@decionis/agent-safe-pipeline 0.4.1 → 0.5.0

package/dist/plan/PlanState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlanState.js","sourceRoot":"","sources":["../../src/plan/PlanState.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,EACL,UAAU,EACV,gBAAgB,GAIjB,MAAM,mBAAmB,CAAC;AAwB3B,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,SAAS;IACT,WAAW;IACX,WAAW;IACX,aAAa;IACb,eAAe;IACf,QAAQ;CACA,CAAC;AACX,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAU,CAAC;AACnF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY;IACZ,cAAc;IACd,UAAU;IACV,SAAS;IACT,cAAc;CACN,CAAC;AACX,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,cAAc;IACd,sBAAsB;IACtB,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,wBAAwB;IACxB,uBAAuB;IACvB,yBAAyB;IACzB,oBAAoB;IACpB,2BAA2B;IAC3B,yBAAyB;IACzB,6BAA6B;IAC7B,yBAAyB;IACzB,uBAAuB;IACvB,oBAAoB;IACpB,iBAAiB;CACT,CAAC;AAOX,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAsC1D;;;;;GAKG;AACH,MAAM,iBAAiB,GAA8B;IACnD,WAAW;IACX,aAAa;IACb,WAAW;IACX,eAAe;IACf,QAAQ;IACR,SAAS;CACV,CAAC;AAEF,SAAS,aAAa,CAAC,OAAwB;IAC7C,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IACjD,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;IACtE,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,gBAAgB,CAC9B,IAAkB,EAClB,QAAoC;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CACpD,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CACvB,IAAkB,EAClB,QAA6C;IAE7C,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,WAAW,CAAC;IACtD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC;IAC7E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,WAAW,CAAC;QACzE,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAID,SAAS,UAAU,CAAC,QAAsB,EAAE,MAAsB;IAChE,IAAI,QAAQ,KAAK,aAAa,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACtE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,QAAQ,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,oBAAoB,EAAE;YACjE,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;AAC3E,CAAC;AAED,0EAA0E;AAC1E,MAAM,eAAe,GAAiC,CAAC,cAAc,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAE9F,SAAS,MAAM,CAAC,KAAgB;IAC9B,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAClF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAOnC;IACC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,OAAO,GAAG,CAAC,MAAsB,EAAiB,EAAE,CAAC,CAAC;QAC1D,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,KAAK,EAAE,IAAI;QACX,aAAa,EAAE,cAAc;QAC7B,MAAM;QACN,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,EAAE;QAChB,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC;IACxF,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,WAAW;QAAE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,CAAC,CAAC;IACrF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QAChF,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK;SAC5B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC;SAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,OAAO,EAAE,IAAI,CAAC,IAAI;QAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS;KAC7C,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;SAC9C,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,iBAAiB,CACjD,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,MAAM,EACN,YAAY,EACZ,WAAW,CACZ,CAAC;IAEF,0EAA0E;IAC1E,0EAA0E;IAC1E,qDAAqD;IACrD,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK;QACL,MAAM;QACN,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACzD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;KACxD,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;QACxB,IAAI,CAAC,OAAO;QACZ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7C,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;KAC7C,CAAC,CAAC;IACH,0EAA0E;IAC1E,wEAAwE;IACxE,0CAA0C;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ;SACzB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;SACnD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;SACrC,IAAI,EAAE,CAAC;IACV,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,aAAa,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,CAAC,IAA4B,CAAC,CAAC;IACpD,OAAO;QACL,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK;QACL,aAAa;QACb,MAAM;QACN,MAAM;QACN,YAAY;QACZ,WAAW;QACX,MAAM,EAAE;YACN,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;YACvD,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;SACtB;KACF,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc;IAC7D,OAAO,GAAG,uBAAuB,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAkB,EAClB,IAAc,EACd,KAAgB,EAChB,MAAsB,EACtB,YAA6F,EAC7F,WAA2D;IAE3D,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC9F,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC5F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;YAC3D,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,yBAAyB,EAAE;YACtE,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,YAAY;SACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;SACxD,MAAM,CAAC,CAAC,MAAM,EAAwB,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IAC7D,KAAK,MAAM,aAAa,IAAI,eAAe,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC;QAC/E,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,KAAK,UAAU;YACjD,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,uBAAuB,EAAE;YAChE,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;AACpE,CAAC"}

package/dist/plan/PlanStepReference.d.ts

@@ -0,0 +1,16 @@
+import { z } from "zod";
+/**
+ * The reference the trusted executor stamps into a plan step's intent. It
+ * lives apart from the plan so that the intent schema can name it without
+ * importing the canonicalizer the plan's digest needs.
+ */
+export declare const PlanIdSchema: z.ZodString;
+export declare const PlanStepIdSchema: z.ZodString;
+/** Which step of which plan an intent is, as the trusted executor states it. */
+export declare const PlanStepReferenceSchema: z.ZodObject<{
+    plan_id: z.ZodString;
+    plan_digest: z.ZodString;
+    step_id: z.ZodString;
+}, z.core.$strict>;
+export type PlanStepReference = z.infer<typeof PlanStepReferenceSchema>;
+//# sourceMappingURL=PlanStepReference.d.ts.map

package/dist/plan/PlanStepReference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlanStepReference.d.ts","sourceRoot":"","sources":["../../src/plan/PlanStepReference.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,YAAY,aAIK,CAAC;AAC/B,eAAO,MAAM,gBAAgB,aAIC,CAAC;AAE/B,gFAAgF;AAChF,eAAO,MAAM,uBAAuB;;;;kBAMzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/plan/PlanStepReference.js

@@ -0,0 +1,25 @@
+import { z } from "zod";
+/**
+ * The reference the trusted executor stamps into a plan step's intent. It
+ * lives apart from the plan so that the intent schema can name it without
+ * importing the canonicalizer the plan's digest needs.
+ */
+export const PlanIdSchema = z
+    .string()
+    .min(1)
+    .max(128)
+    .regex(/^[a-z0-9][\w.-]*$/i);
+export const PlanStepIdSchema = z
+    .string()
+    .min(1)
+    .max(64)
+    .regex(/^[a-z][a-z0-9_-]*$/);
+/** Which step of which plan an intent is, as the trusted executor states it. */
+export const PlanStepReferenceSchema = z
+    .object({
+    plan_id: PlanIdSchema,
+    plan_digest: z.string().regex(/^sha256:[0-9a-f]{64}$/),
+    step_id: PlanStepIdSchema,
+})
+    .strict();
+//# sourceMappingURL=PlanStepReference.js.map

package/dist/plan/PlanStepReference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlanStepReference.js","sourceRoot":"","sources":["../../src/plan/PlanStepReference.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,oBAAoB,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,oBAAoB,CAAC,CAAC;AAE/B,gFAAgF;AAChF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,OAAO,EAAE,YAAY;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACtD,OAAO,EAAE,gBAAgB;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/profile/ApiProfile.d.ts

@@ -1,5 +1,6 @@
 import { z } from "zod";
 import type { JsonObject, JsonValue } from "../intent/JsonValue.js";
+import { type TargetPrecondition } from "../intent/TargetPrecondition.js";
 /**
  * `agent-safe.profile.api/1`: a platform API described as data, so that every
  * component that turns one of its calls into an intent turns it into the same
@@ -8,12 +9,25 @@ import type { JsonObject, JsonValue } from "../intent/JsonValue.js";
  * by JSON pointer into the call. The gateway reads it to govern an agent's
  * call; a native executor's `prepare` reads it to describe the call it is
  * about to make. One mapping, no code coupling between them.
+ *
+ * An operation may also say where the subject sits (the customer a call is
+ * for): in the call, and, for a read, in each item of its answer. A component
+ * that pins a session to one subject checks a read against it, and states the
+ * subject to the authority for a write. A read is an operation only for that:
+ * it is checked, never decided.
+ *
+ * A write may also name the read that states its target's version (an ETag,
+ * a row version), and where that read's answer states it: a component that
+ * binds the target's state reads it once before the authority is asked, and
+ * the version rides into the intent as its precondition.
  */
 export declare const API_PROFILE_CONTRACT = "agent-safe.profile.api/1";
 export declare const API_PROFILE_SCHEMA_ID = "https://github.com/decionis/agent-safe-pipeline/blob/master/spec/profiles/api/v1/schema.json";
-/** The methods a profile governs; a read is never an operation. */
+/** The methods a profile governs: each operation of one is decided by the authority. */
 export declare const API_PROFILE_METHODS: readonly ["POST", "PUT", "PATCH", "DELETE"];
 export type ApiProfileMethod = (typeof API_PROFILE_METHODS)[number];
+/** The one read method an operation may name: checked for its subject, never decided. */
+export declare const API_PROFILE_READ_METHOD = "GET";
 /**
  * Fact names a profile may not use. The first group is what the gateway
  * already states in an intent's context; the second is what the Decionis
@@ -25,16 +39,55 @@ export declare const RESERVED_FACT_NAMES: readonly string[];
 export declare const MAX_FACT_ELEMENTS = 100;
 /** The longest string a fact carries; a longer value is not stated. */
 export declare const MAX_FACT_STRING = 1000;
+/** The longest subject: an identifier, never a payload. */
+export declare const MAX_SUBJECT_LENGTH = 200;
 export declare const ApiPolicyProjectionSchema: z.ZodObject<{
     decision_type: z.ZodString;
     transaction_type: z.ZodNullable<z.ZodString>;
     workflow_key: z.ZodNullable<z.ZodString>;
     channel: z.ZodNullable<z.ZodString>;
 }, z.core.$strict>;
+/**
+ * Where an operation's subject sits, and what else a call or an answer may
+ * carry around it:
+ *
+ * - `request`, a pointer into the call like a fact's, with no `*`;
+ * - `response`, a pointer into a successful answer's JSON body, where one `*`
+ *   reaches every item of a list;
+ * - `query`, for a read, the one query parameter that must state the subject,
+ *   exactly as `template` writes it with `{subject}` in place of the
+ *   session's subject (`customerNumber eq '{subject}'`);
+ * - `parameters`, for a read, every other query parameter it may carry;
+ * - `envelope`, beside a `response` pointer through `*`, the keys the object
+ *   holding the list may carry besides the list.
+ */
+export declare const ApiSubjectSchema: z.ZodObject<{
+    request: z.ZodOptional<z.ZodString>;
+    response: z.ZodOptional<z.ZodString>;
+    query: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        template: z.ZodString;
+    }, z.core.$strict>>;
+    parameters: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    envelope: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+/**
+ * Where a write's target states its version: `read`, a read in the same
+ * profile whose path placeholders the write's path also has, so the read can
+ * be made from the write's own call; `version`, a pointer into the read's
+ * answer, `{ body, headers }`, with no `*`; and `state`, where the same answer
+ * states the target's state, when a transition rule reads one.
+ */
+export declare const ApiPreconditionSchema: z.ZodObject<{
+    read: z.ZodString;
+    version: z.ZodString;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
 export declare const ApiOperationSchema: z.ZodObject<{
     id: z.ZodString;
     method: z.ZodEnum<{
         POST: "POST";
+        GET: "GET";
         PUT: "PUT";
         PATCH: "PATCH";
         DELETE: "DELETE";
@@ -50,6 +103,21 @@ export declare const ApiOperationSchema: z.ZodObject<{
         workflow_key: z.ZodNullable<z.ZodString>;
         channel: z.ZodNullable<z.ZodString>;
     }, z.core.$strict>>;
+    subject: z.ZodOptional<z.ZodObject<{
+        request: z.ZodOptional<z.ZodString>;
+        response: z.ZodOptional<z.ZodString>;
+        query: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            template: z.ZodString;
+        }, z.core.$strict>>;
+        parameters: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        envelope: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    precondition: z.ZodOptional<z.ZodObject<{
+        read: z.ZodString;
+        version: z.ZodString;
+        state: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export declare const ApiProfileDefinitionSchema: z.ZodObject<{
     profile: z.ZodLiteral<"agent-safe.profile.api/1">;
@@ -61,6 +129,7 @@ export declare const ApiProfileDefinitionSchema: z.ZodObject<{
         id: z.ZodString;
         method: z.ZodEnum<{
             POST: "POST";
+            GET: "GET";
             PUT: "PUT";
             PATCH: "PATCH";
             DELETE: "DELETE";
@@ -76,9 +145,26 @@ export declare const ApiProfileDefinitionSchema: z.ZodObject<{
             workflow_key: z.ZodNullable<z.ZodString>;
             channel: z.ZodNullable<z.ZodString>;
         }, z.core.$strict>>;
+        subject: z.ZodOptional<z.ZodObject<{
+            request: z.ZodOptional<z.ZodString>;
+            response: z.ZodOptional<z.ZodString>;
+            query: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                template: z.ZodString;
+            }, z.core.$strict>>;
+            parameters: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            envelope: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        precondition: z.ZodOptional<z.ZodObject<{
+            read: z.ZodString;
+            version: z.ZodString;
+            state: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export type ApiPolicyProjection = z.infer<typeof ApiPolicyProjectionSchema>;
+export type ApiSubject = z.infer<typeof ApiSubjectSchema>;
+export type ApiPrecondition = z.infer<typeof ApiPreconditionSchema>;
 export type ApiOperationDefinition = z.infer<typeof ApiOperationSchema>;
 export type ApiProfileDefinition = z.infer<typeof ApiProfileDefinitionSchema>;
 /** One call as a component is about to make it, or as the gateway received it. */
@@ -92,6 +178,15 @@ export interface ApiRequest {
     /** The parsed JSON body, when there is one. */
     readonly body?: JsonValue;
 }
+/** A read's answer, as a component that binds a precondition received it. */
+export interface ApiAnswer {
+    /** Header names in lower case. */
+    readonly headers: {
+        readonly [name: string]: string;
+    };
+    /** The parsed JSON body, when there is one. */
+    readonly body?: JsonValue;
+}
 /** What a profile says about one call. */
 export interface ApiProfileMatch {
     readonly profile: string;
@@ -100,7 +195,19 @@ export interface ApiProfileMatch {
     /** Every fact whose pointer resolved to a statable value; the others are absent. */
     readonly facts: JsonObject;
     readonly policyProjection: ApiPolicyProjection | null;
+    /**
+     * The call's subject, when the operation names where it sits in the call:
+     * a string or a finite number, as a string; null when the pointer found
+     * neither. Absent when the operation names no request subject.
+     */
+    readonly subject?: string | null;
 }
+/**
+ * A subject check's answer. `MATCH` is the only one that lets a call or an
+ * answer through; every other is a refusal, and each says why without saying
+ * whose record it was.
+ */
+export type ApiSubjectCheck = "MATCH" | "SUBJECT_ABSENT" | "SUBJECT_MISMATCH" | "QUERY_PARAMETER_REFUSED" | "RESPONSE_UNREADABLE" | "RESPONSE_KEY_REFUSED" | "RESPONSE_SUBJECT_ABSENT" | "RESPONSE_SUBJECT_MISMATCH";
 export declare class ApiProfileError extends Error {
     readonly code: "API_PROFILE_INVALID";
     readonly detail: string;
@@ -120,16 +227,89 @@ export declare class ApiProfile {
     static parse(value: unknown): ApiProfile;
     get id(): string;
     get platform(): string;
-    /** Every action type the profile can produce, for a registry to be sealed over. */
+    /**
+     * Every action type the profile's writes can produce, for a registry to be
+     * sealed over. A read's action names it in reports; it is never an intent.
+     */
     actions(): readonly string[];
+    /** Whether an operation is a read: checked for its subject, never decided. */
+    static isRead(operation: ApiOperationDefinition): boolean;
+    /**
+     * A call against the session's subject, before it is sent: `MATCH`, or why
+     * not. A read that names the query parameters it may carry carries no
+     * other (`QUERY_PARAMETER_REFUSED`); a read that names its subject query
+     * states the session's subject there and nothing else, so a list can be
+     * asked only for the session's own records; and the subject at the
+     * operation's request pointer is the session's.
+     */
+    checkRequest(match: ApiProfileMatch, query: NonNullable<ApiRequest["query"]>, subject: string): ApiSubjectCheck;
+    /**
+     * A subject query parameter against its template: absent is
+     * `SUBJECT_ABSENT`; given twice, or anything but the template with one
+     * literal in place of `{subject}`, is `QUERY_PARAMETER_REFUSED`, which is
+     * what a second predicate beside the subject's is; a literal naming
+     * another subject is `SUBJECT_MISMATCH`. A `'` inside the literal is
+     * written doubled, as an OData string literal writes it; a single one ends
+     * the literal, so it refuses the call.
+     */
+    private static checkQuery;
+    /**
+     * A successful answer, to a read or a write, against the session's
+     * subject, before any of it is relayed: every item the operation's response
+     * pointer reaches must name the subject. One item naming another is
+     * `RESPONSE_SUBJECT_MISMATCH`, one naming none `RESPONSE_SUBJECT_ABSENT`,
+     * and an answer the pointer cannot be walked into (not JSON, or no list
+     * where the `*` stands) `RESPONSE_UNREADABLE`. Beside a list, the object
+     * that holds it may carry only the keys the operation's `envelope` names,
+     * so a count or a summary about other subjects is `RESPONSE_KEY_REFUSED`.
+     * Nothing is filtered: a partial answer would look complete. An empty list
+     * names no one and matches. Null when the operation names no response
+     * subject, so there is nothing to check.
+     */
+    checkResponse(operationId: string, body: JsonValue | undefined, subject: string): ApiSubjectCheck | null;
     operation(id: string): ApiOperationDefinition | null;
     /**
      * The operation a method, path and query select, before any body is read:
      * what the gateway needs to decide whether to govern a call.
      */
     operationFor(method: string, path: string, query?: ApiRequest["query"]): ApiOperationDefinition | null;
+    /**
+     * Whether a call reads like one of this method's operations without
+     * matching it exactly: its path in another letter case, or with a literal
+     * percent-encoded. An upstream that folds case or decodes before it routes
+     * would serve it as that operation, so a component that checks reads
+     * refuses it rather than let it through unchecked. A path that does not
+     * decode resembles everything.
+     */
+    resembles(method: string, path: string): boolean;
+    /**
+     * Whether a call's path goes on below one of this method's operations
+     * without being an operation itself, in any letter case: a count
+     * (`/customers/$count`), a navigation or a media stream beneath a record.
+     * What it answers is not what the operation's subject rule checks, so a
+     * component that checks reads refuses it.
+     */
+    beneath(method: string, path: string): boolean;
     /** The operation, action type, facts and policy projection of one call; null when no operation matches. */
     match(request: ApiRequest): ApiProfileMatch | null;
+    /**
+     * The read a write's precondition names, as the call to make: `GET`, the
+     * read's path under the prefix the write matched, each placeholder filled
+     * with the write's own text for it, exactly as the write's call wrote it.
+     * Null when the call matches no write, or its operation names no
+     * precondition. The component makes the read; the profile makes no call.
+     */
+    stateRead(request: ApiRequest): ApiRequest | null;
+    /**
+     * The precondition a write's read answered: the version at the operation's
+     * pointer, a string or a finite number as a string, within the
+     * precondition's bounds; the state beside it when the operation names
+     * where; which read said so, as `<profile>#<read>`; and when. Null when the
+     * operation names no precondition, or the answer states no usable version:
+     * a component that binds the target's state refuses then, rather than bind
+     * none. A state the answer does not state is left out.
+     */
+    precondition(operationId: string, answer: ApiAnswer, readAt: Date): TargetPrecondition | null;
     private select;
     /** A template as an anchored expression: placeholders take one segment's text, never a `/`. */
     private static compile;
@@ -138,6 +318,26 @@ export declare class ApiProfile {
     private static decode;
     private static queryMatches;
     private static queryRoot;
+    /**
+     * What a definition must also be about subjects: a subject names where it
+     * sits, in the call, its query or its answer; a read names one and states
+     * no fact or policy path, since it is never decided; only a read names a
+     * subject query or the parameters it may carry; a request subject is one
+     * value, so its pointer has no `*`; a subject query's template states the
+     * subject once; an envelope stands beside a list.
+     */
+    private static subjectRules;
+    /**
+     * What a precondition must be: a write's, naming a read in the same
+     * profile, whose path placeholders the write's path all has, so the read
+     * is made from the write's own call; and pointers through no `*`, since a
+     * version is one value.
+     */
+    private static preconditionRules;
+    /** A subject as stated: a string or a finite number, as a string, within the bound; else null. */
+    private static subjectOf;
+    /** Each element's value through a `*`; null when there is no list where the `*` stands. */
+    private static walkList;
     /** RFC 6901 reference tokens, unescaped; one `*` token at most. */
     private static pointerSegments;
     /**

package/dist/profile/ApiProfile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ApiProfile.d.ts","sourceRoot":"","sources":["../../src/profile/ApiProfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAiB,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnF;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAE/D,eAAO,MAAM,qBAAqB,iGAC8D,CAAC;AAEjG,mEAAmE;AACnE,eAAO,MAAM,mBAAmB,6CAA8C,CAAC;AAC/E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAmChD,CAAC;AAEF,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,uEAAuE;AACvE,eAAO,MAAM,eAAe,OAAO,CAAC;AASpC,eAAO,MAAM,yBAAyB;;;;;kBAKpC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;kBAqB7B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;kBAkBrC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACxE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,kFAAkF;AAClF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IACxE,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AAED,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oFAAoF;IACpF,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACvD;AAED,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,IAAI,EAAE,qBAAqB;aAC3B,MAAM,EAAE,MAAM;gBADd,IAAI,EAAE,qBAAqB,EAC3B,MAAM,EAAE,MAAM;CAKjC;AASD;;;;;GAKG;AACH,qBAAa,UAAU;aAGe,UAAU,EAAE,oBAAoB;IAFpE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+B;IAExD,OAAO;IAoCP,2GAA2G;WAC7F,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU;IAa/C,IAAW,EAAE,IAAI,MAAM,CAEtB;IAED,IAAW,QAAQ,IAAI,MAAM,CAE5B;IAED,mFAAmF;IAC5E,OAAO,IAAI,SAAS,MAAM,EAAE;IAI5B,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI;IAI3D;;;OAGG;IACI,YAAY,CACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,UAAU,CAAC,OAAO,CAAM,GAC9B,sBAAsB,GAAG,IAAI;IAIhC,2GAA2G;IACpG,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,eAAe,GAAG,IAAI;IA0BzD,OAAO,CAAC,MAAM;IA0Bd,+FAA+F;IAC/F,OAAO,CAAC,MAAM,CAAC,OAAO;IA2BtB,OAAO,CAAC,MAAM,CAAC,MAAM;IAIrB,kGAAkG;IAClG,OAAO,CAAC,MAAM,CAAC,MAAM;IAarB,OAAO,CAAC,MAAM,CAAC,YAAY;IAU3B,OAAO,CAAC,MAAM,CAAC,SAAS;IASxB,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAC,eAAe;IAa9B;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,IAAI;IAenB,OAAO,CAAC,MAAM,CAAC,IAAI;IAmBnB,OAAO,CAAC,MAAM,CAAC,QAAQ;CAMxB;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa9D"}
+{"version":3,"file":"ApiProfile.d.ts","sourceRoot":"","sources":["../../src/profile/ApiProfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAiB,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAEpG;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAE/D,eAAO,MAAM,qBAAqB,iGAC8D,CAAC;AAEjG,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,6CAA8C,CAAC;AAC/E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACpE,yFAAyF;AACzF,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAqChD,CAAC;AAEF,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,uEAAuE;AACvE,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,2DAA2D;AAC3D,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAYtC,eAAO,MAAM,yBAAyB;;;;;kBAKpC,CAAC;AAKH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;kBAW3B,CAAC;AAOH;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;kBAIhC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAsB7B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAkBrC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACxE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,kFAAkF;AAClF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IACxE,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AAED,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACxB,kCAAkC;IAClC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACtD,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AAED,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oFAAoF;IACpF,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACtD;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB,OAAO,GACP,gBAAgB,GAChB,kBAAkB,GAClB,yBAAyB,GACzB,qBAAqB,GACrB,sBAAsB,GACtB,yBAAyB,GACzB,2BAA2B,CAAC;AAKhC,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,IAAI,EAAE,qBAAqB;aAC3B,MAAM,EAAE,MAAM;gBADd,IAAI,EAAE,qBAAqB,EAC3B,MAAM,EAAE,MAAM;CAKjC;AAaD;;;;;GAKG;AACH,qBAAa,UAAU;aAGe,UAAU,EAAE,oBAAoB;IAFpE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+B;IAExD,OAAO;IA4CP,2GAA2G;WAC7F,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU;IAa/C,IAAW,EAAE,IAAI,MAAM,CAEtB;IAED,IAAW,QAAQ,IAAI,MAAM,CAE5B;IAED;;;OAGG;IACI,OAAO,IAAI,SAAS,MAAM,EAAE;IAUnC,8EAA8E;WAChE,MAAM,CAAC,SAAS,EAAE,sBAAsB,GAAG,OAAO;IAIhE;;;;;;;OAOG;IACI,YAAY,CACjB,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EACvC,OAAO,EAAE,MAAM,GACd,eAAe;IAwBlB;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;IA8BzB;;;;;;;;;;;;OAYG;IACI,aAAa,CAClB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,SAAS,GAAG,SAAS,EAC3B,OAAO,EAAE,MAAM,GACd,eAAe,GAAG,IAAI;IAkClB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI;IAI3D;;;OAGG;IACI,YAAY,CACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,UAAU,CAAC,OAAO,CAAM,GAC9B,sBAAsB,GAAG,IAAI;IAIhC;;;;;;;OAOG;IACI,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAevD;;;;;;OAMG;IACI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAerD,2GAA2G;IACpG,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,eAAe,GAAG,IAAI;IAqCzD;;;;;;OAMG;IACI,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI;IAaxD;;;;;;;;OAQG;IACI,YAAY,CACjB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,IAAI,GACX,kBAAkB,GAAG,IAAI;IAuB5B,OAAO,CAAC,MAAM;IAoCd,+FAA+F;IAC/F,OAAO,CAAC,MAAM,CAAC,OAAO;IA2BtB,OAAO,CAAC,MAAM,CAAC,MAAM;IAIrB,kGAAkG;IAClG,OAAO,CAAC,MAAM,CAAC,MAAM;IAarB,OAAO,CAAC,MAAM,CAAC,YAAY;IAU3B,OAAO,CAAC,MAAM,CAAC,SAAS;IASxB;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,YAAY;IAkC3B;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAwBhC,kGAAkG;IAClG,OAAO,CAAC,MAAM,CAAC,SAAS;IAUxB,2FAA2F;IAC3F,OAAO,CAAC,MAAM,CAAC,QAAQ;IAUvB,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAC,eAAe;IAa9B;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,IAAI;IAenB,OAAO,CAAC,MAAM,CAAC,IAAI;IAmBnB,OAAO,CAAC,MAAM,CAAC,QAAQ;CAMxB;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa9D"}