAASA,KAAAA,CAAK,QAAA,EAAU,KAAA,CAAM,MAAM,CAAA;AAC1C,EAAA,IAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AACtB,IAAA,IAAI,SAAS,MAAM,CAAA,CAAE,IAAA,KAAS,KAAA,CAAM,OAAO,MAAM,YAAA,CAAa,GAAA,EAAK,OAAA,EAAS,OAAO,CAAA,gBAAA,EAAmB,QAAA,CAAS,MAAM,CAAA,CAAE,IAAI,CAAA,MAAA,CAAQ,CAAA;AACnI,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI;AACF,IAAA,KAAA,GAAQ,MAAA,CAAO,OAAA,CAAQ,KAAA,IAAS,YAAA,EAAc,MAAM,GAAG,CAAA;AAAA,EACzD,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,oBAAA;AAAA,MACR,CAAA,0BAAA,EAA6B,IAAI,IAAI,CAAA,CAAA,EAAI,IAAI,OAAO,CAAA,CAAA,EAAI,OAAO,CAAA,SAAA,EAAY,KAAA,CAAM,MAAM,UAAU,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAC,CAAA,QAAA,EAAM,KAAA,YAAiB,QAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KACjL;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,WAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AAC9D,EAAA,IAAI,WAAW,KAAA,CAAM,MAAA,IAAU,KAAA,CAAM,UAAA,KAAe,MAAM,KAAA,EAAO;AAC/D,IAAA,MAAM,YAAA,CAAa,KAAK,OAAA,EAAS,KAAA,EAAO,cAAc,KAAA,CAAM,UAAU,CAAA,mBAAA,EAAsB,MAAM,CAAA,CAAE,CAAA;AAAA,EACtG;AACA,EAAA,SAAA,CAAU,QAAA,EAAU,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AACvC,EAAA,MAAM,IAAA,GAAO,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,QAAQ,GAAG,CAAA,IAAA,CAAA;AACrC,EAAA,aAAA,CAAc,MAAM,KAAK,CAAA;AACzB,EAAA,UAAA,CAAW,MAAM,MAAM,CAAA;AACvB,EAAA,OAAO,MAAA;AACT;AAGA,eAAsB,kBAAA,CAAmB,GAAA,EAAsB,OAAA,EAAiB,OAAA,GAA0B,EAAC,EAAoB;AAC7H,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,IAAA,EAAM,KAAA,CAAM,OAAO,CAAA;AACrC,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,WAAA,CAAY,GAAA,EAAK,SAAS,eAAe,CAAA;AAC5D,EAAA,OAAO,eAAA,CAAgB,GAAA,EAAK,OAAA,EAAS,KAAA,EAAO,OAAO,CAAA;AACrD;AAGO,SAAS,YAAA,GAAuB;AACrC,EAAA,OAAOA,KAAAA,CAAK,OAAA,EAAQ,EAAG,MAAM,CAAA;AAC/B;AAGA,IAAM,qBAAA,GAAwB,CAAC,QAAA,EAAU,UAAA,EAAY,QAAQ,CAAA;AAE7D,SAAS,YAAY,WAAA,EAA+B;AAClD,EAAA,IAAI,CAAC,UAAA,CAAW,WAAW,CAAA,SAAU,EAAC;AACtC,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,KAAA,IAASD,YAAAA,CAAY,WAAW,CAAA,EAAG;AAC5C,IAAA,MAAM,IAAA,GAAOC,KAAAA,CAAK,WAAA,EAAa,KAAK,CAAA;AACpC,IAAA,IAAI,KAAA,CAAM,UAAA,CAAW,GAAG,CAAA,EAAG;AACzB,MAAA,IAAI,CAAC,WAAW,IAAI,CAAA,IAAK,CAAC,QAAA,CAAS,IAAI,CAAA,CAAE,WAAA,EAAY,EAAG;AACxD,MAAA,KAAA,MAAW,OAAOD,YAAAA,CAAY,IAAI,CAAA,EAAG,GAAA,CAAI,KAAK,CAAC,CAAA,EAAG,KAAK,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,EAAIC,KAAAA,CAAK,IAAA,EAAM,GAAG,CAAC,CAAC,CAAA;AAAA,IACpF,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,IAAA,CAAK,CAAC,KAAA,EAAO,IAAI,CAAC,CAAA;AAAA,IACxB;AAAA,EACF;AACA,EAAA,OAAO,GAAA,CAAI,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAO,CAAA,CAAE,CAAC,CAAA,GAAI,CAAA,CAAE,CAAC,CAAA,GAAI,EAAA,GAAK,CAAA,CAAE,CAAC,CAAA,GAAI,CAAA,CAAE,CAAC,CAAA,GAAI,CAAA,GAAI,CAAE,CAAA,CAAE,GAAA,CAAI,CAAC,GAAG,IAAI,CAAA,KAAM,IAAI,CAAA;AAC5F;AAEA,SAAS,mBAAmB,YAAA,EAA+B;AACzD,EAAA,MAAM,WAAW,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,YAAA,EAAc,MAAM,CAAC,CAAA;AAC9D,EAAA,MAAM,MAAM,QAAA,CAAS,GAAA;AACrB,EAAA,OAAO,GAAA,KAAQ,MAAA,IAAa,GAAA,KAAQ,IAAA,IAAQ,OAAO,GAAA,KAAQ,QAAA,IAAY,qBAAA,CAAsB,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,IAAS,GAAG,CAAA;AAC3H;AASO,SAAS,oBAAA,CAAqB,QAAA,EAAkB,SAAA,GAAoB,YAAA,EAAa,EAAa;AACnG,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,IAAS,MAAM,OAAA,CAAQ,QAAQ,KAAK,GAAA,GAAM,OAAA,CAAQ,GAAG,CAAA,EAAG;AACtD,IAAA,KAAA,CAAM,IAAA,CAAKA,KAAAA,CAAK,GAAA,EAAK,cAAc,CAAC,CAAA;AACpC,IAAA,IAAI,OAAA,CAAQ,GAAG,CAAA,KAAM,GAAA,EAAK;AAAA,EAC5B;AACA,EAAA,KAAA,CAAM,IAAA,CAAKA,KAAAA,CAAK,SAAA,EAAW,cAAc,CAAC,CAAA;AAC1C,EAAA,MAAM,MAAgB,EAAC;AACvB,EAAA,KAAA,MAAW,eAAe,KAAA,EAAO;AAC/B,IAAA,KAAA,MAAW,GAAA,IAAO,WAAA,CAAY,WAAW,CAAA,EAAG;AAC1C,MAAA,IAAI,CAAC,UAAA,CAAWA,KAAAA,CAAK,GAAA,EAAK,cAAc,CAAC,CAAA,IAAK,CAAC,QAAA,CAAS,GAAG,CAAA,CAAE,WAAA,EAAY,EAAG;AAC5E,MAAA,GAAA,CAAI,IAAA,CAAK,YAAA,CAAa,GAAG,CAAC,CAAA;AAAA,IAC5B;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,wBAAA,CAAyB,QAAA,EAAkB,SAAA,GAAoB,YAAA,EAAa,EAAsB;AAChH,EAAA,MAAM,QAA2B,EAAC;AAClC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,GAAA,IAAO,oBAAA,CAAqB,QAAA,EAAU,SAAS,CAAA,EAAG;AAC3D,IAAA,IAAI,CAAC,kBAAA,CAAmBA,KAAAA,CAAK,GAAA,EAAK,cAAc,CAAC,CAAA,EAAG;AACpD,IAAA,MAAM,GAAA,GAAM,oBAAoB,GAAG,CAAA;AACnC,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,IAAI,CAAA,EAAG;AACxB,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,IAAI,CAAA;AACjB,IAAA,KAAA,CAAM,KAAK,GAAG,CAAA;AAAA,EAChB;AACA,EAAA,MAAM,QAAA,uBAAe,GAAA,EAA6B;AAClD,EAAA,KAAA,MAAW,OAAO,KAAA,EAAO;AACvB,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,GAAA,CAAI,IAAI,MAAM,CAAA;AACzC,IAAA,IAAI,KAAA,IAAS,KAAA,CAAM,IAAA,KAAS,GAAA,CAAI,IAAA,EAAM;AACpC,MAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,SAAA,EAAY,IAAI,GAAA,CAAI,MAAM,oBAAoB,KAAA,CAAM,IAAI,CAAA,EAAA,EAAK,KAAA,CAAM,IAAI,CAAA,MAAA,EAAS,GAAA,CAAI,IAAI,CAAA,EAAA,EAAK,GAAA,CAAI,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,IACzI;AACA,IAAA,QAAA,CAAS,GAAA,CAAI,GAAA,CAAI,GAAA,CAAI,MAAA,EAAQ,GAAG,CAAA;AAAA,EAClC;AACA,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,4BAAA,CAA6B,MAAc,OAAA,EAAkC;AAC3F,EAAA,MAAM,MAAM,aAAA,CAAcA,KAAAA,CAAK,QAAQ,OAAO,CAAA,EAAG,SAAS,CAAC,CAAA;AAC3D,EAAA,OAAO,mBAAA,CAAoB,QAAQ,GAAA,CAAI,OAAA,CAAQ,GAAG,IAAI,CAAA,aAAA,CAAe,CAAC,CAAC,CAAA;AACzE;AAGO,SAAS,mBAAA,CAAoB,GAAA,EAAsB,GAAA,EAAsB,OAAA,GAA0B,EAAC,EAAW;AACpH,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA;AAC5B,EAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,IAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,IAAI,GAAA,CAAI,OAAO,CAAA,MAAA,EAAS,GAAG,CAAA,gBAAA,CAAkB,CAAA;AAAA,EACzF;AACA,EAAA,OAAO,oBAAoB,GAAA,EAAK,QAAA,EAAU,OAAA,EAAS,CAAA,IAAA,EAAO,GAAG,CAAA,CAAE,CAAA;AACjE;AAGA,IAAM,kBAAA,GAAqB,CAAA,CAAE,MAAA,CAAO,EAAE,GAAA,EAAK,EAAE,KAAA,CAAM,CAAC,CAAA,CAAE,MAAA,EAAO,EAAG,CAAA,CAAE,OAAO,CAAA,CAAE,MAAA,EAAO,EAAG,CAAA,CAAE,MAAA,EAAQ,CAAC,CAAC,CAAA,CAAE,QAAA,EAAS,EAAG,CAAA;AAOxG,SAAS,gBAAA,CAAiB,IAAA,GAAe,OAAA,CAAQ,GAAA,EAAI,EAAW;AACrE,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA;AACxC,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,IAAI,CAAC,WAAW,UAAU,CAAA,QAAS,IAAI,oBAAA,CAAqB,CAAA,kBAAA,EAAqB,UAAU,CAAA,sBAAA,CAAwB,CAAA;AACnH,IAAA,OAAO,UAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,gBAAgB,IAAI,CAAA;AACtC,EAAA,IAAI,SAAA,KAAc,QAAW,OAAO,SAAA;AACpC,EAAA,MAAM,IAAI,qBAAqB,sDAAsD,CAAA;AACvF;AAGA,SAAS,gBAAgB,IAAA,EAAkC;AACzD,EAAA,KAAA,IAAS,MAAM,OAAA,CAAQ,IAAI,KAAK,GAAA,GAAM,OAAA,CAAQ,GAAG,CAAA,EAAG;AAClD,IAAA,MAAM,eAAeA,KAAAA,CAAK,GAAA,EAAK,cAAA,EAAgB,UAAA,EAAY,OAAO,cAAc,CAAA;AAChF,IAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,MAAA,MAAM,MAAA,GAAS,mBAAmB,SAAA,CAAU,IAAA,CAAK,MAAM,YAAA,CAAa,YAAA,EAAc,MAAM,CAAC,CAAC,CAAA;AAC1F,MAAA,MAAM,GAAA,GAAM,CAAC,MAAA,CAAO,OAAA,IAAW,OAAO,IAAA,CAAK,GAAA,KAAQ,MAAA,GAAY,MAAA,GAAY,OAAO,MAAA,CAAO,KAAK,GAAA,KAAQ,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,GAAA,GAAM,MAAA,CAAO,OAAO,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,CAAE,CAAC,CAAA;AACnK,MAAA,MAAM,IAAA,GAAO,QAAQ,MAAA,GAAY,MAAA,GAAY,QAAQ,OAAA,CAAQ,YAAY,GAAG,GAAG,CAAA;AAC/E,MAAA,OAAO,IAAA,KAAS,MAAA,IAAa,UAAA,CAAW,IAAI,IAAI,IAAA,GAAO,MAAA;AAAA,IACzD;AACA,IAAA,IAAI,OAAA,CAAQ,GAAG,CAAA,KAAM,GAAA,EAAK,OAAO,MAAA;AAAA,EACnC;AACF;AAGO,SAAS,eAAA,GAA0B;AACxC,EAAA,OAAO,OAAA,CAAQ,IAAI,uBAAuB,CAAA,IAAKA,MAAK,OAAA,EAAQ,EAAG,YAAY,SAAS,CAAA;AACtF;AASA,IAAM,UAAA,uBAAiB,GAAA,EAAoB;AAG3C,SAAS,SAAS,IAAA,EAAsB;AACtC,EAAA,MAAM,IAAA,GAAO,SAAS,IAAI,CAAA;AAC1B,EAAA,MAAM,IAAA,GAAO,GAAG,IAAI,CAAA,EAAA,EAAK,KAAK,IAAI,CAAA,EAAA,EAAK,KAAK,OAAO,CAAA,CAAA;AACnD,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA;AACjC,EAAA,IAAI,OAAO,OAAO,KAAA;AAClB,EAAA,MAAM,IAAA,GAAO,UAAA,CAAW,QAAQ,CAAA,CAAE,MAAA,CAAO,aAAa,IAAI,CAAC,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA;AACzE,EAAA,UAAA,CAAW,GAAA,CAAI,MAAM,IAAI,CAAA;AACzB,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,UAAA,CAAW,QAAgB,OAAA,EAAyB;AAC3D,EAAA,MAAM,OAAO,UAAA,CAAW,QAAQ,EAAE,MAAA,CAAO,QAAA,CAAS,MAAM,CAAC,CAAA;AACzD,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,IAAS,MAAM,OAAA,CAAQ,OAAO,KAAK,GAAA,GAAM,OAAA,CAAQ,GAAG,CAAA,EAAG;AACrD,IAAA,KAAA,CAAM,IAAA,CAAKA,KAAAA,CAAK,GAAA,EAAK,cAAc,CAAC,CAAA;AACpC,IAAA,IAAI,OAAA,CAAQ,GAAG,CAAA,KAAM,GAAA,EAAK;AAAA,EAC5B;AACA,EAAA,KAAA,CAAM,IAAA,CAAKA,KAAAA,CAAK,YAAA,EAAa,EAAG,cAAc,CAAC,CAAA;AAC/C,EAAA,MAAM,WAAW,KAAA,CAAM,GAAA,CAAI,CAAC,EAAA,KAAOA,KAAAA,CAAK,IAAI,UAAA,EAAY,MAAM,CAAC,CAAA,CAAE,IAAA,CAAK,CAAC,GAAA,KAAQ,UAAA,CAAWA,MAAK,GAAA,EAAK,cAAc,CAAC,CAAC,CAAA;AACpH,EAAA,IAAI,CAAC,UAAU,OAAO,IAAA,CAAK,OAAO,WAAW,CAAA,CAAE,OAAO,KAAK,CAAA;AAC3D,EAAA,MAAM,QAAA,GAAW,KAAK,KAAA,CAAM,YAAA,CAAaA,MAAK,QAAA,EAAU,cAAc,CAAA,EAAG,MAAM,CAAC,CAAA;AAChF,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,GAAG,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAA,CAAS,WAAA,IAAe,EAAE,CAAA,CAAE,IAAA,CAAK,CAAC,CAAC,CAAC,CAAA,EAAG,CAAC,CAAC,CAAA,KAAO,CAAA,GAAI,CAAA,GAAI,EAAA,GAAK,CAAA,GAAI,CAAA,GAAI,CAAA,GAAI,CAAE,CAAA,EAAG;AACtH,IAAA,MAAM,IAAA,GAAOA,KAAAA,CAAK,QAAA,EAAU,GAAG,CAAA;AAC/B,IAAA,IAAI,KAAA,KAAU,UAAA,IAAc,CAAC,UAAA,CAAW,IAAI,CAAA,IAAK,CAAC,QAAA,CAAS,IAAI,CAAA,CAAE,MAAA,EAAO,EAAG;AAC3E,IAAA,IAAA,CAAK,OAAO,CAAA,EAAA,EAAK,KAAK,KAAK,QAAA,CAAS,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EAC7C;AACA,EAAA,OAAO,IAAA,CAAK,OAAO,KAAK,CAAA;AAC1B;AAEA,SAAS,kBAAA,CAAmB,KAAa,SAAA,EAA6B;AACpE,EAAA,IAAI,CAAC,UAAA,CAAW,GAAG,CAAA,SAAU,EAAC;AAC9B,EAAA,MAAM,MAAgB,EAAC;AACvB,EAAA,KAAA,MAAW,SAASD,YAAAA,CAAY,GAAA,EAAK,EAAE,aAAA,EAAe,IAAA,EAAM,CAAA,EAAG;AAC7D,IAAA,MAAM,IAAA,GAAOC,KAAAA,CAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AACjC,IAAA,IAAI,KAAA,CAAM,aAAY,EAAG,GAAA,CAAI,KAAK,GAAG,kBAAA,CAAmB,IAAA,EAAM,SAAS,CAAC,CAAA;AAAA,SAAA,IAC/D,MAAM,IAAA,CAAK,QAAA,CAAS,SAAS,CAAA,EAAG,GAAA,CAAI,KAAK,IAAI,CAAA;AAAA,EACxD;AACA,EAAA,OAAO,IAAI,IAAA,EAAK;AAClB;AAGA,SAAS,WAAW,GAAA,EAAqB;AACvC,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,SAAA,EAAW,MAAM,CAAA;AACtC;AAeA,SAAS,SAAA,CAAU,GAAA,EAAsB,MAAA,EAAgB,QAAA,EAAsC;AAC7F,EAAA,MAAM,GAAA,GAAM,WAAW,QAAQ,CAAA,CAAE,OAAO,CAAA,EAAG,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAC,CAAA,EAAA,EAAK,WAAW,MAAA,EAAQ,GAAA,CAAI,IAAI,CAAC,CAAA,CAAE,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAC1H,EAAA,OAAOA,KAAAA,CAAK,QAAA,IAAY,eAAA,EAAgB,EAAG,YAAY,GAAG,CAAA;AAC5D;AAQO,SAAS,oBAAA,CAAqB,IAAA,EAAkC,OAAA,GAA8B,EAAC,EAAa;AACjH,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,IAAU,gBAAA,EAAiB;AAClD,EAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,IAAA,CAAK,OAAO,CAAC,GAAA,KAAQ,IAAI,GAAA,CAAI,QAAA,KAAa,MAAS,CAAA,CAAE,GAAA,CAAI,CAAC,GAAA,KAAQ,SAAA,CAAU,KAAK,MAAA,EAAQ,OAAA,CAAQ,QAAQ,CAAC,CAAC,CAAA;AAChI,EAAA,MAAM,OAAOA,KAAAA,CAAK,OAAA,CAAQ,QAAA,IAAY,eAAA,IAAmB,UAAU,CAAA;AACnE,EAAA,IAAI,CAAC,UAAA,CAAW,IAAI,CAAA,SAAU,EAAC;AAC/B,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,SAASD,YAAAA,CAAY,IAAA,EAAM,EAAE,aAAA,EAAe,IAAA,EAAM,CAAA,EAAG;AAC9D,IAAA,MAAM,GAAA,GAAMC,KAAAA,CAAK,IAAA,EAAM,KAAA,CAAM,IAAI,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,WAAA,MAAiB,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG;AAC3C,IAAA,MAAA,CAAO,KAAK,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAC5C,IAAA,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,EAClB;AACA,EAAA,OAAO,QAAQ,IAAA,EAAK;AACtB;AAmBO,SAAS,mBAAmB,GAAA,EAAoE;AACrG,EAAA,IAAI,GAAA,CAAI,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW;AAClC,IAAA,OAAO,EAAE,GAAA,EAAK,mBAAA,CAAoB,GAAA,EAAK,GAAA,CAAI,GAAA,CAAI,QAAA,EAAU,EAAC,EAAG,cAAc,CAAA,EAAG,SAAA,EAAW,MAAA,EAAO;AAAA,EAClG;AACA,EAAA,IAAI,GAAA,CAAI,GAAA,CAAI,MAAA,KAAW,MAAA,EAAW,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,sDAAA,CAAwD,CAAA;AACpI,EAAA,OAAO,EAAE,GAAA,EAAK,WAAA,CAAY,GAAA,EAAK,GAAA,CAAI,IAAI,MAAA,EAAQ,YAAY,CAAA,EAAG,SAAA,EAAW,OAAA,EAAQ;AACnF;AAEO,SAAS,mBAAA,CAAoB,GAAA,EAAsB,OAAA,GAA8B,EAAC,EAAW;AAClG,EAAA,IAAI,GAAA,CAAI,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW,OAAO,mBAAA,CAAoB,GAAA,EAAK,GAAA,CAAI,GAAA,CAAI,QAAA,EAAU,EAAC,EAAG,cAAc,CAAA;AACxG,EAAA,MAAM,SAAA,GAAY,IAAI,GAAA,CAAI,MAAA;AAC1B,EAAA,IAAI,SAAA,KAAc,QAAW,MAAM,IAAI,qBAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,sDAAA,CAAwD,CAAA;AAC/H,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,GAAA,EAAK,SAAA,EAAW,YAAY,CAAA;AACvD,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,IAAU,gBAAA,EAAiB;AAClD,EAAA,MAAM,GAAA,GAAM,SAAA,CAAU,GAAA,EAAK,MAAA,EAAQ,QAAQ,QAAQ,CAAA;AACnD,EAAA,MAAM,UAAA,GAAaA,KAAAA,CAAK,GAAA,EAAK,cAAc,CAAA;AAC3C,EAAA,MAAM,QAAA,GAAwC,UAAA,CAAW,UAAU,CAAA,GAAK,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,UAAA,EAAY,MAAM,CAAC,CAAA,GAAoC,EAAC;AACxJ,EAAA,MAAM,UAAuC,EAAC;AAC9C,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,MAAM,gBAA0B,EAAC;AACjC,EAAA,MAAM,WAAW,kBAAA,CAAmB,MAAA,EAAQ,OAAO,CAAA,CAAE,OAAO,CAAC,IAAA,KAASC,SAAAA,CAAS,MAAA,EAAQ,IAAI,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,QAAA,CAAS,SAAS,CAAC,CAAA;AAC3H,EAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,GAAG,kBAAA,CAAmB,QAAQ,OAAO,CAAA,EAAG,GAAG,QAAQ,CAAA,EAAG;AACxE,IAAA,MAAM,GAAA,GAAMA,SAAAA,CAAS,MAAA,EAAQ,IAAI,CAAA;AACjC,IAAA,MAAM,EAAE,OAAA,EAAS,IAAA,EAAK,GAAI,SAAS,IAAI,CAAA;AACvC,IAAA,MAAM,MAAA,GAAS,SAAS,GAAG,CAAA;AAE3B,IAAA,MAAM,SACJ,MAAA,IAAU,MAAA,CAAO,YAAY,OAAA,IAAW,MAAA,CAAO,SAAS,IAAA,GAAO,MAAA,CAAO,SAAS,UAAA,CAAW,QAAQ,EAAE,MAAA,CAAO,YAAA,CAAa,IAAI,CAAC,CAAA,CAAE,OAAO,KAAK,CAAA;AAC7I,IAAA,OAAA,CAAQ,GAAG,CAAA,GAAI,EAAE,MAAA,EAAQ,SAAS,IAAA,EAAK;AACvC,IAAA,IAAI,MAAA,EAAQ,MAAA,KAAW,MAAA,IAAU,UAAA,CAAWD,KAAAA,CAAK,KAAK,UAAA,CAAW,GAAG,CAAC,CAAC,CAAA,EAAG;AACzE,IAAA,IAAI,IAAI,QAAA,CAAS,OAAO,CAAA,EAAG,KAAA,CAAM,KAAK,IAAI,CAAA;AAAA,SACrC,aAAA,CAAc,KAAK,IAAI,CAAA;AAAA,EAC9B;AACA,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,GAAA;AAC/B,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,KAAK,KAAA,EAAO;AAC5C,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,IAAI,KAAK,CAAA;AACtC,IAAA,MAAM,MAAuB,gBAAA,CAAA,SAAA,CAAU,MAAA,EAAQ,CAAC,OAAA,EAAS,GAAG,KAAK,CAAA,EAAG,EAAE,GAAA,EAAK,GAAA,CAAI,MAAM,QAAA,EAAU,MAAA,EAAQ,WAAW,IAAA,GAAO,IAAA,GAAO,MAAM,CAAA;AACtI,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,CAAA,EAAG,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,wBAAA,EAA2B,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AACvG,IAAA,KAAA,MAAW,IAAA,IAAQ,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAK,KAAM,EAAE,CAAA,EAAG;AACxE,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC/B,MAAA,IAAI,OAAA,CAAQ,KAAA,KAAU,MAAA,IAAa,OAAA,CAAQ,QAAQ,MAAA,EAAW;AAC5D,QAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,EAAA,EAAK,OAAA,CAAQ,IAAI,CAAA,iBAAA,EAAoB,OAAA,CAAQ,KAAA,IAAS,YAAY,CAAA,CAAE,CAAA;AAAA,MAChH;AACA,MAAA,MAAM,MAAA,GAASA,MAAK,GAAA,EAAK,UAAA,CAAWC,UAAS,MAAA,EAAQ,OAAA,CAAQ,IAAI,CAAC,CAAC,CAAA;AACnE,MAAA,SAAA,CAAU,QAAQ,MAAM,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,MAAA,MAAM,IAAA,GAAO,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,QAAQ,GAAG,CAAA,IAAA,CAAA;AACrC,MAAA,aAAA,CAAc,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAA,CAAQ,GAAG,CAAC,CAAA;AAC/C,MAAA,UAAA,CAAW,MAAM,MAAM,CAAA;AAAA,IACzB;AAAA,EACF;AACA,EAAA,KAAA,MAAW,QAAQ,aAAA,EAAe;AAChC,IAAA,MAAM,SAASD,KAAAA,CAAK,GAAA,EAAKC,SAAAA,CAAS,MAAA,EAAQ,IAAI,CAAC,CAAA;AAC/C,IAAA,SAAA,CAAU,QAAQ,MAAM,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,IAAA,YAAA,CAAa,MAAM,MAAM,CAAA;AAAA,EAC3B;AACA,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA,EAAG;AACvC,IAAA,IAAI,EAAE,GAAA,IAAO,OAAA,CAAA,EAAU,MAAA,CAAOD,KAAAA,CAAK,GAAA,EAAK,UAAA,CAAW,GAAG,CAAC,CAAA,EAAG,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,EAC3E;AACA,EAAA,SAAA,CAAU,GAAA,EAAK,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AAClC,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AACrC,EAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,IAAK,aAAA,CAAc,MAAA,GAAS,CAAA,IAAK,MAAA,KAAW,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAA,EAAG,aAAA,CAAc,YAAY,MAAM,CAAA;AACzH,EAAA,OAAO,GAAA;AACT;AAOO,SAAS,oBAAA,CAAqB,GAAA,EAAsB,OAAA,GAA8B,EAAC,EAAwB;AAChH,EAAA,MAAM,IAAA,GAAO,mBAAA,CAAoB,GAAA,EAAK,OAAO,CAAA;AAC7C,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAoB;AACtC,EAAA,MAAM,IAAA,GAAO,CAAC,GAAA,KAAsB;AAClC,IAAA,KAAA,MAAW,SAAgB,MAAA,CAAA,WAAA,CAAY,GAAA,EAAK,EAAE,aAAA,EAAe,IAAA,EAAM,CAAA,EAAG;AACpE,MAAA,MAAM,IAAA,GAAgB,QAAA,CAAA,IAAA,CAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAC1C,MAAA,IAAI,KAAA,CAAM,WAAA,EAAY,EAAG,IAAA,CAAK,IAAI,CAAA;AAAA,WAAA,IACzB,MAAM,MAAA,EAAO,IAAK,MAAM,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA,EAAG;AACtD,QAAA,MAAM,OAAO,KAAA,CAAM,IAAA,CAAK,MAAM,CAAA,EAAG,CAAC,OAAO,MAAM,CAAA;AAC/C,QAAA,MAAM,IAAA,GAAO,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAC3B,QAAA,IAAI,SAAS,MAAA,EAAW;AACtB,UAAA,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,yBAAyB,IAAI,CAAA,GAAA,EAAe,QAAA,CAAA,QAAA,CAAS,IAAA,EAAM,IAAI,CAAC,CAAA,KAAA,EAAiB,kBAAS,IAAA,EAAM,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,QACnJ;AACA,QAAA,KAAA,CAAM,GAAA,CAAI,MAAM,IAAI,CAAA;AAAA,MACtB;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,IAAA,CAAK,IAAI,CAAA;AACT,EAAA,OAAO,KAAA;AACT;AAOA,SAAS,UAAU,GAAA,EAAuB;AACxC,EAAA,IAAI,CAAC,UAAA,CAAW,GAAG,CAAA,SAAU,EAAC;AAC9B,EAAA,MAAM,MAAgB,EAAC;AACvB,EAAA,KAAA,MAAW,SAASD,YAAAA,CAAY,GAAA,EAAK,EAAE,aAAA,EAAe,IAAA,EAAM,CAAA,EAAG;AAC7D,IAAA,IAAI,KAAA,CAAM,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,IAAA,GAAOC,KAAAA,CAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AACjC,IAAA,IAAI,KAAA,CAAM,aAAY,EAAG,GAAA,CAAI,KAAK,GAAG,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,SAC/C,GAAA,CAAI,KAAK,IAAI,CAAA;AAAA,EACpB;AACA,EAAA,OAAO,IAAI,IAAA,EAAK;AAClB;AAYO,SAAS,mBAAA,CAAoB,GAAA,EAAsB,OAAA,GAA8B,EAAC,EAA4B;AACnH,EAAA,IAAI,GAAA,CAAI,GAAA,CAAI,QAAA,KAAa,MAAA,EAAW;AAClC,IAAA,MAAM,IAAI,qBAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,qCAAA,EAAwC,GAAA,CAAI,GAAA,CAAI,QAAQ,CAAA,4CAAA,CAAyC,CAAA;AAAA,EAC7I;AACA,EAAA,MAAM,SAAA,GAAY,IAAI,GAAA,CAAI,MAAA;AAC1B,EAAA,IAAI,SAAA,KAAc,QAAW,MAAM,IAAI,qBAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,4BAAA,CAA8B,CAAA;AACrG,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,IAAU,gBAAA,EAAiB;AAClD,EAAA,MAAM,SAAS,mBAAA,CAAoB,GAAA,EAAK,EAAE,GAAG,OAAA,EAAS,QAAQ,CAAA;AAC9D,EAAA,MAAM,SAAA,GAAY,QAAQ,MAAA,IAAU,oBAAA;AACpC,EAAA,MAAM,MAAA,GAASA,KAAAA,CAAK,GAAA,CAAI,IAAA,EAAM,SAAS,CAAA;AACvC,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,GAAA,EAAK,SAAA,EAAW,YAAY,CAAA;AACvD,EAAA,KAAA,MAAW,IAAA,IAAQ,SAAA,CAAU,MAAM,CAAA,EAAG;AACpC,IAAA,MAAM,GAAA,GAAMC,SAAAA,CAAS,MAAA,EAAQ,IAAI,CAAA;AACjC,IAAA,MAAM,IAAA,GAAOD,KAAAA,CAAK,MAAA,EAAQ,GAAG,CAAA;AAC7B,IAAA,SAAA,CAAU,QAAQ,IAAI,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC5C,IAAA,YAAA,CAAa,MAAM,IAAI,CAAA;AACvB,IAAA,IAAI,CAAC,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,UAAU,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,IAAA,EAAM,MAAM,CAAC,CAAA;AACrD,IAAA,IAAI,QAAQ,OAAA,KAAY,MAAA,IAAa,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EAAG;AACnE,IAAA,MAAM,OAAOA,KAAAA,CAAK,MAAA,EAAQ,IAAI,OAAA,CAAQ,QAAA,EAAU,OAAO,CAAC,CAAA;AACxD,IAAA,MAAM,GAAA,GAAuB,2BAAU,MAAA,EAAQ,CAAC,QAAQ,KAAA,EAAO,IAAA,EAAM,YAAY,IAAI,CAAA,EAAG,EAAE,GAAA,EAAK,GAAA,CAAI,MAAM,QAAA,EAAU,MAAA,EAAQ,WAAW,IAAA,GAAO,IAAA,GAAO,MAAM,CAAA;AAC1J,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,CAAA,EAAG,MAAM,IAAI,oBAAA,CAAqB,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,iBAAA,EAAoB,GAAG,CAAA,WAAA,EAAc,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,EACnH;AACA,EAAA,OAAO,EAAE,GAAG,GAAA,CAAI,GAAA,EAAK,UAAU,SAAA,EAAU;AAC3C","file":"chunk-X4SC7FGF.js","sourcesContent":["/**\n * The `orb` block a behavior package declares in its `package.json`\n * (`docs/Almadar_Behavior_Packages.md` §3) and the one resolver for the files it\n * declares. Readers resolve sidecars through these declared paths, never through\n * a hardcoded package layout. TS mirror of `orbital_core::behavior_packages`.\n *\n * Node-only (reads `package.json` with `node:fs`): exported from the\n * `@almadar/core/behavior-package` subpath only, never the main entry, so browser\n * bundles never pull in `node:fs` (the `@almadar/core/fixtures` precedent).\n *\n * @packageDocumentation\n */\n// Namespace imports: a browser bundle that reaches this Node-only module through a\n// dynamic import (the runtime's external loader) can still link it against the\n// bundler's empty builtin stubs — named imports would fail to bind.\nimport * as nodeCrypto from 'node:crypto';\nimport * as nodeChildProcess from 'node:child_process';\nimport * as nodeFs from 'node:fs';\nimport * as nodeModule from 'node:module';\nimport * as nodeOs from 'node:os';\nimport * as nodePath from 'node:path';\nimport { z } from 'zod';\n\nconst { createHash } = nodeCrypto;\nconst { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } = nodeFs;\nconst { createRequire } = nodeModule;\nconst { homedir } = nodeOs;\nconst { dirname, isAbsolute, join, relative, resolve, sep } = nodePath;\n\nexport const BehaviorPackageOrbBlockSchema = z\n  .object({\n  prefix: z.string().min(1),\n  /** A materialized tree of lowered `.orb` programs (a published package). */\n  registry: z.string().min(1).optional(),\n  /** The `.lolo` sources, lowered on read when no `registry` is declared (a workspace package). */\n  source: z.string().min(1).optional(),\n  vectors: z.string().min(1).optional(),\n  compiler: z.string().min(1),\n  })\n  .refine((orb) => orb.registry !== undefined || orb.source !== undefined, {\n    message: 'declares neither `registry` (materialized) nor `source` (live)',\n  });\n\nexport type BehaviorPackageOrbBlock = z.infer<typeof BehaviorPackageOrbBlockSchema>;\n\nconst PackageManifestSchema = z.object({\n  name: z.string().default(''),\n  version: z.string().default(''),\n  orb: BehaviorPackageOrbBlockSchema.optional(),\n});\n\n/** `sidecars.lock.json` — package-relative paths whose content lives in the sidecar store (§13). */\nexport const SidecarLockSchema = z.object({\n  version: z.literal(1),\n  files: z.record(\n    z.string(),\n    z.object({\n      sha256: z.string().regex(/^[0-9a-f]{64}$/),\n      bytes: z.number().int().nonnegative(),\n      url: z.string().url(),\n    }),\n  ),\n});\n\nexport type SidecarLock = z.infer<typeof SidecarLockSchema>;\nexport type SidecarLockEntry = SidecarLock['files'][string];\n\nexport type DeclaredFileKey = 'vectors';\n\nexport interface BehaviorPackage {\n  name: string;\n  version: string;\n  root: string;\n  orb: BehaviorPackageOrbBlock;\n  /** The package's `sidecars.lock.json`, or `null` when it ships none. */\n  lock: SidecarLock | null;\n}\n\n/** Fetches a lock entry's url and returns its (decoded) bytes. Injected in tests. */\nexport type SidecarFetch = (url: string) => Promise<Uint8Array>;\n\nexport interface SidecarOptions {\n  /** Default: `ALMADAR_SIDECAR_CACHE`, else `~/.almadar/sidecars`. */\n  cacheDir?: string;\n  fetch?: SidecarFetch;\n}\n\nexport class BehaviorPackageError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'BehaviorPackageError';\n  }\n}\n\n/** Read the behavior package rooted at `root`; refuses a `package.json` with no `orb` block. */\nexport function readBehaviorPackage(root: string): BehaviorPackage {\n  const manifest = join(root, 'package.json');\n  const result = PackageManifestSchema.safeParse(JSON.parse(readFileSync(manifest, 'utf8')));\n  if (!result.success) {\n    throw new BehaviorPackageError(`${manifest}: malformed \\`orb\\` block — ${result.error.message}`);\n  }\n  const { name, version, orb } = result.data;\n  if (!orb) {\n    throw new BehaviorPackageError(`${manifest} declares no \\`orb\\` block — not a behavior package`);\n  }\n  return { name, version, root, orb, lock: readSidecarLock(root) };\n}\n\n/** Runtime sidecars: shipped, resolved on demand. */\nexport const SIDECAR_LOCK_FILE = 'sidecars.lock.json';\n/** Build inputs: committed, not shipped; restored into the package before a build. */\nexport const BUILD_INPUTS_LOCK_FILE = 'build-inputs.lock.json';\n\n/** Read a package lock file (`SIDECAR_LOCK_FILE` or `BUILD_INPUTS_LOCK_FILE`); `null` when the package has none. */\nexport function readLockFile(root: string, lockFile: string = SIDECAR_LOCK_FILE): SidecarLock | null {\n  const lockPath = join(root, lockFile);\n  if (!existsSync(lockPath)) return null;\n  const result = SidecarLockSchema.safeParse(JSON.parse(readFileSync(lockPath, 'utf8')));\n  if (!result.success) {\n    throw new BehaviorPackageError(`${lockPath}: malformed ${lockFile} — ${result.error.message}`);\n  }\n  return result.data;\n}\n\nfunction readSidecarLock(root: string): SidecarLock | null {\n  return readLockFile(root, SIDECAR_LOCK_FILE);\n}\n\nexport function sidecarCacheDir(): string {\n  return process.env['ALMADAR_SIDECAR_CACHE'] || join(homedir(), '.almadar', 'sidecars');\n}\n\nconst defaultFetch: SidecarFetch = async (url) => {\n  const response = await fetch(url);\n  if (!response.ok) throw new Error(`HTTP ${response.status}`);\n  return new Uint8Array(await response.arrayBuffer());\n};\n\nfunction urlHost(url: string): string {\n  return new URL(url).host;\n}\n\nfunction hashMismatch(pkg: Pick<BehaviorPackage, 'name' | 'version'>, relPath: string, entry: SidecarLockEntry, detail: string): BehaviorPackageError {\n  return new BehaviorPackageError(\n    `ORB_SIDECAR_HASH_MISMATCH: ${pkg.name}@${pkg.version} ${relPath} — expected sha256 ${entry.sha256} (${entry.bytes} bytes), ${detail}`,\n  );\n}\n\nfunction packageFile(pkg: BehaviorPackage, relPath: string, label: string): string {\n  const absolute = resolve(pkg.root, relPath);\n  const rel = relative(pkg.root, absolute);\n  if (rel.startsWith('..') || isAbsolute(rel)) {\n    throw new BehaviorPackageError(`${pkg.name}: ${label} = \"${relPath}\" points outside the package`);\n  }\n  if (!existsSync(absolute)) {\n    throw new BehaviorPackageError(`${pkg.name}@${pkg.version}: ${label} declares \"${relPath}\", which is not in the package`);\n  }\n  return absolute;\n}\n\n/**\n * Sync resolution of a declared path (§13 rule): a lock-declared path resolves to its cache\n * file and fails with ORB_SIDECAR_NOT_CACHED when absent; any other path is read from the package.\n */\nexport function resolveDeclaredPath(pkg: BehaviorPackage, relPath: string, options: SidecarOptions = {}, label = 'declared path'): string {\n  const entry = pkg.lock?.files[relPath];\n  if (!entry) return packageFile(pkg, relPath, label);\n  const cached = join(options.cacheDir ?? sidecarCacheDir(), entry.sha256);\n  if (!existsSync(cached)) {\n    throw new BehaviorPackageError(\n      `ORB_SIDECAR_NOT_CACHED: ${pkg.name}@${pkg.version} ${relPath} (sha256 ${entry.sha256}) is not in the sidecar cache — resolve it with ensureDeclaredPath or \\`npx @almadar/db sidecars pull\\``,\n    );\n  }\n  if (statSync(cached).size !== entry.bytes) throw hashMismatch(pkg, relPath, entry, `cached file has ${statSync(cached).size} bytes`);\n  return cached;\n}\n\n/** Ensures one lock entry is in the cache (downloading and verifying it on a miss) and returns the cache file. */\nexport async function ensureLockEntry(\n  pkg: Pick<BehaviorPackage, 'name' | 'version'>,\n  relPath: string,\n  entry: SidecarLockEntry,\n  options: SidecarOptions = {},\n): Promise<string> {\n  const cacheDir = options.cacheDir ?? sidecarCacheDir();\n  const cached = join(cacheDir, entry.sha256);\n  if (existsSync(cached)) {\n    if (statSync(cached).size !== entry.bytes) throw hashMismatch(pkg, relPath, entry, `cached file has ${statSync(cached).size} bytes`);\n    return cached;\n  }\n  let bytes: Uint8Array;\n  try {\n    bytes = await (options.fetch ?? defaultFetch)(entry.url);\n  } catch (error) {\n    throw new BehaviorPackageError(\n      `ORB_SIDECAR_FETCH_FAILED: ${pkg.name}@${pkg.version} ${relPath} (sha256 ${entry.sha256}) from ${urlHost(entry.url)} — ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n  const actual = createHash('sha256').update(bytes).digest('hex');\n  if (actual !== entry.sha256 || bytes.byteLength !== entry.bytes) {\n    throw hashMismatch(pkg, relPath, entry, `downloaded ${bytes.byteLength} bytes with sha256 ${actual}`);\n  }\n  mkdirSync(cacheDir, { recursive: true });\n  const temp = `${cached}.${process.pid}.tmp`;\n  writeFileSync(temp, bytes);\n  renameSync(temp, cached);\n  return cached;\n}\n\n/** Async resolution of a declared path: a lock-declared path is downloaded and verified into the cache on a miss. */\nexport async function ensureDeclaredPath(pkg: BehaviorPackage, relPath: string, options: SidecarOptions = {}): Promise<string> {\n  const entry = pkg.lock?.files[relPath];\n  if (!entry) return packageFile(pkg, relPath, 'declared path');\n  return ensureLockEntry(pkg, relPath, entry, options);\n}\n\n/** The user store (`~/.orb`): the last rung of discovery, after every ancestor `node_modules`. */\nexport function userStoreDir(): string {\n  return join(homedir(), '.orb');\n}\n\n/** The `orb` fields only a behavior package declares (`@almadar/core`'s language block is not one). */\nconst BEHAVIOR_BLOCK_FIELDS = ['prefix', 'registry', 'source'];\n\nfunction packageDirs(nodeModules: string): string[] {\n  if (!existsSync(nodeModules)) return [];\n  const out: Array<[string, string]> = [];\n  for (const entry of readdirSync(nodeModules)) {\n    const path = join(nodeModules, entry);\n    if (entry.startsWith('@')) {\n      if (!existsSync(path) || !statSync(path).isDirectory()) continue;\n      for (const sub of readdirSync(path)) out.push([`${entry}/${sub}`, join(path, sub)]);\n    } else {\n      out.push([entry, path]);\n    }\n  }\n  return out.sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0)).map(([, path]) => path);\n}\n\nfunction isBehaviorManifest(manifestPath: string): boolean {\n  const manifest = JSON.parse(readFileSync(manifestPath, 'utf8')) as { orb?: Record<string, object> | null };\n  const orb = manifest.orb;\n  return orb !== undefined && orb !== null && typeof orb === 'object' && BEHAVIOR_BLOCK_FIELDS.some((field) => field in orb);\n}\n\n/**\n * Every installed package directory, the node-style rule `orb` uses\n * (`orbital-core` `behavior_packages`): each ancestor `node_modules` of\n * `startDir`, nearest first, then the user store's; scoped and unscoped; only\n * directories holding a `package.json`. Real paths; a package name may repeat\n * across rungs (callers keep the nearest).\n */\nexport function installedPackageDirs(startDir: string, userStore: string = userStoreDir()): string[] {\n  const rungs: string[] = [];\n  for (let dir = resolve(startDir); ; dir = dirname(dir)) {\n    rungs.push(join(dir, 'node_modules'));\n    if (dirname(dir) === dir) break;\n  }\n  rungs.push(join(userStore, 'node_modules'));\n  const out: string[] = [];\n  for (const nodeModules of rungs) {\n    for (const dir of packageDirs(nodeModules)) {\n      if (!existsSync(join(dir, 'package.json')) || !statSync(dir).isDirectory()) continue;\n      out.push(realpathSync(dir));\n    }\n  }\n  return out;\n}\n\n/**\n * Every installed behavior package, the same rule as `orb`\n * (`orbital-core` `behavior_packages::discover`): every package\n * ({@link installedPackageDirs}) whose `package.json` carries a behavior `orb`\n * block; nearest wins per name; two packages claiming one prefix is an error.\n */\nexport function discoverBehaviorPackages(startDir: string, userStore: string = userStoreDir()): BehaviorPackage[] {\n  const found: BehaviorPackage[] = [];\n  const seen = new Set<string>();\n  for (const dir of installedPackageDirs(startDir, userStore)) {\n    if (!isBehaviorManifest(join(dir, 'package.json'))) continue;\n    const pkg = readBehaviorPackage(dir);\n    if (seen.has(pkg.name)) continue;\n    seen.add(pkg.name);\n    found.push(pkg);\n  }\n  const byPrefix = new Map<string, BehaviorPackage>();\n  for (const pkg of found) {\n    const other = byPrefix.get(pkg.orb.prefix);\n    if (other && other.name !== pkg.name) {\n      throw new BehaviorPackageError(`prefix \\`${pkg.orb.prefix}\\` is claimed by ${other.name} (${other.root}) and ${pkg.name} (${pkg.root})`);\n    }\n    byPrefix.set(pkg.orb.prefix, pkg);\n  }\n  return found;\n}\n\n/** Resolve an installed behavior package by name, node-style, from `fromDir`. */\nexport function findInstalledBehaviorPackage(name: string, fromDir: string): BehaviorPackage {\n  const req = createRequire(join(resolve(fromDir), 'noop.js'));\n  return readBehaviorPackage(dirname(req.resolve(`${name}/package.json`)));\n}\n\n/** The absolute path of a file (or the registry directory) the package declares. Fails when it is missing. */\nexport function resolveDeclaredFile(pkg: BehaviorPackage, key: DeclaredFileKey, options: SidecarOptions = {}): string {\n  const declared = pkg.orb[key];\n  if (declared === undefined) {\n    throw new BehaviorPackageError(`${pkg.name}@${pkg.version}: orb.${key} is not declared`);\n  }\n  return resolveDeclaredPath(pkg, declared, options, `orb.${key}`);\n}\n\n/** The `bin` entry of an installed `@almadar/orb` manifest: a string, or a map whose first entry is the CLI. */\nconst OrbPackageManifest = z.object({ bin: z.union([z.string(), z.record(z.string(), z.string())]).optional() });\n\n/**\n * The `orb` binary, the one rule every TS host uses (G-CROSS-261; the editor's language server too, G-EXTENSIONS-004),\n * from exactly two explicit sources: `ORB_BIN` (a set path must exist: it is refused by name, never skipped), else the\n * binary the `@almadar/orb` installed for `from` declares. Nothing on PATH, in `~/bin` or elsewhere is consulted.\n */\nexport function resolveOrbBinary(from: string = process.cwd()): string {\n  const configured = process.env['ORB_BIN'];\n  if (configured) {\n    if (!existsSync(configured)) throw new BehaviorPackageError(`ORB_BIN is set to ${configured}, which does not exist`);\n    return configured;\n  }\n  const installed = installedOrbBin(from);\n  if (installed !== undefined) return installed;\n  throw new BehaviorPackageError('no `orb` binary: set ORB_BIN or install @almadar/orb');\n}\n\n/** The CLI the nearest `node_modules/@almadar/orb` walking up from `from` declares in its manifest `bin`. */\nfunction installedOrbBin(from: string): string | undefined {\n  for (let dir = resolve(from); ; dir = dirname(dir)) {\n    const manifestPath = join(dir, 'node_modules', '@almadar', 'orb', 'package.json');\n    if (existsSync(manifestPath)) {\n      const parsed = OrbPackageManifest.safeParse(JSON.parse(readFileSync(manifestPath, 'utf8')));\n      const bin = !parsed.success || parsed.data.bin === undefined ? undefined : typeof parsed.data.bin === 'string' ? parsed.data.bin : Object.values(parsed.data.bin)[0];\n      const path = bin === undefined ? undefined : resolve(dirname(manifestPath), bin);\n      return path !== undefined && existsSync(path) ? path : undefined;\n    }\n    if (dirname(dir) === dir) return undefined;\n  }\n}\n\n/** Default: `ALMADAR_DERIVED_CACHE`, else `~/.almadar/derived`. */\nexport function derivedCacheDir(): string {\n  return process.env['ALMADAR_DERIVED_CACHE'] || join(homedir(), '.almadar', 'derived');\n}\n\nexport interface RegistryDirOptions {\n  orbBin?: string;\n  cacheDir?: string;\n  /** How many files one `orb lower` run takes. */\n  batch?: number;\n}\n\nconst fileHashes = new Map<string, string>();\n\n/** sha256 of a file's bytes, memoized by path, size and mtime. */\nfunction fileHash(path: string): string {\n  const stat = statSync(path);\n  const memo = `${path}\\0${stat.size}\\0${stat.mtimeMs}`;\n  const known = fileHashes.get(memo);\n  if (known) return known;\n  const hash = createHash('sha256').update(readFileSync(path)).digest('hex');\n  fileHashes.set(memo, hash);\n  return hash;\n}\n\n/**\n * What a lowering depends on besides the source: the `orb` binary's bytes (a\n * rebuilt binary keeps its version string) and the language data files the\n * `@almadar/core` that `orb` resolves from `pkgRoot` declares (`orbLanguage`,\n * same walk as `orb`: ancestor `node_modules`, then the user store).\n */\nfunction lowererKey(orbBin: string, pkgRoot: string): string {\n  const hash = createHash('sha256').update(fileHash(orbBin));\n  const rungs: string[] = [];\n  for (let dir = resolve(pkgRoot); ; dir = dirname(dir)) {\n    rungs.push(join(dir, 'node_modules'));\n    if (dirname(dir) === dir) break;\n  }\n  rungs.push(join(userStoreDir(), 'node_modules'));\n  const coreRoot = rungs.map((nm) => join(nm, '@almadar', 'core')).find((dir) => existsSync(join(dir, 'package.json')));\n  if (!coreRoot) return hash.update('\\0no-core').digest('hex');\n  const manifest = JSON.parse(readFileSync(join(coreRoot, 'package.json'), 'utf8')) as { orbLanguage?: Record<string, string> };\n  for (const [field, rel] of Object.entries(manifest.orbLanguage ?? {}).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) {\n    const path = join(coreRoot, rel);\n    if (field === 'compiler' || !existsSync(path) || !statSync(path).isFile()) continue;\n    hash.update(`\\0${field}\\0${fileHash(path)}`);\n  }\n  return hash.digest('hex');\n}\n\nfunction filesWithExtension(dir: string, extension: string): string[] {\n  if (!existsSync(dir)) return [];\n  const out: string[] = [];\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    const path = join(dir, entry.name);\n    if (entry.isDirectory()) out.push(...filesWithExtension(path, extension));\n    else if (entry.name.endsWith(extension)) out.push(path);\n  }\n  return out.sort();\n}\n\n/** A source file's path in the mirror: a `.lolo` becomes its lowered `.orb`; a message catalog keeps its path. */\nfunction mirrorPath(rel: string): string {\n  return rel.replace(/\\.lolo$/, '.orb');\n}\n\ninterface SourceStamp {\n  sha256: string;\n  mtimeMs: number;\n  size: number;\n}\n\ninterface LoweredLine {\n  path: string;\n  orb?: object;\n  error?: string;\n}\n\n/** Where a live package's mirror lives: keyed by its root and what lowers it ({@link lowererKey}). */\nfunction mirrorDir(pkg: BehaviorPackage, orbBin: string, cacheDir: string | undefined): string {\n  const key = createHash('sha256').update(`${resolve(pkg.root)}\\0${lowererKey(orbBin, pkg.root)}`).digest('hex').slice(0, 32);\n  return join(cacheDir ?? derivedCacheDir(), 'registry', key);\n}\n\n/**\n * Delete every live-package mirror under the derived cache except those of\n * `keep` (as the current `orb` keys them) — a new `orb` binary, new language data or a moved\n * checkout leaves the old ones behind. Returns the removed directories.\n * Explicit only: other checkouts share the cache, so nothing prunes on its own.\n */\nexport function pruneRegistryMirrors(keep: readonly BehaviorPackage[], options: RegistryDirOptions = {}): string[] {\n  const orbBin = options.orbBin ?? resolveOrbBinary();\n  const kept = new Set(keep.filter((pkg) => pkg.orb.registry === undefined).map((pkg) => mirrorDir(pkg, orbBin, options.cacheDir)));\n  const root = join(options.cacheDir ?? derivedCacheDir(), 'registry');\n  if (!existsSync(root)) return [];\n  const removed: string[] = [];\n  for (const entry of readdirSync(root, { withFileTypes: true })) {\n    const dir = join(root, entry.name);\n    if (!entry.isDirectory() || kept.has(dir)) continue;\n    rmSync(dir, { recursive: true, force: true });\n    removed.push(dir);\n  }\n  return removed.sort();\n}\n\n/**\n * The directory of lowered `.orb` programs for `pkg`. A declared `orb.registry`\n * (a published package) is that directory. A live package (`orb.source`, no\n * `registry`) gets a content-addressed mirror under `derivedCacheDir()`, keyed by\n * the package root, the `orb` binary and the installed language data: each `.lolo` whose content hash changed\n * since the last call is re-lowered with `orb lower`, a removed one is pruned, and\n * an unchanged one is never touched; each behavior's `locales/<locale>/<name>.json`\n * catalog is copied beside its program. Same tree layout as a materialized registry,\n * so every reader of `.orb` files works unchanged. A lowering error fails the call,\n * naming the file.\n */\n/**\n * The files a package authors its behaviors in, without lowering anything: a\n * live package's `.lolo` source tree, or a published package's declared registry\n * of `.orb` programs. For tools that read behavior text (a class scanner, a\n * file watcher); a reader of lowered programs uses {@link behaviorRegistryDir}.\n */\nexport function behaviorSourceTree(pkg: BehaviorPackage): { dir: string; extension: '.lolo' | '.orb' } {\n  if (pkg.orb.registry !== undefined) {\n    return { dir: resolveDeclaredPath(pkg, pkg.orb.registry, {}, 'orb.registry'), extension: '.orb' };\n  }\n  if (pkg.orb.source === undefined) throw new BehaviorPackageError(`${pkg.name}: declares neither \\`orb.registry\\` nor \\`orb.source\\``);\n  return { dir: packageFile(pkg, pkg.orb.source, 'orb.source'), extension: '.lolo' };\n}\n\nexport function behaviorRegistryDir(pkg: BehaviorPackage, options: RegistryDirOptions = {}): string {\n  if (pkg.orb.registry !== undefined) return resolveDeclaredPath(pkg, pkg.orb.registry, {}, 'orb.registry');\n  const sourceRel = pkg.orb.source;\n  if (sourceRel === undefined) throw new BehaviorPackageError(`${pkg.name}: declares neither \\`orb.registry\\` nor \\`orb.source\\``);\n  const source = packageFile(pkg, sourceRel, 'orb.source');\n  const orbBin = options.orbBin ?? resolveOrbBinary();\n  const out = mirrorDir(pkg, orbBin, options.cacheDir);\n  const hashesPath = join(out, '.hashes.json');\n  const previous: Record<string, SourceStamp> = existsSync(hashesPath) ? (JSON.parse(readFileSync(hashesPath, 'utf8')) as Record<string, SourceStamp>) : {};\n  const current: Record<string, SourceStamp> = {};\n  const stale: string[] = [];\n  const staleCatalogs: string[] = [];\n  const catalogs = filesWithExtension(source, '.json').filter((file) => relative(source, file).split(sep).includes('locales'));\n  for (const file of [...filesWithExtension(source, '.lolo'), ...catalogs]) {\n    const rel = relative(source, file);\n    const { mtimeMs, size } = statSync(file);\n    const before = previous[rel];\n    // Hash only a file whose stat moved: an unchanged tree costs one stat per file.\n    const sha256 =\n      before && before.mtimeMs === mtimeMs && before.size === size ? before.sha256 : createHash('sha256').update(readFileSync(file)).digest('hex');\n    current[rel] = { sha256, mtimeMs, size };\n    if (before?.sha256 === sha256 && existsSync(join(out, mirrorPath(rel)))) continue;\n    if (rel.endsWith('.lolo')) stale.push(file);\n    else staleCatalogs.push(file);\n  }\n  const batch = options.batch ?? 200;\n  for (let i = 0; i < stale.length; i += batch) {\n    const files = stale.slice(i, i + batch);\n    const run = nodeChildProcess.spawnSync(orbBin, ['lower', ...files], { cwd: pkg.root, encoding: 'utf8', maxBuffer: 1024 * 1024 * 1024 });\n    if (run.status !== 0) throw new BehaviorPackageError(`${pkg.name}: \\`orb lower\\` failed: ${run.stderr}`);\n    for (const line of run.stdout.split('\\n').filter((l) => l.trim() !== '')) {\n      const lowered = JSON.parse(line) as LoweredLine;\n      if (lowered.error !== undefined || lowered.orb === undefined) {\n        throw new BehaviorPackageError(`${pkg.name}: ${lowered.path} does not lower: ${lowered.error ?? 'no program'}`);\n      }\n      const target = join(out, mirrorPath(relative(source, lowered.path)));\n      mkdirSync(dirname(target), { recursive: true });\n      const temp = `${target}.${process.pid}.tmp`;\n      writeFileSync(temp, JSON.stringify(lowered.orb));\n      renameSync(temp, target);\n    }\n  }\n  for (const file of staleCatalogs) {\n    const target = join(out, relative(source, file));\n    mkdirSync(dirname(target), { recursive: true });\n    copyFileSync(file, target);\n  }\n  for (const rel of Object.keys(previous)) {\n    if (!(rel in current)) rmSync(join(out, mirrorPath(rel)), { force: true });\n  }\n  mkdirSync(out, { recursive: true });\n  const stamps = JSON.stringify(current);\n  if (stale.length > 0 || staleCatalogs.length > 0 || stamps !== JSON.stringify(previous)) writeFileSync(hashesPath, stamps);\n  return out;\n}\n\n/**\n * Every behavior program in the package's registry, by behavior name: each `.orb` under the\n * registry tree, named by its basename (the rule `orb` indexes by). Two programs with one name\n * are refused.\n */\nexport function behaviorProgramFiles(pkg: BehaviorPackage, options: RegistryDirOptions = {}): Map<string, string> {\n  const root = behaviorRegistryDir(pkg, options);\n  const files = new Map<string, string>();\n  const walk = (dir: string): void => {\n    for (const entry of nodeFs.readdirSync(dir, { withFileTypes: true })) {\n      const full = nodePath.join(dir, entry.name);\n      if (entry.isDirectory()) walk(full);\n      else if (entry.isFile() && entry.name.endsWith('.orb')) {\n        const name = entry.name.slice(0, -'.orb'.length);\n        const seen = files.get(name);\n        if (seen !== undefined) {\n          throw new BehaviorPackageError(`${pkg.name}: two programs named \"${name}\": ${nodePath.relative(root, seen)} and ${nodePath.relative(root, full)}`);\n        }\n        files.set(name, full);\n      }\n    }\n  };\n  walk(root);\n  return files;\n}\n\nexport interface MaterializeOptions extends RegistryDirOptions {\n  /** Package-relative directory the programs are written into. Default `behaviors/registry`. */\n  target?: string;\n}\n\nfunction treeFiles(dir: string): string[] {\n  if (!existsSync(dir)) return [];\n  const out: string[] = [];\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    if (entry.name.startsWith('.')) continue;\n    const path = join(dir, entry.name);\n    if (entry.isDirectory()) out.push(...treeFiles(path));\n    else out.push(path);\n  }\n  return out.sort();\n}\n\n/**\n * Publish-time materialization of a live package (`orb.source`, no\n * `orb.registry`): copies its lowered programs and their catalogs from\n * {@link behaviorRegistryDir} into `target` inside the package, re-emits each\n * program that declares `locales` through `orb emit orb --output` so its merged\n * `<stem>.<locale>.json` catalogs ship beside it, and returns the `orb` block the\n * published manifest declares (`registry` set, `source` kept). Files already in\n * `target` that are not programs are\n * left alone.\n */\nexport function materializeRegistry(pkg: BehaviorPackage, options: MaterializeOptions = {}): BehaviorPackageOrbBlock {\n  if (pkg.orb.registry !== undefined) {\n    throw new BehaviorPackageError(`${pkg.name}: already declares \\`orb.registry\\` (${pkg.orb.registry}) — only a live package is materialized`);\n  }\n  const sourceRel = pkg.orb.source;\n  if (sourceRel === undefined) throw new BehaviorPackageError(`${pkg.name}: declares no \\`orb.source\\``);\n  const orbBin = options.orbBin ?? resolveOrbBinary();\n  const mirror = behaviorRegistryDir(pkg, { ...options, orbBin });\n  const targetRel = options.target ?? 'behaviors/registry';\n  const target = join(pkg.root, targetRel);\n  const source = packageFile(pkg, sourceRel, 'orb.source');\n  for (const file of treeFiles(mirror)) {\n    const rel = relative(mirror, file);\n    const dest = join(target, rel);\n    mkdirSync(dirname(dest), { recursive: true });\n    copyFileSync(file, dest);\n    if (!rel.endsWith('.orb')) continue;\n    const program = JSON.parse(readFileSync(file, 'utf8')) as { locales?: string[] };\n    if (program.locales === undefined || program.locales.length === 0) continue;\n    const lolo = join(source, rel.replace(/\\.orb$/, '.lolo'));\n    const run = nodeChildProcess.spawnSync(orbBin, ['emit', 'orb', lolo, '--output', dest], { cwd: pkg.root, encoding: 'utf8', maxBuffer: 1024 * 1024 * 1024 });\n    if (run.status !== 0) throw new BehaviorPackageError(`${pkg.name}: \\`orb emit orb ${rel}\\` failed: ${run.stderr}`);\n  }\n  return { ...pkg.orb, registry: targetRel };\n}\n"]}

package/dist/entityAccess-BPSz1i2n.d.ts

@@ -1,80 +0,0 @@
-import { O as OrbitalEntity } from './effect-CiEVLsZz.js';
-import { O as OrbitalDefinition } from './orbital-CkFdDS9f.js';
-import { O as OrbitalSchema } from './schema-T5RT5s6H.js';
-import { S as SExpr } from './expression-D0Fs0riG.js';
-
-/**
- * Entity access policies — the declared `@read`/`@create`/`@update`/`@delete`
- * directives, keyed by entity name.
- *
- * The JS mirror of `orbital-core/src/runtime/entity_access.rs`'s
- * `EntityAccessPolicies`/`EntityAccessTable`. Both paths must agree: a
- * directive is a per-row predicate (`@entity` = the candidate row, or for
- * `@create` the incoming data; `@user` = the viewer), enforced once for
- * every trait that touches the entity — the un-bypassable twin of a
- * call-site `filter:`, which sibling traits can skip simply by not
- * declaring one.
- *
- * @packageDocumentation
- */
-
-/**
- * One orbital's own inline entity definitions: its primary entity plus any
- * auxiliaries an import brought along (`auxiliaryEntities` — a linkedEntity
- * naming an imported atom's own entity resolves here, not among any
- * orbital's primary entity alone). Skips unresolved `string`/`EntityCall`
- * refs — those are pre-inline-phase forms that never reach this by the time
- * a schema is served.
- */
-declare function orbitalInlineEntities(orbital: OrbitalDefinition): OrbitalEntity[];
-/** The orbital of `schema` that declares the entity `entityType` inline, when one does. */
-declare function entityOwnerOrbital(schema: OrbitalSchema, entityType: string): OrbitalDefinition | undefined;
-/** An entity's four declared directives. Any may be absent — an absent
- * directive means "no restriction" for that operation, exactly like an
- * absent fetch `filter:`. */
-interface EntityAccessPolicies {
-    read?: SExpr;
-    create?: SExpr;
-    update?: SExpr;
-    delete?: SExpr;
-}
-/**
- * Every entity's access policies, keyed by entity name.
- *
- * A policy governs the **collection**, not the declaration. A `persistent:`
- * collection is one table, and two entity declarations over one table cannot
- * honestly carry different visibility rules. Keying by entity name alone let an
- * organism declare `@read` on its own entity and still ship an ALLOW-ALL list
- * wherever a page rendered through a std-atom trait that fetched the ATOM's
- * entity on the same collection — measured on `std-customer-success`, where
- * `/health-scores` returned 6 rows for every persona while the organism's own
- * `/cs-accounts` correctly returned 3 vs 6. 36 of 54 app organisms share a
- * collection this way (`R-SHADOW-ENTITY-SHARES-COLLECTION-DIRECTIVES-DONT-APPLY`).
- *
- * So an entity that declares nothing adopts the policy declared on its
- * collection. This can only ever ADD a restriction: an entity with its own
- * directives keeps exactly those, and an entity whose collection carries no
- * declared policy is untouched. Conflicting declarations on one collection are
- * rejected at validate time by `ORB_S_COLLECTION_POLICY_CONFLICT`.
- *
- * Mirrors `resolve_collection_inheritance` in
- * `orbital-rust/crates/orbital-core/src/runtime/entity_access.rs`.
- */
-declare function entityAccessTable(schema: OrbitalSchema): Map<string, EntityAccessPolicies>;
-/** One entity's access policies, or `undefined` when it declares none. */
-declare function entityAccessPolicies(schema: OrbitalSchema, entityName: string): EntityAccessPolicies | undefined;
-/**
- * Access policies keyed the way the mock store keys its tables: the declared
- * `persistent:` collection, else the lowercased entity name. The mock
- * adapter's owner-restamp consults this map to decide whether a persona the
- * dev host switches to could have CREATED a row before re-pointing its owner
- * column — a reader persona must not inherit authorship of a draft just
- * because the demo store follows the viewer (the `@create` directive is the
- * single authority on who authors; no role heuristics here). First declared
- * policy per collection wins, the same collection-inheritance rule as
- * `entityAccessTable`.
- */
-declare function entityAccessPoliciesByStoreKey(schema: OrbitalSchema): Map<string, EntityAccessPolicies>;
-
-export { entityAccessPoliciesByStoreKey as a, entityAccessTable as b, entityOwnerOrbital as c, entityAccessPolicies as e, orbitalInlineEntities as o };
-export type { EntityAccessPolicies as E };

package/dist/mock/index.d.ts

@@ -1,153 +0,0 @@
-import { OrbitalEntity } from '../index.js';
-import { OrbitalDefinition } from '../index.js';
-import { OrbitalSchema } from '../index.js';
-import { SExpr } from '../index.js';
-export { E as EntityAccessPolicies, e as entityAccessPolicies, a as entityAccessPoliciesByStoreKey, b as entityAccessTable } from '../entityAccess-BPSz1i2n.js';
-import 'zod';
-import '../domain-Dz3jP-UM.js';
-
-/**
- * Owner columns derived from a program's `[identity]` entity.
- *
- * The JS mirror of `orbital-core/src/runtime/seed.rs`
- * (`identity_entity_name` / `owner_fields_from_schema`). Both paths must agree:
- * a column is an owner column because the source *declared* it as a relation to
- * the `[identity]` entity (`patientId : Person`), never because its name looks
- * like one — a name-matching guess would silently scope the wrong column.
- *
- * @packageDocumentation
- */
-
-/**
- * The `[identity]` entities that decide what `@user` resolves to, primaries
- * first then auxiliaries.
- *
- * A behavior declares its own roster so it runs standalone. Composing it never
- * imports that orbital, but a trait bound to one of its siblings drags the
- * roster in as an auxiliary copy, tag and all — so a PRIMARY roster shadows
- * every imported copy: the composing app decides who `@user` is. With no
- * primary roster the copies still count, which is what lets a thin app that
- * wraps one behavior inherit that behavior's roster.
- *
- * Compiled-path twin: `identity_entities` in
- * `orbital-compiler/src/phases/validation/identity/user_identity.rs` (L94-102).
- */
-declare function identityEntitiesOf(orbitals: readonly OrbitalDefinition[]): OrbitalEntity[];
-/**
- * The name of the schema's `[identity]` entity, if it declares one.
- *
- * Compiled-path twin: `identity_entities` in
- * `orbital-compiler/src/phases/validation/identity/user_identity.rs`.
- */
-declare function identityEntityName(schema: OrbitalSchema): string | undefined;
-/**
- * Every `[identity]`-tagged name, shadowed copies included.
- *
- * Owner-column derivation asks whether a relation targets *a* roster, not *the*
- * one: `Timesheet.employeeId : Employee` is an owner column whether or not
- * `Employee` won the `@user` binding. Dropping the shadowed names here would
- * leave an imported behavior's rows unscoped at runtime while the compiled path
- * treats the very same column as an owner column.
- *
- * Compiled-path twin: `identity_entity_names` in
- * `orbital-compiler/src/phases/validation/identity/user_identity.rs`.
- */
-declare function identityEntityNames(schema: OrbitalSchema): string[];
-/**
- * The declared vocabulary for an identity field, following `items` for the
- * array/map form. `roles : ["a" | "b"]` keeps the union on the ELEMENT, so a
- * multi-valued role field is read through `items` — one level, not recursive.
- *
- * Compiled-path twin: `vocabulary` in
- * `orbital-compiler/src/phases/validation/identity/user_identity.rs` (L125-134).
- */
-declare function roleVocabularyOf(entity: OrbitalEntity, field?: string): readonly string[] | undefined;
-/**
- * Every column `expr` compares to `@user.id` via direct equality — the
- * general form of "self-identity": `@entity.<field> == @user.id` (either
- * operand order, either spelling — see `fieldRefName`) names `field` as an
- * owner column, whether `field` is the row's OWN `id` (distinct from a
- * relation column like `@entity.managerId == @user.id`) or any other
- * declared field (the shape `ORB_S_OWNER_FIELD_NOT_IDENTITY_TYPED` flags as
- * an authoring error when it is neither — codegen still needs to seed it).
- * Recurses through `and`/`or`/`not`/any other combinator —
- * `std-time-tracking`'s `Employee [identity]` declares
- * `@read (or (= @user.role "approver") (= (object/get @entity id) @user.id))`,
- * and the self-access arm counts even though it isn't the whole policy.
- * Rust twin: `owner_columns_from_policy` in `orbital-core/src/runtime/seed.rs`.
- */
-declare function ownerColumnsFromPolicy(expr: SExpr, out?: string[]): string[];
-/**
- * Owner columns as `Entity.field` pairs — every NON-INTRINSIC relation field
- * pointing at an `[identity]`-tagged entity, shadowed imported rosters
- * included, PLUS `Entity.id` for an `[identity]` entity whose own declared
- * access policy compares its row directly to the viewer (self-identity), PLUS
- * any other column an entity's own declared `@read`/`@update`/`@delete`
- * compares to `@user.id` (see `ownerColumnsFromPolicy`). Empty when the
- * program declares no identity, which keeps every unmigrated app behaving
- * exactly as before.
- *
- * An `intrinsic: true` relation field is excluded even when it targets the
- * identity entity: intrinsic marks framework plumbing the owning trait
- * computes itself (`EntityField.intrinsic` doc, `types/field.ts`), never
- * domain ownership — a generic atom's self-relation (`ModalRecord.seedRow :
- * ModalRecord`, record-detail/modal edit-seed plumbing) gets its relation
- * target rewritten onto whatever entity the trait binds, so a self-identity
- * entity like `std-time-tracking`'s `Employee [identity]` ends up with an
- * `Employee.seedRow : Employee` self-relation that is structurally
- * indistinguishable from a real owner column by type/target alone. Stamping
- * it with the viewer id (as an owner column would be) creates a row that
- * references itself, which trips the entity's own `onDelete: restrict`.
- */
-declare function ownerFieldsFromSchema(schema: OrbitalSchema): string[];
-/**
- * Every literal an expression compares against `@user.<field>` (any field),
- * keyed by field name — the collecting counterpart of `orbital-compiler`'s
- * `validation::user_identity::check_comparison` (B4-R4; the two must stay
- * shape-identical, each cites the other): an equality node (`EQUALITY_OPS`)
- * or an `array/includes` node, walked transparently through `and`/`or`/`not`
- * and any other combinator (the Rust check runs on EVERY array node
- * regardless of what wraps it, so this does too).
- *
- * `array/includes` is directional, but the sigil can sit on EITHER side:
- * `(array/includes @user.roles "ghost")` checks a literal against a
- * multi-valued field's own vocabulary (field is the haystack, position 0);
- * the Stage-B orbital-import role rewrite (Rust `inline/rewrite.rs`
- * `rewrite_role_literals`, which `check_comparison` mirrors) instead
- * produces `(array/includes ["owner","project_manager"] @user.role)` — a
- * literal ARRAY haystack with the sigil as the needle, position 1 (found
- * live: Project Friday's imported `Timesheet.@delete` after `roles {
- * approver: [owner, project_manager] }`). So the sigil is located BY
- * CONTENT, never position: check position 0 first, fall back to position 1.
- * The OTHER side is then flattened to a literal list — a scalar (equality,
- * or an `array/includes` whose haystack is the sigil's own multi-valued
- * field) or, for the role-rewrite shape, every string element of a literal
- * array.
- *
- * A collected literal is a CANDIDATE a viewer might satisfy the expression
- * with, never a proof: a policy that ANDs the field check with an unrelated
- * condition can still reject a viewer carrying it. Callers that need
- * certainty re-check with the real evaluator (`checkMutationAccess` /
- * `evaluate`), the way any other synthesized dispatch is confirmed.
- */
-declare function collectUserFieldLiterals(expr: SExpr, out?: Map<string, Set<string>>): Map<string, Set<string>>;
-/**
- * A `@user.<field>` value that satisfies `policy`, chosen from the identity
- * entity's own declared vocabulary — never a guess: only a literal BOTH
- * (a) compared against `field` in an equality/`array/includes` node
- * somewhere in `policy` (see {@link collectUserFieldLiterals}) AND (b) a
- * declared member of `identity`'s `field` vocabulary (see
- * {@link roleVocabularyOf}) is a candidate. The pick is deterministic — the
- * first vocabulary value, in declaration order, that is also a candidate —
- * so two callers asking about the same policy always agree.
- *
- * `undefined` when `policy` is absent/`null` (no restriction — nothing to
- * satisfy), `field` carries no declared vocabulary on `identity`, or no
- * declared value appears anywhere in the policy. The last case is a genuine
- * finding for the CALLER to report, not a probe defect to paper over: the
- * policy structurally cannot be satisfied by any roster member, so forcing a
- * viewer past it would misreport an unreachable transition as reachable.
- */
-declare function roleSatisfyingPolicy(policy: SExpr | undefined, identity: OrbitalEntity, field?: string): string | undefined;
-
-export { collectUserFieldLiterals, identityEntitiesOf, identityEntityName, identityEntityNames, ownerColumnsFromPolicy, ownerFieldsFromSchema, roleSatisfyingPolicy, roleVocabularyOf };

package/dist/mock/index.js

@@ -1,190 +0,0 @@
-import { entityAccessPolicies, orbitalInlineEntities } from '../chunk-V5VNGRVU.js';
-export { entityAccessPolicies, entityAccessPoliciesByStoreKey, entityAccessTable } from '../chunk-V5VNGRVU.js';
-
-// src/mock/identityOwners.ts
-function inlineEntities(schema) {
-  return (schema.orbitals ?? []).flatMap(orbitalInlineEntities);
-}
-function identityEntitiesTaggedOf(orbitals) {
-  const out = [];
-  for (const orbital of orbitals) {
-    const ref = orbital.entity;
-    if (typeof ref === "object" && ref !== null && "fields" in ref && ref.identity === true) {
-      out.push({ def: ref, primary: true });
-    }
-  }
-  for (const orbital of orbitals) {
-    for (const ref of orbital.auxiliaryEntities ?? []) {
-      if (typeof ref === "object" && ref !== null && "fields" in ref && ref.identity === true) {
-        out.push({ def: ref, primary: false });
-      }
-    }
-  }
-  return out;
-}
-function identityEntitiesOf(orbitals) {
-  const tagged = identityEntitiesTaggedOf(orbitals);
-  const hasPrimary = tagged.some((e) => e.primary);
-  return tagged.filter((e) => e.primary || !hasPrimary).map((e) => e.def);
-}
-function identityEntityName(schema) {
-  return identityEntitiesOf(schema.orbitals ?? [])[0]?.name;
-}
-function identityEntityNames(schema) {
-  const out = [];
-  for (const { def } of identityEntitiesTaggedOf(schema.orbitals ?? [])) {
-    if (!out.includes(def.name)) out.push(def.name);
-  }
-  return out;
-}
-function roleVocabularyOf(entity, field = "role") {
-  const def = entity.fields.find((f) => f.name === field);
-  if (!def) return void 0;
-  return fieldVocabulary(def);
-}
-function fieldVocabulary(field) {
-  if ("values" in field && field.values && field.values.length > 0) {
-    return field.values;
-  }
-  if ("items" in field && field.items && "values" in field.items && field.items.values && field.items.values.length > 0) {
-    return field.items.values;
-  }
-  return void 0;
-}
-function fieldRefName(x, binding) {
-  if (typeof x === "string" && x.startsWith(`${binding}.`)) return x.slice(binding.length + 1);
-  if (Array.isArray(x) && x.length === 3 && x[0] === "object/get" && x[1] === binding && typeof x[2] === "string") {
-    return x[2];
-  }
-  return void 0;
-}
-function isFieldRef(x, binding, field) {
-  return fieldRefName(x, binding) === field;
-}
-var OWNER_EQ_OPS = ["=", "=="];
-function ownerColumnsFromPolicy(expr, out = []) {
-  if (Array.isArray(expr)) {
-    if (expr.length === 3) {
-      const [op, a, b] = expr;
-      if (typeof op === "string" && OWNER_EQ_OPS.includes(op)) {
-        const field = isFieldRef(b, "@user", "id") ? fieldRefName(a, "@entity") : isFieldRef(a, "@user", "id") ? fieldRefName(b, "@entity") : void 0;
-        if (field !== void 0 && !out.includes(field)) out.push(field);
-      }
-    }
-    for (const item of expr) ownerColumnsFromPolicy(item, out);
-  }
-  return out;
-}
-function policiesSelfIdentify(policies) {
-  if (policies === void 0) return false;
-  return [policies.read, policies.create, policies.update, policies.delete].some(
-    (expr) => expr !== void 0 && ownerColumnsFromPolicy(expr).includes("id")
-  );
-}
-function ownerFieldsFromSchema(schema) {
-  const identities = identityEntityNames(schema);
-  if (identities.length === 0) return [];
-  const out = [];
-  const defs = inlineEntities(schema);
-  const declaredByCollection = /* @__PURE__ */ new Map();
-  for (const def of defs) {
-    for (const field of def.fields ?? []) {
-      if (field.name && field.type === "relation" && !field.intrinsic && identities.includes(field.relation.entity)) {
-        out.push(`${def.name}.${field.name}`);
-        if (def.collection) {
-          const cols = declaredByCollection.get(def.collection) ?? [];
-          if (!cols.includes(field.name)) cols.push(field.name);
-          declaredByCollection.set(def.collection, cols);
-        }
-      }
-    }
-  }
-  for (const name of identities) {
-    if (policiesSelfIdentify(entityAccessPolicies(schema, name))) {
-      const key = `${name}.id`;
-      if (!out.includes(key)) out.push(key);
-    }
-  }
-  for (const def of defs) {
-    const policies = entityAccessPolicies(schema, def.name);
-    if (policies === void 0) continue;
-    for (const policy of [policies.read, policies.update, policies.delete]) {
-      if (policy === void 0) continue;
-      for (const field of ownerColumnsFromPolicy(policy)) {
-        const key = `${def.name}.${field}`;
-        if (!out.includes(key)) out.push(key);
-      }
-    }
-  }
-  for (const def of defs) {
-    const cols = def.collection ? declaredByCollection.get(def.collection) : void 0;
-    if (!cols) continue;
-    for (const col of cols) {
-      const key = `${def.name}.${col}`;
-      if (out.includes(key)) continue;
-      if ((def.fields ?? []).some((f) => f.name === col)) out.push(key);
-    }
-  }
-  return out;
-}
-var EQUALITY_OPS = ["=", "==", "!=", "!==", "eq", "neq"];
-function isUserFieldSigil(x) {
-  return typeof x === "string" && fieldRefName(x, "@user") !== void 0;
-}
-function literalHaystackMembers(items) {
-  const isListCall = items[0] === "list";
-  const members = isListCall ? items.slice(1) : items;
-  return members.every((v) => typeof v === "string") ? [...members] : void 0;
-}
-function collectUserFieldLiterals(expr, out = /* @__PURE__ */ new Map()) {
-  if (Array.isArray(expr)) {
-    const [op, ...args] = expr;
-    if (typeof op === "string" && args.length >= 2 && (EQUALITY_OPS.includes(op) || op === "array/includes")) {
-      const isIncludes = op === "array/includes";
-      let sigilSide;
-      let literalSide;
-      if (isIncludes) {
-        if (isUserFieldSigil(args[0])) {
-          sigilSide = args.slice(0, 1);
-          literalSide = args.slice(1, 2);
-        } else {
-          sigilSide = args.slice(1, 2);
-          literalSide = args.slice(0, 1);
-        }
-      } else {
-        sigilSide = args;
-        literalSide = args;
-      }
-      const field = sigilSide.map((arg) => fieldRefName(arg, "@user")).find((f) => f !== void 0);
-      if (field !== void 0) {
-        const literalArrayHaystack = literalSide[0];
-        const literals = isIncludes && Array.isArray(literalArrayHaystack) ? literalHaystackMembers(literalArrayHaystack) ?? [] : literalSide;
-        for (const literal of literals) {
-          if (typeof literal === "string" && !literal.startsWith("@")) {
-            const set = out.get(field) ?? /* @__PURE__ */ new Set();
-            set.add(literal);
-            out.set(field, set);
-          }
-        }
-      }
-    }
-    for (const item of expr) collectUserFieldLiterals(item, out);
-    return out;
-  }
-  if (expr !== null && typeof expr === "object") {
-    for (const value of Object.values(expr)) collectUserFieldLiterals(value, out);
-  }
-  return out;
-}
-function roleSatisfyingPolicy(policy, identity, field = "role") {
-  if (policy === void 0 || policy === null) return void 0;
-  const vocab = roleVocabularyOf(identity, field);
-  if (vocab === void 0) return void 0;
-  const accepted = collectUserFieldLiterals(policy).get(field);
-  if (accepted === void 0) return void 0;
-  return vocab.find((value) => accepted.has(value));
-}
-
-export { collectUserFieldLiterals, identityEntitiesOf, identityEntityName, identityEntityNames, ownerColumnsFromPolicy, ownerFieldsFromSchema, roleSatisfyingPolicy, roleVocabularyOf };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map