@calliopelabs/cli 3.5.3 → 3.6.0

package/dist/execution/guard.js

@@ -1,6 +1,6 @@
 import { randomUUID } from 'node:crypto';
-import { dirname, relative, resolve, isAbsolute } from 'node:path';
-import { canonicalPath } from '../approvals/index.js';
+import { dirname, relative, resolve, isAbsolute, sep } from 'node:path';
+import { canonicalPath, canonicalJson } from '../approvals/index.js';
 import { throwIfCancelled } from '../cancellation.js';
 import { executionToolDenial, executionPathDenial, accountLineage, checkExecutionIdentity, integer, assertExecutionStoreOutsideProject } from './authority.js';
 import { requestCostNanos } from './ledger.js';
@@ -8,13 +8,14 @@ import { ExecutionLimitError } from './types.js';
 import { getBudgetCaps, projectBudgetPath } from '../budget.js';
 import { ProjectSpendLedger } from './project-spend.js';
 import { providerQuote, costCapNanos } from './quote.js';
-import { effectiveExecutionManifest } from './child-grants.js';
+import { effectiveExecutionManifest, executionProjectForAccount } from './child-grants.js';
 import { BRAIN_TOOLS, BRAIN_TOOL_NAMES } from '../brain/tools.js';
 import { readBillingEvidence } from './billing.js';
 import { validateRequestAttribution } from './attribution.js';
 export class ExecutionGuard {
     cwd;
     manifest;
+    scopeManifest;
     deadline;
     expectedHash;
     agentId;
@@ -25,8 +26,10 @@ export class ExecutionGuard {
     workspace;
     attribution;
     measuredInputReservation;
+    artifactHost;
     constructor(execution, cwd) {
         this.cwd = cwd;
+        this.artifactHost = execution.artifactHost === true;
         this.attribution = execution.attribution === undefined ? undefined : validateRequestAttribution(execution.attribution);
         this.measuredInputReservation = execution.measuredInputReservation === true;
         this.assertAuthority = execution.assertAuthority;
@@ -34,7 +37,10 @@ export class ExecutionGuard {
         this.workspace = execution.workspace;
         this.workspace?.assertIdentity();
         const saved = execution.ledger.read(cwd);
-        assertExecutionStoreOutsideProject(saved.manifest.project.root, dirname(execution.ledger.root));
+        const localProject = execution.ledger.executionProject?.(cwd, execution.agentId) ?? saved.manifest.project;
+        if (canonicalJson(localProject) !== canonicalJson(executionProjectForAccount(saved.manifest, saved.projection, execution.agentId)))
+            throw new ExecutionLimitError('authority', 'Child project needs a verified native workspace binding.');
+        assertExecutionStoreOutsideProject(localProject.root, dirname(execution.ledger.root));
         if (saved.projection.manifestHash !== execution.manifestHash)
             throw new ExecutionLimitError('conflict', 'Execution contract does not match the budget ledger.');
         const effective = effectiveExecutionManifest(saved.manifest, saved.projection), agent = accountLineage(effective, execution.agentId)[0];
@@ -44,17 +50,21 @@ export class ExecutionGuard {
         this.agentId = agent.id;
         this.ledger = execution.ledger;
         this.maxOutputTokens = execution.maxOutputTokens;
+        this.scopeManifest = { ...effective, project: localProject };
+        checkExecutionIdentity(this.scopeManifest, cwd);
         this.deadline = Math.min(saved.manifest.deadline, agent.deadline);
-        this.filesRoot = this.workspace?.filesRoot ?? this.manifest.project.root;
+        this.filesRoot = this.workspace?.filesRoot ?? localProject.root;
         if (this.workspace)
-            assertExecutionStoreOutsideProject(this.manifest.project.root, this.filesRoot);
+            assertExecutionStoreOutsideProject(localProject.root, this.filesRoot);
     }
     check = (call, cwd = this.cwd) => {
         this.assertAuthority?.();
         this.workspace?.assertIdentity();
+        if (call.name === 'artifact' && !this.artifactHost)
+            return 'Artifact tools require a native host binding.';
         if (this.workspace && call.name === 'shell')
             return 'Isolated workers cannot issue model-selected shell commands; use the declared coordinator verifier.';
-        const denial = executionToolDenial(this.manifest, this.agentId, call, cwd);
+        const denial = executionToolDenial(this.scopeManifest, this.agentId, call, cwd);
         if (denial || !this.workspace)
             return denial;
         if (['read_file', 'write_file', 'edit_file', 'list_files'].includes(call.name))
@@ -70,7 +80,7 @@ export class ExecutionGuard {
         if (!this.workspace)
             return file;
         this.workspace.assertIdentity();
-        const rel = relative(this.manifest.project.root, file);
+        const rel = relative(this.scopeManifest.project.root, file).split(sep).join('/');
         if (rel === '..' || rel.startsWith('../') || isAbsolute(rel) || rel.split('/').some(p => p.toLowerCase() === '.git'))
             throw new ExecutionLimitError('authority', 'Isolated file path exceeds its project scope.');
         const path = resolve(this.filesRoot, rel);
@@ -80,23 +90,28 @@ export class ExecutionGuard {
     }
     tools(tools) {
         const allowed = accountLineage(this.manifest, this.agentId)[0].allowedTools;
-        return [...tools.filter(t => !BRAIN_TOOL_NAMES.includes(t.name)), ...BRAIN_TOOLS].filter(tool => allowed.includes(tool.name) && ['think', 'ask_question', 'create_plan', 'read_file', 'write_file', 'edit_file', 'list_files', ...BRAIN_TOOL_NAMES].includes(tool.name));
+        return [...tools.filter(t => !BRAIN_TOOL_NAMES.includes(t.name)), ...BRAIN_TOOLS].filter(tool => allowed.includes(tool.name) && ['think', 'ask_question', 'create_plan', 'read_file', 'write_file', 'edit_file', 'list_files', ...BRAIN_TOOL_NAMES, ...(this.artifactHost ? ['artifact'] : [])].includes(tool.name));
     }
     brainContext() {
         return { assertActive: signal => this.assertActive(signal), sourceDenial: source => {
                 const locator = source.locator;
                 if (locator.path && !locator.projectKey)
                     return 'Knowledge file locator lacks a project binding.';
-                if (locator.projectKey && locator.projectKey !== this.manifest.project.key)
+                if (locator.projectKey && locator.projectKey !== this.scopeManifest.project.key)
                     return 'Knowledge source belongs to another project.';
-                return executionPathDenial(this.manifest, accountLineage(this.manifest, this.agentId)[0], locator.projectKey === this.manifest.project.key ? locator.path ?? '.' : '.', 'read');
+                return executionPathDenial(this.scopeManifest, accountLineage(this.manifest, this.agentId)[0], locator.projectKey === this.scopeManifest.project.key ? locator.path ?? '.' : '.', 'read');
             } };
     }
+    async refreshAuthority(signal) {
+        this.assertActive(signal);
+        await this.ledger.refreshAuthority?.(this.cwd, this.agentId, signal);
+        this.assertActive(signal);
+    }
     assertActive(signal) {
         throwIfCancelled(signal);
         this.assertAuthority?.();
         this.workspace?.assertIdentity();
-        checkExecutionIdentity(this.manifest, this.cwd);
+        checkExecutionIdentity(this.scopeManifest, this.cwd);
         if (Date.now() >= this.deadline)
             throw new ExecutionLimitError('deadline', 'Agent deadline expired.');
         const saved = this.ledger.read(this.cwd);
@@ -111,7 +126,7 @@ export class ExecutionGuard {
     budget(route, messages, tools, streaming, signal, onEvent) {
         this.assertActive(signal);
         route = structuredClone(route);
-        const billing = readBillingEvidence(route, this.manifest.project.root);
+        const billing = readBillingEvidence(route, this.scopeManifest.project.root);
         const base = providerQuote(route, messages, tools, streaming, this.maxOutputTokens, billing, undefined, this.measuredInputReservation);
         const projectLedger = new ProjectSpendLedger(projectBudgetPath(this.cwd));
         return {
@@ -123,7 +138,7 @@ export class ExecutionGuard {
                     throw new ExecutionLimitError('authority', 'Provider attempt does not match its discovered budget quote.');
                 if (base.provider === 'openrouter' && (actual.priceCeiling?.input !== base.inputPrice || actual.priceCeiling?.output !== base.outputPrice))
                     throw new ExecutionLimitError('authority', 'Provider price ceiling changed after budget admission.');
-                if (billing && ((billing.profile.admission === 'provider-count-v1' && !actual.inputCount) || readBillingEvidence(route, this.manifest.project.root)?.hash !== billing.hash))
+                if (billing && ((billing.profile.admission === 'provider-count-v1' && !actual.inputCount) || readBillingEvidence(route, this.scopeManifest.project.root)?.hash !== billing.hash))
                     throw new ExecutionLimitError('authority', 'Billing admission was revoked or omitted its count.');
                 const quote = providerQuote(route, messages, tools, streaming, this.maxOutputTokens, billing, actual.inputCount, this.measuredInputReservation);
                 const id = randomUUID(), caps = getBudgetCaps();
@@ -131,7 +146,7 @@ export class ExecutionGuard {
                 const limits = { ...(caps.maxTokensPerRun === undefined ? {} : { tokens: caps.maxTokensPerRun }), ...(caps.maxCostPerRun === undefined ? {} : { costNanos: costCapNanos(caps.maxCostPerRun) }) };
                 let state;
                 try {
-                    state = await this.ledger.reserve(this.cwd, this.expectedHash, { id, agentId: this.agentId, ...quote, limits, ...(this.attribution ? { attribution: this.attribution } : {}) }, signal);
+                    state = await this.ledger.reserve(this.cwd, this.expectedHash, { id, agentId: this.agentId, ...quote, limits, ...(this.attribution ? { attribution: this.attribution } : {}) }, signal, () => this.assertActive(signal));
                 }
                 catch (error) {
                     // A failed reply is not proof that the parent refused admission. Keep
@@ -149,7 +164,7 @@ export class ExecutionGuard {
                 }
                 onEvent?.({ requestId: id, stage: 'reserved', revision: state.revision, ...state.spent });
                 this.assertActive(signal);
-                if (billing && readBillingEvidence(route, this.manifest.project.root)?.hash !== billing.hash)
+                if (billing && readBillingEvidence(route, this.scopeManifest.project.root)?.hash !== billing.hash)
                     throw new ExecutionLimitError('authority', 'Billing admission was revoked while committing its reservation.');
                 return id;
             },

package/dist/execution/guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/execution/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAC,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,UAAU,EAAC,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAIpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,sBAAsB,EAAE,OAAO,EAAC,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AAC9J,OAAO,EAAE,gBAAgB,EAAgC,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAA0B,MAAM,YAAY,CAAC;AACzE,OAAO,EAAC,aAAa,EAAC,iBAAiB,EAAC,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,aAAa,EAAC,YAAY,EAAC,MAAM,YAAY,CAAC;AACtD,OAAO,EAAC,0BAA0B,EAAC,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAC,WAAW,EAAC,gBAAgB,EAAuB,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAC,mBAAmB,EAAC,MAAM,cAAc,CAAC;AACjD,OAAO,EAAC,0BAA0B,EAAyB,MAAM,kBAAkB,CAAC;AAWpF,MAAM,OAAO,cAAc;IAY6B,GAAG;IAXhD,QAAQ,CAAmB;IAC3B,QAAQ,CAAQ;IACR,YAAY,CAAQ;IACpB,OAAO,CAAQ;IACf,MAAM,CAAyB;IACvC,eAAe,CAAQ;IACf,eAAe,CAAW;IAClC,SAAS,CAAQ;IACT,SAAS,CAA8B;IACvC,WAAW,CAAqB;IAChC,wBAAwB,CAAS;IAClD,YAAY,SAAwB,EAAkB,GAAU;mBAAV,GAAG;QACvD,IAAI,CAAC,WAAW,GAAC,SAAS,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,0BAA0B,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,wBAAwB,GAAC,SAAS,CAAC,wBAAwB,KAAG,IAAI,CAAC;QACxL,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,GAAC,SAAS,CAAC,SAAS,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5I,MAAM,KAAK,GAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,kCAAkC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/F,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,SAAS,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,sDAAsD,CAAC,CAAC;QAC3J,MAAM,SAAS,GAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,EAAC,KAAK,GAAC,cAAc,CAAC,SAAS,EAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;QAClI,OAAO,CAAC,SAAS,CAAC,eAAe,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;QAAA,IAAI,CAAC,QAAQ,GAAC,SAAS,CAAC;QAAA,IAAI,CAAC,YAAY,GAAC,SAAS,CAAC,YAAY,CAAC;QAAA,IAAI,CAAC,OAAO,GAAC,KAAK,CAAC,EAAE,CAAC;QAAA,IAAI,CAAC,MAAM,GAAC,SAAS,CAAC,MAAM,CAAC;QAAA,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAClN,IAAI,CAAC,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAC,IAAI,CAAC,SAAS,EAAE,SAAS,IAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACrE,IAAG,IAAI,CAAC,SAAS;YAAC,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,GAAE,CAAC,IAAa,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAmB,EAAE;QACrD,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC1D,IAAG,IAAI,CAAC,SAAS,IAAE,IAAI,CAAC,IAAI,KAAG,OAAO;YAAC,OAAO,qGAAqG,CAAC;QACpJ,MAAM,MAAM,GAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,EAAC,IAAI,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,MAAM,IAAE,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,MAAM,CAAC;QAC/G,IAAG,CAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAC,IAAG,CAAC;gBAAA,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,OAAO,sEAAsE,CAAC;YAAA,CAAC;QAClO,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,QAAQ,CAAC,IAAW;QAClB,IAAG,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,IAAI,CAAC;QAAA,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QACpD,IAAG,GAAG,KAAG,IAAI,IAAE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAE,UAAU,CAAC,GAAG,CAAC,IAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,WAAW,EAAE,KAAG,MAAM,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,+CAA+C,CAAC,CAAC;QACnM,MAAM,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qCAAqC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IACpK,CAAC;IACD,KAAK,CAAC,KAAY;QAChB,MAAM,OAAO,GAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC;QAC1E,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAuC,CAAC,CAAC,EAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAC,cAAc,EAAC,aAAa,EAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,EAAC,GAAG,gBAAgB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAClS,CAAC;IACD,YAAY;QACV,OAAO,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE,CAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE;gBAC1E,MAAM,OAAO,GAAC,MAAM,CAAC,OAAO,CAAC;gBAC7B,IAAG,OAAO,CAAC,IAAI,IAAE,CAAC,OAAO,CAAC,UAAU;oBAAC,OAAO,iDAAiD,CAAC;gBAC9F,IAAG,OAAO,CAAC,UAAU,IAAE,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG;oBAAC,OAAO,8CAA8C,CAAC;gBAC5H,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,EAAC,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAA,CAAC,CAAA,OAAO,CAAC,IAAI,IAAE,GAAG,CAAA,CAAC,CAAA,GAAG,EAAC,MAAM,CAAC,CAAC;YACvK,CAAC,EAAC,CAAC;IACL,CAAC;IACD,YAAY,CAAC,MAAmB;QAC9B,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAAA,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClI,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,IAAI,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,yBAAyB,CAAC,CAAC;QACjG,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAA,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;QACpK,IAAG,KAAK,CAAC,UAAU,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,wEAAwE,CAAC,CAAC;QAC9I,MAAM,OAAO,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;QAC9F,IAAG,OAAO,CAAC,OAAO,IAAE,IAAI,CAAC,iBAAiB,KAAG,SAAS,IAAE,OAAO,CAAC,QAAQ,GAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,eAAe,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,aAAa,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,GAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC;YAC1R,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,4DAA4D,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,CAAC,KAA8B,EAAC,QAAkB,EAAC,KAAY,EAAC,SAAiB,EAAC,MAAmB,EAAC,OAAqG;QAC/M,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,OAAO,GAAC,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjG,MAAM,IAAI,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,SAAS,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC9H,MAAM,aAAa,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAG,YAAY,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,MAAM,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAClH,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,KAAG,mBAAmB,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,wBAAiC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAC1G,OAAO,EAAC,KAAK,EAAC,MAAM,EAAA,EAAE;gBACpB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAE,MAAM,CAAC,KAAK,KAAG,IAAI,CAAC,KAAK,IAAE,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,MAAM,CAAC,eAAe,KAAG,IAAI,CAAC,YAAY;oBACpI,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,8DAA8D,CAAC,CAAC;gBAC5G,IAAG,IAAI,CAAC,QAAQ,KAAG,YAAY,IAAE,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,KAAG,IAAI,CAAC,UAAU,IAAE,MAAM,CAAC,YAAY,EAAE,MAAM,KAAG,IAAI,CAAC,WAAW,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,wDAAwD,CAAC,CAAC;gBACpO,IAAG,OAAO,IAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,KAAG,mBAAmB,IAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qDAAqD,CAAC,CAAC;gBACjQ,MAAM,KAAK,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,MAAM,CAAC,UAAU,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACvI,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;gBAC3C,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,EAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC,iBAAiB,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,gBAAgB,CAAA,CAAC,CAAA,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAC,MAAM,CAAC,CAAC;gBAC3K,MAAM,MAAM,GAAC,EAAC,GAAG,CAAC,IAAI,CAAC,eAAe,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,IAAI,CAAC,eAAe,EAAC,CAAC,EAAC,GAAG,CAAC,IAAI,CAAC,aAAa,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,EAAC,CAAC,EAAC,CAAC;gBAC1K,IAAI,KAAK,CAAC;gBACV,IAAG,CAAC;oBAAA,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,EAAC,GAAG,KAAK,EAAC,MAAM,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,EAAC,MAAM,CAAC,CAAC;gBAAA,CAAC;gBAC1K,OAAM,KAAK,EAAC,CAAC;oBACX,sEAAsE;oBACtE,kEAAkE;oBAClE,wEAAwE;oBACxE,IAAG,CAAC;wBACF,IAAG,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC,KAAK,CAAC,KAAG,KAAK,EAAC,CAAC;4BAC3D,MAAM,OAAO,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;4BACpD,IAAG,OAAO,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY,IAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gCAAC,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC;wBACtG,CAAC;oBACH,CAAC;oBAAA,MAAK,CAAC,CAAA,yEAAyE,CAAA,CAAC;oBACjF,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,UAAU,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBAClF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,OAAO,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,iEAAiE,CAAC,CAAC;gBACpM,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,EAAC,KAAK,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,EAAE;gBAC9B,MAAM,KAAK,GAAC,CAAC,KAAK,IAAE,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,SAAS,CAAC,CAAC;gBACjH,MAAM,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,SAAS,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,eAAe,EAAC,GAAG,CAAC,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,CAAA,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;gBACpJ,MAAM,KAAK,GAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,WAAW,CAAC;gBAC5C,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,OAAO,KAAG,SAAS,IAAE,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,UAAU,EAAC,KAAK,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC/K,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBACjG,IAAG,KAAK,CAAC,QAAQ;oBAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,uEAAuE,CAAC,CAAC;YACpI,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/execution/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAC,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,UAAU,EAAC,GAAG,EAAC,MAAM,WAAW,CAAC;AAClE,OAAO,EAAC,aAAa,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAIlE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,sBAAsB,EAAE,OAAO,EAAC,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AAC9J,OAAO,EAAE,gBAAgB,EAAgC,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAA0B,MAAM,YAAY,CAAC;AACzE,OAAO,EAAC,aAAa,EAAC,iBAAiB,EAAC,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,aAAa,EAAC,YAAY,EAAC,MAAM,YAAY,CAAC;AACtD,OAAO,EAAC,0BAA0B,EAAC,0BAA0B,EAAC,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAC,WAAW,EAAC,gBAAgB,EAAuB,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAC,mBAAmB,EAAC,MAAM,cAAc,CAAC;AACjD,OAAO,EAAC,0BAA0B,EAAyB,MAAM,kBAAkB,CAAC;AAapF,MAAM,OAAO,cAAc;IAc6B,GAAG;IAbhD,QAAQ,CAAmB;IACnB,aAAa,CAAmB;IACxC,QAAQ,CAAQ;IACR,YAAY,CAAQ;IACpB,OAAO,CAAQ;IACf,MAAM,CAAyB;IACvC,eAAe,CAAQ;IACf,eAAe,CAAW;IAClC,SAAS,CAAQ;IACT,SAAS,CAA8B;IACvC,WAAW,CAAqB;IAChC,wBAAwB,CAAS;IACjC,YAAY,CAAS;IACtC,YAAY,SAAwB,EAAkB,GAAU;mBAAV,GAAG;QACvD,IAAI,CAAC,YAAY,GAAC,SAAS,CAAC,YAAY,KAAG,IAAI,CAAC;QAChD,IAAI,CAAC,WAAW,GAAC,SAAS,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,0BAA0B,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,wBAAwB,GAAC,SAAS,CAAC,wBAAwB,KAAG,IAAI,CAAC;QACxL,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,GAAC,SAAS,CAAC,SAAS,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5I,MAAM,KAAK,GAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,YAAY,GAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAC,SAAS,CAAC,OAAO,CAAC,IAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtG,IAAG,aAAa,CAAC,YAAY,CAAC,KAAG,aAAa,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,EAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,0DAA0D,CAAC,CAAC;QACpO,kCAAkC,CAAC,YAAY,CAAC,IAAI,EAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,SAAS,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,sDAAsD,CAAC,CAAC;QAC3J,MAAM,SAAS,GAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,EAAC,KAAK,GAAC,cAAc,CAAC,SAAS,EAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;QAClI,OAAO,CAAC,SAAS,CAAC,eAAe,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;QAAA,IAAI,CAAC,QAAQ,GAAC,SAAS,CAAC;QAAA,IAAI,CAAC,YAAY,GAAC,SAAS,CAAC,YAAY,CAAC;QAAA,IAAI,CAAC,OAAO,GAAC,KAAK,CAAC,EAAE,CAAC;QAAA,IAAI,CAAC,MAAM,GAAC,SAAS,CAAC,MAAM,CAAC;QAAA,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAClN,IAAI,CAAC,aAAa,GAAC,EAAC,GAAG,SAAS,EAAC,OAAO,EAAC,YAAY,EAAC,CAAC;QAAA,sBAAsB,CAAC,IAAI,CAAC,aAAa,EAAC,GAAG,CAAC,CAAC;QACtG,IAAI,CAAC,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAC,IAAI,CAAC,SAAS,EAAE,SAAS,IAAE,YAAY,CAAC,IAAI,CAAC;QAC5D,IAAG,IAAI,CAAC,SAAS;YAAC,kCAAkC,CAAC,YAAY,CAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzF,CAAC;IACD,KAAK,GAAE,CAAC,IAAa,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAmB,EAAE;QACrD,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC1D,IAAG,IAAI,CAAC,IAAI,KAAG,UAAU,IAAE,CAAC,IAAI,CAAC,YAAY;YAAC,OAAO,+CAA+C,CAAC;QACrG,IAAG,IAAI,CAAC,SAAS,IAAE,IAAI,CAAC,IAAI,KAAG,OAAO;YAAC,OAAO,qGAAqG,CAAC;QACpJ,MAAM,MAAM,GAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAC,IAAI,CAAC,OAAO,EAAC,IAAI,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,MAAM,IAAE,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,MAAM,CAAC;QACpH,IAAG,CAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAC,IAAG,CAAC;gBAAA,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,OAAO,sEAAsE,CAAC;YAAA,CAAC;QAClO,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,QAAQ,CAAC,IAAW;QAClB,IAAG,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,IAAI,CAAC;QAAA,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9E,IAAG,GAAG,KAAG,IAAI,IAAE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAE,UAAU,CAAC,GAAG,CAAC,IAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,WAAW,EAAE,KAAG,MAAM,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,+CAA+C,CAAC,CAAC;QACnM,MAAM,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qCAAqC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IACpK,CAAC;IACD,KAAK,CAAC,KAAY;QAChB,MAAM,OAAO,GAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC;QAC1E,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAuC,CAAC,CAAC,EAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAC,cAAc,EAAC,aAAa,EAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,EAAC,GAAG,gBAAgB,EAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAA,CAAC,CAAA,CAAC,UAAU,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzU,CAAC;IACD,YAAY;QACV,OAAO,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE,CAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE;gBAC1E,MAAM,OAAO,GAAC,MAAM,CAAC,OAAO,CAAC;gBAC7B,IAAG,OAAO,CAAC,IAAI,IAAE,CAAC,OAAO,CAAC,UAAU;oBAAC,OAAO,iDAAiD,CAAC;gBAC9F,IAAG,OAAO,CAAC,UAAU,IAAE,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG;oBAAC,OAAO,8CAA8C,CAAC;gBACjI,OAAO,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,EAAC,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAA,CAAC,CAAA,OAAO,CAAC,IAAI,IAAE,GAAG,CAAA,CAAC,CAAA,GAAG,EAAC,MAAM,CAAC,CAAC;YACjL,CAAC,EAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,MAAmB;QACxC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;QACnE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,YAAY,CAAC,MAAmB;QAC9B,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAAA,sBAAsB,CAAC,IAAI,CAAC,aAAa,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvI,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,IAAI,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,yBAAyB,CAAC,CAAC;QACjG,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAA,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;QACpK,IAAG,KAAK,CAAC,UAAU,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,wEAAwE,CAAC,CAAC;QAC9I,MAAM,OAAO,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;QAC9F,IAAG,OAAO,CAAC,OAAO,IAAE,IAAI,CAAC,iBAAiB,KAAG,SAAS,IAAE,OAAO,CAAC,QAAQ,GAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,eAAe,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,aAAa,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,GAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC;YAC1R,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,4DAA4D,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,CAAC,KAA8B,EAAC,QAAkB,EAAC,KAAY,EAAC,SAAiB,EAAC,MAAmB,EAAC,OAAqG;QAC/M,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,OAAO,GAAC,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtG,MAAM,IAAI,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,SAAS,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC9H,MAAM,aAAa,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAG,YAAY,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,MAAM,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAClH,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,KAAG,mBAAmB,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,wBAAiC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAC1G,OAAO,EAAC,KAAK,EAAC,MAAM,EAAA,EAAE;gBACpB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAE,MAAM,CAAC,KAAK,KAAG,IAAI,CAAC,KAAK,IAAE,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,MAAM,CAAC,eAAe,KAAG,IAAI,CAAC,YAAY;oBACpI,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,8DAA8D,CAAC,CAAC;gBAC5G,IAAG,IAAI,CAAC,QAAQ,KAAG,YAAY,IAAE,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,KAAG,IAAI,CAAC,UAAU,IAAE,MAAM,CAAC,YAAY,EAAE,MAAM,KAAG,IAAI,CAAC,WAAW,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,wDAAwD,CAAC,CAAC;gBACpO,IAAG,OAAO,IAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,KAAG,mBAAmB,IAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qDAAqD,CAAC,CAAC;gBACtQ,MAAM,KAAK,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,MAAM,CAAC,UAAU,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACvI,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;gBAC3C,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,EAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC,iBAAiB,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,gBAAgB,CAAA,CAAC,CAAA,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAC,MAAM,CAAC,CAAC;gBAC3K,MAAM,MAAM,GAAC,EAAC,GAAG,CAAC,IAAI,CAAC,eAAe,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,IAAI,CAAC,eAAe,EAAC,CAAC,EAAC,GAAG,CAAC,IAAI,CAAC,aAAa,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,EAAC,CAAC,EAAC,CAAC;gBAC1K,IAAI,KAAK,CAAC;gBACV,IAAG,CAAC;oBAAA,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,EAAC,GAAG,KAAK,EAAC,MAAM,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,EAAC,MAAM,EAAC,GAAE,EAAE,CAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAA,CAAC;gBACxM,OAAM,KAAK,EAAC,CAAC;oBACX,sEAAsE;oBACtE,kEAAkE;oBAClE,wEAAwE;oBACxE,IAAG,CAAC;wBACF,IAAG,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC,KAAK,CAAC,KAAG,KAAK,EAAC,CAAC;4BAC3D,MAAM,OAAO,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;4BACpD,IAAG,OAAO,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY,IAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gCAAC,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC;wBACtG,CAAC;oBACH,CAAC;oBAAA,MAAK,CAAC,CAAA,yEAAyE,CAAA,CAAC;oBACjF,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,UAAU,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBAClF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,OAAO,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,iEAAiE,CAAC,CAAC;gBACzM,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,EAAC,KAAK,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,EAAE;gBAC9B,MAAM,KAAK,GAAC,CAAC,KAAK,IAAE,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,SAAS,CAAC,CAAC;gBACjH,MAAM,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,SAAS,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,eAAe,EAAC,GAAG,CAAC,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,CAAA,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;gBACpJ,MAAM,KAAK,GAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,WAAW,CAAC;gBAC5C,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,OAAO,KAAG,SAAS,IAAE,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,UAAU,EAAC,KAAK,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC/K,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBACjG,IAAG,KAAK,CAAC,QAAQ;oBAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,uEAAuE,CAAC,CAAC;YACpI,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/execution/index.d.ts

@@ -12,4 +12,8 @@ export * from './attribution.js';
 export * from './ledger-protocol.js';
 export * from './ledger-server.js';
 export * from './remote-ledger.js';
+export * from './parent-budget.js';
+export * from './parent-accounting.js';
+export * from './delegated.js';
+export * from './ledger-tunnel.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/execution/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC"}

package/dist/execution/index.js

@@ -12,4 +12,8 @@ export * from './attribution.js';
 export * from './ledger-protocol.js';
 export * from './ledger-server.js';
 export * from './remote-ledger.js';
+export * from './parent-budget.js';
+export * from './parent-accounting.js';
+export * from './delegated.js';
+export * from './ledger-tunnel.js';
 //# sourceMappingURL=index.js.map

package/dist/execution/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC"}

package/dist/execution/ledger-cli.d.ts

@@ -1,2 +1,3 @@
-export declare function runLedgerCommand(args: string[], write?: (text: string) => void): Promise<number>;
+import type { RunActionOptions } from '../orchestration/actions.js';
+export declare function runLedgerCommand(args: string[], write?: (text: string) => void, options?: RunActionOptions): Promise<number>;
 //# sourceMappingURL=ledger-cli.d.ts.map

package/dist/execution/ledger-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-cli.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-cli.ts"],"names":[],"mappings":"AAgBA,wBAAsB,gBAAgB,CAAC,IAAI,EAAC,MAAM,EAAE,EAAC,KAAK,GAAC,CAAC,IAAI,EAAC,MAAM,KAAG,IAA+B,GAAE,OAAO,CAAC,MAAM,CAAC,CAczH"}
+{"version":3,"file":"ledger-cli.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-cli.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,6BAA6B,CAAC;AAOlE,wBAAsB,gBAAgB,CAAC,IAAI,EAAC,MAAM,EAAE,EAAC,KAAK,GAAC,CAAC,IAAI,EAAC,MAAM,KAAG,IAA+B,EAAC,OAAO,GAAC,gBAAmB,GAAE,OAAO,CAAC,MAAM,CAAC,CAgCrJ"}

package/dist/execution/ledger-cli.js

@@ -7,25 +7,62 @@
  * the grant operation. Stops on SIGINT/SIGTERM; reservations stay in the ledger directory. */
 import * as fs from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
+import { assertExecutionStoreOutsideProject } from './authority.js';
+import { privateDirectory } from '../orchestration/execution-store.js';
 import { ReservationLedger } from './ledger.js';
 import { createLedgerServer } from './ledger-server.js';
 import { LEDGER_PROTOCOL, LedgerServerState, mintLedgerToken } from './ledger-protocol.js';
 function option(args, name) { const i = args.indexOf(name); return i >= 0 ? args[i + 1] : undefined; }
-export async function runLedgerCommand(args, write = t => process.stdout.write(t)) {
-    const budget = option(args, '--budget'), project = option(args, '--project'), tokenFile = option(args, '--token-file');
-    if (args[0] !== 'serve' || !budget || !project || !tokenFile) {
-        process.stderr.write('usage: calliope ledger serve --budget DIR --project DIR --token-file FILE [--host 127.0.0.1] [--port 0]\n');
+export async function runLedgerCommand(args, write = t => process.stdout.write(t), options = {}) {
+    const reviewed = args[0] === 'serve-reviewed', budget = option(args, '--budget'), project = option(args, '--project'), tokenFile = option(args, '--token-file');
+    const runId = option(args, '--run'), agentId = option(args, '--agent'), maxOutput = option(args, '--max-output-tokens');
+    const flags = new Set(['--run', '--agent', '--max-output-tokens', '--project', '--token-file', '--host', '--port']), seen = new Set();
+    let valid = true;
+    if (reviewed)
+        for (let n = 1; n < args.length; n += 2) {
+            const flag = args[n];
+            if (!flags.has(flag) || seen.has(flag) || !args[n + 1] || args[n + 1].startsWith('--'))
+                valid = false;
+            seen.add(flag);
+        }
+    if (!project || !tokenFile || (reviewed ? (!runId || !agentId || !maxOutput || !valid) : (args[0] !== 'serve' || !budget))) {
+        process.stderr.write('usage: calliope ledger serve --budget DIR --project DIR --token-file FILE [--host 127.0.0.1] [--port 0]\n       calliope ledger serve-reviewed --run ID --agent ID --max-output-tokens N --project DIR --token-file FILE [--host 127.0.0.1] [--port 0]\n');
         return 2;
     }
-    const ledger = new ReservationLedger(resolve(budget)), cwd = resolve(project), { manifest } = ledger.read(cwd);
-    const state = new LedgerServerState(join(dirname(ledger.root), `${manifest.runId}.ledger-server`));
-    fs.writeFileSync(resolve(tokenFile), mintLedgerToken(state.secret(), { v: 1, run: manifest.runId, role: 'parent', exp: manifest.deadline }), { mode: 0o600, flag: 'wx' });
-    const server = createLedgerServer({ ledger, cwd, state }), host = option(args, '--host') ?? '127.0.0.1';
-    await new Promise((ok, fail) => { server.once('error', fail); server.listen(Number(option(args, '--port') ?? 0), host, ok); });
-    const { port } = server.address();
-    write(JSON.stringify({ protocol: LEDGER_PROTOCOL, url: `http://${host.includes(':') ? `[${host}]` : host}:${port}`, runId: manifest.runId }) + '\n');
-    await new Promise(done => { for (const signal of ['SIGINT', 'SIGTERM'])
-        process.once(signal, () => server.close(() => done())); });
-    return 0;
+    const cwd = resolve(project), file = resolve(tokenFile), host = option(args, '--host') ?? '127.0.0.1', port = Number(option(args, '--port') ?? 0);
+    let server, token, id, metadata = {};
+    if (reviewed) {
+        assertExecutionStoreOutsideProject(cwd, file);
+        privateDirectory(dirname(file));
+        const { prepareReviewedLedger } = await import('../orchestration/reviewed-ledger.js');
+        const prepared = await prepareReviewedLedger(cwd, runId, agentId, Number(maxOutput), options);
+        server = prepared.server;
+        token = prepared.ownerToken;
+        id = runId;
+        metadata = { ownerAgentId: agentId, deadline: prepared.deadline, reviewed: prepared.capability };
+    }
+    else {
+        const ledger = new ReservationLedger(resolve(budget)), { manifest } = ledger.read(cwd), state = new LedgerServerState(join(dirname(ledger.root), `${manifest.runId}.ledger-server`));
+        token = mintLedgerToken(state.secret(), { v: 1, run: manifest.runId, role: 'parent', exp: manifest.deadline });
+        server = createLedgerServer({ ledger, cwd, state });
+        id = manifest.runId;
+    }
+    let stop;
+    try {
+        await new Promise((ok, fail) => { server.once('error', fail); server.listen(port, host, () => { server.off('error', fail); ok(); }); });
+        fs.writeFileSync(file, token, { mode: 0o600, flag: 'wx' });
+        const { port: boundPort } = server.address();
+        write(JSON.stringify({ protocol: LEDGER_PROTOCOL, url: `http://${host.includes(':') ? `[${host}]` : host}:${boundPort}`, runId: id, ...metadata }) + '\n');
+        await new Promise(done => { stop = done; for (const signal of ['SIGINT', 'SIGTERM'])
+            process.once(signal, stop); });
+        return 0;
+    }
+    finally {
+        if (stop)
+            for (const signal of ['SIGINT', 'SIGTERM'])
+                process.off(signal, stop);
+        if (server.listening)
+            await new Promise(done => server.close(() => done()));
+    }
 }
 //# sourceMappingURL=ledger-cli.js.map

package/dist/execution/ledger-cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-cli.js","sourceRoot":"","sources":["../../src/execution/ledger-cli.ts"],"names":[],"mappings":"AAAA;;;;;;8FAM8F;AAC9F,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAC,iBAAiB,EAAC,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,eAAe,EAAC,iBAAiB,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAEvF,SAAS,MAAM,CAAC,IAAa,EAAC,IAAW,IAAoB,MAAM,CAAC,GAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,OAAO,CAAC,IAAE,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC,GAAC,CAAC,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAA,CAAC;AAEzH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAa,EAAC,KAAK,GAAqB,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACvG,MAAM,MAAM,GAAC,MAAM,CAAC,IAAI,EAAC,UAAU,CAAC,EAAC,OAAO,GAAC,MAAM,CAAC,IAAI,EAAC,WAAW,CAAC,EAAC,SAAS,GAAC,MAAM,CAAC,IAAI,EAAC,cAAc,CAAC,CAAC;IAC5G,IAAG,IAAI,CAAC,CAAC,CAAC,KAAG,OAAO,IAAE,CAAC,MAAM,IAAE,CAAC,OAAO,IAAE,CAAC,SAAS,EAAC,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2GAA2G,CAAC,CAAC;QAAA,OAAO,CAAC,CAAC;IAC7I,CAAC;IACD,MAAM,MAAM,GAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAC,GAAG,GAAC,OAAO,CAAC,OAAO,CAAC,EAAC,EAAC,QAAQ,EAAC,GAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrG,MAAM,KAAK,GAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,GAAG,QAAQ,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC;IAChG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,EAAC,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,EAAC,EAAC,CAAC,EAAC,CAAC,EAAC,GAAG,EAAC,QAAQ,CAAC,KAAK,EAAC,IAAI,EAAC,QAAQ,EAAC,GAAG,EAAC,QAAQ,CAAC,QAAQ,EAAC,CAAC,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;IACzJ,MAAM,MAAM,GAAC,kBAAkB,CAAC,EAAC,MAAM,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,IAAE,WAAW,CAAC;IAC5F,MAAM,IAAI,OAAO,CAAO,CAAC,EAAE,EAAC,IAAI,EAAC,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,IAAE,CAAC,CAAC,EAAC,IAAI,EAAC,EAAE,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACzH,MAAM,EAAC,IAAI,EAAC,GAAC,MAAM,CAAC,OAAO,EAAiB,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,QAAQ,EAAC,eAAe,EAAC,GAAG,EAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,IAAI,IAAI,GAAG,CAAA,CAAC,CAAA,IAAI,IAAI,IAAI,EAAE,EAAC,KAAK,EAAC,QAAQ,CAAC,KAAK,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;IACxI,MAAM,IAAI,OAAO,CAAO,IAAI,CAAA,EAAE,GAAC,KAAI,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAC,SAAS,CAAU;QAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAC,GAAE,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACtI,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"ledger-cli.js","sourceRoot":"","sources":["../../src/execution/ledger-cli.ts"],"names":[],"mappings":"AAAA;;;;;;8FAM8F;AAC9F,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAC,kCAAkC,EAAC,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAC,gBAAgB,EAAC,MAAM,qCAAqC,CAAC;AAErE,OAAO,EAAC,iBAAiB,EAAC,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,eAAe,EAAC,iBAAiB,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAEvF,SAAS,MAAM,CAAC,IAAa,EAAC,IAAW,IAAoB,MAAM,CAAC,GAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,OAAO,CAAC,IAAE,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC,GAAC,CAAC,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAA,CAAC;AAEzH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAa,EAAC,KAAK,GAAqB,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,OAAO,GAAkB,EAAE;IACnI,MAAM,QAAQ,GAAC,IAAI,CAAC,CAAC,CAAC,KAAG,gBAAgB,EAAC,MAAM,GAAC,MAAM,CAAC,IAAI,EAAC,UAAU,CAAC,EAAC,OAAO,GAAC,MAAM,CAAC,IAAI,EAAC,WAAW,CAAC,EAAC,SAAS,GAAC,MAAM,CAAC,IAAI,EAAC,cAAc,CAAC,CAAC;IAChJ,MAAM,KAAK,GAAC,MAAM,CAAC,IAAI,EAAC,OAAO,CAAC,EAAC,OAAO,GAAC,MAAM,CAAC,IAAI,EAAC,SAAS,CAAC,EAAC,SAAS,GAAC,MAAM,CAAC,IAAI,EAAC,qBAAqB,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAC,IAAI,GAAG,CAAC,CAAC,OAAO,EAAC,SAAS,EAAC,qBAAqB,EAAC,WAAW,EAAC,cAAc,EAAC,QAAQ,EAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,GAAC,IAAI,GAAG,EAAU,CAAC;IACnI,IAAI,KAAK,GAAC,IAAI,CAAC;IACf,IAAG,QAAQ;QAAC,KAAI,IAAI,CAAC,GAAC,CAAC,EAAC,CAAC,GAAC,IAAI,CAAC,MAAM,EAAC,CAAC,IAAE,CAAC,EAAC,CAAC;YAAA,MAAM,IAAI,GAAC,IAAI,CAAC,CAAC,CAAE,CAAC;YAAA,IAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAE,CAAC,IAAI,CAAC,CAAC,GAAC,CAAC,CAAC,IAAE,IAAI,CAAC,CAAC,GAAC,CAAC,CAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAC,KAAK,GAAC,KAAK,CAAC;YAAA,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAA,CAAC;IACzK,IAAG,CAAC,OAAO,IAAE,CAAC,SAAS,IAAE,CAAC,QAAQ,CAAA,CAAC,CAAA,CAAC,CAAC,KAAK,IAAE,CAAC,OAAO,IAAE,CAAC,SAAS,IAAE,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,CAAC,IAAI,CAAC,CAAC,CAAC,KAAG,OAAO,IAAE,CAAC,MAAM,CAAC,CAAC,EAAC,CAAC;QACvG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0PAA0P,CAAC,CAAC;QAAA,OAAO,CAAC,CAAC;IAC5R,CAAC;IACD,MAAM,GAAG,GAAC,OAAO,CAAC,OAAQ,CAAC,EAAC,IAAI,GAAC,OAAO,CAAC,SAAU,CAAC,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,IAAE,WAAW,EAAC,IAAI,GAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,IAAE,CAAC,CAAC,CAAC;IACnI,IAAI,MAA4C,EAAC,KAAY,EAAC,EAAS,EAAC,QAAQ,GAAQ,EAAE,CAAC;IAC3F,IAAG,QAAQ,EAAC,CAAC;QACX,kCAAkC,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC;QAAA,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,MAAM,EAAC,qBAAqB,EAAC,GAAC,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAC,MAAM,qBAAqB,CAAC,GAAG,EAAC,KAAM,EAAC,OAAQ,EAAC,MAAM,CAAC,SAAS,CAAC,EAAC,OAAO,CAAC,CAAC;QAC1F,MAAM,GAAC,QAAQ,CAAC,MAAM,CAAC;QAAA,KAAK,GAAC,QAAQ,CAAC,UAAU,CAAC;QAAA,EAAE,GAAC,KAAM,CAAC;QAAA,QAAQ,GAAC,EAAC,YAAY,EAAC,OAAO,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,QAAQ,EAAC,QAAQ,CAAC,UAAU,EAAC,CAAC;IACrJ,CAAC;SAAI,CAAC;QACJ,MAAM,MAAM,GAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC,EAAC,EAAC,QAAQ,EAAC,GAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,KAAK,GAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,GAAG,QAAQ,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC;QAC3K,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,EAAC,EAAC,CAAC,EAAC,CAAC,EAAC,GAAG,EAAC,QAAQ,CAAC,KAAK,EAAC,IAAI,EAAC,QAAQ,EAAC,GAAG,EAAC,QAAQ,CAAC,QAAQ,EAAC,CAAC,CAAC;QAAA,MAAM,GAAC,kBAAkB,CAAC,EAAC,MAAM,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,CAAC;QAAA,EAAE,GAAC,QAAQ,CAAC,KAAK,CAAC;IACrK,CAAC;IACD,IAAI,IAAyB,CAAC;IAC9B,IAAG,CAAC;QACF,MAAM,IAAI,OAAO,CAAO,CAAC,EAAE,EAAC,IAAI,EAAC,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,IAAI,EAAC,IAAI,EAAC,GAAE,EAAE,GAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAA,EAAE,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QAC/H,EAAE,CAAC,aAAa,CAAC,IAAI,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QACpD,MAAM,EAAC,IAAI,EAAC,SAAS,EAAC,GAAC,MAAM,CAAC,OAAO,EAAiB,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,QAAQ,EAAC,eAAe,EAAC,GAAG,EAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,IAAI,IAAI,GAAG,CAAA,CAAC,CAAA,IAAI,IAAI,SAAS,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,GAAG,QAAQ,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;QAC7I,MAAM,IAAI,OAAO,CAAO,IAAI,CAAA,EAAE,GAAC,IAAI,GAAC,IAAI,CAAC,CAAA,KAAI,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAC,SAAS,CAAU;YAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QACxH,OAAO,CAAC,CAAC;IACX,CAAC;YAAO,CAAC;QACP,IAAG,IAAI;YAAC,KAAI,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAC,SAAS,CAAU;gBAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;QACnF,IAAG,MAAM,CAAC,SAAS;YAAC,MAAM,IAAI,OAAO,CAAO,IAAI,CAAA,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/execution/ledger-protocol.d.ts

@@ -1,12 +1,16 @@
 export declare const LEDGER_PROTOCOL = "delegation-ledger/v1";
-export declare const LEDGER_OPERATIONS: readonly ['hello', 'journal', 'reserve', 'settle', 'grant', 'revoke'];
+export declare const LEDGER_OPERATIONS: readonly ['hello', 'journal', 'execution', 'reserve', 'settle', 'grant', 'revoke'];
 export type LedgerOperation = typeof LEDGER_OPERATIONS[number];
 export declare const MAX_LEDGER_REQUEST_BYTES: number;
 export interface LedgerTokenClaims {
-    v: 1;
+    v: 1 | 2;
     run: string;
     role: 'parent' | 'child';
     exp: number;
+    /** v2 parent tokens: immutable subtree scope. v1 servers reject this version. */
+    owner?: string;
+    /** Reviewed-host audience. Raw ledger endpoints cannot accept these credentials. */
+    authority?: string;
     /** Child tokens only: the grant they came from, its fencing epoch and the accounts they may charge. */
     grant?: string;
     epoch?: number;

package/dist/execution/ledger-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-protocol.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-protocol.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,eAAe,yBAAuB,CAAC;AACpD,eAAO,MAAM,iBAAiB,YAAE,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,CAAU,CAAC;AAChG,MAAM,MAAM,eAAe,GAAC,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC7D,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAC,CAAC,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IAAC,IAAI,EAAC,QAAQ,GAAC,OAAO,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IACnD,uGAAuG;IACvG,KAAK,CAAC,EAAC,MAAM,CAAC;IAAC,KAAK,CAAC,EAAC,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAC,MAAM,EAAE,CAAC;CAClD;AAKD,wBAAgB,eAAe,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,iBAAiB,GAAE,MAAM,CAE7E;AACD,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,MAAM,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,EAAC,KAAK,EAAC,MAAM,EAAC,GAAG,SAAW,GAAE,iBAAiB,CAa3G;AAED,kGAAkG;AAClG,qBAAa,iBAAiB;IAChB,QAAQ,CAAC,GAAG,EAAC,MAAM;IAA/B,YAAqB,GAAG,EAAC,MAAM,EAAG;IAClC,OAAO,CAAC,MAAM;IAId,MAAM,IAAG,MAAM,CAId;IACD,MAAM,IAAG,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAE7B;IACD,KAAK,CAAC,KAAK,EAAC,MAAM,GAAE,MAAM,CAAkC;IAC5D,wEAAwE;IACxE,SAAS,CAAC,KAAK,EAAC,MAAM,GAAE,OAAO,CAAsC;IACrE,oFAAoF;IACpF,MAAM,CAAC,KAAK,EAAC,MAAM,GAAE,MAAM,CAG1B;CACF"}
+{"version":3,"file":"ledger-protocol.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-protocol.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,eAAe,yBAAuB,CAAC;AACpD,eAAO,MAAM,iBAAiB,YAAE,OAAO,EAAC,SAAS,EAAC,WAAW,EAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,CAAU,CAAC;AAC5G,MAAM,MAAM,eAAe,GAAC,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC7D,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAC,CAAC,GAAC,CAAC,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IAAC,IAAI,EAAC,QAAQ,GAAC,OAAO,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IACrD,iFAAiF;IACjF,KAAK,CAAC,EAAC,MAAM,CAAC;IACd,oFAAoF;IACpF,SAAS,CAAC,EAAC,MAAM,CAAC;IAClB,uGAAuG;IACvG,KAAK,CAAC,EAAC,MAAM,CAAC;IAAC,KAAK,CAAC,EAAC,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAC,MAAM,EAAE,CAAC;CAClD;AAKD,wBAAgB,eAAe,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,iBAAiB,GAAE,MAAM,CAE7E;AACD,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,MAAM,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,EAAC,KAAK,EAAC,MAAM,EAAC,GAAG,SAAW,GAAE,iBAAiB,CAkB3G;AAED,kGAAkG;AAClG,qBAAa,iBAAiB;IAChB,QAAQ,CAAC,GAAG,EAAC,MAAM;IAA/B,YAAqB,GAAG,EAAC,MAAM,EAAG;IAClC,OAAO,CAAC,MAAM;IAId,MAAM,IAAG,MAAM,CAQd;IACD,MAAM,IAAG,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAO7B;IACD,KAAK,CAAC,KAAK,EAAC,MAAM,GAAE,MAAM,CAAkC;IAC5D,wEAAwE;IACxE,SAAS,CAAC,KAAK,EAAC,MAAM,GAAE,OAAO,CAAsC;IACrE,oFAAoF;IACpF,MAAM,CAAC,KAAK,EAAC,MAAM,GAAE,MAAM,CAqB1B;CACF"}

package/dist/execution/ledger-protocol.js

@@ -1,13 +1,15 @@
 /** delegation-ledger/v1: one parent reservation ledger shared with children on other hosts (#415).
  * The parent (or an Astrolift-managed service) serves the existing ReservationLedger; children
  * reserve and settle against it with scoped, fenced bearer tokens. Nothing here widens authority. */
-import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { createHmac, randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
 import * as fs from 'node:fs';
 import { join } from 'node:path';
 import { ExecutionLimitError } from './types.js';
-import { uuid, identifier } from './authority.js';
+import { uuid, identifier, hex } from './authority.js';
+import { privateDirectory, readArtifactBytes } from '../orchestration/execution-store.js';
+import { recoverDeadWriterLock } from './writer-recovery.js';
 export const LEDGER_PROTOCOL = 'delegation-ledger/v1';
-export const LEDGER_OPERATIONS = ['hello', 'journal', 'reserve', 'settle', 'grant', 'revoke'];
+export const LEDGER_OPERATIONS = ['hello', 'journal', 'execution', 'reserve', 'settle', 'grant', 'revoke'];
 export const MAX_LEDGER_REQUEST_BYTES = 256 * 1024;
 const b64 = (value) => Buffer.from(value).toString('base64url');
 const sign = (secret, body) => createHmac('sha256', secret).update(body).digest();
@@ -34,15 +36,31 @@ export function verifyLedgerToken(secret, token, runId, now = Date.now()) {
     catch {
         throw denied('Ledger token is malformed.');
     }
-    if (claims?.v !== 1 || claims.run !== runId || !Number.isSafeInteger(claims.exp) || claims.exp <= now)
+    if (!claims || ![1, 2].includes(claims.v) || claims.run !== runId || !Number.isSafeInteger(claims.exp) || claims.exp <= now)
         throw denied('Ledger token expired or belongs to another run.');
+    if (claims.authority !== undefined && (!hex(claims.authority) || claims.v !== 2))
+        throw denied('Ledger token authority binding is malformed.');
     if (claims.role === 'child') {
-        if (!uuid(claims.grant) || !Number.isSafeInteger(claims.epoch) || !Array.isArray(claims.accounts) || !claims.accounts.length)
+        if (claims.v === 2 && !claims.authority || claims.owner !== undefined || !uuid(claims.grant) || !Number.isSafeInteger(claims.epoch) || Number(claims.epoch) < 1 || !Array.isArray(claims.accounts) || !claims.accounts.length)
             throw denied('Child ledger token is malformed.');
         for (const account of claims.accounts)
             identifier(account);
     }
-    else if (claims.role !== 'parent')
+    else if (claims.role === 'parent') {
+        if (claims.v === 2) {
+            try {
+                identifier(claims.owner);
+            }
+            catch {
+                throw denied('Parent ledger token has no valid owner scope.');
+            }
+        }
+        else if (claims.owner !== undefined)
+            throw denied('Scoped parent tokens require version 2.');
+        if (claims.grant !== undefined || claims.epoch !== undefined || claims.accounts !== undefined)
+            throw denied('Parent ledger token is malformed.');
+    }
+    else
         throw denied('Ledger token role is not recognised.');
     return claims;
 }
@@ -60,47 +78,115 @@ export class LedgerServerState {
             if (error.code !== 'EEXIST')
                 throw error;
         }
-        const stat = fs.lstatSync(this.dir);
-        if (!stat.isDirectory() || stat.isSymbolicLink() || stat.mode & 0o077)
+        try {
+            privateDirectory(this.dir);
+        }
+        catch {
             throw new ExecutionLimitError('unavailable', 'Ledger server state directory is not private.');
+        }
     }
     secret() {
         this.ensure();
         const file = join(this.dir, 'server.key');
+        let created = false;
+        if (!fs.existsSync(file) && fs.existsSync(join(this.dir, 'epochs.json')))
+            throw new ExecutionLimitError('unavailable', 'Ledger server key is missing; restore the verified server state.');
         try {
             fs.writeFileSync(file, randomBytes(32), { mode: 0o600, flag: 'wx' });
+            created = true;
         }
         catch (error) {
             if (error.code !== 'EEXIST')
                 throw error;
         }
-        const key = fs.readFileSync(file);
-        if (key.length !== 32 || fs.statSync(file).mode & 0o077)
-            throw new ExecutionLimitError('unavailable', 'Ledger server key is damaged or not private.');
-        return key;
+        if (created)
+            try {
+                fs.writeFileSync(join(this.dir, 'epochs.json'), '{}', { mode: 0o600, flag: 'wx' });
+            }
+            catch (error) {
+                if (error.code !== 'EEXIST')
+                    throw error;
+            }
+        this.epochs();
+        try {
+            const key = readArtifactBytes(file, 32, true);
+            if (key.length === 32)
+                return key;
+        }
+        catch { /* Preserve invalid state. */ }
+        throw new ExecutionLimitError('unavailable', 'Ledger server key is damaged or not private.');
     }
     epochs() {
         this.ensure();
+        const file = join(this.dir, 'epochs.json');
         try {
-            return JSON.parse(fs.readFileSync(join(this.dir, 'epochs.json'), 'utf8'));
-        }
-        catch (error) {
-            if (error.code === 'ENOENT')
-                return {};
-            throw new ExecutionLimitError('unavailable', 'Ledger grant epochs are damaged.');
+            const value = JSON.parse(readArtifactBytes(file, 1024 * 1024, true).toString());
+            if (value && typeof value === 'object' && !Array.isArray(value) && Object.keys(value).length <= 10000 && Object.entries(value).every(([id, epoch]) => uuid(id) && Number.isSafeInteger(epoch) && Number(epoch) >= 1))
+                return value;
         }
+        catch { /* Preserve invalid state. */ }
+        throw new ExecutionLimitError('unavailable', 'Ledger grant epochs are damaged.');
     }
     epoch(grant) { return this.epochs()[grant] ?? 1; }
     /** Revocation is permanent in v1: a revoked grant is never reissued. */
     isRevoked(grant) { return (this.epochs()[grant] ?? 1) > 1; }
     /** Fencing: every token minted for an earlier epoch of this grant stops working. */
     revoke(grant) {
-        const epochs = this.epochs(), next = (epochs[grant] ?? 1) + 1;
-        epochs[grant] = next;
-        const temp = join(this.dir, `epochs.${process.pid}.tmp`);
-        fs.writeFileSync(temp, JSON.stringify(epochs), { mode: 0o600 });
-        fs.renameSync(temp, join(this.dir, 'epochs.json'));
-        return next;
+        if (!uuid(grant))
+            throw denied('Invalid child grant.');
+        this.ensure();
+        const lock = join(this.dir, 'writer.lock');
+        let fd;
+        try {
+            fd = fs.openSync(lock, 'wx', 0o600);
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            if (!recoverDeadWriterLock(lock))
+                throw new ExecutionLimitError('locked', 'Ledger grant state has another writer.');
+            try {
+                fd = fs.openSync(lock, 'wx', 0o600);
+            }
+            catch {
+                throw new ExecutionLimitError('locked', 'Ledger grant state has another writer.');
+            }
+        }
+        const identity = fs.fstatSync(fd), temp = join(this.dir, `epochs.${randomUUID()}.tmp`);
+        try {
+            fs.writeFileSync(fd, String(process.pid));
+            const epochs = this.epochs(), next = (epochs[grant] ?? 1) + 1;
+            if (!Number.isSafeInteger(next) || !Object.hasOwn(epochs, grant) && Object.keys(epochs).length >= 10000)
+                throw new ExecutionLimitError('limit', 'Ledger revocation retention reached.');
+            epochs[grant] = next;
+            const output = fs.openSync(temp, 'wx', 0o600);
+            try {
+                fs.writeFileSync(output, JSON.stringify(epochs));
+                fs.fsyncSync(output);
+            }
+            finally {
+                fs.closeSync(output);
+            }
+            fs.renameSync(temp, join(this.dir, 'epochs.json'));
+            if (process.platform !== 'win32') {
+                const directory = fs.openSync(this.dir, 'r');
+                try {
+                    fs.fsyncSync(directory);
+                }
+                finally {
+                    fs.closeSync(directory);
+                }
+            }
+            return next;
+        }
+        finally {
+            fs.closeSync(fd);
+            const current = fs.lstatSync(lock);
+            if (current.dev === identity.dev && current.ino === identity.ino) {
+                fs.rmSync(temp, { force: true });
+                fs.unlinkSync(lock);
+            }
+        }
     }
 }
 //# sourceMappingURL=ledger-protocol.js.map

package/dist/execution/ledger-protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-protocol.js","sourceRoot":"","sources":["../../src/execution/ledger-protocol.ts"],"names":[],"mappings":"AAAA;;qGAEqG;AACrG,OAAO,EAAC,UAAU,EAAC,WAAW,EAAC,eAAe,EAAC,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAC,mBAAmB,EAAC,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAC,IAAI,EAAC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAE/C,MAAM,CAAC,MAAM,eAAe,GAAC,sBAAsB,CAAC;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAC,CAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,CAAU,CAAC;AAEhG,MAAM,CAAC,MAAM,wBAAwB,GAAC,GAAG,GAAC,IAAI,CAAC;AAO/C,MAAM,GAAG,GAAC,CAAC,KAAmB,EAAC,EAAE,CAAA,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1E,MAAM,IAAI,GAAC,CAAC,MAAa,EAAC,IAAW,EAAC,EAAE,CAAA,UAAU,CAAC,QAAQ,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1F,MAAM,MAAM,GAAC,CAAC,OAAc,EAAC,EAAE,CAAA,IAAI,mBAAmB,CAAC,WAAW,EAAC,OAAO,CAAC,CAAC;AAE5E,MAAM,UAAU,eAAe,CAAC,MAAa,EAAC,MAAwB;IACpE,MAAM,IAAI,GAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAAA,OAAO,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AACD,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,MAAa,EAAC,KAAa,EAAC,KAAY,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE;IACvF,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,MAAM,GAAC,IAAI;QAAC,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACvF,MAAM,CAAC,IAAI,EAAC,GAAG,EAAC,KAAK,CAAC,GAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAA,IAAG,CAAC,IAAI,IAAE,CAAC,GAAG,IAAE,KAAK,KAAG,SAAS;QAAC,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACrH,MAAM,QAAQ,GAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,EAAC,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAC,WAAW,CAAC,CAAC;IACpE,0FAA0F;IAC1F,IAAG,GAAG,CAAC,KAAK,CAAC,KAAG,GAAG,IAAE,KAAK,CAAC,MAAM,KAAG,QAAQ,CAAC,MAAM,IAAE,CAAC,eAAe,CAAC,KAAK,EAAC,QAAQ,CAAC;QAAC,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC;IACjJ,IAAI,MAAwB,CAAC;IAAA,IAAG,CAAC;QAAA,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAAA,CAAC;IACtJ,IAAG,MAAM,EAAE,CAAC,KAAG,CAAC,IAAE,MAAM,CAAC,GAAG,KAAG,KAAK,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAE,MAAM,CAAC,GAAG,IAAE,GAAG;QAAC,MAAM,MAAM,CAAC,iDAAiD,CAAC,CAAC;IACzJ,IAAG,MAAM,CAAC,IAAI,KAAG,OAAO,EAAC,CAAC;QACxB,IAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM;YAAC,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;QACvK,KAAI,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;YAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;SAAK,IAAG,MAAM,CAAC,IAAI,KAAG,QAAQ;QAAC,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kGAAkG;AAClG,MAAM,OAAO,iBAAiB;IACP,GAAG;IAAxB,YAAqB,GAAU;mBAAV,GAAG;IAAS,CAAC;IAC1B,MAAM;QACZ,IAAG,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,KAAK,CAAC;QAAA,CAAC;QACvH,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAA,IAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAE,IAAI,CAAC,cAAc,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,KAAK;YAAC,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAC,+CAA+C,CAAC,CAAC;IAChM,CAAC;IACD,MAAM;QACJ,IAAI,CAAC,MAAM,EAAE,CAAC;QAAA,MAAM,IAAI,GAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,YAAY,CAAC,CAAC;QACrD,IAAG,CAAC;YAAA,EAAE,CAAC,aAAa,CAAC,IAAI,EAAC,WAAW,CAAC,EAAE,CAAC,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,KAAK,CAAC;QAAA,CAAC;QACjJ,MAAM,GAAG,GAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,GAAG,CAAC,MAAM,KAAG,EAAE,IAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAC,KAAK;YAAC,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAC,8CAA8C,CAAC,CAAC;QAAA,OAAO,GAAG,CAAC;IAC1L,CAAC;IACD,MAAM;QACJ,IAAI,CAAC,MAAM,EAAE,CAAC;QAAA,IAAG,CAAC;YAAA,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,aAAa,CAAC,EAAC,MAAM,CAAC,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,OAAO,EAAE,CAAC;YAAA,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAC,kCAAkC,CAAC,CAAC;QAAA,CAAC;IACzP,CAAC;IACD,KAAK,CAAC,KAAY,IAAU,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAE,CAAC,CAAC,CAAA,CAAC;IAC5D,wEAAwE;IACxE,SAAS,CAAC,KAAY,IAAW,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAE,CAAC,CAAC,GAAC,CAAC,CAAC,CAAA,CAAC;IACrE,oFAAoF;IACpF,MAAM,CAAC,KAAY;QACjB,MAAM,MAAM,GAAC,IAAI,CAAC,MAAM,EAAE,EAAC,IAAI,GAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAE,CAAC,CAAC,GAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,GAAC,IAAI,CAAC;QACxE,MAAM,IAAI,GAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,UAAU,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QAAA,EAAE,CAAC,aAAa,CAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;QAAA,EAAE,CAAC,UAAU,CAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,aAAa,CAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAChL,CAAC;CACF"}
+{"version":3,"file":"ledger-protocol.js","sourceRoot":"","sources":["../../src/execution/ledger-protocol.ts"],"names":[],"mappings":"AAAA;;qGAEqG;AACrG,OAAO,EAAC,UAAU,EAAC,WAAW,EAAC,UAAU,EAAC,eAAe,EAAC,MAAM,aAAa,CAAC;AAC9E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAC,mBAAmB,EAAC,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,EAAC,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAC,gBAAgB,EAAC,iBAAiB,EAAC,MAAM,qCAAqC,CAAC;AACvF,OAAO,EAAC,qBAAqB,EAAC,MAAM,sBAAsB,CAAC;AAE3D,MAAM,CAAC,MAAM,eAAe,GAAC,sBAAsB,CAAC;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAC,CAAC,OAAO,EAAC,SAAS,EAAC,WAAW,EAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,CAAU,CAAC;AAE5G,MAAM,CAAC,MAAM,wBAAwB,GAAC,GAAG,GAAC,IAAI,CAAC;AAW/C,MAAM,GAAG,GAAC,CAAC,KAAmB,EAAC,EAAE,CAAA,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1E,MAAM,IAAI,GAAC,CAAC,MAAa,EAAC,IAAW,EAAC,EAAE,CAAA,UAAU,CAAC,QAAQ,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1F,MAAM,MAAM,GAAC,CAAC,OAAc,EAAC,EAAE,CAAA,IAAI,mBAAmB,CAAC,WAAW,EAAC,OAAO,CAAC,CAAC;AAE5E,MAAM,UAAU,eAAe,CAAC,MAAa,EAAC,MAAwB;IACpE,MAAM,IAAI,GAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAAA,OAAO,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AACD,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,MAAa,EAAC,KAAa,EAAC,KAAY,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAE;IACvF,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,MAAM,GAAC,IAAI;QAAC,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACvF,MAAM,CAAC,IAAI,EAAC,GAAG,EAAC,KAAK,CAAC,GAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAA,IAAG,CAAC,IAAI,IAAE,CAAC,GAAG,IAAE,KAAK,KAAG,SAAS;QAAC,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACrH,MAAM,QAAQ,GAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,EAAC,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAC,WAAW,CAAC,CAAC;IACpE,0FAA0F;IAC1F,IAAG,GAAG,CAAC,KAAK,CAAC,KAAG,GAAG,IAAE,KAAK,CAAC,MAAM,KAAG,QAAQ,CAAC,MAAM,IAAE,CAAC,eAAe,CAAC,KAAK,EAAC,QAAQ,CAAC;QAAC,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC;IACjJ,IAAI,MAAwB,CAAC;IAAA,IAAG,CAAC;QAAA,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAAA,CAAC;IACtJ,IAAG,CAAC,MAAM,IAAE,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAE,MAAM,CAAC,GAAG,KAAG,KAAK,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAE,MAAM,CAAC,GAAG,IAAE,GAAG;QAAC,MAAM,MAAM,CAAC,iDAAiD,CAAC,CAAC;IAC9K,IAAG,MAAM,CAAC,SAAS,KAAG,SAAS,IAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAE,MAAM,CAAC,CAAC,KAAG,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,8CAA8C,CAAC,CAAC;IACrI,IAAG,MAAM,CAAC,IAAI,KAAG,OAAO,EAAC,CAAC;QACxB,IAAG,MAAM,CAAC,CAAC,KAAG,CAAC,IAAE,CAAC,MAAM,CAAC,SAAS,IAAE,MAAM,CAAC,KAAK,KAAG,SAAS,IAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAC,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM;YAAC,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;QAC1P,KAAI,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;YAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;SAAK,IAAG,MAAM,CAAC,IAAI,KAAG,QAAQ,EAAC,CAAC;QAC/B,IAAG,MAAM,CAAC,CAAC,KAAG,CAAC,EAAC,CAAC;YAAA,IAAG,CAAC;gBAAA,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,MAAM,MAAM,CAAC,+CAA+C,CAAC,CAAC;YAAA,CAAC;QAAA,CAAC;aAChH,IAAG,MAAM,CAAC,KAAK,KAAG,SAAS;YAAC,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;QACzF,IAAG,MAAM,CAAC,KAAK,KAAG,SAAS,IAAE,MAAM,CAAC,KAAK,KAAG,SAAS,IAAE,MAAM,CAAC,QAAQ,KAAG,SAAS;YAAC,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;IACvI,CAAC;;QAAK,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kGAAkG;AAClG,MAAM,OAAO,iBAAiB;IACP,GAAG;IAAxB,YAAqB,GAAU;mBAAV,GAAG;IAAS,CAAC;IAC1B,MAAM;QACZ,IAAG,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,KAAK,CAAC;QAAA,CAAC;QACvH,IAAG,CAAC;YAAA,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC;YAAA,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAC,+CAA+C,CAAC,CAAC;QAAA,CAAC;IACtI,CAAC;IACD,MAAM;QACJ,IAAI,CAAC,MAAM,EAAE,CAAC;QAAA,MAAM,IAAI,GAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,YAAY,CAAC,CAAC;QAAA,IAAI,OAAO,GAAC,KAAK,CAAC;QACvE,IAAG,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,aAAa,CAAC,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAC,kEAAkE,CAAC,CAAC;QACrL,IAAG,CAAC;YAAA,EAAE,CAAC,aAAa,CAAC,IAAI,EAAC,WAAW,CAAC,EAAE,CAAC,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;YAAA,OAAO,GAAC,IAAI,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,KAAK,CAAC;QAAA,CAAC;QAC9J,IAAG,OAAO;YAAC,IAAG,CAAC;gBAAA,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,aAAa,CAAC,EAAC,IAAI,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;YAAA,CAAC;YAAA,OAAM,KAAK,EAAC,CAAC;gBAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;oBAAC,MAAM,KAAK,CAAC;YAAA,CAAC;QACzK,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAG,CAAC;YAAA,MAAM,GAAG,GAAC,iBAAiB,CAAC,IAAI,EAAC,EAAE,EAAC,IAAI,CAAC,CAAC;YAAA,IAAG,GAAG,CAAC,MAAM,KAAG,EAAE;gBAAC,OAAO,GAAG,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC,CAAA,6BAA6B,CAAA,CAAC;QACjH,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAC,8CAA8C,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM;QACJ,IAAI,CAAC,MAAM,EAAE,CAAC;QAAA,MAAM,IAAI,GAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,aAAa,CAAC,CAAC;QACtD,IAAG,CAAC;YACF,MAAM,KAAK,GAAS,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAC,IAAI,GAAC,IAAI,EAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClF,IAAG,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,IAAE,KAAK,IAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAC,KAAK,CAAC,EAAC,EAAE,CAAA,IAAI,CAAC,EAAE,CAAC,IAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAE,MAAM,CAAC,KAAK,CAAC,IAAE,CAAC,CAAC;gBAAC,OAAO,KAA8B,CAAC;QACvO,CAAC;QAAA,MAAK,CAAC,CAAA,6BAA6B,CAAA,CAAC;QACrC,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAC,kCAAkC,CAAC,CAAC;IAClF,CAAC;IACD,KAAK,CAAC,KAAY,IAAU,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAE,CAAC,CAAC,CAAA,CAAC;IAC5D,wEAAwE;IACxE,SAAS,CAAC,KAAY,IAAW,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAE,CAAC,CAAC,GAAC,CAAC,CAAC,CAAA,CAAC;IACrE,oFAAoF;IACpF,MAAM,CAAC,KAAY;QACjB,IAAG,CAAC,IAAI,CAAC,KAAK,CAAC;YAAC,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAAA,IAAI,CAAC,MAAM,EAAE,CAAC;QACnE,MAAM,IAAI,GAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,aAAa,CAAC,CAAC;QAAA,IAAI,EAAS,CAAC;QACtD,IAAG,CAAC;YAAA,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAChD,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,KAAK,CAAC;YAChE,IAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,wCAAwC,CAAC,CAAC;YACjH,IAAG,CAAC;gBAAA,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,wCAAwC,CAAC,CAAC;YAAA,CAAC;QAC/H,CAAC;QACD,MAAM,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,UAAU,UAAU,EAAE,MAAM,CAAC,CAAC;QACjF,IAAG,CAAC;YACF,EAAE,CAAC,aAAa,CAAC,EAAE,EAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,IAAI,CAAC,MAAM,EAAE,EAAC,IAAI,GAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAE,CAAC,CAAC,GAAC,CAAC,CAAC;YAC9F,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,KAAK,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,IAAE,KAAK;gBAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAC,sCAAsC,CAAC,CAAC;YAC9K,MAAM,CAAC,KAAK,CAAC,GAAC,IAAI,CAAC;YAAA,MAAM,MAAM,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,CAAC;YAC7D,IAAG,CAAC;gBAAA,EAAE,CAAC,aAAa,CAAC,MAAM,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAA,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAAA,CAAC;oBAAO,CAAC;gBAAA,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAAA,CAAC;YACxG,EAAE,CAAC,UAAU,CAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAC,aAAa,CAAC,CAAC,CAAC;YACjD,IAAG,OAAO,CAAC,QAAQ,KAAG,OAAO,EAAC,CAAC;gBAAA,MAAM,SAAS,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAA,CAAC;YAAA,CAAC;YACxI,OAAO,IAAI,CAAC;QACd,CAAC;gBAAO,CAAC;YACP,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAA,MAAM,OAAO,GAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAClD,IAAG,OAAO,CAAC,GAAG,KAAG,QAAQ,CAAC,GAAG,IAAE,OAAO,CAAC,GAAG,KAAG,QAAQ,CAAC,GAAG,EAAC,CAAC;gBAAA,EAAE,CAAC,MAAM,CAAC,IAAI,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;gBAAA,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAAA,CAAC;QAC/G,CAAC;IACH,CAAC;CACF"}