@calliopelabs/cli 3.5.4 → 3.7.0

package/dist/execution/delegated.d.ts

@@ -0,0 +1,14 @@
+import { type SessionExecutionBinding } from '../sessions/execution-binding.js';
+import { type AgentExecution } from './guard.js';
+export interface DelegatedExecutionOptions {
+    url: string;
+    tokenFile: string;
+    agentId: string;
+    maxOutputTokens?: number;
+}
+export declare function connectDelegatedExecution(cwd: string, options: DelegatedExecutionOptions): Promise<AgentExecution>;
+export declare function executionBinding(execution: AgentExecution): SessionExecutionBinding;
+export declare function assertExecutionBinding(binding: SessionExecutionBinding | undefined, execution: AgentExecution | undefined, requireBound?: boolean): void;
+/** Parse only a complete, unambiguous native delegation tuple. */
+export declare function parseDelegatedExecutionOptions(args: string[]): DelegatedExecutionOptions | undefined;
+//# sourceMappingURL=delegated.d.ts.map

package/dist/execution/delegated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated.d.ts","sourceRoot":"","sources":["../../src/execution/delegated.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,uBAAuB,EAAgC,MAAM,kCAAkC,CAAC;AAE9G,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjE,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC,CAaxH;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,cAAc,GAAG,uBAAuB,CAInF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,SAAS,EAAE,SAAS,EAAE,cAAc,GAAG,SAAS,EAAE,YAAY,UAAQ,GAAG,IAAI,CAKtJ;AAED,kEAAkE;AAClE,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,yBAAyB,GAAG,SAAS,CAiBpG"}

package/dist/execution/delegated.js

@@ -0,0 +1,66 @@
+/** Native parent-ledger admission shared by headless and ACP clients. */
+import { mkdirSync, lstatSync, readFileSync, realpathSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { canonicalJson, digest, projectIdentity } from '../approvals/index.js';
+import { paths } from '../storage.js';
+import { validSessionExecutionBinding } from '../sessions/execution-binding.js';
+import { RemoteReservationLedger } from './remote-ledger.js';
+import { ExecutionGuard } from './guard.js';
+import { ExecutionLimitError } from './types.js';
+export async function connectDelegatedExecution(cwd, options) {
+    // Rotation at the same configured path must retain the verified history floor.
+    mkdirSync(paths.root, { recursive: true, mode: 0o700 });
+    const parent = join(realpathSync(paths.root), 'delegation-ledgers');
+    try {
+        mkdirSync(parent, { mode: 0o700 });
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+    }
+    const stat = lstatSync(parent);
+    if (!stat.isDirectory() || stat.isSymbolicLink() || stat.mode & 0o077)
+        throw new Error('Delegation history directory is not private.');
+    const root = join(parent, digest(canonicalJson({ project: projectIdentity(cwd), tokenFile: resolve(options.tokenFile), agentId: options.agentId })));
+    const ledger = await RemoteReservationLedger.connect({ url: options.url, token: readFileSync(options.tokenFile, 'utf8').trim(), root, execution: { cwd, agentId: options.agentId } });
+    const execution = { ledger, manifestHash: ledger.read(cwd).projection.manifestHash, agentId: options.agentId, maxOutputTokens: options.maxOutputTokens ?? 4096 };
+    new ExecutionGuard(execution, cwd).assertActive();
+    return execution;
+}
+export function executionBinding(execution) {
+    const binding = { version: 1, manifestHash: execution.manifestHash, agentId: execution.agentId };
+    if (!validSessionExecutionBinding(binding))
+        throw new ExecutionLimitError('authority', 'Invalid session execution binding.');
+    return binding;
+}
+export function assertExecutionBinding(binding, execution, requireBound = false) {
+    if (binding ? !execution || !validSessionExecutionBinding(binding)
+        || canonicalJson(binding) !== canonicalJson(executionBinding(execution)) : requireBound) {
+        throw new ExecutionLimitError('authority', 'Session requires its original parent ledger and account; execution binding cannot be removed or replaced.');
+    }
+}
+/** Parse only a complete, unambiguous native delegation tuple. */
+export function parseDelegatedExecutionOptions(args) {
+    const flags = ['--ledger-url', '--ledger-token-file', '--ledger-agent'];
+    if (args.some(value => value.startsWith('--ledger-') && !flags.includes(value))) {
+        throw new Error('Unknown parent ledger option; use separate flag and value arguments.');
+    }
+    const values = flags.map(flag => {
+        const indices = args.flatMap((value, index) => value === flag ? [index] : []);
+        if (indices.length > 1)
+            throw new Error('Repeated parent ledger option.');
+        const index = indices[0];
+        if (index === undefined)
+            return undefined;
+        const value = args[index + 1];
+        if (!value || value.startsWith('--'))
+            throw new Error('Parent ledger option needs a value.');
+        return value;
+    });
+    if (values.every(value => value === undefined))
+        return undefined;
+    if (values.some(value => value === undefined))
+        throw new Error('Delegated runs need --ledger-url, --ledger-token-file and --ledger-agent together.');
+    return { url: values[0], tokenFile: values[1], agentId: values[2] };
+}
+//# sourceMappingURL=delegated.js.map

package/dist/execution/delegated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated.js","sourceRoot":"","sources":["../../src/execution/delegated.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAgC,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAC9G,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAuB,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AASjD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAAW,EAAE,OAAkC;IAC7F,+EAA+E;IAC/E,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACpE,IAAI,CAAC;QAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IAC3C,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACtF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACvI,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACrJ,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACtL,MAAM,SAAS,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;IACjK,IAAI,cAAc,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC;IAClD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAyB;IACxD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;IAC1G,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,oCAAoC,CAAC,CAAC;IAC7H,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAA4C,EAAE,SAAqC,EAAE,YAAY,GAAG,KAAK;IAC9I,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC;WAC7D,aAAa,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QAC1F,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,2GAA2G,CAAC,CAAC;IAC1J,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,8BAA8B,CAAC,IAAc;IAC3D,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACrJ,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC;AACzE,CAAC"}

package/dist/execution/files.js

@@ -1,5 +1,5 @@
 import * as fs from 'node:fs';
-import { dirname, join, relative } from 'node:path';
+import { dirname, join, relative, sep } from 'node:path';
 import { randomUUID, createHash } from 'node:crypto';
 import { canonicalPath } from '../approvals/index.js';
 import { throwIfCancelled } from '../cancellation.js';
@@ -43,10 +43,10 @@ export function agentFiles(guard, agentId, call, signal) {
         }
     };
     return {
-        readTextFile: async (file) => { guard.assertActive(signal); check(file); const value = read(file); snapshots.set(file, value ? { hash: value.hash, mode: value.mode } : null); if (!value)
+        readTextFile: async (file) => { await guard.refreshAuthority(signal); check(file); const value = read(file); snapshots.set(file, value ? { hash: value.hash, mode: value.mode } : null); if (!value)
             throw new Error('File not found.'); check(file); return value.content; },
         writeTextFile: async (file, content) => {
-            guard.assertActive(signal);
+            await guard.refreshAuthority(signal);
             check(file);
             if (Buffer.byteLength(content) > MAX_FILE_BYTES)
                 throw new ExecutionLimitError('limit', 'Agent file output exceeds 1 MiB.');
@@ -79,7 +79,7 @@ export function agentFiles(guard, agentId, call, signal) {
             }
             const account = accountLineage(guard.manifest, agentId)[0];
             for (const path of missing.reverse()) {
-                if (!permits(account.allowedPaths, relative(guard.filesRoot, path), 'write') || canonicalPath(path) !== path)
+                if (!permits(account.allowedPaths, relative(guard.filesRoot, path).split(sep).join('/'), 'write') || canonicalPath(path) !== path)
                     throw new ExecutionLimitError('authority', 'Creating a parent directory exceeds the agent write grant.');
                 check(file);
                 fs.mkdirSync(path, { mode: 0o700 });
@@ -97,7 +97,7 @@ export function agentFiles(guard, agentId, call, signal) {
                 finally {
                     fs.closeSync(fd);
                 }
-                guard.assertActive(signal);
+                await guard.refreshAuthority(signal);
                 check(file);
                 const after = fs.statSync(parent);
                 if (before.ino !== after.ino || before.dev !== after.dev)
@@ -127,7 +127,7 @@ export function agentFiles(guard, agentId, call, signal) {
             }
         },
         listFiles: async (file, recursive) => {
-            guard.assertActive(signal);
+            await guard.refreshAuthority(signal);
             const output = [];
             let count = 0;
             const walk = (dir, depth) => {

package/dist/execution/files.js.map

@@ -1 +1 @@
-{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/execution/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGjD,MAAM,cAAc,GAAC,IAAI,GAAC,IAAI,CAAC;AAC/B,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,KAAoB,EAAC,OAAc,EAAC,IAAa,EAAC,MAAmB;IAC9F,MAAM,SAAS,GAAC,IAAI,GAAG,EAAyC,CAAC;IACjE,MAAM,KAAK,GAAC,CAAC,IAAW,EAAC,EAAE;QACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,MAAM,GAAC,KAAK,CAAC,KAAK,CAAC,EAAC,EAAE,EAAC,YAAY,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,EAAC,SAAS,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,EAAC,CAAC,CAAC;QACjF,IAAG,MAAM;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,MAAM,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,IAAI,GAAC,CAAC,IAAW,EAA+C,EAAE;QACtE,IAAI,GAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,EAAS,CAAC;QAAA,IAAG,CAAC;YAAA,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,OAAO,IAAI,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;QACxM,IAAG,CAAC;YAAA,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,cAAc;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,yDAAyD,CAAC,CAAC;YAC/K,MAAM,MAAM,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAC,CAAC,CAAC,CAAC;YAAA,IAAI,IAAI,GAAC,CAAC,EAAC,CAAQ,CAAC;YAAA,OAAM,IAAI,GAAC,MAAM,CAAC,MAAM,IAAE,CAAC,CAAC,GAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,CAAC,MAAM,GAAC,IAAI,EAAC,IAAI,CAAC,CAAC,GAAC,CAAC;gBAAC,IAAI,IAAE,CAAC,CAAC;YACvJ,IAAG,IAAI,KAAG,IAAI,CAAC,IAAI;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,+BAA+B,CAAC,CAAC;YAAA,OAAO,EAAC,OAAO,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,GAAC,KAAK,EAAC,CAAC;QACvP,CAAC;gBAAO,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAA,CAAC;IAC7B,CAAC,CAAC;IACF,OAAO;QACL,YAAY,EAAC,KAAK,EAAC,IAAI,EAAA,EAAE,GAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,MAAM,KAAK,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,SAAS,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAA,CAAC,CAAA,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,IAAG,CAAC,KAAK;YAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,OAAO,KAAK,CAAC,OAAO,CAAC,CAAA,CAAC;QACxO,aAAa,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,EAAE;YACjC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,CAAC;YAAA,IAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAC,cAAc;gBAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAC,kCAAkC,CAAC,CAAC;YAC9J,MAAM,QAAQ,GAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,0EAA0E;YAC1E,uEAAuE;YACvE,2DAA2D;YAC3D,IAAG,QAAQ,KAAG,SAAS,EAAC,CAAC;gBACvB,IAAI,OAAO,GAAC,KAAK,CAAC;gBAAA,IAAG,CAAC;oBAAA,OAAO,GAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;gBAAA,CAAC;gBAAA,OAAM,KAAK,EAAC,CAAC;oBAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;wBAAC,MAAM,KAAK,CAAC;gBAAA,CAAC;gBAC7I,IAAG,OAAO;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,iDAAiD,CAAC,CAAC;gBACvG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,OAAO,GAAU,EAAE,CAAC;YAAA,IAAI,GAAG,GAAC,MAAM,CAAC;YAClE,OAAM,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAC,CAAC;gBAAA,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAA,MAAM,IAAI,GAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,IAAI,KAAG,GAAG,IAAE,OAAO,CAAC,MAAM,GAAC,EAAE;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,sDAAsD,CAAC,CAAC;gBAAA,GAAG,GAAC,IAAI,CAAC;YAAA,CAAC;YAClN,MAAM,OAAO,GAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;YACzD,KAAI,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,EAAC,CAAC;gBACnC,IAAG,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC,EAAC,OAAO,CAAC,IAAE,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,4DAA4D,CAAC,CAAC;gBAC7M,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAA,EAAE,CAAC,SAAS,CAAC,IAAI,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,MAAM,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,MAAM,EAAC,aAAa,UAAU,EAAE,MAAM,CAAC,CAAC;YACnF,IAAG,CAAC;gBACF,MAAM,OAAO,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,IAAG,CAAC,OAAO,EAAE,IAAI,IAAE,IAAI,CAAC,KAAG,CAAC,QAAQ,EAAE,IAAI,IAAE,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,+DAA+D,CAAC,CAAC;gBACrL,MAAM,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,QAAQ,EAAE,IAAI,IAAE,KAAK,CAAC,CAAC;gBAAA,IAAG,CAAC;oBAAA,EAAE,CAAC,aAAa,CAAC,EAAE,EAAC,OAAO,CAAC,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAA,CAAC;gBACnI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAAA,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAA,MAAM,KAAK,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAA,IAAG,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG,IAAE,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,8CAA8C,CAAC,CAAC;gBAClN,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,IAAG,CAAC,MAAM,EAAE,IAAI,IAAE,IAAI,CAAC,KAAG,CAAC,QAAQ,EAAE,IAAI,IAAE,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;gBACjJ,EAAE,CAAC,UAAU,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC;gBAC7B,uGAAuG;gBACvG,IAAG,OAAO,CAAC,QAAQ,KAAG,OAAO,EAAC,CAAC;oBAAA,MAAM,SAAS,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC;oBAAA,IAAG,CAAC;wBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBAAA,CAAC;4BAAO,CAAC;wBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBAAA,CAAC;gBAAA,CAAC;YACxI,CAAC;oBAAO,CAAC;gBAAA,IAAG,CAAC;oBAAA,MAAM,KAAK,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAAA,IAAG,aAAa,CAAC,MAAM,CAAC,KAAG,MAAM,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG;wBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,4BAA4B,CAAA,CAAC;YAAA,CAAC;QAC1L,CAAC;QACD,SAAS,EAAC,KAAK,EAAC,IAAI,EAAC,SAAS,EAAC,EAAE;YAC/B,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAU,EAAE,CAAC;YAAA,IAAI,KAAK,GAAC,CAAC,CAAC;YACrC,MAAM,IAAI,GAAC,CAAC,GAAU,EAAC,KAAY,EAAC,EAAE;gBACpC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,KAAK,GAAC,CAAC,IAAE,KAAK,IAAE,IAAI;oBAAC,OAAO;gBAAA,MAAM,MAAM,GAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3F,IAAG,CAAC;oBAAA,IAAI,KAAoB,CAAC;oBAAA,OAAM,KAAK,GAAC,IAAI,IAAE,CAAC,KAAK,GAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAC,CAAC;wBAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC;wBAAA,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,KAAK,CAAC,QAAQ;4BAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,yBAAyB,CAAC,CAAC;wBAAA,KAAK,EAAE,CAAC;wBAC3M,MAAM,IAAI,GAAC,IAAI,CAAC,GAAG,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAAA,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACxG,IAAG,SAAS,IAAE,KAAK,CAAC,WAAW,EAAE,IAAE,CAAC,KAAK,CAAC,cAAc,EAAE,IAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;4BAAC,IAAI,CAAC,IAAI,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;oBAC7G,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAA,CAAC;YAChC,CAAC,CAAC;YACF,IAAI,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC;YAAA,IAAG,KAAK,IAAE,IAAI;gBAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAAA,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,mBAAmB,CAAC;QAC/H,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/execution/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGjD,MAAM,cAAc,GAAC,IAAI,GAAC,IAAI,CAAC;AAC/B,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,KAAoB,EAAC,OAAc,EAAC,IAAa,EAAC,MAAmB;IAC9F,MAAM,SAAS,GAAC,IAAI,GAAG,EAAyC,CAAC;IACjE,MAAM,KAAK,GAAC,CAAC,IAAW,EAAC,EAAE;QACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,MAAM,GAAC,KAAK,CAAC,KAAK,CAAC,EAAC,EAAE,EAAC,YAAY,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,EAAC,SAAS,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,EAAC,CAAC,CAAC;QACjF,IAAG,MAAM;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,MAAM,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,IAAI,GAAC,CAAC,IAAW,EAA+C,EAAE;QACtE,IAAI,GAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,EAAS,CAAC;QAAA,IAAG,CAAC;YAAA,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,OAAO,IAAI,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;QACxM,IAAG,CAAC;YAAA,MAAM,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,cAAc;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,yDAAyD,CAAC,CAAC;YAC/K,MAAM,MAAM,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAC,CAAC,CAAC,CAAC;YAAA,IAAI,IAAI,GAAC,CAAC,EAAC,CAAQ,CAAC;YAAA,OAAM,IAAI,GAAC,MAAM,CAAC,MAAM,IAAE,CAAC,CAAC,GAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,CAAC,MAAM,GAAC,IAAI,EAAC,IAAI,CAAC,CAAC,GAAC,CAAC;gBAAC,IAAI,IAAE,CAAC,CAAC;YACvJ,IAAG,IAAI,KAAG,IAAI,CAAC,IAAI;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,+BAA+B,CAAC,CAAC;YAAA,OAAO,EAAC,OAAO,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,GAAC,KAAK,EAAC,CAAC;QACvP,CAAC;gBAAO,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAA,CAAC;IAC7B,CAAC,CAAC;IACF,OAAO;QACL,YAAY,EAAC,KAAK,EAAC,IAAI,EAAA,EAAE,GAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,MAAM,KAAK,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,SAAS,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAA,CAAC,CAAA,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,IAAG,CAAC,KAAK;YAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,OAAO,KAAK,CAAC,OAAO,CAAC,CAAA,CAAC;QAClP,aAAa,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,EAAE;YACjC,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,CAAC;YAAA,IAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAC,cAAc;gBAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAC,kCAAkC,CAAC,CAAC;YACxK,MAAM,QAAQ,GAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,0EAA0E;YAC1E,uEAAuE;YACvE,2DAA2D;YAC3D,IAAG,QAAQ,KAAG,SAAS,EAAC,CAAC;gBACvB,IAAI,OAAO,GAAC,KAAK,CAAC;gBAAA,IAAG,CAAC;oBAAA,OAAO,GAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;gBAAA,CAAC;gBAAA,OAAM,KAAK,EAAC,CAAC;oBAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;wBAAC,MAAM,KAAK,CAAC;gBAAA,CAAC;gBAC7I,IAAG,OAAO;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,iDAAiD,CAAC,CAAC;gBACvG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,OAAO,GAAU,EAAE,CAAC;YAAA,IAAI,GAAG,GAAC,MAAM,CAAC;YAClE,OAAM,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAC,CAAC;gBAAA,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAA,MAAM,IAAI,GAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,IAAI,KAAG,GAAG,IAAE,OAAO,CAAC,MAAM,GAAC,EAAE;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,sDAAsD,CAAC,CAAC;gBAAA,GAAG,GAAC,IAAI,CAAC;YAAA,CAAC;YAClN,MAAM,OAAO,GAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;YACzD,KAAI,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,EAAC,CAAC;gBACnC,IAAG,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,OAAO,CAAC,IAAE,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,4DAA4D,CAAC,CAAC;gBAClO,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAA,EAAE,CAAC,SAAS,CAAC,IAAI,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,MAAM,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,MAAM,EAAC,aAAa,UAAU,EAAE,MAAM,CAAC,CAAC;YACnF,IAAG,CAAC;gBACF,MAAM,OAAO,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,IAAG,CAAC,OAAO,EAAE,IAAI,IAAE,IAAI,CAAC,KAAG,CAAC,QAAQ,EAAE,IAAI,IAAE,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,+DAA+D,CAAC,CAAC;gBACrL,MAAM,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,EAAC,QAAQ,EAAE,IAAI,IAAE,KAAK,CAAC,CAAC;gBAAA,IAAG,CAAC;oBAAA,EAAE,CAAC,aAAa,CAAC,EAAE,EAAC,OAAO,CAAC,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAA,CAAC;gBACnI,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBAAA,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAA,MAAM,KAAK,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAA,IAAG,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG,IAAE,MAAM,CAAC,GAAG,KAAG,KAAK,CAAC,GAAG;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,8CAA8C,CAAC,CAAC;gBAC5N,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,IAAG,CAAC,MAAM,EAAE,IAAI,IAAE,IAAI,CAAC,KAAG,CAAC,QAAQ,EAAE,IAAI,IAAE,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;gBACjJ,EAAE,CAAC,UAAU,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC;gBAC7B,uGAAuG;gBACvG,IAAG,OAAO,CAAC,QAAQ,KAAG,OAAO,EAAC,CAAC;oBAAA,MAAM,SAAS,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC;oBAAA,IAAG,CAAC;wBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBAAA,CAAC;4BAAO,CAAC;wBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBAAA,CAAC;gBAAA,CAAC;YACxI,CAAC;oBAAO,CAAC;gBAAA,IAAG,CAAC;oBAAA,MAAM,KAAK,GAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAAA,IAAG,aAAa,CAAC,MAAM,CAAC,KAAG,MAAM,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG;wBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,4BAA4B,CAAA,CAAC;YAAA,CAAC;QAC1L,CAAC;QACD,SAAS,EAAC,KAAK,EAAC,IAAI,EAAC,SAAS,EAAC,EAAE;YAC/B,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,MAAM,GAAU,EAAE,CAAC;YAAA,IAAI,KAAK,GAAC,CAAC,CAAC;YACrC,MAAM,IAAI,GAAC,CAAC,GAAU,EAAC,KAAY,EAAC,EAAE;gBACpC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAA,IAAG,KAAK,GAAC,CAAC,IAAE,KAAK,IAAE,IAAI;oBAAC,OAAO;gBAAA,MAAM,MAAM,GAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3F,IAAG,CAAC;oBAAA,IAAI,KAAoB,CAAC;oBAAA,OAAM,KAAK,GAAC,IAAI,IAAE,CAAC,KAAK,GAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAC,CAAC;wBAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC;wBAAA,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,KAAK,CAAC,QAAQ;4BAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,yBAAyB,CAAC,CAAC;wBAAA,KAAK,EAAE,CAAC;wBAC3M,MAAM,IAAI,GAAC,IAAI,CAAC,GAAG,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAAA,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACxG,IAAG,SAAS,IAAE,KAAK,CAAC,WAAW,EAAE,IAAE,CAAC,KAAK,CAAC,cAAc,EAAE,IAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;4BAAC,IAAI,CAAC,IAAI,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;oBAC7G,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAA,CAAC;YAChC,CAAC,CAAC;YACF,IAAI,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC;YAAA,IAAG,KAAK,IAAE,IAAI;gBAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAAA,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,mBAAmB,CAAC;QAC/H,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/execution/guard.d.ts

@@ -6,6 +6,8 @@ import { type ExecutionManifest } from './types.js';
 import { type BrainToolContext } from '../brain/tools.js';
 import { type RequestAttribution } from './attribution.js';
 export interface AgentExecution {
+    /** Native coordinator supplied a scoped artifact host for this invocation. */
+    artifactHost?: boolean;
     ledger: ReservationLedgerAccess;
     manifestHash: string;
     agentId: string;
@@ -23,6 +25,7 @@ export interface AgentExecution {
 export declare class ExecutionGuard {
     private readonly cwd;
     readonly manifest: ExecutionManifest;
+    private readonly scopeManifest;
     readonly deadline: number;
     private readonly expectedHash;
     private readonly agentId;
@@ -33,11 +36,13 @@ export declare class ExecutionGuard {
     private readonly workspace?;
     private readonly attribution?;
     private readonly measuredInputReservation;
+    private readonly artifactHost;
     constructor(execution: AgentExecution, cwd: string);
     check: (call: ToolCall, cwd?: string) => string | undefined;
     filePath(file: string): string;
     tools(tools: Tool[]): Tool[];
     brainContext(): BrainToolContext;
+    refreshAuthority(signal?: AbortSignal): Promise<void>;
     assertActive(signal?: AbortSignal): void;
     budget(route: RouteCandidate | undefined, messages: Message[], tools: Tool[], streaming: boolean, signal?: AbortSignal, onEvent?: (event: {
         requestId: string;

package/dist/execution/guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/execution/guard.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAGnE,OAAO,EAAoB,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAKzE,OAAO,EAA8B,KAAK,gBAAgB,EAAC,MAAM,mBAAmB,CAAC;AAErF,OAAO,EAA4B,KAAK,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,uBAAuB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAChG,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,WAAW,CAAC,EAAC,kBAAkB,CAAC;IAChC,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B,wFAAwF;IACxF,SAAS,CAAC,EAAE;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAI,IAAI,CAAA;KAAC,CAAC;CACxD;AACD,qBAAa,cAAc;IAYY,OAAO,CAAC,QAAQ,CAAC,GAAG;IAXzD,QAAQ,CAAC,QAAQ,EAAC,iBAAiB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAC,MAAM,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,QAAQ,CAAC,eAAe,EAAC,MAAM,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAU;IAC3C,QAAQ,CAAC,SAAS,EAAC,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAS;IAClD,YAAY,SAAS,EAAC,cAAc,EAAkB,GAAG,EAAC,MAAM,EAW/D;IACD,KAAK,SAAQ,QAAQ,mBAAe,MAAM,GAAC,SAAS,CAMlD;IACF,QAAQ,CAAC,IAAI,EAAC,MAAM,GAAE,MAAM,CAK3B;IACD,KAAK,CAAC,KAAK,EAAC,IAAI,EAAE,GAAE,IAAI,EAAE,CAGzB;IACD,YAAY,IAAG,gBAAgB,CAO9B;IACD,YAAY,CAAC,MAAM,CAAC,EAAC,WAAW,GAAE,IAAI,CAQrC;IACD,MAAM,CAAC,KAAK,EAAC,cAAc,GAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,EAAC,KAAK,EAAC,IAAI,EAAE,EAAC,SAAS,EAAC,OAAO,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,EAAC,CAAC,KAAK,EAAC;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,KAAK,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,KAAG,IAAI,GAAE,qBAAqB,CA8CvO;CACF"}
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/execution/guard.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAGnE,OAAO,EAAoB,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAKzE,OAAO,EAA8B,KAAK,gBAAgB,EAAC,MAAM,mBAAmB,CAAC;AAErF,OAAO,EAA4B,KAAK,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,YAAY,CAAC,EAAC,OAAO,CAAC;IACtB,MAAM,EAAE,uBAAuB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAChG,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,WAAW,CAAC,EAAC,kBAAkB,CAAC;IAChC,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B,wFAAwF;IACxF,SAAS,CAAC,EAAE;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAI,IAAI,CAAA;KAAC,CAAC;CACxD;AACD,qBAAa,cAAc;IAcY,OAAO,CAAC,QAAQ,CAAC,GAAG;IAbzD,QAAQ,CAAC,QAAQ,EAAC,iBAAiB,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmB;IACjD,QAAQ,CAAC,QAAQ,EAAC,MAAM,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,QAAQ,CAAC,eAAe,EAAC,MAAM,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAU;IAC3C,QAAQ,CAAC,SAAS,EAAC,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAS;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,YAAY,SAAS,EAAC,cAAc,EAAkB,GAAG,EAAC,MAAM,EAe/D;IACD,KAAK,SAAQ,QAAQ,mBAAe,MAAM,GAAC,SAAS,CAOlD;IACF,QAAQ,CAAC,IAAI,EAAC,MAAM,GAAE,MAAM,CAK3B;IACD,KAAK,CAAC,KAAK,EAAC,IAAI,EAAE,GAAE,IAAI,EAAE,CAGzB;IACD,YAAY,IAAG,gBAAgB,CAO9B;IACK,gBAAgB,CAAC,MAAM,CAAC,EAAC,WAAW,GAAE,OAAO,CAAC,IAAI,CAAC,CAIxD;IACD,YAAY,CAAC,MAAM,CAAC,EAAC,WAAW,GAAE,IAAI,CAQrC;IACD,MAAM,CAAC,KAAK,EAAC,cAAc,GAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,EAAC,KAAK,EAAC,IAAI,EAAE,EAAC,SAAS,EAAC,OAAO,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,EAAC,CAAC,KAAK,EAAC;QAAC,SAAS,EAAC,MAAM,CAAC;QAAA,KAAK,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,KAAG,IAAI,GAAE,qBAAqB,CA8CvO;CACF"}

package/dist/execution/guard.js

@@ -1,6 +1,6 @@
 import { randomUUID } from 'node:crypto';
-import { dirname, relative, resolve, isAbsolute } from 'node:path';
-import { canonicalPath } from '../approvals/index.js';
+import { dirname, relative, resolve, isAbsolute, sep } from 'node:path';
+import { canonicalPath, canonicalJson } from '../approvals/index.js';
 import { throwIfCancelled } from '../cancellation.js';
 import { executionToolDenial, executionPathDenial, accountLineage, checkExecutionIdentity, integer, assertExecutionStoreOutsideProject } from './authority.js';
 import { requestCostNanos } from './ledger.js';
@@ -8,13 +8,14 @@ import { ExecutionLimitError } from './types.js';
 import { getBudgetCaps, projectBudgetPath } from '../budget.js';
 import { ProjectSpendLedger } from './project-spend.js';
 import { providerQuote, costCapNanos } from './quote.js';
-import { effectiveExecutionManifest } from './child-grants.js';
+import { effectiveExecutionManifest, executionProjectForAccount } from './child-grants.js';
 import { BRAIN_TOOLS, BRAIN_TOOL_NAMES } from '../brain/tools.js';
 import { readBillingEvidence } from './billing.js';
 import { validateRequestAttribution } from './attribution.js';
 export class ExecutionGuard {
     cwd;
     manifest;
+    scopeManifest;
     deadline;
     expectedHash;
     agentId;
@@ -25,8 +26,10 @@ export class ExecutionGuard {
     workspace;
     attribution;
     measuredInputReservation;
+    artifactHost;
     constructor(execution, cwd) {
         this.cwd = cwd;
+        this.artifactHost = execution.artifactHost === true;
         this.attribution = execution.attribution === undefined ? undefined : validateRequestAttribution(execution.attribution);
         this.measuredInputReservation = execution.measuredInputReservation === true;
         this.assertAuthority = execution.assertAuthority;
@@ -34,7 +37,10 @@ export class ExecutionGuard {
         this.workspace = execution.workspace;
         this.workspace?.assertIdentity();
         const saved = execution.ledger.read(cwd);
-        assertExecutionStoreOutsideProject(saved.manifest.project.root, dirname(execution.ledger.root));
+        const localProject = execution.ledger.executionProject?.(cwd, execution.agentId) ?? saved.manifest.project;
+        if (canonicalJson(localProject) !== canonicalJson(executionProjectForAccount(saved.manifest, saved.projection, execution.agentId)))
+            throw new ExecutionLimitError('authority', 'Child project needs a verified native workspace binding.');
+        assertExecutionStoreOutsideProject(localProject.root, dirname(execution.ledger.root));
         if (saved.projection.manifestHash !== execution.manifestHash)
             throw new ExecutionLimitError('conflict', 'Execution contract does not match the budget ledger.');
         const effective = effectiveExecutionManifest(saved.manifest, saved.projection), agent = accountLineage(effective, execution.agentId)[0];
@@ -44,17 +50,21 @@ export class ExecutionGuard {
         this.agentId = agent.id;
         this.ledger = execution.ledger;
         this.maxOutputTokens = execution.maxOutputTokens;
+        this.scopeManifest = { ...effective, project: localProject };
+        checkExecutionIdentity(this.scopeManifest, cwd);
         this.deadline = Math.min(saved.manifest.deadline, agent.deadline);
-        this.filesRoot = this.workspace?.filesRoot ?? this.manifest.project.root;
+        this.filesRoot = this.workspace?.filesRoot ?? localProject.root;
         if (this.workspace)
-            assertExecutionStoreOutsideProject(this.manifest.project.root, this.filesRoot);
+            assertExecutionStoreOutsideProject(localProject.root, this.filesRoot);
     }
     check = (call, cwd = this.cwd) => {
         this.assertAuthority?.();
         this.workspace?.assertIdentity();
+        if (call.name === 'artifact' && !this.artifactHost)
+            return 'Artifact tools require a native host binding.';
         if (this.workspace && call.name === 'shell')
             return 'Isolated workers cannot issue model-selected shell commands; use the declared coordinator verifier.';
-        const denial = executionToolDenial(this.manifest, this.agentId, call, cwd);
+        const denial = executionToolDenial(this.scopeManifest, this.agentId, call, cwd);
         if (denial || !this.workspace)
             return denial;
         if (['read_file', 'write_file', 'edit_file', 'list_files'].includes(call.name))
@@ -70,7 +80,7 @@ export class ExecutionGuard {
         if (!this.workspace)
             return file;
         this.workspace.assertIdentity();
-        const rel = relative(this.manifest.project.root, file);
+        const rel = relative(this.scopeManifest.project.root, file).split(sep).join('/');
         if (rel === '..' || rel.startsWith('../') || isAbsolute(rel) || rel.split('/').some(p => p.toLowerCase() === '.git'))
             throw new ExecutionLimitError('authority', 'Isolated file path exceeds its project scope.');
         const path = resolve(this.filesRoot, rel);
@@ -80,23 +90,28 @@ export class ExecutionGuard {
     }
     tools(tools) {
         const allowed = accountLineage(this.manifest, this.agentId)[0].allowedTools;
-        return [...tools.filter(t => !BRAIN_TOOL_NAMES.includes(t.name)), ...BRAIN_TOOLS].filter(tool => allowed.includes(tool.name) && ['think', 'ask_question', 'create_plan', 'read_file', 'write_file', 'edit_file', 'list_files', ...BRAIN_TOOL_NAMES].includes(tool.name));
+        return [...tools.filter(t => !BRAIN_TOOL_NAMES.includes(t.name)), ...BRAIN_TOOLS].filter(tool => allowed.includes(tool.name) && ['think', 'ask_question', 'create_plan', 'read_file', 'write_file', 'edit_file', 'list_files', ...BRAIN_TOOL_NAMES, ...(this.artifactHost ? ['artifact'] : [])].includes(tool.name));
     }
     brainContext() {
         return { assertActive: signal => this.assertActive(signal), sourceDenial: source => {
                 const locator = source.locator;
                 if (locator.path && !locator.projectKey)
                     return 'Knowledge file locator lacks a project binding.';
-                if (locator.projectKey && locator.projectKey !== this.manifest.project.key)
+                if (locator.projectKey && locator.projectKey !== this.scopeManifest.project.key)
                     return 'Knowledge source belongs to another project.';
-                return executionPathDenial(this.manifest, accountLineage(this.manifest, this.agentId)[0], locator.projectKey === this.manifest.project.key ? locator.path ?? '.' : '.', 'read');
+                return executionPathDenial(this.scopeManifest, accountLineage(this.manifest, this.agentId)[0], locator.projectKey === this.scopeManifest.project.key ? locator.path ?? '.' : '.', 'read');
             } };
     }
+    async refreshAuthority(signal) {
+        this.assertActive(signal);
+        await this.ledger.refreshAuthority?.(this.cwd, this.agentId, signal);
+        this.assertActive(signal);
+    }
     assertActive(signal) {
         throwIfCancelled(signal);
         this.assertAuthority?.();
         this.workspace?.assertIdentity();
-        checkExecutionIdentity(this.manifest, this.cwd);
+        checkExecutionIdentity(this.scopeManifest, this.cwd);
         if (Date.now() >= this.deadline)
             throw new ExecutionLimitError('deadline', 'Agent deadline expired.');
         const saved = this.ledger.read(this.cwd);
@@ -111,7 +126,7 @@ export class ExecutionGuard {
     budget(route, messages, tools, streaming, signal, onEvent) {
         this.assertActive(signal);
         route = structuredClone(route);
-        const billing = readBillingEvidence(route, this.manifest.project.root);
+        const billing = readBillingEvidence(route, this.scopeManifest.project.root);
         const base = providerQuote(route, messages, tools, streaming, this.maxOutputTokens, billing, undefined, this.measuredInputReservation);
         const projectLedger = new ProjectSpendLedger(projectBudgetPath(this.cwd));
         return {
@@ -123,7 +138,7 @@ export class ExecutionGuard {
                     throw new ExecutionLimitError('authority', 'Provider attempt does not match its discovered budget quote.');
                 if (base.provider === 'openrouter' && (actual.priceCeiling?.input !== base.inputPrice || actual.priceCeiling?.output !== base.outputPrice))
                     throw new ExecutionLimitError('authority', 'Provider price ceiling changed after budget admission.');
-                if (billing && ((billing.profile.admission === 'provider-count-v1' && !actual.inputCount) || readBillingEvidence(route, this.manifest.project.root)?.hash !== billing.hash))
+                if (billing && ((billing.profile.admission === 'provider-count-v1' && !actual.inputCount) || readBillingEvidence(route, this.scopeManifest.project.root)?.hash !== billing.hash))
                     throw new ExecutionLimitError('authority', 'Billing admission was revoked or omitted its count.');
                 const quote = providerQuote(route, messages, tools, streaming, this.maxOutputTokens, billing, actual.inputCount, this.measuredInputReservation);
                 const id = randomUUID(), caps = getBudgetCaps();
@@ -131,7 +146,7 @@ export class ExecutionGuard {
                 const limits = { ...(caps.maxTokensPerRun === undefined ? {} : { tokens: caps.maxTokensPerRun }), ...(caps.maxCostPerRun === undefined ? {} : { costNanos: costCapNanos(caps.maxCostPerRun) }) };
                 let state;
                 try {
-                    state = await this.ledger.reserve(this.cwd, this.expectedHash, { id, agentId: this.agentId, ...quote, limits, ...(this.attribution ? { attribution: this.attribution } : {}) }, signal);
+                    state = await this.ledger.reserve(this.cwd, this.expectedHash, { id, agentId: this.agentId, ...quote, limits, ...(this.attribution ? { attribution: this.attribution } : {}) }, signal, () => this.assertActive(signal));
                 }
                 catch (error) {
                     // A failed reply is not proof that the parent refused admission. Keep
@@ -149,7 +164,7 @@ export class ExecutionGuard {
                 }
                 onEvent?.({ requestId: id, stage: 'reserved', revision: state.revision, ...state.spent });
                 this.assertActive(signal);
-                if (billing && readBillingEvidence(route, this.manifest.project.root)?.hash !== billing.hash)
+                if (billing && readBillingEvidence(route, this.scopeManifest.project.root)?.hash !== billing.hash)
                     throw new ExecutionLimitError('authority', 'Billing admission was revoked while committing its reservation.');
                 return id;
             },

package/dist/execution/guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/execution/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAC,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,UAAU,EAAC,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAIpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,sBAAsB,EAAE,OAAO,EAAC,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AAC9J,OAAO,EAAE,gBAAgB,EAAgC,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAA0B,MAAM,YAAY,CAAC;AACzE,OAAO,EAAC,aAAa,EAAC,iBAAiB,EAAC,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,aAAa,EAAC,YAAY,EAAC,MAAM,YAAY,CAAC;AACtD,OAAO,EAAC,0BAA0B,EAAC,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAC,WAAW,EAAC,gBAAgB,EAAuB,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAC,mBAAmB,EAAC,MAAM,cAAc,CAAC;AACjD,OAAO,EAAC,0BAA0B,EAAyB,MAAM,kBAAkB,CAAC;AAWpF,MAAM,OAAO,cAAc;IAY6B,GAAG;IAXhD,QAAQ,CAAmB;IAC3B,QAAQ,CAAQ;IACR,YAAY,CAAQ;IACpB,OAAO,CAAQ;IACf,MAAM,CAAyB;IACvC,eAAe,CAAQ;IACf,eAAe,CAAW;IAClC,SAAS,CAAQ;IACT,SAAS,CAA8B;IACvC,WAAW,CAAqB;IAChC,wBAAwB,CAAS;IAClD,YAAY,SAAwB,EAAkB,GAAU;mBAAV,GAAG;QACvD,IAAI,CAAC,WAAW,GAAC,SAAS,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,0BAA0B,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,wBAAwB,GAAC,SAAS,CAAC,wBAAwB,KAAG,IAAI,CAAC;QACxL,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,GAAC,SAAS,CAAC,SAAS,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5I,MAAM,KAAK,GAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,kCAAkC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/F,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,SAAS,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,sDAAsD,CAAC,CAAC;QAC3J,MAAM,SAAS,GAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,EAAC,KAAK,GAAC,cAAc,CAAC,SAAS,EAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;QAClI,OAAO,CAAC,SAAS,CAAC,eAAe,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;QAAA,IAAI,CAAC,QAAQ,GAAC,SAAS,CAAC;QAAA,IAAI,CAAC,YAAY,GAAC,SAAS,CAAC,YAAY,CAAC;QAAA,IAAI,CAAC,OAAO,GAAC,KAAK,CAAC,EAAE,CAAC;QAAA,IAAI,CAAC,MAAM,GAAC,SAAS,CAAC,MAAM,CAAC;QAAA,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAClN,IAAI,CAAC,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAC,IAAI,CAAC,SAAS,EAAE,SAAS,IAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACrE,IAAG,IAAI,CAAC,SAAS;YAAC,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,GAAE,CAAC,IAAa,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAmB,EAAE;QACrD,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC1D,IAAG,IAAI,CAAC,SAAS,IAAE,IAAI,CAAC,IAAI,KAAG,OAAO;YAAC,OAAO,qGAAqG,CAAC;QACpJ,MAAM,MAAM,GAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,EAAC,IAAI,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,MAAM,IAAE,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,MAAM,CAAC;QAC/G,IAAG,CAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAC,IAAG,CAAC;gBAAA,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,OAAO,sEAAsE,CAAC;YAAA,CAAC;QAClO,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,QAAQ,CAAC,IAAW;QAClB,IAAG,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,IAAI,CAAC;QAAA,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QACpD,IAAG,GAAG,KAAG,IAAI,IAAE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAE,UAAU,CAAC,GAAG,CAAC,IAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,WAAW,EAAE,KAAG,MAAM,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,+CAA+C,CAAC,CAAC;QACnM,MAAM,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qCAAqC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IACpK,CAAC;IACD,KAAK,CAAC,KAAY;QAChB,MAAM,OAAO,GAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC;QAC1E,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAuC,CAAC,CAAC,EAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAC,cAAc,EAAC,aAAa,EAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,EAAC,GAAG,gBAAgB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAClS,CAAC;IACD,YAAY;QACV,OAAO,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE,CAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE;gBAC1E,MAAM,OAAO,GAAC,MAAM,CAAC,OAAO,CAAC;gBAC7B,IAAG,OAAO,CAAC,IAAI,IAAE,CAAC,OAAO,CAAC,UAAU;oBAAC,OAAO,iDAAiD,CAAC;gBAC9F,IAAG,OAAO,CAAC,UAAU,IAAE,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG;oBAAC,OAAO,8CAA8C,CAAC;gBAC5H,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,EAAC,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAA,CAAC,CAAA,OAAO,CAAC,IAAI,IAAE,GAAG,CAAA,CAAC,CAAA,GAAG,EAAC,MAAM,CAAC,CAAC;YACvK,CAAC,EAAC,CAAC;IACL,CAAC;IACD,YAAY,CAAC,MAAmB;QAC9B,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAAA,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClI,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,IAAI,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,yBAAyB,CAAC,CAAC;QACjG,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAA,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;QACpK,IAAG,KAAK,CAAC,UAAU,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,wEAAwE,CAAC,CAAC;QAC9I,MAAM,OAAO,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;QAC9F,IAAG,OAAO,CAAC,OAAO,IAAE,IAAI,CAAC,iBAAiB,KAAG,SAAS,IAAE,OAAO,CAAC,QAAQ,GAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,eAAe,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,aAAa,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,GAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC;YAC1R,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,4DAA4D,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,CAAC,KAA8B,EAAC,QAAkB,EAAC,KAAY,EAAC,SAAiB,EAAC,MAAmB,EAAC,OAAqG;QAC/M,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,OAAO,GAAC,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjG,MAAM,IAAI,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,SAAS,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC9H,MAAM,aAAa,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAG,YAAY,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,MAAM,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAClH,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,KAAG,mBAAmB,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,wBAAiC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAC1G,OAAO,EAAC,KAAK,EAAC,MAAM,EAAA,EAAE;gBACpB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAE,MAAM,CAAC,KAAK,KAAG,IAAI,CAAC,KAAK,IAAE,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,MAAM,CAAC,eAAe,KAAG,IAAI,CAAC,YAAY;oBACpI,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,8DAA8D,CAAC,CAAC;gBAC5G,IAAG,IAAI,CAAC,QAAQ,KAAG,YAAY,IAAE,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,KAAG,IAAI,CAAC,UAAU,IAAE,MAAM,CAAC,YAAY,EAAE,MAAM,KAAG,IAAI,CAAC,WAAW,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,wDAAwD,CAAC,CAAC;gBACpO,IAAG,OAAO,IAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,KAAG,mBAAmB,IAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qDAAqD,CAAC,CAAC;gBACjQ,MAAM,KAAK,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,MAAM,CAAC,UAAU,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACvI,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;gBAC3C,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,EAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC,iBAAiB,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,gBAAgB,CAAA,CAAC,CAAA,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAC,MAAM,CAAC,CAAC;gBAC3K,MAAM,MAAM,GAAC,EAAC,GAAG,CAAC,IAAI,CAAC,eAAe,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,IAAI,CAAC,eAAe,EAAC,CAAC,EAAC,GAAG,CAAC,IAAI,CAAC,aAAa,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,EAAC,CAAC,EAAC,CAAC;gBAC1K,IAAI,KAAK,CAAC;gBACV,IAAG,CAAC;oBAAA,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,EAAC,GAAG,KAAK,EAAC,MAAM,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,EAAC,MAAM,CAAC,CAAC;gBAAA,CAAC;gBAC1K,OAAM,KAAK,EAAC,CAAC;oBACX,sEAAsE;oBACtE,kEAAkE;oBAClE,wEAAwE;oBACxE,IAAG,CAAC;wBACF,IAAG,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC,KAAK,CAAC,KAAG,KAAK,EAAC,CAAC;4BAC3D,MAAM,OAAO,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;4BACpD,IAAG,OAAO,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY,IAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gCAAC,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC;wBACtG,CAAC;oBACH,CAAC;oBAAA,MAAK,CAAC,CAAA,yEAAyE,CAAA,CAAC;oBACjF,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,UAAU,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBAClF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,OAAO,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,iEAAiE,CAAC,CAAC;gBACpM,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,EAAC,KAAK,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,EAAE;gBAC9B,MAAM,KAAK,GAAC,CAAC,KAAK,IAAE,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,SAAS,CAAC,CAAC;gBACjH,MAAM,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,SAAS,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,eAAe,EAAC,GAAG,CAAC,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,CAAA,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;gBACpJ,MAAM,KAAK,GAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,WAAW,CAAC;gBAC5C,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,OAAO,KAAG,SAAS,IAAE,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,UAAU,EAAC,KAAK,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC/K,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBACjG,IAAG,KAAK,CAAC,QAAQ;oBAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,uEAAuE,CAAC,CAAC;YACpI,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/execution/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAC,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,UAAU,EAAC,GAAG,EAAC,MAAM,WAAW,CAAC;AAClE,OAAO,EAAC,aAAa,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAIlE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,cAAc,EAAE,sBAAsB,EAAE,OAAO,EAAC,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AAC9J,OAAO,EAAE,gBAAgB,EAAgC,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAA0B,MAAM,YAAY,CAAC;AACzE,OAAO,EAAC,aAAa,EAAC,iBAAiB,EAAC,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,aAAa,EAAC,YAAY,EAAC,MAAM,YAAY,CAAC;AACtD,OAAO,EAAC,0BAA0B,EAAC,0BAA0B,EAAC,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAC,WAAW,EAAC,gBAAgB,EAAuB,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAC,mBAAmB,EAAC,MAAM,cAAc,CAAC;AACjD,OAAO,EAAC,0BAA0B,EAAyB,MAAM,kBAAkB,CAAC;AAapF,MAAM,OAAO,cAAc;IAc6B,GAAG;IAbhD,QAAQ,CAAmB;IACnB,aAAa,CAAmB;IACxC,QAAQ,CAAQ;IACR,YAAY,CAAQ;IACpB,OAAO,CAAQ;IACf,MAAM,CAAyB;IACvC,eAAe,CAAQ;IACf,eAAe,CAAW;IAClC,SAAS,CAAQ;IACT,SAAS,CAA8B;IACvC,WAAW,CAAqB;IAChC,wBAAwB,CAAS;IACjC,YAAY,CAAS;IACtC,YAAY,SAAwB,EAAkB,GAAU;mBAAV,GAAG;QACvD,IAAI,CAAC,YAAY,GAAC,SAAS,CAAC,YAAY,KAAG,IAAI,CAAC;QAChD,IAAI,CAAC,WAAW,GAAC,SAAS,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,0BAA0B,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,wBAAwB,GAAC,SAAS,CAAC,wBAAwB,KAAG,IAAI,CAAC;QACxL,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,GAAC,SAAS,CAAC,SAAS,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5I,MAAM,KAAK,GAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,YAAY,GAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAC,SAAS,CAAC,OAAO,CAAC,IAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtG,IAAG,aAAa,CAAC,YAAY,CAAC,KAAG,aAAa,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,EAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,0DAA0D,CAAC,CAAC;QACpO,kCAAkC,CAAC,YAAY,CAAC,IAAI,EAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,SAAS,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,sDAAsD,CAAC,CAAC;QAC3J,MAAM,SAAS,GAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,EAAC,KAAK,GAAC,cAAc,CAAC,SAAS,EAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;QAClI,OAAO,CAAC,SAAS,CAAC,eAAe,EAAC,CAAC,EAAC,SAAS,CAAC,CAAC;QAAA,IAAI,CAAC,QAAQ,GAAC,SAAS,CAAC;QAAA,IAAI,CAAC,YAAY,GAAC,SAAS,CAAC,YAAY,CAAC;QAAA,IAAI,CAAC,OAAO,GAAC,KAAK,CAAC,EAAE,CAAC;QAAA,IAAI,CAAC,MAAM,GAAC,SAAS,CAAC,MAAM,CAAC;QAAA,IAAI,CAAC,eAAe,GAAC,SAAS,CAAC,eAAe,CAAC;QAClN,IAAI,CAAC,aAAa,GAAC,EAAC,GAAG,SAAS,EAAC,OAAO,EAAC,YAAY,EAAC,CAAC;QAAA,sBAAsB,CAAC,IAAI,CAAC,aAAa,EAAC,GAAG,CAAC,CAAC;QACtG,IAAI,CAAC,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAC,IAAI,CAAC,SAAS,EAAE,SAAS,IAAE,YAAY,CAAC,IAAI,CAAC;QAC5D,IAAG,IAAI,CAAC,SAAS;YAAC,kCAAkC,CAAC,YAAY,CAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzF,CAAC;IACD,KAAK,GAAE,CAAC,IAAa,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,EAAmB,EAAE;QACrD,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAC1D,IAAG,IAAI,CAAC,IAAI,KAAG,UAAU,IAAE,CAAC,IAAI,CAAC,YAAY;YAAC,OAAO,+CAA+C,CAAC;QACrG,IAAG,IAAI,CAAC,SAAS,IAAE,IAAI,CAAC,IAAI,KAAG,OAAO;YAAC,OAAO,qGAAqG,CAAC;QACpJ,MAAM,MAAM,GAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAC,IAAI,CAAC,OAAO,EAAC,IAAI,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,MAAM,IAAE,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,MAAM,CAAC;QACpH,IAAG,CAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAC,IAAG,CAAC;gBAAA,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,OAAO,sEAAsE,CAAC;YAAA,CAAC;QAClO,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,QAAQ,CAAC,IAAW;QAClB,IAAG,CAAC,IAAI,CAAC,SAAS;YAAC,OAAO,IAAI,CAAC;QAAA,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9E,IAAG,GAAG,KAAG,IAAI,IAAE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAE,UAAU,CAAC,GAAG,CAAC,IAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,WAAW,EAAE,KAAG,MAAM,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,+CAA+C,CAAC,CAAC;QACnM,MAAM,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qCAAqC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IACpK,CAAC;IACD,KAAK,CAAC,KAAY;QAChB,MAAM,OAAO,GAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC;QAC1E,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAuC,CAAC,CAAC,EAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAC,cAAc,EAAC,aAAa,EAAC,WAAW,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,EAAC,GAAG,gBAAgB,EAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAA,CAAC,CAAA,CAAC,UAAU,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzU,CAAC;IACD,YAAY;QACV,OAAO,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE,CAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAC,YAAY,EAAC,MAAM,CAAA,EAAE;gBAC1E,MAAM,OAAO,GAAC,MAAM,CAAC,OAAO,CAAC;gBAC7B,IAAG,OAAO,CAAC,IAAI,IAAE,CAAC,OAAO,CAAC,UAAU;oBAAC,OAAO,iDAAiD,CAAC;gBAC9F,IAAG,OAAO,CAAC,UAAU,IAAE,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG;oBAAC,OAAO,8CAA8C,CAAC;gBACjI,OAAO,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,EAAC,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAA,CAAC,CAAA,OAAO,CAAC,IAAI,IAAE,GAAG,CAAA,CAAC,CAAA,GAAG,EAAC,MAAM,CAAC,CAAC;YACjL,CAAC,EAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,MAAmB;QACxC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;QACnE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,YAAY,CAAC,MAAmB;QAC9B,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAA,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;QAAA,sBAAsB,CAAC,IAAI,CAAC,aAAa,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvI,IAAG,IAAI,CAAC,GAAG,EAAE,IAAE,IAAI,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,yBAAyB,CAAC,CAAC;QACjG,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAA,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY;YAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;QACpK,IAAG,KAAK,CAAC,UAAU,CAAC,QAAQ;YAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,wEAAwE,CAAC,CAAC;QAC9I,MAAM,OAAO,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;QAC9F,IAAG,OAAO,CAAC,OAAO,IAAE,IAAI,CAAC,iBAAiB,KAAG,SAAS,IAAE,OAAO,CAAC,QAAQ,GAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,eAAe,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,aAAa,KAAG,SAAS,IAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,GAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC;YAC1R,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,4DAA4D,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,CAAC,KAA8B,EAAC,QAAkB,EAAC,KAAY,EAAC,SAAiB,EAAC,MAAmB,EAAC,OAAqG;QAC/M,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,OAAO,GAAC,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtG,MAAM,IAAI,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,SAAS,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC9H,MAAM,aAAa,GAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAG,YAAY,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,MAAM,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAClH,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,KAAG,mBAAmB,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,wBAAiC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAC1G,OAAO,EAAC,KAAK,EAAC,MAAM,EAAA,EAAE;gBACpB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAE,MAAM,CAAC,KAAK,KAAG,IAAI,CAAC,KAAK,IAAE,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,MAAM,CAAC,eAAe,KAAG,IAAI,CAAC,YAAY;oBACpI,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,8DAA8D,CAAC,CAAC;gBAC5G,IAAG,IAAI,CAAC,QAAQ,KAAG,YAAY,IAAE,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,KAAG,IAAI,CAAC,UAAU,IAAE,MAAM,CAAC,YAAY,EAAE,MAAM,KAAG,IAAI,CAAC,WAAW,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,wDAAwD,CAAC,CAAC;gBACpO,IAAG,OAAO,IAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,KAAG,mBAAmB,IAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,qDAAqD,CAAC,CAAC;gBACtQ,MAAM,KAAK,GAAC,aAAa,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,IAAI,CAAC,eAAe,EAAC,OAAO,EAAC,MAAM,CAAC,UAAU,EAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACvI,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,IAAI,GAAC,aAAa,EAAE,CAAC;gBAC3C,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,EAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAC,KAAK,CAAC,SAAS,EAAC,IAAI,CAAC,iBAAiB,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,gBAAgB,CAAA,CAAC,CAAA,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAC,MAAM,CAAC,CAAC;gBAC3K,MAAM,MAAM,GAAC,EAAC,GAAG,CAAC,IAAI,CAAC,eAAe,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,IAAI,CAAC,eAAe,EAAC,CAAC,EAAC,GAAG,CAAC,IAAI,CAAC,aAAa,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,EAAC,CAAC,EAAC,CAAC;gBAC1K,IAAI,KAAK,CAAC;gBACV,IAAG,CAAC;oBAAA,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,EAAC,GAAG,KAAK,EAAC,MAAM,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,EAAC,MAAM,EAAC,GAAE,EAAE,CAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAA,CAAC;gBACxM,OAAM,KAAK,EAAC,CAAC;oBACX,sEAAsE;oBACtE,kEAAkE;oBAClE,wEAAwE;oBACxE,IAAG,CAAC;wBACF,IAAG,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC,KAAK,CAAC,KAAG,KAAK,EAAC,CAAC;4BAC3D,MAAM,OAAO,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;4BACpD,IAAG,OAAO,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY,IAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gCAAC,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC;wBACtG,CAAC;oBACH,CAAC;oBAAA,MAAK,CAAC,CAAA,yEAAyE,CAAA,CAAC;oBACjF,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,UAAU,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBAClF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAG,OAAO,IAAE,mBAAmB,CAAC,KAAK,EAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,KAAG,OAAO,CAAC,IAAI;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,iEAAiE,CAAC,CAAC;gBACzM,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,EAAC,KAAK,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,EAAE;gBAC9B,MAAM,KAAK,GAAC,CAAC,KAAK,IAAE,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,CAAC,IAAE,SAAS,CAAC,CAAC;gBACjH,MAAM,KAAK,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAC,IAAI,CAAC,YAAY,EAAC,EAAC,SAAS,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,eAAe,EAAC,GAAG,CAAC,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,CAAA,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;gBACpJ,MAAM,KAAK,GAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,WAAW,CAAC;gBAC5C,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,EAAC,OAAO,KAAG,SAAS,IAAE,KAAK,IAAE,KAAK,CAAA,CAAC,CAAA,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,UAAU,EAAC,KAAK,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC/K,OAAO,EAAE,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,KAAK,CAAC,KAAK,EAAC,CAAC,CAAC;gBACjG,IAAG,KAAK,CAAC,QAAQ;oBAAC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,EAAC,uEAAuE,CAAC,CAAC;YACpI,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/execution/index.d.ts

@@ -12,4 +12,8 @@ export * from './attribution.js';
 export * from './ledger-protocol.js';
 export * from './ledger-server.js';
 export * from './remote-ledger.js';
+export * from './parent-budget.js';
+export * from './parent-accounting.js';
+export * from './delegated.js';
+export * from './ledger-tunnel.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/execution/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC"}

package/dist/execution/index.js

@@ -12,4 +12,8 @@ export * from './attribution.js';
 export * from './ledger-protocol.js';
 export * from './ledger-server.js';
 export * from './remote-ledger.js';
+export * from './parent-budget.js';
+export * from './parent-accounting.js';
+export * from './delegated.js';
+export * from './ledger-tunnel.js';
 //# sourceMappingURL=index.js.map

package/dist/execution/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC"}

package/dist/execution/ledger-cli.d.ts

@@ -1,2 +1,3 @@
-export declare function runLedgerCommand(args: string[], write?: (text: string) => void): Promise<number>;
+import type { RunActionOptions } from '../orchestration/actions.js';
+export declare function runLedgerCommand(args: string[], write?: (text: string) => void, options?: RunActionOptions): Promise<number>;
 //# sourceMappingURL=ledger-cli.d.ts.map

package/dist/execution/ledger-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-cli.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-cli.ts"],"names":[],"mappings":"AAgBA,wBAAsB,gBAAgB,CAAC,IAAI,EAAC,MAAM,EAAE,EAAC,KAAK,GAAC,CAAC,IAAI,EAAC,MAAM,KAAG,IAA+B,GAAE,OAAO,CAAC,MAAM,CAAC,CAczH"}
+{"version":3,"file":"ledger-cli.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-cli.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,6BAA6B,CAAC;AAOlE,wBAAsB,gBAAgB,CAAC,IAAI,EAAC,MAAM,EAAE,EAAC,KAAK,GAAC,CAAC,IAAI,EAAC,MAAM,KAAG,IAA+B,EAAC,OAAO,GAAC,gBAAmB,GAAE,OAAO,CAAC,MAAM,CAAC,CAgCrJ"}

package/dist/execution/ledger-cli.js

@@ -7,25 +7,62 @@
  * the grant operation. Stops on SIGINT/SIGTERM; reservations stay in the ledger directory. */
 import * as fs from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
+import { assertExecutionStoreOutsideProject } from './authority.js';
+import { privateDirectory } from '../orchestration/execution-store.js';
 import { ReservationLedger } from './ledger.js';
 import { createLedgerServer } from './ledger-server.js';
 import { LEDGER_PROTOCOL, LedgerServerState, mintLedgerToken } from './ledger-protocol.js';
 function option(args, name) { const i = args.indexOf(name); return i >= 0 ? args[i + 1] : undefined; }
-export async function runLedgerCommand(args, write = t => process.stdout.write(t)) {
-    const budget = option(args, '--budget'), project = option(args, '--project'), tokenFile = option(args, '--token-file');
-    if (args[0] !== 'serve' || !budget || !project || !tokenFile) {
-        process.stderr.write('usage: calliope ledger serve --budget DIR --project DIR --token-file FILE [--host 127.0.0.1] [--port 0]\n');
+export async function runLedgerCommand(args, write = t => process.stdout.write(t), options = {}) {
+    const reviewed = args[0] === 'serve-reviewed', budget = option(args, '--budget'), project = option(args, '--project'), tokenFile = option(args, '--token-file');
+    const runId = option(args, '--run'), agentId = option(args, '--agent'), maxOutput = option(args, '--max-output-tokens');
+    const flags = new Set(['--run', '--agent', '--max-output-tokens', '--project', '--token-file', '--host', '--port']), seen = new Set();
+    let valid = true;
+    if (reviewed)
+        for (let n = 1; n < args.length; n += 2) {
+            const flag = args[n];
+            if (!flags.has(flag) || seen.has(flag) || !args[n + 1] || args[n + 1].startsWith('--'))
+                valid = false;
+            seen.add(flag);
+        }
+    if (!project || !tokenFile || (reviewed ? (!runId || !agentId || !maxOutput || !valid) : (args[0] !== 'serve' || !budget))) {
+        process.stderr.write('usage: calliope ledger serve --budget DIR --project DIR --token-file FILE [--host 127.0.0.1] [--port 0]\n       calliope ledger serve-reviewed --run ID --agent ID --max-output-tokens N --project DIR --token-file FILE [--host 127.0.0.1] [--port 0]\n');
         return 2;
     }
-    const ledger = new ReservationLedger(resolve(budget)), cwd = resolve(project), { manifest } = ledger.read(cwd);
-    const state = new LedgerServerState(join(dirname(ledger.root), `${manifest.runId}.ledger-server`));
-    fs.writeFileSync(resolve(tokenFile), mintLedgerToken(state.secret(), { v: 1, run: manifest.runId, role: 'parent', exp: manifest.deadline }), { mode: 0o600, flag: 'wx' });
-    const server = createLedgerServer({ ledger, cwd, state }), host = option(args, '--host') ?? '127.0.0.1';
-    await new Promise((ok, fail) => { server.once('error', fail); server.listen(Number(option(args, '--port') ?? 0), host, ok); });
-    const { port } = server.address();
-    write(JSON.stringify({ protocol: LEDGER_PROTOCOL, url: `http://${host.includes(':') ? `[${host}]` : host}:${port}`, runId: manifest.runId }) + '\n');
-    await new Promise(done => { for (const signal of ['SIGINT', 'SIGTERM'])
-        process.once(signal, () => server.close(() => done())); });
-    return 0;
+    const cwd = resolve(project), file = resolve(tokenFile), host = option(args, '--host') ?? '127.0.0.1', port = Number(option(args, '--port') ?? 0);
+    let server, token, id, metadata = {};
+    if (reviewed) {
+        assertExecutionStoreOutsideProject(cwd, file);
+        privateDirectory(dirname(file));
+        const { prepareReviewedLedger } = await import('../orchestration/reviewed-ledger.js');
+        const prepared = await prepareReviewedLedger(cwd, runId, agentId, Number(maxOutput), options);
+        server = prepared.server;
+        token = prepared.ownerToken;
+        id = runId;
+        metadata = { ownerAgentId: agentId, deadline: prepared.deadline, reviewed: prepared.capability };
+    }
+    else {
+        const ledger = new ReservationLedger(resolve(budget)), { manifest } = ledger.read(cwd), state = new LedgerServerState(join(dirname(ledger.root), `${manifest.runId}.ledger-server`));
+        token = mintLedgerToken(state.secret(), { v: 1, run: manifest.runId, role: 'parent', exp: manifest.deadline });
+        server = createLedgerServer({ ledger, cwd, state });
+        id = manifest.runId;
+    }
+    let stop;
+    try {
+        await new Promise((ok, fail) => { server.once('error', fail); server.listen(port, host, () => { server.off('error', fail); ok(); }); });
+        fs.writeFileSync(file, token, { mode: 0o600, flag: 'wx' });
+        const { port: boundPort } = server.address();
+        write(JSON.stringify({ protocol: LEDGER_PROTOCOL, url: `http://${host.includes(':') ? `[${host}]` : host}:${boundPort}`, runId: id, ...metadata }) + '\n');
+        await new Promise(done => { stop = done; for (const signal of ['SIGINT', 'SIGTERM'])
+            process.once(signal, stop); });
+        return 0;
+    }
+    finally {
+        if (stop)
+            for (const signal of ['SIGINT', 'SIGTERM'])
+                process.off(signal, stop);
+        if (server.listening)
+            await new Promise(done => server.close(() => done()));
+    }
 }
 //# sourceMappingURL=ledger-cli.js.map

package/dist/execution/ledger-cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-cli.js","sourceRoot":"","sources":["../../src/execution/ledger-cli.ts"],"names":[],"mappings":"AAAA;;;;;;8FAM8F;AAC9F,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAC,iBAAiB,EAAC,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,eAAe,EAAC,iBAAiB,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAEvF,SAAS,MAAM,CAAC,IAAa,EAAC,IAAW,IAAoB,MAAM,CAAC,GAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,OAAO,CAAC,IAAE,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC,GAAC,CAAC,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAA,CAAC;AAEzH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAa,EAAC,KAAK,GAAqB,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACvG,MAAM,MAAM,GAAC,MAAM,CAAC,IAAI,EAAC,UAAU,CAAC,EAAC,OAAO,GAAC,MAAM,CAAC,IAAI,EAAC,WAAW,CAAC,EAAC,SAAS,GAAC,MAAM,CAAC,IAAI,EAAC,cAAc,CAAC,CAAC;IAC5G,IAAG,IAAI,CAAC,CAAC,CAAC,KAAG,OAAO,IAAE,CAAC,MAAM,IAAE,CAAC,OAAO,IAAE,CAAC,SAAS,EAAC,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2GAA2G,CAAC,CAAC;QAAA,OAAO,CAAC,CAAC;IAC7I,CAAC;IACD,MAAM,MAAM,GAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAC,GAAG,GAAC,OAAO,CAAC,OAAO,CAAC,EAAC,EAAC,QAAQ,EAAC,GAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrG,MAAM,KAAK,GAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,GAAG,QAAQ,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC;IAChG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,EAAC,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,EAAC,EAAC,CAAC,EAAC,CAAC,EAAC,GAAG,EAAC,QAAQ,CAAC,KAAK,EAAC,IAAI,EAAC,QAAQ,EAAC,GAAG,EAAC,QAAQ,CAAC,QAAQ,EAAC,CAAC,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;IACzJ,MAAM,MAAM,GAAC,kBAAkB,CAAC,EAAC,MAAM,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,IAAE,WAAW,CAAC;IAC5F,MAAM,IAAI,OAAO,CAAO,CAAC,EAAE,EAAC,IAAI,EAAC,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,IAAE,CAAC,CAAC,EAAC,IAAI,EAAC,EAAE,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACzH,MAAM,EAAC,IAAI,EAAC,GAAC,MAAM,CAAC,OAAO,EAAiB,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,QAAQ,EAAC,eAAe,EAAC,GAAG,EAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,IAAI,IAAI,GAAG,CAAA,CAAC,CAAA,IAAI,IAAI,IAAI,EAAE,EAAC,KAAK,EAAC,QAAQ,CAAC,KAAK,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;IACxI,MAAM,IAAI,OAAO,CAAO,IAAI,CAAA,EAAE,GAAC,KAAI,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAC,SAAS,CAAU;QAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAC,GAAE,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACtI,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"ledger-cli.js","sourceRoot":"","sources":["../../src/execution/ledger-cli.ts"],"names":[],"mappings":"AAAA;;;;;;8FAM8F;AAC9F,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAC,kCAAkC,EAAC,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAC,gBAAgB,EAAC,MAAM,qCAAqC,CAAC;AAErE,OAAO,EAAC,iBAAiB,EAAC,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAC,eAAe,EAAC,iBAAiB,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAEvF,SAAS,MAAM,CAAC,IAAa,EAAC,IAAW,IAAoB,MAAM,CAAC,GAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,OAAO,CAAC,IAAE,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC,GAAC,CAAC,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAA,CAAC;AAEzH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAa,EAAC,KAAK,GAAqB,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,OAAO,GAAkB,EAAE;IACnI,MAAM,QAAQ,GAAC,IAAI,CAAC,CAAC,CAAC,KAAG,gBAAgB,EAAC,MAAM,GAAC,MAAM,CAAC,IAAI,EAAC,UAAU,CAAC,EAAC,OAAO,GAAC,MAAM,CAAC,IAAI,EAAC,WAAW,CAAC,EAAC,SAAS,GAAC,MAAM,CAAC,IAAI,EAAC,cAAc,CAAC,CAAC;IAChJ,MAAM,KAAK,GAAC,MAAM,CAAC,IAAI,EAAC,OAAO,CAAC,EAAC,OAAO,GAAC,MAAM,CAAC,IAAI,EAAC,SAAS,CAAC,EAAC,SAAS,GAAC,MAAM,CAAC,IAAI,EAAC,qBAAqB,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAC,IAAI,GAAG,CAAC,CAAC,OAAO,EAAC,SAAS,EAAC,qBAAqB,EAAC,WAAW,EAAC,cAAc,EAAC,QAAQ,EAAC,QAAQ,CAAC,CAAC,EAAC,IAAI,GAAC,IAAI,GAAG,EAAU,CAAC;IACnI,IAAI,KAAK,GAAC,IAAI,CAAC;IACf,IAAG,QAAQ;QAAC,KAAI,IAAI,CAAC,GAAC,CAAC,EAAC,CAAC,GAAC,IAAI,CAAC,MAAM,EAAC,CAAC,IAAE,CAAC,EAAC,CAAC;YAAA,MAAM,IAAI,GAAC,IAAI,CAAC,CAAC,CAAE,CAAC;YAAA,IAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAE,CAAC,IAAI,CAAC,CAAC,GAAC,CAAC,CAAC,IAAE,IAAI,CAAC,CAAC,GAAC,CAAC,CAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAC,KAAK,GAAC,KAAK,CAAC;YAAA,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAA,CAAC;IACzK,IAAG,CAAC,OAAO,IAAE,CAAC,SAAS,IAAE,CAAC,QAAQ,CAAA,CAAC,CAAA,CAAC,CAAC,KAAK,IAAE,CAAC,OAAO,IAAE,CAAC,SAAS,IAAE,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,CAAC,IAAI,CAAC,CAAC,CAAC,KAAG,OAAO,IAAE,CAAC,MAAM,CAAC,CAAC,EAAC,CAAC;QACvG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0PAA0P,CAAC,CAAC;QAAA,OAAO,CAAC,CAAC;IAC5R,CAAC;IACD,MAAM,GAAG,GAAC,OAAO,CAAC,OAAQ,CAAC,EAAC,IAAI,GAAC,OAAO,CAAC,SAAU,CAAC,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,IAAE,WAAW,EAAC,IAAI,GAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,IAAE,CAAC,CAAC,CAAC;IACnI,IAAI,MAA4C,EAAC,KAAY,EAAC,EAAS,EAAC,QAAQ,GAAQ,EAAE,CAAC;IAC3F,IAAG,QAAQ,EAAC,CAAC;QACX,kCAAkC,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC;QAAA,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,MAAM,EAAC,qBAAqB,EAAC,GAAC,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAC,MAAM,qBAAqB,CAAC,GAAG,EAAC,KAAM,EAAC,OAAQ,EAAC,MAAM,CAAC,SAAS,CAAC,EAAC,OAAO,CAAC,CAAC;QAC1F,MAAM,GAAC,QAAQ,CAAC,MAAM,CAAC;QAAA,KAAK,GAAC,QAAQ,CAAC,UAAU,CAAC;QAAA,EAAE,GAAC,KAAM,CAAC;QAAA,QAAQ,GAAC,EAAC,YAAY,EAAC,OAAO,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,QAAQ,EAAC,QAAQ,CAAC,UAAU,EAAC,CAAC;IACrJ,CAAC;SAAI,CAAC;QACJ,MAAM,MAAM,GAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC,EAAC,EAAC,QAAQ,EAAC,GAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,KAAK,GAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAC,GAAG,QAAQ,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC;QAC3K,KAAK,GAAC,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,EAAC,EAAC,CAAC,EAAC,CAAC,EAAC,GAAG,EAAC,QAAQ,CAAC,KAAK,EAAC,IAAI,EAAC,QAAQ,EAAC,GAAG,EAAC,QAAQ,CAAC,QAAQ,EAAC,CAAC,CAAC;QAAA,MAAM,GAAC,kBAAkB,CAAC,EAAC,MAAM,EAAC,GAAG,EAAC,KAAK,EAAC,CAAC,CAAC;QAAA,EAAE,GAAC,QAAQ,CAAC,KAAK,CAAC;IACrK,CAAC;IACD,IAAI,IAAyB,CAAC;IAC9B,IAAG,CAAC;QACF,MAAM,IAAI,OAAO,CAAO,CAAC,EAAE,EAAC,IAAI,EAAC,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,IAAI,EAAC,IAAI,EAAC,GAAE,EAAE,GAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAA,EAAE,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QAC/H,EAAE,CAAC,aAAa,CAAC,IAAI,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QACpD,MAAM,EAAC,IAAI,EAAC,SAAS,EAAC,GAAC,MAAM,CAAC,OAAO,EAAiB,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,QAAQ,EAAC,eAAe,EAAC,GAAG,EAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,IAAI,IAAI,GAAG,CAAA,CAAC,CAAA,IAAI,IAAI,SAAS,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,GAAG,QAAQ,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;QAC7I,MAAM,IAAI,OAAO,CAAO,IAAI,CAAA,EAAE,GAAC,IAAI,GAAC,IAAI,CAAC,CAAA,KAAI,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAC,SAAS,CAAU;YAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QACxH,OAAO,CAAC,CAAC;IACX,CAAC;YAAO,CAAC;QACP,IAAG,IAAI;YAAC,KAAI,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAC,SAAS,CAAU;gBAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;QACnF,IAAG,MAAM,CAAC,SAAS;YAAC,MAAM,IAAI,OAAO,CAAO,IAAI,CAAA,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/execution/ledger-protocol.d.ts

@@ -1,12 +1,16 @@
 export declare const LEDGER_PROTOCOL = "delegation-ledger/v1";
-export declare const LEDGER_OPERATIONS: readonly ['hello', 'journal', 'reserve', 'settle', 'grant', 'revoke'];
+export declare const LEDGER_OPERATIONS: readonly ['hello', 'journal', 'execution', 'reserve', 'settle', 'grant', 'revoke'];
 export type LedgerOperation = typeof LEDGER_OPERATIONS[number];
 export declare const MAX_LEDGER_REQUEST_BYTES: number;
 export interface LedgerTokenClaims {
-    v: 1;
+    v: 1 | 2;
     run: string;
     role: 'parent' | 'child';
     exp: number;
+    /** v2 parent tokens: immutable subtree scope. v1 servers reject this version. */
+    owner?: string;
+    /** Reviewed-host audience. Raw ledger endpoints cannot accept these credentials. */
+    authority?: string;
     /** Child tokens only: the grant they came from, its fencing epoch and the accounts they may charge. */
     grant?: string;
     epoch?: number;

package/dist/execution/ledger-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-protocol.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-protocol.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,eAAe,yBAAuB,CAAC;AACpD,eAAO,MAAM,iBAAiB,YAAE,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,CAAU,CAAC;AAChG,MAAM,MAAM,eAAe,GAAC,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC7D,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAC,CAAC,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IAAC,IAAI,EAAC,QAAQ,GAAC,OAAO,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IACnD,uGAAuG;IACvG,KAAK,CAAC,EAAC,MAAM,CAAC;IAAC,KAAK,CAAC,EAAC,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAC,MAAM,EAAE,CAAC;CAClD;AAKD,wBAAgB,eAAe,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,iBAAiB,GAAE,MAAM,CAE7E;AACD,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,MAAM,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,EAAC,KAAK,EAAC,MAAM,EAAC,GAAG,SAAW,GAAE,iBAAiB,CAa3G;AAED,kGAAkG;AAClG,qBAAa,iBAAiB;IAChB,QAAQ,CAAC,GAAG,EAAC,MAAM;IAA/B,YAAqB,GAAG,EAAC,MAAM,EAAG;IAClC,OAAO,CAAC,MAAM;IAId,MAAM,IAAG,MAAM,CAId;IACD,MAAM,IAAG,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAE7B;IACD,KAAK,CAAC,KAAK,EAAC,MAAM,GAAE,MAAM,CAAkC;IAC5D,wEAAwE;IACxE,SAAS,CAAC,KAAK,EAAC,MAAM,GAAE,OAAO,CAAsC;IACrE,oFAAoF;IACpF,MAAM,CAAC,KAAK,EAAC,MAAM,GAAE,MAAM,CAG1B;CACF"}
+{"version":3,"file":"ledger-protocol.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-protocol.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,eAAe,yBAAuB,CAAC;AACpD,eAAO,MAAM,iBAAiB,YAAE,OAAO,EAAC,SAAS,EAAC,WAAW,EAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,CAAU,CAAC;AAC5G,MAAM,MAAM,eAAe,GAAC,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC7D,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAC,CAAC,GAAC,CAAC,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IAAC,IAAI,EAAC,QAAQ,GAAC,OAAO,CAAC;IAAC,GAAG,EAAC,MAAM,CAAC;IACrD,iFAAiF;IACjF,KAAK,CAAC,EAAC,MAAM,CAAC;IACd,oFAAoF;IACpF,SAAS,CAAC,EAAC,MAAM,CAAC;IAClB,uGAAuG;IACvG,KAAK,CAAC,EAAC,MAAM,CAAC;IAAC,KAAK,CAAC,EAAC,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAC,MAAM,EAAE,CAAC;CAClD;AAKD,wBAAgB,eAAe,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,iBAAiB,GAAE,MAAM,CAE7E;AACD,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,MAAM,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,EAAC,KAAK,EAAC,MAAM,EAAC,GAAG,SAAW,GAAE,iBAAiB,CAkB3G;AAED,kGAAkG;AAClG,qBAAa,iBAAiB;IAChB,QAAQ,CAAC,GAAG,EAAC,MAAM;IAA/B,YAAqB,GAAG,EAAC,MAAM,EAAG;IAClC,OAAO,CAAC,MAAM;IAId,MAAM,IAAG,MAAM,CAQd;IACD,MAAM,IAAG,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAO7B;IACD,KAAK,CAAC,KAAK,EAAC,MAAM,GAAE,MAAM,CAAkC;IAC5D,wEAAwE;IACxE,SAAS,CAAC,KAAK,EAAC,MAAM,GAAE,OAAO,CAAsC;IACrE,oFAAoF;IACpF,MAAM,CAAC,KAAK,EAAC,MAAM,GAAE,MAAM,CAqB1B;CACF"}