@cat-factory/server 0.295.0 → 0.296.0

package/dist/persistence/rpc-scope.logic.d.ts

@@ -1,4 +1,50 @@
 import type { DispatchOptions, DispatchResult, LibrarySourceEntity } from './rpc';
+/**
+ * The `workspaceList` kind: every named workspace must resolve to an in-scope account. The reads
+ * taking one answer with a SUBSET of the list, so binding the INPUT bounds the output: an
+ * out-of-scope candidate fails closed rather than being quietly filtered, which would turn the read
+ * into a probe for which boards link a repo. An empty list is a no-op read.
+ *
+ * ONE batched read resolves the whole list: a point read per id is the N+1 this layer bans, and
+ * the list a caller sends is unbounded by anything but its own request.
+ */
+export declare function checkWorkspaceListScope(ids: unknown, opts: DispatchOptions, inScope: (accountId: string | null | undefined) => boolean, denied: DispatchResult): Promise<DispatchResult | undefined>;
+/**
+ * The `installationList` kind: the connect page's batched annotation read, "which of the ids the
+ * provider just offered are already bound here".
+ *
+ * An id WITH a binding must be in scope; an id with NO binding is admitted, because refusing it
+ * would make the read unusable for its only purpose and it discloses nothing the caller did not
+ * send. An unreadable table still fails closed, as does a missing resolver.
+ *
+ * The whole list resolves in one batched read: the ids come straight off a provider's installation
+ * list, so a point read per id is an N+1 sized by someone else's org.
+ */
+export declare function checkInstallationListScope(ids: unknown, opts: DispatchOptions, inScope: (accountId: string | null | undefined) => boolean, denied: DispatchResult): Promise<DispatchResult | undefined>;
+/**
+ * The `serviceInsert` record write (`registerServiceForFrame`). Bind the DECLARED `accountId` (the
+ * row lands there and is later listed from it) AND the `frameBlockId` the service claims.
+ *
+ * The frame-block half is what stops a service being planted on another org's frame: `resolveRepoTarget`
+ * walks frame block → service on every dispatch, and `getByFrameBlock` resolves by frame block id alone,
+ * so a foreign row could redirect that org's runs at a repo the caller controls. It is a THREE-state
+ * lookup rather than a nullable read because the ordinary case is an absent block: the service row is
+ * written BEFORE its frame block exists, so `absent` is the create this rule must admit, while
+ * `unreadable` must not be spent as that admission (the same reason `ownerFieldUpsert` gives). Block ids
+ * are server-minted, so admitting an unknown one grants nothing: a caller cannot name the id another
+ * tenant will later be given.
+ */
+export declare function checkServiceInsertScope(record: unknown, opts: DispatchOptions, inScope: (accountId: string | null | undefined) => boolean, denied: DispatchResult): Promise<DispatchResult | undefined>;
+/**
+ * The `serviceUpdate` pair (`serviceRepository.update(id, patch)`). Bind the STORED service's owning
+ * account, and the account a patch would re-home the service INTO.
+ *
+ * `ServicePatch` may carry an `accountId`, and a service's account decides which org's catalog offers
+ * it for mounting, so an unbound patch would let a caller push an attacker-authored frame into another
+ * org's mountable set. An explicit null is refused rather than admitted: an account-less service is the
+ * legacy/unscoped row, which no scoped token may create.
+ */
+export declare function checkServiceUpdateScope(serviceId: unknown, patch: unknown, opts: DispatchOptions, inScope: (accountId: string | null | undefined) => boolean, denied: DispatchResult): Promise<DispatchResult | undefined>;
 /**
  * Token-scope checks for the record/owner-pair {@link ScopeRule} kinds, split out of `rpc.ts` so the
  * dispatch module stays under its size budget. Pure code motion — each function keeps the exact

package/dist/persistence/rpc-scope.logic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rpc-scope.logic.d.ts","sourceRoot":"","sources":["../../src/persistence/rpc-scope.logic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AAEjF;;;;;GAKG;AAEH;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAmBrC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAarC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAUrC;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAOrC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAqCrC"}
+{"version":3,"file":"rpc-scope.logic.d.ts","sourceRoot":"","sources":["../../src/persistence/rpc-scope.logic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AAEjF;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAMrC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAcrC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAsBrC;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAQrC;AAED;;;;;GAKG;AAEH;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAmBrC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAarC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAUrC;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAOrC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,EAC1D,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAqCrC"}

package/dist/persistence/rpc-scope.logic.js

@@ -1,3 +1,112 @@
+/**
+ * The `workspaceList` kind: every named workspace must resolve to an in-scope account. The reads
+ * taking one answer with a SUBSET of the list, so binding the INPUT bounds the output: an
+ * out-of-scope candidate fails closed rather than being quietly filtered, which would turn the read
+ * into a probe for which boards link a repo. An empty list is a no-op read.
+ *
+ * ONE batched read resolves the whole list: a point read per id is the N+1 this layer bans, and
+ * the list a caller sends is unbounded by anything but its own request.
+ */
+export async function checkWorkspaceListScope(ids, opts, inScope, denied) {
+    if (!Array.isArray(ids) || ids.some((id) => typeof id !== 'string'))
+        return denied;
+    if (ids.length === 0)
+        return undefined;
+    const accounts = await opts.resolveAccountIds(ids);
+    // A board absent from the map does not exist, which `inScope(undefined)` refuses.
+    return ids.every((id) => inScope(accounts.get(id))) ? undefined : denied;
+}
+/**
+ * The `installationList` kind: the connect page's batched annotation read, "which of the ids the
+ * provider just offered are already bound here".
+ *
+ * An id WITH a binding must be in scope; an id with NO binding is admitted, because refusing it
+ * would make the read unusable for its only purpose and it discloses nothing the caller did not
+ * send. An unreadable table still fails closed, as does a missing resolver.
+ *
+ * The whole list resolves in one batched read: the ids come straight off a provider's installation
+ * list, so a point read per id is an N+1 sized by someone else's org.
+ */
+export async function checkInstallationListScope(ids, opts, inScope, denied) {
+    if (!Array.isArray(ids) || ids.some((id) => typeof id !== 'number'))
+        return denied;
+    if (ids.length === 0)
+        return undefined;
+    if (!opts.resolveInstallationOwners)
+        return denied;
+    const owners = await opts.resolveInstallationOwners(ids);
+    return ids.every((id) => {
+        // An id the batch did not answer for at all is treated as `unreadable`, not as the `absent`
+        // that would admit it: only the resolver may report an id as unbound.
+        const owner = owners.get(id) ?? { status: 'unreadable' };
+        if (owner.status === 'absent')
+            return true;
+        return owner.status === 'found' && inScope(owner.accountId);
+    })
+        ? undefined
+        : denied;
+}
+/**
+ * The `serviceInsert` record write (`registerServiceForFrame`). Bind the DECLARED `accountId` (the
+ * row lands there and is later listed from it) AND the `frameBlockId` the service claims.
+ *
+ * The frame-block half is what stops a service being planted on another org's frame: `resolveRepoTarget`
+ * walks frame block → service on every dispatch, and `getByFrameBlock` resolves by frame block id alone,
+ * so a foreign row could redirect that org's runs at a repo the caller controls. It is a THREE-state
+ * lookup rather than a nullable read because the ordinary case is an absent block: the service row is
+ * written BEFORE its frame block exists, so `absent` is the create this rule must admit, while
+ * `unreadable` must not be spent as that admission (the same reason `ownerFieldUpsert` gives). Block ids
+ * are server-minted, so admitting an unknown one grants nothing: a caller cannot name the id another
+ * tenant will later be given.
+ */
+export async function checkServiceInsertScope(record, opts, inScope, denied) {
+    if (!record || typeof record !== 'object')
+        return denied;
+    const { accountId, frameBlockId } = record;
+    if (typeof accountId !== 'string' || !inScope(accountId))
+        return denied;
+    if (typeof frameBlockId !== 'string' || !opts.resolveFrameBlockOwner)
+        return denied;
+    const frame = await opts.resolveFrameBlockOwner(frameBlockId);
+    switch (frame.status) {
+        case 'found':
+            // An existing frame must belong to the SAME account the service declares. Equality, not
+            // merely in-scope: a token spanning several accounts would otherwise be able to cross them.
+            return frame.accountId === accountId ? undefined : denied;
+        case 'absent':
+            // The frame block has not been written yet — the ordinary creation order.
+            return undefined;
+        case 'unreadable':
+            return denied;
+        default: {
+            const _exhaustive = frame;
+            void _exhaustive;
+            return denied;
+        }
+    }
+}
+/**
+ * The `serviceUpdate` pair (`serviceRepository.update(id, patch)`). Bind the STORED service's owning
+ * account, and the account a patch would re-home the service INTO.
+ *
+ * `ServicePatch` may carry an `accountId`, and a service's account decides which org's catalog offers
+ * it for mounting, so an unbound patch would let a caller push an attacker-authored frame into another
+ * org's mountable set. An explicit null is refused rather than admitted: an account-less service is the
+ * legacy/unscoped row, which no scoped token may create.
+ */
+export async function checkServiceUpdateScope(serviceId, patch, opts, inScope, denied) {
+    if (typeof serviceId !== 'string' || !opts.resolveServiceAccountIds)
+        return denied;
+    const stored = await opts.resolveServiceAccountIds([serviceId]);
+    if (!inScope(stored.get(serviceId)))
+        return denied;
+    if (!patch || typeof patch !== 'object')
+        return denied;
+    if (!Object.hasOwn(patch, 'accountId'))
+        return undefined;
+    const { accountId } = patch;
+    return typeof accountId === 'string' && inScope(accountId) ? undefined : denied;
+}
 /**
  * Token-scope checks for the record/owner-pair {@link ScopeRule} kinds, split out of `rpc.ts` so the
  * dispatch module stays under its size budget. Pure code motion — each function keeps the exact

package/dist/persistence/rpc-scope.logic.js.map

@@ -1 +1 @@
-{"version":3,"file":"rpc-scope.logic.js","sourceRoot":"","sources":["../../src/persistence/rpc-scope.logic.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAe,EACf,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,MAAM,WAAW,GACf,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAClC,CAAC,CAAE,MAAoC,CAAC,WAAW;QACnD,CAAC,CAAC,SAAS,CAAA;IACf,MAAM,SAAS,GACb,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IAClG,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACnF,IAAI,CAAC,IAAI,CAAC,wBAAwB;QAAE,OAAO,MAAM,CAAA;IACjD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;IACjE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAAE,OAAO,MAAM,CAAA;IAC7C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACxE,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACrD,uFAAuF;IACvF,sFAAsF;IACtF,wFAAwF;IACxF,0DAA0D;IAC1D,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,KAAK,gBAAgB;QAAE,OAAO,MAAM,CAAA;IAC5F,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAe,EACf,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACxD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAI1C,CAAA;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IAClD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;IACjE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAAE,OAAO,MAAM,CAAA;IAC7C,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,gBAAgB;QAAE,OAAO,MAAM,CAAA;IACtE,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,MAAM,CAAA;IACjE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAkB,EAClB,OAAgB,EAChB,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IAC9C,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,MAAM,CAAA;IACnE,CAAC;SAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAA;IACtC,CAAC;SAAM,CAAC;QACN,OAAO,MAAM,CAAA;IACf,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAA2B,EAC3B,QAAiB,EACjB,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,yBAAyB;QAAE,OAAO,MAAM,CAAA;IAClF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACrE,gGAAgG;IAChG,0EAA0E;IAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,MAAM,CAAA;IAC5C,OAAO,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AACjG,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAA2B,EAC3B,MAAe,EACf,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACxD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAIlC,CAAA;IACD,iDAAiD;IACjD,MAAM,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAC9F,IAAI,iBAAiB;QAAE,OAAO,iBAAiB,CAAA;IAC/C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,yBAAyB;QAAE,OAAO,MAAM,CAAA;IAC5E,iGAAiG;IACjG,8FAA8F;IAC9F,4CAA4C;IAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC/D,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,OAAO;YACV,0FAA0F;YAC1F,OAAO,mBAAmB,CACxB,MAAM,CAAC,KAAK,CAAC,SAAS,EACtB,MAAM,CAAC,KAAK,CAAC,OAAO,EACpB,IAAI,EACJ,OAAO,EACP,MAAM,CACP,CAAA;QACH,KAAK,QAAQ;YACX,+DAA+D;YAC/D,OAAO,SAAS,CAAA;QAClB,KAAK,YAAY;YACf,oFAAoF;YACpF,OAAO,MAAM,CAAA;QACf,SAAS,CAAC;YACR,MAAM,WAAW,GAAU,MAAM,CAAA;YACjC,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"rpc-scope.logic.js","sourceRoot":"","sources":["../../src/persistence/rpc-scope.logic.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAY,EACZ,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAA;IAClF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAe,CAAC,CAAA;IAC9D,kFAAkF;IAClF,OAAQ,GAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;AACxF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAY,EACZ,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAA;IAClF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,IAAI,CAAC,IAAI,CAAC,yBAAyB;QAAE,OAAO,MAAM,CAAA;IAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,GAAe,CAAC,CAAA;IACpE,OAAQ,GAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE;QACpC,4FAA4F;QAC5F,sEAAsE;QACtE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAqB,EAAE,CAAA;QACjE,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC1C,OAAO,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC7D,CAAC,CAAC;QACA,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAA;AACZ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAe,EACf,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACxD,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAyD,CAAA;IAC7F,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAA;IACvE,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,sBAAsB;QAAE,OAAO,MAAM,CAAA;IACnF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAA;IAC7D,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,wFAAwF;YACxF,4FAA4F;YAC5F,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;QAC3D,KAAK,QAAQ;YACX,0EAA0E;YAC1E,OAAO,SAAS,CAAA;QAClB,KAAK,YAAY;YACf,OAAO,MAAM,CAAA;QACf,SAAS,CAAC;YACR,MAAM,WAAW,GAAU,KAAK,CAAA;YAChC,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAkB,EAClB,KAAc,EACd,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,wBAAwB;QAAE,OAAO,MAAM,CAAA;IAClF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,MAAM,CAAA;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACtD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC;QAAE,OAAO,SAAS,CAAA;IACxD,MAAM,EAAE,SAAS,EAAE,GAAG,KAAgC,CAAA;IACtD,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;AACjF,CAAC;AAED;;;;;GAKG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAe,EACf,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,MAAM,WAAW,GACf,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAClC,CAAC,CAAE,MAAoC,CAAC,WAAW;QACnD,CAAC,CAAC,SAAS,CAAA;IACf,MAAM,SAAS,GACb,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IAClG,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACnF,IAAI,CAAC,IAAI,CAAC,wBAAwB;QAAE,OAAO,MAAM,CAAA;IACjD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;IACjE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAAE,OAAO,MAAM,CAAA;IAC7C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACxE,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACrD,uFAAuF;IACvF,sFAAsF;IACtF,wFAAwF;IACxF,0DAA0D;IAC1D,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,KAAK,gBAAgB;QAAE,OAAO,MAAM,CAAA;IAC5F,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAe,EACf,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACxD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAI1C,CAAA;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IAClD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;IACjE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAAE,OAAO,MAAM,CAAA;IAC7C,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,gBAAgB;QAAE,OAAO,MAAM,CAAA;IACtE,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,MAAM,CAAA;IACjE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAkB,EAClB,OAAgB,EAChB,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IAC9C,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,MAAM,CAAA;IACnE,CAAC;SAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAA;IACtC,CAAC;SAAM,CAAC;QACN,OAAO,MAAM,CAAA;IACf,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAA2B,EAC3B,QAAiB,EACjB,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,yBAAyB;QAAE,OAAO,MAAM,CAAA;IAClF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACrE,gGAAgG;IAChG,0EAA0E;IAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,MAAM,CAAA;IAC5C,OAAO,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AACjG,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAA2B,EAC3B,MAAe,EACf,IAAqB,EACrB,OAA0D,EAC1D,MAAsB;IAEtB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACxD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAIlC,CAAA;IACD,iDAAiD;IACjD,MAAM,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAC9F,IAAI,iBAAiB;QAAE,OAAO,iBAAiB,CAAA;IAC/C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,yBAAyB;QAAE,OAAO,MAAM,CAAA;IAC5E,iGAAiG;IACjG,8FAA8F;IAC9F,4CAA4C;IAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC/D,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,OAAO;YACV,0FAA0F;YAC1F,OAAO,mBAAmB,CACxB,MAAM,CAAC,KAAK,CAAC,SAAS,EACtB,MAAM,CAAC,KAAK,CAAC,OAAO,EACpB,IAAI,EACJ,OAAO,EACP,MAAM,CACP,CAAA;QACH,KAAK,QAAQ;YACX,+DAA+D;YAC/D,OAAO,SAAS,CAAA;QAClB,KAAK,YAAY;YACf,oFAAoF;YACpF,OAAO,MAAM,CAAA;QACf,SAAS,CAAC;YACR,MAAM,WAAW,GAAU,MAAM,CAAA;YACjC,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/persistence/rpc.d.ts

@@ -160,6 +160,46 @@ export declare function statusForPersistenceError(code: PersistenceErrorCode): n
  *                       columns, so binding only the declared owner would let a token scoped to one
  *                       tenant repoint another tenant's source at a repo it controls, whose Markdown
  *                       bodies the victim's next sync folds into their prompts as guidance.
+ *   - `workspaceList` — `args[arg]` is `string[]` of workspaceIds; EVERY one must resolve to an
+ *                       in-scope account, so a missing or out-of-scope board fails closed. The
+ *                       workspace-keyed sibling of `blockList`/`serviceList`, and what a read whose
+ *                       ANSWER is a subset of a candidate list needs (`linkedWorkspaces`): binding
+ *                       the candidates is what stops a node learning about boards it cannot address
+ *                       by passing them in. Empty input is allowed (it returns empty).
+ *   - `installation`  — `args[arg]` is a VCS installation id (a `github_installations` row's
+ *                       `installationId`, a NUMBER) with no workspace/account arg; resolve that
+ *                       row's owning account server-side. A PAT connection stores no `accountId`,
+ *                       so the resolver falls back to the connector workspace's account: the
+ *                       binding is "whoever owns the board that connected it" either way. A missing
+ *                       row, an unreadable table, or no resolver fails closed (404).
+ *   - `installationList`
+ *                     — `args[arg]` is `number[]` of installation ids (the connect page's batched
+ *                       annotation read); EVERY id must resolve to an in-scope account. Unlike the
+ *                       other list kinds an id with NO row is admitted: the caller is asking which
+ *                       of the ids GitHub offered are already bound, and refusing an unbound one
+ *                       would make the read unusable for its only purpose. Nothing is disclosed by
+ *                       that: a row absent from the answer is the same value the caller sent in.
+ *   - `serviceInsert` — `args[arg]` is a `Service` record (`registerServiceForFrame`'s insert, run on
+ *                       EVERY top-level frame creation). Binds the DECLARED `accountId` and the
+ *                       `frameBlockId`: an EXISTING frame block must resolve to the same in-scope
+ *                       account, and one that does not exist yet is the ordinary case (the service
+ *                       row is written BEFORE its frame block, so an absent block is a create and
+ *                       passes on the declared account alone; block ids are server-minted, so a
+ *                       caller cannot reserve one another tenant will later be given).
+ *
+ *                       The equality is the point. `getByFrameBlock` resolves by frame block id
+ *                       ALONE — the unique index is `(account_id, frame_block_id)`, so two accounts
+ *                       may hold a service for one frame id and the walk answers with an arbitrary
+ *                       one — and `resolveRepoTarget` walks it on every dispatch. Binding only the
+ *                       declared account would let a caller plant a service on another org's frame
+ *                       block and redirect that org's runs at a repo it controls.
+ *   - `serviceUpdate` — `args[arg]` is a serviceId and `args[patchArg]` a `ServicePatch`. Binds the
+ *                       STORED service's owning account (like `service`) AND, when the patch
+ *                       declares an `accountId`, the account it would move the service INTO: a patch
+ *                       that re-homes a service into an account the caller cannot reach would put an
+ *                       attacker-authored frame in that org's mountable catalog. A patch clearing the
+ *                       account (an explicit null) is refused rather than admitted — a service with
+ *                       no account is the legacy/unscoped row, which no scoped token may create.
  *   - `usageRecord`   — `args[arg]` is a `TokenUsageRecord` (the spend ledger's `record`). Binds on
  *                       the row's `workspaceId` FIELD like `workspaceField`, AND ADDITIONALLY pins
  *                       the two DENORMALIZED rollup keys the account- and user-tier budget reads
@@ -202,6 +242,9 @@ export type ScopeRule = {
 } | {
     kind: 'blockList';
     arg: number;
+} | {
+    kind: 'workspaceList';
+    arg: number;
 } | {
     kind: 'serviceList';
     arg: number;
@@ -211,6 +254,19 @@ export type ScopeRule = {
 } | {
     kind: 'serviceMount';
     arg: number;
+} | {
+    kind: 'serviceInsert';
+    arg: number;
+} | {
+    kind: 'serviceUpdate';
+    arg: number;
+    patchArg: number;
+} | {
+    kind: 'installation';
+    arg: number;
+} | {
+    kind: 'installationList';
+    arg: number;
 } | {
     kind: 'skillSource';
     arg: number;
@@ -273,6 +329,28 @@ export type LibrarySourceOwnerLookup = {
  | {
     status: 'unreadable';
 };
+/**
+ * What a single-row OWNER lookup answered, in the same three states and for the same reason
+ * {@link LibrarySourceOwnerLookup} gives: a rule that reads "no such row" as an ADMISSION (the
+ * create half of an id-keyed write) may never spend a table it could not read as that admission.
+ *
+ * `accountId` is nullable inside `found` because a row can legitimately exist with no account (a
+ * PAT installation binds a board, not an org; a legacy service predates accounts). That is not a
+ * third state: it fails the scope check like any other unresolvable account, and it must not be
+ * mistaken for `absent`, which is the only value an id-keyed create may be granted on.
+ */
+export type EntityOwnerLookup = {
+    status: 'found';
+    accountId: string | null | undefined;
+}
+/** No such row: for an id-keyed write this is a CREATE. */
+ | {
+    status: 'absent';
+}
+/** This deployment cannot read that table at all, so nothing may be concluded. */
+ | {
+    status: 'unreadable';
+};
 export interface MethodSpec {
     scope: ScopeRule;
     /** The argument index whose `rev` the server mutates in place and must echo back. */
@@ -298,6 +376,15 @@ export interface DispatchOptions {
     };
     /** Resolve a workspace's owning account id (the mothership's `WorkspaceRepository.accountOf`). */
     resolveAccountId(workspaceId: string): Promise<string | null | undefined>;
+    /**
+     * The batched form (`WorkspaceRepository.accountIdsOf`), keyed by workspace id: one query for a
+     * whole list rather than a point read per id. A board that does not exist is ABSENT from the
+     * map, which fails the scope check exactly like the `undefined` {@link resolveAccountId} answers
+     * for the same board. Required by the `workspaceList` kind and by every resolver that maps a set
+     * of boards to their accounts; a deployment whose registry lacks the method answers an empty map,
+     * so the call fails closed.
+     */
+    resolveAccountIds(workspaceIds: string[]): Promise<Map<string, string | null | undefined>>;
     /**
      * Resolve a block's owning account id (block → home workspace → account). Required for the
      * `block` scope kind; a call hitting that kind with no resolver fails closed (404).
@@ -332,6 +419,30 @@ export interface DispatchOptions {
      * such row" stays distinguishable from "that table is not readable here".
      */
     resolveLibrarySourceOwner?(entity: LibrarySourceEntity, sourceId: string): Promise<LibrarySourceOwnerLookup>;
+    /**
+     * Resolve a VCS installation row's owning account (`github_installations`), as a three-state
+     * lookup: an App binding answers its own `accountId`, a per-workspace PAT binding (which stores
+     * none) answers its connector workspace's account, and a row this deployment cannot read answers
+     * `unreadable` rather than an `absent` a caller could be entitled to read as an admission.
+     * Required for the `installation` kind; a call hitting it with no resolver fails closed (404),
+     * like the other entity resolvers.
+     */
+    resolveInstallationOwner?(installationId: number): Promise<EntityOwnerLookup>;
+    /**
+     * The batched form, keyed by installation id: `listByInstallationIds` plus ONE account read for
+     * the PAT bindings that store none, rather than a point read per id. Required for the
+     * `installationList` kind (the connect page annotates a whole provider list at once); a call
+     * hitting it with no resolver fails closed (404).
+     */
+    resolveInstallationOwners?(installationIds: number[]): Promise<Map<number, EntityOwnerLookup>>;
+    /**
+     * Resolve a FRAME BLOCK's owning account (block → home workspace → account), as a three-state
+     * lookup. Distinct from {@link resolveBlockAccountId} precisely because of the third state: the
+     * `serviceInsert` rule admits an absent frame block (the service row is written before its block)
+     * and must refuse an unreadable one, and a nullable answer cannot tell those apart. Required for
+     * the `serviceInsert` kind; a call hitting it with no resolver fails closed (404).
+     */
+    resolveFrameBlockOwner?(frameBlockId: string): Promise<EntityOwnerLookup>;
     /**
      * Resolve the member userIds of an account (the mothership's `MembershipRepository.listByAccount`,
      * mapped to `userId`s). Required for the `user`/`userList` scope kinds: a requested user is in

package/dist/persistence/rpc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../src/persistence/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,eAAe,EAIrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAA;AAgC/D,4CAA4C;AAC5C,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,OAAO,EAAE,CAAA;CAChB;AAED,oGAAoG;AACpG,UAAU,UAAU;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,UAAU,CAAA;CAAE,GACnE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,CAAA;AAE7C;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAC5B,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,UAAU,GACV,gBAAgB,CAAA;AAEpB,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,oBAAoB,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAoBD,0FAA0F;AAC1F,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,oBAAoB,GAAG,MAAM,CAE5E;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmIG;AACH,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAKpC;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GACnE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,CAAA;AAE1E;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,2BAA2B,CAAA;AAEhF,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,OAAO,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE;AAChD,mEAAmE;GACjE;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE;AACtB,yFAAyF;GACvF;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAA;AAE5B,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAA;IAChB,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,2FAA2F;AAC3F,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;AAC/E;;;;;GAKG;AACH,OAAO,EAAE,0BAA0B,EAAE,CAAA;AAMrC,qFAAqF;AACrF,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC,CAAA;AAEjG,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,gEAAgE;IAChE,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/C,kGAAkG;IAClG,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IACzE;;;OAGG;IACH,qBAAqB,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAC3E;;;;OAIG;IACH,sBAAsB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAA;IAC5F;;;;OAIG;IACH,wBAAwB,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAA;IAChG;;;;OAIG;IACH,2BAA2B,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAClF;;;;;;;;;OASG;IACH,yBAAyB,CAAC,CACxB,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACpC;;;;;OAKG;IACH,uBAAuB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9D,4EAA4E;IAC5E,KAAK,CAAC,EAAE,sBAAsB,CAAA;CAC/B;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,sBAAsB,CAAA;CAC7B;AAkBD;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,cAAc,CAAC,CA4EzB;AA8ZD,yEAAyE;AACzE,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,mBAAmB,GAAG,KAAK,CAwB7E"}
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../src/persistence/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,eAAe,EAIrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAA;AAoC/D,4CAA4C;AAC5C,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,OAAO,EAAE,CAAA;CAChB;AAED,oGAAoG;AACpG,UAAU,UAAU;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,UAAU,CAAA;CAAE,GACnE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,CAAA;AAE7C;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAC5B,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,UAAU,GACV,gBAAgB,CAAA;AAEpB,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,oBAAoB,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAoBD,0FAA0F;AAC1F,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,oBAAoB,GAAG,MAAM,CAE5E;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2KG;AACH,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAKpC;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GACnE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,CAAA;AAE1E;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,2BAA2B,CAAA;AAEhF,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,OAAO,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE;AAChD,mEAAmE;GACjE;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE;AACtB,yFAAyF;GACvF;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAA;AAE5B;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;CAAE;AAC3D,2DAA2D;GACzD;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE;AACtB,kFAAkF;GAChF;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAA;AAE5B,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAA;IAChB,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,2FAA2F;AAC3F,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;AAC/E;;;;;GAKG;AACH,OAAO,EAAE,0BAA0B,EAAE,CAAA;AAMrC,qFAAqF;AACrF,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC,CAAA;AAEjG,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,gEAAgE;IAChE,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/C,kGAAkG;IAClG,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IACzE;;;;;;;OAOG;IACH,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAA;IAC1F;;;OAGG;IACH,qBAAqB,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAC3E;;;;OAIG;IACH,sBAAsB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAA;IAC5F;;;;OAIG;IACH,wBAAwB,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAA;IAChG;;;;OAIG;IACH,2BAA2B,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAClF;;;;;;;;;OASG;IACH,yBAAyB,CAAC,CACxB,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACpC;;;;;;;OAOG;IACH,wBAAwB,CAAC,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC7E;;;;;OAKG;IACH,yBAAyB,CAAC,CAAC,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC9F;;;;;;OAMG;IACH,sBAAsB,CAAC,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACzE;;;;;OAKG;IACH,uBAAuB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9D,4EAA4E;IAC5E,KAAK,CAAC,EAAE,sBAAsB,CAAA;CAC/B;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,sBAAsB,CAAA;CAC7B;AAkBD;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,cAAc,CAAC,CA4EzB;AAsZD,yEAAyE;AACzE,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,mBAAmB,GAAG,KAAK,CAwB7E"}

package/dist/persistence/rpc.js

@@ -1,6 +1,6 @@
 import { DataIntegrityError, DomainError, dataIntegrityFaultOf, isDataIntegrityError, isDataIntegrityFault, } from '@cat-factory/kernel';
 import { REMOTE_PERSISTENCE_METHODS } from './rpc-allowlist.js';
-import { checkLibrarySourceScope, checkOwnerFieldUpsertScope, checkOwnerPairScope, checkServiceMountScope, checkUsageRecordScope, } from './rpc-scope.logic.js';
+import { checkInstallationListScope, checkLibrarySourceScope, checkOwnerFieldUpsertScope, checkOwnerPairScope, checkServiceInsertScope, checkServiceMountScope, checkServiceUpdateScope, checkUsageRecordScope, checkWorkspaceListScope, } from './rpc-scope.logic.js';
 // The `Record<PersistenceErrorCode, …>` type keeps this exhaustive — a new error code fails `tsc`
 // until it is mapped, exactly like the previous `switch` did.
 const ERROR_STATUS = {
@@ -277,6 +277,10 @@ async function checkEntityListCallScope(rule, args, opts, helpers) {
             }
             break;
         }
+        case 'workspaceList':
+            return checkWorkspaceListScope(args[rule.arg], opts, inScope, denied);
+        case 'installationList':
+            return checkInstallationListScope(args[rule.arg], opts, inScope, denied);
         default: {
             // Fail closed: a list kind with no case here must never reach the method unscoped. The
             // `never` binding makes adding a list kind without a case a compile error.
@@ -300,6 +304,19 @@ async function checkEntityListCallScope(rule, args, opts, helpers) {
 async function checkEntityIdCallScope(rule, args, opts, inScope) {
     const denied = fail('not_found', 'Not found');
     const id = args[rule.arg];
+    // An installation id is a NUMBER (GitHub's own id, or the synthetic one a PAT connection derives
+    // from its workspace); every other entity here is an opaque string id.
+    if (rule.kind === 'installation') {
+        if (typeof id !== 'number' || !opts.resolveInstallationOwner)
+            return denied;
+        const owner = await opts.resolveInstallationOwner(id);
+        // `absent` fails closed here, unlike in `installationList`: a point read/write names ONE row,
+        // so an id with no row is a caller addressing something it cannot bind, not a question about
+        // its own list.
+        if (owner.status !== 'found' || !inScope(owner.accountId))
+            return denied;
+        return undefined;
+    }
     if (typeof id !== 'string')
         return denied;
     switch (rule.kind) {
@@ -406,13 +423,16 @@ async function checkEntityCallScope(rule, args, opts, helpers) {
         }
         case 'userList':
         case 'blockList':
+        case 'workspaceList':
         case 'serviceList':
+        case 'installationList':
             // The batched list-scope kinds (each id must resolve in scope) are split out to keep this
             // function under the complexity ceiling; same contract (404 `denied` / `undefined`).
             return checkEntityListCallScope(rule, args, opts, helpers);
         case 'block':
         case 'service':
         case 'skillSource':
+        case 'installation':
             // The single-ENTITY-ID kinds (an opaque id bound through a server-side account resolver) are
             // split out to keep this function under the complexity ceiling; same contract.
             return checkEntityIdCallScope(rule, args, opts, inScope);
@@ -420,57 +440,35 @@ async function checkEntityCallScope(rule, args, opts, helpers) {
             // Binds the record's DECLARED account and the STORED row's account together; see the rule's
             // entry on `ScopeRule` for why the declared half alone is not enough.
             return checkAccountFieldUpsertScope(rule, args, opts, inScope);
-        case 'serviceMount': {
-            const denialForMount = await checkServiceMountScope(args[rule.arg], opts, inScope, denied);
-            if (denialForMount)
-                return denialForMount;
-            break;
-        }
-        case 'usageRecord': {
-            const denialForUsage = await checkUsageRecordScope(args[rule.arg], opts, inScope, denied);
-            if (denialForUsage)
-                return denialForUsage;
-            break;
-        }
-        case 'owner': {
-            // A tenant-library row keyed by an (ownerKind, ownerId) PAIR. Resolve the owning account
-            // server-side and reject anything outside the token scope (404, no existence leak):
-            //   - 'workspace' → the ownerId is a workspaceId; resolve its owning account (like `workspace`).
-            //   - 'account'   → the ownerId IS an accountId (like `account`).
-            // Any other kind, a non-string ownerId, or an unresolvable/out-of-scope owner fails closed.
-            const denialForOwner = await checkOwnerPairScope(args[rule.kindArg], args[rule.idArg], opts, inScope, denied);
-            if (denialForOwner)
-                return denialForOwner;
-            break;
-        }
+        case 'serviceMount':
+            return checkServiceMountScope(args[rule.arg], opts, inScope, denied);
+        case 'usageRecord':
+            return checkUsageRecordScope(args[rule.arg], opts, inScope, denied);
+        case 'serviceInsert':
+            // Binds the record's declared account AND the frame block it claims; see the rule's entry on
+            // `ScopeRule` for why an absent block is the ordinary create and a foreign one is a hijack.
+            return checkServiceInsertScope(args[rule.arg], opts, inScope, denied);
+        case 'serviceUpdate':
+            // Binds the STORED service's account AND the account a patch would re-home it into.
+            return checkServiceUpdateScope(args[rule.arg], args[rule.patchArg], opts, inScope, denied);
+        case 'owner':
+            // A tenant-library row keyed by an (ownerKind, ownerId) PAIR, positionally.
+            return checkOwnerPairScope(args[rule.kindArg], args[rule.idArg], opts, inScope, denied);
         case 'ownerField': {
-            // The record-based library `upsert(record)` whose (ownerKind, ownerId) are FIELDS of the
-            // record, not positional args. Bind on those fields exactly like `owner` — a non-object arg,
-            // a missing/non-string field, or an unresolvable/out-of-scope owner is refused as 404, so the
-            // row can only ever be persisted under the caller's own in-scope owner.
+            // The same pair as FIELDS of a record `upsert(record)`, so the row can only ever be
+            // persisted under the caller's own in-scope owner.
             const record = args[rule.arg];
             const isObj = record && typeof record === 'object';
-            const denialForOwnerField = await checkOwnerPairScope(isObj ? record.ownerKind : undefined, isObj ? record.ownerId : undefined, opts, inScope, denied);
-            if (denialForOwnerField)
-                return denialForOwnerField;
-            break;
+            return checkOwnerPairScope(isObj ? record.ownerKind : undefined, isObj ? record.ownerId : undefined, opts, inScope, denied);
         }
-        case 'librarySource': {
+        case 'librarySource':
             // A repo-sourced library's sync method carries only a source id; resolve that source's owning
             // tier PAIR server-side and bind it like `owner` (the owner-pair analogue of `skillSource`).
-            const denialForSource = await checkLibrarySourceScope(rule.entity, args[rule.arg], opts, inScope, denied);
-            if (denialForSource)
-                return denialForSource;
-            break;
-        }
-        case 'ownerFieldUpsert': {
+            return checkLibrarySourceScope(rule.entity, args[rule.arg], opts, inScope, denied);
+        case 'ownerFieldUpsert':
             // Binds the record's DECLARED owner and the STORED row's owner together; see the rule's entry
             // on `ScopeRule` for why the declared half alone is not enough.
-            const denialForUpsert = await checkOwnerFieldUpsertScope(rule.entity, args[rule.arg], opts, inScope, denied);
-            if (denialForUpsert)
-                return denialForUpsert;
-            break;
-        }
+            return checkOwnerFieldUpsertScope(rule.entity, args[rule.arg], opts, inScope, denied);
         default: {
             // Fail closed: a `ScopeRule` kind with no case in EITHER switch must NEVER reach the method
             // unscoped. The `never` binding makes adding a kind without a case a compile error.

package/dist/persistence/rpc.js.map

@@ -1 +1 @@
-{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../src/persistence/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,WAAW,EAEX,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,sBAAsB,CAAA;AAgE7B,kGAAkG;AAClG,8DAA8D;AAC9D,MAAM,YAAY,GAAyC;IACzD,SAAS,EAAE,GAAG;IACd,UAAU,EAAE,GAAG;IACf,QAAQ,EAAE,GAAG;IACb,mBAAmB,EAAE,GAAG;IACxB,SAAS,EAAE,GAAG;IACd,WAAW,EAAE,GAAG;IAChB,YAAY,EAAE,GAAG;IACjB,YAAY,EAAE,GAAG;IACjB,cAAc,EAAE,GAAG;IACnB,QAAQ,EAAE,GAAG;IACb,4FAA4F;IAC5F,8CAA8C;IAC9C,cAAc,EAAE,GAAG;CACpB,CAAA;AAED,0FAA0F;AAC1F,MAAM,UAAU,yBAAyB,CAAC,IAA0B;IAClE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AA8MD;;;;;GAKG;AACH,OAAO,EAAE,0BAA0B,EAAE,CAAA;AAqErC,MAAM,IAAI,GAAG,CACX,IAA0B,EAC1B,OAAe,EACf,OAAiC,EACjB,EAAE,CAAC,CAAC;IACpB,MAAM,EAAE,yBAAyB,CAAC,IAAI,CAAC;IACvC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;CAC/E,CAAC,CAAA;AASF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAA8B,EAC9B,IAAqB;IAErB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,0BAA0B,CAAA;IACtD,2FAA2F;IAC3F,0FAA0F;IAC1F,yFAAyF;IACzF,0EAA0E;IAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACtF,MAAM,IAAI,GACR,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/F,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC,gBAAgB,EAAE,WAAW,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,mBAAmB,CAAC,CAAA;IAC7F,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACjC,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,gBAAgB,EAAE,eAAe,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAA;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACjE,MAAM,OAAO,GAAG,CAAC,SAAoC,EAAW,EAAE,CAChE,OAAO,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;IAE5E,0FAA0F;IAC1F,8FAA8F;IAC9F,8FAA8F;IAC9F,IAAI,YAA8C,CAAA;IAClD,MAAM,cAAc,GAAG,GAAyB,EAAE;QAChD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;gBACzB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;gBAC7B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC9C,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAA;oBACvE,KAAK,MAAM,MAAM,IAAI,OAAO;wBAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC/C,CAAC;gBACD,OAAO,GAAG,CAAA;YACZ,CAAC,CAAC,EAAE,CAAA;QACN,CAAC;QACD,OAAO,YAAY,CAAA;IACrB,CAAC,CAAA;IAED,iFAAiF;IACjF,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAA;IAC7F,IAAI,WAAW;QAAE,OAAO,WAAW,CAAA;IAEnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACxC,MAAM,IAAI,GAA2B;YACnC,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;YACzC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAA;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAkC,CAAA;YACxE,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC/C,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;YAC7D,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QACjD,CAAC;QACD,4FAA4F;QAC5F,sFAAsF;QACtF,+FAA+F;QAC/F,8FAA8F;QAC9F,+EAA+E;QAC/E,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,OAAO,EAAE;gBACzC,KAAK,EAAE,oBAAoB,CAAC,GAAG,CAAC;gBAChC,wEAAwE;gBACxE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;aAC3B,CAAC,CAAA;QACJ,CAAC;QACD,4EAA4E;QAC5E,OAAO,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;IAC3C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAe,EACf,IAAe,EACf,IAAqB,EACrB,OAGC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC7C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,WAAW,EAAE,CAAC;YACjB,qFAAqF;YACrF,uFAAuF;YACvF,wFAAwF;YACxF,uFAAuF;YACvF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAClC,IAAI,OAAO,WAAW,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAClD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YACrE,MAAK;QACP,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,sFAAsF;YACtF,qFAAqF;YACrF,wFAAwF;YACxF,6FAA6F;YAC7F,sFAAsF;YACtF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7B,MAAM,WAAW,GACf,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAClC,CAAC,CAAE,MAAoC,CAAC,WAAW;gBACnD,CAAC,CAAC,SAAS,CAAA;YACf,IAAI,OAAO,WAAW,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAClD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YACrE,MAAK;QACP,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAW,CAAC;gBAAE,OAAO,MAAM,CAAA;YACrD,MAAK;QACP,CAAC;QACD,KAAK,cAAc,EAAE,CAAC;YACpB,qFAAqF;YACrF,yFAAyF;YACzF,yFAAyF;YACzF,iFAAiF;YACjF,8FAA8F;YAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7B,MAAM,SAAS,GACb,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAClC,CAAC,CAAE,MAAkC,CAAC,SAAS;gBAC/C,CAAC,CAAC,SAAS,CAAA;YACf,IAAI,OAAO,SAAS,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAChD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBAAE,OAAO,MAAM,CAAA;YACtC,MAAK;QACP,CAAC;QACD,KAAK,aAAa,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAY,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YACnF,MAAK;QACP,CAAC;QACD,KAAK,UAAU,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAA;YACvD,MAAK;QACP,CAAC;QACD,KAAK,YAAY,EAAE,CAAC;YAClB,qFAAqF;YACrF,sFAAsF;YACtF,8CAA8C;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAA2B,CAAA;YAC1D,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAC9D,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;YAC3E,MAAM,eAAe,GAAG,CAAC,SAAS,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;YACrF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;gBACf,UAAU;gBACV,eAAe;gBACf,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;gBAC9B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;aACA,CAAA;YAC3B,MAAK;QACP,CAAC;QACD;YACE,uFAAuF;YACvF,2FAA2F;YAC3F,OAAO,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAC1D,CAAC;IAED,gCAAgC;IAChC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,wBAAwB,CACrC,IAA4E,EAC5E,IAAe,EACf,IAAqB,EACrB,OAGC;IAED,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,OAAO,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC7C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,UAAU,EAAE,CAAC;YAChB,yFAAyF;YACzF,yFAAyF;YACzF,8EAA8E;YAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAA;YAClF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAK;YAC3B,IAAI,CAAC,IAAI,CAAC,uBAAuB;gBAAE,OAAO,MAAM,CAAA;YAChD,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAA;YACtC,KAAK,MAAM,EAAE,IAAI,GAAe,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,OAAO,MAAM,CAAA;YACrC,CAAC;YACD,MAAK;QACP,CAAC;QACD,KAAK,WAAW,EAAE,CAAC;YACjB,sFAAsF;YACtF,uFAAuF;YACvF,yFAAyF;YACzF,kEAAkE;YAClE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAA;YAClF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAK;YAC3B,IAAI,CAAC,IAAI,CAAC,sBAAsB;gBAAE,OAAO,MAAM,CAAA;YAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAe,CAAC,CAAA;YACnE,KAAK,MAAM,EAAE,IAAI,GAAe,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAAE,OAAO,MAAM,CAAA;YAC/C,CAAC;YACD,MAAK;QACP,CAAC;QACD,KAAK,aAAa,EAAE,CAAC;YACnB,2FAA2F;YAC3F,0FAA0F;YAC1F,kFAAkF;YAClF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAA;YAClF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAK;YAC3B,IAAI,CAAC,IAAI,CAAC,wBAAwB;gBAAE,OAAO,MAAM,CAAA;YACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAe,CAAC,CAAA;YACrE,KAAK,MAAM,EAAE,IAAI,GAAe,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAAE,OAAO,MAAM,CAAA;YAC/C,CAAC;YACD,MAAK;QACP,CAAC;QACD,SAAS,CAAC;YACR,uFAAuF;YACvF,2EAA2E;YAC3E,MAAM,WAAW,GAAU,IAAI,CAAA;YAC/B,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,sBAAsB,CACnC,IAAuE,EACvE,IAAe,EACf,IAAqB,EACrB,OAA0D;IAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACzB,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACzC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO,EAAE,CAAC;YACb,6EAA6E;YAC7E,IAAI,CAAC,IAAI,CAAC,qBAAqB;gBAAE,OAAO,MAAM,CAAA;YAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YACjE,MAAK;QACP,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,oFAAoF;YACpF,sFAAsF;YACtF,IAAI,CAAC,IAAI,CAAC,wBAAwB;gBAAE,OAAO,MAAM,CAAA;YACjD,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YAChF,MAAK;QACP,CAAC;QACD,KAAK,aAAa,EAAE,CAAC;YACnB,sFAAsF;YACtF,uEAAuE;YACvE,IAAI,CAAC,IAAI,CAAC,2BAA2B;gBAAE,OAAO,MAAM,CAAA;YACpD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YACvE,MAAK;QACP,CAAC;QACD,SAAS,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAA;YAC/B,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,4BAA4B,CACzC,IAAwD,EACxD,IAAe,EACf,IAAqB,EACrB,OAA0D;IAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC7B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACxD,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,MAA+C,CAAA;IACzE,mDAAmD;IACnD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAA;IACvE,4FAA4F;IAC5F,kFAAkF;IAClF,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACzC,gGAAgG;IAChG,4FAA4F;IAC5F,IAAI,sBAAsE,CAAA;IAC1E,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,aAAa;YAChB,sBAAsB,GAAG,IAAI,CAAC,2BAA2B,CAAA;YACzD,MAAK;QACP,SAAS,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC,MAAM,CAAA;YACtC,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IACD,IAAI,CAAC,sBAAsB;QAAE,OAAO,MAAM,CAAA;IAC1C,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,EAAE,CAAC,CAAA;IAC/C,kFAAkF;IAClF,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IACrD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CACjC,IAmBC,EACD,IAAe,EACf,IAAqB,EACrB,OAGC;IAED,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,OAAO,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC7C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM,EAAE,CAAC;YACZ,6FAA6F;YAC7F,2FAA2F;YAC3F,wFAAwF;YACxF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,uBAAuB;gBAAE,OAAO,MAAM,CAAA;YAC9E,IAAI,CAAC,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAA;YACxD,MAAK;QACP,CAAC;QACD,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW,CAAC;QACjB,KAAK,aAAa;YAChB,0FAA0F;YAC1F,qFAAqF;YACrF,OAAO,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC5D,KAAK,OAAO,CAAC;QACb,KAAK,SAAS,CAAC;QACf,KAAK,aAAa;YAChB,6FAA6F;YAC7F,+EAA+E;YAC/E,OAAO,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1D,KAAK,oBAAoB;YACvB,4FAA4F;YAC5F,sEAAsE;YACtE,OAAO,4BAA4B,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAChE,KAAK,cAAc,EAAE,CAAC;YACpB,MAAM,cAAc,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;YAC1F,IAAI,cAAc;gBAAE,OAAO,cAAc,CAAA;YACzC,MAAK;QACP,CAAC;QACD,KAAK,aAAa,EAAE,CAAC;YACnB,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;YACzF,IAAI,cAAc;gBAAE,OAAO,cAAc,CAAA;YACzC,MAAK;QACP,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,yFAAyF;YACzF,oFAAoF;YACpF,iGAAiG;YACjG,kEAAkE;YAClE,4FAA4F;YAC5F,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAChB,IAAI,EACJ,OAAO,EACP,MAAM,CACP,CAAA;YACD,IAAI,cAAc;gBAAE,OAAO,cAAc,CAAA;YACzC,MAAK;QACP,CAAC;QACD,KAAK,YAAY,EAAE,CAAC;YAClB,yFAAyF;YACzF,6FAA6F;YAC7F,8FAA8F;YAC9F,wEAAwE;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAA;YAClD,MAAM,mBAAmB,GAAG,MAAM,mBAAmB,CACnD,KAAK,CAAC,CAAC,CAAE,MAAkC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EACjE,KAAK,CAAC,CAAC,CAAE,MAAgC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAC7D,IAAI,EACJ,OAAO,EACP,MAAM,CACP,CAAA;YACD,IAAI,mBAAmB;gBAAE,OAAO,mBAAmB,CAAA;YACnD,MAAK;QACP,CAAC;QACD,KAAK,eAAe,EAAE,CAAC;YACrB,8FAA8F;YAC9F,6FAA6F;YAC7F,MAAM,eAAe,GAAG,MAAM,uBAAuB,CACnD,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EACd,IAAI,EACJ,OAAO,EACP,MAAM,CACP,CAAA;YACD,IAAI,eAAe;gBAAE,OAAO,eAAe,CAAA;YAC3C,MAAK;QACP,CAAC;QACD,KAAK,kBAAkB,EAAE,CAAC;YACxB,8FAA8F;YAC9F,gEAAgE;YAChE,MAAM,eAAe,GAAG,MAAM,0BAA0B,CACtD,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EACd,IAAI,EACJ,OAAO,EACP,MAAM,CACP,CAAA;YACD,IAAI,eAAe;gBAAE,OAAO,eAAe,CAAA;YAC3C,MAAK;QACP,CAAC;QACD,SAAS,CAAC;YACR,4FAA4F;YAC5F,oFAAoF;YACpF,MAAM,WAAW,GAAU,IAAI,CAAA;YAC/B,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,2BAA2B,CAAC,KAA0B;IACpE,MAAM,WAAW,GAAsB;QACrC,WAAW;QACX,YAAY;QACZ,UAAU;QACV,qBAAqB;KACtB,CAAA;IACD,IAAK,WAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,IAAuB,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACrF,CAAC;IACD,gGAAgG;IAChG,8FAA8F;IAC9F,iGAAiG;IACjG,uEAAuE;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAA;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAC/B,OAAO,IAAI,kBAAkB,CAC3B,KAAK,CAAC,OAAO,EACb,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAmC,CAAC,CAAC,CAAC,EAAE,EAClF,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAC3E,CAAA;IACH,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;AACjC,CAAC"}
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../src/persistence/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,WAAW,EAEX,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,0BAA0B,EAC1B,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,sBAAsB,CAAA;AAgE7B,kGAAkG;AAClG,8DAA8D;AAC9D,MAAM,YAAY,GAAyC;IACzD,SAAS,EAAE,GAAG;IACd,UAAU,EAAE,GAAG;IACf,QAAQ,EAAE,GAAG;IACb,mBAAmB,EAAE,GAAG;IACxB,SAAS,EAAE,GAAG;IACd,WAAW,EAAE,GAAG;IAChB,YAAY,EAAE,GAAG;IACjB,YAAY,EAAE,GAAG;IACjB,cAAc,EAAE,GAAG;IACnB,QAAQ,EAAE,GAAG;IACb,4FAA4F;IAC5F,8CAA8C;IAC9C,cAAc,EAAE,GAAG;CACpB,CAAA;AAED,0FAA0F;AAC1F,MAAM,UAAU,yBAAyB,CAAC,IAA0B;IAClE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AA4QD;;;;;GAKG;AACH,OAAO,EAAE,0BAA0B,EAAE,CAAA;AAsGrC,MAAM,IAAI,GAAG,CACX,IAA0B,EAC1B,OAAe,EACf,OAAiC,EACjB,EAAE,CAAC,CAAC;IACpB,MAAM,EAAE,yBAAyB,CAAC,IAAI,CAAC;IACvC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;CAC/E,CAAC,CAAA;AASF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAA8B,EAC9B,IAAqB;IAErB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,0BAA0B,CAAA;IACtD,2FAA2F;IAC3F,0FAA0F;IAC1F,yFAAyF;IACzF,0EAA0E;IAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACtF,MAAM,IAAI,GACR,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/F,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC,gBAAgB,EAAE,WAAW,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,mBAAmB,CAAC,CAAA;IAC7F,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACjC,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,gBAAgB,EAAE,eAAe,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAA;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACjE,MAAM,OAAO,GAAG,CAAC,SAAoC,EAAW,EAAE,CAChE,OAAO,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;IAE5E,0FAA0F;IAC1F,8FAA8F;IAC9F,8FAA8F;IAC9F,IAAI,YAA8C,CAAA;IAClD,MAAM,cAAc,GAAG,GAAyB,EAAE;QAChD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;gBACzB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;gBAC7B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC9C,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAA;oBACvE,KAAK,MAAM,MAAM,IAAI,OAAO;wBAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC/C,CAAC;gBACD,OAAO,GAAG,CAAA;YACZ,CAAC,CAAC,EAAE,CAAA;QACN,CAAC;QACD,OAAO,YAAY,CAAA;IACrB,CAAC,CAAA;IAED,iFAAiF;IACjF,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAA;IAC7F,IAAI,WAAW;QAAE,OAAO,WAAW,CAAA;IAEnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACxC,MAAM,IAAI,GAA2B;YACnC,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;YACzC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAA;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAkC,CAAA;YACxE,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC/C,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;YAC7D,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QACjD,CAAC;QACD,4FAA4F;QAC5F,sFAAsF;QACtF,+FAA+F;QAC/F,8FAA8F;QAC9F,+EAA+E;QAC/E,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,OAAO,EAAE;gBACzC,KAAK,EAAE,oBAAoB,CAAC,GAAG,CAAC;gBAChC,wEAAwE;gBACxE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;aAC3B,CAAC,CAAA;QACJ,CAAC;QACD,4EAA4E;QAC5E,OAAO,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;IAC3C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAe,EACf,IAAe,EACf,IAAqB,EACrB,OAGC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC7C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,WAAW,EAAE,CAAC;YACjB,qFAAqF;YACrF,uFAAuF;YACvF,wFAAwF;YACxF,uFAAuF;YACvF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAClC,IAAI,OAAO,WAAW,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAClD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YACrE,MAAK;QACP,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,sFAAsF;YACtF,qFAAqF;YACrF,wFAAwF;YACxF,6FAA6F;YAC7F,sFAAsF;YACtF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7B,MAAM,WAAW,GACf,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAClC,CAAC,CAAE,MAAoC,CAAC,WAAW;gBACnD,CAAC,CAAC,SAAS,CAAA;YACf,IAAI,OAAO,WAAW,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAClD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YACrE,MAAK;QACP,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAW,CAAC;gBAAE,OAAO,MAAM,CAAA;YACrD,MAAK;QACP,CAAC;QACD,KAAK,cAAc,EAAE,CAAC;YACpB,qFAAqF;YACrF,yFAAyF;YACzF,yFAAyF;YACzF,iFAAiF;YACjF,8FAA8F;YAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7B,MAAM,SAAS,GACb,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAClC,CAAC,CAAE,MAAkC,CAAC,SAAS;gBAC/C,CAAC,CAAC,SAAS,CAAA;YACf,IAAI,OAAO,SAAS,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAChD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBAAE,OAAO,MAAM,CAAA;YACtC,MAAK;QACP,CAAC;QACD,KAAK,aAAa,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAY,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YACnF,MAAK;QACP,CAAC;QACD,KAAK,UAAU,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAA;YACvD,MAAK;QACP,CAAC;QACD,KAAK,YAAY,EAAE,CAAC;YAClB,qFAAqF;YACrF,sFAAsF;YACtF,8CAA8C;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAA2B,CAAA;YAC1D,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAC9D,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;YAC3E,MAAM,eAAe,GAAG,CAAC,SAAS,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;YACrF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;gBACf,UAAU;gBACV,eAAe;gBACf,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;gBAC9B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;aACA,CAAA;YAC3B,MAAK;QACP,CAAC;QACD;YACE,uFAAuF;YACvF,2FAA2F;YAC3F,OAAO,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAC1D,CAAC;IAED,gCAAgC;IAChC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,wBAAwB,CACrC,IAGC,EACD,IAAe,EACf,IAAqB,EACrB,OAGC;IAED,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,OAAO,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC7C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,UAAU,EAAE,CAAC;YAChB,yFAAyF;YACzF,yFAAyF;YACzF,8EAA8E;YAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAA;YAClF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAK;YAC3B,IAAI,CAAC,IAAI,CAAC,uBAAuB;gBAAE,OAAO,MAAM,CAAA;YAChD,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAA;YACtC,KAAK,MAAM,EAAE,IAAI,GAAe,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,OAAO,MAAM,CAAA;YACrC,CAAC;YACD,MAAK;QACP,CAAC;QACD,KAAK,WAAW,EAAE,CAAC;YACjB,sFAAsF;YACtF,uFAAuF;YACvF,yFAAyF;YACzF,kEAAkE;YAClE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAA;YAClF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAK;YAC3B,IAAI,CAAC,IAAI,CAAC,sBAAsB;gBAAE,OAAO,MAAM,CAAA;YAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAe,CAAC,CAAA;YACnE,KAAK,MAAM,EAAE,IAAI,GAAe,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAAE,OAAO,MAAM,CAAA;YAC/C,CAAC;YACD,MAAK;QACP,CAAC;QACD,KAAK,aAAa,EAAE,CAAC;YACnB,2FAA2F;YAC3F,0FAA0F;YAC1F,kFAAkF;YAClF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAA;YAClF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAK;YAC3B,IAAI,CAAC,IAAI,CAAC,wBAAwB;gBAAE,OAAO,MAAM,CAAA;YACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAe,CAAC,CAAA;YACrE,KAAK,MAAM,EAAE,IAAI,GAAe,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAAE,OAAO,MAAM,CAAA;YAC/C,CAAC;YACD,MAAK;QACP,CAAC;QACD,KAAK,eAAe;YAClB,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACvE,KAAK,kBAAkB;YACrB,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAC1E,SAAS,CAAC;YACR,uFAAuF;YACvF,2EAA2E;YAC3E,MAAM,WAAW,GAAU,IAAI,CAAA;YAC/B,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,sBAAsB,CACnC,IAAwF,EACxF,IAAe,EACf,IAAqB,EACrB,OAA0D;IAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACzB,iGAAiG;IACjG,uEAAuE;IACvE,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACjC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,wBAAwB;YAAE,OAAO,MAAM,CAAA;QAC3E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAA;QACrD,8FAA8F;QAC9F,6FAA6F;QAC7F,gBAAgB;QAChB,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAA;QACxE,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACzC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO,EAAE,CAAC;YACb,6EAA6E;YAC7E,IAAI,CAAC,IAAI,CAAC,qBAAqB;gBAAE,OAAO,MAAM,CAAA;YAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YACjE,MAAK;QACP,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,oFAAoF;YACpF,sFAAsF;YACtF,IAAI,CAAC,IAAI,CAAC,wBAAwB;gBAAE,OAAO,MAAM,CAAA;YACjD,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YAChF,MAAK;QACP,CAAC;QACD,KAAK,aAAa,EAAE,CAAC;YACnB,sFAAsF;YACtF,uEAAuE;YACvE,IAAI,CAAC,IAAI,CAAC,2BAA2B;gBAAE,OAAO,MAAM,CAAA;YACpD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAA;YACvE,MAAK;QACP,CAAC;QACD,SAAS,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAA;YAC/B,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,4BAA4B,CACzC,IAAwD,EACxD,IAAe,EACf,IAAqB,EACrB,OAA0D;IAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC7B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACxD,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,MAA+C,CAAA;IACzE,mDAAmD;IACnD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAA;IACvE,4FAA4F;IAC5F,kFAAkF;IAClF,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACzC,gGAAgG;IAChG,4FAA4F;IAC5F,IAAI,sBAAsE,CAAA;IAC1E,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,aAAa;YAChB,sBAAsB,GAAG,IAAI,CAAC,2BAA2B,CAAA;YACzD,MAAK;QACP,SAAS,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC,MAAM,CAAA;YACtC,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IACD,IAAI,CAAC,sBAAsB;QAAE,OAAO,MAAM,CAAA;IAC1C,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,EAAE,CAAC,CAAA;IAC/C,kFAAkF;IAClF,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IACrD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CACjC,IAwBC,EACD,IAAe,EACf,IAAqB,EACrB,OAGC;IAED,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,OAAO,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC7C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM,EAAE,CAAC;YACZ,6FAA6F;YAC7F,2FAA2F;YAC3F,wFAAwF;YACxF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,uBAAuB;gBAAE,OAAO,MAAM,CAAA;YAC9E,IAAI,CAAC,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAA;YACxD,MAAK;QACP,CAAC;QACD,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW,CAAC;QACjB,KAAK,eAAe,CAAC;QACrB,KAAK,aAAa,CAAC;QACnB,KAAK,kBAAkB;YACrB,0FAA0F;YAC1F,qFAAqF;YACrF,OAAO,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC5D,KAAK,OAAO,CAAC;QACb,KAAK,SAAS,CAAC;QACf,KAAK,aAAa,CAAC;QACnB,KAAK,cAAc;YACjB,6FAA6F;YAC7F,+EAA+E;YAC/E,OAAO,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1D,KAAK,oBAAoB;YACvB,4FAA4F;YAC5F,sEAAsE;YACtE,OAAO,4BAA4B,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAChE,KAAK,cAAc;YACjB,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACtE,KAAK,aAAa;YAChB,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACrE,KAAK,eAAe;YAClB,6FAA6F;YAC7F,4FAA4F;YAC5F,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACvE,KAAK,eAAe;YAClB,oFAAoF;YACpF,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5F,KAAK,OAAO;YACV,4EAA4E;YAC5E,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACzF,KAAK,YAAY,EAAE,CAAC;YAClB,oFAAoF;YACpF,mDAAmD;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAA;YAClD,OAAO,mBAAmB,CACxB,KAAK,CAAC,CAAC,CAAE,MAAkC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EACjE,KAAK,CAAC,CAAC,CAAE,MAAgC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAC7D,IAAI,EACJ,OAAO,EACP,MAAM,CACP,CAAA;QACH,CAAC;QACD,KAAK,eAAe;YAClB,8FAA8F;YAC9F,6FAA6F;YAC7F,OAAO,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACpF,KAAK,kBAAkB;YACrB,8FAA8F;YAC9F,gEAAgE;YAChE,OAAO,0BAA0B,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACvF,SAAS,CAAC;YACR,4FAA4F;YAC5F,oFAAoF;YACpF,MAAM,WAAW,GAAU,IAAI,CAAA;YAC/B,KAAK,WAAW,CAAA;YAChB,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,2BAA2B,CAAC,KAA0B;IACpE,MAAM,WAAW,GAAsB;QACrC,WAAW;QACX,YAAY;QACZ,UAAU;QACV,qBAAqB;KACtB,CAAA;IACD,IAAK,WAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,IAAuB,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACrF,CAAC;IACD,gGAAgG;IAChG,8FAA8F;IAC9F,iGAAiG;IACjG,uEAAuE;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAA;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAC/B,OAAO,IAAI,kBAAkB,CAC3B,KAAK,CAAC,OAAO,EACb,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAmC,CAAC,CAAC,CAAC,EAAE,EAClF,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAC3E,CAAA;IACH,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;AACjC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/server",
-  "version": "0.295.0",
+  "version": "0.296.0",
   "description": "Runtime-neutral HTTP layer for the Agent Architecture Board: the Hono controllers, middleware (auth/authz/CORS/error), request helpers and the gateway seams shared by every deployment facade (Cloudflare Worker, Node service).",
   "repository": {
     "type": "git",
@@ -31,13 +31,13 @@
     "jose": "^6.2.8",
     "pino": "^10.3.1",
     "valibot": "^1.4.2",
-    "@cat-factory/agents": "0.136.0",
+    "@cat-factory/agents": "0.137.0",
     "@cat-factory/contracts": "0.320.0",
-    "@cat-factory/integrations": "0.165.4",
-    "@cat-factory/kernel": "0.310.0",
+    "@cat-factory/integrations": "0.165.5",
     "@cat-factory/mcp-server": "0.42.0",
-    "@cat-factory/orchestration": "0.279.0",
-    "@cat-factory/spend": "0.16.2"
+    "@cat-factory/kernel": "0.311.0",
+    "@cat-factory/orchestration": "0.280.0",
+    "@cat-factory/spend": "0.16.3"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",