@cotal-ai/core 0.16.0 → 0.17.0

package/dist/lifecycle-state.d.ts

@@ -0,0 +1,202 @@
+/** The `lifecycle.<owner>.<actor>` head value (§13.1, amended). One incarnation of an alias.
+ *  `mappingRevision` is NOT here: it is the head key's STORE revision (§13.1), returned beside
+ *  the mapping by the leader read. `currentCredentialId` stays ABSENT until the (3) normative
+ *  ledger mints under the reopened gate (an active head naming a released credential before the
+ *  ledger exists would be exactly the unledgered mint §13.1 forbids). */
+export interface LifecycleMapping {
+    owner: string;
+    actor: string;
+    /** The never-reused, space-globally reserved lifecycle UID of THIS incarnation. */
+    lifecycleUid: string;
+    /** The minting/supervising authority. */
+    managerInstance: string;
+    /** The fenced process epoch (§13.1: live authority binds it; advanced only by the takeover
+     *  barrier). */
+    processEpoch: number;
+    /** `active` is the ONLY current state. `retiring` = the terminal barrier's op-bound
+     *  containment phase (non-current, NOT replaceable). `retired` = terminal AND asserts the
+     *  completed barrier (only then may activation replace the alias, with a fresh UID). */
+    state: "active" | "retiring" | "retired";
+    /** The public credential fingerprint + authority epoch — absent until the ledger slice. */
+    currentCredentialId?: string;
+    /** The opId of the takeover operation that LAST advanced this epoch (SPEC 13.1: the epoch
+     *  advance and its op stamp are ONE CAS, so a completion is bound to exactly one operation).
+     *  A resuming barrier confirms the completed head carries ITS opId; a LOSING concurrent
+     *  takeover finds a foreign opId and refuses, never claiming the winner's completion. Absent
+     *  at initial activation (epoch 1), present from the first takeover. */
+    lastTakeoverOpId?: string;
+    /** REQUIRED at `retiring` (the retirement operation's durable intent); absent otherwise. */
+    op?: {
+        opId: string;
+        kind: "retirement";
+    };
+}
+export declare const LIFECYCLE_HEAD_STATES: ReadonlySet<string>;
+/** The head key `lifecycle.<owner>.<actor>` (§13.7: one atomic unsplit key). */
+export declare function lifecycleHeadKey(owner: string, actor: string): string;
+/** The space-global reservation key `uid.<lifecycleUid>` (§13.7: create-only, never-deleted). */
+export declare function uidReservationKey(lifecycleUid: string): string;
+/** Validate a head value at the consuming boundary — CLOSED schema (nested `op` included), and
+ *  the embedded owner/actor MUST agree with the key so a key-mismatched row never authorizes. */
+export declare function parseLifecycleHead(raw: Uint8Array, key: string, owner: string, actor: string): LifecycleMapping;
+/** The agent-family issuance gate row (§13.1, amended): `frozen` MUST carry the durable op
+ *  intent; the embedded uid MUST agree with the key. (The disjoint ENDPOINT family
+ *  `epgate.<endpoint>.<instanceId>` is separate.) */
+export interface EpGateRow {
+    lifecycleUid: string;
+    state: "open" | "frozen" | "retired";
+    /** Mint generation: born 0 under the activation freeze, first mintable generation is 1 (the
+     *  activation's reopen), and every barrier reopen advances it. */
+    generation: number;
+    /** REQUIRED at `frozen` (which operation owns this freeze and may advance it) AND at
+     *  `retired` (the terminalizing op, audit + same-op idempotence); absent at `open`.
+     *  `successor` is a per-kind summary token (SPEC 13.1): only `takeover`/`registration`
+     *  may carry one (their authoritative successor artifacts live under `stage.<opId>.`);
+     *  `activation`/`retirement` never do. */
+    op?: {
+        opId: string;
+        kind: "activation" | "takeover" | "registration" | "retirement";
+        successor?: string;
+    };
+}
+export declare const ISSUANCE_GATE_STATES: ReadonlySet<string>;
+export declare const ISSUANCE_GATE_OP_KINDS: ReadonlySet<string>;
+/** The gate key `gate.<lifecycleUid>` (§13.7). */
+export declare function issuanceGateKey(lifecycleUid: string): string;
+/** Validate a gate row at the consuming boundary — CLOSED schema; key/uid agreement; the
+ *  per-kind STATE x KIND transition invariants (§13.1). */
+export declare function parseIssuanceGate(raw: Uint8Array, key: string, lifecycleUid: string): EpGateRow;
+export declare function assertKeySegment(v: unknown, what: string): string;
+/** A credential id: one or more KV-safe segments (dots allowed BETWEEN segments — the session
+ *  families use `<sessionId>.c` / `<sessionId>.s` — but never wildcards or empty segments). */
+export declare function assertCredentialIdTail(v: unknown, what: string): string;
+/** A holder principal `<owner>.<actor>` with a REAL owner (derived `u_…` or the dev owner) —
+ *  eviction is BY PRINCIPAL, so a row that cannot name an evictable principal never ledgers. */
+export declare function assertHolderPrincipal(v: unknown, what: string): string;
+export declare const SOURCE_ROOT = "root";
+/** Validate ONE sourceChain member — `root`, `handle.<issuerKeyId>.<id>`, or
+ *  `session.<sessionId>` (SPEC 13.1) — and return its parsed shape. */
+export declare function parseSourceMember(member: unknown): {
+    kind: "root";
+} | {
+    kind: "handle";
+    issuerKeyId: string;
+    id: string;
+} | {
+    kind: "session";
+    sessionId: string;
+};
+export declare function assertSourceChain(v: unknown, what: string): string[];
+/** The agent-family ledger key `cred.<lifecycleUid>.<credentialId>`. */
+export declare function credRowKey(lifecycleUid: string, credentialId: string): string;
+/** The endpoint-family ledger key `epcred.<endpoint>.<instanceId>.<credentialId>` (disjoint by
+ *  explicit prefix, never arity, SPEC 13.1). */
+export declare function epcredRowKey(endpoint: string, instanceId: string, credentialId: string): string;
+/** The endpoint-family ledger KEY PREFIX `epcred.<endpoint>.<instanceId>` (no credentialId tail) —
+ *  the exact family a barrier enumerates and a key-pinned executor grant scopes to (`…​.>`). Built
+ *  from the core tokenizers so a grant never spells the prefix by hand (guard-the-core). */
+export declare function epcredFamilyPrefix(endpoint: string, instanceId: string): string;
+/** The ENDPOINT-instance issuance gate row (§13.1: a DISJOINT family from the agent
+ *  `gate.<lifecycleUid>`, distinguished by explicit PREFIX and never token arity; it carries the
+ *  endpoint fence coordinates of §13.5/§13.7). Closed schema; `frozen`/`retired` are op-bound
+ *  exactly like the agent family. Lifted to core (guarded-core: ONE encoder shared by the auth
+ *  session ledger and the manager's endpoint-serve wiring; a second dialect is the dual-encoder
+ *  drift this module bans). */
+export interface EndpointGateRow {
+    state: "open" | "frozen" | "retired";
+    generation: number;
+    processEpoch: number;
+    registrationRevision: number;
+    nameAuthorityRevision: number;
+    /** The serving instance's CONNZ-attributable connection principal (`<owner>.<actor>` dot-form)
+     *  — the eviction target when the endpoint is taken over or a serving credential is revoked
+     *  (§13.1: eviction is BY PRINCIPAL). Recorded at endpoint registration; the serving ledger
+     *  rows (`epcred.`) copy it as their `holderPrincipal`, so the endpoint KEY identity
+     *  (`endpoint`) and the evictable principal stay disjoint. */
+    principal: string;
+    op?: {
+        opId: string;
+        kind: "activation" | "takeover" | "registration" | "retirement";
+        successor?: string;
+    };
+}
+/** The endpoint gate key `epgate.<endpoint>.<instanceId>` (an instanceId is unique ONLY within
+ *  `(space, endpoint)`, so the key is endpoint-qualified — equal instanceIds under two endpoints
+ *  never collide on the gate or the credential family, §13.1/§13.6). */
+export declare function epgateKey(endpoint: string, instanceId: string): string;
+/** Validate an endpoint gate row at the consuming boundary — CLOSED schema; a real owner-grammar
+ *  serving principal; the per-kind STATE x KIND + successor invariants (§13.1). Byte-for-byte the
+ *  parser the auth session ledger carried (fact H3 lift), now shared. */
+export declare function parseEndpointGate(raw: Uint8Array, key: string): EndpointGateRow;
+/** The §13.1 credential-ledger row, closed. `lifecycleUid` is the HOLDER's KEY identity
+ *  component: the managed agent's lifecycle UID in the `cred.` family, the endpoint instance's
+ *  `instanceId` in the `epcred.` family (SPEC 13.1: `instanceId` is to an endpoint what
+ *  `lifecycleUid` is to a managed agent). `endpoint` is present ONLY in the `epcred.` family
+ *  (it forms the key there and is absent in `cred.`), so the KEY identity is never conflated
+ *  with the eviction target. `holderPrincipal` is who the barrier KICKs: ALWAYS a CONNZ-
+ *  attributable `<owner>.<actor>` dot-form (the caller principal in the `cred.` family; the
+ *  serving instance's own connection principal in the `epcred.` family, recorded from the
+ *  endpoint gate), NEVER the endpoint name (which CONNZ cannot attribute). */
+export interface CredentialLedgerRow {
+    credentialId: string;
+    holderPrincipal: string;
+    lifecycleUid: string;
+    /** The endpoint NAME whose token forms the `epcred.` key; present iff this is an endpoint-
+     *  family row, absent in the `cred.` family (which the lifecycleUid keys). */
+    endpoint?: string;
+    /** The FULL verified lineage at mint: `root` | `handle.<issuerKeyId>.<id>`… |
+     *  `session.<sessionId>` (SPEC 13.1 — for a handle redemption EVERY handle in the presented
+     *  chain, never only the leaf). */
+    sourceChain: string[];
+    /** Monotonic: `active → revoked` only; a revoked row is never deleted. */
+    state: "active" | "revoked";
+    exp: number;
+}
+/** Parse + validate a ledger row at its consuming boundary — closed schema, and the embedded
+ *  identity MUST rebuild the row's own key, so a key-mismatched or family-swapped poison row
+ *  never authorizes (SPEC 13.1/13.3). */
+export declare function parseLedgerRow(raw: Uint8Array, key: string): CredentialLedgerRow;
+/** Phases of one static managed slot: the F3 outer spawn intent (`provisioning`, persisted
+ *  BEFORE head activation), the owned slot (`active`), the terminal in flight (`terminalizing`),
+ *  and the completed terminal (`retired` — the row is never deleted; a same-alias successor
+ *  CASes over it). */
+export declare const STATIC_SLOT_PHASES: ReadonlySet<string>;
+export type StaticSlotPhase = "provisioning" | "active" | "terminalizing" | "retired";
+/** The static manager's durable alias -> (owner, actor, lifecycleUid) slot mapping (Unit B,
+ *  the F5-bind split-coordinates design): the ALIAS is routing/display, protected by this
+ *  name-keyed row plus the uid reservation and the manager's freeSlot hold; the AUTHORITY
+ *  coordinate is the incarnation-unique wire `actor` (the nkey) recorded here as DATA. The row
+ *  lives in the records store — the same durability domain as the head — and survives manager
+ *  restart (the boot sweep re-drives any non-retired phase). `credentialIds` is the incarnation's
+ *  full mint set (root + renewals): the terminal's B1 revoke enumerates from HERE (recorded
+ *  BEFORE each mint), never from a store listing. */
+export interface StaticManagedSlotRow {
+    owner: string;
+    /** The manager-visible agent name (routing identity; never sufficient authority, SPEC 13.1). */
+    alias: string;
+    /** The incarnation-unique wire principal actor (the connection nkey) — the authority coordinate. */
+    actor: string;
+    lifecycleUid: string;
+    phase: StaticSlotPhase;
+    /** Every credentialId minted for this incarnation, recorded BEFORE its mint (crash-safe:
+     *  a cred never exists without its id recorded here and its ledger row appended first). */
+    credentialIds: string[];
+    /** The minting/supervising authority (the manager's own per-PROCESS incarnation uid — audit only). */
+    managerInstance: string;
+    /** The owning LOGICAL manager instance id (P2 item 3 slice 3b-2): stable across manager restart, so
+     *  the boot reconcile filters to rows THIS logical instance owns and never sweep-terminalizes a
+     *  SIBLING manager's rows (multi-manager-per-space). Optional for backward-compat: a legacy row
+     *  (written before 3b-2, no owner recorded) predates multi-manager, so a reconciling manager treats
+     *  it as its own (the single-manager past). An orphaned sibling row is claimed only by an explicit
+     *  operator CAS takeover (ruling 1), never auto-adopted. */
+    ownerInstanceId?: string;
+}
+/** The slot key prefix in the records store. Core-owned so permission builders and the manager
+ *  share ONE encoder (a second literal is the drift class this module bans). */
+export declare const STATIC_SLOT_PREFIX = "mgrslot";
+/** The slot key `mgrslot.<owner>.<alias>`. */
+export declare function staticSlotKey(owner: string, alias: string): string;
+/** Validate a slot row at the consuming boundary — CLOSED schema, and the embedded identity
+ *  MUST rebuild the row's own key, so a key-mismatched row never drives a resume or terminal. */
+export declare function parseStaticSlotRow(raw: Uint8Array, key: string): StaticManagedSlotRow;
+//# sourceMappingURL=lifecycle-state.d.ts.map

package/dist/lifecycle-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-state.d.ts","sourceRoot":"","sources":["../src/lifecycle-state.ts"],"names":[],"mappings":"AAuBA;;;;yEAIyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,YAAY,EAAE,MAAM,CAAC;IACrB,yCAAyC;IACzC,eAAe,EAAE,MAAM,CAAC;IACxB;oBACgB;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB;;4FAEwF;IACxF,KAAK,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;IACzC,2FAA2F;IAC3F,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;4EAIwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4FAA4F;IAC5F,EAAE,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,CAAA;KAAE,CAAC;CAC3C;AAED,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAA8C,CAAC;AAErG,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;iGACiG;AACjG,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CA0C/G;AAID;;qDAEqD;AACrD,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IACrC;sEACkE;IAClE,UAAU,EAAE,MAAM,CAAC;IACnB;;;;8CAI0C;IAC1C,EAAE,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5G;AAED,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAA0C,CAAC;AAChG,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAAqE,CAAC;AAE7H,kDAAkD;AAClD,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;2DAC2D;AAC3D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,CAmC/F;AAOD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjE;AAED;+FAC+F;AAC/F,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIvE;AAED;gGACgG;AAChG,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAKtE;AAED,eAAO,MAAM,WAAW,SAAS,CAAC;AAElC;uEACuE;AACvE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAYlK;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAKpE;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAE7E;AACD;gDACgD;AAChD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAE/F;AAED;;4FAE4F;AAC5F,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/E;AAID;;;;;+BAK+B;AAC/B,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;kEAI8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5G;AAED;;wEAEwE;AACxE,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;yEAEyE;AACzE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe,CAmC/E;AAED;;;;;;;;8EAQ8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB;kFAC8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;uCAEmC;IACnC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,0EAA0E;IAC1E,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;yCAEyC;AACzC,wBAAgB,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,mBAAmB,CA8ChF;AAID;;;sBAGsB;AACtB,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAmE,CAAC;AACvH,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,QAAQ,GAAG,eAAe,GAAG,SAAS,CAAC;AAEtF;;;;;;;qDAOqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,KAAK,EAAE,MAAM,CAAC;IACd,oGAAoG;IACpG,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB;+FAC2F;IAC3F,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sGAAsG;IACtG,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;gEAK4D;IAC5D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;gFACgF;AAChF,eAAO,MAAM,kBAAkB,YAAY,CAAC;AAE5C,8CAA8C;AAC9C,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;iGACiG;AACjG,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAuBrF"}

package/dist/lifecycle-state.js

@@ -0,0 +1,347 @@
+/**
+ * The §13.1 lifecycle STATE grammar: the wire-normative key shapes, closed value schemas, and
+ * state sets for the lifecycle alias head (`lifecycle.<owner>.<actor>`), the space-global UID
+ * reservation (`uid.<lifecycleUid>`), and the agent-family issuance gate (`gate.<lifecycleUid>`).
+ *
+ * This module is GRAMMAR ONLY, shared by every lifecycle executor (the user-mesh auth service
+ * and the manager's static lifecycle adapter): key construction, parse-at-the-consuming-boundary
+ * validation, and the state constants. The CAS SEQUENCING that produces these rows (activation
+ * saga, head retirement, gate transitions) and the barrier ORCHESTRATION (revoke/evict/ledger)
+ * live with their executors; a second copy of either is the dual-encoder drift this module
+ * exists to prevent.
+ */
+import { EpEnvelopeError } from "./endpoint-envelope.js";
+import { LIFECYCLE_HEAD, UID_RESERVATION, recordAtomicKey } from "./endpoint-records.js";
+import { assertLifecycleToken, endpointToken } from "./endpoint-subjects.js";
+import { parsePrincipalKey, isPrincipalOwnerToken } from "./subjects.js";
+const dec = new TextDecoder();
+const isRec = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+const uint = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 0;
+export const LIFECYCLE_HEAD_STATES = new Set(["active", "retiring", "retired"]);
+/** The head key `lifecycle.<owner>.<actor>` (§13.7: one atomic unsplit key). */
+export function lifecycleHeadKey(owner, actor) {
+    return recordAtomicKey(LIFECYCLE_HEAD, [owner, actor]);
+}
+/** The space-global reservation key `uid.<lifecycleUid>` (§13.7: create-only, never-deleted). */
+export function uidReservationKey(lifecycleUid) {
+    return recordAtomicKey(UID_RESERVATION, [lifecycleUid]);
+}
+/** Validate a head value at the consuming boundary — CLOSED schema (nested `op` included), and
+ *  the embedded owner/actor MUST agree with the key so a key-mismatched row never authorizes. */
+export function parseLifecycleHead(raw, key, owner, actor) {
+    let o;
+    try {
+        o = JSON.parse(dec.decode(raw));
+    }
+    catch {
+        throw new EpEnvelopeError("internal", `the lifecycle head ${key} is not JSON; garbled trusted-path state never authorizes (SPEC 13.1)`);
+    }
+    if (!isRec(o))
+        throw new EpEnvelopeError("internal", `the lifecycle head ${key} is not an object`);
+    const allowed = new Set(["owner", "actor", "lifecycleUid", "managerInstance", "processEpoch", "state", "currentCredentialId", "lastTakeoverOpId", "op"]);
+    for (const k of Object.keys(o))
+        if (!allowed.has(k))
+            throw new EpEnvelopeError("internal", `the lifecycle head ${key} carries the unknown field "${k}" (closed schema, SPEC 13.1)`);
+    if (o.owner !== owner || o.actor !== actor ||
+        typeof o.lifecycleUid !== "string" || typeof o.managerInstance !== "string" || o.managerInstance.length === 0 ||
+        !uint(o.processEpoch) || o.processEpoch < 1 || typeof o.state !== "string" || !LIFECYCLE_HEAD_STATES.has(o.state) ||
+        (o.currentCredentialId !== undefined && (typeof o.currentCredentialId !== "string" || o.currentCredentialId.length === 0)) ||
+        (o.lastTakeoverOpId !== undefined && typeof o.lastTakeoverOpId !== "string"))
+        throw new EpEnvelopeError("internal", `the lifecycle head ${key} does not validate (owner/actor/uid/epoch/state); a garbled or key-mismatched head never authorizes (SPEC 13.1/13.3)`);
+    try {
+        assertLifecycleToken(o.lifecycleUid);
+        if (o.lastTakeoverOpId !== undefined)
+            assertLifecycleToken(o.lastTakeoverOpId);
+    }
+    catch {
+        throw new EpEnvelopeError("internal", `the lifecycle head ${key} carries a malformed lifecycleUid/lastTakeoverOpId (SPEC 13.1)`);
+    }
+    // The retirement op intent: REQUIRED at `retiring`, forbidden elsewhere; itself closed.
+    if (o.state === "retiring") {
+        if (!isRec(o.op))
+            throw new EpEnvelopeError("internal", `the lifecycle head ${key} is retiring without its durable op intent (SPEC 13.1: retiring is op-bound)`);
+    }
+    else if (o.op !== undefined) {
+        throw new EpEnvelopeError("internal", `the lifecycle head ${key} carries an op intent in state "${o.state}" (SPEC 13.1: only retiring is op-bound)`);
+    }
+    if (o.op !== undefined) {
+        const op = o.op;
+        for (const k of Object.keys(op))
+            if (k !== "opId" && k !== "kind")
+                throw new EpEnvelopeError("internal", `the lifecycle head ${key} op intent carries the unknown field "${k}" (closed schema)`);
+        if (typeof op.opId !== "string" || op.kind !== "retirement")
+            throw new EpEnvelopeError("internal", `the lifecycle head ${key} op intent does not validate (SPEC 13.1)`);
+        try {
+            assertLifecycleToken(op.opId);
+        }
+        catch {
+            throw new EpEnvelopeError("internal", `the lifecycle head ${key} op intent carries a malformed opId (SPEC 13.1)`);
+        }
+    }
+    return o;
+}
+export const ISSUANCE_GATE_STATES = new Set(["open", "frozen", "retired"]);
+export const ISSUANCE_GATE_OP_KINDS = new Set(["activation", "takeover", "registration", "retirement"]);
+/** The gate key `gate.<lifecycleUid>` (§13.7). */
+export function issuanceGateKey(lifecycleUid) {
+    return `gate.${assertLifecycleToken(lifecycleUid)}`;
+}
+/** Validate a gate row at the consuming boundary — CLOSED schema; key/uid agreement; the
+ *  per-kind STATE x KIND transition invariants (§13.1). */
+export function parseIssuanceGate(raw, key, lifecycleUid) {
+    let o;
+    try {
+        o = JSON.parse(dec.decode(raw));
+    }
+    catch {
+        throw new EpEnvelopeError("internal", `the issuance gate ${key} is not JSON; garbled trusted-path state never authorizes (SPEC 13.1)`);
+    }
+    if (!isRec(o))
+        throw new EpEnvelopeError("internal", `the issuance gate ${key} is not an object`);
+    for (const k of Object.keys(o))
+        if (k !== "lifecycleUid" && k !== "state" && k !== "generation" && k !== "op")
+            throw new EpEnvelopeError("internal", `the issuance gate ${key} carries the unknown field "${k}" (closed schema, SPEC 13.1)`);
+    if (o.lifecycleUid !== lifecycleUid || typeof o.state !== "string" || !ISSUANCE_GATE_STATES.has(o.state) || !uint(o.generation))
+        throw new EpEnvelopeError("internal", `the issuance gate ${key} does not validate (uid/state/generation); a garbled or key-mismatched gate never authorizes (SPEC 13.1)`);
+    if ((o.state === "frozen" || o.state === "retired") && !isRec(o.op))
+        throw new EpEnvelopeError("internal", `the issuance gate ${key} is ${o.state} without its durable op intent (SPEC 13.1: a frozen gate is op-bound, and a retired gate retains its terminalizing op)`);
+    if (o.state === "open" && o.op !== undefined)
+        throw new EpEnvelopeError("internal", `the issuance gate ${key} is open but carries an op intent (SPEC 13.1: open gates are not op-bound)`);
+    if (o.op !== undefined) {
+        const op = o.op;
+        for (const k of Object.keys(op))
+            if (k !== "opId" && k !== "kind" && k !== "successor")
+                throw new EpEnvelopeError("internal", `the issuance gate ${key} op intent carries the unknown field "${k}" (closed schema)`);
+        if (typeof op.opId !== "string" || typeof op.kind !== "string" || !ISSUANCE_GATE_OP_KINDS.has(op.kind))
+            throw new EpEnvelopeError("internal", `the issuance gate ${key} op intent does not validate (SPEC 13.1)`);
+        // STATE x KIND invariant (SPEC 13.1 per-kind transition sets): only an activation orphan or
+        // a retirement produces a `retired` gate, so a persisted `retired` gate carrying a
+        // takeover/registration kind is IMPOSSIBLE state — refuse it at parse, never let the terminal
+        // idempotence path return it as a settled success (fail-closed on corruption, not open).
+        if (o.state === "retired" && op.kind !== "activation" && op.kind !== "retirement")
+            throw new EpEnvelopeError("internal", `the issuance gate ${key} is retired under a ${op.kind} op; only an activation orphan or a retirement terminalizes (SPEC 13.1); impossible persisted state, refused`);
+        if (op.successor !== undefined && (typeof op.successor !== "string" || op.successor.length === 0 || (op.kind !== "takeover" && op.kind !== "registration")))
+            throw new EpEnvelopeError("internal", `the issuance gate ${key} op intent carries an invalid successor (SPEC 13.1: only takeover/registration stage successors, and the summary is a non-empty token)`);
+        try {
+            assertLifecycleToken(op.opId);
+        }
+        catch {
+            throw new EpEnvelopeError("internal", `the issuance gate ${key} op intent carries a malformed opId (SPEC 13.1)`);
+        }
+    }
+    return o;
+}
+// ---- the credential-ledger row grammar (auth store, `cred.` / `epcred.` families) -----------
+/** One KV key segment: no dots (a segment separator), no wildcards, KV-safe. */
+const KEY_SEGMENT = /^[A-Za-z0-9_-]+$/;
+export function assertKeySegment(v, what) {
+    if (typeof v !== "string" || !KEY_SEGMENT.test(v))
+        throw new EpEnvelopeError("failed-precondition", `${what} ${JSON.stringify(v)} is not a KV-safe key segment (SPEC 13.1)`);
+    return v;
+}
+/** A credential id: one or more KV-safe segments (dots allowed BETWEEN segments — the session
+ *  families use `<sessionId>.c` / `<sessionId>.s` — but never wildcards or empty segments). */
+export function assertCredentialIdTail(v, what) {
+    if (typeof v !== "string" || v.length === 0 || v.length > 256 || !v.split(".").every((s) => KEY_SEGMENT.test(s)))
+        throw new EpEnvelopeError("failed-precondition", `${what} ${JSON.stringify(v)} is not a bounded dotted credential id (SPEC 13.1)`);
+    return v;
+}
+/** A holder principal `<owner>.<actor>` with a REAL owner (derived `u_…` or the dev owner) —
+ *  eviction is BY PRINCIPAL, so a row that cannot name an evictable principal never ledgers. */
+export function assertHolderPrincipal(v, what) {
+    const p = typeof v === "string" ? parsePrincipalKey(v) : null;
+    if (!p || !isPrincipalOwnerToken(p.owner))
+        throw new EpEnvelopeError("failed-precondition", `${what} ${JSON.stringify(v)} is not a principal dot-form the barrier can evict (SPEC 13.1)`);
+    return v;
+}
+export const SOURCE_ROOT = "root";
+/** Validate ONE sourceChain member — `root`, `handle.<issuerKeyId>.<id>`, or
+ *  `session.<sessionId>` (SPEC 13.1) — and return its parsed shape. */
+export function parseSourceMember(member) {
+    if (member === SOURCE_ROOT)
+        return { kind: "root" };
+    if (typeof member === "string" && member.startsWith("handle.")) {
+        const rest = member.slice("handle.".length).split(".");
+        if (rest.length === 2 && KEY_SEGMENT.test(rest[0]) && KEY_SEGMENT.test(rest[1]))
+            return { kind: "handle", issuerKeyId: rest[0], id: rest[1] };
+    }
+    if (typeof member === "string" && member.startsWith("session.")) {
+        const sid = member.slice("session.".length);
+        if (KEY_SEGMENT.test(sid))
+            return { kind: "session", sessionId: sid };
+    }
+    throw new EpEnvelopeError("failed-precondition", `sourceChain member ${JSON.stringify(member)} is not root | handle.<issuerKeyId>.<id> | session.<sessionId> (SPEC 13.1)`);
+}
+export function assertSourceChain(v, what) {
+    if (!Array.isArray(v) || v.length === 0)
+        throw new EpEnvelopeError("failed-precondition", `${what} must be a non-empty sourceChain (SPEC 13.1: the FULL verified lineage, never absent)`);
+    for (const m of v)
+        parseSourceMember(m);
+    return v;
+}
+/** The agent-family ledger key `cred.<lifecycleUid>.<credentialId>`. */
+export function credRowKey(lifecycleUid, credentialId) {
+    return `cred.${assertLifecycleToken(lifecycleUid)}.${assertCredentialIdTail(credentialId, "credentialId")}`;
+}
+/** The endpoint-family ledger key `epcred.<endpoint>.<instanceId>.<credentialId>` (disjoint by
+ *  explicit prefix, never arity, SPEC 13.1). */
+export function epcredRowKey(endpoint, instanceId, credentialId) {
+    return `epcred.${endpointToken(endpoint)}.${assertLifecycleToken(instanceId, "instanceId")}.${assertCredentialIdTail(credentialId, "credentialId")}`;
+}
+/** The endpoint-family ledger KEY PREFIX `epcred.<endpoint>.<instanceId>` (no credentialId tail) —
+ *  the exact family a barrier enumerates and a key-pinned executor grant scopes to (`…​.>`). Built
+ *  from the core tokenizers so a grant never spells the prefix by hand (guard-the-core). */
+export function epcredFamilyPrefix(endpoint, instanceId) {
+    return `epcred.${endpointToken(endpoint)}.${assertLifecycleToken(instanceId, "instanceId")}`;
+}
+/** The endpoint gate key `epgate.<endpoint>.<instanceId>` (an instanceId is unique ONLY within
+ *  `(space, endpoint)`, so the key is endpoint-qualified — equal instanceIds under two endpoints
+ *  never collide on the gate or the credential family, §13.1/§13.6). */
+export function epgateKey(endpoint, instanceId) {
+    return `epgate.${endpointToken(endpoint)}.${assertLifecycleToken(instanceId, "instanceId")}`;
+}
+/** Validate an endpoint gate row at the consuming boundary — CLOSED schema; a real owner-grammar
+ *  serving principal; the per-kind STATE x KIND + successor invariants (§13.1). Byte-for-byte the
+ *  parser the auth session ledger carried (fact H3 lift), now shared. */
+export function parseEndpointGate(raw, key) {
+    let o;
+    try {
+        o = JSON.parse(dec.decode(raw));
+    }
+    catch {
+        throw new EpEnvelopeError("internal", `the endpoint gate ${key} is not JSON (SPEC 13.1)`);
+    }
+    if (!isRec(o))
+        throw new EpEnvelopeError("internal", `the endpoint gate ${key} is not an object`);
+    const allowed = new Set(["state", "generation", "processEpoch", "registrationRevision", "nameAuthorityRevision", "principal", "op"]);
+    for (const k of Object.keys(o))
+        if (!allowed.has(k))
+            throw new EpEnvelopeError("internal", `the endpoint gate ${key} carries the unknown field "${k}" (closed schema, SPEC 13.1)`);
+    if (!["open", "frozen", "retired"].includes(o.state) || !uint(o.generation) || !uint(o.processEpoch) || !uint(o.registrationRevision) || !uint(o.nameAuthorityRevision))
+        throw new EpEnvelopeError("internal", `the endpoint gate ${key} does not validate (SPEC 13.1)`);
+    const principal = typeof o.principal === "string" ? parsePrincipalKey(o.principal) : null;
+    if (principal === null || !isPrincipalOwnerToken(principal.owner))
+        throw new EpEnvelopeError("internal", `the endpoint gate ${key} does not carry a CONNZ-attributable serving principal (owner-grammar owner.actor, SPEC 13.1)`);
+    if ((o.state === "frozen" || o.state === "retired") && !isRec(o.op))
+        throw new EpEnvelopeError("internal", `the endpoint gate ${key} is ${o.state} without its durable op intent (SPEC 13.1)`);
+    if (o.state === "open" && o.op !== undefined)
+        throw new EpEnvelopeError("internal", `the endpoint gate ${key} is open but carries an op intent (SPEC 13.1)`);
+    if (o.op !== undefined) {
+        const op = o.op;
+        for (const k of Object.keys(op))
+            if (k !== "opId" && k !== "kind" && k !== "successor")
+                throw new EpEnvelopeError("internal", `the endpoint gate ${key} op intent carries the unknown field "${k}" (closed schema)`);
+        if (typeof op.opId !== "string" || !["activation", "takeover", "registration", "retirement"].includes(op.kind))
+            throw new EpEnvelopeError("internal", `the endpoint gate ${key} op intent does not validate (SPEC 13.1)`);
+        if (o.state === "retired" && op.kind !== "activation" && op.kind !== "retirement")
+            throw new EpEnvelopeError("internal", `the endpoint gate ${key} is retired under a ${op.kind} op; only an activation orphan or a retirement terminalizes (SPEC 13.1); impossible persisted state, refused`);
+        if (op.successor !== undefined && (typeof op.successor !== "string" || op.successor.length === 0 || (op.kind !== "takeover" && op.kind !== "registration")))
+            throw new EpEnvelopeError("internal", `the endpoint gate ${key} op intent carries an invalid successor (SPEC 13.1: only takeover/registration stage successors, and the summary is a non-empty token)`);
+        try {
+            assertLifecycleToken(op.opId);
+        }
+        catch {
+            throw new EpEnvelopeError("internal", `the endpoint gate ${key} op intent carries a malformed opId (SPEC 13.1)`);
+        }
+    }
+    return o;
+}
+/** Parse + validate a ledger row at its consuming boundary — closed schema, and the embedded
+ *  identity MUST rebuild the row's own key, so a key-mismatched or family-swapped poison row
+ *  never authorizes (SPEC 13.1/13.3). */
+export function parseLedgerRow(raw, key) {
+    let o;
+    try {
+        o = JSON.parse(dec.decode(raw));
+    }
+    catch {
+        throw new EpEnvelopeError("internal", `the credential-ledger row ${key} is not JSON; garbled trusted-path state never authorizes (SPEC 13.1)`);
+    }
+    if (!isRec(o))
+        throw new EpEnvelopeError("internal", `the credential-ledger row ${key} is not an object`);
+    const allowed = new Set(["credentialId", "holderPrincipal", "lifecycleUid", "endpoint", "sourceChain", "state", "exp"]);
+    for (const k of Object.keys(o))
+        if (!allowed.has(k))
+            throw new EpEnvelopeError("internal", `the credential-ledger row ${key} carries the unknown field "${k}" (closed schema, SPEC 13.1)`);
+    if (typeof o.credentialId !== "string" || typeof o.holderPrincipal !== "string" || typeof o.lifecycleUid !== "string" ||
+        (o.state !== "active" && o.state !== "revoked") || !uint(o.exp))
+        throw new EpEnvelopeError("internal", `the credential-ledger row ${key} does not validate (id/holder/uid/state/exp); a garbled row never authorizes (SPEC 13.1)`);
+    try {
+        assertSourceChain(o.sourceChain, `row ${key} sourceChain`);
+        assertCredentialIdTail(o.credentialId, `row ${key} credentialId`);
+        // holderPrincipal is ALWAYS a CONNZ-attributable principal, in BOTH families (the barrier
+        // KICKs it; the endpoint name is NOT attributable and never sits here).
+        assertHolderPrincipal(o.holderPrincipal, `row ${key} holderPrincipal`);
+    }
+    catch (e) {
+        throw new EpEnvelopeError("internal", `the credential-ledger row ${key} carries a malformed lineage/id/holder: ${e.message}`);
+    }
+    // KEY BINDING, per family: the row's own identity must rebuild its key exactly. The endpoint
+    // family keys on its own `endpoint` field (NOT holderPrincipal), so the key identity and the
+    // eviction target stay disjoint.
+    let expected;
+    if (key.startsWith("cred.")) {
+        if (o.endpoint !== undefined)
+            throw new EpEnvelopeError("internal", `the agent-family row ${key} carries an endpoint field (that belongs to the epcred family, SPEC 13.1)`);
+        expected = credRowKey(o.lifecycleUid, o.credentialId);
+    }
+    else if (key.startsWith("epcred.")) {
+        if (typeof o.endpoint !== "string" || o.endpoint.length === 0)
+            throw new EpEnvelopeError("internal", `the endpoint-family row ${key} is missing its endpoint field (it forms the key, SPEC 13.1)`);
+        try {
+            expected = epcredRowKey(o.endpoint, o.lifecycleUid, o.credentialId);
+        }
+        catch (e) {
+            throw new EpEnvelopeError("internal", `the credential-ledger row ${key} does not validate for the endpoint family: ${e.message}`);
+        }
+    }
+    else {
+        throw new EpEnvelopeError("internal", `the credential-ledger row key ${key} is under neither ledger family prefix (SPEC 13.1)`);
+    }
+    if (expected !== key)
+        throw new EpEnvelopeError("internal", `the credential-ledger row at ${key} embeds an identity that rebuilds ${expected}; a key-mismatched row never authorizes (SPEC 13.1)`);
+    return o;
+}
+// ---- the static manager's durable slot mapping (records store) ------------------------------
+/** Phases of one static managed slot: the F3 outer spawn intent (`provisioning`, persisted
+ *  BEFORE head activation), the owned slot (`active`), the terminal in flight (`terminalizing`),
+ *  and the completed terminal (`retired` — the row is never deleted; a same-alias successor
+ *  CASes over it). */
+export const STATIC_SLOT_PHASES = new Set(["provisioning", "active", "terminalizing", "retired"]);
+/** The slot key prefix in the records store. Core-owned so permission builders and the manager
+ *  share ONE encoder (a second literal is the drift class this module bans). */
+export const STATIC_SLOT_PREFIX = "mgrslot";
+/** The slot key `mgrslot.<owner>.<alias>`. */
+export function staticSlotKey(owner, alias) {
+    return `${STATIC_SLOT_PREFIX}.${assertKeySegment(owner, "slot owner")}.${assertKeySegment(alias, "slot alias")}`;
+}
+/** Validate a slot row at the consuming boundary — CLOSED schema, and the embedded identity
+ *  MUST rebuild the row's own key, so a key-mismatched row never drives a resume or terminal. */
+export function parseStaticSlotRow(raw, key) {
+    let o;
+    try {
+        o = JSON.parse(dec.decode(raw));
+    }
+    catch {
+        throw new EpEnvelopeError("internal", `the static slot row ${key} is not JSON; garbled trusted-path state never drives supervision (SPEC 13.1)`);
+    }
+    if (!isRec(o))
+        throw new EpEnvelopeError("internal", `the static slot row ${key} is not an object`);
+    const allowed = new Set(["owner", "alias", "actor", "lifecycleUid", "phase", "credentialIds", "managerInstance", "ownerInstanceId"]);
+    for (const k of Object.keys(o))
+        if (!allowed.has(k))
+            throw new EpEnvelopeError("internal", `the static slot row ${key} carries the unknown field "${k}" (closed schema)`);
+    if (typeof o.owner !== "string" || typeof o.alias !== "string" || typeof o.actor !== "string" ||
+        typeof o.lifecycleUid !== "string" || typeof o.managerInstance !== "string" || o.managerInstance.length === 0 ||
+        typeof o.phase !== "string" || !STATIC_SLOT_PHASES.has(o.phase) ||
+        (o.ownerInstanceId !== undefined && (typeof o.ownerInstanceId !== "string" || o.ownerInstanceId.length === 0)) ||
+        !Array.isArray(o.credentialIds) || !o.credentialIds.every((c) => typeof c === "string" && c.length > 0))
+        throw new EpEnvelopeError("internal", `the static slot row ${key} does not validate (owner/alias/actor/uid/phase/credentialIds/managerInstance/ownerInstanceId)`);
+    assertLifecycleToken(o.lifecycleUid);
+    for (const c of o.credentialIds)
+        assertCredentialIdTail(c, `slot row ${key} credentialId`);
+    if (staticSlotKey(o.owner, o.alias) !== key)
+        throw new EpEnvelopeError("internal", `the static slot row at ${key} embeds an identity that rebuilds ${staticSlotKey(o.owner, o.alias)}; a key-mismatched row never drives supervision`);
+    return o;
+}
+//# sourceMappingURL=lifecycle-state.js.map

package/dist/lifecycle-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-state.js","sourceRoot":"","sources":["../src/lifecycle-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEzE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACrH,MAAM,IAAI,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAmCrG,MAAM,CAAC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAErG,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,KAAa;IAC3D,OAAO,eAAe,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACpD,OAAO,eAAe,CAAC,eAAe,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;iGACiG;AACjG,MAAM,UAAU,kBAAkB,CAAC,GAAe,EAAE,GAAW,EAAE,KAAa,EAAE,KAAa;IAC3F,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sBAAsB,GAAG,uEAAuE,CAAC,CAAC;IAC1I,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sBAAsB,GAAG,mBAAmB,CAAC,CAAC;IACnG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC;IACzJ,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sBAAsB,GAAG,+BAA+B,CAAC,8BAA8B,CAAC,CAAC;IACpL,IACE,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK;QACtC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAC7G,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACjH,CAAC,CAAC,CAAC,mBAAmB,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,mBAAmB,KAAK,QAAQ,IAAI,CAAC,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QAC1H,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,CAAC;QAE5E,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sBAAsB,GAAG,sHAAsH,CAAC,CAAC;IACzL,IAAI,CAAC;QACH,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS;YAAE,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sBAAsB,GAAG,gEAAgE,CAAC,CAAC;IACnI,CAAC;IACD,wFAAwF;IACxF,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sBAAsB,GAAG,8EAA8E,CAAC,CAAC;IACnK,CAAC;SAAM,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sBAAsB,GAAG,mCAAmC,CAAC,CAAC,KAAK,0CAA0C,CAAC,CAAC;IACvJ,CAAC;IACD,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,CAAC,CAAC,EAA6B,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM;gBAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sBAAsB,GAAG,yCAAyC,CAAC,mBAAmB,CAAC,CAAC;QACjM,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY;YACzD,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sBAAsB,GAAG,0CAA0C,CAAC,CAAC;QAC7G,IAAI,CAAC;YACH,oBAAoB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sBAAsB,GAAG,iDAAiD,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;IACD,OAAO,CAAgC,CAAC;AAC1C,CAAC;AAqBD,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAChG,MAAM,CAAC,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;AAE7H,kDAAkD;AAClD,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,OAAO,QAAQ,oBAAoB,CAAC,YAAY,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;2DAC2D;AAC3D,MAAM,UAAU,iBAAiB,CAAC,GAAe,EAAE,GAAW,EAAE,YAAoB;IAClF,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,uEAAuE,CAAC,CAAC;IACzI,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,mBAAmB,CAAC,CAAC;IAClG,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,+BAA+B,CAAC,8BAA8B,CAAC,CAAC;IAC7O,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7H,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,0GAA0G,CAAC,CAAC;IAC5K,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,OAAO,CAAC,CAAC,KAAK,wHAAwH,CAAC,CAAC;IACxM,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;QAC1C,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,4EAA4E,CAAC,CAAC;IAC9I,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,CAAC,CAAC,EAA6B,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,WAAW;gBAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,yCAAyC,CAAC,mBAAmB,CAAC,CAAC;QACrN,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;YACpG,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,0CAA0C,CAAC,CAAC;QAC5G,4FAA4F;QAC5F,mFAAmF;QACnF,8FAA8F;QAC9F,yFAAyF;QACzF,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY;YAC/E,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,uBAAuB,EAAE,CAAC,IAAI,8GAA8G,CAAC,CAAC;QAC9M,IAAI,EAAE,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,UAAU,IAAI,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YACzJ,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,wIAAwI,CAAC,CAAC;QAC1M,IAAI,CAAC;YACH,oBAAoB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,iDAAiD,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;IACD,OAAO,CAAyB,CAAC;AACnC,CAAC;AAED,gGAAgG;AAEhG,gFAAgF;AAChF,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAEvC,MAAM,UAAU,gBAAgB,CAAC,CAAU,EAAE,IAAY;IACvD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;IAC5H,OAAO,CAAC,CAAC;AACX,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,sBAAsB,CAAC,CAAU,EAAE,IAAY;IAC7D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9G,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC;IACrI,OAAO,CAAC,CAAC;AACX,CAAC;AAED;gGACgG;AAChG,MAAM,UAAU,qBAAqB,CAAC,CAAU,EAAE,IAAY;IAC5D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,IAAI,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC;QACvC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gEAAgE,CAAC,CAAC;IACjJ,OAAO,CAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC;AAElC;uEACuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAC/C,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,sBAAsB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,4EAA4E,CAAC,CAAC;AAC7K,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAU,EAAE,IAAY;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QACrC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,GAAG,IAAI,uFAAuF,CAAC,CAAC;IACnJ,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,CAAa,CAAC;AACvB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,YAAoB;IACnE,OAAO,QAAQ,oBAAoB,CAAC,YAAY,CAAC,IAAI,sBAAsB,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC;AAC9G,CAAC;AACD;gDACgD;AAChD,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,UAAkB,EAAE,YAAoB;IACrF,OAAO,UAAU,aAAa,CAAC,QAAQ,CAAC,IAAI,oBAAoB,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,sBAAsB,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC;AACvJ,CAAC;AAED;;4FAE4F;AAC5F,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,UAAkB;IACrE,OAAO,UAAU,aAAa,CAAC,QAAQ,CAAC,IAAI,oBAAoB,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;AAC/F,CAAC;AAyBD;;wEAEwE;AACxE,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,UAAkB;IAC5D,OAAO,UAAU,aAAa,CAAC,QAAQ,CAAC,IAAI,oBAAoB,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED;;yEAEyE;AACzE,MAAM,UAAU,iBAAiB,CAAC,GAAe,EAAE,GAAW;IAC5D,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,0BAA0B,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,mBAAmB,CAAC,CAAC;IAClG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;IACrI,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,+BAA+B,CAAC,8BAA8B,CAAC,CAAC;IACnL,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAC/K,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,gCAAgC,CAAC,CAAC;IAClG,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC;QAC/D,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,+FAA+F,CAAC,CAAC;IACjK,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,OAAO,CAAC,CAAC,KAAK,4CAA4C,CAAC,CAAC;IAC5H,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;QAC1C,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,+CAA+C,CAAC,CAAC;IACjH,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,CAAC,CAAC,EAA6B,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,WAAW;gBAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,yCAAyC,CAAC,mBAAmB,CAAC,CAAC;QACrN,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAc,CAAC;YACtH,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,0CAA0C,CAAC,CAAC;QAC5G,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY;YAC/E,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,uBAAuB,EAAE,CAAC,IAAI,8GAA8G,CAAC,CAAC;QAC9M,IAAI,EAAE,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,UAAU,IAAI,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YACzJ,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,wIAAwI,CAAC,CAAC;QAC1M,IAAI,CAAC;YACH,oBAAoB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,qBAAqB,GAAG,iDAAiD,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;IACD,OAAO,CAA+B,CAAC;AACzC,CAAC;AA2BD;;yCAEyC;AACzC,MAAM,UAAU,cAAc,CAAC,GAAe,EAAE,GAAW;IACzD,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,6BAA6B,GAAG,uEAAuE,CAAC,CAAC;IACjJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,6BAA6B,GAAG,mBAAmB,CAAC,CAAC;IAC1G,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACxH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,6BAA6B,GAAG,+BAA+B,CAAC,8BAA8B,CAAC,CAAC;IAC3L,IACE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QACjH,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAE/D,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,6BAA6B,GAAG,0FAA0F,CAAC,CAAC;IACpK,IAAI,CAAC;QACH,iBAAiB,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,GAAG,cAAc,CAAC,CAAC;QAC3D,sBAAsB,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,GAAG,eAAe,CAAC,CAAC;QAClE,0FAA0F;QAC1F,wEAAwE;QACxE,qBAAqB,CAAC,CAAC,CAAC,eAAe,EAAE,OAAO,GAAG,kBAAkB,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,6BAA6B,GAAG,2CAA4C,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3I,CAAC;IACD,6FAA6F;IAC7F,6FAA6F;IAC7F,iCAAiC;IACjC,IAAI,QAAgB,CAAC;IACrB,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAC1B,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,wBAAwB,GAAG,2EAA2E,CAAC,CAAC;QAChJ,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;SAAM,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC3D,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,2BAA2B,GAAG,8DAA8D,CAAC,CAAC;QACtI,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,6BAA6B,GAAG,+CAAgD,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/I,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,iCAAiC,GAAG,oDAAoD,CAAC,CAAC;IAClI,CAAC;IACD,IAAI,QAAQ,KAAK,GAAG;QAClB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,gCAAgC,GAAG,qCAAqC,QAAQ,qDAAqD,CAAC,CAAC;IAC/K,OAAO,CAAmC,CAAC;AAC7C,CAAC;AAED,gGAAgG;AAEhG;;;sBAGsB;AACtB,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;AAiCvH;gFACgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAE5C,8CAA8C;AAC9C,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,KAAa;IACxD,OAAO,GAAG,kBAAkB,IAAI,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;AACnH,CAAC;AAED;iGACiG;AACjG,MAAM,UAAU,kBAAkB,CAAC,GAAe,EAAE,GAAW;IAC7D,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,GAAG,+EAA+E,CAAC,CAAC;IACnJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,GAAG,mBAAmB,CAAC,CAAC;IACpG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACrI,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,GAAG,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;IAC1K,IACE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QACzF,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAC7G,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/D,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QAC9G,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAEvG,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,uBAAuB,GAAG,gGAAgG,CAAC,CAAC;IACpK,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa;QAAE,sBAAsB,CAAC,CAAC,EAAE,YAAY,GAAG,eAAe,CAAC,CAAC;IAC3F,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG;QACzC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,0BAA0B,GAAG,qCAAqC,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC5L,OAAO,CAAoC,CAAC;AAC9C,CAAC"}

package/dist/parts.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Rendering message parts as the flat text a human or a model reads.
+ *
+ * This exists because the expression it replaces was copied verbatim into three surfaces (the
+ * connector inbox, `cotal join`, and the mesh view), and adding the `artifact` core kind broke all
+ * three the same way: an artifact part has no `data` field, so the old `JSON.stringify(p.data)`
+ * fallback rendered it as the literal string "undefined". One renderer means a new core part kind
+ * is legible everywhere at once, or nowhere — never in two surfaces out of three.
+ */
+import type { Part } from "./types.js";
+/** A message's parts as one flat string, space-joined. */
+export declare function partsToText(parts: readonly Part[]): string;
+//# sourceMappingURL=parts.d.ts.map

package/dist/parts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parts.d.ts","sourceRoot":"","sources":["../src/parts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAavC,0DAA0D;AAC1D,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM,CAE1D"}

package/dist/parts.js

@@ -0,0 +1,17 @@
+/** One part as display text. An unknown extension kind still falls back to its `data`, which is
+ *  the pre-existing behaviour and deliberately unchanged: extensions are opaque here. */
+function partText(p) {
+    if (p.kind === "text")
+        return p.text;
+    // The digest is verbose, and it is not optional: it is the only handle a reader can act on to
+    // actually fetch the bytes. Name and size come from the publisher, so they are shown as the
+    // claims they are, not as facts the reader should size a buffer from.
+    if (p.kind === "artifact")
+        return `[artifact ${p.name} (${p.mediaType}, ${p.size} bytes) ${p.digest}]`;
+    return JSON.stringify(p.data);
+}
+/** A message's parts as one flat string, space-joined. */
+export function partsToText(parts) {
+    return parts.map(partText).join(" ");
+}
+//# sourceMappingURL=parts.js.map