@dsh-enhanced/lark-channel 0.1.48 → 0.1.49

package/lib/rsi-host-update.d.ts

@@ -0,0 +1,113 @@
+import type { RsiSetupManifest } from './rsi-profile.js';
+import type { RsiAuthorityResources } from './rsi-authority-resources.js';
+export interface RsiHostPinReplacement {
+    path: string;
+    sha256: string;
+}
+export interface RsiHostRebase {
+    oldHostRoot: string;
+    oldHostVersion: string;
+    candidateHostVersion: string;
+    pins: Readonly<Record<string, RsiHostPinReplacement>>;
+}
+export interface RsiHostUpdateOverlay {
+    schemaVersion: 1;
+    kind: 'rsi-host-update-overlay';
+    transactionId: string;
+    dshHome: string;
+    targetProfile: string;
+    installationId: string;
+    currentPlanId: string;
+    activationId: string;
+    sequence: number;
+    previousDigest: string | null;
+    bootstrapDigest: string;
+    files: Record<string, string>;
+    patches: Record<string, string>;
+    runtimeReceiptDigest: string;
+    planDigest: string;
+    result: {
+        schemaVersion: 1;
+        manifestPath: string;
+        manifestDigest: string;
+        targetProfile: string;
+        coordinatorProfile: string;
+    };
+    issuedAt: number;
+    authority: string;
+    keyId: string;
+    signature: string;
+}
+export interface RsiOwnerRepairOverlay {
+    schemaVersion: 1;
+    kind: 'rsi-owner-repair-overlay';
+    transactionId: string;
+    dshHome: string;
+    targetProfile: string;
+    installationId: string;
+    sequence: number;
+    previousDigest: string | null;
+    bootstrapDigest: string;
+    files: Record<string, string>;
+    patches: Record<string, string>;
+    runtimeReceiptDigest: string;
+    planDigest: string;
+    result: RsiHostUpdateOverlay['result'];
+    repair: {
+        sourceMaintenanceDigest: string;
+        before: {
+            files: Record<string, string>;
+            patches: Record<string, string>;
+            runtimeReceiptDigest: string;
+            creationReceiptDigest: string;
+            journalDigest: string;
+        };
+        after: {
+            creationReceiptDigest: string;
+            journalDigest: string;
+        };
+        permissionPreset: 'workspace-write' | 'danger-full-access';
+    };
+    issuedAt: number;
+    authority: string;
+    keyId: string;
+    signature: string;
+}
+export type RsiOwnerOverlay = RsiHostUpdateOverlay | RsiOwnerRepairOverlay;
+export declare function rsiHostUpdateOverlayDigest(value: RsiOwnerOverlay): string;
+export declare function readRsiHostUpdateOverlayChain(input: {
+    source: string | undefined;
+    resources: RsiAuthorityResources;
+    dshHome: string;
+    profile: string;
+    bootstrapSource: string;
+}): {
+    records: RsiOwnerOverlay[];
+    latest?: RsiOwnerOverlay;
+};
+export declare function signRsiHostUpdateOverlay(input: Omit<RsiHostUpdateOverlay, 'signature'>, privateKeyPem: string, resources: RsiAuthorityResources, bootstrapSource: string, previous: readonly RsiOwnerOverlay[]): RsiHostUpdateOverlay;
+export declare function signRsiOwnerRepairOverlay(input: Omit<RsiOwnerRepairOverlay, 'signature'>, privateKeyPem: string, resources: RsiAuthorityResources, bootstrapSource: string, previous: readonly RsiOwnerOverlay[]): RsiOwnerRepairOverlay;
+/** Replace only exact pinned assets and the installed DSH baseline version.
+ * Arbitrary old-Host path strings are rejected instead of guessed. */
+export declare function rebaseRsiHostValue<T>(value: T, rebase: RsiHostRebase): T;
+/** Preserve unrelated patch rows and original observer identities. */
+export declare function rebaseRsiHostProfiles(input: {
+    manifest: RsiSetupManifest;
+    targetPatch: string;
+    coordinatorPatch: string;
+    rebase: RsiHostRebase;
+}): {
+    manifest: RsiSetupManifest;
+    targetPatch: string;
+    coordinatorPatch: string;
+};
+/** Rebase the deployed patch itself. An adoption may have replaced the original
+ * bootstrap rows, so the historical manifest cannot be used as their source. */
+export declare function rebaseRsiHostActivePatch(input: {
+    patch: string;
+    rebase: RsiHostRebase;
+}): string;
+/** The owner manifest is historical bootstrap authority; rebase only its
+ * verified baseline pins and observer digests, independently of live adoption. */
+export declare function rebaseRsiHostManifest(manifest: RsiSetupManifest, rebase: RsiHostRebase): RsiSetupManifest;
+//# sourceMappingURL=rsi-host-update.d.ts.map

package/lib/rsi-host-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-host-update.d.ts","sourceRoot":"","sources":["../src/rsi-host-update.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEzE,MAAM,WAAW,qBAAqB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACvE,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAA;CACtD;AAaD,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,yBAAyB,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;IAChH,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;IACnE,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;IACxE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;IAChH,MAAM,EAAE;QAAE,aAAa,EAAE,CAAC,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7H,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CACtE;AACD,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,0BAA0B,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;IACjH,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;IAChG,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;IAChH,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IACtC,MAAM,EAAE;QACN,uBAAuB,EAAE,MAAM,CAAA;QAC/B,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,oBAAoB,EAAE,MAAM,CAAA;YACpG,qBAAqB,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,CAAA;QACxD,KAAK,EAAE;YAAE,qBAAqB,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,CAAA;QAC/D,gBAAgB,EAAE,iBAAiB,GAAG,oBAAoB,CAAA;KAC3D,CAAA;IACD,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CACtE;AACD,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,qBAAqB,CAAA;AAC1E,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAAoC;AA4E9G,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,SAAS,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CACxH,GAAG;IAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,eAAe,CAAA;CAAE,CAoB3D;AACD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,EACrF,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,EAChF,QAAQ,EAAE,SAAS,eAAe,EAAE,GAAG,oBAAoB,CAK5D;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,EACvF,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,EAChF,QAAQ,EAAE,SAAS,eAAe,EAAE,GAAG,qBAAqB,CAK7D;AAKD;sEACsE;AACtE,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,GAAG,CAAC,CAqBxE;AA8CD,sEAAsE;AACtE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,aAAa,CAAA;CACtB,GAAG;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CA+BhF;AAED;gFACgF;AAChF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAAG,MAAM,CAwBhG;AAED;kFACkF;AAClF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,GAAG,gBAAgB,CAmBzG"}

package/lib/rsi-host-update.js

@@ -0,0 +1,316 @@
+import { isDeepStrictEqual } from 'node:util';
+import { createHash, createPublicKey, sign, verify } from 'node:crypto';
+import { isAbsolute, resolve } from 'node:path';
+import { isMap, isSeq, parseDocument } from 'yaml';
+import { runtimeConfigDigest } from '@dsh-enhanced/plugin-control-plane';
+function fail(message) { throw new Error(`rsi host update: ${message}`); }
+const sha256 = (source) => createHash('sha256').update(source).digest('hex');
+const hex = /^[a-f0-9]{64}$/u;
+const profileName = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+const backupName = /^\.([A-Za-z0-9][A-Za-z0-9._-]{0,63})\.plugin-backup-([A-Za-z0-9-]{1,36})$/u;
+function canonical(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(',')}]`;
+    if (record(value))
+        return `{${Object.entries(value).filter(([, item]) => item !== undefined)
+            .sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => `${JSON.stringify(key)}:${canonical(item)}`).join(',')}}`;
+    return JSON.stringify(value);
+}
+export function rsiHostUpdateOverlayDigest(value) { return sha256(canonical(value)); }
+function overlayShape(value, resources, home, profile, bootstrapDigest, sequence, previousDigest) {
+    if (!record(value) || !isDeepStrictEqual(Object.keys(value).sort(), ['schemaVersion', 'kind', 'transactionId', 'dshHome',
+        'targetProfile', 'installationId', 'currentPlanId', 'activationId', 'sequence', 'previousDigest', 'bootstrapDigest', 'files', 'patches',
+        'runtimeReceiptDigest', 'planDigest', 'result', 'issuedAt', 'authority', 'keyId', 'signature'].sort())
+        || value.schemaVersion !== 1 || value.kind !== 'rsi-host-update-overlay'
+        || value.dshHome !== home || value.targetProfile !== profile || value.installationId !== resources.installationId
+        || typeof value.currentPlanId !== 'string' || !value.currentPlanId || typeof value.activationId !== 'string' || !value.activationId
+        || value.sequence !== sequence || value.previousDigest !== previousDigest || value.bootstrapDigest !== bootstrapDigest
+        || value.authority !== resources.identities.host.authority || value.keyId !== resources.identities.host.keyId
+        || typeof value.transactionId !== 'string' || !value.transactionId || !Number.isSafeInteger(value.issuedAt)
+        || !hex.test(String(value.runtimeReceiptDigest)) || !hex.test(String(value.planDigest))
+        || !record(value.files) || !record(value.patches) || Object.keys(value.files).length > 64
+        || Object.keys(value.patches).length < 2 || Object.keys(value.patches).length > 8
+        || Object.entries(value.files).some(([path, digest]) => !isAbsolute(path) || resolve(path) !== path
+            || !path.startsWith(`${resources.configRoot}/`) || !hex.test(String(digest)))
+        || !hex.test(String(value.patches[profile]))
+        || !profileName.test(String(record(value.result) ? value.result.coordinatorProfile : undefined))
+        || !hex.test(String(value.patches[String(record(value.result) ? value.result.coordinatorProfile : undefined)]))
+        || Object.entries(value.patches).some(([name, digest]) => !(profileName.test(name)
+            || backupName.exec(name)?.[1] === profile) || !hex.test(String(digest)))
+        || !record(value.result) || value.result.targetProfile !== profile || value.result.coordinatorProfile === profile
+        || value.result.manifestPath !== `${resources.configRoot}/manifest.json`
+        || value.result.manifestDigest !== value.files[value.result.manifestPath]
+        || typeof value.signature !== 'string' || value.signature.length > 256)
+        fail('overlay shape or scope differs');
+    const { signature, ...unsigned } = value;
+    const key = createPublicKey(resources.identities.host.publicKeyPem);
+    if (key.asymmetricKeyType !== 'ed25519'
+        || !verify(null, Buffer.from(canonical(unsigned)), key, Buffer.from(signature, 'base64')))
+        fail('overlay signature differs');
+}
+function repairOverlayShape(value, resources, home, profile, bootstrapDigest, sequence, previousDigest) {
+    if (!record(value) || !isDeepStrictEqual(Object.keys(value).sort(), ['schemaVersion', 'kind', 'transactionId', 'dshHome',
+        'targetProfile', 'installationId', 'sequence', 'previousDigest', 'bootstrapDigest', 'files', 'patches',
+        'runtimeReceiptDigest', 'planDigest', 'result', 'repair', 'issuedAt', 'authority', 'keyId', 'signature'].sort())
+        || value.schemaVersion !== 1 || value.kind !== 'rsi-owner-repair-overlay'
+        || value.dshHome !== home || value.targetProfile !== profile || value.installationId !== resources.installationId
+        || value.sequence !== sequence || value.previousDigest !== previousDigest || value.bootstrapDigest !== bootstrapDigest
+        || value.authority !== resources.identities.host.authority || value.keyId !== resources.identities.host.keyId
+        || typeof value.transactionId !== 'string' || !value.transactionId || !Number.isSafeInteger(value.issuedAt)
+        || !hex.test(String(value.runtimeReceiptDigest)) || !hex.test(String(value.planDigest))
+        || !record(value.files) || !record(value.patches) || Object.keys(value.files).length > 64
+        || Object.entries(value.files).some(([path, digest]) => !isAbsolute(path) || resolve(path) !== path
+            || !path.startsWith(`${resources.configRoot}/`) || !hex.test(String(digest)))
+        || !record(value.result) || !isDeepStrictEqual(Object.keys(value.result).sort(), ['schemaVersion', 'manifestPath', 'manifestDigest', 'targetProfile', 'coordinatorProfile'].sort())
+        || value.result.schemaVersion !== 1 || value.result.targetProfile !== profile
+        || !profileName.test(String(value.result.coordinatorProfile)) || value.result.coordinatorProfile === profile
+        || value.result.manifestPath !== `${resources.configRoot}/manifest.json`
+        || value.result.manifestDigest !== value.files[value.result.manifestPath]
+        || !isDeepStrictEqual(Object.keys(value.patches).sort(), [profile, value.result.coordinatorProfile].sort())
+        || Object.values(value.patches).some(digest => !hex.test(String(digest)))
+        || !record(value.repair) || !isDeepStrictEqual(Object.keys(value.repair).sort(), ['sourceMaintenanceDigest', 'before', 'after', 'permissionPreset'].sort())
+        || !hex.test(String(value.repair.sourceMaintenanceDigest))
+        || !['workspace-write', 'danger-full-access'].includes(String(value.repair.permissionPreset))
+        || !record(value.repair.before) || !isDeepStrictEqual(Object.keys(value.repair.before).sort(), ['files', 'patches', 'runtimeReceiptDigest', 'creationReceiptDigest', 'journalDigest'].sort())
+        || !record(value.repair.before.files) || !record(value.repair.before.patches)
+        || !isDeepStrictEqual(Object.keys(value.repair.before.files).sort(), Object.keys(value.files).sort())
+        || !isDeepStrictEqual(Object.keys(value.repair.before.patches).sort(), Object.keys(value.patches).sort())
+        || Object.values(value.repair.before.files).some(digest => !hex.test(String(digest)))
+        || Object.values(value.repair.before.patches).some(digest => !hex.test(String(digest)))
+        || !hex.test(String(value.repair.before.runtimeReceiptDigest))
+        || !hex.test(String(value.repair.before.creationReceiptDigest))
+        || !hex.test(String(value.repair.before.journalDigest))
+        || !record(value.repair.after) || !isDeepStrictEqual(Object.keys(value.repair.after).sort(), ['creationReceiptDigest', 'journalDigest'].sort())
+        || !hex.test(String(value.repair.after.creationReceiptDigest)) || !hex.test(String(value.repair.after.journalDigest))
+        || typeof value.signature !== 'string' || value.signature.length > 256)
+        fail('repair overlay shape or scope differs');
+    const { signature, ...unsigned } = value;
+    const key = createPublicKey(resources.identities.host.publicKeyPem);
+    if (key.asymmetricKeyType !== 'ed25519'
+        || !verify(null, Buffer.from(canonical(unsigned)), key, Buffer.from(signature, 'base64')))
+        fail('repair overlay signature differs');
+}
+export function readRsiHostUpdateOverlayChain(input) {
+    if (input.source === undefined)
+        return { records: [] };
+    let parsed;
+    try {
+        parsed = JSON.parse(input.source);
+    }
+    catch {
+        fail('overlay JSON is invalid');
+    }
+    if (!record(parsed) || parsed.schemaVersion !== 1 || parsed.kind !== 'rsi-host-update-overlays'
+        || !Array.isArray(parsed.records) || parsed.records.length < 1 || parsed.records.length > 64)
+        fail('overlay chain is invalid');
+    const records = [];
+    const bootstrapDigest = sha256(input.bootstrapSource);
+    for (const value of parsed.records) {
+        const sequence = records.length + 1;
+        const previousDigest = records.length ? rsiHostUpdateOverlayDigest(records.at(-1)) : null;
+        if (record(value) && value.kind === 'rsi-owner-repair-overlay') {
+            repairOverlayShape(value, input.resources, input.dshHome, input.profile, bootstrapDigest, sequence, previousDigest);
+        }
+        else {
+            overlayShape(value, input.resources, input.dshHome, input.profile, bootstrapDigest, sequence, previousDigest);
+        }
+        if (records.length && value.issuedAt < records.at(-1).issuedAt)
+            fail('overlay time moved backwards');
+        records.push(value);
+    }
+    return { records, latest: records.at(-1) };
+}
+export function signRsiHostUpdateOverlay(input, privateKeyPem, resources, bootstrapSource, previous) {
+    const record = { ...input, signature: sign(null, Buffer.from(canonical(input)), privateKeyPem).toString('base64') };
+    overlayShape(record, resources, input.dshHome, input.targetProfile, sha256(bootstrapSource), previous.length + 1, previous.length ? rsiHostUpdateOverlayDigest(previous.at(-1)) : null);
+    return record;
+}
+export function signRsiOwnerRepairOverlay(input, privateKeyPem, resources, bootstrapSource, previous) {
+    const record = { ...input, signature: sign(null, Buffer.from(canonical(input)), privateKeyPem).toString('base64') };
+    repairOverlayShape(record, resources, input.dshHome, input.targetProfile, sha256(bootstrapSource), previous.length + 1, previous.length ? rsiHostUpdateOverlayDigest(previous.at(-1)) : null);
+    return record;
+}
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+/** Replace only exact pinned assets and the installed DSH baseline version.
+ * Arbitrary old-Host path strings are rejected instead of guessed. */
+export function rebaseRsiHostValue(value, rebase) {
+    const visit = (item) => {
+        if (typeof item === 'string') {
+            if (item === rebase.oldHostRoot || item.startsWith(`${rebase.oldHostRoot}/`))
+                fail(`unmapped Host path: ${item}`);
+            return item;
+        }
+        if (Array.isArray(item))
+            return item.map(visit);
+        if (!record(item))
+            return item;
+        const oldPath = typeof item.path === 'string' ? item.path : undefined;
+        const pin = oldPath === undefined ? undefined : rebase.pins[oldPath];
+        if (pin !== undefined && oldPath !== undefined) {
+            if (typeof item.sha256 !== 'string' || !/^[a-f0-9]{64}$/u.test(item.sha256))
+                fail('pinned asset is malformed');
+            return Object.fromEntries(Object.entries(item).map(([key, child]) => [key,
+                key === 'path' ? pin.path : key === 'sha256' ? pin.sha256
+                    : key === 'version' && child === rebase.oldHostVersion && oldPath.startsWith(`${rebase.oldHostRoot}/`)
+                        ? rebase.candidateHostVersion : visit(child)]));
+        }
+        return Object.fromEntries(Object.entries(item).map(([key, child]) => [key,
+            key === 'dshBaseline' && child === rebase.oldHostVersion ? rebase.candidateHostVersion : visit(child)]));
+    };
+    return visit(value);
+}
+function document(source, label) {
+    const value = parseDocument(source, { uniqueKeys: true, strict: true });
+    if (value.errors.length || value.warnings.length || !isSeq(value.contents))
+        fail(`${label} is not a bounded patch`);
+    return value;
+}
+function row(document, id) {
+    let found;
+    const operations = document.contents;
+    if (!isSeq(operations))
+        fail('patch operations are invalid');
+    for (const operation of operations.items) {
+        if (!isMap(operation))
+            fail('patch operation is not a map');
+        if (operation.get('id') === id) {
+            if (found)
+                fail(`duplicate patch row: ${id}`);
+            found = operation;
+        }
+        for (const kind of ['insert', 'update']) {
+            const entries = operation.get(kind, true);
+            if (entries === undefined)
+                continue;
+            if (!isSeq(entries))
+                fail('patch rows are not a sequence');
+            for (const candidate of entries.items) {
+                if (!isMap(candidate))
+                    fail('patch row is not a map');
+                if (candidate.get('id') === id) {
+                    if (found)
+                        fail(`duplicate patch row: ${id}`);
+                    found = candidate;
+                }
+            }
+        }
+    }
+    if (!found)
+        fail(`patch row is missing: ${id}`);
+    return found;
+}
+function config(value) {
+    const node = value.get('config', true);
+    if (!isMap(node))
+        fail('patch row config is not a map');
+    const result = node.toJSON();
+    if (!record(result))
+        fail('patch row config is invalid');
+    return result;
+}
+function targetDigest(manifest, id, patch) {
+    const source = config(row(patch, id));
+    return runtimeConfigDigest(id === 'dsh-enhanced-assistant-verifier'
+        ? { ...source, sourceReviews: manifest.sourceReviews } : source);
+}
+/** Preserve unrelated patch rows and original observer identities. */
+export function rebaseRsiHostProfiles(input) {
+    const oldTarget = document(input.targetPatch, 'target patch');
+    const coordinator = document(input.coordinatorPatch, 'coordinator patch');
+    const changed = rebaseRsiHostValue(input.manifest, input.rebase);
+    const target = document(input.targetPatch, 'target patch');
+    const replacements = new Map([
+        ['dsh-enhanced-plugin-control-plane', changed.controlPlane],
+        ['dsh-enhanced-assistant-growth-driver', changed.growthDriver],
+    ]);
+    for (const [id, value] of replacements) {
+        const current = config(row(oldTarget, id));
+        const original = id === 'dsh-enhanced-plugin-control-plane' ? input.manifest.controlPlane : input.manifest.growthDriver;
+        if (!isDeepStrictEqual(current, original))
+            fail(`${id} patch differs from the owner manifest`);
+        row(target, id).set('config', target.createNode(value));
+    }
+    const verifier = row(target, 'dsh-enhanced-assistant-verifier');
+    const verifierConfig = config(verifier);
+    if (!isDeepStrictEqual(verifierConfig.sourceReviews, input.manifest.sourceReviews))
+        fail('verifier patch differs from the owner manifest');
+    verifier.set('config', target.createNode({ ...verifierConfig, sourceReviews: changed.sourceReviews }));
+    const targets = changed.controlPlane.runtimeObserver?.targets;
+    if (!targets)
+        fail('runtime observer targets are missing');
+    for (const targetEntry of targets) {
+        if (!replacements.has(targetEntry.entryId) && targetEntry.entryId !== 'dsh-enhanced-assistant-verifier')
+            continue;
+        const oldDigest = targetDigest(input.manifest, targetEntry.entryId, oldTarget);
+        if (targetEntry.configDigest !== oldDigest)
+            fail(`observer digest differs: ${targetEntry.entryId}`);
+        targetEntry.configDigest = targetDigest(changed, targetEntry.entryId, target);
+    }
+    // A coordinator patch may contain only its declared standalone scope. It
+    // must not carry any old Host path that this rebase cannot account for.
+    if (input.coordinatorPatch.includes(input.rebase.oldHostRoot))
+        fail('coordinator patch has an unmapped Host path');
+    return { manifest: changed, targetPatch: target.toString({ lineWidth: 0 }), coordinatorPatch: coordinator.toString({ lineWidth: 0 }) };
+}
+/** Rebase the deployed patch itself. An adoption may have replaced the original
+ * bootstrap rows, so the historical manifest cannot be used as their source. */
+export function rebaseRsiHostActivePatch(input) {
+    const documentBefore = document(input.patch, 'active patch');
+    const documentAfter = document(input.patch, 'active patch');
+    const ids = ['dsh-enhanced-plugin-control-plane', 'dsh-enhanced-assistant-growth-driver',
+        'dsh-enhanced-assistant-verifier'];
+    for (const id of ids) {
+        const current = config(row(documentBefore, id));
+        row(documentAfter, id).set('config', documentAfter.createNode(rebaseRsiHostValue(current, input.rebase)));
+    }
+    const cp = config(row(documentAfter, ids[0]));
+    const observer = cp.runtimeObserver;
+    if (!record(observer) || !Array.isArray(observer.targets))
+        fail('active runtime observer is missing');
+    for (const entry of observer.targets) {
+        if (!record(entry) || typeof entry.entryId !== 'string' || typeof entry.configDigest !== 'string')
+            fail('active observer entry differs');
+        if (!ids.includes(entry.entryId))
+            continue;
+        const oldConfig = config(row(documentBefore, entry.entryId));
+        const newConfig = config(row(documentAfter, entry.entryId));
+        const oldDigest = runtimeConfigDigest(oldConfig);
+        if (entry.configDigest !== oldDigest)
+            fail(`active observer digest differs: ${entry.entryId}`);
+        entry.configDigest = runtimeConfigDigest(newConfig);
+    }
+    row(documentAfter, ids[0]).set('config', documentAfter.createNode(cp));
+    if (JSON.stringify(documentAfter.toJSON()).includes(input.rebase.oldHostRoot))
+        fail('active patch retains an unmapped Host path');
+    return documentAfter.toString({ lineWidth: 0 });
+}
+/** The owner manifest is historical bootstrap authority; rebase only its
+ * verified baseline pins and observer digests, independently of live adoption. */
+export function rebaseRsiHostManifest(manifest, rebase) {
+    const changed = rebaseRsiHostValue(manifest, rebase);
+    const oldTargets = manifest.controlPlane.runtimeObserver?.targets;
+    const newTargets = changed.controlPlane.runtimeObserver?.targets;
+    if (!oldTargets || !newTargets || oldTargets.length !== newTargets.length)
+        fail('owner observer targets differ');
+    const configFor = (source, id) => id === 'dsh-enhanced-plugin-control-plane'
+        ? source.controlPlane : id === 'dsh-enhanced-assistant-growth-driver' ? source.growthDriver
+        : id === 'dsh-enhanced-assistant-verifier' ? { sourceReviews: source.sourceReviews } : undefined;
+    for (let index = 0; index < oldTargets.length; index++) {
+        const oldTarget = oldTargets[index], nextTarget = newTargets[index];
+        if (oldTarget.entryId !== nextTarget.entryId)
+            fail('owner observer entry changed');
+        const before = configFor(manifest, oldTarget.entryId);
+        const after = configFor(changed, nextTarget.entryId);
+        if (before === undefined || after === undefined)
+            continue;
+        if (oldTarget.entryId === 'dsh-enhanced-assistant-verifier')
+            continue; // Its full patch config is not stored in the manifest.
+        if (oldTarget.configDigest !== runtimeConfigDigest(before))
+            fail('owner observer digest differs');
+        nextTarget.configDigest = runtimeConfigDigest(after);
+    }
+    return changed;
+}
+//# sourceMappingURL=rsi-host-update.js.map

package/lib/rsi-host-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-host-update.js","sourceRoot":"","sources":["../src/rsi-host-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAgB,MAAM,MAAM,CAAA;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AAYxE,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AACxF,MAAM,MAAM,GAAG,CAAC,MAAuB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACrG,MAAM,GAAG,GAAG,iBAAiB,CAAA;AAC7B,MAAM,WAAW,GAAG,oCAAoC,CAAA;AACxD,MAAM,UAAU,GAAG,4EAA4E,CAAA;AAC/F,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACtE,IAAI,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACzF,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACxH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC;AAwBD,MAAM,UAAU,0BAA0B,CAAC,KAAsB,IAAY,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC;AAC9G,SAAS,YAAY,CAAC,KAAc,EAAE,SAAgC,EAAE,IAAY,EAAE,OAAe,EACnG,eAAuB,EAAE,QAAgB,EAAE,cAA6B;IACxE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS;QACtH,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS;QACvI,sBAAsB,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;WACnG,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;WACrE,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc;WAC9G,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY;WAChI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc,IAAI,KAAK,CAAC,eAAe,KAAK,eAAe;WACnH,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK;WAC1G,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;WACxG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;WACpF,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;WACtF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;WAC9E,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;eAC9F,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;WAC5E,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;WACzC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;WAC7F,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;WAC5G,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;eAC7E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;WACvE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,kBAAkB,KAAK,OAAO;WAC9G,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,GAAG,SAAS,CAAC,UAAU,gBAAgB;WACrE,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;WACtE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAChH,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAA;IACxC,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACnE,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;WAClC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;AAChI,CAAC;AACD,SAAS,kBAAkB,CAAC,KAAc,EAAE,SAAgC,EAAE,IAAY,EAAE,OAAe,EACzG,eAAuB,EAAE,QAAgB,EAAE,cAA6B;IACxE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS;QACtH,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS;QACtG,sBAAsB,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;WAC7G,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B;WACtE,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc;WAC9G,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc,IAAI,KAAK,CAAC,eAAe,KAAK,eAAe;WACnH,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK;WAC1G,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;WACxG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;WACpF,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;WACtF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;eAC9F,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;WAC5E,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAC7E,CAAC,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC;WACjG,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,OAAO;WAC1E,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,kBAAkB,KAAK,OAAO;WACzG,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,GAAG,SAAS,CAAC,UAAU,gBAAgB;WACrE,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;WACtE,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC;WACxG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;WACtE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAC7E,CAAC,yBAAyB,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC;WACzE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;WACvD,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;WAC1F,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAC3F,CAAC,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;WAC7F,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;WAC1E,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;WAClG,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;WACtG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;WAClF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;WACpF,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;WAC3D,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;WAC5D,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;WACpD,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EACzF,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;WACjD,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;WAClH,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG;QAAE,IAAI,CAAC,uCAAuC,CAAC,CAAA;IACvH,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAA;IACxC,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACnE,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;WAClC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;AACvI,CAAC;AACD,MAAM,UAAU,6BAA6B,CAAC,KAE7C;IACC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IACtD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAAC,CAAC;IACnF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,0BAA0B;WAC1F,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAA;IAChI,MAAM,OAAO,GAAsB,EAAE,CAAA;IACrC,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IACrD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAA;QACnC,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC1F,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;YAC/D,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;QACrH,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;QAC/G,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ;YAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;QACrG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAA;AAC7C,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,KAA8C,EACrF,aAAqB,EAAE,SAAgC,EAAE,eAAuB,EAChF,QAAoC;IACpC,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACnH,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,EACzF,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC7F,OAAO,MAAM,CAAA;AACf,CAAC;AACD,MAAM,UAAU,yBAAyB,CAAC,KAA+C,EACvF,aAAqB,EAAE,SAAgC,EAAE,eAAuB,EAChF,QAAoC;IACpC,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACnH,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,EAC/F,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC7F,OAAO,MAAM,CAAA;AACf,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,kBAAkB,CAAI,KAAQ,EAAE,MAAqB;IACnE,MAAM,KAAK,GAAG,CAAC,IAAa,EAAW,EAAE;QACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,IAAI,KAAK,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,WAAW,GAAG,CAAC;gBAAE,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAA;YACjH,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAC9B,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;QACrE,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpE,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/C,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;YAC9G,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG;gBACvE,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM;oBACvD,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,WAAW,GAAG,CAAC;wBACpG,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACvD,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG;YACvE,GAAG,KAAK,aAAa,IAAI,KAAK,KAAK,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5G,CAAC,CAAA;IACD,OAAO,KAAK,CAAC,KAAK,CAAM,CAAA;AAC1B,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACvE,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAA;IACnH,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,GAAG,CAAC,QAA0C,EAAE,EAAU;IACjE,IAAI,KAA0B,CAAA;IAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAA;IACpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC5D,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAC3D,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC/B,IAAI,KAAK;gBAAE,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAA;YAC7C,KAAK,GAAG,SAAS,CAAA;QACnB,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACzC,IAAI,OAAO,KAAK,SAAS;gBAAE,SAAQ;YACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;YAC1D,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACtC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;oBAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;gBACrD,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC/B,IAAI,KAAK;wBAAE,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAA;oBAC7C,KAAK,GAAG,SAAS,CAAA;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAA;IAC/C,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;IAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IACxD,OAAO,MAAM,CAAA;AACf,CAAC;AACD,SAAS,YAAY,CAAC,QAA0B,EAAE,EAAU,EAAE,KAAuC;IACnG,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;IACrC,OAAO,mBAAmB,CAAC,EAAE,KAAK,iCAAiC;QACjE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AACpE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAA;IAC7D,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAA;IAC1D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAkB;QAC5C,CAAC,mCAAmC,EAAE,OAAO,CAAC,YAAY,CAAC;QAC3D,CAAC,sCAAsC,EAAE,OAAO,CAAC,YAAY,CAAC;KAC/D,CAAC,CAAA;IACF,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1C,MAAM,QAAQ,GAAG,EAAE,KAAK,mCAAmC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAA;QACvH,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,IAAI,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAA;QAC9F,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAA;IAC/D,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IACvC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,IAAI,CAAC,gDAAgD,CAAC,CAAA;IAC1I,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;IACtG,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAA;IAC7D,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAA;IAC1D,KAAK,MAAM,WAAW,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,KAAK,iCAAiC;YAAE,SAAQ;QACjH,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAC9E,IAAI,WAAW,CAAC,YAAY,KAAK,SAAS;YAAE,IAAI,CAAC,4BAA4B,WAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QACnG,WAAW,CAAC,YAAY,GAAG,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC/E,CAAC;IACD,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,IAAI,CAAC,6CAA6C,CAAC,CAAA;IAClH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,CAAA;AACxI,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,wBAAwB,CAAC,KAA+C;IACtF,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IAC5D,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IAC3D,MAAM,GAAG,GAAG,CAAC,mCAAmC,EAAE,sCAAsC;QACtF,iCAAiC,CAAC,CAAA;IACpC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAA;QAC/C,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC3G,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,EAAE,CAAC,eAAe,CAAA;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;IACrG,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;YAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;QACxI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,SAAQ;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QAC3D,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA;QAChD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;YAAE,IAAI,CAAC,mCAAmC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAC9F,KAAK,CAAC,YAAY,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA;IACrD,CAAC;IACD,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IACvE,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;IACjI,OAAO,aAAa,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;AACjD,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,qBAAqB,CAAC,QAA0B,EAAE,MAAqB;IACrF,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAA;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAA;IAChE,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;IAChH,MAAM,SAAS,GAAG,CAAC,MAAwB,EAAE,EAAU,EAAW,EAAE,CAAC,EAAE,KAAK,mCAAmC;QAC7G,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,sCAAsC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY;QACzF,CAAC,CAAC,EAAE,KAAK,iCAAiC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IACpG,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAE,EAAE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAE,CAAA;QACrE,IAAI,SAAS,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;YAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAClF,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;QACrD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;QACpD,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;YAAE,SAAQ;QACzD,IAAI,SAAS,CAAC,OAAO,KAAK,iCAAiC;YAAE,SAAQ,CAAC,uDAAuD;QAC7H,IAAI,SAAS,CAAC,YAAY,KAAK,mBAAmB,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;QACjG,UAAU,CAAC,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/lib/rsi-install-inputs.d.ts

@@ -0,0 +1,43 @@
+import { type PluginControlTrustConfig, type RuntimeObserverTarget, type SourceReleaseAuthorityConfig } from '@dsh-enhanced/plugin-control-plane';
+import type { RsiAuthorityResources } from './rsi-authority-resources.js';
+import type { Pin } from './rsi-authority-runtime.js';
+import type { RsiSourceWorkspace } from './rsi-source.js';
+export declare class RsiInstalledInputsUnavailableError extends Error {
+    constructor(message: string);
+}
+export interface InstalledRsiDsh {
+    root: string;
+    path: string;
+    version: string;
+    pin: Pin;
+}
+/** Inspect only the installed CLI package and its exact bin target. */
+export declare function resolveInstalledRsiDsh(environment?: NodeJS.ProcessEnv, installedDshRoot?: string): Promise<InstalledRsiDsh>;
+export interface RsiInstalledInputsRequest {
+    dshHome: string;
+    targetProfile: string;
+    /** Exact bytes returned by the installed DSH --dump-config command. */
+    targetEffective: string;
+    /** Optional when the PATH dsh points into the same installed package. */
+    installedDshRoot?: string;
+    resources: RsiAuthorityResources;
+    source: RsiSourceWorkspace;
+    environment?: NodeJS.ProcessEnv;
+}
+export interface RsiInstalledInputs {
+    dsh: InstalledRsiDsh;
+    plugins: string[];
+    hostDeploymentInputs: string[];
+    observerTargets: RuntimeObserverTarget[];
+    executor: PluginControlTrustConfig['executor'];
+    git: Pin;
+    systemctl: Pin & {
+        interpreter: Pin | null;
+    };
+    policies: SourceReleaseAuthorityConfig['grant']['policies'];
+}
+/** Caller holds the installation lifecycle lock and supplies one pre-mutation
+ * dump. These are declared Host disk inputs, not a claim of complete transitive
+ * JavaScript module coverage. */
+export declare function collectRsiInstalledInputs(input: RsiInstalledInputsRequest): Promise<RsiInstalledInputs>;
+//# sourceMappingURL=rsi-install-inputs.d.ts.map

package/lib/rsi-install-inputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsi-install-inputs.d.ts","sourceRoot":"","sources":["../src/rsi-install-inputs.ts"],"names":[],"mappings":"AAKA,OAAO,EACyB,KAAK,wBAAwB,EAAE,KAAK,qBAAqB,EACvF,KAAK,4BAA4B,EAAE,MAAM,oCAAoC,CAAA;AAI/E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AACzE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,4BAA4B,CAAA;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAYzD,qBAAa,kCAAmC,SAAQ,KAAK;gBAC/C,OAAO,EAAE,MAAM;CAC5B;AA2ED,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE;AAE1F,uEAAuE;AACvE,wBAAsB,sBAAsB,CAAC,WAAW,GAAE,MAAM,CAAC,UAAwB,EACvF,gBAAgB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA0BrD;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;IACrB,uEAAuE;IACvE,eAAe,EAAE,MAAM,CAAA;IACvB,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,EAAE,qBAAqB,CAAA;IAChC,MAAM,EAAE,kBAAkB,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAChC;AACD,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,eAAe,CAAA;IACpB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,oBAAoB,EAAE,MAAM,EAAE,CAAA;IAC9B,eAAe,EAAE,qBAAqB,EAAE,CAAA;IACxC,QAAQ,EAAE,wBAAwB,CAAC,UAAU,CAAC,CAAA;IAC9C,GAAG,EAAE,GAAG,CAAA;IACR,SAAS,EAAE,GAAG,GAAG;QAAE,WAAW,EAAE,GAAG,GAAG,IAAI,CAAA;KAAE,CAAA;IAC5C,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAA;CAC5D;AAED;;iCAEiC;AACjC,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAiK7G"}