@apexops/capabilities 0.10.0-next.4 → 0.11.0-next.0

package/dist/governance-baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-baseline.js","sourceRoot":"","sources":["../src/governance-baseline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAgC,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC3B,IAAI;IAAzB,YAAqB,IAAiC;QACpD,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;oBAD5B,IAAI;QAEvB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AA2ED,MAAM,eAAe,GAAG,kEAAkE,CAAC;AAC3F,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC,SAAS,IAAI,CAAC,IAAI,GAAgC,eAAe;IAC/D,MAAM,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAC;IAChF,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,IAAI,EAAE,CAAC;IACnF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,IAAI,EAAE,CAAC;IACnF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAC/B,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,OAAO,CAAC,KAAK,GAAG,EAAE;YAAE,IAAI,EAAE,CAAC;QACjD,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,EAAE,CAAC;QACjF,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7G,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM;QAAE,IAAI,EAAE,CAAC;IAC9D,OAAO,KAAoC,CAAC;AAC9C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,CAAC,qGAAqG,CAAC,IAAI,CAAC,MAAM,CAAC;QAEnH,IAAI,EAAE,CAAC;IACT,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI;QAAE,IAAI,EAAE,CAAC;IAC1G,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAC7B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACrE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;aACnE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC;QACH,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,UAAU,GAAG,eAAe;YAAE,IAAI,EAAE,CAAC;QAC9E,MAAM,OAAO,GACX,KAAK,YAAY,UAAU;YACzB,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACzD,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAc,EAAE,EAAE;oBAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAAE,IAAI,EAAE,CAAC;oBACjE,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;QACX,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,eAAe;YAAE,IAAI,EAAE,CAAC;QACxF,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;YACxC,IAAI,KAAK,GAAG,EAAE;gBAAE,IAAI,EAAE,CAAC;YACvB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAChD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxF,CAAC;AAED,yGAAyG;AACzG,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAA,mDAAmD,CAAC;AAC3F,MAAM,wBAAwB,GAAG,IAAI,MAAM,CACzC,2DAA2D,oBAAoB,GAAG,EAClF,IAAI,CACL,CAAC;AACF,MAAM,uBAAuB,GAAG,IAAI,MAAM,CACxC,0DAA0D,oBAAoB,GAAG,EACjF,IAAI,CACL,CAAC;AAEF,SAAS,KAAK,CAAC,KAAc,EAAE,cAAsB;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChD,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,QAAQ,CAAC,CAAC,CAAC,KAAK,WAAW;QAC3B,QAAQ,CAAC,CAAC,CAAC,KAAK,sBAAsB;QACtC,QAAQ,CAAC,CAAC,CAAC,KAAK,kBAAkB;QAClC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAC1B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,eAAe,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,cAAc,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/G,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,gBAAgB,EAAE,CAAC;QAC1C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,WAAW,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3G,MAAM,IAAI,CAAC,CAAC;IACZ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9G,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,MAA+B;IACtD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,cAAc;QAAE,IAAI,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,cAAsB,EAAE,WAAW,GAAG,KAAK;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAwC,CAAC;IAC1E,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9G,IAAI,EAAE,CAAC;IACT,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAgD,CAAC;IAClG,IAAI,CAAC,CAAC,SAAS,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,IAAI,EAAE,CAAC;IACrF,SAAS,aAAa,CAAC,KAAc;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,WAAW;YAAE,IAAI,EAAE,CAAC;QAC9D,IAAI,UAAU,GAA4F,EAAE,CAAC;QAC7G,IAAI,WAAW,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YAC7D,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1E,IACE,WAAW;gBACX,CAAC,eAAe,CAAC,UAAU,CAAC,mDAAmD,CAAC;gBAChF,cAAc,CAAC,WAAW,EAAE,KAAK,eAAe;gBAChD,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,eAAe,GAAG,CAAC;gBAE/D,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACxD,IACE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,WAAW,EAAE;gBAC1F,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;gBACrC,CAAC,CAAC,CAAC,WAAW,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,kBAAkB,cAAc,GAAG,CAAC,CAAC;oBAC7F,cAAc,CAAC,WAAW,EAAE,KAAK,kBAAkB,cAAc,EAAE;oBACnE,CAAC,CAAC,qEAAqE,CAAC,IAAI,CAAC,cAAc,CAAC;wBAC1F,cAAc,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBAEvE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAChF,IAAI,SAAS,KAAK,IAAI;gBAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAC7C,UAAU,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;QACrE,CAAC;QACD,OAAO;YACL,GAAG,UAAU;YACb,QAAQ;YACR,4BAA4B,EAC1B,QAAQ,CAAC,4BAA4B,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YACtG,kBAAkB,EAAE,YAAY;SACjC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACrF,MAAM,kBAAkB,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,IACE,WAAW;QACX,CAAC,SAAS,KAAK,IAAI;YACjB,cAAc;gBACZ,CAAC,MAAM,KAAK,MAAM;oBAChB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;wBAChD,CAAC,CAAC,gBAAgB;wBAClB,CAAC,CAAC,eAAe,CAAC,CAAC;QAE3B,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,IACE,kBAAkB;QAClB,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,MAAM;QAEpG,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAChD,IACE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE;QACvF,CAAC,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAEvE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1B,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAChC,YAAY;QACZ,GAAG,CAAC,MAAM,CAAC,2BAA2B,KAAK,SAAS;YAClD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,2BAA2B,EAAE,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QACrG,GAAG,CAAC,MAAM,CAAC,qBAAqB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAEpE;aACF,CAAC;QACN,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QACtC,KAAK,EAAE,YAAY;QACnB,MAAM;QACN,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QACxD,cAAc;QACd,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;QAC7C,aAAa,EAAE,UAAU;QACzB,SAAS;QACT,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAAc,EACd,cAAsB,EACtB,IAA4B,EAC5B,GAAW,EACX,YAAqB;IAErB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,cAAc,KAAK,2BAA2B,IAAI,KAAK,CAAC,MAAM,KAAK,yBAAyB;QAAE,IAAI,EAAE,CAAC;IAC/G,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClD,IACE,KAAK,CAAC,gBAAgB,KAAK,UAAU;QACrC,QAAQ,CAAC,gBAAgB,KAAK,UAAU;QACxC,OAAO,IAAI,KAAK;QAChB,QAAQ,IAAI,KAAK;QACjB,OAAO,IAAI,QAAQ;QACnB,QAAQ,IAAI,QAAQ;QAEpB,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,KAAK,iCAAiC,CAAC;IACjF,IAAI,aAAa,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,WAAW;QAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7E,IACE,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,cAAc;QACtD,YAAY,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,cAAc;QAE9D,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1B,MAAM,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,YAAY;QAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE;QAAE,IAAI,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,YAAY,GAAG,qBAAqB,CAAC;IACvD,IAAI,GAAG,GAAG,YAAY,IAAI,CAAC,YAAY,IAAI,GAAG,IAAI,SAAS,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,QAAQ,CAAC,sBAAsB,CAAC;IAClD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,KAAK,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAE,IAAI,EAAE,CAAC;IAC7G,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChD,KAAK,MAAM,QAAQ,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACtF,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5B,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1C,8GAA8G;IAC9G,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC;QAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;IACvF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC9C,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,2BAA2B,IAAI,IAAI,CAAC,CAAC,CACpH,CAAC;IACF,IAAI,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5E,MAAM,eAAe,GAAG,IAAI,GAAG,EAAwD,CAAC;IACxF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS;YAAE,SAAS;QACjD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,eAAe;YAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5E,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7E,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC5B,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACrF,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;YACjG,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,eAAe,CAAC,UAAU,CAAC,CAAC;QAC5B,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;YACjG,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACpC,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC;QACnH,IAAI,UAAU,CAAC,cAAc,KAAK,YAAY;YAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACnE,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAClE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YACjE,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9E,IACE,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC;gBACzC,CAAC,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBAE1E,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC1B,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACpF,IACE,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM;YAClD,YAAY,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI;YACvC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAE9C,IAAI,CAAC,YAAY,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI;QAChB,kBAAkB;QAClB,iBAAiB;QACjB,wBAAwB;QACxB,0BAA0B;QAC1B,kCAAkC;QAClC,eAAe;QACf,sBAAsB;QACtB,qBAAqB;QACrB,aAAa;QACb,gBAAgB;QAChB,gBAAgB;KACjB;QACC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,MAAM,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1G,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,MAAM,iBAAiB,GACrB,QAAQ,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACrG,IACE,WAAW;QACX,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YACzB,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,MAAM;YAC/F,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM;YAC9F,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,QAAQ,CAAC,MAAM;YAC1D,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC;YACvC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,CAAC;YAC3C,kBAAkB,KAAK,SAAS,CAAC,MAAM,CAAC;QAE1C,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,IACE,kBAAkB,GAAG,SAAS,CAAC,MAAM;QACrC,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,MAAM;QACpG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,KAAK,CAAC,CAAC;QAEnD,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,IAAI,OAAO,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACzD,IACE,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,SAAS,CAAC,MAAM;YACrD,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,iBAAiB;YAClD,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,MAAM;YACjD,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,WAAW;YACnD,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,cAAc;YACzD,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC;YAExC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvB,CAAC;IACD,IACE,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,MAAM;QAC5C,OAAO,CAAC,gBAAgB;YACtB,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,GAAG,gBAAgB;QAC7F,UAAU,CAAC,iBAAiB,KAAK,OAAO,CAAC,gBAAgB;QACzD,OAAO,CAAC,wBAAwB,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,MAAM;QAC/F,OAAO,CAAC,gCAAgC,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,MAAM;QAC3G,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,MAAM;QAC7F,OAAO,CAAC,oBAAoB,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,gBAAgB,CAAC,CAAC,MAAM;QAC3G,OAAO,CAAC,mBAAmB,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,eAAe,CAAC,CAAC,MAAM;QACzG,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,MAAM;QACpF,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAE/C,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC1D,IAAI,gBAAgB,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,IAAI,EAAE,CAAC;IACrF,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;SAC5C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,aAAa,GAAG,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC3G,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,GAAG;YAAE,IAAI,EAAE,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;YACzD,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;SAC/E,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjH,OAAO;QACL,QAAQ,EAAE;YACR,aAAa,EAAE,kCAAkC;YACjD,cAAc;YACd,WAAW,EAAE,kBAAkB,cAAc,EAAE;YAC/C,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC;iBAC9B,MAAM,CACL,SAAS,CAAC;gBACR,IAAI;gBACJ,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;qBAClB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,eAAe,IAAI,GAAG,KAAK,UAAU,CAAC;qBAChE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;oBACrB,GAAG;oBACH,GAAG,KAAK,oBAAoB;wBAC1B,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,UAAU,CAAC,CAChG;wBACH,CAAC,CAAC,KAAK;iBACV,CAAC,CACL;aACF,CAAC,CACH;iBACA,MAAM,CAAC,KAAK,CAAC;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM,EAAE,yBAAyB;gBACjC,eAAe,EAAE,UAAU;gBAC3B,gBAAgB;gBAChB,qBAAqB,EAAE,SAAS;gBAChC,eAAe,EAAE,YAAY;aAC9B;YACD,QAAQ;YACR,YAAY;YACZ,gBAAgB;YAChB,sBAAsB,EAAE,IAAI;SAC7B;QACD,WAAW,EAAE;YACX,aAAa,EAAE,OAAO;YACtB,WAAW,EAAE,kBAAkB,cAAc,EAAE;YAC/C,YAAY,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;YAClD,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5C,OAAO,EAAE;gBACP,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAChD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;gBACnE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;gBACvE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC;aACnD;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAc,EACd,OAAwC,EACxC,gBAA6C,EAC7C,YAAqB;IAErB,IAAI,cAAsB,CAAC;IAC3B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACtD,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,gBAAgB,KAAK,UAAU;YAAE,IAAI,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,IAAI;YAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IACD,IAAI,QAAQ,CAAC,cAAc,KAAK,wBAAwB;QAAE,IAAI,EAAE,CAAC;IACjE,IAAI,QAAQ,CAAC,eAAe,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACtH,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAC1E,IAAI,kBAAkB,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAAE,IAAI,EAAE,CAAC;IAC9E,MAAM,IAAI,GAA2B,kBAAkB;QACrD,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QACrF,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;IACrF,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,cAAc,KAAK,cAAc;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACpG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACnE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;YAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5F,OAAO,YAAY,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QACvG,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzC,IACE,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC,KAAK,OAAO,CAAC,MAAM;QAC1D,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;QAC7E,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,OAAO,CAAC,MAAM;QAExD,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,IAAI,QAAiD,CAAC;IACtD,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QACtE,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QACjD,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACrG,kBAAkB,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,gBAAgB,CAAC,CAAC,MAAM,CAAC;QACjH,IAAI,SAAS,KAAK,cAAc;YAAE,QAAQ,GAAG,MAAM,CAAC;IACtD,CAAC;IACD,IACE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,aAAa;QAC/C,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,aAAa;QAC/C,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,kBAAkB;QAE1D,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,iBAAiB,GAAG,kBAAkB,cAAc,EAAE,CAAC;IAC7D,IACE,WAAW,KAAK,iBAAiB;QACjC,CAAC,IAAI,MAAM,CAAC,IAAI,iBAAiB,6BAA6B,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;QAEtF,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1B,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,cAAc,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,gBAAgB,GAAG,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,iCAAiC;QAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACtG,MAAM,OAAO,GAAG,CAAC,KAAc,EAAW,EAAE;QAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,OAAO,CACL,SAAS,CAAC,UAAU,CAAC,mDAAmD,CAAC;YACzE,SAAS,KAAK,WAAW;YACzB,SAAS,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC;YACvC,WAAW,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CACxC,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ;SACxC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,GAAG,IAAI;QACP,kBAAkB,EAAE,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;KACpG,CAAC,CAAC,CAAC;IACN,OAAO;QACL,QAAQ,EAAE;YACR,GAAG,QAAQ,CAAC,QAAQ;YACpB,aAAa,EAAE,kCAAkC;YACjD,WAAW;YACX,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC;iBAC9B,MAAM,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;iBAC7E,MAAM,CAAC,KAAK,CAAC;YAChB,QAAQ;YACR,YAAY,EAAE,EAAE;YAChB,gBAAgB,EAAE,EAAE;SACrB;QACD,WAAW,EAAE;YACX,GAAG,QAAQ,CAAC,WAAW;YACvB,WAAW;YACX,OAAO,EAAE;gBACP,eAAe,EAAE,KAAK,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;gBAC/G,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;gBACnE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;gBACvE,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,MAAM;gBAC3G,cAAc,EAAE,IAAI,GAAG,CACrB,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAC5G,CAAC,IAAI;aACP;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc,EACd,OAAwC,EACxC,gBAA6C;IAE7C,OAAO,0BAA0B,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAc,EACd,OAAwC,EACxC,gBAA6C;IAE7C,MAAM,SAAS,GAAG,0BAA0B,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACtF,OAAO;QACL,UAAU,EAAE,SAAS,CAAC,WAAW,CAAC,YAAY;QAC9C,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC;KACxF,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,yBAAyB,CACvC,KAAc,EACd,OAAyC;IAEzC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,cAAc,KAAK,yBAAyB,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB;QAAE,IAAI,EAAE,CAAC;IAC1G,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACvC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,2BAA2B,IAAI,IAAI,CAAC,CAAC,CACpH,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9F,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClH,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,6CAA6C,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACjH,OAAO;QACL,QAAQ,EAAE;YACR,aAAa,EAAE,kCAAkC;YACjD,cAAc;YACd,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;YACtC,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC;iBAC9B,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;iBACxF,MAAM,CAAC,KAAK,CAAC;YAChB,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CAAE,EAAE;gBAC3E,MAAM,EAAE,oBAAoB;gBAC5B,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;gBAC9B,eAAe,EAAE,UAAU;gBAC3B,gBAAgB;gBAChB,qBAAqB,EAAE,OAAO,OAAO,IAAI,MAAM,EAAE;gBACjD,eAAe,EAAE,YAAY;aAC9B;YACD,QAAQ;YACR,YAAY,EAAE,EAAE;YAChB,gBAAgB,EAAE,EAAE;YACpB,sBAAsB,EAAE,IAAI;SAC7B;QACD,WAAW,EAAE;YACX,aAAa,EAAE,OAAO;YACtB,WAAW;YACX,YAAY,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YACzC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,qBAAqB,CAAC,CAAC,WAAW,EAAE;YAC9D,OAAO,EAAE;gBACP,eAAe,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;gBACtF,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;gBACnE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;gBACvE,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,MAAM;gBAC3G,cAAc,EAAE,CAAC;aAClB;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/governance-setup.d.ts

@@ -0,0 +1,13 @@
+import { type GovernanceSetupConfigV1, type GovernanceSetupPlanV1, type GovernanceProvisionPlanV1 } from "@apexops/contracts";
+export interface GovernanceProvisionEvidence {
+    account: unknown;
+    application: unknown;
+    principal: unknown;
+    environment: unknown;
+    readerRole: unknown;
+    federations: unknown;
+    assignments: unknown;
+}
+export declare function planGovernanceProvision(setup: GovernanceSetupPlanV1, evidence: GovernanceProvisionEvidence): GovernanceProvisionPlanV1;
+export declare function planGovernanceSetup(config: GovernanceSetupConfigV1, repositoryEvidence: unknown, oidcEvidence: unknown): GovernanceSetupPlanV1;
+//# sourceMappingURL=governance-setup.d.ts.map

package/dist/governance-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-setup.d.ts","sourceRoot":"","sources":["../src/governance-setup.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;CACtB;AAOD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,qBAAqB,EAC5B,QAAQ,EAAE,2BAA2B,GACpC,yBAAyB,CAwK3B;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,uBAAuB,EAC/B,kBAAkB,EAAE,OAAO,EAC3B,YAAY,EAAE,OAAO,GACpB,qBAAqB,CAsGvB"}

package/dist/governance-setup.js

@@ -0,0 +1,231 @@
+import { Value } from "@sinclair/typebox/value";
+import { GovernanceSetupConfigV1Schema, GovernanceSetupPlanV1Schema, GovernanceProvisionPlanV1Schema, calculatePolicyValidationDigest, } from "@apexops/contracts";
+const record = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+const sameId = (actual, expected) => typeof actual === "string" && actual.toLowerCase() === expected.toLowerCase();
+export function planGovernanceProvision(setup, evidence) {
+    setup = structuredClone(setup);
+    if (!Value.Check(GovernanceSetupPlanV1Schema, setup))
+        throw new TypeError("Invalid governance setup plan");
+    const { planHash, ...setupBody } = setup;
+    if (calculatePolicyValidationDigest(setupBody) !== planHash)
+        throw new TypeError("Governance setup plan digest differs");
+    evidence = structuredClone(evidence);
+    const evidenceHash = calculatePolicyValidationDigest(evidence);
+    const { federations, assignments, ...context } = evidence;
+    const contextHash = calculatePolicyValidationDigest({ setup, ...context });
+    const blockers = [...setup.blockers];
+    const actions = [];
+    const federationName = `apex-governance-${calculatePolicyValidationDigest({ repository: setup.config.repository, subject: setup.federation?.subject ?? null }).slice(0, 24)}`;
+    const account = record(evidence.account), application = record(evidence.application), principal = record(evidence.principal);
+    const environment = record(evidence.environment), branches = record(environment.deployment_branch_policy);
+    const role = record(evidence.readerRole);
+    const appId = application.id;
+    const validAppId = typeof appId === "string" && Value.Check(GovernanceSetupConfigV1Schema.properties.tenantId, appId);
+    if (setup.config.identity.mode !== "reuse")
+        blockers.push("Dedicated identity creation requires a separate approved administrator operation; provide its verified client and principal IDs to provision trust.");
+    else {
+        const identity = setup.config.identity;
+        if (!sameId(account.tenantId, setup.config.tenantId) ||
+            !sameId(account.id, setup.config.subscriptionId) ||
+            account.state !== "Enabled" ||
+            account.environmentName !== "AzureCloud")
+            blockers.push("The active Azure tenant or subscription differs from the approved setup target.");
+        if (!validAppId ||
+            !sameId(application.appId, identity.clientId) ||
+            application.signInAudience !== "AzureADMyOrg" ||
+            !sameId(principal.id, identity.principalId) ||
+            !sameId(principal.appId, identity.clientId) ||
+            !sameId(principal.appOwnerOrganizationId, setup.config.tenantId) ||
+            principal.accountEnabled !== true ||
+            principal.servicePrincipalType !== "Application")
+            blockers.push("The reused single-tenant application and enabled service principal are not verified in the selected tenant.");
+    }
+    const rules = Array.isArray(environment.protection_rules) ? environment.protection_rules : [];
+    if (environment.name !== "governance" ||
+        branches.protected_branches !== true ||
+        branches.custom_branch_policies !== false ||
+        !rules.some((rule) => record(rule).type === "required_reviewers" &&
+            record(rule).prevent_self_review === true &&
+            Array.isArray(record(rule).reviewers) &&
+            record(rule).reviewers.length > 0))
+        blockers.push("An existing governance environment must require reviewers, prevent self-review, and allow protected branches only; configure protections administratively.");
+    const permissions = Array.isArray(role.permissions) ? role.permissions : [];
+    const permission = record(permissions[0]);
+    if (!sameId(role.name, setup.proposedRole.id) ||
+        role.roleType !== "BuiltInRole" ||
+        role.roleName !== "Reader" ||
+        permissions.length !== 1 ||
+        JSON.stringify(permission.actions) !== '["*/read"]' ||
+        JSON.stringify(permission.notActions) !== "[]" ||
+        JSON.stringify(permission.dataActions) !== "[]" ||
+        JSON.stringify(permission.notDataActions) !== "[]")
+        blockers.push("The Reader role definition is missing or differs from its approved read-only permissions.");
+    if (!Array.isArray(federations) || federations.length > 100)
+        blockers.push("Federated credential inventory is missing or exceeds bounds.");
+    else if (setup.federation !== undefined) {
+        const matches = federations.filter((item) => {
+            const credential = record(item);
+            return (credential.issuer === setup.federation.issuer &&
+                credential.subject === setup.federation.subject &&
+                JSON.stringify(credential.audiences) === JSON.stringify([setup.federation.audience]));
+        });
+        const collision = federations.some((item) => (record(item).name === federationName ||
+            (record(item).issuer === setup.federation.issuer && record(item).subject === setup.federation.subject)) &&
+            !matches.includes(item));
+        if (collision || matches.length > 1)
+            blockers.push("Existing federation conflicts with the proposed exact trust or is duplicated; no credential will be overwritten.");
+        else if (matches.length === 0)
+            actions.push("create-federation");
+    }
+    if (!Array.isArray(assignments) || assignments.length > 1000)
+        blockers.push("Role assignment inventory is missing or exceeds bounds.");
+    else if (setup.config.identity.mode === "reuse") {
+        const identity = setup.config.identity;
+        const readerDefinition = new RegExp(`^/(?:subscriptions/[a-f0-9-]{36}/)?providers/microsoft\\.authorization/roledefinitions/${setup.proposedRole.id}$`, "i");
+        const unexpectedGrant = assignments.some((item) => {
+            const assignment = record(item);
+            return (!sameId(assignment.principalId, identity.principalId) ||
+                typeof assignment.scope !== "string" ||
+                assignment.scope.length === 0 ||
+                typeof assignment.roleDefinitionId !== "string" ||
+                !readerDefinition.test(assignment.roleDefinitionId) ||
+                (assignment.condition !== undefined && assignment.condition !== null && assignment.condition !== ""));
+        });
+        if (unexpectedGrant)
+            blockers.push("Observed direct or inherited access is not exclusively unconditional Reader; review the identity's existing privileges before adding federation.");
+        const matches = assignments.filter((item) => {
+            const assignment = record(item);
+            return (sameId(assignment.principalId, identity.principalId) &&
+                sameId(assignment.scope, setup.proposedRole.scope) &&
+                typeof assignment.roleDefinitionId === "string" &&
+                assignment.roleDefinitionId.toLowerCase().endsWith(`/roledefinitions/${setup.proposedRole.id}`) &&
+                (assignment.condition === undefined || assignment.condition === null || assignment.condition === ""));
+        });
+        const constrained = assignments.some((item) => {
+            const assignment = record(item);
+            return (sameId(assignment.principalId, identity.principalId) &&
+                sameId(assignment.scope, setup.proposedRole.scope) &&
+                typeof assignment.roleDefinitionId === "string" &&
+                assignment.roleDefinitionId.toLowerCase().endsWith(`/roledefinitions/${setup.proposedRole.id}`) &&
+                assignment.condition !== undefined &&
+                assignment.condition !== null &&
+                assignment.condition !== "");
+        });
+        if (constrained)
+            blockers.push("Existing constrained Reader access requires administrator review; no unconstrained duplicate will be created.");
+        else if (matches.length > 1)
+            blockers.push("Duplicate exact Reader assignments require administrator review.");
+        else if (matches.length === 0)
+            actions.push("assign-reader");
+    }
+    const body = {
+        schemaVersion: "1.0.0",
+        setup,
+        contextHash,
+        evidenceHash,
+        status: blockers.length ? "blocked" : "ready",
+        ...(validAppId ? { applicationObjectId: appId } : {}),
+        federationName,
+        actions: blockers.length ? [] : actions,
+        blockers,
+        executionAuthorized: false,
+        deploymentAuthorized: false,
+    };
+    const plan = { ...body, planHash: calculatePolicyValidationDigest(body) };
+    if (!Value.Check(GovernanceProvisionPlanV1Schema, plan))
+        throw new TypeError("Invalid governance provisioning plan");
+    return plan;
+}
+export function planGovernanceSetup(config, repositoryEvidence, oidcEvidence) {
+    config = structuredClone(config);
+    if (!Value.Check(GovernanceSetupConfigV1Schema, config))
+        throw new TypeError("Invalid governance setup configuration");
+    const evidenceHash = calculatePolicyValidationDigest({ repository: repositoryEvidence, oidc: oidcEvidence });
+    const repository = repositoryEvidence;
+    const oidc = oidcEvidence;
+    const blockers = [];
+    let subject;
+    if (!repository ||
+        typeof repository.full_name !== "string" ||
+        repository.full_name.toLowerCase() !== config.repository.toLowerCase() ||
+        !Number.isSafeInteger(repository.id) ||
+        Number(repository.id) <= 0 ||
+        !Number.isSafeInteger(repository.owner?.id) ||
+        Number(repository.owner?.id) <= 0 ||
+        typeof repository.owner?.login !== "string" ||
+        typeof repository.name !== "string" ||
+        `${repository.owner.login}/${repository.name}` !== repository.full_name ||
+        !Value.Check(GovernanceSetupConfigV1Schema.properties.repository, repository.full_name)) {
+        blockers.push("Repository identity is missing or does not match the requested repository.");
+    }
+    else if (!oidc ||
+        oidc.use_default !== true ||
+        typeof oidc.use_immutable_subject !== "boolean" ||
+        typeof oidc.sub_claim_prefix !== "string") {
+        blockers.push("OIDC subject settings are incomplete or customized; obtain reviewed subject evidence without changing organization policy.");
+    }
+    else {
+        const expectedPrefix = oidc.use_immutable_subject
+            ? `repo:${repository.owner.login}@${repository.owner.id}/${repository.name}@${repository.id}`
+            : `repo:${repository.full_name}`;
+        if (oidc.sub_claim_prefix !== expectedPrefix)
+            blockers.push("Observed OIDC prefix does not match the repository identity and subject mode.");
+        else
+            subject = `${expectedPrefix}:environment:governance`;
+    }
+    const variables = {
+        AZURE_TENANT_ID: config.tenantId,
+        AZURE_SUBSCRIPTION_ID: config.subscriptionId,
+        GOVERNANCE_MG_ID: config.managementGroupId ?? "",
+        GOVERNANCE_SUBSCRIPTION_ID: config.managementGroupId === undefined ? config.subscriptionId : "",
+        GOVERNANCE_MAX_SUBSCRIPTIONS: "100",
+        GOVERNANCE_BASELINE_ENABLED: "false",
+    };
+    if (config.identity.mode === "reuse")
+        variables.AZURE_CLIENT_ID = config.identity.clientId;
+    const body = {
+        schemaVersion: "1.0.0",
+        config,
+        evidenceHash,
+        status: blockers.length === 0 ? "pending" : "blocked",
+        ...(subject === undefined
+            ? {}
+            : {
+                federation: {
+                    issuer: "https://token.actions.githubusercontent.com",
+                    audience: "api://AzureADTokenExchange",
+                    subject,
+                },
+            }),
+        environment: "governance",
+        proposedRole: {
+            id: "acdd72a7-3385-48ef-bd42-f606fba81ae7",
+            name: "Reader",
+            scope: config.managementGroupId === undefined
+                ? `/subscriptions/${config.subscriptionId}`
+                : `/providers/Microsoft.Management/managementGroups/${config.managementGroupId}`,
+        },
+        variables,
+        blockers,
+        pendingActions: [
+            "Confirm the exact setup plan before any remote mutation.",
+            config.identity.mode === "reuse"
+                ? "Verify tenant, application and service-principal binding and existing grants."
+                : "Create a dedicated application and service principal without client secrets after approval.",
+            "Verify collection scope and inherited policy-definition read access; request administrator assistance for missing access.",
+            "Review governance environment protections and permitted branches; preserve existing restrictions.",
+            "Reconcile exact federation and Reader assignment without duplicates or overwriting conflicts.",
+            "Verify the shipped collection workflow and repository permissions before configuring variables.",
+            "After approval, enable collection and dispatch the first baseline review PR.",
+            "Human baseline review and merge remain required before import; no deployment approval follows.",
+        ],
+        filesModified: false,
+        executionAuthorized: false,
+        deploymentAuthorized: false,
+    };
+    const plan = { ...body, planHash: calculatePolicyValidationDigest(body) };
+    if (!Value.Check(GovernanceSetupPlanV1Schema, plan))
+        throw new TypeError("Invalid governance setup plan");
+    return plan;
+}
+//# sourceMappingURL=governance-setup.js.map

package/dist/governance-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-setup.js","sourceRoot":"","sources":["../src/governance-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,+BAA+B,EAC/B,+BAA+B,GAIhC,MAAM,oBAAoB,CAAC;AAY5B,MAAM,MAAM,GAAG,CAAC,KAAc,EAA2B,EAAE,CACzD,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjH,MAAM,MAAM,GAAG,CAAC,MAAe,EAAE,QAAgB,EAAE,EAAE,CACnD,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;AAEhF,MAAM,UAAU,uBAAuB,CACrC,KAA4B,EAC5B,QAAqC;IAErC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC3G,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,CAAC;IACzC,IAAI,+BAA+B,CAAC,SAAS,CAAC,KAAK,QAAQ;QACzD,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAC9D,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,CAAC;IAC1D,MAAM,WAAW,GAAG,+BAA+B,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,OAAO,GAAyC,EAAE,CAAC;IACzD,MAAM,cAAc,GAAG,mBAAmB,+BAA+B,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9K,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EACtC,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC1C,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC9C,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtH,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;QACxC,QAAQ,CAAC,IAAI,CACX,qJAAqJ,CACtJ,CAAC;SACC,CAAC;QACJ,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACvC,IACE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;YAChD,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC;YAChD,OAAO,CAAC,KAAK,KAAK,SAAS;YAC3B,OAAO,CAAC,eAAe,KAAK,YAAY;YAExC,QAAQ,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;QACnG,IACE,CAAC,UAAU;YACX,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC7C,WAAW,CAAC,cAAc,KAAK,cAAc;YAC7C,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC;YAC3C,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC3C,CAAC,MAAM,CAAC,SAAS,CAAC,sBAAsB,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;YAChE,SAAS,CAAC,cAAc,KAAK,IAAI;YACjC,SAAS,CAAC,oBAAoB,KAAK,aAAa;YAEhD,QAAQ,CAAC,IAAI,CACX,6GAA6G,CAC9G,CAAC;IACN,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,IACE,WAAW,CAAC,IAAI,KAAK,YAAY;QACjC,QAAQ,CAAC,kBAAkB,KAAK,IAAI;QACpC,QAAQ,CAAC,sBAAsB,KAAK,KAAK;QACzC,CAAC,KAAK,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CACP,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB;YAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,mBAAmB,KAAK,IAAI;YACzC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAuB,CAAC,MAAM,GAAG,CAAC,CACnD;QAED,QAAQ,CAAC,IAAI,CACX,4JAA4J,CAC7J,CAAC;IACJ,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,IACE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,KAAK,aAAa;QAC/B,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAC1B,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,YAAY;QACnD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,IAAI;QAC9C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,IAAI;QAC/C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,IAAI;QAElD,QAAQ,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;IAC7G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,GAAG;QACzD,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;SAC3E,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,CACL,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,UAAW,CAAC,MAAM;gBAC9C,UAAU,CAAC,OAAO,KAAK,KAAK,CAAC,UAAW,CAAC,OAAO;gBAChD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAW,CAAC,QAAQ,CAAC,CAAC,CACtF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAChC,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;YACnC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,UAAW,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,UAAW,CAAC,OAAO,CAAC,CAAC;YAC3G,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC1B,CAAC;QACF,IAAI,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YACjC,QAAQ,CAAC,IAAI,CACX,kHAAkH,CACnH,CAAC;aACC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,IAAI;QAC1D,QAAQ,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;SACtE,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACvC,MAAM,gBAAgB,GAAG,IAAI,MAAM,CACjC,0FAA0F,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,EAClH,GAAG,CACJ,CAAC;QACF,MAAM,eAAe,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAChD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,CACL,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;gBACrD,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;gBACpC,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;gBAC7B,OAAO,UAAU,CAAC,gBAAgB,KAAK,QAAQ;gBAC/C,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;gBACnD,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,IAAI,UAAU,CAAC,SAAS,KAAK,EAAE,CAAC,CACrG,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,eAAe;YACjB,QAAQ,CAAC,IAAI,CACX,kJAAkJ,CACnJ,CAAC;QACJ,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,CACL,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;gBACpD,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC;gBAClD,OAAO,UAAU,CAAC,gBAAgB,KAAK,QAAQ;gBAC/C,UAAU,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,oBAAoB,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBAC/F,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,IAAI,UAAU,CAAC,SAAS,KAAK,EAAE,CAAC,CACrG,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,CACL,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;gBACpD,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC;gBAClD,OAAO,UAAU,CAAC,gBAAgB,KAAK,QAAQ;gBAC/C,UAAU,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,oBAAoB,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBAC/F,UAAU,CAAC,SAAS,KAAK,SAAS;gBAClC,UAAU,CAAC,SAAS,KAAK,IAAI;gBAC7B,UAAU,CAAC,SAAS,KAAK,EAAE,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,WAAW;YACb,QAAQ,CAAC,IAAI,CACX,+GAA+G,CAChH,CAAC;aACC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;aAC1G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,OAAgB;QAC/B,KAAK;QACL,WAAW;QACX,YAAY;QACZ,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAE,OAAiB;QACnE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,cAAc;QACd,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO;QACvC,QAAQ;QACR,mBAAmB,EAAE,KAAc;QACnC,oBAAoB,EAAE,KAAc;KACrC,CAAC;IACF,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,+BAA+B,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IACrH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAA+B,EAC/B,kBAA2B,EAC3B,YAAqB;IAErB,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,6BAA6B,EAAE,MAAM,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,+BAA+B,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7G,MAAM,UAAU,GAAG,kBAKX,CAAC;IACT,MAAM,IAAI,GAAG,YAIL,CAAC;IACT,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAA2B,CAAC;IAChC,IACE,CAAC,UAAU;QACX,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;QACxC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE;QACtE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC;QAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC;QACjC,OAAO,UAAU,CAAC,KAAK,EAAE,KAAK,KAAK,QAAQ;QAC3C,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;QACnC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,SAAS;QACvE,CAAC,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACvF,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAC9F,CAAC;SAAM,IACL,CAAC,IAAI;QACL,IAAI,CAAC,WAAW,KAAK,IAAI;QACzB,OAAO,IAAI,CAAC,qBAAqB,KAAK,SAAS;QAC/C,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,EACzC,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,4HAA4H,CAC7H,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB;YAC/C,CAAC,CAAC,QAAQ,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,EAAE,EAAE;YAC7F,CAAC,CAAC,QAAQ,UAAU,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,gBAAgB,KAAK,cAAc;YAC1C,QAAQ,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;;YAC5F,OAAO,GAAG,GAAG,cAAc,yBAAyB,CAAC;IAC5D,CAAC;IACD,MAAM,SAAS,GAA2B;QACxC,eAAe,EAAE,MAAM,CAAC,QAAQ;QAChC,qBAAqB,EAAE,MAAM,CAAC,cAAc;QAC5C,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;QAChD,0BAA0B,EAAE,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE;QAC/F,4BAA4B,EAAE,KAAK;QACnC,2BAA2B,EAAE,OAAO;KACrC,CAAC;IACF,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;QAAE,SAAS,CAAC,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC3F,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,OAAgB;QAC/B,MAAM;QACN,YAAY;QACZ,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAE,SAAmB;QAC3E,GAAG,CAAC,OAAO,KAAK,SAAS;YACvB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,UAAU,EAAE;oBACV,MAAM,EAAE,6CAAsD;oBAC9D,QAAQ,EAAE,4BAAqC;oBAC/C,OAAO;iBACR;aACF,CAAC;QACN,WAAW,EAAE,YAAqB;QAClC,YAAY,EAAE;YACZ,EAAE,EAAE,sCAA+C;YACnD,IAAI,EAAE,QAAiB;YACvB,KAAK,EACH,MAAM,CAAC,iBAAiB,KAAK,SAAS;gBACpC,CAAC,CAAC,kBAAkB,MAAM,CAAC,cAAc,EAAE;gBAC3C,CAAC,CAAC,oDAAoD,MAAM,CAAC,iBAAiB,EAAE;SACrF;QACD,SAAS;QACT,QAAQ;QACR,cAAc,EAAE;YACd,0DAA0D;YAC1D,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;gBAC9B,CAAC,CAAC,+EAA+E;gBACjF,CAAC,CAAC,6FAA6F;YACjG,2HAA2H;YAC3H,mGAAmG;YACnG,+FAA+F;YAC/F,iGAAiG;YACjG,8EAA8E;YAC9E,gGAAgG;SACjG;QACD,aAAa,EAAE,KAAc;QAC7B,mBAAmB,EAAE,KAAc;QACnC,oBAAoB,EAAE,KAAc;KACrC,CAAC;IACF,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,2BAA2B,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC1G,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/iac-generation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"iac-generation.d.ts","sourceRoot":"","sources":["../src/iac-generation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC1G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAG5E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAAC;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAC1D;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;CACnD;AA4PD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,sBAA2B,GACnC,oBAAoB,CA6DtB;AAyBD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,0BAA+B,GACvC,oBAAoB,CAmEtB;AAOD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,oBAAoB,GAAG,yBAAyB,EACvD,SAAS,EAAE,oBAAoB,GAAG,yBAAyB,GAC1D,mBAAmB,CAuDrB;AAkHD,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,oBAAoB,EAC1B,OAAO,GAAE,8BAAmC,GAC3C,OAAO,CAAC,6BAA6B,CAAC,CA2DxC;AAiBD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,oBAAoB,EAC1B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CA2Cf"}
+{"version":3,"file":"iac-generation.d.ts","sourceRoot":"","sources":["../src/iac-generation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC1G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAG5E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAAC;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAC1D;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;CACnD;AAsRD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,sBAA2B,GACnC,oBAAoB,CA0EtB;AAyBD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,0BAA+B,GACvC,oBAAoB,CAmEtB;AAOD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,oBAAoB,GAAG,yBAAyB,EACvD,SAAS,EAAE,oBAAoB,GAAG,yBAAyB,GAC1D,mBAAmB,CAuDrB;AAkHD,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,oBAAoB,EAC1B,OAAO,GAAE,8BAAmC,GAC3C,OAAO,CAAC,6BAA6B,CAAC,CA8DxC;AAiBD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,oBAAoB,EAC1B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CA2Cf"}

package/dist/iac-generation.js

@@ -1,9 +1,10 @@
-import { lstat, mkdir, open, realpath, rename, rm } from "node:fs/promises";
+import { lstat, mkdir, open, realpath, rm } from "node:fs/promises";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { renameWithRetry } from "./rename-retry.js";
 import { sha256 } from "./iac.js";
 const IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_]*$/;
 const EXACT_VERSION = /^(?:=\s*)?[0-9]+\.[0-9]+\.[0-9]+(?:[-+][0-9A-Za-z.-]+)?$/;
-const NATIVE_IMPLEMENTATION = /^native:([A-Za-z0-9.]+\/[A-Za-z0-9.]+)@([0-9]{4}-[0-9]{2}-[0-9]{2}(?:-preview)?)$/;
+const NATIVE_IMPLEMENTATION = /^native:([A-Za-z][A-Za-z0-9.]*\.[A-Za-z][A-Za-z0-9]*(?:\/[A-Za-z][A-Za-z0-9]*)+)@([0-9]{4}-[0-9]{2}-[0-9]{2}(?:-preview)?)$/;
 const AVM_IMPLEMENTATION = /^avm:([^@\s]+)@([^@\s]+)$/;
 function assertIdentifier(value, label) {
     if (!IDENTIFIER.test(value))
@@ -20,12 +21,9 @@ function normalizeRelativePath(value) {
     }
     return segments.join("/");
 }
-function parseBinding(implementation, declaredVersion) {
+function parseImplementation(implementation) {
     const native = NATIVE_IMPLEMENTATION.exec(implementation);
     if (native !== null) {
-        if (declaredVersion !== "legacy" && declaredVersion !== native[2]) {
-            throw new TypeError(`Binding version '${declaredVersion}' does not match implementation pin '${native[2]}'`);
-        }
         return { kind: "native", source: native[1], version: native[2] };
     }
     const avm = AVM_IMPLEMENTATION.exec(implementation);
@@ -34,11 +32,15 @@ function parseBinding(implementation, declaredVersion) {
     const version = avm[2];
     if (!EXACT_VERSION.test(version))
         throw new TypeError(`AVM implementation '${implementation}' must use an exact version`);
-    if (declaredVersion !== "legacy" && declaredVersion !== version) {
-        throw new TypeError(`Binding version '${declaredVersion}' does not match implementation pin '${version}'`);
-    }
     return { kind: "avm", source: avm[1], version };
 }
+function parseBinding(implementation, declaredVersion) {
+    const parsed = parseImplementation(implementation);
+    if (declaredVersion !== parsed.version) {
+        throw new TypeError(`Binding version '${declaredVersion}' does not match implementation pin '${parsed.version}'`);
+    }
+    return parsed;
+}
 function resourceContexts(intent, binding) {
     if (intent.projectId !== binding.projectId || intent.runId !== binding.runId) {
         throw new TypeError("Intent and binding identities do not match");
@@ -58,6 +60,20 @@ function resourceContexts(intent, binding) {
                 throw new TypeError(`Resource '${resource.id}' has unknown dependency '${dependency}'`);
         }
         const resourceBinding = binding.resourceBindings[resource.id];
+        if (resourceBinding.scopeLogicalId !== undefined) {
+            const target = binding.resourceBindings[resourceBinding.scopeLogicalId];
+            if (binding.track !== "bicep" ||
+                resource.type.toLowerCase() !== "microsoft.insights/diagnosticsettings" ||
+                !resourceBinding.implementation.startsWith("native:Microsoft.Insights/diagnosticSettings@") ||
+                target === undefined ||
+                !target.implementation.startsWith("native:") ||
+                target.scopeLogicalId !== undefined ||
+                resourceBinding.scopeLogicalId === resource.id ||
+                !resource.dependsOn.includes(resourceBinding.scopeLogicalId) ||
+                Object.hasOwn(resourceBinding.parameters, "scope") ||
+                Object.hasOwn(resourceBinding.parameters, "parent"))
+                throw new TypeError("Diagnostic scope requires an explicit native Bicep dependency without chained scopes");
+        }
         return {
             resource,
             binding: resourceBinding,
@@ -191,18 +207,23 @@ function virtualTree(files, logicalManifest) {
         throw new TypeError("Virtual tree paths must be unique");
     return { files: normalized, logicalManifest, treeHash: sha256(normalized) };
 }
-function manifest(intent, binding, sourcePath, existing) {
+function manifest(intent, binding, contexts, sourcePath, existing) {
     return {
         schemaVersion: intent.schemaVersion,
         projectId: intent.projectId,
         runId: intent.runId,
         track: binding.track,
-        resources: [...intent.resources]
-            .sort((left, right) => left.id.localeCompare(right.id))
-            .map((resource) => ({
+        resources: contexts.map(({ resource, declaration, parsed }) => ({
             logicalId: resource.id,
             type: resource.type,
             implementationAddress: binding.resourceBindings[resource.id].implementation,
+            executionAddress: binding.track === "bicep"
+                ? declaration
+                : parsed.kind === "avm"
+                    ? `module.${declaration}`
+                    : existing.has(resource.id)
+                        ? `data.azapi_resource.${declaration}`
+                        : `azapi_resource.${declaration}`,
             implementationKind: existing.has(resource.id)
                 ? binding.track === "terraform"
                     ? "data"
@@ -235,6 +256,9 @@ export function generateBicepTree(intent, binding, options = {}) {
     const blocks = contexts.map((context) => {
         if (context.parsed.kind === "native") {
             const parameters = requiredGenericParameters(context);
+            const scope = context.binding.scopeLogicalId;
+            if (scope !== undefined && (existing.has(context.resource.id) || existing.has(scope)))
+                throw new TypeError("Diagnostic scope cannot mutate an existing resource");
             const existingKeyword = existing.has(context.resource.id) ? " existing" : "";
             if (existingKeyword !== "") {
                 return `resource ${context.declaration} '${context.parsed.source}@${context.parsed.version}' existing = {\n  name: ${bicepString(parameters.name)}\n}`;
@@ -249,7 +273,8 @@ export function generateBicepTree(intent, binding, options = {}) {
                 .sort(([left], [right]) => left.localeCompare(right))
                 .map(([name, value]) => `  ${bicepObjectKey(name)}: ${renderBicepValue(value, 2)}`)
                 .join("\n");
-            return `resource ${context.declaration} '${context.parsed.source}@${context.parsed.version}' = {\n  name: ${bicepString(parameters.name)}\n  location: ${bicepString(parameters.location)}${bodyFields.length === 0 ? "" : `\n${bodyFields}`}\n  properties: ${renderBicepValue(secureStorageProperties(context.resource.type, parameters.properties), 2)}${dependencies}\n}`;
+            const placement = scope === undefined ? `location: ${bicepString(parameters.location)}` : `scope: ${scope}`;
+            return `resource ${context.declaration} '${context.parsed.source}@${context.parsed.version}' = {\n  name: ${bicepString(parameters.name)}\n  ${placement}${bodyFields.length === 0 ? "" : `\n${bodyFields}`}\n  properties: ${renderBicepValue(secureStorageProperties(context.resource.type, parameters.properties), 2)}${dependencies}\n}`;
         }
         if (existing.has(context.resource.id)) {
             throw new TypeError(`Existing AVM resource '${context.resource.id}' is unsupported; use a native binding`);
@@ -278,7 +303,13 @@ export function generateBicepTree(intent, binding, options = {}) {
     const content = ["targetScope = 'resourceGroup'", descriptions, blocks.join("\n\n")]
         .filter((part) => part.length > 0)
         .join("\n\n") + "\n";
-    return virtualTree([{ path: "main.bicep", content }], manifest(intent, binding, "main.bicep", existing));
+    return virtualTree([
+        { path: "main.bicep", content },
+        {
+            path: "bicepconfig.json",
+            content: `${JSON.stringify({ experimentalFeaturesEnabled: { symbolicNameCodegen: true } }, null, 2)}\n`,
+        },
+    ], manifest(intent, binding, contexts, "main.bicep", existing));
 }
 function exactProviderConstraint(value, fallback, label) {
     const constraint = value ?? fallback;
@@ -359,10 +390,10 @@ export function generateTerraformTree(intent, binding, options = {}) {
     ];
     if (options.lockFileContent !== undefined)
         files.push({ path: ".terraform.lock.hcl", content: options.lockFileContent });
-    return virtualTree(files, manifest(intent, binding, "main.tf", existing));
+    return virtualTree(files, manifest(intent, binding, contexts, "main.tf", existing));
 }
 function logicalImplementation(value) {
-    const parsed = parseBinding(value, "legacy");
+    const parsed = parseImplementation(value);
     return `${parsed.kind}:${parsed.source}@${parsed.version}`;
 }
 export function compareLogicalParity(bicep, terraform) {
@@ -567,11 +598,16 @@ export async function validateGeneratedTree(tree, options = {}) {
     const commandResults = [];
     if (options.runner !== undefined) {
         for (const plan of plans) {
-            commandResults.push(await options.runner.run({
+            const result = await options.runner.run({
                 ...plan,
                 timeoutMs: options.timeoutMs ?? 120_000,
                 maxOutputBytes: options.maxOutputBytes ?? 1_048_576,
-            }));
+            });
+            commandResults.push(result);
+            if (result.exitCode !== 0 || result.signal !== null || result.timedOut || result.outputTruncated) {
+                issues.push(`Validation command ${commandResults.length} failed or returned incomplete evidence`);
+                break;
+            }
         }
     }
     return { valid: issues.length === 0, issues, commandPlans: plans, commandResults };
@@ -634,7 +670,7 @@ export async function writeVirtualTree(root, tree, options = {}) {
             }
         }
         for (const { destination, temporary } of staged) {
-            await rename(temporary, destination);
+            await renameWithRetry(temporary, destination);
         }
     }
     catch (error) {