@appport/sdk 1.0.1

package/node_modules/@appport/core/dist/appboundry-contract.js

@@ -0,0 +1,160 @@
+/**
+ * AppBoundry Application Contract (F6)
+ *
+ * The singular, AppBoundry-owned description of an application: its identity,
+ * its contract revision, its canonical fingerprint, and the capabilities it
+ * provides and requires.
+ *
+ * A repository represents this contract with `appboundry.contract.json`. That
+ * document is an *attestation target*: it is a read-only representation of the
+ * contract AppBoundry owns. It is NOT an independently authored contract and it
+ * is NOT interchangeable with the runtime implementation manifest
+ * (see `runtime-manifest.ts`).
+ *
+ * The document therefore MUST NOT contain authorization grants, bindings,
+ * credentials, runtime process state, provider selections, execution state or
+ * mutable implementation state. Parsing rejects those fields explicitly.
+ */
+import { fingerprintManifest } from "./manifest.js";
+/** Protocol identifier of the repository contract representation. */
+export const APPBOUNDRY_CONTRACT_PROTOCOL = "AppBoundry/contract/1";
+/** Canonical file name of the repository contract representation. */
+export const APPBOUNDRY_CONTRACT_FILE = "appboundry.contract.json";
+/** Fields a contract document may never carry: they belong to other authorities. */
+const FORBIDDEN_CONTRACT_FIELDS = [
+    "authorization",
+    "authorizations",
+    "grants",
+    "bindings",
+    "credentials",
+    "secrets",
+    "artifacts",
+    "artifactHash",
+    "providers",
+    "providerSelection",
+    "executions",
+    "implementations",
+    "runtime"
+];
+/** Explicit contract-document failure; never silently downgraded to a manifest. */
+export class AppBoundryContractError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "AppBoundryContractError";
+    }
+}
+/**
+ * Project a contract document onto the canonical manifest shape used for
+ * fingerprinting. The projection exists so the AppBoundry contract and the
+ * authoritative application registration share one fingerprint algorithm
+ * without the two schemas becoming interchangeable.
+ */
+export function contractManifestProjection(contract) {
+    return {
+        protocol: "AppPort/1",
+        application: { id: contract.application.id, name: contract.application.name, version: contract.application.version },
+        ...(contract.metadata !== undefined ? { metadata: contract.metadata } : {}),
+        provides: contract.provides,
+        requires: contract.requires
+    };
+}
+/** Canonical fingerprint of a contract document's own content. */
+export function fingerprintAppBoundryContract(contract) {
+    return fingerprintManifest(contractManifestProjection(contract));
+}
+/**
+ * Derive the repository contract representation from the authoritative manifest.
+ *
+ * AppBoundry owns the contract; this only renders it for a repository to commit.
+ */
+export function appBoundryContractFromManifest(manifest, contractRevision = 1) {
+    if (!Number.isInteger(contractRevision) || contractRevision < 1) {
+        throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", "contractRevision must be a positive integer");
+    }
+    const document = {
+        protocol: APPBOUNDRY_CONTRACT_PROTOCOL,
+        application: { id: manifest.application.id, name: manifest.application.name, version: manifest.application.version },
+        contractRevision,
+        contractFingerprint: "",
+        ...(manifest.metadata !== undefined ? { metadata: manifest.metadata } : {}),
+        provides: manifest.provides,
+        requires: manifest.requires
+    };
+    return { ...document, contractFingerprint: fingerprintAppBoundryContract(document) };
+}
+/** Serialize the contract representation for `appboundry.contract.json`. */
+export function serializeAppBoundryContract(contract) {
+    return `${JSON.stringify(contract, null, 2)}\n`;
+}
+/**
+ * Parse and validate a repository contract representation.
+ *
+ * Anything that is not an AppBoundry contract — most importantly a runtime
+ * implementation manifest — is rejected explicitly rather than coerced.
+ */
+export function parseAppBoundryContract(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", "The AppBoundry contract must be a JSON object");
+    }
+    const candidate = value;
+    if (candidate.protocol !== APPBOUNDRY_CONTRACT_PROTOCOL) {
+        throw new AppBoundryContractError("CONTRACT_DOCUMENT_NOT_A_CONTRACT", `Expected protocol "${APPBOUNDRY_CONTRACT_PROTOCOL}" but found "${String(candidate.protocol)}". A runtime implementation manifest is not an AppBoundry contract.`);
+    }
+    for (const field of FORBIDDEN_CONTRACT_FIELDS) {
+        if (field in candidate) {
+            throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", `The AppBoundry contract must not declare "${field}"`);
+        }
+    }
+    const application = candidate.application;
+    for (const field of ["id", "name", "version"]) {
+        if (typeof application?.[field] !== "string" || !application[field].length) {
+            throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", `application.${field} must be a non-empty string`);
+        }
+    }
+    if (!Number.isInteger(candidate.contractRevision) || candidate.contractRevision < 1) {
+        throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", "contractRevision must be a positive integer");
+    }
+    if (typeof candidate.contractFingerprint !== "string" || !candidate.contractFingerprint.length) {
+        throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", "contractFingerprint must be a non-empty string");
+    }
+    if (!Array.isArray(candidate.provides) || !Array.isArray(candidate.requires)) {
+        throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", "provides and requires must be arrays");
+    }
+    const provided = new Set();
+    for (const entry of candidate.provides) {
+        if (typeof entry?.name !== "string" || !Number.isInteger(entry?.version)) {
+            throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", "every provided capability needs a name and integer version");
+        }
+        const key = `${entry.name}@${entry.version}`;
+        if (provided.has(key))
+            throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", `duplicate provided capability ${key}`);
+        provided.add(key);
+    }
+    const required = new Set();
+    for (const entry of candidate.requires) {
+        if (typeof entry?.name !== "string" || !Number.isInteger(entry?.version) || (entry.versionConstraint !== undefined && typeof entry.versionConstraint !== "string")) {
+            throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", "every requirement needs a name, integer version, and optional string versionConstraint");
+        }
+        const key = `${entry.name}@${entry.versionConstraint ?? entry.version}`;
+        if (required.has(key))
+            throw new AppBoundryContractError("CONTRACT_DOCUMENT_INVALID", `duplicate requirement ${key}`);
+        required.add(key);
+    }
+    const document = candidate;
+    const computed = fingerprintAppBoundryContract(document);
+    if (computed !== document.contractFingerprint) {
+        throw new AppBoundryContractError("CONTRACT_DOCUMENT_FINGERPRINT_INVALID", `The contract document does not describe its own fingerprint. Declared ${document.contractFingerprint}, canonical ${computed}.`);
+    }
+    return document;
+}
+/** Canonical key for a capability within a contract or coverage declaration. */
+export function capabilityCoverageKey(capability) {
+    return `${capability.name}@${capability.version}`;
+}
+/** Capabilities the contract declares, as canonical coverage keys. */
+export function contractProvidedCoverage(contract) {
+    return contract.provides.map(capabilityCoverageKey).sort();
+}
+//# sourceMappingURL=appboundry-contract.js.map

package/node_modules/@appport/core/dist/appboundry-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appboundry-contract.js","sourceRoot":"","sources":["../src/appboundry-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,mBAAmB,EAAyF,MAAM,eAAe,CAAC;AAG3I,qEAAqE;AACrE,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AAEpE,qEAAqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAEnE,oFAAoF;AACpF,MAAM,yBAAyB,GAAG;IAChC,eAAe;IACf,gBAAgB;IAChB,QAAQ;IACR,UAAU;IACV,aAAa;IACb,SAAS;IACT,WAAW;IACX,cAAc;IACd,WAAW;IACX,mBAAmB;IACnB,YAAY;IACZ,iBAAiB;IACjB,SAAS;CACD,CAAC;AA2BX,mFAAmF;AACnF,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC3B;IAArB,YAAqB,IAAiC,EAAE,OAAe;QACrE,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAA6B;QAEpD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAoC;IAC7E,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,WAAW,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE;QACpH,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,6BAA6B,CAAC,QAAoC;IAChF,OAAO,mBAAmB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAA6B,EAC7B,gBAAgB,GAAG,CAAC;IAEpB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,6CAA6C,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE,4BAA4B;QACtC,WAAW,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE;QACpH,gBAAgB;QAChB,mBAAmB,EAAE,EAAE;QACvB,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KACS,CAAC;IACvC,OAAO,EAAE,GAAG,QAAQ,EAAE,mBAAmB,EAAE,6BAA6B,CAAC,QAAQ,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,2BAA2B,CAAC,QAAoC;IAC9E,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,+CAA+C,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,SAAS,CAAC,QAAQ,KAAK,4BAA4B,EAAE,CAAC;QACxD,MAAM,IAAI,uBAAuB,CAC/B,kCAAkC,EAClC,sBAAsB,4BAA4B,gBAAgB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,qEAAqE,CAClK,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,yBAAyB,EAAE,CAAC;QAC9C,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,6CAA6C,KAAK,GAAG,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,WAAkD,CAAC;IACjF,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAU,EAAE,CAAC;QACvD,IAAI,OAAO,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,CAAE,WAAW,CAAC,KAAK,CAAY,CAAC,MAAM,EAAE,CAAC;YACvF,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,eAAe,KAAK,6BAA6B,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAK,SAAS,CAAC,gBAA2B,GAAG,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,6CAA6C,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,mBAAmB,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC;QAC/F,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,gDAAgD,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,sCAAsC,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,QAAqC,EAAE,CAAC;QACpE,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,4DAA4D,CAAC,CAAC;QAC/H,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,iCAAiC,GAAG,EAAE,CAAC,CAAC;QAC9H,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,QAAqC,EAAE,CAAC;QACpE,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,CAAC,EAAE,CAAC;YACnK,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,wFAAwF,CAAC,CAAC;QAC3J,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACxE,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,EAAE,yBAAyB,GAAG,EAAE,CAAC,CAAC;QACtH,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,QAAQ,GAAG,SAAkD,CAAC;IACpE,MAAM,QAAQ,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAC9C,MAAM,IAAI,uBAAuB,CAC/B,uCAAuC,EACvC,yEAAyE,QAAQ,CAAC,mBAAmB,eAAe,QAAQ,GAAG,CAChI,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,UAA+D;IACnG,OAAO,GAAG,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;AACpD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,wBAAwB,CAAC,QAAoC;IAC3E,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC"}

package/node_modules/@appport/core/dist/application-implementation.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Application Implementations (F6)
+ *
+ * An implementation is the executable association between an application
+ * capability, a verified source connection, and an artifact. It carries no
+ * application identity and no authorization of its own.
+ *
+ * Runtime order is unchanged by F6:
+ *
+ *   discovery → compatibility → authorization → binding
+ *       → implementation selection → materialization → execution
+ *
+ * Implementation selection therefore requires an authorized binding, and the
+ * selection is revalidated against durable authority before materialization so
+ * a serialized binding can never turn eligibility into an in-memory assumption.
+ */
+import type { AuthoritativeApplicationContract } from "./contract-attestation.js";
+import { type ApplicationSourceStore } from "./application-source.js";
+import { type AuthorizedCapabilityBinding } from "./binding.js";
+import type { ExecutableArtifact } from "./artifact.js";
+export type ApplicationImplementationStatus = "verified" | "stale" | "revoked" | "failed";
+/** Durable record of one executable implementation of one capability. */
+export interface ApplicationImplementation {
+    readonly id: string;
+    readonly applicationId: string;
+    readonly sourceConnectionId: string;
+    readonly capability: {
+        readonly name: string;
+        readonly version: number;
+    };
+    readonly contractFingerprint: string;
+    readonly artifactHash: string;
+    readonly status: ApplicationImplementationStatus;
+    readonly sequence: number;
+    readonly createdAt: string;
+    readonly verifiedAt?: string;
+}
+export interface ApplicationImplementationStore {
+    get(applicationId: string, implementationId: string): Promise<ApplicationImplementation | undefined>;
+    put(record: ApplicationImplementation, expectedSequence?: number): Promise<void>;
+    list(applicationId?: string): Promise<ApplicationImplementation[]>;
+}
+export declare class ApplicationImplementationConflictError extends Error {
+    constructor(id: string);
+}
+export declare class MemoryApplicationImplementationStore implements ApplicationImplementationStore {
+    #private;
+    get(applicationId: string, implementationId: string): Promise<ApplicationImplementation | undefined>;
+    put(record: ApplicationImplementation, expectedSequence?: number): Promise<void>;
+    list(applicationId?: string): Promise<ApplicationImplementation[]>;
+}
+/**
+ * The implementation chosen for one authorized execution.
+ *
+ * Structural data only: the durable proof that selected it is module-private,
+ * exactly as binding issuance is.
+ */
+export interface SelectedImplementation {
+    readonly implementationId: string;
+    readonly sourceConnectionId: string;
+    readonly applicationId: string;
+    readonly capability: {
+        readonly name: string;
+        readonly version: number;
+    };
+    readonly contractFingerprint: string;
+    readonly artifactHash: string;
+}
+/** Throws unless the selection was issued by ApplicationImplementationOperations. */
+export declare function assertIssuedImplementationSelection(selection: SelectedImplementation): void;
+/** Revalidate the selection against durable source/implementation authority. */
+export declare function assertImplementationSelectionEligible(selection: SelectedImplementation): Promise<void>;
+/** The artifact must be the exact artifact the selected implementation names. */
+export declare function assertArtifactMatchesSelection(selection: SelectedImplementation, artifact: ExecutableArtifact): void;
+/** Registers, revalidates and selects implementations from verified sources. */
+export declare class ApplicationImplementationOperations {
+    #private;
+    private readonly store;
+    private readonly sources;
+    private readonly authority;
+    private readonly now;
+    constructor(store: ApplicationImplementationStore, sources: ApplicationSourceStore, authority: AuthoritativeApplicationContract, now?: () => string);
+    /**
+     * Register an executable implementation for a verified source.
+     *
+     * The contract fingerprint is derived from authority, never accepted from the
+     * caller, and the capability must be covered by the source connection.
+     */
+    register(input: {
+        applicationId: string;
+        sourceConnectionId: string;
+        capability: {
+            name: string;
+            version: number;
+        };
+        artifactHash: string;
+    }): Promise<ApplicationImplementation>;
+    /** Revoke an implementation without touching the application or its history. */
+    revoke(applicationId: string, implementationId: string): Promise<ApplicationImplementation>;
+    /** Mark implementations of superseded contract revisions stale. */
+    refresh(applicationId: string): Promise<ApplicationImplementation[]>;
+    /**
+     * Implementations that may currently execute a capability, in deterministic
+     * order: source identity first, then implementation identity. Selection is
+     * never timing-dependent.
+     */
+    eligible(applicationId: string, capability: {
+        name: string;
+        version: number;
+    }): Promise<ApplicationImplementation[]>;
+    /**
+     * Select an implementation for an authorized binding.
+     *
+     * Provider resolution has already chosen the *application*; this chooses an
+     * eligible source/artifact for it. Without an authorized, still-authoritative
+     * binding there is no selection and therefore no materialization.
+     */
+    selectForBinding(binding: AuthorizedCapabilityBinding, capability: {
+        name: string;
+        version: number;
+    }): Promise<SelectedImplementation>;
+    get: (applicationId: string, implementationId: string) => Promise<ApplicationImplementation | undefined>;
+    list: (applicationId?: string) => Promise<ApplicationImplementation[]>;
+}
+//# sourceMappingURL=application-implementation.d.ts.map

package/node_modules/@appport/core/dist/application-implementation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-implementation.d.ts","sourceRoot":"","sources":["../src/application-implementation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAsD,KAAK,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAE1H,OAAO,EAAiC,KAAK,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,MAAM,+BAA+B,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE1F,yEAAyE;AACzE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,8BAA8B;IAC7C,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IACrG,GAAG,CAAC,MAAM,EAAE,yBAAyB,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC;CACpE;AAED,qBAAa,sCAAuC,SAAQ,KAAK;gBACnD,EAAE,EAAE,MAAM;CAIvB;AAED,qBAAa,oCAAqC,YAAW,8BAA8B;;IAEnF,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM;IAInD,GAAG,CAAC,MAAM,EAAE,yBAAyB,EAAE,gBAAgB,CAAC,EAAE,MAAM;IAKhE,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM;CAMlC;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAKD,qFAAqF;AACrF,wBAAgB,mCAAmC,CAAC,SAAS,EAAE,sBAAsB,GAAG,IAAI,CAI3F;AAED,gFAAgF;AAChF,wBAAsB,qCAAqC,CAAC,SAAS,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5G;AAED,iFAAiF;AACjF,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,sBAAsB,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAOpH;AAED,gFAAgF;AAChF,qBAAa,mCAAmC;;IAE5C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAHH,KAAK,EAAE,8BAA8B,EACrC,OAAO,EAAE,sBAAsB,EAC/B,SAAS,EAAE,gCAAgC,EAC3C,GAAG,GAAE,MAAM,MAAuC;IAGrE;;;;;OAKG;IACG,QAAQ,CAAC,KAAK,EAAE;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9C,YAAY,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAqCtC,gFAAgF;IAC1E,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IASjG,mEAAmE;IAC7D,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAe1E;;;;OAIG;IACG,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAS1H;;;;;;OAMG;IACG,gBAAgB,CACpB,OAAO,EAAE,2BAA2B,EACpC,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAC5C,OAAO,CAAC,sBAAsB,CAAC;IAsBlC,GAAG,GAAI,eAAe,MAAM,EAAE,kBAAkB,MAAM,oDAAqD;IAC3G,IAAI,GAAI,gBAAgB,MAAM,0CAAoC;CA4CnE"}

package/node_modules/@appport/core/dist/application-implementation.js

@@ -0,0 +1,220 @@
+/**
+ * Application Implementations (F6)
+ *
+ * An implementation is the executable association between an application
+ * capability, a verified source connection, and an artifact. It carries no
+ * application identity and no authorization of its own.
+ *
+ * Runtime order is unchanged by F6:
+ *
+ *   discovery → compatibility → authorization → binding
+ *       → implementation selection → materialization → execution
+ *
+ * Implementation selection therefore requires an authorized binding, and the
+ * selection is revalidated against durable authority before materialization so
+ * a serialized binding can never turn eligibility into an in-memory assumption.
+ */
+import { randomUUID } from "node:crypto";
+import { capabilityCoverageKey } from "./appboundry-contract.js";
+import { sourceIsEligible } from "./application-source.js";
+import { assertBindingAuthoritative } from "./authority-attestation.js";
+import { assertIssuedAuthorizedBinding } from "./binding.js";
+export class ApplicationImplementationConflictError extends Error {
+    constructor(id) {
+        super(`Concurrent application implementation update rejected for "${id}"`);
+        this.name = "ApplicationImplementationConflictError";
+    }
+}
+export class MemoryApplicationImplementationStore {
+    #records = new Map();
+    async get(applicationId, implementationId) {
+        const found = this.#records.get(`${applicationId}:${implementationId}`);
+        return found && structuredClone(found);
+    }
+    async put(record, expectedSequence) {
+        const key = `${record.applicationId}:${record.id}`;
+        if (this.#records.get(key)?.sequence !== expectedSequence)
+            throw new ApplicationImplementationConflictError(record.id);
+        this.#records.set(key, structuredClone(record));
+    }
+    async list(applicationId) {
+        return [...this.#records.values()]
+            .filter((record) => !applicationId || record.applicationId === applicationId)
+            .map((record) => structuredClone(record))
+            .sort((left, right) => left.id.localeCompare(right.id));
+    }
+}
+const issuedSelections = new WeakSet();
+const selectionValidators = new WeakMap();
+/** Throws unless the selection was issued by ApplicationImplementationOperations. */
+export function assertIssuedImplementationSelection(selection) {
+    if (typeof selection !== "object" || selection === null || !issuedSelections.has(selection)) {
+        throw new Error("Implementation selection was not issued by application implementation authority");
+    }
+}
+/** Revalidate the selection against durable source/implementation authority. */
+export async function assertImplementationSelectionEligible(selection) {
+    assertIssuedImplementationSelection(selection);
+    await selectionValidators.get(selection)?.();
+}
+/** The artifact must be the exact artifact the selected implementation names. */
+export function assertArtifactMatchesSelection(selection, artifact) {
+    if (artifact.contentHash !== selection.artifactHash) {
+        throw new Error(`Artifact ${artifact.contentHash} is not the selected implementation artifact ${selection.artifactHash}`);
+    }
+    if (artifact.metadata.contractFingerprint !== selection.contractFingerprint) {
+        throw new Error("Artifact contract fingerprint does not match the selected implementation");
+    }
+}
+/** Registers, revalidates and selects implementations from verified sources. */
+export class ApplicationImplementationOperations {
+    store;
+    sources;
+    authority;
+    now;
+    constructor(store, sources, authority, now = () => new Date().toISOString()) {
+        this.store = store;
+        this.sources = sources;
+        this.authority = authority;
+        this.now = now;
+    }
+    /**
+     * Register an executable implementation for a verified source.
+     *
+     * The contract fingerprint is derived from authority, never accepted from the
+     * caller, and the capability must be covered by the source connection.
+     */
+    async register(input) {
+        const authoritative = await this.#authoritative(input.applicationId);
+        const source = await this.sources.get(input.applicationId, input.sourceConnectionId);
+        if (!source)
+            throw new Error(`Unknown application source "${input.sourceConnectionId}"`);
+        if (!sourceIsEligible(source, authoritative.fingerprint)) {
+            throw new Error(`Source "${source.id}" is not a verified implementation source (${source.status})`);
+        }
+        const key = capabilityCoverageKey(input.capability);
+        if (!source.coveredCapabilities.includes(key)) {
+            throw new Error(`Source "${source.id}" does not cover capability ${key}`);
+        }
+        if (typeof input.artifactHash !== "string" || !input.artifactHash.length) {
+            throw new Error("artifactHash must be a non-empty string");
+        }
+        const at = this.now();
+        const existing = (await this.store.list(input.applicationId)).find((record) => record.sourceConnectionId === source.id &&
+            capabilityCoverageKey(record.capability) === key &&
+            record.contractFingerprint === authoritative.fingerprint);
+        const record = {
+            id: existing?.id ?? `impl_${randomUUID()}`,
+            applicationId: input.applicationId,
+            sourceConnectionId: source.id,
+            capability: { name: input.capability.name, version: input.capability.version },
+            contractFingerprint: authoritative.fingerprint,
+            artifactHash: input.artifactHash,
+            status: "verified",
+            sequence: (existing?.sequence ?? 0) + 1,
+            createdAt: existing?.createdAt ?? at,
+            verifiedAt: at
+        };
+        await this.store.put(record, existing?.sequence);
+        return record;
+    }
+    /** Revoke an implementation without touching the application or its history. */
+    async revoke(applicationId, implementationId) {
+        const current = await this.store.get(applicationId, implementationId);
+        if (!current)
+            throw new Error(`Unknown implementation "${implementationId}"`);
+        if (current.status === "revoked")
+            return current;
+        const next = { ...current, status: "revoked", sequence: current.sequence + 1 };
+        await this.store.put(next, current.sequence);
+        return next;
+    }
+    /** Mark implementations of superseded contract revisions stale. */
+    async refresh(applicationId) {
+        const authoritative = await this.#authoritative(applicationId);
+        const refreshed = [];
+        for (const record of await this.store.list(applicationId)) {
+            if (record.status !== "verified" || record.contractFingerprint === authoritative.fingerprint) {
+                refreshed.push(record);
+                continue;
+            }
+            const next = { ...record, status: "stale", sequence: record.sequence + 1 };
+            await this.store.put(next, record.sequence);
+            refreshed.push(next);
+        }
+        return refreshed;
+    }
+    /**
+     * Implementations that may currently execute a capability, in deterministic
+     * order: source identity first, then implementation identity. Selection is
+     * never timing-dependent.
+     */
+    async eligible(applicationId, capability) {
+        const authoritative = await this.#authoritative(applicationId);
+        const sources = new Map((await this.sources.list(applicationId)).map((source) => [source.id, source]));
+        const key = capabilityCoverageKey(capability);
+        return (await this.store.list(applicationId))
+            .filter((record) => this.#eligible(record, sources.get(record.sourceConnectionId), authoritative.fingerprint, key))
+            .sort((left, right) => this.#order(left, right, sources));
+    }
+    /**
+     * Select an implementation for an authorized binding.
+     *
+     * Provider resolution has already chosen the *application*; this chooses an
+     * eligible source/artifact for it. Without an authorized, still-authoritative
+     * binding there is no selection and therefore no materialization.
+     */
+    async selectForBinding(binding, capability) {
+        assertIssuedAuthorizedBinding(binding);
+        await assertBindingAuthoritative(binding);
+        const applicationId = binding.provider.id;
+        const candidates = await this.eligible(applicationId, capability);
+        const chosen = candidates[0];
+        if (!chosen) {
+            throw new Error(`No eligible implementation for ${capabilityCoverageKey(capability)} of application "${applicationId}"`);
+        }
+        const selection = {
+            implementationId: chosen.id,
+            sourceConnectionId: chosen.sourceConnectionId,
+            applicationId,
+            capability: { name: capability.name, version: capability.version },
+            contractFingerprint: chosen.contractFingerprint,
+            artifactHash: chosen.artifactHash
+        };
+        issuedSelections.add(selection);
+        selectionValidators.set(selection, () => this.#assertStillEligible(selection));
+        return selection;
+    }
+    get = (applicationId, implementationId) => this.store.get(applicationId, implementationId);
+    list = (applicationId) => this.store.list(applicationId);
+    /** Re-read durable authority and confirm the selection is still executable. */
+    async #assertStillEligible(selection) {
+        const authoritative = await this.#authoritative(selection.applicationId);
+        const record = await this.store.get(selection.applicationId, selection.implementationId);
+        const source = await this.sources.get(selection.applicationId, selection.sourceConnectionId);
+        const key = capabilityCoverageKey(selection.capability);
+        if (!record || !this.#eligible(record, source, authoritative.fingerprint, key) || record.artifactHash !== selection.artifactHash) {
+            throw new Error(`Implementation "${selection.implementationId}" is no longer an eligible implementation`);
+        }
+    }
+    #eligible(record, source, authoritativeFingerprint, capabilityKey) {
+        return (record.status === "verified" &&
+            record.contractFingerprint === authoritativeFingerprint &&
+            capabilityCoverageKey(record.capability) === capabilityKey &&
+            !!source &&
+            sourceIsEligible(source, authoritativeFingerprint) &&
+            source.coveredCapabilities.includes(capabilityKey));
+    }
+    #order(left, right, sources) {
+        const leftSource = sources.get(left.sourceConnectionId)?.repositoryIdentity ?? left.sourceConnectionId;
+        const rightSource = sources.get(right.sourceConnectionId)?.repositoryIdentity ?? right.sourceConnectionId;
+        return leftSource.localeCompare(rightSource) || left.artifactHash.localeCompare(right.artifactHash) || left.id.localeCompare(right.id);
+    }
+    async #authoritative(applicationId) {
+        const authoritative = await this.authority.get(applicationId);
+        if (!authoritative)
+            throw new Error(`Unknown application "${applicationId}"`);
+        return authoritative;
+    }
+}
+//# sourceMappingURL=application-implementation.js.map

package/node_modules/@appport/core/dist/application-implementation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-implementation.js","sourceRoot":"","sources":["../src/application-implementation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,EAAE,gBAAgB,EAAiE,MAAM,yBAAyB,CAAC;AAC1H,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAoC,MAAM,cAAc,CAAC;AAyB/F,MAAM,OAAO,sCAAuC,SAAQ,KAAK;IAC/D,YAAY,EAAU;QACpB,KAAK,CAAC,8DAA8D,EAAE,GAAG,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,GAAG,wCAAwC,CAAC;IACvD,CAAC;CACF;AAED,MAAM,OAAO,oCAAoC;IACtC,QAAQ,GAAG,IAAI,GAAG,EAAqC,CAAC;IACjE,KAAK,CAAC,GAAG,CAAC,aAAqB,EAAE,gBAAwB;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,IAAI,gBAAgB,EAAE,CAAC,CAAC;QACxE,OAAO,KAAK,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,MAAiC,EAAE,gBAAyB;QACpE,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,KAAK,gBAAgB;YAAE,MAAM,IAAI,sCAAsC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,aAAsB;QAC/B,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aAC/B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,KAAK,aAAa,CAAC;aAC5E,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;aACxC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;CACF;AAiBD,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAU,CAAC;AAC/C,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAA+B,CAAC;AAEvE,qFAAqF;AACrF,MAAM,UAAU,mCAAmC,CAAC,SAAiC;IACnF,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,SAAiC;IAC3F,mCAAmC,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,8BAA8B,CAAC,SAAiC,EAAE,QAA4B;IAC5G,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,CAAC,WAAW,gDAAgD,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,KAAK,SAAS,CAAC,mBAAmB,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,OAAO,mCAAmC;IAE3B;IACA;IACA;IACA;IAJnB,YACmB,KAAqC,EACrC,OAA+B,EAC/B,SAA2C,EAC3C,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAHlD,UAAK,GAAL,KAAK,CAAgC;QACrC,YAAO,GAAP,OAAO,CAAwB;QAC/B,cAAS,GAAT,SAAS,CAAkC;QAC3C,QAAG,GAAH,GAAG,CAA+C;IAClE,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,KAKd;QACC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,kBAAkB,GAAG,CAAC,CAAC;QACzF,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,EAAE,8CAA8C,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,EAAE,+BAA+B,GAAG,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAChE,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,kBAAkB,KAAK,MAAM,CAAC,EAAE;YACvC,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG;YAChD,MAAM,CAAC,mBAAmB,KAAK,aAAa,CAAC,WAAW,CAC3D,CAAC;QACF,MAAM,MAAM,GAA8B;YACxC,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,QAAQ,UAAU,EAAE,EAAE;YAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,kBAAkB,EAAE,MAAM,CAAC,EAAE;YAC7B,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE;YAC9E,mBAAmB,EAAE,aAAa,CAAC,WAAW;YAC9C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;YACvC,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,EAAE;YACpC,UAAU,EAAE,EAAE;SACf,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,MAAM,CAAC,aAAqB,EAAE,gBAAwB;QAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,gBAAgB,GAAG,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QACjD,MAAM,IAAI,GAA8B,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,OAAO,CAAC,aAAqB;QACjC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAgC,EAAE,CAAC;QAClD,KAAK,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,mBAAmB,KAAK,aAAa,CAAC,WAAW,EAAE,CAAC;gBAC7F,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAA8B,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,aAAqB,EAAE,UAA6C;QACjF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACvG,MAAM,GAAG,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAC9C,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;aAC1C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;aAClH,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAoC,EACpC,UAA6C;QAE7C,6BAA6B,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,qBAAqB,CAAC,UAAU,CAAC,oBAAoB,aAAa,GAAG,CAAC,CAAC;QAC3H,CAAC;QACD,MAAM,SAAS,GAA2B;YACxC,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,aAAa;YACb,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;YAClE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QACF,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,GAAG,GAAG,CAAC,aAAqB,EAAE,gBAAwB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC3G,IAAI,GAAG,CAAC,aAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAElE,+EAA+E;IAC/E,KAAK,CAAC,oBAAoB,CAAC,SAAiC;QAC1D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,qBAAqB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;YACjI,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,CAAC,gBAAgB,2CAA2C,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IAED,SAAS,CACP,MAAiC,EACjC,MAA+C,EAC/C,wBAAgC,EAChC,aAAqB;QAErB,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,UAAU;YAC5B,MAAM,CAAC,mBAAmB,KAAK,wBAAwB;YACvD,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,aAAa;YAC1D,CAAC,CAAC,MAAM;YACR,gBAAgB,CAAC,MAAM,EAAE,wBAAwB,CAAC;YAClD,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,CACnD,CAAC;IACJ,CAAC;IAED,MAAM,CACJ,IAA+B,EAC/B,KAAgC,EAChC,OAAiD;QAEjD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,IAAI,IAAI,CAAC,kBAAkB,CAAC;QACvG,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,IAAI,KAAK,CAAC,kBAAkB,CAAC;QAC1G,OAAO,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzI,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,aAAqB;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,aAAa,GAAG,CAAC,CAAC;QAC9E,OAAO,aAAa,CAAC;IACvB,CAAC;CACF"}