@dharma-ai-labs/agent-fabric 0.2.208 → 0.2.210

package/dist/codexSigningRecoveryNativeHost.test.js

@@ -0,0 +1,475 @@
+import assert from 'node:assert/strict';
+import { createHash, generateKeyPairSync } from 'node:crypto';
+import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import test from 'node:test';
+import { fileURLToPath } from 'node:url';
+import { canonicalize, parseDeviceSigningRecoveryPreparation, sealDeviceSigningRecoveryDelivery, signCanonicalObject, validateContract } from '@dharma-ai-labs/agent-fabric-contracts';
+import * as cli from './index.js';
+const NOW = Date.parse('2030-01-01T00:00:00.000Z');
+const id = (n) => `d1000000-0000-4000-8000-${String(n).padStart(12, '0')}`;
+const hash = (value) => 'sha256:' + createHash('sha256').update(value).digest('hex');
+function api() {
+    const value = cli.attachCodexSigningRecoveryNativeHost;
+    assert.equal(typeof value, 'function', 'official native recovery ingress is missing');
+    return value;
+}
+async function fixture() {
+    const root = await mkdtemp(resolve(tmpdir(), 'fabric-native-recovery-')), configPath = resolve(root, 'device.json');
+    const old = generateKeyPairSync('ed25519'), device = generateKeyPairSync('ed25519'), next = generateKeyPairSync('ed25519');
+    const publicKey = (p) => p.publicKey.export({ format: 'jwk' }).x;
+    const body = { schema: 'dharma.server-signing-keyset/v1', organizationId: 'org_fixture', generation: 2,
+        keys: [{ keyVersion: 'synthetic-old', publicKeyEd25519: publicKey(old), status: 'active',
+                notBefore: new Date(NOW - 86400000).toISOString(), notAfter: new Date(NOW - 1000).toISOString() }],
+        signedByKeyVersion: 'synthetic-old', issuedAt: new Date(NOW - 86400000).toISOString(), expiresAt: new Date(NOW - 1000).toISOString() };
+    const config = { schema: 'dharma.device-config/v1', hqUrl: 'https://www.dharma-ai.io', organizationId: 'org_fixture',
+        installationId: id(1), deviceId: id(2), deviceName: 'Synthetic native ingress', platform: 'linux', publicKeyEd25519: publicKey(device),
+        serverPublicKeyEd25519: publicKey(old), serverSigningKeyset: { ...body, signature: signCanonicalObject(body, old.privateKey) },
+        relayUrl: 'wss://relay.example.invalid', enrolledAt: '2029-12-01T00:00:00.000Z', connectionMode: 'manual',
+        setupClaimReference: id(3), setupClaimRepositoryFingerprint: 'sha256:' + 'a'.repeat(64) };
+    const anchor = { schema: 'dharma.device-enrollment-anchor/v1', hqUrl: config.hqUrl, organizationId: config.organizationId,
+        deviceId: config.deviceId, devicePublicKeyEd25519: config.publicKeyEd25519, serverPublicKeyEd25519: config.serverPublicKeyEd25519,
+        serverSigningKeyset: config.serverSigningKeyset, enrolledAt: config.enrolledAt };
+    const anchorAccount = 'device-enrollment-' + hash(`${config.hqUrl}:${config.organizationId}:${config.deviceId}`).slice(7, 39);
+    const identityAccount = 'device-key-' + hash(`${config.hqUrl}:${config.organizationId}:${config.installationId}`).slice(7, 39);
+    const values = new Map([[anchorAccount, JSON.stringify(anchor)], [identityAccount, JSON.stringify(device.privateKey.export({ format: 'jwk' }))]]);
+    const reads = [], writes = [], requests = [], authorizations = [], rpc = [];
+    const lifetime = new AbortController(), scope = new AbortController(), listeners = new Set();
+    let handler, allowed = true, permission = true, network = false, threadState = 'idle', clock = NOW;
+    let offered = false, published = false, registered = false, preparation, challenge;
+    const nextBody = { ...body, generation: 3, signedByKeyVersion: 'synthetic-new', issuedAt: new Date(NOW).toISOString(),
+        expiresAt: new Date(NOW + 86400000).toISOString(), keys: [{ keyVersion: 'synthetic-new', publicKeyEd25519: publicKey(next),
+                status: 'active', notBefore: new Date(NOW).toISOString(), notAfter: new Date(NOW + 86400000).toISOString() }] };
+    const nextKeyset = { ...nextBody, signature: signCanonicalObject(nextBody, next.privateKey) };
+    let phasePolicy = (phase) => phase !== 'complete', beforeKeyRead, waitRead;
+    let fetchPolicy;
+    const store = { backend: 'linux-secret-service', get: async (name) => {
+            reads.push(name);
+            await waitRead?.(name);
+            if (name === identityAccount)
+                beforeKeyRead?.();
+            return values.get(name) ?? null;
+        },
+        getFresh: async (name) => { reads.push(name); await waitRead?.(name); if (name === identityAccount)
+            beforeKeyRead?.(); return values.get(name) ?? null; },
+        put: async (name, value) => { writes.push(name); values.set(name, value); }, delete: async () => { throw Error('FORBIDDEN_STORE_DELETE'); } };
+    const source = { organizationId: config.organizationId, workspaceId: id(4), repositoryBindingId: id(5), repositoryFingerprint: config.setupClaimRepositoryFingerprint,
+        policyRevision: 'agent-fabric-policy-v1', scopeDigest: 'sha256:' + 'b'.repeat(64), contractDigest: 'sha256:' + 'c'.repeat(64),
+        sourceGenerationId: id(6), sourceReceiptId: 'repo_consent_' + id(6), sourceRevision: 1, sourcePolicyRevision: 'repository-source-' + id(6), sourcePolicyHash: 'sha256:' + 'd'.repeat(64) };
+    const session = { organizationId: config.organizationId, workspaceId: id(4), repositoryBindingId: id(5), endpointId: id(7), membershipId: id(8),
+        deviceId: id(2), bindingId: id(9), provider: 'codex', owner: 'dharma_bridge', sessionId: 'synthetic_native_thread',
+        createdAt: new Date(NOW - 1000).toISOString(), expiresAt: new Date(NOW + 60000).toISOString(), maximumProviderCostCents: 25 };
+    const transport = { signal: lifetime.signal, close: async () => { throw Error('DO_NOT_STOP_CALLER_TRANSPORT'); },
+        onNotification: next => { listeners.add(next); return () => { listeners.delete(next); }; },
+        onToolCall: next => { assert.equal(handler, undefined); handler = next; return () => { handler = undefined; }; },
+        request: async (method, params) => {
+            rpc.push(method);
+            if (method === 'permissionProfile/list')
+                return { data: [{ id: 'dharma_bridge', allowed: permission }] };
+            if (method === 'config/read')
+                return { config: { permissions: { dharma_bridge: { filesystem: { ':minimal': 'read', ':workspace_roots': { '.': 'read' } }, network: { enabled: network } } } } };
+            if (method === 'thread/read') {
+                assert.equal(params.threadId, session.sessionId);
+                assert.equal(params.includeTurns, false);
+                return { thread: { id: session.sessionId, cwd: root, status: { type: threadState } } };
+            }
+            throw Error('NO_START_RESUME_FORK_OR_MODEL_REQUEST');
+        } };
+    const fetcher = (async (url, init) => {
+        requests.push(String(url));
+        if (fetchPolicy)
+            return fetchPolicy(String(url), init);
+        const path = new URL(String(url)).pathname;
+        assert.equal(new URL(String(url)).origin, config.hqUrl);
+        const request = JSON.parse(String(init.body));
+        if (path.endsWith('/preparations')) {
+            preparation = parseDeviceSigningRecoveryPreparation(request.preparation, request.preparation.plan, clock);
+            const { schema, planId, authority, preparedAt, expiresAt, ...bound } = preparation.plan;
+            void [schema, authority, preparedAt];
+            challenge = { ...bound, schema: 'dharma.device-signing-recovery-challenge/v1', purpose: 'expired_signing_trust_reapproval',
+                recoveryId: id(30), approvalId: id(31), credentialEncryptionPublicKey: preparation.credentialEncryptionPublicKey, candidateGeneration: 3,
+                candidateKeysetHash: hash(canonicalize(nextKeyset)), candidateRootFingerprint: hash(Buffer.from(publicKey(next), 'base64url')),
+                candidateKeyVersionFingerprint: hash(nextKeyset.signedByKeyVersion), method: 'POST', path: '/api/v1/agent-fabric/signing-recovery',
+                nonce: Buffer.alloc(32, 7).toString('base64url'), authenticator: Buffer.alloc(32, 8).toString('base64url'),
+                issuedAt: new Date(clock).toISOString(), expiresAt };
+            return Response.json({ schema: 'dharma.signing-recovery-preparation-receipt/v1', preparationId: planId,
+                organizationId: config.organizationId, recipientMembershipId: session.membershipId, deviceId: config.deviceId,
+                expiresAt, state: 'pending_browser_review', clientTrustInstalled: false, nativeSessionBinding: 'device_attested_not_verified' });
+        }
+        assert.ok(preparation && challenge);
+        const common = { schema: 'dharma.device-signing-recovery-offer-response/v1', organizationId: config.organizationId, deviceId: config.deviceId,
+            preparationId: preparation.plan.planId, ready: false, clientTrustInstalled: false };
+        if (path.endsWith('/offers/read'))
+            return Response.json(!offered ? { ...common, state: 'awaiting_browser_offer', deviceProofRegistered: false,
+                expiresAt: preparation.plan.expiresAt } : { ...common, state: registered ? 'pending_approval' : 'awaiting_device_proof', deviceProofRegistered: registered,
+                expiresAt: challenge.expiresAt, challenge });
+        if (path.endsWith('/offers/register')) {
+            registered = true;
+            return Response.json({ ...common,
+                schema: 'dharma.device-signing-recovery-offer-registration-receipt/v1', recoveryId: challenge.recoveryId, approvalId: challenge.approvalId,
+                state: 'pending_approval', deviceProofRegistered: true, expiresAt: challenge.expiresAt });
+        }
+        assert.equal(path, '/api/v1/agent-fabric/signing-recovery');
+        if (!published)
+            return new Response(null, { status: 409 });
+        const candidate = { schema: 'dharma.device-signing-recovery-candidate/v1', organizationId: config.organizationId,
+            recoveryId: challenge.recoveryId, approvalId: challenge.approvalId, keysetCanonical: canonicalize(nextKeyset), rootPublicKey: publicKey(next),
+            publication: { schema: 'dharma.signing-recovery-publication/v1', organizationId: config.organizationId, recoveryId: challenge.recoveryId,
+                generation: 3, artifactHash: 'sha256:' + 'e'.repeat(64), publishedAt: new Date(clock).toISOString() } };
+        return Response.json({ ok: true, delivery: sealDeviceSigningRecoveryDelivery(challenge, candidate, clock), clientTrustInstalled: false,
+            nativeSessionBinding: 'device_attested_not_independently_observed' });
+    });
+    const recovery = { configPath, source, session, store, fetcher, now: () => clock };
+    const input = { transport, workspace: root, recovery, operationId: id(10), hostContextId: id(11), connectionId: id(12), signal: scope.signal,
+        current: async () => allowed, authorize: async (phase) => { authorizations.push(phase); return phasePolicy(phase); } };
+    const emit = (method, turn = 'synthetic_original_turn', thread = session.sessionId) => {
+        if (thread === session.sessionId)
+            threadState = method === 'turn/started' ? 'active' : 'idle';
+        for (const listener of [...listeners])
+            listener({ method, params: { threadId: thread, turn: { id: turn, status: method === 'turn/started' ? 'inProgress' : 'completed' } } });
+    };
+    const call = async (action, patch = {}, signal = new AbortController().signal) => {
+        assert.ok(handler, 'original handler is not registered');
+        return handler({ threadId: session.sessionId, turnId: 'synthetic_original_turn',
+            callId: 'call_fixture', namespace: null, tool: 'dharma_signing_recovery', arguments: { operationId: id(10), action }, ...patch }, { signal });
+    };
+    await writeFile(configPath, JSON.stringify(config));
+    return { root, input, emit, call, reads, writes, requests, authorizations, rpc, identityAccount, scope, lifetime,
+        offer: () => { offered = true; }, publish: () => { published = true; }, configPath,
+        revoke: () => { allowed = false; }, phasePolicy: (fn) => { phasePolicy = fn; }, network: (value) => { network = value; },
+        permission: (value) => { permission = value; }, clock: (value) => { clock = value; }, beforeKey: (fn) => { beforeKeyRead = fn; },
+        waitRead: (fn) => { waitRead = fn; },
+        dropAnchor: () => { values.delete(anchorAccount); },
+        fetchPolicy: (fn) => { fetchPolicy = fn; },
+        get handlers() { return { handler: !!handler, listeners: listeners.size }; },
+        cleanup: async () => { assert.equal(resolve(root, '..'), resolve(tmpdir())); await rm(root, { recursive: true, force: true }); } };
+}
+function content(result) { const value = JSON.parse(result.contentItems[0].text); assert.doesNotMatch(JSON.stringify(value), /privateJwk|authenticator|credentialEncryption|signature|PRIVATE_CANARY/); return value; }
+test('native ingress waits for a genuine turn event, then performs actual fenced preparation and submission', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    try {
+        host = await attach(f.input);
+        assert.equal(f.reads.length, 0);
+        assert.equal(f.requests.length, 0);
+        assert.equal((await f.call('prepare')).success, false);
+        f.emit('turn/started');
+        const prepared = await f.call('prepare');
+        assert.equal(prepared.success, true);
+        const value = content(prepared);
+        assert.equal(value.turnId, 'synthetic_original_turn');
+        assert.equal(value.progress.state, 'prepared');
+        assert.equal(value.ready, false);
+        assert.equal(f.reads.includes(f.identityAccount), false);
+        const valid = await validateContract(fileURLToPath(new URL('./schemas/', import.meta.url)), 'https://schemas.dharma-ai.io/codex-signing-recovery-native-progress/v1', value);
+        assert.equal(valid.ok, true, JSON.stringify(valid));
+        const submitted = content(await f.call('submit'));
+        assert.equal(submitted.progress.state, 'awaiting_browser_offer');
+        assert.equal(submitted.progress.clientTrustInstalled, false);
+        assert.equal(f.requests.length, 1);
+        assert.equal(f.reads.filter(x => x === f.identityAccount).length, 1);
+        assert.equal((await f.call('submit')).success, false);
+        assert.equal(f.requests.length, 1);
+        f.emit('turn/completed');
+        await host.settled;
+        assert.deepEqual(f.handlers, { handler: false, listeners: 0 });
+        assert.equal(f.rpc.some(x => /start|resume|interrupt|fork/.test(x)), false);
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('foreign turns, peer tools, changed IDs and extra authorization fields have no protected effect', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        for (const patch of [{ turnId: 'other_turn' }, { threadId: 'other_thread' }, { tool: 'dharma_peer_ask' },
+            { arguments: { operationId: id(13), action: 'prepare' } }, { arguments: { operationId: id(10), action: 'prepare', approved: true } },
+            { arguments: { operationId: id(10), action: 'shell' } }, { namespace: 'foreign' }])
+            assert.equal((await f.call('prepare', patch)).success, false);
+        assert.equal(f.reads.length, 0);
+        assert.equal(f.requests.length, 0);
+        f.emit('turn/completed', 'foreign_turn', 'foreign_thread');
+        assert.equal((await f.call('prepare')).success, true);
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('each protected phase needs current owning-host authorization, never a cached approval', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        assert.equal((await f.call('prepare')).success, true);
+        f.phasePolicy(phase => phase === 'prepare');
+        assert.equal((await f.call('submit')).success, false);
+        assert.equal(f.reads.includes(f.identityAccount), false);
+        assert.equal(f.requests.length, 0);
+        f.phasePolicy(() => true);
+        assert.equal((await f.call('submit')).success, true);
+        f.phasePolicy(() => false);
+        assert.equal((await f.call('complete')).success, false);
+        assert.equal(f.requests.length, 1);
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('scope revocation during an official device-key read prevents the network request', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        await f.call('prepare');
+        f.beforeKey(f.revoke);
+        assert.equal((await f.call('submit')).success, false);
+        assert.equal(f.requests.length, 0);
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('a second native turn withdraws the adapter rather than carrying setup authority forward', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        await f.call('prepare');
+        f.emit('turn/started', 'next_turn');
+        await host.settled;
+        assert.deepEqual(f.handlers, { handler: false, listeners: 0 });
+        assert.equal(f.requests.length, 0);
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('native permission drift and expired source/session lifetime fail before private identity access', async () => {
+    const attach = api();
+    for (const change of ['network', 'profile', 'expiry']) {
+        const f = await fixture();
+        let host;
+        try {
+            host = await attach(f.input);
+            f.emit('turn/started');
+            await f.call('prepare');
+            if (change === 'network')
+                f.network(true);
+            if (change === 'profile')
+                f.permission(false);
+            if (change === 'expiry')
+                f.clock(NOW + 60001);
+            assert.equal((await f.call('submit')).success, false);
+            assert.equal(f.reads.includes(f.identityAccount), false);
+            assert.equal(f.requests.length, 0);
+        }
+        finally {
+            await host?.close();
+            await f.cleanup();
+        }
+    }
+});
+test('cancellation of an owned submission settles a noncooperative response without retry or secret output', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    let entered;
+    const started = new Promise(r => { entered = r; });
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        await f.call('prepare');
+        f.fetchPolicy(async () => { entered(); return new Promise(() => { }); });
+        const controller = new AbortController(), pending = f.call('submit', {}, controller.signal);
+        await started;
+        controller.abort();
+        const result = await pending;
+        assert.equal(result.success, false);
+        content(result);
+        await host.settled;
+        assert.equal(f.requests.length, 1);
+        assert.deepEqual(f.handlers, { handler: false, listeners: 0 });
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('native ingress refuses cooperative/foreign bindings and unsafe profiles before registering a handler', async () => {
+    const attach = api();
+    for (const change of ['owner', 'source', 'profile']) {
+        const f = await fixture();
+        try {
+            if (change === 'owner')
+                f.input.recovery.session.owner = 'cooperative_session';
+            if (change === 'source')
+                f.input.recovery.source.workspaceId = id(99);
+            if (change === 'profile')
+                f.network(true);
+            await assert.rejects(attach(f.input));
+            assert.deepEqual(f.handlers, { handler: false, listeners: 0 });
+            assert.equal(f.reads.length, 0);
+        }
+        finally {
+            await f.cleanup();
+        }
+    }
+});
+test('uncertain submission status retains the actual client disposition and cannot be silently replayed', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        await f.call('prepare');
+        f.fetchPolicy(async () => new Response(null, { status: 500 }));
+        assert.equal((await f.call('submit')).success, false);
+        assert.equal(content(await f.call('status')).progress.state, 'submission_unconfirmed');
+        assert.equal((await f.call('submit')).success, false);
+        assert.equal(f.requests.length, 1);
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('non-string actions and accessor-bearing tool arguments are rejected without coercion or protected access', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    let coercions = 0;
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        const action = { toString() { coercions++; return 'prepare'; } };
+        assert.equal((await f.call('prepare', { arguments: { operationId: id(10), action } })).success, false);
+        const args = { operationId: id(10), get action() { coercions++; return 'prepare'; } };
+        assert.equal((await f.call('prepare', { arguments: args })).success, false);
+        assert.equal(coercions, 0);
+        assert.equal(f.reads.length, 0);
+        assert.equal(f.requests.length, 0);
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('closing waits for an already admitted noncooperative key read and permits no subsequent network effect', async () => {
+    const attach = api(), f = await fixture();
+    let host, release, entered;
+    const started = new Promise(r => { entered = r; }), blocked = new Promise(r => { release = r; });
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        await f.call('prepare');
+        f.waitRead(async (name) => { if (name === f.identityAccount) {
+            entered();
+            await blocked;
+        } });
+        const pending = f.call('submit');
+        await started;
+        assert.equal((await f.call('status')).success, false);
+        let settled = false;
+        const closing = host.close().then(() => { settled = true; });
+        await new Promise(r => setImmediate(r));
+        assert.equal(settled, false);
+        release();
+        assert.equal((await pending).success, false);
+        await closing;
+        assert.equal(settled, true);
+        assert.equal(f.requests.length, 0);
+        assert.deepEqual(f.handlers, { handler: false, listeners: 0 });
+    }
+    finally {
+        release?.();
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('a consumed operation cannot be reattached and a terminal event without a start cannot bind a later turn', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        await f.call('prepare');
+        f.emit('turn/completed');
+        await host.settled;
+        await assert.rejects(attach(f.input));
+        assert.deepEqual(f.handlers, { handler: false, listeners: 0 });
+        host = await attach({ ...f.input, operationId: id(20) });
+        f.emit('turn/completed');
+        await host.settled;
+        assert.deepEqual(f.handlers, { handler: false, listeners: 0 });
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('failed preparation cannot repeat protected-anchor access inside the same native operation', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        f.dropAnchor();
+        assert.equal((await f.call('prepare')).success, false);
+        const reads = f.reads.length;
+        assert.ok(reads > 0);
+        assert.equal((await f.call('prepare')).success, false);
+        assert.equal(f.reads.length, reads);
+        assert.equal(f.requests.length, 0);
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+test('all four phases connect to the actual client while owner publication admission and readiness stay separate', async () => {
+    const attach = api(), f = await fixture();
+    let host;
+    try {
+        host = await attach(f.input);
+        f.emit('turn/started');
+        await f.call('prepare');
+        await f.call('submit');
+        f.offer();
+        const pending = content(await f.call('progress'));
+        assert.equal(pending.progress.state, 'pending_approval');
+        assert.equal((await f.call('complete')).success, false);
+        assert.equal(f.writes.length, 0);
+        f.publish();
+        f.phasePolicy(() => true);
+        const complete = content(await f.call('complete'));
+        assert.equal(complete.progress.state, 'trust_installed');
+        assert.equal(complete.progress.clientTrustInstalled, true);
+        assert.equal(complete.ready, false);
+        assert.equal(complete.threadId, 'synthetic_native_thread');
+        assert.equal(complete.turnId, 'synthetic_original_turn');
+        assert.ok(f.writes.length > 0);
+        const installed = JSON.parse(await readFile(f.configPath, 'utf8'));
+        assert.equal(installed.serverSigningKeyset.generation, 3);
+        assert.equal(installed.deviceId, id(2));
+        assert.equal(installed.installationId, id(1));
+        assert.equal(installed.setupClaimReference, id(3));
+        const count = f.requests.length;
+        assert.equal((await f.call('complete')).success, false);
+        assert.equal(f.requests.length, count);
+    }
+    finally {
+        await host?.close();
+        await f.cleanup();
+    }
+});
+//# sourceMappingURL=codexSigningRecoveryNativeHost.test.js.map

package/dist/codexSigningRecoveryNativeHost.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSigningRecoveryNativeHost.test.js","sourceRoot":"","sources":["../src/codexSigningRecoveryNativeHost.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,UAAU,EAAC,mBAAmB,EAAC,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAC,OAAO,EAAC,QAAQ,EAAC,EAAE,EAAC,SAAS,EAAC,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAC/B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AACvC,OAAO,EAAC,YAAY,EAAC,qCAAqC,EAAC,iCAAiC,EAAC,mBAAmB,EAAC,gBAAgB,EACjB,MACzG,wCAAwC,CAAC;AAIhD,OAAO,KAAK,GAAG,MAAM,YAAY,CAAC;AAElC,MAAM,GAAG,GAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACjD,MAAM,EAAE,GAAC,CAAC,CAAQ,EAAC,EAAE,CAAA,2BAA2B,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAC,GAAG,CAAC,EAAE,CAAC;AAC7E,MAAM,IAAI,GAAC,CAAC,KAAmB,EAAC,EAAE,CAAA,SAAS,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7F,SAAS,GAAG;IACV,MAAM,KAAK,GAAE,GAAyC,CAAC,oCAAoC,CAAC;IAC5F,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,EAAC,UAAU,EAAC,6CAA6C,CAAC,CAAC;IACpF,OAAO,KAAkC,CAAC;AAC5C,CAAC;AACD,KAAK,UAAU,OAAO;IACpB,MAAM,IAAI,GAAC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAC,yBAAyB,CAAC,CAAC,EAAC,UAAU,GAAC,OAAO,CAAC,IAAI,EAAC,aAAa,CAAC,CAAC;IAC7G,MAAM,GAAG,GAAC,mBAAmB,CAAC,SAAS,CAAC,EAAC,MAAM,GAAC,mBAAmB,CAAC,SAAS,CAAC,EAAC,IAAI,GAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACnH,MAAM,SAAS,GAAC,CAAC,CAAY,EAAC,EAAE,CAAA,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC,CAAC,CAAE,CAAC;IACtE,MAAM,IAAI,GAAC,EAAC,MAAM,EAAC,iCAAiC,EAAC,cAAc,EAAC,aAAa,EAAC,UAAU,EAAC,CAAC;QAC5F,IAAI,EAAC,CAAC,EAAC,UAAU,EAAC,eAAe,EAAC,gBAAgB,EAAC,SAAS,CAAC,GAAG,CAAC,EAAC,MAAM,EAAC,QAAQ;gBAC/E,SAAS,EAAC,IAAI,IAAI,CAAC,GAAG,GAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAC,QAAQ,EAAC,IAAI,IAAI,CAAC,GAAG,GAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAC,CAAC;QAC5F,kBAAkB,EAAC,eAAe,EAAC,QAAQ,EAAC,IAAI,IAAI,CAAC,GAAG,GAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAC,SAAS,EAAC,IAAI,IAAI,CAAC,GAAG,GAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAC,CAAC;IAC/H,MAAM,MAAM,GAAC,EAAC,MAAM,EAAC,yBAAyB,EAAC,KAAK,EAAC,0BAA0B,EAAC,cAAc,EAAC,aAAa;QAC1G,cAAc,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,0BAA0B,EAAC,QAAQ,EAAC,OAAO,EAAC,gBAAgB,EAAC,SAAS,CAAC,MAAM,CAAC;QAC7H,sBAAsB,EAAC,SAAS,CAAC,GAAG,CAAC,EAAC,mBAAmB,EAAC,EAAC,GAAG,IAAI,EAAC,SAAS,EAAC,mBAAmB,CAAC,IAAI,EAAC,GAAG,CAAC,UAAU,CAAC,EAAC;QACtH,QAAQ,EAAC,6BAA6B,EAAC,UAAU,EAAC,0BAA0B,EAAC,cAAc,EAAC,QAAQ;QACpG,mBAAmB,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,+BAA+B,EAAC,SAAS,GAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAC,CAAC;IACtF,MAAM,MAAM,GAAC,EAAC,MAAM,EAAC,oCAAoC,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,cAAc,EAAC,MAAM,CAAC,cAAc;QAC/G,QAAQ,EAAC,MAAM,CAAC,QAAQ,EAAC,sBAAsB,EAAC,MAAM,CAAC,gBAAgB,EAAC,sBAAsB,EAAC,MAAM,CAAC,sBAAsB;QAC5H,mBAAmB,EAAC,MAAM,CAAC,mBAAmB,EAAC,UAAU,EAAC,MAAM,CAAC,UAAU,EAAC,CAAC;IAC/E,MAAM,aAAa,GAAC,oBAAoB,GAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,CAAC;IACzH,MAAM,eAAe,GAAC,aAAa,GAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,CAAC;IAC1H,MAAM,MAAM,GAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAC,CAAC,eAAe,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1I,MAAM,KAAK,GAAU,EAAE,EAAC,MAAM,GAAU,EAAE,EAAC,QAAQ,GAAU,EAAE,EAAC,cAAc,GAAU,EAAE,EAAC,GAAG,GAAU,EAAE,CAAC;IAC3G,MAAM,QAAQ,GAAC,IAAI,eAAe,EAAE,EAAC,KAAK,GAAC,IAAI,eAAe,EAAE,EAAC,SAAS,GAAC,IAAI,GAAG,EAAyB,CAAC;IAC5G,IAAI,OAAkC,EAAC,OAAO,GAAC,IAAI,EAAC,UAAU,GAAC,IAAI,EAAC,OAAO,GAAC,KAAK,EAAC,WAAW,GAAC,MAAM,EAAC,KAAK,GAAC,GAAG,CAAC;IAC/G,IAAI,OAAO,GAAC,KAAK,EAAC,SAAS,GAAC,KAAK,EAAC,UAAU,GAAC,KAAK,EAAC,WAAsD,EAAC,SAAkD,CAAC;IAC7J,MAAM,QAAQ,GAAC,EAAC,GAAG,IAAI,EAAC,UAAU,EAAC,CAAC,EAAC,kBAAkB,EAAC,eAAe,EAAC,QAAQ,EAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QAC1G,SAAS,EAAC,IAAI,IAAI,CAAC,GAAG,GAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,UAAU,EAAC,eAAe,EAAC,gBAAgB,EAAC,SAAS,CAAC,IAAI,CAAC;gBAC/G,MAAM,EAAC,QAAiB,EAAC,SAAS,EAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAC,QAAQ,EAAC,IAAI,IAAI,CAAC,GAAG,GAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAC,CAAC,EAAC,CAAC;IACpH,MAAM,UAAU,GAAC,EAAC,GAAG,QAAQ,EAAC,SAAS,EAAC,mBAAmB,CAAC,QAAQ,EAAC,IAAI,CAAC,UAAU,CAAC,EAAC,CAAC;IACvF,IAAI,WAAW,GAAC,CAAC,KAAY,EAAC,EAAE,CAAA,KAAK,KAAG,UAAU,EAAC,aAAkC,EAAC,QAAiD,CAAC;IACxI,IAAI,WAAwE,CAAC;IAC7E,MAAM,KAAK,GAAmB,EAAC,OAAO,EAAC,sBAAsB,EAAC,GAAG,EAAC,KAAK,EAAC,IAAI,EAAA,EAAE;YAC5E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAA,MAAM,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;YAAA,IAAG,IAAI,KAAG,eAAe;gBAAC,aAAa,EAAE,EAAE,CAAC;YAAA,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAE,IAAI,CAAC;QAAA,CAAC;QACnH,QAAQ,EAAC,KAAK,EAAC,IAAI,EAAA,EAAE,GAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,MAAM,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA,IAAG,IAAI,KAAG,eAAe;YAAC,aAAa,EAAE,EAAE,CAAC,CAAA,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAE,IAAI,CAAC,CAAA,CAAC;QACzI,GAAG,EAAC,KAAK,EAAC,IAAI,EAAC,KAAK,EAAC,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,MAAM,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC,EAAC,MAAM,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC;IAC/H,MAAM,MAAM,GAAC,EAAC,cAAc,EAAC,MAAM,CAAC,cAAc,EAAC,WAAW,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,mBAAmB,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,qBAAqB,EAAC,MAAM,CAAC,+BAA+B;QACzJ,cAAc,EAAC,wBAAwB,EAAC,WAAW,EAAC,SAAS,GAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAC,cAAc,EAAC,SAAS,GAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpH,kBAAkB,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,eAAe,EAAC,eAAe,GAAC,EAAE,CAAC,CAAC,CAAC,EAAC,cAAc,EAAC,CAAC,EAAC,oBAAoB,EAAC,oBAAoB,GAAC,EAAE,CAAC,CAAC,CAAC,EAAC,gBAAgB,EAAC,SAAS,GAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAC,CAAC;IAC7K,MAAM,OAAO,GAAC,EAAC,cAAc,EAAC,MAAM,CAAC,cAAc,EAAC,WAAW,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,mBAAmB,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,YAAY,EAAC,EAAE,CAAC,CAAC,CAAC;QACjI,QAAQ,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,SAAS,EAAC,EAAE,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAC,OAAgB,EAAC,KAAK,EAAC,eAAwB,EAAC,SAAS,EAAC,yBAAyB;QAC3H,SAAS,EAAC,IAAI,IAAI,CAAC,GAAG,GAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAC,SAAS,EAAC,IAAI,IAAI,CAAC,GAAG,GAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAC,wBAAwB,EAAC,EAAE,EAAC,CAAC;IACtH,MAAM,SAAS,GAAqB,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,KAAK,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAA,CAAC;QACvH,cAAc,EAAC,IAAI,CAAA,EAAE,GAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA,OAAM,GAAE,EAAE,GAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC,CAAC,CAAA,CAAC;QAC/E,UAAU,EAAC,IAAI,CAAA,EAAE,GAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAC,SAAS,CAAC,CAAC,CAAA,OAAO,GAAC,IAAI,CAAC,CAAA,OAAM,GAAE,EAAE,GAAC,OAAO,GAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAA,CAAC;QAC/F,OAAO,EAAC,KAAK,EAAC,MAAM,EAAC,MAAM,EAAC,EAAE;YAC5B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjB,IAAG,MAAM,KAAG,wBAAwB;gBAAC,OAAO,EAAC,IAAI,EAAC,CAAC,EAAC,EAAE,EAAC,eAAe,EAAC,OAAO,EAAC,UAAU,EAAC,CAAC,EAAC,CAAC;YAC7F,IAAG,MAAM,KAAG,aAAa;gBAAC,OAAO,EAAC,MAAM,EAAC,EAAC,WAAW,EAAC,EAAC,aAAa,EAAC,EAAC,UAAU,EAAC,EAAC,UAAU,EAAC,MAAM,EAAC,kBAAkB,EAAC,EAAC,GAAG,EAAC,MAAM,EAAC,EAAC,EAAC,OAAO,EAAC,EAAC,OAAO,EAAC,OAAO,EAAC,EAAC,EAAC,EAAC,EAAC,CAAC;YACnK,IAAG,MAAM,KAAG,aAAa,EAAC,CAAC;gBAAA,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAAA,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAC,KAAK,CAAC,CAAC;gBACjH,OAAO,EAAC,MAAM,EAAC,EAAC,EAAE,EAAC,OAAO,CAAC,SAAS,EAAC,GAAG,EAAC,IAAI,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,WAAW,EAAC,EAAC,EAAC,CAAC;YAAA,CAAC;YAC7E,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACvD,CAAC,EAAC,CAAC;IACL,MAAM,OAAO,GAAC,CAAC,KAAK,EAAC,GAAsB,EAAC,IAAiB,EAAC,EAAE;QAC9D,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAAA,IAAG,WAAW;YAAC,OAAO,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAC,IAAK,CAAC,CAAC;QAChF,MAAM,IAAI,GAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChG,MAAM,OAAO,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAC,CAAC;YACjC,WAAW,GAAC,qCAAqC,CAAC,OAAO,CAAC,WAAW,EAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC;YACtG,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,SAAS,EAAC,UAAU,EAAC,SAAS,EAAC,GAAG,KAAK,EAAC,GAAC,WAAW,CAAC,IAAI,CAAC;YAAA,KAAI,CAAC,MAAM,EAAC,SAAS,EAAC,UAAU,CAAC,CAAC;YACjH,SAAS,GAAC,EAAC,GAAG,KAAK,EAAC,MAAM,EAAC,6CAA6C,EAAC,OAAO,EAAC,kCAAkC;gBACjH,UAAU,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,UAAU,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,6BAA6B,EAAC,WAAW,CAAC,6BAA6B,EAAC,mBAAmB,EAAC,CAAC;gBACjI,mBAAmB,EAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,EAAC,wBAAwB,EAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAC,WAAW,CAAC,CAAC;gBAC1H,8BAA8B,EAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,uCAAuC;gBAC7H,KAAK,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAC,aAAa,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACrG,QAAQ,EAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAC,SAAS,EAAC,CAAC;YACpD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAC,MAAM,EAAC,gDAAgD,EAAC,aAAa,EAAC,MAAM;gBAChG,cAAc,EAAC,MAAM,CAAC,cAAc,EAAC,qBAAqB,EAAC,OAAO,CAAC,YAAY,EAAC,QAAQ,EAAC,MAAM,CAAC,QAAQ;gBACxG,SAAS,EAAC,KAAK,EAAC,wBAAwB,EAAC,oBAAoB,EAAC,KAAK,EAAC,oBAAoB,EAAC,8BAA8B,EAAC,CAAC,CAAC;QAC9H,CAAC;QACD,MAAM,CAAC,EAAE,CAAC,WAAW,IAAE,SAAS,CAAC,CAAC;QAClC,MAAM,MAAM,GAAC,EAAC,MAAM,EAAC,kDAAkD,EAAC,cAAc,EAAC,MAAM,CAAC,cAAc,EAAC,QAAQ,EAAC,MAAM,CAAC,QAAQ;YACnI,aAAa,EAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAC,KAAK,EAAC,KAAK,EAAC,oBAAoB,EAAC,KAAK,EAAC,CAAC;QAChF,IAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAA,CAAC,CAAA,EAAC,GAAG,MAAM,EAAC,KAAK,EAAC,wBAAwB,EAAC,qBAAqB,EAAC,KAAK;gBAClI,SAAS,EAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAC,CAAA,CAAC,CAAA,EAAC,GAAG,MAAM,EAAC,KAAK,EAAC,UAAU,CAAA,CAAC,CAAA,kBAAkB,CAAA,CAAC,CAAA,uBAAuB,EAAC,qBAAqB,EAAC,UAAU;gBAC7I,SAAS,EAAC,SAAS,CAAC,SAAS,EAAC,SAAS,EAAC,CAAC,CAAC;QAC5C,IAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAC,CAAC;YAAA,UAAU,GAAC,IAAI,CAAC;YAAA,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAC,GAAG,MAAM;gBACnF,MAAM,EAAC,8DAA8D,EAAC,UAAU,EAAC,SAAS,CAAC,UAAU,EAAC,UAAU,EAAC,SAAS,CAAC,UAAU;gBACrI,KAAK,EAAC,kBAAkB,EAAC,qBAAqB,EAAC,IAAI,EAAC,SAAS,EAAC,SAAS,CAAC,SAAS,EAAC,CAAC,CAAC;QAAA,CAAC;QACvF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAC,uCAAuC,CAAC,CAAC;QAAA,IAAG,CAAC,SAAS;YAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAC,EAAC,MAAM,EAAC,GAAG,EAAC,CAAC,CAAC;QAChH,MAAM,SAAS,GAAgC,EAAC,MAAM,EAAC,6CAA6C,EAAC,cAAc,EAAC,MAAM,CAAC,cAAc;YACvI,UAAU,EAAC,SAAS,CAAC,UAAU,EAAC,UAAU,EAAC,SAAS,CAAC,UAAU,EAAC,eAAe,EAAC,YAAY,CAAC,UAAU,CAAC,EAAC,aAAa,EAAC,SAAS,CAAC,IAAI,CAAC;YACtI,WAAW,EAAC,EAAC,MAAM,EAAC,wCAAwC,EAAC,cAAc,EAAC,MAAM,CAAC,cAAc,EAAC,UAAU,EAAC,SAAS,CAAC,UAAU;gBAC/H,UAAU,EAAC,CAAC,EAAC,YAAY,EAAC,SAAS,GAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAC,WAAW,EAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,CAAC;QACnG,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,IAAI,EAAC,QAAQ,EAAC,iCAAiC,CAAC,SAAS,EAAC,SAAS,EAAC,KAAK,CAAC,EAAC,oBAAoB,EAAC,KAAK;YAC5H,oBAAoB,EAAC,4CAA4C,EAAC,CAAC,CAAC;IACxE,CAAC,CAAiB,CAAC;IACnB,MAAM,QAAQ,GAAkE,EAAC,UAAU,EAAC,MAAM,EAAC,OAAO,EAAC,KAAK,EAAC,OAAO,EAAC,GAAG,EAAC,GAAE,EAAE,CAAA,KAAK,EAAC,CAAC;IACxI,MAAM,KAAK,GAAC,EAAC,SAAS,EAAC,SAAS,EAAC,IAAI,EAAC,QAAQ,EAAC,WAAW,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,aAAa,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,YAAY,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM;QAC5H,OAAO,EAAC,KAAK,IAAE,EAAE,CAAA,OAAO,EAAC,SAAS,EAAC,KAAK,EAAC,KAAY,EAAC,EAAE,GAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC;IACnH,MAAM,IAAI,GAAC,CAAC,MAAa,EAAC,IAAI,GAAC,yBAAyB,EAAC,MAAM,GAAC,OAAO,CAAC,SAAS,EAAC,EAAE;QAClF,IAAG,MAAM,KAAG,OAAO,CAAC,SAAS;YAAC,WAAW,GAAC,MAAM,KAAG,cAAc,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,MAAM,CAAC;QAClF,KAAI,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC;YAAC,QAAQ,CAAC,EAAC,MAAM,EAAC,MAAM,EAAC,EAAC,QAAQ,EAAC,MAAM,EAAC,IAAI,EAAC,EAAC,EAAE,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,KAAG,cAAc,CAAA,CAAC,CAAA,YAAY,CAAA,CAAC,CAAA,WAAW,EAAC,EAAC,EAAC,CAAC,CAAC;IAC1J,CAAC,CAAC;IACF,MAAM,IAAI,GAAC,KAAK,EAAC,MAAa,EAAC,QAA6B,EAAE,EAAC,MAAM,GAAC,IAAI,eAAe,EAAE,CAAC,MAAM,EAAC,EAAE;QACnG,MAAM,CAAC,EAAE,CAAC,OAAO,EAAC,oCAAoC,CAAC,CAAC;QAAA,OAAO,OAAO,CAAC,EAAC,QAAQ,EAAC,OAAO,CAAC,SAAS,EAAC,MAAM,EAAC,yBAAyB;YACjI,MAAM,EAAC,cAAc,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,yBAAyB,EAAC,SAAS,EAAC,EAAC,WAAW,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,MAAM,EAAC,EAAC,GAAG,KAAK,EAAC,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC;IAAA,CAAC,CAAC;IACpI,MAAM,SAAS,CAAC,UAAU,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,MAAM,EAAC,QAAQ,EAAC,cAAc,EAAC,GAAG,EAAC,eAAe,EAAC,KAAK,EAAC,QAAQ;QAClG,KAAK,EAAC,GAAE,EAAE,GAAC,OAAO,GAAC,IAAI,CAAC,CAAA,CAAC,EAAC,OAAO,EAAC,GAAE,EAAE,GAAC,SAAS,GAAC,IAAI,CAAC,CAAA,CAAC,EAAC,UAAU;QAClE,MAAM,EAAC,GAAE,EAAE,GAAC,OAAO,GAAC,KAAK,CAAC,CAAA,CAAC,EAAC,WAAW,EAAC,CAAC,EAAqB,EAAC,EAAE,GAAC,WAAW,GAAC,EAAE,CAAC,CAAA,CAAC,EAAC,OAAO,EAAC,CAAC,KAAa,EAAC,EAAE,GAAC,OAAO,GAAC,KAAK,CAAC,CAAA,CAAC;QAC5H,UAAU,EAAC,CAAC,KAAa,EAAC,EAAE,GAAC,UAAU,GAAC,KAAK,CAAC,CAAA,CAAC,EAAC,KAAK,EAAC,CAAC,KAAY,EAAC,EAAE,GAAC,KAAK,GAAC,KAAK,CAAC,CAAA,CAAC,EAAC,SAAS,EAAC,CAAC,EAAW,EAAC,EAAE,GAAC,aAAa,GAAC,EAAE,CAAC,CAAA,CAAC;QACjI,QAAQ,EAAC,CAAC,EAA+B,EAAC,EAAE,GAAC,QAAQ,GAAC,EAAE,CAAC,CAAA,CAAC;QAC1D,UAAU,EAAC,GAAE,EAAE,GAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA,CAAC;QAC9C,WAAW,EAAC,CAAC,EAAkC,EAAC,EAAE,GAAC,WAAW,GAAC,EAAE,CAAC,CAAA,CAAC;QACnE,IAAI,QAAQ,KAAG,OAAO,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAC,SAAS,EAAC,SAAS,CAAC,IAAI,EAAC,CAAC,CAAA,CAAC;QACpE,OAAO,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,EAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA,MAAM,EAAE,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC;AACvH,CAAC;AACD,SAAS,OAAO,CAAC,MAAU,IAAE,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAC,wEAAwE,CAAC,CAAC,CAAA,OAAO,KAAK,CAAC,CAAA,CAAC;AAEnN,IAAI,CAAC,uGAAuG,EAAC,KAAK,IAAE,EAAE;IACpH,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAClD,IAAG,CAAC;QACF,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QACtD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAAA,MAAM,QAAQ,GAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QAClG,MAAM,KAAK,GAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAC,yBAAyB,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAC,UAAU,CAAC,CAAC;QACjI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,EAAC,KAAK,CAAC,CAAC;QACxF,MAAM,KAAK,GAAC,MAAM,gBAAgB,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,wEAAwE,EAAC,KAAK,CAAC,CAAC;QACxK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,MAAM,SAAS,GAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAC,wBAAwB,CAAC,CAAC;QAChH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,oBAAoB,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC,eAAe,CAAC,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAAA,MAAM,IAAI,CAAC,OAAO,CAAC;QAAA,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAC,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;QACrG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC;IAC3E,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gGAAgG,EAAC,KAAK,IAAE,EAAE;IAC7G,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAClD,IAAG,CAAC;QACF,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,KAAI,MAAM,KAAK,IAAI,CAAC,EAAC,MAAM,EAAC,YAAY,EAAC,EAAC,EAAC,QAAQ,EAAC,cAAc,EAAC,EAAC,EAAC,IAAI,EAAC,iBAAiB,EAAC;YAC1F,EAAC,SAAS,EAAC,EAAC,WAAW,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,MAAM,EAAC,SAAS,EAAC,EAAC,EAAC,EAAC,SAAS,EAAC,EAAC,WAAW,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,MAAM,EAAC,SAAS,EAAC,QAAQ,EAAC,IAAI,EAAC,EAAC;YACjH,EAAC,SAAS,EAAC,EAAC,WAAW,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,EAAC,EAAC,SAAS,EAAC,SAAS,EAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QACrI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAC,cAAc,EAAC,gBAAgB,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAChH,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uFAAuF,EAAC,KAAK,IAAE,EAAE;IACpG,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAClD,IAAG,CAAC;QACF,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QACvG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,KAAG,SAAS,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAC7F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAC1F,CAAC,CAAC,WAAW,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QAC5E,CAAC,CAAC,WAAW,CAAC,GAAE,EAAE,CAAA,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;IACpH,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAC,KAAK,IAAE,EAAE;IAC/F,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAClD,IAAG,CAAC;QAAA,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAAA,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAA,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;IACzF,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yFAAyF,EAAC,KAAK,IAAE,EAAE;IACtG,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAClD,IAAG,CAAC;QAAA,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAAA,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC,CAAC,IAAI,CAAC,cAAc,EAAC,WAAW,CAAC,CAAC;QAAA,MAAM,IAAI,CAAC,OAAO,CAAC;QAAA,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAC,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;QAC/G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;IACpC,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iGAAiG,EAAC,KAAK,IAAE,EAAE;IAC9G,MAAM,MAAM,GAAC,GAAG,EAAE,CAAC;IAAA,KAAI,MAAM,MAAM,IAAI,CAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,CAAC,EAAC,CAAC;QAAA,MAAM,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;QAAA,IAAI,IAAQ,CAAC;QAC1G,IAAG,CAAC;YAAA,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAAA,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5E,IAAG,MAAM,KAAG,SAAS;gBAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAA,IAAG,MAAM,KAAG,SAAS;gBAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAAA,IAAG,MAAM,KAAG,QAAQ;gBAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAC,KAAK,CAAC,CAAC;YACxH,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;YAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,EAAC,KAAK,CAAC,CAAC;YAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QACjJ,CAAC;gBAAO,CAAC;YAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;YAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAAA,CAAC;IAAA,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sGAAsG,EAAC,KAAK,IAAE,EAAE;IACnH,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAAA,IAAI,OAAiB,CAAC;IAAA,MAAM,OAAO,GAAC,IAAI,OAAO,CAAO,CAAC,CAAA,EAAE,GAAC,OAAO,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACzH,IAAG,CAAC;QAAA,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAAA,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC,CAAC,WAAW,CAAC,KAAK,IAAE,EAAE,GAAC,OAAO,EAAE,CAAC,CAAA,OAAO,IAAI,OAAO,CAAW,GAAE,EAAE,GAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAC,IAAI,eAAe,EAAE,EAAC,OAAO,GAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAC,EAAE,EAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAA,MAAM,OAAO,CAAC;QAAA,UAAU,CAAC,KAAK,EAAE,CAAC;QACtH,MAAM,MAAM,GAAC,MAAM,OAAO,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,OAAO,CAAC,MAAM,CAAC,CAAC;QAAA,MAAM,IAAI,CAAC,OAAO,CAAC;QACjG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAC,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;IAC7F,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sGAAsG,EAAC,KAAK,IAAE,EAAE;IACnH,MAAM,MAAM,GAAC,GAAG,EAAE,CAAC;IAAA,KAAI,MAAM,MAAM,IAAI,CAAC,OAAO,EAAC,QAAQ,EAAC,SAAS,CAAC,EAAC,CAAC;QAAA,MAAM,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;QAC3F,IAAG,CAAC;YAAA,IAAG,MAAM,KAAG,OAAO;gBAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAe,CAAC,KAAK,GAAC,qBAAqB,CAAC;YACpF,IAAG,MAAM,KAAG,QAAQ;gBAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,GAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,MAAM,KAAG,SAAS;gBAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAAA,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAC,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;YAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAChI,CAAC;gBAAO,CAAC;YAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAAA,CAAC;IAAA,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mGAAmG,EAAC,KAAK,IAAE,EAAE;IAChH,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAClD,IAAG,CAAC;QAAA,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAAA,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC,CAAC,WAAW,CAAC,KAAK,IAAE,EAAE,CAAA,IAAI,QAAQ,CAAC,IAAI,EAAC,EAAC,MAAM,EAAC,GAAG,EAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAC,wBAAwB,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;IACzF,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0GAA0G,EAAC,KAAK,IAAE,EAAE;IACvH,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAAA,IAAI,SAAS,GAAC,CAAC,CAAC;IAClE,IAAG,CAAC;QAAA,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,MAAM,GAAC,EAAC,QAAQ,KAAG,SAAS,EAAE,CAAC,CAAA,OAAO,SAAS,CAAC,CAAA,CAAC,EAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,EAAC,WAAW,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,MAAM,EAAC,EAAC,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAC,EAAC,WAAW,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,IAAI,MAAM,KAAG,SAAS,EAAE,CAAC,CAAA,OAAO,SAAS,CAAC,CAAA,CAAC,EAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAC,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;IAC7F,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wGAAwG,EAAC,KAAK,IAAE,EAAE;IACrH,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,EAAC,OAAiB,EAAC,OAAiB,CAAC;IACtF,MAAM,OAAO,GAAC,IAAI,OAAO,CAAO,CAAC,CAAA,EAAE,GAAC,OAAO,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,EAAC,OAAO,GAAC,IAAI,OAAO,CAAO,CAAC,CAAA,EAAE,GAAC,OAAO,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IAC5F,IAAG,CAAC;QAAA,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAAA,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAC,IAAI,EAAA,EAAE,GAAC,IAAG,IAAI,KAAG,CAAC,CAAC,eAAe,EAAC,CAAC;YAAA,OAAO,EAAE,CAAC;YAAA,MAAM,OAAO,CAAC;QAAA,CAAC,CAAA,CAAC,CAAC,CAAC;QACjF,MAAM,OAAO,GAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAA,MAAM,OAAO,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QACrD,IAAI,OAAO,GAAC,KAAK,CAAC;QAAA,MAAM,OAAO,GAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAE,EAAE,GAAC,OAAO,GAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC;QACvE,MAAM,IAAI,OAAO,CAAO,CAAC,CAAA,EAAE,CAAA,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QACxE,OAAO,EAAE,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,OAAO,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QAC/F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAC,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;IAC7F,CAAC;YAAO,CAAC;QAAA,OAAO,EAAE,EAAE,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yGAAyG,EAAC,KAAK,IAAE,EAAE;IACtH,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAClD,IAAG,CAAC;QAAA,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAAA,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAAA,MAAM,IAAI,CAAC,OAAO,CAAC;QACxH,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAC,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;QAC/F,IAAI,GAAC,MAAM,MAAM,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAC,WAAW,EAAC,EAAE,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAAA,MAAM,IAAI,CAAC,OAAO,CAAC;QAC/F,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAC,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;IAC3D,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2FAA2F,EAAC,KAAK,IAAE,EAAE;IACxG,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAClD,IAAG,CAAC;QAAA,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAAA,CAAC,CAAC,UAAU,EAAE,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,KAAK,GAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QAAA,MAAM,CAAC,EAAE,CAAC,KAAK,GAAC,CAAC,CAAC,CAAC;QACpG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;IAC7H,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4GAA4G,EAAC,KAAK,IAAE,EAAE;IACzH,MAAM,MAAM,GAAC,GAAG,EAAE,EAAC,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,IAAQ,CAAC;IAClD,IAAG,CAAC;QAAA,IAAI,GAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAA,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAA,CAAC,CAAC,KAAK,EAAE,CAAC;QACzD,MAAM,OAAO,GAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAC,kBAAkB,CAAC,CAAC;QACxG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC,OAAO,EAAE,CAAC;QAAA,CAAC,CAAC,WAAW,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAC,iBAAiB,CAAC,CAAC;QACzG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,EAAC,IAAI,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAC,KAAK,CAAC,CAAC;QAC7F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAC,yBAAyB,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAC,yBAAyB,CAAC,CAAC;QAClH,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAC,CAAC,CAAC,CAAC;QAAA,MAAM,SAAS,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,CAAC,UAAU,EAAC,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAC,KAAK,CAAC,CAAC;IAC7H,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAClD,CAAC,CAAC,CAAC"}

package/dist/codexSigningRecoveryTool.d.ts

@@ -0,0 +1,25 @@
+import type { CodexAppServerTransport } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-session';
+export declare const CODEX_SIGNING_RECOVERY_TOOL: Readonly<{
+    type: "function";
+    name: "dharma_signing_recovery";
+    description: "Request a separately authorized phase on the original owning-host signing-recovery operation. Browser consent/publication stay separate; trust installation is not readiness. No shell, enrollment or provider authority.";
+    inputSchema: Readonly<{
+        type: "object";
+        additionalProperties: false;
+        properties: Readonly<{
+            operationId: Readonly<{
+                type: "string";
+                format: "uuid";
+            }>;
+            action: Readonly<{
+                enum: readonly string[];
+            }>;
+        }>;
+        required: readonly string[];
+    }>;
+}>;
+export declare const CODEX_SIGNING_RECOVERY_TOOL_HASH: string;
+export declare function recordNamedCodexRecoveryToolDeclaration(transport: CodexAppServerTransport, threadId: string): void;
+/** Original verified start request only, not a claim about model-facing use. */
+export declare function inspectNamedCodexRecoveryToolDeclaration(transport: CodexAppServerTransport, threadId: string): string | null;
+//# sourceMappingURL=codexSigningRecoveryTool.d.ts.map

package/dist/codexSigningRecoveryTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSigningRecoveryTool.d.ts","sourceRoot":"","sources":["../src/codexSigningRecoveryTool.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,2EAA2E,CAAC;AAIvH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;EAKgB,CAAC;AACzD,eAAO,MAAM,gCAAgC,QACqB,CAAC;AAGnE,wBAAgB,uCAAuC,CAAC,SAAS,EAAC,uBAAuB,EAAC,QAAQ,EAAC,MAAM,QAExG;AACD,gFAAgF;AAChF,wBAAgB,wCAAwC,CAAC,SAAS,EAAC,uBAAuB,EAAC,QAAQ,EAAC,MAAM,iBAEzG"}

package/dist/codexSigningRecoveryTool.js

@@ -0,0 +1,24 @@
+import { createHash } from 'node:crypto';
+import { canonicalize } from '@dharma-ai-labs/agent-fabric-contracts';
+// A declaration is not authority. The original owner separately admits one
+// operation, binds the actual native turn and rechecks every protected phase.
+export const CODEX_SIGNING_RECOVERY_TOOL = Object.freeze({ type: 'function', name: 'dharma_signing_recovery',
+    description: 'Request a separately authorized phase on the original owning-host signing-recovery operation. Browser consent/publication stay separate; trust installation is not readiness. No shell, enrollment or provider authority.',
+    inputSchema: Object.freeze({ type: 'object', additionalProperties: false, properties: Object.freeze({
+            operationId: Object.freeze({ type: 'string', format: 'uuid' }),
+            action: Object.freeze({ enum: Object.freeze(['prepare', 'submit', 'progress', 'complete', 'status']) })
+        }),
+        required: Object.freeze(['operationId', 'action']) }) });
+export const CODEX_SIGNING_RECOVERY_TOOL_HASH = 'sha256:' + createHash('sha256')
+    .update(canonicalize(CODEX_SIGNING_RECOVERY_TOOL)).digest('hex');
+const declarations = new WeakMap();
+export function recordNamedCodexRecoveryToolDeclaration(transport, threadId) {
+    const threads = declarations.get(transport) ?? new Set();
+    threads.add(threadId);
+    declarations.set(transport, threads);
+}
+/** Original verified start request only, not a claim about model-facing use. */
+export function inspectNamedCodexRecoveryToolDeclaration(transport, threadId) {
+    return declarations.get(transport)?.has(threadId) ? CODEX_SIGNING_RECOVERY_TOOL_HASH : null;
+}
+//# sourceMappingURL=codexSigningRecoveryTool.js.map

package/dist/codexSigningRecoveryTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSigningRecoveryTool.js","sourceRoot":"","sources":["../src/codexSigningRecoveryTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,YAAY,EAAC,MAAM,wCAAwC,CAAC;AAGpE,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,2BAA2B,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,IAAI,EAAC,yBAAyB;IACpG,WAAW,EAAC,2NAA2N;IACvO,WAAW,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,oBAAoB,EAAC,KAAK,EAAC,UAAU,EAAC,MAAM,CAAC,MAAM,CAAC;YAC3F,WAAW,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC;YACxD,MAAM,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAC,QAAQ,EAAC,UAAU,EAAC,UAAU,EAAC,QAAQ,CAAC,CAAC,EAAC,CAAC;SAAC,CAAC;QACjG,QAAQ,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAC,QAAQ,CAAC,CAAC,EAAC,CAAC,EAAC,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,gCAAgC,GAAC,SAAS,GAAC,UAAU,CAAC,QAAQ,CAAC;KACzE,MAAM,CAAC,YAAY,CAAC,2BAA2B,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnE,MAAM,YAAY,GAAC,IAAI,OAAO,EAAuC,CAAC;AACtE,MAAM,UAAU,uCAAuC,CAAC,SAAiC,EAAC,QAAe;IACvG,MAAM,OAAO,GAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAE,IAAI,GAAG,EAAU,CAAC;IAAA,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAAA,YAAY,CAAC,GAAG,CAAC,SAAS,EAAC,OAAO,CAAC,CAAC;AACzH,CAAC;AACD,gFAAgF;AAChF,MAAM,UAAU,wCAAwC,CAAC,SAAiC,EAAC,QAAe;IACxG,OAAO,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA,CAAC,CAAA,gCAAgC,CAAA,CAAC,CAAA,IAAI,CAAC;AAC1F,CAAC"}

package/dist/containerRelayLifecycle.d.ts

@@ -51,7 +51,7 @@ export declare function containerStartupState(options: ContainerLifecycleOptions
     state: "enabled";
     backend: "container-entrypoint";
     version: string;
-    lifecycle: "running" | "unconfigured" | "paused" | "blocked" | "starting" | "configured";
+    lifecycle: "running" | "blocked" | "starting" | "unconfigured" | "paused" | "configured";
     restartCoverage: "container-entrypoint-only";
 }>;
 export declare function ownsContainerStartup(options: ContainerLifecycleOptions, registration: ContainerRelayRegistration): Promise<boolean>;

package/dist/cooperativeInboxSession.d.ts

@@ -43,7 +43,7 @@ export declare function openCooperativeInboxSession(input: {
         questionId: string;
         taskId: string;
         completionHash: string;
-        reasonCode: "content_or_contract_blocked" | "receipt_invalid" | "delivery_unconfirmed";
+        reasonCode: "delivery_unconfirmed" | "content_or_contract_blocked" | "receipt_invalid";
         dispositionHash?: undefined;
         delivered?: undefined;
         replyReceiptHash?: undefined;

package/dist/demoPackage.d.ts

@@ -138,7 +138,7 @@ export declare function demoRepositoryPackage(input: {
     repositoryPackageState: string;
     candidate: import("./repositoryCandidateSync.js").RepositoryCandidateReceipt;
     firstLearning: {
-        disposition: "planned" | "initialized" | "reused";
+        disposition: "initialized" | "reused" | "planned";
         knowledgeBaseId: string;
     } | {
         disposition: string;