@dharma-ai-labs/agent-fabric 0.2.49 → 0.2.51

package/dist/repositorySourceCapture.test.js

@@ -0,0 +1,303 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { mkdir, mkdtemp, readFile, rm, symlink, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { dirname, resolve } from 'node:path';
+import test from 'node:test';
+import { fileURLToPath } from 'node:url';
+import { canonicalize, validateContract } from '@dharma-ai-labs/agent-fabric-contracts';
+import { inventoryRepositoryPackage, serializeRepositoryPackageSnapshot, writeRepositoryPackageSnapshot } from './repositoryPackage.js';
+import { parseRepositorySourcePolicyResponse, validateRepositorySourceAuthorization } from './repositorySourceAuthorization.js';
+import { initializeRepositoryKnowledge } from './repositoryKnowledge.js';
+const NOW = new Date('2026-09-18T09:00:00.000Z');
+const GENERATION = '1a731db0-d1bb-469c-8ffd-e1f10bece914';
+const BINDING = '73a95988-fd64-41ba-a0b9-6c8867d03788';
+async function fixture(t) {
+    const workspace = await mkdtemp(resolve(tmpdir(), 'repository-source-capture-'));
+    t.after(() => rm(workspace, { recursive: true, force: true }));
+    const put = async (path, text) => {
+        await mkdir(dirname(resolve(workspace, path)), { recursive: true });
+        await writeFile(resolve(workspace, path), text);
+    };
+    const operation = {
+        action: 'authorize', confirmed: true, requestId: '5ff2ee1b-6cb3-459e-a977-ea99c757bf30',
+        repositoryBindingId: BINDING, expectedRevision: 0,
+        allowedContentClasses: ['approved_outputs', 'repository_content', 'repository_skills'],
+        approvedRepositoryPaths: ['README.md', 'docs'], approvedOutputFolders: ['output/approved'],
+        automaticValidatedPublication: true, retentionDays: 30, maximumFileBytes: 262144,
+        maximumSnapshotBytes: 4194304, maximumDailyUploadBytes: 8388608,
+        expiresAt: '2026-10-01T00:00:00.000Z',
+    };
+    const sourceAuthorization = {
+        schema: 'dharma.repository-source-authorization/v1', organizationId: 'org_source_fixture',
+        workspaceId: '056b63dc-ebed-48ed-85d8-02c72f623ea8', repositoryBindingId: BINDING,
+        repositoryAgentId: '57f61652-a5eb-46e4-930c-9478cd4a9c31', revision: 1,
+        generationId: GENERATION, receiptId: `repo_consent_${GENERATION}`,
+        policyRevision: `repository-source-${GENERATION}`, confirmedAt: '2026-09-18T08:00:00+00:00',
+        policyHash: `sha256:${createHash('sha256').update(canonicalize(operation)).digest('hex')}`,
+        policy: operation,
+    };
+    const input = { workspace, organizationId: sourceAuthorization.organizationId,
+        workspaceId: sourceAuthorization.workspaceId, repositoryAgentId: sourceAuthorization.repositoryAgentId,
+        repositoryBindingId: BINDING,
+        sourceAuthorization, now: NOW };
+    await put('.agents/skills/dharma-agent-fabric/.dharma-agent-fabric.json', JSON.stringify({ managedBy: 'dharma-agent-fabric', workspaceId: input.workspaceId }));
+    await initializeRepositoryKnowledge(input);
+    return { input, put };
+}
+test('governed v2 capture includes authorized documents and uncommitted report folders, not siblings', async (t) => {
+    const f = await fixture(t);
+    await f.put('README.md', '# Work repository\nCanonical glossary.');
+    await f.put('docs/nested/terms.md', 'Widget ledger means the authoritative record.');
+    await f.put('output/approved/report.md', 'Observation: the lookup omitted a required evidence reference.');
+    await f.put('output/unapproved/report.md', 'Must remain local.');
+    await f.put('private/unapproved.md', 'Must remain local too.');
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    assert.equal(String(snapshot.manifest.schema), 'dharma.repository-package/v2');
+    assert.deepEqual(snapshot.manifest.files.filter(file => file.role !== 'knowledge').map(file => [file.path, file.role]), [
+        ['README.md', 'repository_content'], ['docs/nested/terms.md', 'repository_content'],
+        ['output/approved/report.md', 'approved_output'],
+    ]);
+});
+test('governed capture preserves native skills and companions alongside repository documents', async (t) => {
+    const f = await fixture(t);
+    await f.put('.codex/skills/review/SKILL.md', '# Review\n[Guide](references/procedure.md)');
+    await f.put('.codex/skills/review/references/procedure.md', 'Check cited evidence.');
+    await f.put('README.md', '# Repository knowledge');
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    assert.equal(snapshot.manifest.files.filter(file => file.role !== 'knowledge').length, 3);
+    assert.equal(snapshot.manifest.skills[0]?.availability, 'available');
+    assert.equal(snapshot.manifest.skills[0]?.observation.state, 'not_observed');
+});
+test('an uncommitted approved report edit changes the captured source hash', async (t) => {
+    const f = await fixture(t);
+    await f.put('output/approved/report.md', 'The canonical concept is widget ledger.');
+    const before = await inventoryRepositoryPackage(f.input);
+    assert.ok(before.manifest.files.some(file => file.path === 'output/approved/report.md'));
+    await f.put('output/approved/report.md', 'The canonical concept is widget ledger, including revisions.');
+    assert.notEqual((await inventoryRepositoryPackage(f.input)).manifest.snapshotHash, before.manifest.snapshotHash);
+});
+test('governed capture rejects an expired authorization without downgrading to v1', async (t) => {
+    const f = await fixture(t);
+    f.input.sourceAuthorization.policy.expiresAt = '2026-09-17T00:00:00.000Z';
+    f.input.sourceAuthorization.policyHash = `sha256:${createHash('sha256').update(canonicalize(f.input.sourceAuthorization.policy)).digest('hex')}`;
+    await assert.rejects(inventoryRepositoryPackage(f.input), /source.*(?:authorization|policy|expired)/i);
+});
+test('governed capture rejects a foreign organization rather than using its source policy', async (t) => {
+    const f = await fixture(t);
+    f.input.sourceAuthorization.organizationId = 'org_foreign_fixture';
+    await assert.rejects(inventoryRepositoryPackage(f.input), /source.*(?:authorization|policy|scope)/i);
+});
+test('governed capture rejects a mismatched consent operation hash', async (t) => {
+    const f = await fixture(t);
+    f.input.sourceAuthorization.policyHash = `sha256:${'0'.repeat(64)}`;
+    await assert.rejects(inventoryRepositoryPackage(f.input), /source.*(?:authorization|policy|hash)/i);
+});
+function resign(input) {
+    input.sourceAuthorization.policyHash = `sha256:${createHash('sha256').update(canonicalize(input.sourceAuthorization.policy)).digest('hex')}`;
+}
+test('no-history onboarding still has a mandatory empty knowledge catalog, not an invented Atlas', async (t) => {
+    const f = await fixture(t);
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    assert.ok(snapshot.manifest.knowledge?.knowledgeBaseId);
+    assert.equal(snapshot.manifest.knowledge?.atlasAssociation, 'local_scope_only');
+    assert.ok(snapshot.manifest.files.some(file => file.role === 'knowledge'));
+    assert.equal(snapshot.manifest.skills.length, 0);
+});
+test('governed schema and historical CAS support v2 while live expired capture fails closed', async (t) => {
+    const f = await fixture(t);
+    await f.put('README.md', '# Shared concepts');
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    const validated = await validateContract(fileURLToPath(new URL('./schemas/', import.meta.url)), 'https://schemas.dharma-ai.io/repository-package/v2', snapshot.manifest);
+    assert.equal(validated.ok, true, validated.ok ? '' : JSON.stringify(validated.errors));
+    const serialized = serializeRepositoryPackageSnapshot(snapshot);
+    const persisted = await writeRepositoryPackageSnapshot({ workspace: f.input.workspace, snapshot });
+    await writeRepositoryPackageSnapshot({ workspace: f.input.workspace, snapshot });
+    assert.equal(await readFile(resolve(f.input.workspace, persisted.snapshotPath), 'utf8'), serialized);
+    assert.notEqual(serializeRepositoryPackageSnapshot(snapshot).length, 0);
+    await assert.rejects(inventoryRepositoryPackage({ ...f.input, now: new Date('2026-10-02T00:00:00Z') }), /expired/);
+});
+test('managed copies do not cause an autonomous source fingerprint update loop', async (t) => {
+    const f = await fixture(t);
+    await f.put('skills/review/SKILL.md', '# Review');
+    const before = await inventoryRepositoryPackage(f.input);
+    await writeRepositoryPackageSnapshot({ workspace: f.input.workspace, snapshot: before });
+    await f.put('.agents/skills/dharma-agent-fabric/references/derived.md', '# Generated instructions');
+    const after = await inventoryRepositoryPackage(f.input);
+    assert.equal(after.manifest.sourceFingerprint, before.manifest.sourceFingerprint);
+    assert.equal(after.manifest.snapshotHash, before.manifest.snapshotHash);
+});
+test('documents and approved reports cannot expand capture through relative links', async (t) => {
+    const f = await fixture(t);
+    await f.put('docs/terms.md', '[Hidden](../private/source.md)');
+    await f.put('output/approved/report.md', '[Hidden](../../unapproved/source.md)');
+    await f.put('private/source.md', 'Unauthorized source');
+    await f.put('output/unapproved/source.md', 'Unauthorized source');
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    assert.equal(snapshot.manifest.files.filter(file => file.role !== 'knowledge').length, 2);
+    assert.ok(!snapshot.blobs.some(blob => Buffer.from(blob.contentBase64, 'base64').toString().includes('Unauthorized source')));
+});
+test('native skill dependencies outside the consent scope remain unavailable and local', async (t) => {
+    const f = await fixture(t);
+    await f.put('skills/review/SKILL.md', '[Hidden](../../private/source.md)');
+    await f.put('private/source.md', 'Unauthorized source');
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    assert.equal(snapshot.manifest.skills[0]?.availability, 'partial');
+    assert.ok(snapshot.manifest.exclusions.some(entry => entry.path === 'private/source.md' && entry.reason === 'unauthorized_dependency'));
+    assert.ok(!snapshot.manifest.files.some(file => file.path === 'private/source.md'));
+});
+test('manual approved output flags cannot override the organization source grant', async (t) => {
+    const f = await fixture(t);
+    await f.put('output/unapproved/report.md', 'Local only');
+    await assert.rejects(inventoryRepositoryPackage({ ...f.input, approvedOutputs: ['output/unapproved/report.md'] }), /authorization scope/);
+});
+test('secrets, excluded files, unsupported media and symlinked reports never enter shared blobs', async (t) => {
+    const f = await fixture(t);
+    await f.put('docs/safe.md', 'Canonical glossary');
+    await f.put('docs/.env.local', 'PRIVATE_VALUE=must-not-share');
+    await f.put('docs/access.md', 'access_token=must-not-share');
+    await f.put('docs/image.png', 'Unsupported image');
+    await symlink(resolve(f.input.workspace, 'docs/safe.md'), resolve(f.input.workspace, 'docs/linked.md'));
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    assert.deepEqual(snapshot.manifest.files.filter(file => file.role !== 'knowledge').map(file => file.path), ['docs/safe.md']);
+    assert.ok(snapshot.manifest.exclusions.some(entry => entry.reason === 'symlink'));
+    assert.ok(snapshot.manifest.exclusions.some(entry => entry.reason === 'unsupported_content_type'));
+    assert.ok(!serializeRepositoryPackageSnapshot(snapshot).includes('must-not-share'));
+});
+test('policy file and total byte caps fail the whole capture instead of truncating documents', async (t) => {
+    const f = await fixture(t);
+    await f.put('docs/large.md', 'x'.repeat(512));
+    f.input.sourceAuthorization.policy.maximumFileBytes = 128;
+    resign(f.input);
+    await assert.rejects(inventoryRepositoryPackage(f.input), /file byte limit/);
+    f.input.sourceAuthorization.policy.maximumFileBytes = 512;
+    f.input.sourceAuthorization.policy.maximumSnapshotBytes = 512;
+    resign(f.input);
+    await assert.rejects(inventoryRepositoryPackage(f.input), /limit/);
+});
+test('overlapping document/output scopes deduplicate each file and keep output classification', async (t) => {
+    const f = await fixture(t);
+    f.input.sourceAuthorization.policy.approvedRepositoryPaths.push('output');
+    resign(f.input);
+    await f.put('output/approved/report.md', 'One immutable source');
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    const reports = snapshot.manifest.files.filter(file => file.path === 'output/approved/report.md');
+    assert.equal(reports.length, 1);
+    assert.equal(reports[0]?.role, 'approved_output');
+});
+for (const field of ['workspaceId', 'repositoryAgentId', 'repositoryBindingId']) {
+    test(`source consent rejects foreign ${field}`, async (t) => {
+        const f = await fixture(t);
+        f.input.sourceAuthorization[field] = '70a5f314-6933-41d3-8946-c30423fa129f';
+        await assert.rejects(inventoryRepositoryPackage(f.input), /scope mismatch/);
+    });
+}
+test('null, prototype, accessor and sparse-array consent inputs fail without reading accessors', async (t) => {
+    const f = await fixture(t);
+    await assert.rejects(inventoryRepositoryPackage({ ...f.input, sourceAuthorization: null }), /authorization/);
+    const prototype = Object.create(f.input.sourceAuthorization);
+    assert.throws(() => validateRepositorySourceAuthorization(prototype, f.input, NOW), /prototype/);
+    let invoked = false;
+    const accessor = { ...f.input.sourceAuthorization };
+    Object.defineProperty(accessor, 'policy', { enumerable: true, get() { invoked = true; throw new Error('never invoke'); } });
+    assert.throws(() => validateRepositorySourceAuthorization(accessor, f.input, NOW), /accessors/);
+    assert.equal(invoked, false);
+    const sparse = structuredClone(f.input.sourceAuthorization);
+    delete sparse.policy.approvedRepositoryPaths[0];
+    assert.throws(() => validateRepositorySourceAuthorization(sparse, f.input, NOW), /array/);
+});
+test('signed-policy response matches actual SQL receipt IDs and offset confirmation timestamps', async (t) => {
+    const f = await fixture(t);
+    const a = f.input.sourceAuthorization;
+    const current = { ...a, active: true, reason: 'authorized' };
+    const response = { ok: true, organizationId: a.organizationId,
+        policy: { organizationId: a.organizationId, repositoryBindingId: a.repositoryBindingId,
+            repositoryAgentId: a.repositoryAgentId, current } };
+    assert.deepEqual(parseRepositorySourcePolicyResponse(response, f.input, NOW), a);
+    current.active = false;
+    assert.throws(() => parseRepositorySourcePolicyResponse(response, f.input, NOW), /inactive/);
+});
+test('absence of governed authorization preserves the exact legacy v1 CAS object', async (t) => {
+    const f = await fixture(t);
+    await f.put('skills/review/SKILL.md', '# Review');
+    const snapshot = await inventoryRepositoryPackage({ ...f.input, sourceAuthorization: undefined });
+    assert.equal(snapshot.manifest.schema, 'dharma.repository-package/v1');
+    assert.equal(snapshot.manifest.sourceAuthorization, undefined);
+    assert.equal(snapshot.manifest.sourceFingerprint, undefined);
+    assert.equal(serializeRepositoryPackageSnapshot(snapshot), `${canonicalize({ manifest: snapshot.manifest, blobs: snapshot.blobs })}\n`);
+    await writeRepositoryPackageSnapshot({ workspace: f.input.workspace, snapshot });
+});
+test('external native dependencies cannot bypass document content-type filtering', async (t) => {
+    const f = await fixture(t);
+    await f.put('skills/review/SKILL.md', '[Payload](../../docs/payload.exe)');
+    await f.put('docs/payload.exe', '[More](downstream.md)');
+    await f.put('docs/downstream.md', 'Would be outside selected scope');
+    f.input.sourceAuthorization.policy.approvedRepositoryPaths = ['docs/payload.exe'];
+    resign(f.input);
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    assert.equal(snapshot.manifest.skills[0]?.availability, 'partial');
+    assert.ok(!snapshot.manifest.files.some(file => file.path.startsWith('docs/')));
+});
+test('newline paths and identity suffixes are rejected by full-input checks', async (t) => {
+    const f = await fixture(t);
+    f.input.sourceAuthorization.policy.approvedRepositoryPaths = ['docs\n'];
+    resign(f.input);
+    await assert.rejects(inventoryRepositoryPackage(f.input), /path scope/);
+    f.input.sourceAuthorization.policy.approvedRepositoryPaths = ['docs'];
+    f.input.sourceAuthorization.generationId += '\n';
+    resign(f.input);
+    await assert.rejects(inventoryRepositoryPackage(f.input), /identity/);
+    f.input.sourceAuthorization.generationId = GENERATION;
+    if (process.platform !== 'win32')
+        await f.put('docs/example.md\n', 'Not a portable source');
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    assert.ok(!snapshot.manifest.files.some(file => file.role !== 'knowledge'));
+});
+test('proxy consent is rejected before reflection traps run', async (t) => {
+    const f = await fixture(t);
+    let invoked = false;
+    const sourceAuthorization = new Proxy(f.input.sourceAuthorization, {
+        getPrototypeOf() { invoked = true; throw new Error('never invoke'); },
+        ownKeys() { invoked = true; throw new Error('never invoke'); },
+    });
+    assert.throws(() => validateRepositorySourceAuthorization(sourceAuthorization, f.input, NOW), /proxy/);
+    assert.equal(invoked, false);
+});
+test('inherited serialization hooks never run for unknown consent input', async (t) => {
+    const f = await fixture(t);
+    const before = Object.getOwnPropertyDescriptor(Object.prototype, 'toJSON');
+    let invoked = false;
+    try {
+        Object.defineProperty(Object.prototype, 'toJSON', { configurable: true, value() { invoked = true; return {}; } });
+        assert.throws(() => validateRepositorySourceAuthorization(f.input.sourceAuthorization, f.input, NOW), /serialization hooks/);
+        assert.equal(invoked, false);
+    }
+    finally {
+        if (before)
+            Object.defineProperty(Object.prototype, 'toJSON', before);
+        else
+            Reflect.deleteProperty(Object.prototype, 'toJSON');
+    }
+});
+test('reconstructed approved outputs cannot bypass content types beneath native skill roots', async (t) => {
+    const f = await fixture(t);
+    f.input.sourceAuthorization.policy.approvedOutputFolders = ['skills/review'];
+    resign(f.input);
+    await f.put('skills/review/SKILL.md', '# Review');
+    await f.put('skills/review/payload.exe', 'Unsupported external artifact');
+    const snapshot = await inventoryRepositoryPackage(f.input);
+    const file = snapshot.manifest.files.find(file => file.path === 'skills/review/payload.exe');
+    assert.ok(file);
+    file.role = 'approved_output';
+    const a = snapshot.manifest.sourceAuthorization;
+    snapshot.manifest.sourceFingerprint = `sha256:${createHash('sha256').update(canonicalize({
+        organizationId: snapshot.manifest.organizationId, repositoryBindingId: a.repositoryBindingId,
+        repositoryAgentId: a.repositoryAgentId, generationId: a.generationId, policyHash: a.policyHash,
+        files: snapshot.manifest.files.filter(file => file.role !== 'knowledge'), skills: snapshot.manifest.skills,
+    })).digest('hex')}`;
+    const { snapshotHash: _hash, snapshotId: _id, ...base } = snapshot.manifest;
+    snapshot.manifest.snapshotHash = `sha256:${createHash('sha256').update(canonicalize(base)).digest('hex')}`;
+    snapshot.manifest.snapshotId = `repository-package-${snapshot.manifest.snapshotHash.slice(7)}`;
+    assert.throws(() => serializeRepositoryPackageSnapshot(snapshot), /content type integrity/);
+});
+//# sourceMappingURL=repositorySourceCapture.test.js.map

package/dist/repositorySourceCapture.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositorySourceCapture.test.js","sourceRoot":"","sources":["../src/repositorySourceCapture.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,IAA0B,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxI,OAAO,EAAE,mCAAmC,EAAE,qCAAqC,EAAE,MAAM,oCAAoC,CAAC;AAChI,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAEzE,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AACjD,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAC1D,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD,KAAK,UAAU,OAAO,CAAC,CAAc;IACnC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,KAAK,EAAE,IAAY,EAAE,IAAY,EAAE,EAAE;QAC/C,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,SAAS,GAAG;QAChB,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,sCAAsC;QACvF,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;QACjD,qBAAqB,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;QACtF,uBAAuB,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC,iBAAiB,CAAC;QAC1F,6BAA6B,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,gBAAgB,EAAE,MAAM;QAChF,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,EAAE,OAAO;QAC/D,SAAS,EAAE,0BAA2C;KACvD,CAAC;IACF,MAAM,mBAAmB,GAAG;QAC1B,MAAM,EAAE,2CAA2C,EAAE,cAAc,EAAE,oBAAoB;QACzF,WAAW,EAAE,sCAAsC,EAAE,mBAAmB,EAAE,OAAO;QACjF,iBAAiB,EAAE,sCAAsC,EAAE,QAAQ,EAAE,CAAC;QACtE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,UAAU,EAAE;QACjE,cAAc,EAAE,qBAAqB,UAAU,EAAE,EAAE,WAAW,EAAE,2BAA2B;QAC3F,UAAU,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QAC1F,MAAM,EAAE,SAAS;KAClB,CAAC;IACF,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,mBAAmB,CAAC,cAAc;QAC3E,WAAW,EAAE,mBAAmB,CAAC,WAAW,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,iBAAiB;QACtG,mBAAmB,EAAE,OAAO;QAC5B,mBAAmB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAClC,MAAM,GAAG,CAAC,8DAA8D,EACtE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED,IAAI,CAAC,gGAAgG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC/G,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,wCAAwC,CAAC,CAAC;IACnE,MAAM,CAAC,CAAC,GAAG,CAAC,sBAAsB,EAAE,+CAA+C,CAAC,CAAC;IACrF,MAAM,CAAC,CAAC,GAAG,CAAC,2BAA2B,EAAE,gEAAgE,CAAC,CAAC;IAC3G,MAAM,CAAC,CAAC,GAAG,CAAC,6BAA6B,EAAE,oBAAoB,CAAC,CAAC;IACjE,MAAM,CAAC,CAAC,GAAG,CAAC,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,8BAA8B,CAAC,CAAC;IAC/E,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE;QACtH,CAAC,WAAW,EAAE,oBAAoB,CAAC,EAAE,CAAC,sBAAsB,EAAE,oBAAoB,CAAC;QACnF,CAAC,2BAA2B,EAAE,iBAAiB,CAAC;KACjD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACvG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,+BAA+B,EAAE,4CAA4C,CAAC,CAAC;IAC3F,MAAM,CAAC,CAAC,GAAG,CAAC,8CAA8C,EAAE,uBAAuB,CAAC,CAAC;IACrF,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACrF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,2BAA2B,EAAE,yCAAyC,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC,CAAC;IACzF,MAAM,CAAC,CAAC,GAAG,CAAC,2BAA2B,EAAE,8DAA8D,CAAC,CAAC;IACzG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACnH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC5F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,GAAG,0BAA0B,CAAC;IAC1E,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,UAAU,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACjJ,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,2CAA2C,CAAC,CAAC;AACzG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qFAAqF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACpG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,GAAG,qBAAqB,CAAC;IACnE,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,yCAAyC,CAAC,CAAC;AACvG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC7E,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,UAAU,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IACpE,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,wCAAwC,CAAC,CAAC;AACtG,CAAC,CAAC,CAAC;AAEH,SAAS,MAAM,CAAC,KAAmD;IACjE,KAAK,CAAC,mBAAmB,CAAC,UAAU,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/I,CAAC;AAED,IAAI,CAAC,4FAA4F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC3G,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAChF,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uFAAuF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACtG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5F,oDAAoD,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,kCAAkC,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,8BAA8B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,MAAM,8BAA8B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;IACrG,MAAM,CAAC,QAAQ,CAAC,kCAAkC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;AACrH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACzF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,8BAA8B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACzF,MAAM,CAAC,CAAC,GAAG,CAAC,0DAA0D,EAAE,0BAA0B,CAAC,CAAC;IACpG,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAClF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC5F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;IAC/D,MAAM,CAAC,CAAC,GAAG,CAAC,2BAA2B,EAAE,sCAAsC,CAAC,CAAC;IACjF,MAAM,CAAC,CAAC,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACxD,MAAM,CAAC,CAAC,GAAG,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAChI,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACjG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,wBAAwB,EAAE,mCAAmC,CAAC,CAAC;IAC3E,MAAM,CAAC,CAAC,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,KAAK,CAAC,MAAM,KAAK,yBAAyB,CAAC,CAAC,CAAC;IACxI,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC;AACtF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC3F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,6BAA6B,EAAE,YAAY,CAAC,CAAC;IACzD,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,6BAA6B,CAAC,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAC;AAC5I,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2FAA2F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC1G,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;IAClD,MAAM,CAAC,CAAC,GAAG,CAAC,iBAAiB,EAAE,8BAA8B,CAAC,CAAC;IAC/D,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IAC7D,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IACnD,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7H,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,0BAA0B,CAAC,CAAC,CAAC;IACnG,MAAM,CAAC,EAAE,CAAC,CAAC,kCAAkC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACtF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACvG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,GAAG,GAAG,CAAC;IAC1D,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC7E,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,GAAG,GAAG,CAAC;IAC1D,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,oBAAoB,GAAG,GAAG,CAAC;IAC9D,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yFAAyF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACxG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1E,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,CAAC,CAAC,GAAG,CAAC,2BAA2B,EAAE,sBAAsB,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC;IAClG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,mBAAmB,EAAE,qBAAqB,CAAU,EAAE,CAAC;IACzF,IAAI,CAAC,kCAAkC,KAAK,EAAE,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QACxD,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,sCAAsC,CAAC;QAC5E,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,0FAA0F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACzG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;IAC7G,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC7D,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,qCAAqC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;IACjG,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;IACpD,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5H,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,qCAAqC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;IAChG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,qCAAqC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AAC5F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0FAA0F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACzG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACtC,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc;QAC3D,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;YACpF,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,CAAC;IACxD,MAAM,CAAC,SAAS,CAAC,mCAAmC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;IACvB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,mCAAmC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC3F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC;IAClG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,QAAQ,CAAC,EAAE,GAAG,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;IACxI,MAAM,8BAA8B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;AACnF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC3F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,wBAAwB,EAAE,mCAAmC,CAAC,CAAC;IAC3E,MAAM,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;IACzD,MAAM,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAAE,iCAAiC,CAAC,CAAC;IACrE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,uBAAuB,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAClF,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACtF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,uBAAuB,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;IACxE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,uBAAuB,GAAG,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,YAAY,IAAI,IAAI,CAAC;IACjD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;IACtE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,YAAY,GAAG,UAAU,CAAC;IACtD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,CAAC,CAAC,GAAG,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACtE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,mBAAmB,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE;QACjE,cAAc,KAAK,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO,KAAK,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;KAC/D,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,qCAAqC,CAAC,mBAAmB,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IACvG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAClF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,KAAK,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,qCAAqC,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC7H,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,IAAI,MAAM;YAAE,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;;YACjE,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uFAAuF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACtG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,qBAAqB,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7E,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,CAAC,CAAC,GAAG,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,CAAC,CAAC,GAAG,CAAC,2BAA2B,EAAE,+BAA+B,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC;IAC7F,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAChB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,mBAAoB,CAAC;IACjD,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QACvF,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;QAC5F,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;QAC9F,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;KAC3G,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACpB,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC5E,QAAQ,CAAC,QAAQ,CAAC,YAAY,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3G,QAAQ,CAAC,QAAQ,CAAC,UAAU,GAAG,sBAAsB,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,kCAAkC,CAAC,QAAQ,CAAC,EAAE,wBAAwB,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC"}

package/dist/repositorySourceSync.d.ts

@@ -0,0 +1,54 @@
+import { type RepositorySourceScope } from './repositorySourceAuthorization.js';
+import type { RepositoryPackageSnapshot } from './repositoryPackage.js';
+type SourceTransport = {
+    signedGet(route: string): Promise<Record<string, unknown>>;
+};
+export type BoundRepositorySource = RepositorySourceScope & {
+    repositoryBindingId: string;
+    repositoryAgentId: string;
+};
+export declare function fetchRepositorySourceAuthorization(transport: SourceTransport, scope: BoundRepositorySource): Promise<import("./repositorySourceAuthorization.js").RepositorySourceAuthorization>;
+export declare class RepositorySourceWatcher {
+    #private;
+    readonly debounceMs: number;
+    constructor(debounceMs?: number);
+    observe(fingerprint: string, now: number): 'unchanged' | 'debouncing' | 'stable';
+    complete(fingerprint: string): void;
+    invalidate(): void;
+}
+export declare function scanRepositorySourceChanges(input: BoundRepositorySource & {
+    workspace: string;
+    transport: SourceTransport;
+    watcher: RepositorySourceWatcher;
+    monotonicNow?: () => number;
+    loadRetainedKnowledge?: () => Promise<{
+        catalogBytes: Buffer;
+        manifestBytes: Buffer;
+    } | null>;
+    submitCandidate?: (snapshot: RepositoryPackageSnapshot) => Promise<Record<string, unknown>>;
+}): Promise<{
+    state: "unchanged" | "debouncing";
+    localMutation: boolean;
+    sharedAuthority: "pending";
+    snapshotId?: undefined;
+    fingerprint?: undefined;
+    persisted?: undefined;
+    candidate?: undefined;
+} | {
+    state: "local_candidate_collected";
+    localMutation: boolean;
+    sharedAuthority: "pending";
+    snapshotId: string;
+    fingerprint: string;
+    persisted: {
+        manifestPath: string;
+        snapshotPath: string;
+        snapshotHash: string;
+        managedCopiesPath: string | null;
+        disposition: "candidate_only" | "local_bootstrap_inventory";
+        authority: "local_inventory_not_signed";
+    };
+    candidate: Record<string, unknown> | null;
+}>;
+export {};
+//# sourceMappingURL=repositorySourceSync.d.ts.map

package/dist/repositorySourceSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositorySourceSync.d.ts","sourceRoot":"","sources":["../src/repositorySourceSync.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8E,KAAK,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC5J,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAExE,KAAK,eAAe,GAAG;IAAE,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,CAAC;AACtF,MAAM,MAAM,qBAAqB,GAAG,qBAAqB,GAAG;IAC1D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAIF,wBAAsB,kCAAkC,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,qBAAqB,uFAOhH;AAID,qBAAa,uBAAuB;;IAIlC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAChB,UAAU,SAAQ;IAI9B,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ;IAahF,QAAQ,CAAC,WAAW,EAAE,MAAM;IAM5B,UAAU;CACX;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,qBAAqB,GAAG;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE,uBAAuB,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC9F,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,yBAAyB,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC7F;;;;;;;;;;;;;;;;;;;;;;;GAgCA"}

package/dist/repositorySourceSync.js

@@ -0,0 +1,88 @@
+import { canonicalize } from '@dharma-ai-labs/agent-fabric-contracts';
+import { inventoryRepositoryPackage, writeRepositoryPackageSnapshot } from './repositoryPackage.js';
+import { parseRepositorySourcePolicyResponse, validateRepositorySourceAuthorization } from './repositorySourceAuthorization.js';
+const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$(?![\s\S])/i;
+const HASH = /^sha256:[a-f0-9]{64}$(?![\s\S])/;
+export async function fetchRepositorySourceAuthorization(transport, scope) {
+    if (typeof scope.organizationId !== 'string' || !scope.organizationId
+        || [scope.workspaceId, scope.repositoryBindingId, scope.repositoryAgentId].some(value => typeof value !== 'string' || !UUID.test(value))) {
+        throw new Error('Repository source read requires a complete bound identity.');
+    }
+    const response = await transport.signedGet(`/agent-fabric/repository-source-policy?workspaceId=${encodeURIComponent(scope.workspaceId)}`);
+    return parseRepositorySourcePolicyResponse(response, scope, new Date());
+}
+// This observes local immutable candidates only; it never grants publication or
+// activates native skills. The caller polls serially with a monotonic clock.
+export class RepositorySourceWatcher {
+    #candidate = null;
+    #completed = null;
+    #lastTime = 0;
+    debounceMs;
+    constructor(debounceMs = 15000) {
+        if (!Number.isSafeInteger(debounceMs) || debounceMs < 1000 || debounceMs > 60000)
+            throw new Error('Invalid repository source debounce.');
+        this.debounceMs = debounceMs;
+    }
+    observe(fingerprint, now) {
+        if (!HASH.test(fingerprint) || !Number.isFinite(now) || now < this.#lastTime) {
+            this.invalidate();
+            throw new Error('Invalid repository source observation.');
+        }
+        this.#lastTime = now;
+        if (fingerprint === this.#completed) {
+            this.#candidate = null;
+            return 'unchanged';
+        }
+        if (this.#candidate?.fingerprint !== fingerprint) {
+            this.#candidate = { fingerprint, since: now };
+            return 'debouncing';
+        }
+        return now - this.#candidate.since >= this.debounceMs ? 'stable' : 'debouncing';
+    }
+    complete(fingerprint) {
+        if (!this.#candidate || this.#candidate.fingerprint !== fingerprint
+            || this.#lastTime - this.#candidate.since < this.debounceMs)
+            throw new Error('Repository source completion conflicts with its observation.');
+        this.#completed = fingerprint;
+        this.#candidate = null;
+    }
+    invalidate() { this.#candidate = null; this.#completed = null; this.#lastTime = 0; }
+}
+export async function scanRepositorySourceChanges(input) {
+    try {
+        const authorization = await fetchRepositorySourceAuthorization(input.transport, input);
+        const observed = input.loadRetainedKnowledge ? await input.loadRetainedKnowledge() : null;
+        if (observed && ![observed.catalogBytes, observed.manifestBytes].every(bytes => Buffer.isBuffer(bytes) && bytes.length > 0 && bytes.length <= 262144)) {
+            throw new Error('Verified repository knowledge byte limit exceeded.');
+        }
+        const retainedKnowledge = observed ? { catalogBytes: Buffer.from(observed.catalogBytes), manifestBytes: Buffer.from(observed.manifestBytes) } : null;
+        const snapshot = await inventoryRepositoryPackage({ ...input, retainedKnowledge, sourceAuthorization: authorization });
+        const fingerprint = snapshot.manifest.sourceFingerprint;
+        if (!fingerprint)
+            throw new Error('Governed repository source scan returned no fingerprint.');
+        const state = input.watcher.observe(fingerprint, (input.monotonicNow || (() => performance.now()))());
+        if (state !== 'stable')
+            return { state, localMutation: false, sharedAuthority: 'pending' };
+        const current = await fetchRepositorySourceAuthorization(input.transport, input);
+        if (canonicalize(current) !== canonicalize(authorization))
+            throw new Error('Repository source policy changed during collection.');
+        validateRepositorySourceAuthorization(current, input, new Date());
+        if (input.loadRetainedKnowledge) {
+            const next = await input.loadRetainedKnowledge();
+            if (!!retainedKnowledge !== !!next || (retainedKnowledge && next
+                && (!retainedKnowledge.catalogBytes.equals(next.catalogBytes) || !retainedKnowledge.manifestBytes.equals(next.manifestBytes)))) {
+                throw new Error('Verified repository knowledge release changed during collection.');
+            }
+        }
+        const persisted = await writeRepositoryPackageSnapshot({ workspace: input.workspace, snapshot, candidateOnly: true });
+        const candidate = input.submitCandidate ? await input.submitCandidate(snapshot) : null;
+        input.watcher.complete(fingerprint);
+        return { state: 'local_candidate_collected', localMutation: true, sharedAuthority: 'pending',
+            snapshotId: snapshot.manifest.snapshotId, fingerprint, persisted, candidate };
+    }
+    catch (error) {
+        input.watcher.invalidate();
+        throw error;
+    }
+}
+//# sourceMappingURL=repositorySourceSync.js.map

package/dist/repositorySourceSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositorySourceSync.js","sourceRoot":"","sources":["../src/repositorySourceSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,qCAAqC,EAA8B,MAAM,oCAAoC,CAAC;AAQ5J,MAAM,IAAI,GAAG,2EAA2E,CAAC;AACzF,MAAM,IAAI,GAAG,iCAAiC,CAAC;AAE/C,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,SAA0B,EAAE,KAA4B;IAC/G,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,cAAc;WAChE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3I,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,sDAAsD,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1I,OAAO,mCAAmC,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,gFAAgF;AAChF,6EAA6E;AAC7E,MAAM,OAAO,uBAAuB;IAClC,UAAU,GAAkD,IAAI,CAAC;IACjE,UAAU,GAAkB,IAAI,CAAC;IACjC,SAAS,GAAG,CAAC,CAAC;IACL,UAAU,CAAS;IAC5B,YAAY,UAAU,GAAG,KAAK;QAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,IAAI,IAAI,UAAU,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzI,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,WAAmB,EAAE,GAAW;QACtC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7E,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACrB,IAAI,WAAW,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YAAC,OAAO,WAAW,CAAC;QAAC,CAAC;QACpF,IAAI,IAAI,CAAC,UAAU,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;YACjD,IAAI,CAAC,UAAU,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YAC9C,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;IAClF,CAAC;IACD,QAAQ,CAAC,WAAmB;QAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,KAAK,WAAW;eAC9D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAC/I,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IACD,UAAU,KAAK,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;CACrF;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAOjD;IACC,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,kCAAkC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1F,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;YACtJ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACrJ,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC,CAAC;QACvH,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACxD,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACtG,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,eAAe,EAAE,SAAkB,EAAE,CAAC;QACpG,MAAM,OAAO,GAAG,MAAM,kCAAkC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACjF,IAAI,YAAY,CAAC,OAAO,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAClI,qCAAqC,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE,CAAC;YACjD,IAAI,CAAC,CAAC,iBAAiB,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI;mBAC3D,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjI,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,8BAA8B,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtH,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,2BAAoC,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,SAAkB;YAC5G,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/repositorySourceSync.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=repositorySourceSync.test.d.ts.map

package/dist/repositorySourceSync.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositorySourceSync.test.d.ts","sourceRoot":"","sources":["../src/repositorySourceSync.test.ts"],"names":[],"mappings":""}