@dharma-ai-labs/agent-fabric 0.2.110 → 0.2.112

package/dist/codexPeerTools.d.ts

@@ -0,0 +1,62 @@
+import type { CodexToolHandler } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-session';
+import type { createProviderSessionChannel } from './providerSessionChannel.js';
+export declare const CODEX_PEER_TOOLS: ({
+    type: string;
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        additionalProperties: boolean;
+        properties: {
+            category: {
+                type: string;
+                minLength: number;
+                maxLength: number;
+            };
+            question: {
+                type: string;
+                minLength: number;
+                maxLength: number;
+            };
+            taskId: {
+                type: string;
+                format: string;
+            };
+            targetBindingId: {
+                type: string;
+                format: string;
+            };
+        };
+        required: string[];
+    };
+} | {
+    type: string;
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        additionalProperties: boolean;
+        properties: {
+            questionId: {
+                type: string;
+                format: string;
+            };
+            taskId: {
+                type: string;
+                format: string;
+            };
+            targetBindingId: {
+                type: string;
+                format: string;
+            };
+        };
+        required: string[];
+    };
+})[];
+export declare function createCodexPeerToolHandler(input: {
+    channel(): Pick<ReturnType<typeof createProviderSessionChannel>, 'ask' | 'read'>;
+    maximumProviderCostCents: number;
+    authorize(): Promise<boolean>;
+    authorizeContent(content: string): Promise<boolean>;
+}): CodexToolHandler;
+//# sourceMappingURL=codexPeerTools.d.ts.map

package/dist/codexPeerTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexPeerTools.d.ts","sourceRoot":"","sources":["../src/codexPeerTools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2EAA2E,CAAC;AAClH,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAIhF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAU5B,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,4BAA4B,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC;IACjF,wBAAwB,EAAE,MAAM,CAAC;IACjC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrD,GAAG,gBAAgB,CAkCnB"}

package/dist/codexPeerTools.js

@@ -0,0 +1,53 @@
+const uuid = { type: 'string', format: 'uuid' };
+const common = { taskId: uuid, targetBindingId: uuid };
+export const CODEX_PEER_TOOLS = [
+    { type: 'function', name: 'dharma_peer_ask', description: 'Ask a specific same-repository peer session a bounded question tied to a task. Queued is delivery, not an answer. No broader permissions are granted.',
+        inputSchema: { type: 'object', additionalProperties: false, properties: { ...common,
+                category: { type: 'string', minLength: 1, maxLength: 64 }, question: { type: 'string', minLength: 1, maxLength: 2000 } },
+            required: ['taskId', 'targetBindingId', 'category', 'question'] } },
+    { type: 'function', name: 'dharma_peer_reply', description: 'Read the durable answer to your task-bound peer question. Pending, failed, expired and unavailable are not successful execution.',
+        inputSchema: { type: 'object', additionalProperties: false, properties: { ...common, questionId: uuid },
+            required: ['taskId', 'targetBindingId', 'questionId'] } },
+];
+export function createCodexPeerToolHandler(input) {
+    const id = (value) => typeof value === 'string'
+        && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\s\S])/i.test(value);
+    const result = (success, value) => ({ success,
+        contentItems: [{ type: 'inputText', text: JSON.stringify(value) }] });
+    return async (params) => {
+        const deny = (code) => result(false, { code });
+        const ask = params.tool === 'dharma_peer_ask', read = params.tool === 'dharma_peer_reply';
+        if (Object.keys(params).some(key => !['threadId', 'turnId', 'callId', 'namespace', 'tool', 'arguments'].includes(key))
+            || (!ask && !read) || params.namespace != null || !params.arguments || typeof params.arguments !== 'object'
+            || Array.isArray(params.arguments))
+            return deny('codex_peer_tool_invalid');
+        const args = params.arguments;
+        const keys = ask ? ['taskId', 'targetBindingId', 'category', 'question'] : ['taskId', 'targetBindingId', 'questionId'];
+        if (Object.keys(args).length !== keys.length || Object.keys(args).some(key => !keys.includes(key))
+            || !id(args.taskId) || !id(args.targetBindingId)
+            || (ask ? typeof args.category !== 'string' || args.category.length > 64 || !/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$(?![\s\S])/.test(args.category)
+                || typeof args.question !== 'string' || !args.question.trim() || args.question.length > 2000
+                || /[\u0000-\u001f\u007f]/.test(args.question) : !id(args.questionId)))
+            return deny('codex_peer_tool_invalid');
+        if (!await input.authorize())
+            return deny('codex_peer_tool_not_authorized');
+        try {
+            const receipt = ask
+                ? await input.channel().ask({ targetBindingId: args.targetBindingId, taskId: args.taskId,
+                    category: args.category, question: args.question,
+                    maximumProviderCostCents: input.maximumProviderCostCents })
+                : await input.channel().read(args.questionId, args.taskId, args.targetBindingId);
+            if (!await input.authorize())
+                return deny('codex_peer_tool_authority_changed');
+            const answer = receipt.answer;
+            if (typeof answer === 'string' && !await input.authorizeContent(answer))
+                return deny('codex_peer_tool_content_blocked');
+            return result(true, receipt);
+        }
+        catch {
+            // A timeout may have queued a question; never invent success or silently resend it.
+            return deny('codex_peer_tool_delivery_unconfirmed');
+        }
+    };
+}
+//# sourceMappingURL=codexPeerTools.js.map

package/dist/codexPeerTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexPeerTools.js","sourceRoot":"","sources":["../src/codexPeerTools.ts"],"names":[],"mappings":"AAGA,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAChD,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AACvD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EACtD,uJAAuJ;QACvJ,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM;gBACjF,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;YAC1H,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE;IACrE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EACxD,kIAAkI;QAClI,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE;YACrG,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,YAAY,CAAC,EAAE,EAAE;CAC9D,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,KAK1C;IACC,MAAM,EAAE,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ;WACpE,sFAAsF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAE,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO;QAC7D,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,KAAK,EAAC,MAAM,EAAC,EAAE;QACpB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,mBAAmB,CAAC;QAC1F,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;eACjH,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;eACxG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,SAAoC,CAAC;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;QACvH,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;eAC7F,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC;eAC7C,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;mBACvI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI;mBACzF,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACnH,IAAI,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE;YAAE,OAAO,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC5E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG;gBACjB,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;oBACtF,QAAQ,EAAE,IAAI,CAAC,QAAkB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAkB;oBACpE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,EAAE,CAAC;gBAC7D,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAoB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7F,IAAI,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE;gBAAE,OAAO,IAAI,CAAC,mCAAmC,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAI,OAAmC,CAAC,MAAM,CAAC;YAC3D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACxH,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,oFAAoF;YACpF,OAAO,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/codexPeerTools.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codexPeerTools.test.d.ts.map

package/dist/codexPeerTools.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexPeerTools.test.d.ts","sourceRoot":"","sources":["../src/codexPeerTools.test.ts"],"names":[],"mappings":""}

package/dist/codexPeerTools.test.js

@@ -0,0 +1,77 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { CODEX_PEER_TOOLS, createCodexPeerToolHandler } from './codexPeerTools.js';
+const id = '40000000-0000-4000-8000-000000000001';
+function fixture() {
+    const calls = [];
+    const input = { maximumProviderCostCents: 25, authorize: async () => true,
+        authorizeContent: async (_content) => true,
+        channel: () => ({ ask: async (args) => {
+                calls.push(args);
+                return { state: 'queued', questionId: id,
+                    taskId: args.taskId, targetBindingId: args.targetBindingId, replay: false, correlationId: id };
+            },
+            read: async (...args) => {
+                calls.push(args);
+                return { state: 'answered', answer: 'Use the logical job identity.',
+                    questionId: args[0], taskId: args[1], targetBindingId: args[2], failureCode: null,
+                    replyReceiptHash: 'sha256:' + 'a'.repeat(64), correlationId: id };
+            } }) };
+    return { input, calls };
+}
+const ask = { tool: 'dharma_peer_ask', namespace: null,
+    arguments: { taskId: id, targetBindingId: id, category: 'code-review', question: 'Which retry identity is canonical?' } };
+const read = { tool: 'dharma_peer_reply', arguments: { taskId: id, targetBindingId: id, questionId: id } };
+test('tools expose bounded schemas, not authentication or permission parameters', () => {
+    assert.equal(CODEX_PEER_TOOLS.length, 2);
+    for (const tool of CODEX_PEER_TOOLS) {
+        assert.equal(tool.type, 'function');
+        assert.equal(tool.inputSchema.additionalProperties, false);
+        assert.equal(JSON.stringify(tool).includes('credentials'), false);
+    }
+});
+test('peer tools delegate exact scopes and distinguish queued from answered', async () => {
+    const f = fixture(), handler = createCodexPeerToolHandler(f.input);
+    const queued = await handler(ask);
+    assert.equal(JSON.parse(queued.contentItems[0].text).state, 'queued');
+    assert.deepEqual(f.calls[0], { ...ask.arguments, maximumProviderCostCents: 25 });
+    const answered = await handler(read);
+    assert.equal(JSON.parse(answered.contentItems[0].text).state, 'answered');
+    assert.deepEqual(f.calls[1], [id, id, id]);
+});
+test('malformed or broader arguments never reach the signed channel', async () => {
+    const f = fixture(), handler = createCodexPeerToolHandler(f.input);
+    for (const call of [{ ...ask, tool: 'approve_device' }, { ...ask, namespace: 'other' },
+        { ...ask, arguments: { ...ask.arguments, credentials: 'never' } },
+        { ...ask, arguments: { ...ask.arguments, category: 'invalid_category' } },
+        { ...ask, arguments: { ...ask.arguments, question: 'x'.repeat(2001) } },
+        { ...ask, arguments: { ...ask.arguments, taskId: 'foreign' } }]) {
+        assert.equal((await handler(call)).success, false);
+    }
+    assert.equal(f.calls.length, 0);
+});
+test('revocation, post-dispatch authority changes and secrets cannot become successful tool answers', async () => {
+    const f = fixture();
+    f.input.authorize = async () => false;
+    assert.equal((await createCodexPeerToolHandler(f.input)(ask)).success, false);
+    assert.equal(f.calls.length, 0);
+    let checks = 0;
+    f.input.authorize = async () => ++checks === 1;
+    const changed = await createCodexPeerToolHandler(f.input)(ask);
+    assert.equal(changed.success, false);
+    assert.equal(JSON.parse(changed.contentItems[0].text).code, 'codex_peer_tool_authority_changed');
+    f.input.authorize = async () => true;
+    f.input.authorizeContent = async () => false;
+    assert.equal((await createCodexPeerToolHandler(f.input)(read)).success, false);
+});
+test('uncertain delivery is not replayed or described as success', async () => {
+    const f = fixture();
+    f.input.channel = () => ({ ask: async (args) => { f.calls.push(args); throw new Error('private provider body'); },
+        read: async () => { throw new Error('private provider body'); } });
+    const result = await createCodexPeerToolHandler(f.input)(ask);
+    assert.equal(result.success, false);
+    assert.equal(JSON.parse(result.contentItems[0].text).code, 'codex_peer_tool_delivery_unconfirmed');
+    assert.equal(f.calls.length, 1);
+    assert.equal(JSON.stringify(result).includes('private provider body'), false);
+});
+//# sourceMappingURL=codexPeerTools.test.js.map

package/dist/codexPeerTools.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexPeerTools.test.js","sourceRoot":"","sources":["../src/codexPeerTools.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEnF,MAAM,EAAE,GAAG,sCAAsC,CAAC;AAClD,SAAS,OAAO;IACd,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAqD,EAAE,wBAAwB,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QACzH,gBAAgB,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE,CAAC,IAAI;QAClD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;gBAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE;oBAC/F,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;YAAC,CAAC;YACjG,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE;gBAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,+BAA+B;oBAC9G,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI;oBACjF,gBAAgB,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAChF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AACD,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI;IACpD,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,oCAAoC,EAAE,EAAE,CAAC;AAC5H,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC;AAE3G,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACrF,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;IACvF,MAAM,CAAC,GAAG,OAAO,EAAE,EAAE,OAAO,GAAG,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,wBAAwB,EAAE,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3E,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,CAAC,GAAG,OAAO,EAAE,EAAE,OAAO,GAAG,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,CAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE;QACrF,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE;QACjE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE;QACzE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;QACvE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAE,EAAE,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;IAC/G,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;IAClG,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;IACrC,CAAC,CAAC,KAAK,CAAC,gBAAgB,GAAG,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;QAC7G,IAAI,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;IACpG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,KAAK,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC"}

package/dist/demoDeviceTransport.d.ts

@@ -0,0 +1,33 @@
+import { type SecureSecretStore } from '@dharma-ai-labs/agent-fabric-relay-client';
+import { type DemoDeviceScope } from './demoEnrollment.js';
+export declare function createDemoDeviceTransport(input: DemoDeviceScope, deps?: {
+    store?: SecureSecretStore;
+    fetcher?: typeof fetch;
+}): Promise<{
+    store: SecureSecretStore;
+    fetcher: typeof fetch;
+    connectTransport: (target: string) => Promise<{
+        ok: boolean;
+        stage: "demo_transport_verified";
+        enrolled: boolean;
+        duplicate: boolean;
+        deviceId: string;
+        repositoryId: string;
+        transportOrigin: string;
+        expiresAt: string;
+        resumed: boolean;
+        correlationId?: undefined;
+    } | {
+        ok: boolean;
+        stage: "demo_transport_verified";
+        enrolled: boolean;
+        duplicate: boolean;
+        deviceId: string;
+        repositoryId: string;
+        transportOrigin: string;
+        expiresAt: string;
+        correlationId: string;
+        resumed: boolean;
+    }>;
+}>;
+//# sourceMappingURL=demoDeviceTransport.d.ts.map

package/dist/demoDeviceTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoDeviceTransport.d.ts","sourceRoot":"","sources":["../src/demoDeviceTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8C,KAAK,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAG/H,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAWjF,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,eAAe,EACpE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO;;;+BAuBxB,MAAM;;;;;;;;;;;;;;;;;;;;;;;GAY/C"}

package/dist/demoDeviceTransport.js

@@ -0,0 +1,52 @@
+import { loadOrCreateDeviceIdentity, normalizeHqUrl } from '@dharma-ai-labs/agent-fabric-relay-client';
+import { createSystemSecureStore } from '@dharma-ai-labs/agent-fabric-secure-store';
+import { sign } from 'node:crypto';
+import { loadDemoSigningTrust } from './demoEnrollment.js';
+import { createDemoTransportFetcher } from './demoTransportFetch.js';
+import { requestDemoTransportContinuity } from './demoTransportRequest.js';
+function immutableIdentity() {
+    throw Object.assign(new Error('Demo transport requires existing_protected_state_required. Preserve the original enrollment.'), { code: 'demo_transport_existing_protected_state_required' });
+}
+// Invoke within withDemoDeviceLock. Keep all config paths and private-key
+// accounts on the original enrollment origin, even when HTTP moves elsewhere.
+export async function createDemoDeviceTransport(input, deps = {}) {
+    const scope = structuredClone(input), enrollmentOrigin = normalizeHqUrl(scope.hqUrl);
+    const store = deps.store ?? await createSystemSecureStore();
+    const fresh = (account) => store.getFresh ? store.getFresh(account) : store.get(account);
+    const readOnly = { backend: store.backend, get: fresh, getFresh: fresh,
+        async put() { immutableIdentity(); }, async delete() { immutableIdentity(); } };
+    const identity = await loadOrCreateDeviceIdentity({ hqUrl: enrollmentOrigin,
+        organizationId: `${scope.organizationId}:${scope.repositoryId}`, installationId: scope.installationId, store: readOnly });
+    const operationStore = { backend: store.backend, get: fresh, getFresh: fresh,
+        async put(account, value) { if (account === identity.account)
+            immutableIdentity(); await store.put(account, value); },
+        async delete(account) { if (account === identity.account)
+            immutableIdentity(); await store.delete(account); } };
+    const initial = await loadDemoSigningTrust(scope, { store: operationStore });
+    const loadBinding = async (protectedStore) => {
+        const trust = await loadDemoSigningTrust(scope, { store: protectedStore });
+        const currentIdentity = await loadOrCreateDeviceIdentity({ hqUrl: enrollmentOrigin,
+            organizationId: `${scope.organizationId}:${scope.repositoryId}`,
+            installationId: scope.installationId, store: protectedStore });
+        if (trust.deviceId !== initial.deviceId || currentIdentity.publicKeyEd25519 !== identity.publicKeyEd25519)
+            immutableIdentity();
+        return { organizationId: scope.organizationId, repositoryId: scope.repositoryId,
+            deviceId: trust.deviceId, installationId: scope.installationId,
+            publicKeyEd25519: currentIdentity.publicKeyEd25519, enrollmentOrigin,
+            protectedKeyset: trust.keyset, minimumPolicyRevision: 1 };
+    };
+    const connectTransport = async (target) => requestDemoTransportContinuity(await loadBinding(readOnly), target, {
+        store: operationStore, fetcher: deps.fetcher, loadBinding: () => loadBinding(readOnly),
+        sign: async (payload) => {
+            const current = await loadOrCreateDeviceIdentity({ hqUrl: enrollmentOrigin,
+                organizationId: `${scope.organizationId}:${scope.repositoryId}`, installationId: scope.installationId, store: readOnly });
+            if (current.publicKeyEd25519 !== identity.publicKeyEd25519)
+                immutableIdentity();
+            return sign(null, Buffer.from(payload), { key: current.privateJwk, format: 'jwk' }).toString('base64url');
+        },
+    });
+    const fetcher = createDemoTransportFetcher({ store: operationStore, fetcher: deps.fetcher, loadBinding,
+        refresh: (_binding, target) => connectTransport(target) });
+    return { store: operationStore, fetcher, connectTransport };
+}
+//# sourceMappingURL=demoDeviceTransport.js.map

package/dist/demoDeviceTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoDeviceTransport.js","sourceRoot":"","sources":["../src/demoDeviceTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAA0B,MAAM,2CAA2C,CAAC;AAC/H,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAwB,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAE3E,SAAS,iBAAiB;IACxB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8FAA8F,CAAC,EAC3H,EAAE,IAAI,EAAE,kDAAkD,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,0EAA0E;AAC1E,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAsB,EACpE,OAA8D,EAAE;IAChE,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,gBAAgB,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,uBAAuB,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAsB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK;QACvF,KAAK,CAAC,GAAG,KAAK,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,KAAK,EAAE,gBAAgB;QACzE,cAAc,EAAE,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5H,MAAM,cAAc,GAAsB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK;QAC7F,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO;YAAE,iBAAiB,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACrH,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO;YAAE,iBAAiB,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClH,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,KAAK,EAAE,cAAiC,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,EAAE,KAAK,EAAE,gBAAgB;YAChF,cAAc,EAAE,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,YAAY,EAAE;YAC/D,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;YAAE,iBAAiB,EAAE,CAAC;QAC/H,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;YAC7E,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;YAC9D,gBAAgB,EAAE,eAAe,CAAC,gBAAgB,EAAE,gBAAgB;YACpE,eAAe,EAAE,KAAK,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC;IAC9D,CAAC,CAAC;IACJ,MAAM,gBAAgB,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE,CAAC,8BAA8B,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE;QACrH,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC;QACtF,IAAI,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YACpB,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,EAAE,KAAK,EAAE,gBAAgB;gBACxE,cAAc,EAAE,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5H,IAAI,OAAO,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;gBAAE,iBAAiB,EAAE,CAAC;YAChF,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5G,CAAC;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,0BAA0B,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW;QACpG,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7D,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC9D,CAAC"}

package/dist/demoDeviceTransport.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=demoDeviceTransport.test.d.ts.map

package/dist/demoDeviceTransport.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoDeviceTransport.test.d.ts","sourceRoot":"","sources":["../src/demoDeviceTransport.test.ts"],"names":[],"mappings":""}

package/dist/demoDeviceTransport.test.js

@@ -0,0 +1,178 @@
+import assert from 'node:assert/strict';
+import { generateKeyPairSync } from 'node:crypto';
+import { mkdtemp, readFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { resolve } from 'node:path';
+import test from 'node:test';
+import { canonicalize, sha256, signCanonicalObject } from '@dharma-ai-labs/agent-fabric-contracts';
+import { connectDemoDevice, scopePath, verifyDemoDevice } from './demoEnrollment.js';
+import { createDemoDeviceTransport } from './demoDeviceTransport.js';
+import { acceptDemoTransport } from './demoTransportState.js';
+async function fixture(t) {
+    const stateRoot = await mkdtemp(resolve(tmpdir(), 'dharma-device-transport-'));
+    t.after(() => rm(stateRoot, { recursive: true, force: true }));
+    const scope = { hqUrl: 'https://original.example', organizationId: 'org_fixture',
+        repositoryId: '10000000-0000-4000-8000-000000000001', normalizedRepository: 'github.com/example/private',
+        installationId: '40000000-0000-4000-8000-000000000001', stateRoot };
+    const deviceId = '30000000-0000-4000-8000-000000000001', signer = generateKeyPairSync('ed25519');
+    const issuedAt = new Date(Date.now() - 60_000).toISOString(), expiresAt = new Date(Date.now() + 24 * 60 * 60_000).toISOString();
+    const unsigned = { schema: 'dharma.server-signing-keyset/v1', organizationId: scope.organizationId,
+        generation: 1, signedByKeyVersion: 'original', issuedAt, expiresAt,
+        keys: [{ keyVersion: 'original', publicKeyEd25519: signer.publicKey.export({ format: 'jwk' }).x,
+                status: 'active', notBefore: issuedAt, notAfter: expiresAt }] };
+    const keyset = { ...unsigned, signature: signCanonicalObject(unsigned, signer.privateKey) };
+    const values = new Map();
+    const store = { backend: 'linux-secret-service',
+        async get(account) { return values.get(account) ?? null; },
+        async getFresh(account) { return values.get(account) ?? null; },
+        async put(account, value) { values.set(account, value); },
+        async delete(account) { values.delete(account); } };
+    const calls = [];
+    const fetcher = async (resource) => {
+        const url = new URL(String(resource));
+        calls.push(url.toString());
+        if (url.pathname.endsWith('/enrollments'))
+            return Response.json({ ok: true, status: 'pending',
+                organizationId: scope.organizationId, repositoryId: scope.repositoryId, deviceCode: 'B'.repeat(43),
+                expiresAt: new Date(Date.now() + 60_000).toISOString(), verificationUri: `${scope.hqUrl}/demo/fabric/approve?orgId=${scope.organizationId}&repositoryId=${scope.repositoryId}&code=ABCDEF0123456789ABCD` }, { status: 202 });
+        if (url.pathname.endsWith('/poll'))
+            return Response.json({ ok: true, status: 'approved', deviceId,
+                repositoryId: scope.repositoryId, serverPublicKeyEd25519: unsigned.keys[0].publicKeyEd25519, serverSigningKeyset: keyset });
+        return Response.json({ ok: true, organizationId: scope.organizationId, repositoryId: scope.repositoryId,
+            deviceId, normalizedRepository: scope.normalizedRepository });
+    };
+    await connectDemoDevice({ ...scope, grant: 'A'.repeat(43), deviceName: 'Fixture', platform: 'linux', maximumWaitMs: 1000 }, { store, fetcher });
+    calls.length = 0;
+    const config = JSON.parse(await readFile(scopePath(scope, scope.hqUrl), 'utf8'));
+    const binding = { organizationId: scope.organizationId, repositoryId: scope.repositoryId, deviceId,
+        installationId: scope.installationId, publicKeyEd25519: config.publicKeyEd25519,
+        enrollmentOrigin: scope.hqUrl, protectedKeyset: keyset, minimumPolicyRevision: 1 };
+    const target = 'https://corrected.example', now = new Date();
+    const body = { schema: 'dharma.demo-transport-continuity/v1', purpose: 'same-authority-repository-transport',
+        organizationId: binding.organizationId, repositoryId: binding.repositoryId, deviceId,
+        installationId: binding.installationId, publicKeyEd25519: binding.publicKeyEd25519,
+        enrollmentOrigin: scope.hqUrl, transportOrigin: target, requestNonce: 'N'.repeat(32), policyRevision: 2,
+        trustGeneration: 1, installedKeysetHash: sha256(canonicalize(keyset)), signingKeyVersion: 'original',
+        issuedAt: now.toISOString(), expiresAt: new Date(now.getTime() + 600_000).toISOString() };
+    return { scope, store, fetcher, calls, values, config, binding, target,
+        issue: async (resource, init) => {
+            calls.push(String(resource));
+            const request = JSON.parse(String(init?.body)), now = new Date();
+            const issued = { ...body, ...request, issuedAt: now.toISOString(), expiresAt: new Date(now.getTime() + 600_000).toISOString() };
+            const correlationId = new Headers(init?.headers).get('x-dharma-correlation-id');
+            return Response.json({ ok: true, certificate: { ...issued, signature: signCanonicalObject(issued, signer.privateKey) },
+                duplicate: false, correlationId }, { headers: { 'x-dharma-correlation-id': correlationId } });
+        },
+        shortCertificate: () => {
+            const issued = { ...body, expiresAt: new Date(Date.now() + 30_000).toISOString() };
+            return { ...issued, signature: signCanonicalObject(issued, signer.privateKey) };
+        },
+        certificate: { ...body, signature: signCanonicalObject(body, signer.privateKey) } };
+}
+test('enrolled status resolves the new transport under original config/key accounts and keeps its sequence', async (t) => {
+    const f = await fixture(t), enrollmentRecords = new Map(f.values);
+    await acceptDemoTransport(f.certificate, f.binding, { transportOrigin: f.target, requestNonce: f.certificate.requestNonce }, { store: f.store });
+    const deps = await createDemoDeviceTransport(f.scope, { store: f.store, fetcher: f.fetcher });
+    await verifyDemoDevice(f.scope, deps);
+    assert.equal(f.calls.length, 1);
+    assert.equal(new URL(f.calls[0]).origin, f.target);
+    const config = JSON.parse(await readFile(scopePath(f.scope, f.scope.hqUrl), 'utf8'));
+    for (const field of ['hqUrl', 'deviceId', 'installationId', 'publicKeyEd25519', 'enrolledAt'])
+        assert.equal(config[field], f.config[field]);
+    assert.equal(config.nextSequence, f.config.nextSequence + 1);
+    for (const [account, value] of enrollmentRecords)
+        assert.equal(f.values.get(account), value);
+});
+test('ordinary unmapped status keeps its original origin and signing behavior', async (t) => {
+    const f = await fixture(t), before = [...f.values];
+    await verifyDemoDevice(f.scope, await createDemoDeviceTransport(f.scope, { store: f.store, fetcher: f.fetcher }));
+    assert.equal(new URL(f.calls[0]).origin, f.scope.hqUrl);
+    assert.deepEqual([...f.values], before);
+});
+test('a missing or corrupted enrolled identity never generates a replacement', async (t) => {
+    const f = await fixture(t);
+    const identityAccount = [...f.values].find(([, value]) => value.includes('"d":'))[0];
+    for (const value of [null, 'corrupted']) {
+        if (value === null)
+            f.values.delete(identityAccount);
+        else
+            f.values.set(identityAccount, value);
+        const before = [...f.values];
+        await assert.rejects(createDemoDeviceTransport(f.scope, { store: f.store, fetcher: f.fetcher }));
+        assert.deepEqual([...f.values], before);
+    }
+    assert.equal(f.calls.length, 0);
+});
+test('operation dependencies prohibit replacement of the original identity while retaining trust-update capability', async (t) => {
+    const f = await fixture(t), before = [...f.values];
+    const identityAccount = [...f.values].find(([, value]) => value.includes('"d":'))[0];
+    const deps = await createDemoDeviceTransport(f.scope, { store: f.store, fetcher: f.fetcher });
+    await assert.rejects(deps.store.put(identityAccount, 'replacement'), /existing_protected_state_required/);
+    await assert.rejects(deps.store.delete(identityAccount), /existing_protected_state_required/);
+    assert.deepEqual([...f.values], before);
+});
+test('lost status responses resume the same original pending request after transport setup restarts', async (t) => {
+    const f = await fixture(t), before = new Map(f.values), sequences = [];
+    await acceptDemoTransport(f.certificate, f.binding, { transportOrigin: f.target, requestNonce: f.certificate.requestNonce }, { store: f.store });
+    let lost = false;
+    const network = async (resource, init) => {
+        assert.equal(new URL(String(resource)).origin, f.target);
+        sequences.push(new Headers(init?.headers).get('x-dharma-sequence'));
+        const response = await f.fetcher(resource, init);
+        if (!lost) {
+            lost = true;
+            throw new TypeError('Fixture response lost after acceptance');
+        }
+        return response;
+    };
+    await assert.rejects(verifyDemoDevice(f.scope, await createDemoDeviceTransport(f.scope, { store: f.store, fetcher: network })), /response lost/);
+    const pendingPath = `${scopePath(f.scope, f.scope.hqUrl)}.pending-status.json`;
+    const pending = JSON.parse(await readFile(pendingPath, 'utf8'));
+    assert.equal(new URL(pending.url).origin, f.scope.hqUrl);
+    await verifyDemoDevice(f.scope, await createDemoDeviceTransport(f.scope, { store: f.store, fetcher: network }));
+    assert.deepEqual(sequences, [String(f.config.nextSequence), String(f.config.nextSequence)]);
+    const after = JSON.parse(await readFile(scopePath(f.scope, f.scope.hqUrl), 'utf8'));
+    assert.equal(after.nextSequence, f.config.nextSequence + 1);
+    for (const [account, value] of before)
+        assert.equal(f.values.get(account), value);
+    await assert.rejects(readFile(pendingPath), { code: 'ENOENT' });
+});
+test('grant-free issuance cannot consume the business sequence, and pending status resumes unchanged', async (t) => {
+    const f = await fixture(t), before = new Map(f.values), sequences = [];
+    let lost = true;
+    const network = async (resource, init) => {
+        if (String(resource).includes('/transport-continuity'))
+            return f.issue(resource, init);
+        sequences.push(new Headers(init?.headers).get('x-dharma-sequence'));
+        if (lost) {
+            lost = false;
+            throw new TypeError('Fixture status response lost');
+        }
+        return f.fetcher(resource, init);
+    };
+    await assert.rejects(verifyDemoDevice(f.scope, await createDemoDeviceTransport(f.scope, { store: f.store, fetcher: network })), /response lost/);
+    const pendingPath = `${scopePath(f.scope, f.scope.hqUrl)}.pending-status.json`;
+    const pendingBefore = await readFile(pendingPath, 'utf8');
+    const deps = await createDemoDeviceTransport(f.scope, { store: f.store, fetcher: network });
+    await deps.connectTransport(f.target);
+    assert.equal(await readFile(pendingPath, 'utf8'), pendingBefore);
+    assert.equal(JSON.parse(await readFile(scopePath(f.scope, f.scope.hqUrl), 'utf8')).nextSequence, f.config.nextSequence);
+    await verifyDemoDevice(f.scope, deps);
+    assert.deepEqual(sequences, [String(f.config.nextSequence), String(f.config.nextSequence)]);
+    assert.equal(JSON.parse(await readFile(scopePath(f.scope, f.scope.hqUrl), 'utf8')).nextSequence, f.config.nextSequence + 1);
+    for (const [account, value] of before)
+        assert.equal(f.values.get(account), value);
+});
+test('routine status refreshes near-expiry transport autonomously before unchanged signed work', async (t) => {
+    const f = await fixture(t), before = new Map(f.values);
+    await acceptDemoTransport(f.shortCertificate(), f.binding, { transportOrigin: f.target, requestNonce: f.certificate.requestNonce }, { store: f.store });
+    const network = (resource, init) => String(resource).includes('/transport-continuity') ? f.issue(resource, init) : f.fetcher(resource, init);
+    await verifyDemoDevice(f.scope, await createDemoDeviceTransport(f.scope, { store: f.store, fetcher: network }));
+    assert.equal(f.calls.length, 2);
+    assert.ok(f.calls[0].includes('/transport-continuity'));
+    assert.ok(f.calls[1].includes('/status'));
+    assert.equal(JSON.parse(await readFile(scopePath(f.scope, f.scope.hqUrl), 'utf8')).nextSequence, f.config.nextSequence + 1);
+    for (const [account, value] of before)
+        assert.equal(f.values.get(account), value);
+});
+//# sourceMappingURL=demoDeviceTransport.test.js.map

package/dist/demoDeviceTransport.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoDeviceTransport.test.js","sourceRoot":"","sources":["../src/demoDeviceTransport.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,IAA0B,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAEnG,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,KAAK,UAAU,OAAO,CAAC,CAAc;IACnC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,0BAA0B,EAAE,cAAc,EAAE,aAAa;QAC9E,YAAY,EAAE,sCAAsC,EAAE,oBAAoB,EAAE,4BAA4B;QACxG,cAAc,EAAE,sCAAsC,EAAE,SAAS,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAG,sCAAsC,EAAE,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAChI,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,iCAA0C,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;QACzG,UAAU,EAAE,CAAC,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS;QAClE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAE;gBAC9F,MAAM,EAAE,QAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC7E,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;IAC5F,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,KAAK,GAAsB,EAAE,OAAO,EAAE,sBAAsB;QAChE,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAiB,KAAK,EAAC,QAAQ,EAAC,EAAE;QAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS;gBAC3F,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClG,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,eAAe,EACrE,GAAG,KAAK,CAAC,KAAK,8BAA8B,KAAK,CAAC,cAAc,iBAAiB,KAAK,CAAC,YAAY,4BAA4B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACxJ,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ;gBAC/F,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,sBAAsB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/H,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;YACrG,QAAQ,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC;IACF,MAAM,iBAAiB,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAChJ,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ;QAChG,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QAC/E,gBAAgB,EAAE,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,2BAA2B,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,qCAAqC,EAAE,OAAO,EAAE,qCAAqC;QAC1G,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ;QACpF,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAClF,gBAAgB,EAAE,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC;QACvG,eAAe,EAAE,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU;QACpG,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAC5F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;QACpE,KAAK,EAAE,KAAK,EAAE,QAAqC,EAAE,IAAkB,EAAE,EAAE;YACzE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACjE,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAChI,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAE,CAAC;YACjF,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE;gBACpH,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,yBAAyB,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,gBAAgB,EAAE,GAAG,EAAE;YACrB,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACnF,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAClF,CAAC;QACD,WAAW,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;AACxF,CAAC;AAED,IAAI,CAAC,sGAAsG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACrH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,mBAAmB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAChD,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9F,MAAM,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACrF,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5I,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,iBAAiB;QAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACxF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,yBAAyB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClH,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACvF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;QACxC,IAAI,KAAK,KAAK,IAAI;YAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;;YAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjG,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8GAA8G,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC7H,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9F,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,EAAE,mCAAmC,CAAC,CAAC;IAC1G,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,mCAAmC,CAAC,CAAC;IAC9F,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+FAA+F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC9G,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,GAAa,EAAE,CAAC;IACjF,MAAM,mBAAmB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAChD,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/F,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,OAAO,GAAiB,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACzD,SAAS,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAE,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;YAAC,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;QAAC,CAAC;QAC1F,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAC3C,MAAM,yBAAyB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACpG,MAAM,WAAW,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,yBAAyB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAChH,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM;QAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAClF,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,gGAAgG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC/G,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,GAAa,EAAE,CAAC;IACjF,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,MAAM,OAAO,GAAiB,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACrD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvF,SAAS,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAE,CAAC,CAAC;QACrE,IAAI,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,KAAK,CAAC;YAAC,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAAC,CAAC;QAChF,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,yBAAyB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACjJ,MAAM,WAAW,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC;IAC/E,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxH,MAAM,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;IAC5H,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM;QAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;AACpF,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,0FAA0F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACzG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,EACvD,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3J,MAAM,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,yBAAyB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAChH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACrG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;IAC5H,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM;QAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;AACpF,CAAC,CAAC,CAAC"}

package/dist/demoTransportCommand.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=demoTransportCommand.test.d.ts.map

package/dist/demoTransportCommand.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoTransportCommand.test.d.ts","sourceRoot":"","sources":["../src/demoTransportCommand.test.ts"],"names":[],"mappings":""}

package/dist/demoTransportCommand.test.js

@@ -0,0 +1,28 @@
+import assert from 'node:assert/strict';
+import { execFile } from 'node:child_process';
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { resolve } from 'node:path';
+import test from 'node:test';
+import { promisify } from 'node:util';
+import { run } from './index.js';
+const exec = promisify(execFile);
+test('transport recovery dry-run verifies repository and target without issuing grants or keys', async (t) => {
+    const workspace = await mkdtemp(resolve(tmpdir(), 'dharma-transport-command-'));
+    t.after(() => rm(workspace, { recursive: true, force: true }));
+    await exec('git', ['init', '-q', workspace]);
+    await exec('git', ['-C', workspace, 'remote', 'add', 'origin', 'https://github.com/fixture/showcase.git']);
+    const args = ['demo', 'transport-connect', '--hq-url', 'https://original.example', '--organization-id', 'org_fixture',
+        '--repository-id', '10000000-0000-4000-8000-000000000001', '--normalized-repository', 'github.com/fixture/showcase',
+        '--workspace', workspace, '--dry-run'];
+    await assert.rejects(run(args), /transport-origin/);
+    for (const target of ['http://corrected.example', 'https://corrected.example/', 'https://original.example']) {
+        await assert.rejects(run([...args, '--transport-origin', target]), /target_invalid/);
+    }
+    assert.deepEqual(await run([...args, '--transport-origin', 'https://corrected.example']), {
+        ok: true, stage: 'demo_transport_plan', organizationId: 'org_fixture',
+        repositoryId: '10000000-0000-4000-8000-000000000001', normalizedRepository: 'github.com/fixture/showcase',
+        workspaceVerified: true, repositoryPackageState: 'not_connected', transportOrigin: 'https://corrected.example'
+    });
+});
+//# sourceMappingURL=demoTransportCommand.test.js.map

package/dist/demoTransportCommand.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoTransportCommand.test.js","sourceRoot":"","sources":["../src/demoTransportCommand.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AACjC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC,IAAI,CAAC,0FAA0F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACzG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7C,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,yCAAyC,CAAC,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE,UAAU,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,aAAa;QACnH,iBAAiB,EAAE,sCAAsC,EAAE,yBAAyB,EAAE,6BAA6B;QACnH,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACzC,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACpD,KAAK,MAAM,MAAM,IAAI,CAAC,0BAA0B,EAAE,4BAA4B,EAAE,0BAA0B,CAAC,EAAE,CAAC;QAC5G,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,oBAAoB,EAAE,2BAA2B,CAAC,CAAC,EAAE;QACxF,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,aAAa;QACrE,YAAY,EAAE,sCAAsC,EAAE,oBAAoB,EAAE,6BAA6B;QACzG,iBAAiB,EAAE,IAAI,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,EAAE,2BAA2B;KAAE,CAAC,CAAC;AACtH,CAAC,CAAC,CAAC"}