@decionis/agent-safe-pipeline 0.3.7 → 0.4.0

package/dist/execution/NativeExecutorSchema.d.ts

@@ -0,0 +1,387 @@
+import { z } from "zod";
+export declare const NATIVE_EXECUTOR_SCHEMA_ID = "https://github.com/decionis/agent-safe-pipeline/blob/master/spec/executors/native/v1/schema.json";
+export declare const ExecutionOutcomeSchema: z.ZodEnum<{
+    BLOCKED: "BLOCKED";
+    COMPLETED: "COMPLETED";
+    FAILED_BEFORE_DISPATCH: "FAILED_BEFORE_DISPATCH";
+    UNKNOWN_AFTER_DISPATCH: "UNKNOWN_AFTER_DISPATCH";
+    DEFINITELY_NOT_EXECUTED: "DEFINITELY_NOT_EXECUTED";
+    HELD: "HELD";
+}>;
+/** Who carries the action out, as `POST /v1/authority/grants` accepts it in `executor`. */
+export declare const ExecutorIdentitySchema: z.ZodObject<{
+    platform: z.ZodString;
+    style: z.ZodEnum<{
+        dispatch: "dispatch";
+        permit: "permit";
+    }>;
+    version: z.ZodString;
+}, z.core.$strict>;
+/** What one executor can write for one action type: `ExecutionCapability`, on the wire. */
+export declare const ExecutionCapabilitySchema: z.ZodObject<{
+    platform: z.ZodString;
+    action_type: z.ZodString;
+    enabled: z.ZodBoolean;
+    scope_granted: z.ZodBoolean;
+    connected: z.ZodBoolean;
+    requirement: z.ZodString;
+}, z.core.$strict>;
+/**
+ * Permit wire profile, step 1: `POST /v1/connections/{connectionId}/executions`.
+ * The connection, organisation and environment come from the authenticated
+ * connection, never from this body.
+ */
+export declare const ExecutionRequestSchema: z.ZodObject<{
+    executor: z.ZodObject<{
+        platform: z.ZodString;
+        style: z.ZodEnum<{
+            dispatch: "dispatch";
+            permit: "permit";
+        }>;
+        version: z.ZodString;
+    }, z.core.$strict>;
+    action_type: z.ZodString;
+    action: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    correlation_id: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/**
+ * Permit wire profile, step 2: what the executor host answers. `permit_id`,
+ * `intent_sha256` and `expires_at` are present only when the outcome is
+ * `HELD`: there is a permit to present.
+ */
+export declare const ExecutionResponseSchema: z.ZodObject<{
+    execution_id: z.ZodString;
+    outcome: z.ZodEnum<{
+        BLOCKED: "BLOCKED";
+        HELD: "HELD";
+    }>;
+    decision: z.ZodString;
+    reason_codes: z.ZodArray<z.ZodString>;
+    dossier_id: z.ZodNullable<z.ZodString>;
+    permit_id: z.ZodNullable<z.ZodString>;
+    intent_sha256: z.ZodNullable<z.ZodString>;
+    expires_at: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strict>;
+/**
+ * Permit wire profile, step 4: `POST …/executions/{executionId}/receipts`.
+ * The platform's native receipt, verbatim in its own vocabulary; the
+ * executor's `observe` reads it into an outcome.
+ */
+export declare const NativeReceiptSchema: z.ZodObject<{
+    permit_id: z.ZodString;
+    native_receipt: z.ZodObject<{
+        platform: z.ZodString;
+        kind: z.ZodString;
+        reference: z.ZodString;
+        status: z.ZodString;
+        observed_at: z.ZodISODateTime;
+        digest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    signed_receipt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** How a receipt settled the execution, or why it was refused. */
+export declare const ReceiptResponseSchema: z.ZodUnion<readonly [z.ZodObject<{
+    execution_id: z.ZodString;
+    status: z.ZodLiteral<"SETTLED">;
+    outcome: z.ZodEnum<{
+        COMPLETED: "COMPLETED";
+        UNKNOWN_AFTER_DISPATCH: "UNKNOWN_AFTER_DISPATCH";
+        DEFINITELY_NOT_EXECUTED: "DEFINITELY_NOT_EXECUTED";
+    }>;
+    finalization: z.ZodEnum<{
+        RECORDED: "RECORDED";
+        PENDING: "PENDING";
+        UNSUPPORTED: "UNSUPPORTED";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    execution_id: z.ZodString;
+    status: z.ZodLiteral<"REFUSED">;
+    reason: z.ZodEnum<{
+        RECEIPT_DUPLICATE: "RECEIPT_DUPLICATE";
+        PERMIT_NOT_PRESENTED: "PERMIT_NOT_PRESENTED";
+    }>;
+}, z.core.$strict>]>;
+/** `POST …/executions/{executionId}/reconciliations`: ask the executor what happened, read-only. */
+export declare const ReconciliationRequestSchema: z.ZodObject<{
+    permit_id: z.ZodString;
+}, z.core.$strict>;
+export declare const ReconciliationResponseSchema: z.ZodObject<{
+    execution_id: z.ZodString;
+    outcome: z.ZodEnum<{
+        BLOCKED: "BLOCKED";
+        COMPLETED: "COMPLETED";
+        UNKNOWN_AFTER_DISPATCH: "UNKNOWN_AFTER_DISPATCH";
+        DEFINITELY_NOT_EXECUTED: "DEFINITELY_NOT_EXECUTED";
+    }>;
+}, z.core.$strict>;
+/** One `agent-safe.executor-evidence/1` line, as the runner writes it. */
+export declare const ExecutorEvidenceLineSchema: z.ZodObject<{
+    version: z.ZodLiteral<"agent-safe.executor-evidence/1">;
+    contract: z.ZodLiteral<"agent-safe.executors.native/1">;
+    at: z.ZodISODateTime;
+    stage: z.ZodEnum<{
+        RUN: "RUN";
+        PRESENTATION: "PRESENTATION";
+        SETTLEMENT: "SETTLEMENT";
+        RECONCILIATION: "RECONCILIATION";
+    }>;
+    executor: z.ZodObject<{
+        platform: z.ZodString;
+        style: z.ZodEnum<{
+            dispatch: "dispatch";
+            permit: "permit";
+        }>;
+        version: z.ZodString;
+    }, z.core.$strict>;
+    action_type: z.ZodString;
+    intent_id: z.ZodString;
+    intent_hash: z.ZodString;
+    decision_id: z.ZodNullable<z.ZodString>;
+    dossier_id: z.ZodNullable<z.ZodString>;
+    verdict: z.ZodNullable<z.ZodString>;
+    grant_id: z.ZodNullable<z.ZodString>;
+    outcome: z.ZodEnum<{
+        BLOCKED: "BLOCKED";
+        COMPLETED: "COMPLETED";
+        FAILED_BEFORE_DISPATCH: "FAILED_BEFORE_DISPATCH";
+        UNKNOWN_AFTER_DISPATCH: "UNKNOWN_AFTER_DISPATCH";
+        DEFINITELY_NOT_EXECUTED: "DEFINITELY_NOT_EXECUTED";
+        CLAIMED: "CLAIMED";
+        HELD: "HELD";
+    }>;
+    executed: z.ZodNullable<z.ZodBoolean>;
+    reason: z.ZodNullable<z.ZodString>;
+    code: z.ZodNullable<z.ZodString>;
+    governed: z.ZodBoolean;
+    authority_state: z.ZodEnum<{
+        AUTHORITY_UNAVAILABLE: "AUTHORITY_UNAVAILABLE";
+        DECIDED: "DECIDED";
+    }>;
+    posture: z.ZodEnum<{
+        BOUNDED_CONTINUITY: "BOUNDED_CONTINUITY";
+        CUSTOM: "CUSTOM";
+        STRICT: "STRICT";
+    }>;
+    disposition: z.ZodNullable<z.ZodEnum<{
+        HELD: "HELD";
+        NOT_FORWARDED: "NOT_FORWARDED";
+        FORWARDED_UNGOVERNED: "FORWARDED_UNGOVERNED";
+    }>>;
+    finalization: z.ZodNullable<z.ZodEnum<{
+        RECORDED: "RECORDED";
+        PENDING: "PENDING";
+        UNSUPPORTED: "UNSUPPORTED";
+    }>>;
+    duration_ms: z.ZodNumber;
+    scope: z.ZodNullable<z.ZodObject<{
+        org_id: z.ZodString;
+        workspace_id: z.ZodString;
+        connection_id: z.ZodString;
+        connection_revision: z.ZodString;
+        environment: z.ZodEnum<{
+            production: "production";
+            sandbox: "sandbox";
+        }>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** One conformance vector: a decision, a posture, and the steps an executor is held to. */
+export declare const ExecutorVectorSchema: z.ZodObject<{
+    description: z.ZodString;
+    contract: z.ZodLiteral<"agent-safe.executors.native/1">;
+    style: z.ZodEnum<{
+        dispatch: "dispatch";
+        permit: "permit";
+    }>;
+    posture: z.ZodEnum<{
+        BOUNDED_CONTINUITY: "BOUNDED_CONTINUITY";
+        CUSTOM: "CUSTOM";
+        STRICT: "STRICT";
+    }>;
+    custom_disposition: z.ZodOptional<z.ZodEnum<{
+        HELD: "HELD";
+        NOT_FORWARDED: "NOT_FORWARDED";
+        FORWARDED_UNGOVERNED: "FORWARDED_UNGOVERNED";
+    }>>;
+    decision: z.ZodObject<{
+        verdict: z.ZodEnum<{
+            ALLOW: "ALLOW";
+            ESCALATE: "ESCALATE";
+            BLOCK: "BLOCK";
+        }>;
+        fail_closed: z.ZodBoolean;
+    }, z.core.$strict>;
+    steps: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        op: z.ZodLiteral<"run">;
+        write: z.ZodEnum<{
+            INDETERMINATE: "INDETERMINATE";
+            COMMIT: "COMMIT";
+            REFUSE: "REFUSE";
+            FAIL_BEFORE_DISPATCH: "FAIL_BEFORE_DISPATCH";
+            THROW_AFTER_DISPATCH: "THROW_AFTER_DISPATCH";
+        }>;
+        expect: z.ZodObject<{
+            outcome: z.ZodEnum<{
+                BLOCKED: "BLOCKED";
+                REFUSED: "REFUSED";
+                COMPLETED: "COMPLETED";
+                FAILED_BEFORE_DISPATCH: "FAILED_BEFORE_DISPATCH";
+                UNKNOWN_AFTER_DISPATCH: "UNKNOWN_AFTER_DISPATCH";
+                DEFINITELY_NOT_EXECUTED: "DEFINITELY_NOT_EXECUTED";
+                CLAIMED: "CLAIMED";
+                HELD: "HELD";
+            }>;
+            executed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+            reason: z.ZodOptional<z.ZodString>;
+            code: z.ZodOptional<z.ZodString>;
+            finalized: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                FAILED: "FAILED";
+                COMMITTED: "COMMITTED";
+                INDETERMINATE: "INDETERMINATE";
+            }>>>;
+            permit: z.ZodOptional<z.ZodBoolean>;
+            disposition: z.ZodOptional<z.ZodEnum<{
+                HELD: "HELD";
+                NOT_FORWARDED: "NOT_FORWARDED";
+                FORWARDED_UNGOVERNED: "FORWARDED_UNGOVERNED";
+            }>>;
+            writes: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        op: z.ZodLiteral<"hold">;
+        expect: z.ZodObject<{
+            outcome: z.ZodEnum<{
+                BLOCKED: "BLOCKED";
+                REFUSED: "REFUSED";
+                COMPLETED: "COMPLETED";
+                FAILED_BEFORE_DISPATCH: "FAILED_BEFORE_DISPATCH";
+                UNKNOWN_AFTER_DISPATCH: "UNKNOWN_AFTER_DISPATCH";
+                DEFINITELY_NOT_EXECUTED: "DEFINITELY_NOT_EXECUTED";
+                CLAIMED: "CLAIMED";
+                HELD: "HELD";
+            }>;
+            executed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+            reason: z.ZodOptional<z.ZodString>;
+            code: z.ZodOptional<z.ZodString>;
+            finalized: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                FAILED: "FAILED";
+                COMMITTED: "COMMITTED";
+                INDETERMINATE: "INDETERMINATE";
+            }>>>;
+            permit: z.ZodOptional<z.ZodBoolean>;
+            disposition: z.ZodOptional<z.ZodEnum<{
+                HELD: "HELD";
+                NOT_FORWARDED: "NOT_FORWARDED";
+                FORWARDED_UNGOVERNED: "FORWARDED_UNGOVERNED";
+            }>>;
+            writes: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        op: z.ZodLiteral<"present">;
+        expect: z.ZodObject<{
+            outcome: z.ZodEnum<{
+                BLOCKED: "BLOCKED";
+                REFUSED: "REFUSED";
+                COMPLETED: "COMPLETED";
+                FAILED_BEFORE_DISPATCH: "FAILED_BEFORE_DISPATCH";
+                UNKNOWN_AFTER_DISPATCH: "UNKNOWN_AFTER_DISPATCH";
+                DEFINITELY_NOT_EXECUTED: "DEFINITELY_NOT_EXECUTED";
+                CLAIMED: "CLAIMED";
+                HELD: "HELD";
+            }>;
+            executed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+            reason: z.ZodOptional<z.ZodString>;
+            code: z.ZodOptional<z.ZodString>;
+            finalized: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                FAILED: "FAILED";
+                COMMITTED: "COMMITTED";
+                INDETERMINATE: "INDETERMINATE";
+            }>>>;
+            permit: z.ZodOptional<z.ZodBoolean>;
+            disposition: z.ZodOptional<z.ZodEnum<{
+                HELD: "HELD";
+                NOT_FORWARDED: "NOT_FORWARDED";
+                FORWARDED_UNGOVERNED: "FORWARDED_UNGOVERNED";
+            }>>;
+            writes: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        op: z.ZodLiteral<"receipt">;
+        status: z.ZodEnum<{
+            REJECTED: "REJECTED";
+            POSTED: "POSTED";
+            UNREADABLE: "UNREADABLE";
+        }>;
+        expect: z.ZodObject<{
+            outcome: z.ZodEnum<{
+                BLOCKED: "BLOCKED";
+                REFUSED: "REFUSED";
+                COMPLETED: "COMPLETED";
+                FAILED_BEFORE_DISPATCH: "FAILED_BEFORE_DISPATCH";
+                UNKNOWN_AFTER_DISPATCH: "UNKNOWN_AFTER_DISPATCH";
+                DEFINITELY_NOT_EXECUTED: "DEFINITELY_NOT_EXECUTED";
+                CLAIMED: "CLAIMED";
+                HELD: "HELD";
+            }>;
+            executed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+            reason: z.ZodOptional<z.ZodString>;
+            code: z.ZodOptional<z.ZodString>;
+            finalized: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                FAILED: "FAILED";
+                COMMITTED: "COMMITTED";
+                INDETERMINATE: "INDETERMINATE";
+            }>>>;
+            permit: z.ZodOptional<z.ZodBoolean>;
+            disposition: z.ZodOptional<z.ZodEnum<{
+                HELD: "HELD";
+                NOT_FORWARDED: "NOT_FORWARDED";
+                FORWARDED_UNGOVERNED: "FORWARDED_UNGOVERNED";
+            }>>;
+            writes: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        op: z.ZodLiteral<"reconcile">;
+        answer: z.ZodEnum<{
+            COMPLETED: "COMPLETED";
+            NOT_EXECUTED: "NOT_EXECUTED";
+            UNKNOWN: "UNKNOWN";
+        }>;
+        expect: z.ZodObject<{
+            outcome: z.ZodEnum<{
+                BLOCKED: "BLOCKED";
+                REFUSED: "REFUSED";
+                COMPLETED: "COMPLETED";
+                FAILED_BEFORE_DISPATCH: "FAILED_BEFORE_DISPATCH";
+                UNKNOWN_AFTER_DISPATCH: "UNKNOWN_AFTER_DISPATCH";
+                DEFINITELY_NOT_EXECUTED: "DEFINITELY_NOT_EXECUTED";
+                CLAIMED: "CLAIMED";
+                HELD: "HELD";
+            }>;
+            executed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+            reason: z.ZodOptional<z.ZodString>;
+            code: z.ZodOptional<z.ZodString>;
+            finalized: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                FAILED: "FAILED";
+                COMMITTED: "COMMITTED";
+                INDETERMINATE: "INDETERMINATE";
+            }>>>;
+            permit: z.ZodOptional<z.ZodBoolean>;
+            disposition: z.ZodOptional<z.ZodEnum<{
+                HELD: "HELD";
+                NOT_FORWARDED: "NOT_FORWARDED";
+                FORWARDED_UNGOVERNED: "FORWARDED_UNGOVERNED";
+            }>>;
+            writes: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        op: z.ZodLiteral<"advance">;
+        ms: z.ZodNumber;
+    }, z.core.$strict>], "op">>;
+}, z.core.$strict>;
+export type ExecutorVector = z.infer<typeof ExecutorVectorSchema>;
+/**
+ * The published JSON Schema of the contract's wire objects, generated from
+ * the validators this package runs, so the document a third party validates
+ * against and the reference implementation are one definition.
+ */
+export declare function nativeExecutorJsonSchema(): Record<string, unknown>;
+//# sourceMappingURL=NativeExecutorSchema.d.ts.map

package/dist/execution/NativeExecutorSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NativeExecutorSchema.d.ts","sourceRoot":"","sources":["../../src/execution/NativeExecutorSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,yBAAyB,qGAC8D,CAAC;AAuBrG,eAAO,MAAM,sBAAsB;;;;;;;EAAmB,CAAC;AAEvD,2FAA2F;AAC3F,eAAO,MAAM,sBAAsB;;;;;;;kBAYjC,CAAC;AAEH,2FAA2F;AAC3F,eAAO,MAAM,yBAAyB;;;;;;;kBAOpC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;kBAMjC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;kBAUlC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;kBA6B9B,CAAC;AAEH,kEAAkE;AAClE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;oBAYhC,CAAC;AAEH,oGAAoG;AACpG,eAAO,MAAM,2BAA2B;;kBAEtC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;kBAGvC,CAAC;AAEH,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgCrC,CAAC;AAkDH,2FAA2F;AAC3F,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAa/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAgBlE;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAclE"}

package/dist/execution/NativeExecutorSchema.js

@@ -0,0 +1,261 @@
+import { z } from "zod";
+import { EXECUTOR_EVIDENCE_VERSION } from "./ExecutorEvidence.js";
+import { NATIVE_EXECUTOR_CONTRACT } from "./NativeExecutor.js";
+export const NATIVE_EXECUTOR_SCHEMA_ID = "https://github.com/decionis/agent-safe-pipeline/blob/master/spec/executors/native/v1/schema.json";
+const identifier = z.string().min(1).max(200);
+const code = z.string().regex(/^[A-Z][A-Z0-9_]{1,63}$/);
+const actionType = z
+    .string()
+    .min(1)
+    .max(120)
+    .regex(/^[a-z][a-z0-9._:-]*$/);
+const sha256Digest = z.string().regex(/^sha256:[0-9a-f]{64}$/);
+/** A bare SHA-256, as the wire profile's `intent_sha256` carries it. */
+const sha256Hex = z.string().regex(/^[0-9a-f]{64}$/);
+const instant = z.iso.datetime();
+const OUTCOMES = [
+    "BLOCKED",
+    "HELD",
+    "FAILED_BEFORE_DISPATCH",
+    "COMPLETED",
+    "DEFINITELY_NOT_EXECUTED",
+    "UNKNOWN_AFTER_DISPATCH",
+];
+export const ExecutionOutcomeSchema = z.enum(OUTCOMES);
+/** Who carries the action out, as `POST /v1/authority/grants` accepts it in `executor`. */
+export const ExecutorIdentitySchema = z.strictObject({
+    platform: z
+        .string()
+        .min(1)
+        .max(64)
+        .regex(/^[a-z0-9][a-z0-9._-]*$/),
+    style: z.enum(["dispatch", "permit"]),
+    version: z
+        .string()
+        .min(1)
+        .max(64)
+        .regex(/^[^\W_][\w.+-]*$/),
+});
+/** What one executor can write for one action type: `ExecutionCapability`, on the wire. */
+export const ExecutionCapabilitySchema = z.strictObject({
+    platform: identifier,
+    action_type: actionType,
+    enabled: z.boolean(),
+    scope_granted: z.boolean(),
+    connected: z.boolean(),
+    requirement: z.string().max(500),
+});
+/**
+ * Permit wire profile, step 1: `POST /v1/connections/{connectionId}/executions`.
+ * The connection, organisation and environment come from the authenticated
+ * connection, never from this body.
+ */
+export const ExecutionRequestSchema = z.strictObject({
+    executor: ExecutorIdentitySchema,
+    action_type: actionType,
+    /** The platform's own description of the action, as the executor's `prepare` reads it. */
+    action: z.record(z.string(), z.unknown()),
+    correlation_id: identifier.optional(),
+});
+/**
+ * Permit wire profile, step 2: what the executor host answers. `permit_id`,
+ * `intent_sha256` and `expires_at` are present only when the outcome is
+ * `HELD`: there is a permit to present.
+ */
+export const ExecutionResponseSchema = z.strictObject({
+    execution_id: identifier,
+    outcome: z.enum(["HELD", "BLOCKED"]),
+    /** The authority's verdict in the vocabulary the platform reads (`PROCEED`, `HOLD`, `BLOCK`, …). */
+    decision: code,
+    reason_codes: z.array(code).max(32),
+    dossier_id: identifier.nullable(),
+    permit_id: identifier.nullable(),
+    intent_sha256: sha256Hex.nullable(),
+    expires_at: instant.nullable(),
+});
+/**
+ * Permit wire profile, step 4: `POST …/executions/{executionId}/receipts`.
+ * The platform's native receipt, verbatim in its own vocabulary; the
+ * executor's `observe` reads it into an outcome.
+ */
+export const NativeReceiptSchema = z.strictObject({
+    permit_id: identifier,
+    /** Exactly what `POST /v1/authority/grants/{grantId}/receipts` accepts as `native_receipt`. */
+    native_receipt: z.strictObject({
+        platform: z
+            .string()
+            .min(1)
+            .max(64)
+            .regex(/^[a-z0-9][a-z0-9._-]*$/),
+        kind: z
+            .string()
+            .min(1)
+            .max(64)
+            .regex(/^[a-z][a-z0-9._-]*$/),
+        reference: z.string().trim().min(1).max(500),
+        status: z
+            .string()
+            .min(1)
+            .max(64)
+            .regex(/^[^\W\d_][\w.-]*$/),
+        observed_at: instant,
+        digest: sha256Digest.optional(),
+    }),
+    /** A signed effect receipt (compact JWS), when the platform issues one. */
+    signed_receipt: z
+        .string()
+        .max(20_000)
+        .regex(/^[\w-]+\.[\w-]+\.[\w-]+$/)
+        .optional(),
+});
+/** How a receipt settled the execution, or why it was refused. */
+export const ReceiptResponseSchema = z.union([
+    z.strictObject({
+        execution_id: identifier,
+        status: z.literal("SETTLED"),
+        outcome: z.enum(["COMPLETED", "DEFINITELY_NOT_EXECUTED", "UNKNOWN_AFTER_DISPATCH"]),
+        finalization: z.enum(["RECORDED", "PENDING", "UNSUPPORTED"]),
+    }),
+    z.strictObject({
+        execution_id: identifier,
+        status: z.literal("REFUSED"),
+        reason: z.enum(["RECEIPT_DUPLICATE", "PERMIT_NOT_PRESENTED"]),
+    }),
+]);
+/** `POST …/executions/{executionId}/reconciliations`: ask the executor what happened, read-only. */
+export const ReconciliationRequestSchema = z.strictObject({
+    permit_id: identifier,
+});
+export const ReconciliationResponseSchema = z.strictObject({
+    execution_id: identifier,
+    outcome: z.enum(["COMPLETED", "DEFINITELY_NOT_EXECUTED", "UNKNOWN_AFTER_DISPATCH", "BLOCKED"]),
+});
+/** One `agent-safe.executor-evidence/1` line, as the runner writes it. */
+export const ExecutorEvidenceLineSchema = z.strictObject({
+    version: z.literal(EXECUTOR_EVIDENCE_VERSION),
+    contract: z.literal(NATIVE_EXECUTOR_CONTRACT),
+    at: instant,
+    stage: z.enum(["RUN", "PRESENTATION", "SETTLEMENT", "RECONCILIATION"]),
+    executor: ExecutorIdentitySchema,
+    action_type: actionType,
+    intent_id: identifier,
+    intent_hash: sha256Digest,
+    decision_id: identifier.nullable(),
+    dossier_id: identifier.nullable(),
+    verdict: code.nullable(),
+    grant_id: identifier.nullable(),
+    outcome: z.enum([...OUTCOMES, "CLAIMED"]),
+    executed: z.boolean().nullable(),
+    reason: code.nullable(),
+    code: code.nullable(),
+    governed: z.boolean(),
+    authority_state: z.enum(["DECIDED", "AUTHORITY_UNAVAILABLE"]),
+    posture: z.enum(["STRICT", "BOUNDED_CONTINUITY", "CUSTOM"]),
+    disposition: z.enum(["NOT_FORWARDED", "HELD", "FORWARDED_UNGOVERNED"]).nullable(),
+    finalization: z.enum(["RECORDED", "PENDING", "UNSUPPORTED"]).nullable(),
+    duration_ms: z.number().int().min(0),
+    scope: z
+        .strictObject({
+        org_id: identifier,
+        workspace_id: identifier,
+        connection_id: identifier,
+        connection_revision: identifier,
+        environment: z.enum(["sandbox", "production"]),
+    })
+        .nullable(),
+});
+const VectorExpectationSchema = z.strictObject({
+    outcome: z.enum([...OUTCOMES, "CLAIMED", "REFUSED"]),
+    executed: z.boolean().nullable().optional(),
+    reason: identifier.optional(),
+    code: code.optional(),
+    /** What the authority recorded for the grant after the step, when it records one. */
+    finalized: z.enum(["COMMITTED", "FAILED", "INDETERMINATE"]).nullable().optional(),
+    /** Whether a permit came back with the step. */
+    permit: z.boolean().optional(),
+    disposition: z.enum(["NOT_FORWARDED", "HELD", "FORWARDED_UNGOVERNED"]).optional(),
+    /** How many times the executor's write was attempted, cumulatively. */
+    writes: z.number().int().min(0).optional(),
+});
+const VectorStepSchema = z.discriminatedUnion("op", [
+    z.strictObject({
+        op: z.literal("run"),
+        /** What the executor's write does. */
+        write: z.enum([
+            "COMMIT",
+            "REFUSE",
+            "INDETERMINATE",
+            "FAIL_BEFORE_DISPATCH",
+            "THROW_AFTER_DISPATCH",
+        ]),
+        expect: VectorExpectationSchema,
+    }),
+    z.strictObject({ op: z.literal("hold"), expect: VectorExpectationSchema }),
+    z.strictObject({ op: z.literal("present"), expect: VectorExpectationSchema }),
+    z.strictObject({
+        op: z.literal("receipt"),
+        /** The native receipt's status, in the vector platform's vocabulary. */
+        status: z.enum(["POSTED", "REJECTED", "UNREADABLE"]),
+        expect: VectorExpectationSchema,
+    }),
+    z.strictObject({
+        op: z.literal("reconcile"),
+        /** What the platform answers when asked about the attempt. */
+        answer: z.enum(["COMPLETED", "NOT_EXECUTED", "UNKNOWN"]),
+        expect: VectorExpectationSchema,
+    }),
+    z.strictObject({
+        op: z.literal("advance"),
+        /** Milliseconds the clock moves before the next step. */
+        ms: z.number().int().min(1),
+    }),
+]);
+/** One conformance vector: a decision, a posture, and the steps an executor is held to. */
+export const ExecutorVectorSchema = z.strictObject({
+    description: z.string().min(1).max(500),
+    contract: z.literal(NATIVE_EXECUTOR_CONTRACT),
+    style: z.enum(["dispatch", "permit"]),
+    posture: z.enum(["STRICT", "BOUNDED_CONTINUITY", "CUSTOM"]),
+    /** For `CUSTOM` posture: the disposition the institution's rule chooses. */
+    custom_disposition: z.enum(["NOT_FORWARDED", "HELD", "FORWARDED_UNGOVERNED"]).optional(),
+    decision: z.strictObject({
+        verdict: z.enum(["ALLOW", "ESCALATE", "BLOCK"]),
+        /** True when the authority could not be reached and the gate failed closed. */
+        fail_closed: z.boolean(),
+    }),
+    steps: z.array(VectorStepSchema).min(1).max(16),
+});
+const DEFINITIONS = {
+    ExecutionOutcome: ExecutionOutcomeSchema,
+    ExecutorIdentity: ExecutorIdentitySchema,
+    ExecutionCapability: ExecutionCapabilitySchema,
+    ExecutionRequest: ExecutionRequestSchema,
+    ExecutionResponse: ExecutionResponseSchema,
+    NativeReceipt: NativeReceiptSchema,
+    ReceiptResponse: ReceiptResponseSchema,
+    ReconciliationRequest: ReconciliationRequestSchema,
+    ReconciliationResponse: ReconciliationResponseSchema,
+    ExecutorEvidenceLine: ExecutorEvidenceLineSchema,
+    ExecutorVector: ExecutorVectorSchema,
+};
+/**
+ * The published JSON Schema of the contract's wire objects, generated from
+ * the validators this package runs, so the document a third party validates
+ * against and the reference implementation are one definition.
+ */
+export function nativeExecutorJsonSchema() {
+    const definitions = {};
+    for (const [name, schema] of Object.entries(DEFINITIONS)) {
+        const generated = z.toJSONSchema(schema, { target: "draft-2020-12", io: "input" });
+        const definition = { ...generated };
+        delete definition["$schema"];
+        definitions[name] = definition;
+    }
+    return {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        $id: NATIVE_EXECUTOR_SCHEMA_ID,
+        title: NATIVE_EXECUTOR_CONTRACT,
+        $defs: definitions,
+    };
+}
+//# sourceMappingURL=NativeExecutorSchema.js.map

package/dist/execution/NativeExecutorSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NativeExecutorSchema.js","sourceRoot":"","sources":["../../src/execution/NativeExecutorSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,CAAC,MAAM,yBAAyB,GACpC,kGAAkG,CAAC;AAErG,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AACxD,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,sBAAsB,CAAC,CAAC;AACjC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC/D,wEAAwE;AACxE,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AACrD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAEjC,MAAM,QAAQ,GAAG;IACf,SAAS;IACT,MAAM;IACN,wBAAwB;IACxB,WAAW;IACX,yBAAyB;IACzB,wBAAwB;CAChB,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAEvD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,wBAAwB,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrC,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,kBAAkB,CAAC;CAC7B,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,UAAU;IACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;CACjC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,QAAQ,EAAE,sBAAsB;IAChC,WAAW,EAAE,UAAU;IACvB,0FAA0F;IAC1F,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACzC,cAAc,EAAE,UAAU,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,YAAY,EAAE,UAAU;IACxB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,oGAAoG;IACpG,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,SAAS,EAAE,UAAU;IACrB,+FAA+F;IAC/F,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC;QAC7B,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,KAAK,CAAC,wBAAwB,CAAC;QAClC,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,KAAK,CAAC,qBAAqB,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAC5C,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,KAAK,CAAC,mBAAmB,CAAC;QAC7B,WAAW,EAAE,OAAO;QACpB,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,2EAA2E;IAC3E,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,MAAM,CAAC;SACX,KAAK,CAAC,0BAA0B,CAAC;SACjC,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC,CAAC,YAAY,CAAC;QACb,YAAY,EAAE,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,yBAAyB,EAAE,wBAAwB,CAAC,CAAC;QACnF,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;KAC7D,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,YAAY,EAAE,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;KAC9D,CAAC;CACH,CAAC,CAAC;AAEH,oGAAoG;AACpG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,YAAY,CAAC;IACxD,SAAS,EAAE,UAAU;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,YAAY,EAAE,UAAU;IACxB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;CAC/F,CAAC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,YAAY,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAC7C,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACtE,QAAQ,EAAE,sBAAsB;IAChC,WAAW,EAAE,UAAU;IACvB,SAAS,EAAE,UAAU;IACrB,WAAW,EAAE,YAAY;IACzB,WAAW,EAAE,UAAU,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE;IACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;IACvB,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IAC3D,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjF,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,KAAK,EAAE,CAAC;SACL,YAAY,CAAC;QACZ,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,UAAU;QACxB,aAAa,EAAE,UAAU;QACzB,mBAAmB,EAAE,UAAU;QAC/B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;KAC/C,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;IACrB,qFAAqF;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjF,gDAAgD;IAChD,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjF,uEAAuE;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IAClD,CAAC,CAAC,YAAY,CAAC;QACb,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,sCAAsC;QACtC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;YACZ,QAAQ;YACR,QAAQ;YACR,eAAe;YACf,sBAAsB;YACtB,sBAAsB;SACvB,CAAC;QACF,MAAM,EAAE,uBAAuB;KAChC,CAAC;IACF,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC1E,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC7E,CAAC,CAAC,YAAY,CAAC;QACb,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACxB,wEAAwE;QACxE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACpD,MAAM,EAAE,uBAAuB;KAChC,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC1B,8DAA8D;QAC9D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,EAAE,uBAAuB;KAChC,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACxB,yDAAyD;QACzD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC5B,CAAC;CACH,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,YAAY,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IAC3D,4EAA4E;IAC5E,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxF,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/C,+EAA+E;QAC/E,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;KACzB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAChD,CAAC,CAAC;AAIH,MAAM,WAAW,GAAG;IAClB,gBAAgB,EAAE,sBAAsB;IACxC,gBAAgB,EAAE,sBAAsB;IACxC,mBAAmB,EAAE,yBAAyB;IAC9C,gBAAgB,EAAE,sBAAsB;IACxC,iBAAiB,EAAE,uBAAuB;IAC1C,aAAa,EAAE,mBAAmB;IAClC,eAAe,EAAE,qBAAqB;IACtC,qBAAqB,EAAE,2BAA2B;IAClD,sBAAsB,EAAE,4BAA4B;IACpD,oBAAoB,EAAE,0BAA0B;IAChD,cAAc,EAAE,oBAAoB;CAC5B,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,WAAW,GAA4B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,MAAM,UAAU,GAA4B,EAAE,GAAG,SAAS,EAAE,CAAC;QAC7D,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,8CAA8C;QACvD,GAAG,EAAE,yBAAyB;QAC9B,KAAK,EAAE,wBAAwB;QAC/B,KAAK,EAAE,WAAW;KACnB,CAAC;AACJ,CAAC"}