@cotal-ai/auth 0.58.0 → 0.60.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (87) hide show
  1. package/dist/authority-client.d.ts.map +1 -1
  2. package/dist/authority-client.js +5 -1
  3. package/dist/authority-client.js.map +1 -1
  4. package/dist/barrier-evict.d.ts +7 -0
  5. package/dist/barrier-evict.d.ts.map +1 -1
  6. package/dist/barrier-evict.js +83 -21
  7. package/dist/barrier-evict.js.map +1 -1
  8. package/dist/callout.d.ts.map +1 -1
  9. package/dist/callout.js +9 -3
  10. package/dist/callout.js.map +1 -1
  11. package/dist/commands.js +18 -11
  12. package/dist/commands.js.map +1 -1
  13. package/dist/derive.d.ts +5 -0
  14. package/dist/derive.d.ts.map +1 -1
  15. package/dist/derive.js +15 -1
  16. package/dist/derive.js.map +1 -1
  17. package/dist/grant-command.d.ts +9 -8
  18. package/dist/grant-command.d.ts.map +1 -1
  19. package/dist/grant-command.js +9 -8
  20. package/dist/grant-command.js.map +1 -1
  21. package/dist/idp.d.ts +10 -1
  22. package/dist/idp.d.ts.map +1 -1
  23. package/dist/idp.js +11 -3
  24. package/dist/idp.js.map +1 -1
  25. package/dist/index.d.ts +5 -3
  26. package/dist/index.d.ts.map +1 -1
  27. package/dist/index.js +3 -2
  28. package/dist/index.js.map +1 -1
  29. package/dist/issuer.d.ts +3 -1
  30. package/dist/issuer.d.ts.map +1 -1
  31. package/dist/issuer.js +6 -2
  32. package/dist/issuer.js.map +1 -1
  33. package/dist/ledger.d.ts +6 -7
  34. package/dist/ledger.d.ts.map +1 -1
  35. package/dist/ledger.js +1 -1
  36. package/dist/ledger.js.map +1 -1
  37. package/dist/managed-agent-enrollment.d.ts +29 -1
  38. package/dist/managed-agent-enrollment.d.ts.map +1 -1
  39. package/dist/managed-agent-enrollment.js +45 -1
  40. package/dist/managed-agent-enrollment.js.map +1 -1
  41. package/dist/manager-admin-authorization.d.ts +13 -4
  42. package/dist/manager-admin-authorization.d.ts.map +1 -1
  43. package/dist/manager-admin-authorization.js +15 -7
  44. package/dist/manager-admin-authorization.js.map +1 -1
  45. package/dist/manager-authority.d.ts +11 -7
  46. package/dist/manager-authority.d.ts.map +1 -1
  47. package/dist/manager-authority.js +9 -7
  48. package/dist/manager-authority.js.map +1 -1
  49. package/dist/manager-goal-index.d.ts +2 -3
  50. package/dist/manager-goal-index.d.ts.map +1 -1
  51. package/dist/manager-goal-index.js +2 -2
  52. package/dist/manager-goal-index.js.map +1 -1
  53. package/dist/manager-maintenance.d.ts +2 -3
  54. package/dist/manager-maintenance.d.ts.map +1 -1
  55. package/dist/manager-maintenance.js +8 -2
  56. package/dist/manager-maintenance.js.map +1 -1
  57. package/dist/permissions.d.ts +15 -1
  58. package/dist/permissions.d.ts.map +1 -1
  59. package/dist/permissions.js +20 -1
  60. package/dist/permissions.js.map +1 -1
  61. package/dist/platform-control.d.ts +47 -0
  62. package/dist/platform-control.d.ts.map +1 -0
  63. package/dist/platform-control.js +117 -0
  64. package/dist/platform-control.js.map +1 -0
  65. package/dist/provider.d.ts.map +1 -1
  66. package/dist/provider.js +36 -11
  67. package/dist/provider.js.map +1 -1
  68. package/dist/records-scanner.d.ts.map +1 -1
  69. package/dist/records-scanner.js +3 -2
  70. package/dist/records-scanner.js.map +1 -1
  71. package/dist/retained-manager-validation.d.ts +9 -6
  72. package/dist/retained-manager-validation.d.ts.map +1 -1
  73. package/dist/retained-manager-validation.js +9 -7
  74. package/dist/retained-manager-validation.js.map +1 -1
  75. package/dist/service.d.ts +75 -29
  76. package/dist/service.d.ts.map +1 -1
  77. package/dist/service.js +127 -31
  78. package/dist/service.js.map +1 -1
  79. package/dist/session-redemption.d.ts +51 -0
  80. package/dist/session-redemption.d.ts.map +1 -0
  81. package/dist/session-redemption.js +61 -0
  82. package/dist/session-redemption.js.map +1 -0
  83. package/dist/token.d.ts +15 -2
  84. package/dist/token.d.ts.map +1 -1
  85. package/dist/token.js +30 -3
  86. package/dist/token.js.map +1 -1
  87. package/package.json +3 -3
@@ -11,8 +11,9 @@
11
11
  * must not be able to reach the host's writers. `supervise` is required explicitly — `spawn` and
12
12
  * `admin` are ordinary agent capabilities and must never imply supervision of a manager lifecycle.
13
13
  */
14
- import { EpEnvelopeError, managedRetirementOpId, parseRemoteManagedAgentEnrollmentRequest, parseRemoteManagedAgentPrepareRetirementRequest, remoteManagerActors, } from "@cotal-ai/core";
14
+ import { EpEnvelopeError, managedRetirementOpId, parseRemoteManagedAgentEnrollmentRequest, parseRemoteManagedAgentPrepareRetirementRequest, parseRemoteManagedAgentRuntimeCreateRequest, parseRemoteManagedAgentRuntimeStatusRequest, remoteManagerActors, } from "@cotal-ai/core";
15
15
  import { timingSafeEqual } from "node:crypto";
16
+ import { ledgerAuthorizeGrant } from "./ledger.js";
16
17
  import { remoteManagerCurrentRegistrationProof } from "./retained-manager-validation.js";
17
18
  /** Host policy authorizing one fresh managed-agent enrollment. Returns the parsed request so the
18
19
  * caller consumes the validated copy rather than the raw body it received. */
@@ -64,4 +65,47 @@ export async function authorizeRemoteManagedAgentPrepareRetirement(args) {
64
65
  throw new EpEnvelopeError("permission-denied", "manager prepare-retirement proof does not match current host registration");
65
66
  return r;
66
67
  }
68
+ /**
69
+ * The shared runtime door: the enrollment door's gate, epoch, and proof checks, plus the ledger
70
+ * grant read here rather than passed in, so no host composition can decide without it.
71
+ */
72
+ async function authorizeRemoteManagedAgentRuntime(r, args, what) {
73
+ if (r.space !== args.space)
74
+ throw new EpEnvelopeError("permission-denied", `${what} request names space ${r.space}, not host space ${args.space}`);
75
+ if (r.target.owner !== args.owner)
76
+ throw new EpEnvelopeError("permission-denied", `${what} target owner "${r.target.owner}" does not match authenticated owner "${args.owner}"`);
77
+ let scope;
78
+ try {
79
+ scope = ledgerAuthorizeGrant(args.dir)(args.owner, r.actor).scope ?? [];
80
+ }
81
+ catch (e) {
82
+ throw new EpEnvelopeError("permission-denied", `${what} found no ledger grant for the manager actor: ${e instanceof Error ? e.message : String(e)}`);
83
+ }
84
+ if (!scope.includes("supervise"))
85
+ throw new EpEnvelopeError("permission-denied", `${what} needs scope "supervise"; spawn/admin do not imply it`);
86
+ const actors = remoteManagerActors(r.instanceId);
87
+ const gate = await args.observeManagerGate(r.instanceId);
88
+ if (!gate || gate.state !== "open")
89
+ throw new EpEnvelopeError("failed-precondition", `${what} found no current open manager gate for instance ${r.instanceId}`);
90
+ const servePrincipal = `${args.owner}.${actors.serve}`;
91
+ if (gate.principal !== servePrincipal)
92
+ throw new EpEnvelopeError("permission-denied", `manager gate belongs to ${gate.principal}, not serve principal ${servePrincipal}`);
93
+ if (gate.processEpoch !== r.serveEpoch)
94
+ throw new EpEnvelopeError("conflict", `manager serve epoch ${r.serveEpoch} is stale; current is ${gate.processEpoch}`);
95
+ const expectedProof = remoteManagerCurrentRegistrationProof(args.proofSecret, args.owner, r, gate);
96
+ if (!timingSafeEqual(Buffer.from(r.registrationProof), Buffer.from(expectedProof)))
97
+ throw new EpEnvelopeError("permission-denied", `manager ${what} proof does not match current host registration`);
98
+ return { owner: args.owner, instanceId: r.instanceId, actor: r.actor, target: { ...r.target } };
99
+ }
100
+ /**
101
+ * Host policy deciding one hosted runtime create (class A). It touches no provider and persists
102
+ * nothing. The host applies its own intent match and performs the create after this returns.
103
+ */
104
+ export async function authorizeRemoteManagedAgentRuntimeCreate(args) {
105
+ return authorizeRemoteManagedAgentRuntime(parseRemoteManagedAgentRuntimeCreateRequest(args.request), args, "managed agent runtime-create");
106
+ }
107
+ /** Host policy authenticating one runtime status read. It authorizes no effect. */
108
+ export async function authorizeRemoteManagedAgentRuntimeStatus(args) {
109
+ return authorizeRemoteManagedAgentRuntime(parseRemoteManagedAgentRuntimeStatusRequest(args.request), args, "managed agent runtime-status");
110
+ }
67
111
  //# sourceMappingURL=managed-agent-enrollment.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"managed-agent-enrollment.js","sourceRoot":"","sources":["../src/managed-agent-enrollment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,wCAAwC,EACxC,+CAA+C,EAC/C,mBAAmB,GAGpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AAmBzF;+EAC+E;AAC/E,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,IAA+C;IAE/C,MAAM,CAAC,GAAG,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5H,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+EAA+E,CAAC,CAAC;IAClI,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,4EAA4E,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/I,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2BAA2B,IAAI,CAAC,SAAS,yBAAyB,cAAc,EAAE,CAAC,CAAC;IACrI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,UAAU;QACpC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACzH,MAAM,aAAa,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mEAAmE,CAAC,CAAC;IACtH,OAAO,CAAC,CAAC;AACX,CAAC;AAWD,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,IAAsD;IAEtD,MAAM,CAAC,GAAG,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uFAAuF,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAC/B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,oCAAoC,CAAC,CAAC,MAAM,CAAC,KAAK,yCAAyC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAC3J,gGAAgG;IAChG,iEAAiE;IACjE,MAAM,YAAY,GAAG,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;QACzB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,4BAA4B,CAAC,CAAC,IAAI,gDAAgD,YAAY,aAAa,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACrL,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,sEAAsE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACzI,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2BAA2B,IAAI,CAAC,SAAS,yBAAyB,cAAc,EAAE,CAAC,CAAC;IACrI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,UAAU;QACpC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACzH,MAAM,aAAa,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2EAA2E,CAAC,CAAC;IAC9H,OAAO,CAAC,CAAC;AACX,CAAC"}
1
+ {"version":3,"file":"managed-agent-enrollment.js","sourceRoot":"","sources":["../src/managed-agent-enrollment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,wCAAwC,EACxC,+CAA+C,EAC/C,2CAA2C,EAC3C,2CAA2C,EAC3C,mBAAmB,GAKpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AAmBzF;+EAC+E;AAC/E,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,IAA+C;IAE/C,MAAM,CAAC,GAAG,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5H,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+EAA+E,CAAC,CAAC;IAClI,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,4EAA4E,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/I,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2BAA2B,IAAI,CAAC,SAAS,yBAAyB,cAAc,EAAE,CAAC,CAAC;IACrI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,UAAU;QACpC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACzH,MAAM,aAAa,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mEAAmE,CAAC,CAAC;IACtH,OAAO,CAAC,CAAC;AACX,CAAC;AAWD,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,IAAsD;IAEtD,MAAM,CAAC,GAAG,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uFAAuF,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAC/B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,oCAAoC,CAAC,CAAC,MAAM,CAAC,KAAK,yCAAyC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAC3J,gGAAgG;IAChG,iEAAiE;IACjE,MAAM,YAAY,GAAG,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;QACzB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,4BAA4B,CAAC,CAAC,IAAI,gDAAgD,YAAY,aAAa,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACrL,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,sEAAsE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACzI,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2BAA2B,IAAI,CAAC,SAAS,yBAAyB,cAAc,EAAE,CAAC,CAAC;IACrI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,UAAU;QACpC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACzH,MAAM,aAAa,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2EAA2E,CAAC,CAAC;IAC9H,OAAO,CAAC,CAAC;AACX,CAAC;AAqBD;;;GAGG;AACH,KAAK,UAAU,kCAAkC,CAC/C,CAAkF,EAClF,IAAsE,EACtE,IAAY;IAEZ,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACzH,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAC/B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,IAAI,kBAAkB,CAAC,CAAC,MAAM,CAAC,KAAK,yCAAyC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAChJ,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,IAAI,iDAAiD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,IAAI,uDAAuD,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,GAAG,IAAI,oDAAoD,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9H,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2BAA2B,IAAI,CAAC,SAAS,yBAAyB,cAAc,EAAE,CAAC,CAAC;IACrI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,UAAU;QACpC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACzH,MAAM,aAAa,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,WAAW,IAAI,iDAAiD,CAAC,CAAC;IACnH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,IAAoF;IAEpF,OAAO,kCAAkC,CAAC,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC;AAC7I,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,IAAoF;IAEpF,OAAO,kCAAkC,CAAC,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC;AAC7I,CAAC"}
@@ -1,10 +1,13 @@
1
- import { type RemoteManagerAdminAuthorizationRequest, type RemoteManagerAdminAuthorizationResult } from "@cotal-ai/core";
2
- export declare function parseRemoteManagerAdminAuthorizationRequest(raw: unknown): RemoteManagerAdminAuthorizationRequest;
1
+ import { type RemoteManagerAdminAuthorizationRequest, type RemoteManagerAdminAuthorizationResult, type PlatformControlAssignment } from "@cotal-ai/core";
2
+ /** `allowPlatform` admits a platform `p_…` caller owner, for the platform control holder only
3
+ * (SPEC 13.1), so its admin check answers the same non-oracular decision as any other caller. */
4
+ export declare function parseRemoteManagerAdminAuthorizationRequest(raw: unknown, opts?: {
5
+ allowPlatform?: boolean;
6
+ }): RemoteManagerAdminAuthorizationRequest;
3
7
  export declare function authorizeRemoteManagerAdmin(args: {
4
8
  request: RemoteManagerAdminAuthorizationRequest;
5
9
  space: string;
6
10
  managerOwner: string;
7
- managerScope: string[];
8
11
  proofSecret: string | Uint8Array;
9
12
  dir: string;
10
13
  observeManagerGate: (instanceId: string) => Promise<{
@@ -13,5 +16,11 @@ export declare function authorizeRemoteManagerAdmin(args: {
13
16
  processEpoch: number;
14
17
  registrationRevision: number;
15
18
  } | null>;
16
- }): Promise<RemoteManagerAdminAuthorizationResult>;
19
+ } & ({
20
+ managerScope: string[];
21
+ managerAssignment?: never;
22
+ } | {
23
+ managerAssignment: PlatformControlAssignment;
24
+ managerScope?: never;
25
+ })): Promise<RemoteManagerAdminAuthorizationResult>;
17
26
  //# sourceMappingURL=manager-admin-authorization.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"manager-admin-authorization.d.ts","sourceRoot":"","sources":["../src/manager-admin-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC3C,MAAM,gBAAgB,CAAC;AAQxB,wBAAgB,2CAA2C,CAAC,GAAG,EAAE,OAAO,GAAG,sCAAsC,CAwChH;AAED,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,sCAAsC,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;KAC7G,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAuBjD"}
1
+ {"version":3,"file":"manager-admin-authorization.d.ts","sourceRoot":"","sources":["../src/manager-admin-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC1C,KAAK,yBAAyB,EAC/B,MAAM,gBAAgB,CAAC;AASxB;iGACiG;AACjG,wBAAgB,2CAA2C,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,sCAAsC,CAyCxJ;AAED,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,sCAAsC,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;KAC7G,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,CAAC;IAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,CAAC,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,iBAAiB,EAAE,yBAAyB,CAAC;IAAC,YAAY,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC,GAAG,OAAO,CAAC,qCAAqC,CAAC,CA8BpL"}
@@ -1,10 +1,13 @@
1
- import { EpEnvelopeError, assertDerivedOwnerToken, assertLifecycleToken, assertValidOwnerToken, remoteManagerActors, } from "@cotal-ai/core";
1
+ import { EpEnvelopeError, assertDerivedOwnerToken, assertPrincipalOwnerToken, assertLifecycleToken, assertValidOwnerToken, remoteManagerActors, } from "@cotal-ai/core";
2
2
  import { timingSafeEqual } from "node:crypto";
3
3
  import { findActorUnified } from "./ledger.js";
4
+ import { requireManagerAuthorityHolder } from "./platform-control.js";
4
5
  import { remoteManagerCurrentRegistrationProof } from "./retained-manager-validation.js";
5
6
  const identityNames = ["supervisor", "executor", "serve", "goalWriter", "sessionLedger"];
6
7
  const bad = (message) => { throw new EpEnvelopeError("bad-request", `manager admin authorization request ${message}`); };
7
- export function parseRemoteManagerAdminAuthorizationRequest(raw) {
8
+ /** `allowPlatform` admits a platform `p_…` caller owner, for the platform control holder only
9
+ * (SPEC 13.1), so its admin check answers the same non-oracular decision as any other caller. */
10
+ export function parseRemoteManagerAdminAuthorizationRequest(raw, opts = {}) {
8
11
  if (raw === null || typeof raw !== "object" || Array.isArray(raw))
9
12
  bad("must be an object");
10
13
  const o = raw;
@@ -49,7 +52,10 @@ export function parseRemoteManagerAdminAuthorizationRequest(raw) {
49
52
  for (const key of ["owner", "actor", "lifecycleUid"])
50
53
  if (typeof caller[key] !== "string" || caller[key].length === 0)
51
54
  bad(`requires non-empty caller.${key}`);
52
- assertDerivedOwnerToken(caller.owner);
55
+ if (opts.allowPlatform)
56
+ assertPrincipalOwnerToken(caller.owner, { allowPlatform: true });
57
+ else
58
+ assertDerivedOwnerToken(caller.owner);
53
59
  assertValidOwnerToken(caller.actor);
54
60
  assertLifecycleToken(caller.lifecycleUid, "manager admin authorization caller lifecycleUid");
55
61
  return {
@@ -61,11 +67,12 @@ export function parseRemoteManagerAdminAuthorizationRequest(raw) {
61
67
  };
62
68
  }
63
69
  export async function authorizeRemoteManagerAdmin(args) {
64
- const request = parseRemoteManagerAdminAuthorizationRequest(args.request);
70
+ const request = parseRemoteManagerAdminAuthorizationRequest(args.request, { allowPlatform: args.managerAssignment !== undefined });
65
71
  if (request.space !== args.space)
66
72
  throw new EpEnvelopeError("permission-denied", `manager admin authorization names space ${request.space}, not this host space ${args.space}`);
67
- if (!args.managerScope.includes("supervise"))
68
- throw new EpEnvelopeError("permission-denied", 'manager admin authorization needs manager scope "supervise"');
73
+ requireManagerAuthorityHolder(args.managerAssignment !== undefined
74
+ ? { holder: "platform", owner: args.managerOwner, assignment: args.managerAssignment }
75
+ : { owner: args.managerOwner, scope: args.managerScope ?? [] }, request.instanceId, 'manager admin authorization needs manager scope "supervise"');
69
76
  const actors = remoteManagerActors(request.instanceId);
70
77
  const gate = await args.observeManagerGate(request.instanceId);
71
78
  if (!gate || gate.state !== "open")
@@ -81,8 +88,9 @@ export async function authorizeRemoteManagerAdmin(args) {
81
88
  // A valid current-manager request gets one non-oracular decision. The authoritative unified row is
82
89
  // read fresh for every call. Absence, revocation, a narrowed scope, owner drift, and lifecycle drift
83
90
  // are all the same `false`; corrupt/unreadable state throws and therefore fails the operation closed.
91
+ // The ledger holds rows for derived owners only, so a platform owner's caller is that same absence.
84
92
  let authorized = false;
85
- if (request.caller.owner === args.managerOwner) {
93
+ if (request.caller.owner === args.managerOwner && args.managerAssignment === undefined) {
86
94
  const row = findActorUnified(args.dir, request.caller.owner, request.caller.actor);
87
95
  authorized = row?.lifecycleUid === request.caller.lifecycleUid && row.scope.includes("admin");
88
96
  }
@@ -1 +1 @@
1
- {"version":3,"file":"manager-admin-authorization.js","sourceRoot":"","sources":["../src/manager-admin-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GAGpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AAEzF,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;AAClG,MAAM,GAAG,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,uCAAuC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAExI,MAAM,UAAU,2CAA2C,CAAC,GAAY;IACtE,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5F,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5J,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,6BAA6B;QAAE,GAAG,CAAC,0DAA0D,CAAC,CAAC;IAC3H,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,CAAU;QAClH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IAC1F,qBAAqB,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IACzC,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,wCAAwC,CAAC,CAAC;IACvF,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,0CAA0C,CAAC,CAAC;IAClG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACxH,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAA2B,CAAC;QAAE,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC7G,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;QAAE,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACvJ,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACzH,MAAM,MAAM,GAAG,CAAC,CAAC,UAAqC,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrJ,MAAM,UAAU,GAAG,EAA0D,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACzK,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5G,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAY,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,CAAC,CAAC,MAAiC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,0BAA0B;QAAE,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvI,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAU;QAC3D,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IAC3G,uBAAuB,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;IAChD,qBAAqB,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;IAC9C,oBAAoB,CAAC,MAAM,CAAC,YAAsB,EAAE,iDAAiD,CAAC,CAAC;IACvG,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe;QAC7F,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACxF,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QAClF,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,UAAU;QAC9C,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAe,EAAE,KAAK,EAAE,MAAM,CAAC,KAAe,EAAE,YAAY,EAAE,MAAM,CAAC,YAAsB,EAAE;KACtH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAUjD;IACC,MAAM,OAAO,GAAG,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2CAA2C,OAAO,CAAC,KAAK,yBAAyB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAChL,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,6DAA6D,CAAC,CAAC;IAC5J,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,+EAA+E,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1L,MAAM,iBAAiB,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACjE,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+CAA+C,IAAI,CAAC,SAAS,SAAS,iBAAiB,EAAE,CAAC,CAAC;IACpL,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,2CAA2C,OAAO,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/L,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACxG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gFAAgF,CAAC,CAAC;IAEnI,mGAAmG;IACnG,qGAAqG;IACrG,sGAAsG;IACtG,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnF,UAAU,GAAG,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC"}
1
+ {"version":3,"file":"manager-admin-authorization.js","sourceRoot":"","sources":["../src/manager-admin-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GAIpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AAEzF,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;AAClG,MAAM,GAAG,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,uCAAuC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAExI;iGACiG;AACjG,MAAM,UAAU,2CAA2C,CAAC,GAAY,EAAE,OAAoC,EAAE;IAC9G,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5F,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5J,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,6BAA6B;QAAE,GAAG,CAAC,0DAA0D,CAAC,CAAC;IAC3H,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,CAAU;QAClH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IAC1F,qBAAqB,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IACzC,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,wCAAwC,CAAC,CAAC;IACvF,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,0CAA0C,CAAC,CAAC;IAClG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACxH,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAA2B,CAAC;QAAE,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC7G,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;QAAE,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACvJ,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACzH,MAAM,MAAM,GAAG,CAAC,CAAC,UAAqC,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrJ,MAAM,UAAU,GAAG,EAA0D,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACzK,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5G,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAY,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,CAAC,CAAC,MAAiC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,0BAA0B;QAAE,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvI,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAU;QAC3D,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IAC3G,IAAI,IAAI,CAAC,aAAa;QAAE,yBAAyB,CAAC,MAAM,CAAC,KAAe,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;;QAC9F,uBAAuB,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;IACrD,qBAAqB,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;IAC9C,oBAAoB,CAAC,MAAM,CAAC,YAAsB,EAAE,iDAAiD,CAAC,CAAC;IACvG,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe;QAC7F,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACxF,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QAClF,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,UAAU;QAC9C,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAe,EAAE,KAAK,EAAE,MAAM,CAAC,KAAe,EAAE,YAAY,EAAE,MAAM,CAAC,YAAsB,EAAE;KACtH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IASkF;IAClI,MAAM,OAAO,GAAG,2CAA2C,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC,CAAC;IACnI,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2CAA2C,OAAO,CAAC,KAAK,yBAAyB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAChL,6BAA6B,CAC3B,IAAI,CAAC,iBAAiB,KAAK,SAAS;QAClC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE;QACtF,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,EAChE,OAAO,CAAC,UAAU,EAClB,6DAA6D,CAC9D,CAAC;IACF,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,+EAA+E,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1L,MAAM,iBAAiB,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACjE,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+CAA+C,IAAI,CAAC,SAAS,SAAS,iBAAiB,EAAE,CAAC,CAAC;IACpL,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,2CAA2C,OAAO,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/L,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACxG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gFAAgF,CAAC,CAAC;IAEnI,mGAAmG;IACnG,qGAAqG;IACrG,sGAAsG;IACtG,oGAAoG;IACpG,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACvF,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnF,UAAU,GAAG,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC"}
@@ -1,5 +1,6 @@
1
1
  import { remoteManagerActors, type RemoteManagerAuthorityMaterial, type RemoteManagerAuthorityRequest, type RemoteRunAdmissionRequest, type RemoteRunAttemptRequest, type RunAdmissionView, type RunStatusValue, type RunDriverGrantArgs, type RunOperatorGrantArgs, type RemoteRunAdmissionResult, type IssuedStore, type IssuedSourceRef } from "@cotal-ai/core";
2
2
  import type { KV } from "@nats-io/kv";
3
+ import { type ManagerAuthorityHolder } from "./platform-control.js";
3
4
  /** Host-only renewal authorization. The embedding host supplies a fresh gate and active run
4
5
  * observation from its authoritative stores, never coordinates asserted by the participant. */
5
6
  export declare function authorizeRemoteManagerRenewal(args: {
@@ -23,11 +24,10 @@ export declare function authorizeRemoteManagerRenewal(args: {
23
24
  instanceId: string;
24
25
  } | null>;
25
26
  }): Promise<void>;
26
- /** Host-only typed request after the IdP proof and ledger row have been authenticated. */
27
- export interface IssueRemoteManagerAuthorityArgs {
27
+ /** Host-only typed request after the IdP proof and ledger row (a human holder) or the platform
28
+ * control assignment (a platform holder) have been authenticated. */
29
+ export type IssueRemoteManagerAuthorityArgs = ManagerAuthorityHolder & {
28
30
  request: RemoteManagerAuthorityRequest;
29
- owner: string;
30
- scope: string[];
31
31
  /** The host-side phase executor. It validates the live instance/gate state and signs only the
32
32
  * phase's fixed profile set for the caller-generated nkeys. */
33
33
  issue: (args: {
@@ -45,9 +45,13 @@ export interface IssueRemoteManagerAuthorityArgs {
45
45
  request: RemoteManagerAuthorityRequest;
46
46
  }) => Promise<void>;
47
47
  now?: () => number;
48
- }
49
- /** Closed request parser: unknown fields and profile-like extensions are refused, never ignored. */
50
- export declare function parseRemoteManagerAuthorityRequest(raw: unknown): RemoteManagerAuthorityRequest;
48
+ };
49
+ /** Closed request parser: unknown fields and profile-like extensions are refused, never ignored.
50
+ * `allowPlatform` admits a platform `p_…` retirement target owner, for the platform control holder
51
+ * only (SPEC 13.1); the retirement check still requires the target owner to equal the holder's. */
52
+ export declare function parseRemoteManagerAuthorityRequest(raw: unknown, opts?: {
53
+ allowPlatform?: boolean;
54
+ }): RemoteManagerAuthorityRequest;
51
55
  /** Issue one lifecycle phase after the IdP proof and interactive row were fresh-read. */
52
56
  export declare function issueRemoteManagerAuthority(args: IssueRemoteManagerAuthorityArgs): Promise<RemoteManagerAuthorityMaterial>;
53
57
  type ManagerGate = {
@@ -1 +1 @@
1
- {"version":3,"file":"manager-authority.d.ts","sourceRoot":"","sources":["../src/manager-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,mBAAmB,EACnB,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAE7B,KAAK,WAAW,EAChB,KAAK,eAAe,EAQrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAItC;+FAC+F;AAC/F,wBAAsB,6BAA6B,CAAC,IAAI,EAAE;IACxD,OAAO,EAAE,6BAA6B,CAAC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;KAC7G,GAAG,IAAI,CAAC,CAAC;IACV,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;KAC5G,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhB;AAED,0FAA0F;AAC1F,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,6BAA6B,CAAC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;mEAC+D;IAC/D,KAAK,EAAE,CAAC,IAAI,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;QAC/C,OAAO,EAAE,6BAA6B,CAAC;KACxC,KAAK,OAAO,CAAC;QAAE,WAAW,EAAE,8BAA8B,CAAC,aAAa,CAAC,CAAC;QAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9G;iGAC6F;IAC7F,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,6BAA6B,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtG,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAMD,oGAAoG;AACpG,wBAAgB,kCAAkC,CAAC,GAAG,EAAE,OAAO,GAAG,6BAA6B,CA6G9F;AAED,yFAAyF;AACzF,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,+BAA+B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CA6DhI;AAED,KAAK,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAA;CAAE,CAAC;AAMnI,iGAAiG;AACjG,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,yBAAyB,CA+BtF;AAuBD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACxE,MAAM,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,UAAU,EAAE,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAoCpC;AAKD,yDAAyD;AACzD,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,OAAO,GAAG,uBAAuB,CAkClF;AAED,0FAA0F;AAC1F,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,YAAY,CAAC;QAAC,SAAS,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAAC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAC;QAAC,WAAW,EAAE,kBAAkB,CAAA;KAAE,CAAA;CAAE,GACrL;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAC;QAAC,WAAW,EAAE,oBAAoB,CAAA;KAAE,CAAA;CAAE,CAAC;AAE/G;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACxE,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5D,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACtE,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4BjC"}
1
+ {"version":3,"file":"manager-authority.d.ts","sourceRoot":"","sources":["../src/manager-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,mBAAmB,EACnB,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAE7B,KAAK,WAAW,EAChB,KAAK,eAAe,EAQrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGtC,OAAO,EAAiC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEnG;+FAC+F;AAC/F,wBAAsB,6BAA6B,CAAC,IAAI,EAAE;IACxD,OAAO,EAAE,6BAA6B,CAAC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;KAC7G,GAAG,IAAI,CAAC,CAAC;IACV,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;KAC5G,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhB;AAED;qEACqE;AACrE,MAAM,MAAM,+BAA+B,GAAG,sBAAsB,GAAG;IACrE,OAAO,EAAE,6BAA6B,CAAC;IACvC;mEAC+D;IAC/D,KAAK,EAAE,CAAC,IAAI,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;QAC/C,OAAO,EAAE,6BAA6B,CAAC;KACxC,KAAK,OAAO,CAAC;QAAE,WAAW,EAAE,8BAA8B,CAAC,aAAa,CAAC,CAAC;QAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9G;iGAC6F;IAC7F,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,6BAA6B,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtG,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,CAAC;AAMF;;mGAEmG;AACnG,wBAAgB,kCAAkC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,6BAA6B,CA6GtI;AAED,yFAAyF;AACzF,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,+BAA+B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CA4DhI;AAED,KAAK,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAA;CAAE,CAAC;AAMnI,iGAAiG;AACjG,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,yBAAyB,CA+BtF;AAuBD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACxE,MAAM,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,UAAU,EAAE,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAoCpC;AAKD,yDAAyD;AACzD,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,OAAO,GAAG,uBAAuB,CAkClF;AAED,0FAA0F;AAC1F,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,YAAY,CAAC;QAAC,SAAS,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAAC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAC;QAAC,WAAW,EAAE,kBAAkB,CAAA;KAAE,CAAA;CAAE,GACrL;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAC;QAAC,WAAW,EAAE,oBAAoB,CAAA;KAAE,CAAA;CAAE,CAAC;AAE/G;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACxE,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5D,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACtE,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4BjC"}
@@ -1,6 +1,7 @@
1
- import { EpEnvelopeError, assertDerivedOwnerToken, assertLifecycleToken, assertValidOwnerToken, managedRetirementOpId, remoteManagerActors, EP_RAIL_V1, admissionKey, admissionSnapshot, createRunAdmission, isIssuedCaller, issuedPermitsSubject, parseEpSubject, } from "@cotal-ai/core";
1
+ import { EpEnvelopeError, assertDerivedOwnerToken, assertPrincipalOwnerToken, assertLifecycleToken, assertValidOwnerToken, managedRetirementOpId, remoteManagerActors, EP_RAIL_V1, admissionKey, admissionSnapshot, createRunAdmission, isIssuedCaller, issuedPermitsSubject, parseEpSubject, } from "@cotal-ai/core";
2
2
  import { timingSafeEqual } from "node:crypto";
3
3
  import { remoteManagerCurrentRegistrationProof } from "./retained-manager-validation.js";
4
+ import { requireManagerAuthorityHolder } from "./platform-control.js";
4
5
  /** Host-only renewal authorization. The embedding host supplies a fresh gate and active run
5
6
  * observation from its authoritative stores, never coordinates asserted by the participant. */
6
7
  export async function authorizeRemoteManagerRenewal(args) {
@@ -29,8 +30,10 @@ export async function authorizeRemoteManagerRenewal(args) {
29
30
  function requestError(what) {
30
31
  throw new EpEnvelopeError("bad-request", `manager-service authority request ${what}`);
31
32
  }
32
- /** Closed request parser: unknown fields and profile-like extensions are refused, never ignored. */
33
- export function parseRemoteManagerAuthorityRequest(raw) {
33
+ /** Closed request parser: unknown fields and profile-like extensions are refused, never ignored.
34
+ * `allowPlatform` admits a platform `p_…` retirement target owner, for the platform control holder
35
+ * only (SPEC 13.1); the retirement check still requires the target owner to equal the holder's. */
36
+ export function parseRemoteManagerAuthorityRequest(raw, opts = {}) {
34
37
  if (raw === null || typeof raw !== "object" || Array.isArray(raw))
35
38
  requestError("must be an object");
36
39
  const o = raw;
@@ -111,7 +114,7 @@ export function parseRemoteManagerAuthorityRequest(raw) {
111
114
  retirement = {
112
115
  id: r.id,
113
116
  target: {
114
- owner: assertDerivedOwnerToken(target.owner),
117
+ owner: opts.allowPlatform ? assertPrincipalOwnerToken(target.owner, { allowPlatform: true }) : assertDerivedOwnerToken(target.owner),
115
118
  actor: assertValidOwnerToken(target.actor),
116
119
  lifecycleUid: target.lifecycleUid,
117
120
  },
@@ -158,9 +161,8 @@ export function parseRemoteManagerAuthorityRequest(raw) {
158
161
  }
159
162
  /** Issue one lifecycle phase after the IdP proof and interactive row were fresh-read. */
160
163
  export async function issueRemoteManagerAuthority(args) {
161
- const r = parseRemoteManagerAuthorityRequest(args.request);
162
- if (!args.scope.includes("supervise"))
163
- throw new EpEnvelopeError("permission-denied", 'manager-service authority needs scope "supervise"; spawn/admin do not imply it');
164
+ const r = parseRemoteManagerAuthorityRequest(args.request, { allowPlatform: args.holder === "platform" });
165
+ requireManagerAuthorityHolder(args, r.instanceId, 'manager-service authority needs scope "supervise"; spawn/admin do not imply it');
164
166
  const actors = remoteManagerActors(r.instanceId);
165
167
  const ids = Object.values(r.identities).map((identity) => identity.id);
166
168
  if (r.retirement)
@@ -1 +1 @@
1
- {"version":3,"file":"manager-authority.js","sourceRoot":"","sources":["../src/manager-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EAanB,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AAEzF;+FAC+F;AAC/F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAYnD;IACC,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB;QAC3E,YAAY,CAAC,8BAA8B,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;QACxE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,yEAAyE,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,uDAAuD,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE;QAC/E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uDAAuD,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QACtC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,+CAA+C,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAkB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uEAAuE,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,GAAI,CAAC,MAAM;YAClG,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,GAAI,CAAC,UAAU,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,GAAI,CAAC,KAAK,IAAI,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,GAAI,CAAC,YAAY;YAChH,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,gFAAgF,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC;AAoBD,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,qCAAqC,IAAI,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,kCAAkC,CAAC,GAAY;IAC7D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACrG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;IACpP,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC/I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,2BAA2B;QAAE,YAAY,CAAC,wDAAwD,CAAC,CAAC;IAChI,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB;QAC1N,YAAY,CAAC,mHAAmH,CAAC,CAAC;IACpI,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,CAAU;QAC7F,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IACnG,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,8BAA8B,CAAC,CAAC;IAC7E,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,gCAAgC,CAAC,CAAC;IACxF,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,YAAY,CAAC,uDAAuD,CAAC,CAAC;IACjI,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS,CAAC;QACvG,YAAY,CAAC,+DAA+D,CAAC,CAAC;IAChF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC9H,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,sCAAsC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,GAAG,EAAE,CAAC;QAC5I,YAAY,CAAC,4DAA4D,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS;QACjE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,mCAAmC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC;IAC1F,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACvF,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,+BAA+B,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC;YACnG,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,uCAAuC,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;QACzE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,kDAAkD,CAAC,CAAC;IACjF,IAAI,GAAyC,CAAC;IAC9C,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,CAAC,GAA0C,CAAC;QACvD,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,gEAAgE;YAC5G,YAAY,CAAC,sGAAsG,CAAC,CAAC;QACvH,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAClE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YACzE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YACxE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;YAC5E,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC;YACjG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU;YACxG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACxC,YAAY,CAAC,gHAAgH,CAAC,CAAC;QACjI,GAAG,GAAG,CAAiE,CAAC;IAC1E,CAAC;SAAM,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,qBAAqB,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,OAA8C,CAAC;QAC3D,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAC3F,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;YAC3I,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YACzE,YAAY,CAAC,sEAAsE,CAAC,CAAC;IACzF,CAAC;SAAM,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,yBAAyB,CAAC,CAAC;IAC1F,IAAI,UAAuD,CAAC;IAC5D,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,UAAiD,CAAC;QAC9D,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,2BAA2B;YACvE,YAAY,CAAC,qEAAqE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,CAAC,CAAC,MAA6C,CAAC;QAC/D,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,0BAA0B;YAC9E,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YAC/G,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;YAC3H,YAAY,CAAC,uGAAuG,CAAC,CAAC;QACxH,oBAAoB,CAAC,MAAM,CAAC,YAAY,EAAE,kDAAkD,CAAC,CAAC;QAC9F,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC;YACvD,YAAY,CAAC,iFAAiF,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACvH,UAAU,GAAG;YACX,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC5C,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC1C,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC;YACD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,4BAA4B,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;IACzB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;IAC1F,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mCAAmC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7I,MAAM,UAAU,GAAG,EAAiD,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YACpH,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACrH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,2BAA2B;QACjC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,UAAU,EAAE,CAAC,CAAC,UAAoB;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACpD,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,GAAG,CAAC,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAA0B,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAmD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,UAAU;KACX,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAqC;IACrF,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gFAAgF,CAAC,CAAC;IACnI,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;QAClC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,oGAAoG,CAAC,CAAC;IACjJ,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,gBAAgB;YACxB,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC,SAAS,kEAAkE,CAAC,CAAC;QAC7I,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,KAAK,qBAAqB;QACpD,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC;QACpE,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB;YAChC,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC;YAC9B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS;gBAC7B,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC;gBAC5B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU;oBAC1B,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC;oBAC1C,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO;wBACvB,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC;wBAC9B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS;4BACzB,CAAC,CAAC,CAAC,gBAAgB,CAAC;4BACpB,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ;gCACxB,CAAC,CAAC,CAAC,qBAAqB,CAAC;gCAC3B,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IAC3E,KAAK,MAAM,IAAI,IAAI,QAAQ;QACzB,IAAI,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC;YACxB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,SAAS,sCAAsC,IAAI,EAAE,CAAC,CAAC;IACtH,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9E,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,SAAS,sDAAsD,CAAC,CAAC;IAC9H,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAW,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACpF,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,2BAA2B;QACjC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,YAAY,EAAE,CAAC,CAAC,mBAAmB;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC5B,MAAM;QACN,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,WAAW;KACZ,CAAC;AACJ,CAAC;AAID,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,iCAAiC,IAAI,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,8BAA8B,CAAC,GAAY;IACzD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACvG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAChL,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,uBAAuB;QAAE,cAAc,CAAC,kCAAkC,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,kBAAkB,CAAU;QAC/G,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,CAAC,CAAY,CAAC,MAAM,KAAK,CAAC;YAAE,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACjG,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,YAAY,CAAC,CAAC;IAC3D,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,qBAAqB,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAAE,cAAc,CAAC,qCAAqC,CAAC,CAAC;IACzJ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAK,CAAC,CAAC,YAAuB,GAAG,CAAC;QAAE,cAAc,CAAC,sCAAsC,CAAC,CAAC;IACpI,MAAM,GAAG,GAAG,CAAC,CAAC,UAA4C,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9G,cAAc,CAAC,8CAA8C,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAA4B,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YAAE,cAAc,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACzJ,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAA4C,CAAC;IAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAqC,CAAC;IACpD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,eAAe;QAChG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAC3G,cAAc,CAAC,0DAA0D,CAAC,CAAC;IAC7E,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,UAAU,EAAE,CAAC,CAAC,UAAoB;QAC3H,mBAAmB,EAAE,CAAC,CAAC,mBAA6B,EAAE,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QACxI,gBAAgB,EAAE,CAAC,CAAC,gBAA0B,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,UAAU;QAClG,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAe,EAAE,OAAO,EAAE,GAAG,CAAC,OAAiB,EAAE;KACpE,CAAC;AACJ,CAAC;AAED;sFACsF;AACtF,KAAK,UAAU,6BAA6B,CAC1C,CAAuK,EACvK,IAA2K,EAC3K,IAAY;IAEZ,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;QACxE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,kDAAkD,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,mBAAmB,IAAI,gCAAgC,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE;QAC/E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,gCAAgC,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QACtC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,IAAI,wBAAwB,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAkB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,gDAAgD,CAAC,CAAC;AAC5H,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAYpC;IACC,MAAM,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,6BAA6B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAC7H,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAC7F,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;QACnG,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,wHAAwH,CAAC,CAAC;IAC3K,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACzH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;IAChC,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;QACjI,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+DAA+D,CAAC,CAAC;IAClH,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,oEAAoE,CAAC,CAAC;IACvH,MAAM,SAAS,GAAiB;QAC9B,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;QACjG,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW;QAC9C,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE;QACxE,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;KACrC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;IAChJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,GAAG,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,GAAG,CAAC;QAC9B,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QAC7B,IAAI,OAAO,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;YACpH,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;YAC9D,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,qDAAqD,CAAC,CAAC;QACjH,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC3I,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAEzC,yDAAyD;AACzD,MAAM,UAAU,4BAA4B,CAAC,GAAY;IACvD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACvG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB;QAAE,cAAc,CAAC,gCAAgC,CAAC,CAAC;IACvF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC;QAAE,cAAc,CAAC,4CAA4C,CAAC,CAAC;IACvH,MAAM,IAAI,GAAG,8BAA8B,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9I,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,IAAc,EAAE,WAAqB,EAAE,EAAE,EAAE;QACpE,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,oCAAoC,CAAC,CAAC;QAClH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,uCAAuC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5K,OAAO,CAA4B,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YACrF,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAK,CAAC,CAAC,KAAgB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAK,CAAC,CAAC,YAAuB,GAAG,CAAC;YACpI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU;YACnK,cAAc,CAAC,wGAAwG,CAAC,CAAC;QAC3H,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;IAC3O,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC;QACzH,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAChD,cAAc,CAAC,oEAAoE,CAAC,CAAC;IACvF,IAAI,OAAsC,CAAC;IAC3C,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;YAAE,cAAc,CAAC,qEAAqE,CAAC,CAAC;QAC5K,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;AAC/M,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAW/C;IACC,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,6BAA6B,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAC5B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,OAAO,KAAK,2DAA2D,CAAC,CAAC;QAC1H,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAC7H,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,OAAO,KAAK,uDAAuD,CAAC,CAAC;QACtH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC,CAAC;IACF,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QACpB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,EAAE,KAAK,KAAK,WAAW,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ;YAC7D,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM,CAAC,KAAK,sCAAsC,CAAC,CAAC;QAC5H,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC;YAC5F,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,wDAAwD,CAAC,CAAC;QAChH,MAAM,GAAG,GAAuB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC/K,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC;IAClL,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAS,CAAC;IACvB,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,8DAA8D,CAAC,CAAC;IACnH,MAAM,WAAW,GAAyB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACzM,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC;AAC7F,CAAC"}
1
+ {"version":3,"file":"manager-authority.js","sourceRoot":"","sources":["../src/manager-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EAanB,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAA+B,MAAM,uBAAuB,CAAC;AAEnG;+FAC+F;AAC/F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAYnD;IACC,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB;QAC3E,YAAY,CAAC,8BAA8B,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;QACxE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,yEAAyE,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,uDAAuD,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE;QAC/E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uDAAuD,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QACtC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,+CAA+C,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAkB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uEAAuE,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,GAAI,CAAC,MAAM;YAClG,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,GAAI,CAAC,UAAU,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,GAAI,CAAC,KAAK,IAAI,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,GAAI,CAAC,YAAY;YAChH,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,gFAAgF,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC;AAmBD,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,qCAAqC,IAAI,EAAE,CAAC,CAAC;AACxF,CAAC;AAED;;mGAEmG;AACnG,MAAM,UAAU,kCAAkC,CAAC,GAAY,EAAE,OAAoC,EAAE;IACrG,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACrG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;IACpP,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC/I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,2BAA2B;QAAE,YAAY,CAAC,wDAAwD,CAAC,CAAC;IAChI,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB;QAC1N,YAAY,CAAC,mHAAmH,CAAC,CAAC;IACpI,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,CAAU;QAC7F,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IACnG,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,8BAA8B,CAAC,CAAC;IAC7E,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,gCAAgC,CAAC,CAAC;IACxF,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,YAAY,CAAC,uDAAuD,CAAC,CAAC;IACjI,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS,CAAC;QACvG,YAAY,CAAC,+DAA+D,CAAC,CAAC;IAChF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC9H,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,sCAAsC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,GAAG,EAAE,CAAC;QAC5I,YAAY,CAAC,4DAA4D,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS;QACjE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,mCAAmC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC;IAC1F,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACvF,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,+BAA+B,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC;YACnG,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,uCAAuC,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;QACzE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,kDAAkD,CAAC,CAAC;IACjF,IAAI,GAAyC,CAAC;IAC9C,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,CAAC,GAA0C,CAAC;QACvD,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,gEAAgE;YAC5G,YAAY,CAAC,sGAAsG,CAAC,CAAC;QACvH,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAClE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YACzE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YACxE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;YAC5E,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC;YACjG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU;YACxG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACxC,YAAY,CAAC,gHAAgH,CAAC,CAAC;QACjI,GAAG,GAAG,CAAiE,CAAC;IAC1E,CAAC;SAAM,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,qBAAqB,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,OAA8C,CAAC;QAC3D,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAC3F,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;YAC3I,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YACzE,YAAY,CAAC,sEAAsE,CAAC,CAAC;IACzF,CAAC;SAAM,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,yBAAyB,CAAC,CAAC;IAC1F,IAAI,UAAuD,CAAC;IAC5D,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,UAAiD,CAAC;QAC9D,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,2BAA2B;YACvE,YAAY,CAAC,qEAAqE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,CAAC,CAAC,MAA6C,CAAC;QAC/D,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,0BAA0B;YAC9E,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YAC/G,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;YAC3H,YAAY,CAAC,uGAAuG,CAAC,CAAC;QACxH,oBAAoB,CAAC,MAAM,CAAC,YAAY,EAAE,kDAAkD,CAAC,CAAC;QAC9F,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC;YACvD,YAAY,CAAC,iFAAiF,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACvH,UAAU,GAAG;YACX,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE;gBACN,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC;gBACpI,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC1C,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC;YACD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,4BAA4B,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;IACzB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;IAC1F,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mCAAmC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7I,MAAM,UAAU,GAAG,EAAiD,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YACpH,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACrH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,2BAA2B;QACjC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,UAAU,EAAE,CAAC,CAAC,UAAoB;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACpD,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,GAAG,CAAC,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAA0B,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAmD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,UAAU;KACX,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAqC;IACrF,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC,CAAC;IAC1G,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,gFAAgF,CAAC,CAAC;IACpI,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;QAClC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,oGAAoG,CAAC,CAAC;IACjJ,IAAI,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,gBAAgB;YACxB,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC,SAAS,kEAAkE,CAAC,CAAC;QAC7I,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,KAAK,qBAAqB;QACpD,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC;QACpE,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB;YAChC,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC;YAC9B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS;gBAC7B,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC;gBAC5B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU;oBAC1B,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC;oBAC1C,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO;wBACvB,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC;wBAC9B,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS;4BACzB,CAAC,CAAC,CAAC,gBAAgB,CAAC;4BACpB,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ;gCACxB,CAAC,CAAC,CAAC,qBAAqB,CAAC;gCAC3B,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IAC3E,KAAK,MAAM,IAAI,IAAI,QAAQ;QACzB,IAAI,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC;YACxB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,SAAS,sCAAsC,IAAI,EAAE,CAAC,CAAC;IACtH,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9E,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,SAAS,sDAAsD,CAAC,CAAC;IAC9H,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAW,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACpF,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,2BAA2B;QACjC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,YAAY,EAAE,CAAC,CAAC,mBAAmB;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC5B,MAAM;QACN,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,WAAW;KACZ,CAAC;AACJ,CAAC;AAID,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,iCAAiC,IAAI,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,8BAA8B,CAAC,GAAY;IACzD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACvG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAChL,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,uBAAuB;QAAE,cAAc,CAAC,kCAAkC,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,kBAAkB,CAAU;QAC/G,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,CAAC,CAAY,CAAC,MAAM,KAAK,CAAC;YAAE,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACjG,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,YAAY,CAAC,CAAC;IAC3D,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,qBAAqB,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAAE,cAAc,CAAC,qCAAqC,CAAC,CAAC;IACzJ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAK,CAAC,CAAC,YAAuB,GAAG,CAAC;QAAE,cAAc,CAAC,sCAAsC,CAAC,CAAC;IACpI,MAAM,GAAG,GAAG,CAAC,CAAC,UAA4C,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9G,cAAc,CAAC,8CAA8C,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAA4B,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YAAE,cAAc,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACzJ,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAA4C,CAAC;IAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAqC,CAAC;IACpD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,eAAe;QAChG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAC3G,cAAc,CAAC,0DAA0D,CAAC,CAAC;IAC7E,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,UAAU,EAAE,CAAC,CAAC,UAAoB;QAC3H,mBAAmB,EAAE,CAAC,CAAC,mBAA6B,EAAE,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QACxI,gBAAgB,EAAE,CAAC,CAAC,gBAA0B,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,UAAU;QAClG,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAe,EAAE,OAAO,EAAE,GAAG,CAAC,OAAiB,EAAE;KACpE,CAAC;AACJ,CAAC;AAED;sFACsF;AACtF,KAAK,UAAU,6BAA6B,CAC1C,CAAuK,EACvK,IAA2K,EAC3K,IAAY;IAEZ,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;QACxE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,kDAAkD,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,mBAAmB,IAAI,gCAAgC,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE;QAC/E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,gCAAgC,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QACtC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,mBAAmB,IAAI,wBAAwB,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAkB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,gDAAgD,CAAC,CAAC;AAC5H,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAYpC;IACC,MAAM,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,6BAA6B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAC7H,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAC7F,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;QACnG,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,wHAAwH,CAAC,CAAC;IAC3K,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACzH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;IAChC,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;QACjI,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+DAA+D,CAAC,CAAC;IAClH,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,oEAAoE,CAAC,CAAC;IACvH,MAAM,SAAS,GAAiB;QAC9B,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;QACjG,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW;QAC9C,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE;QACxE,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;KACrC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;IAChJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,GAAG,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,GAAG,CAAC;QAC9B,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QAC7B,IAAI,OAAO,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;YACpH,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;YAC9D,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,qDAAqD,CAAC,CAAC;QACjH,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC3I,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAEzC,yDAAyD;AACzD,MAAM,UAAU,4BAA4B,CAAC,GAAY;IACvD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACvG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB;QAAE,cAAc,CAAC,gCAAgC,CAAC,CAAC;IACvF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC;QAAE,cAAc,CAAC,4CAA4C,CAAC,CAAC;IACvH,MAAM,IAAI,GAAG,8BAA8B,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9I,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,IAAc,EAAE,WAAqB,EAAE,EAAE,EAAE;QACpE,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,oCAAoC,CAAC,CAAC;QAClH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,uCAAuC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5K,OAAO,CAA4B,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YACrF,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAK,CAAC,CAAC,KAAgB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAK,CAAC,CAAC,YAAuB,GAAG,CAAC;YACpI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU;YACnK,cAAc,CAAC,wGAAwG,CAAC,CAAC;QAC3H,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;IAC3O,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC;QACzH,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAChD,cAAc,CAAC,oEAAoE,CAAC,CAAC;IACvF,IAAI,OAAsC,CAAC;IAC3C,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;YAAE,cAAc,CAAC,qEAAqE,CAAC,CAAC;QAC5K,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;AAC/M,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAW/C;IACC,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,6BAA6B,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAC5B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,OAAO,KAAK,2DAA2D,CAAC,CAAC;QAC1H,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAC7H,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,OAAO,KAAK,uDAAuD,CAAC,CAAC;QACtH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC,CAAC;IACF,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QACpB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,EAAE,KAAK,KAAK,WAAW,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ;YAC7D,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,MAAM,CAAC,KAAK,sCAAsC,CAAC,CAAC;QAC5H,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC;YAC5F,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,wDAAwD,CAAC,CAAC;QAChH,MAAM,GAAG,GAAuB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC/K,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC;IAClL,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAS,CAAC;IACvB,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,8DAA8D,CAAC,CAAC;IACnH,MAAM,WAAW,GAAyB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACzM,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC;AAC7F,CAAC"}
@@ -1,10 +1,9 @@
1
1
  import { type GoalIndexEntry, type RemoteManagerGoalIndexScanRequest, type RemoteManagerGoalIndexScanResult } from "@cotal-ai/core";
2
+ import { type ManagerAuthorityHolder } from "./platform-control.js";
2
3
  export declare function parseRemoteManagerGoalIndexScanRequest(raw: unknown): RemoteManagerGoalIndexScanRequest;
3
- export declare function authorizeRemoteManagerGoalIndexScan(args: {
4
+ export declare function authorizeRemoteManagerGoalIndexScan(args: ManagerAuthorityHolder & {
4
5
  request: RemoteManagerGoalIndexScanRequest;
5
6
  space: string;
6
- owner: string;
7
- scope: string[];
8
7
  proofSecret: string | Uint8Array;
9
8
  observeManagerGate: (instanceId: string) => Promise<{
10
9
  state: "open" | "frozen" | "retired";
@@ -1 +1 @@
1
- {"version":3,"file":"manager-goal-index.d.ts","sourceRoot":"","sources":["../src/manager-goal-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,iCAAiC,EACtC,KAAK,gCAAgC,EACtC,MAAM,gBAAgB,CAAC;AAOxB,wBAAgB,sCAAsC,CAAC,GAAG,EAAE,OAAO,GAAG,iCAAiC,CA+BtG;AAED,wBAAsB,mCAAmC,CAAC,IAAI,EAAE;IAC9D,OAAO,EAAE,iCAAiC,CAAC;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;KAC7G,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAc7C;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,iCAAiC,EAC1C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,cAAc,EAAE,GACxB,gCAAgC,CASlC"}
1
+ {"version":3,"file":"manager-goal-index.d.ts","sourceRoot":"","sources":["../src/manager-goal-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,iCAAiC,EACtC,KAAK,gCAAgC,EACtC,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAiC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAKnG,wBAAgB,sCAAsC,CAAC,GAAG,EAAE,OAAO,GAAG,iCAAiC,CA+BtG;AAED,wBAAsB,mCAAmC,CAAC,IAAI,EAAE,sBAAsB,GAAG;IACvF,OAAO,EAAE,iCAAiC,CAAC;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;KAC7G,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAc7C;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,iCAAiC,EAC1C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,cAAc,EAAE,GACxB,gCAAgC,CASlC"}
@@ -1,6 +1,7 @@
1
1
  import { EpEnvelopeError, assertLifecycleToken, assertValidOwnerToken, remoteManagerActors, } from "@cotal-ai/core";
2
2
  import { remoteManagerCurrentRegistrationProof } from "./retained-manager-validation.js";
3
3
  import { timingSafeEqual } from "node:crypto";
4
+ import { requireManagerAuthorityHolder } from "./platform-control.js";
4
5
  const identityNames = ["supervisor", "executor", "serve", "goalWriter", "sessionLedger"];
5
6
  const bad = (message) => { throw new EpEnvelopeError("bad-request", `manager goal-index scan request ${message}`); };
6
7
  export function parseRemoteManagerGoalIndexScanRequest(raw) {
@@ -51,8 +52,7 @@ export async function authorizeRemoteManagerGoalIndexScan(args) {
51
52
  const request = parseRemoteManagerGoalIndexScanRequest(args.request);
52
53
  if (request.space !== args.space)
53
54
  throw new EpEnvelopeError("permission-denied", `manager goal-index scan names space ${request.space}, not this host space ${args.space}`);
54
- if (!args.scope.includes("supervise"))
55
- throw new EpEnvelopeError("permission-denied", 'manager goal-index scan needs scope "supervise"');
55
+ requireManagerAuthorityHolder(args, request.instanceId, 'manager goal-index scan needs scope "supervise"');
56
56
  const actors = remoteManagerActors(request.instanceId);
57
57
  const gate = await args.observeManagerGate(request.instanceId);
58
58
  if (!gate || gate.state !== "open")
@@ -1 +1 @@
1
- {"version":3,"file":"manager-goal-index.js","sourceRoot":"","sources":["../src/manager-goal-index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GAIpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;AAClG,MAAM,GAAG,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mCAAmC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpI,MAAM,UAAU,sCAAsC,CAAC,GAAY;IACjE,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5F,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAClJ,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,yBAAyB;QAAE,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACnH,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,CAAU;QAClH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IAC1F,qBAAqB,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IACzC,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,oCAAoC,CAAC,CAAC;IACnF,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,sCAAsC,CAAC,CAAC;IAC9F,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACxH,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAA2B,CAAC;QAAE,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC7G,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;QAAE,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACvJ,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACzH,MAAM,MAAM,GAAG,CAAC,CAAC,UAAqC,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrJ,MAAM,UAAU,GAAG,EAAqD,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACzK,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5G,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAY,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe;QACzF,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACxF,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QAClF,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,UAAU;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,IASzD;IACC,MAAM,OAAO,GAAG,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uCAAuC,OAAO,CAAC,KAAK,yBAAyB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5K,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,iDAAiD,CAAC,CAAC;IACzI,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,2EAA2E,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACtL,MAAM,iBAAiB,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IAC1D,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2CAA2C,IAAI,CAAC,SAAS,SAAS,iBAAiB,EAAE,CAAC,CAAC;IAChL,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uCAAuC,OAAO,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3L,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACjG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,4EAA4E,CAAC,CAAC;IAC/H,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAA0C,EAC1C,KAAa,EACb,OAAyB;IAEzB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,iEAAiE,CAAC,CAAC;IAC3G,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;QACxF,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChF,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC1E,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO;KACxC,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"manager-goal-index.js","sourceRoot":"","sources":["../src/manager-goal-index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GAIpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,6BAA6B,EAA+B,MAAM,uBAAuB,CAAC;AAEnG,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;AAClG,MAAM,GAAG,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mCAAmC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpI,MAAM,UAAU,sCAAsC,CAAC,GAAY;IACjE,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5F,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAClJ,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,yBAAyB;QAAE,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACnH,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,CAAU;QAClH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IAC1F,qBAAqB,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IACzC,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,oCAAoC,CAAC,CAAC;IACnF,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,sCAAsC,CAAC,CAAC;IAC9F,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACxH,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAA2B,CAAC;QAAE,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC7G,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;QAAE,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACvJ,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACzH,MAAM,MAAM,GAAG,CAAC,CAAC,UAAqC,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrJ,MAAM,UAAU,GAAG,EAAqD,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACzK,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5G,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAY,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe;QACzF,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACxF,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QAClF,UAAU,EAAE,CAAC,CAAC,UAAoB,EAAE,UAAU;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,IAOzD;IACC,MAAM,OAAO,GAAG,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uCAAuC,OAAO,CAAC,KAAK,yBAAyB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5K,6BAA6B,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,iDAAiD,CAAC,CAAC;IAC3G,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,2EAA2E,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACtL,MAAM,iBAAiB,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IAC1D,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2CAA2C,IAAI,CAAC,SAAS,SAAS,iBAAiB,EAAE,CAAC,CAAC;IAChL,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uCAAuC,OAAO,CAAC,UAAU,yBAAyB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3L,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACjG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,4EAA4E,CAAC,CAAC;IAC/H,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAA0C,EAC1C,KAAa,EACb,OAAyB;IAEzB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,iEAAiE,CAAC,CAAC;IAC3G,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;QACxF,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChF,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC1E,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO;KACxC,CAAC;AACJ,CAAC"}
@@ -1,11 +1,10 @@
1
1
  import { type RemoteManagerMaintenanceRequest, type RemoteManagerMaintenanceResult } from "@cotal-ai/core";
2
2
  import type { AuthLedgerScanner } from "./ledger-scanner.js";
3
+ import { type ManagerAuthorityHolder } from "./platform-control.js";
3
4
  export declare function parseRemoteManagerMaintenanceRequest(raw: unknown): RemoteManagerMaintenanceRequest;
4
- export declare function authorizeRemoteManagerMaintenance(args: {
5
+ export declare function authorizeRemoteManagerMaintenance(args: ManagerAuthorityHolder & {
5
6
  request: RemoteManagerMaintenanceRequest;
6
7
  space: string;
7
- owner: string;
8
- scope: string[];
9
8
  observeManagerGate(instanceId: string): Promise<{
10
9
  state: "open" | "frozen" | "retired";
11
10
  principal: string;
@@ -1 +1 @@
1
- {"version":3,"file":"manager-maintenance.d.ts","sourceRoot":"","sources":["../src/manager-maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACpC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAQ7D,wBAAgB,oCAAoC,CAAC,GAAG,EAAE,OAAO,GAAG,+BAA+B,CAiDlG;AAED,wBAAsB,iCAAiC,CAAC,IAAI,EAAE;IAC5D,OAAO,EAAE,+BAA+B,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9C,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,GAAG,IAAI,CAAC,CAAC;IACV,OAAO,EAAE,iBAAiB,CAAC;CAC5B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CA8B3C;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,+BAA+B,EACxC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,IAAI,CAAC,8BAA8B,EAAE,UAAU,GAAG,gBAAgB,CAAC,GAC1E,8BAA8B,CAEhC"}
1
+ {"version":3,"file":"manager-maintenance.d.ts","sourceRoot":"","sources":["../src/manager-maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACpC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAiC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAQnG,wBAAgB,oCAAoC,CAAC,GAAG,EAAE,OAAO,GAAG,+BAA+B,CAiDlG;AAED,wBAAsB,iCAAiC,CAAC,IAAI,EAAE,sBAAsB,GAAG;IACrF,OAAO,EAAE,+BAA+B,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9C,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,GAAG,IAAI,CAAC,CAAC;IACV,OAAO,EAAE,iBAAiB,CAAC;CAC5B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAmC3C;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,+BAA+B,EACxC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,IAAI,CAAC,8BAA8B,EAAE,UAAU,GAAG,gBAAgB,CAAC,GAC1E,8BAA8B,CAEhC"}
@@ -1,4 +1,5 @@
1
1
  import { EpEnvelopeError, assertLifecycleToken, assertValidOwnerToken, epcredFamilyPrefix, parseLedgerRow, remoteManagerActors, } from "@cotal-ai/core";
2
+ import { requireManagerAuthorityHolder } from "./platform-control.js";
2
3
  const identityNames = ["supervisor", "executor", "serve", "goalWriter", "sessionLedger"];
3
4
  function requestError(what) {
4
5
  throw new EpEnvelopeError("bad-request", `manager-service maintenance request ${what}`);
@@ -67,13 +68,18 @@ export async function authorizeRemoteManagerMaintenance(args) {
67
68
  const r = parseRemoteManagerMaintenanceRequest(args.request);
68
69
  if (r.space !== args.space)
69
70
  throw new EpEnvelopeError("permission-denied", `manager maintenance request names space ${r.space}, not this host space ${args.space}`);
70
- if (!args.scope.includes("supervise"))
71
- throw new EpEnvelopeError("permission-denied", 'manager maintenance needs scope "supervise"; spawn/admin do not imply it');
71
+ requireManagerAuthorityHolder(args, r.instanceId, 'manager maintenance needs scope "supervise"; spawn/admin do not imply it');
72
+ // The platform arm reaches only its own assigned instance, for both operations. The human arm may
73
+ // still reconcile a foreign slot holder in its space.
74
+ if (args.holder === "platform" && r.targetInstanceId !== args.assignment.instanceId)
75
+ throw new EpEnvelopeError("permission-denied", `platform control maintenance may target only assigned instance ${args.assignment.instanceId}, not ${r.targetInstanceId}`);
72
76
  if (r.operation === "evict-family-principal" && r.targetInstanceId !== r.instanceId)
73
77
  throw new EpEnvelopeError("permission-denied", `manager maintenance eviction may target only caller instance ${r.instanceId}, not ${r.targetInstanceId}`);
74
78
  const gate = await args.observeManagerGate(r.targetInstanceId);
75
79
  if (!gate || gate.state === "retired")
76
80
  throw new EpEnvelopeError("failed-precondition", `manager maintenance found no live registration gate for instance ${r.targetInstanceId}`);
81
+ if (args.holder === "platform" && gate.principal !== `${args.owner}.${remoteManagerActors(r.targetInstanceId).serve}`)
82
+ throw new EpEnvelopeError("permission-denied", `platform control maintenance gate belongs to ${gate.principal}, not the platform serve principal`);
77
83
  if (r.operation === "evict-family-principal") {
78
84
  const servePrincipal = `${args.owner}.${remoteManagerActors(r.instanceId).serve}`;
79
85
  if (gate.principal !== servePrincipal)
@@ -1 +1 @@
1
- {"version":3,"file":"manager-maintenance.js","sourceRoot":"","sources":["../src/manager-maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,GAGpB,MAAM,gBAAgB,CAAC;AAGxB,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;AAElG,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,uCAAuC,IAAI,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,GAAY;IAC/D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACrG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB;QAC/E,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW;KAC3D,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC/I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,6BAA6B;QACvD,YAAY,CAAC,0DAA0D,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB;QACtF,YAAY,CAAC,wEAAwE,CAAC,CAAC;IACzF,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,kBAAkB,CAAU;QACjH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IACnG,qBAAqB,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IACzC,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,gCAAgC,CAAC,CAAC;IAC/E,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,kCAAkC,CAAC,CAAC;IAC1F,oBAAoB,CAAC,CAAC,CAAC,gBAA0B,EAAE,sCAAsC,CAAC,CAAC;IAC3F,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,YAAY,CAAC,uDAAuD,CAAC,CAAC;IACjI,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,2CAA2C,CAAC,CAAC;IAC7H,CAAC;SAAM,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;QAAE,YAAY,CAAC,iDAAiD,CAAC,CAAC;IACtG,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;IACzB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7E,YAAY,CAAC,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,EAAmD,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YACpH,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACrH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,6BAA6B;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,UAAU,EAAE,CAAC,CAAC,UAAoB;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACpD,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,UAAU;QACV,gBAAgB,EAAE,CAAC,CAAC,gBAA0B;QAC9C,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,IAYvD;IACC,MAAM,CAAC,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2CAA2C,CAAC,CAAC,KAAK,yBAAyB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1I,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,0EAA0E,CAAC,CAAC;IAC7H,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,UAAU;QACjF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gEAAgE,CAAC,CAAC,UAAU,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5J,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QACnC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,oEAAoE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7I,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;QAClF,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;YACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uCAAuC,IAAI,CAAC,SAAS,qDAAqD,cAAc,EAAE,CAAC,CAAC;IAC/K,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,kBAAkB,CAAC,SAAS,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,SAAS,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnG,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK;gBAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,+BAA+B,KAAK,CAAC,EAAE,oDAAoD,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3J,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC/B,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uDAAuD,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,6DAA6D,kBAAkB,CAAC,SAAS,EAAE,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,SAAS,yBAAyB,CAAC,CAAC;IAC5M,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAAwC,EACxC,KAAa,EACb,MAA2E;IAE3E,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;AAC1C,CAAC"}
1
+ {"version":3,"file":"manager-maintenance.js","sourceRoot":"","sources":["../src/manager-maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,GAGpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,6BAA6B,EAA+B,MAAM,uBAAuB,CAAC;AAEnG,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;AAElG,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,uCAAuC,IAAI,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,GAAY;IAC/D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACrG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB;QAC/E,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW;KAC3D,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC/I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,6BAA6B;QACvD,YAAY,CAAC,0DAA0D,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB;QACtF,YAAY,CAAC,wEAAwE,CAAC,CAAC;IACzF,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,kBAAkB,CAAU;QACjH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;IACnG,qBAAqB,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IACzC,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,gCAAgC,CAAC,CAAC;IAC/E,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,kCAAkC,CAAC,CAAC;IAC1F,oBAAoB,CAAC,CAAC,CAAC,gBAA0B,EAAE,sCAAsC,CAAC,CAAC;IAC3F,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QAAE,YAAY,CAAC,uDAAuD,CAAC,CAAC;IACjI,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,2CAA2C,CAAC,CAAC;IAC7H,CAAC;SAAM,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;QAAE,YAAY,CAAC,iDAAiD,CAAC,CAAC;IACtG,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;IACzB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7E,YAAY,CAAC,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,EAAmD,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YACpH,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,YAAY,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACrH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,6BAA6B;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,UAAU,EAAE,CAAC,CAAC,UAAoB;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACpD,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,UAAU;QACV,gBAAgB,EAAE,CAAC,CAAC,gBAA0B;QAC9C,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,IAUvD;IACC,MAAM,CAAC,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QACxB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,2CAA2C,CAAC,CAAC,KAAK,yBAAyB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1I,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,0EAA0E,CAAC,CAAC;IAC9H,kGAAkG;IAClG,sDAAsD;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,UAAU,CAAC,UAAU;QACjF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,kEAAkE,IAAI,CAAC,UAAU,CAAC,UAAU,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5K,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,UAAU;QACjF,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gEAAgE,CAAC,CAAC,UAAU,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5J,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QACnC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,oEAAoE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7I,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE;QACnH,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,gDAAgD,IAAI,CAAC,SAAS,oCAAoC,CAAC,CAAC;IACrJ,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;QAClF,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;YACnC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,uCAAuC,IAAI,CAAC,SAAS,qDAAqD,cAAc,EAAE,CAAC,CAAC;IAC/K,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,kBAAkB,CAAC,SAAS,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,SAAS,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnG,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK;gBAChC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,+BAA+B,KAAK,CAAC,EAAE,oDAAoD,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3J,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC/B,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uDAAuD,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAU,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,6DAA6D,kBAAkB,CAAC,SAAS,EAAE,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,SAAS,yBAAyB,CAAC,CAAC;IAC5M,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAAwC,EACxC,KAAa,EACb,MAA2E;IAE3E,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;AAC1C,CAAC"}