@flowdesk/core 0.1.0 → 0.1.2

package/dist/dispatch-idempotency.js

@@ -0,0 +1,275 @@
+import { invalid, valid, validateNoForbiddenRawPayloads, validateOpaqueId, validateOpaqueRef, } from "./validators.js";
+export const FLOWDESK_DISPATCH_IDEMPOTENCY_ENTRY_STATES = [
+    "reserved",
+    "sdk_call_permitted",
+    "dispatch_completed",
+    "dispatch_failed",
+    "quarantined",
+];
+const disabledAuthority = {
+    dispatch_authority_enabled: false,
+    realOpenCodeDispatch: false,
+    actualLaneLaunch: false,
+    providerCall: false,
+    runtimeExecution: false,
+};
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function validateTimestamp(value, label) {
+    return typeof value === "string" && Number.isFinite(Date.parse(value))
+        ? valid()
+        : invalid(`${label} must be a parseable timestamp`);
+}
+function validateEntry(value, index) {
+    if (!isRecord(value))
+        return invalid(`entries[${index}] must be an object`);
+    const record = value;
+    const errors = [];
+    const allowed = new Set(["attempt_id", "idempotency_key", "state", "recorded_at"]);
+    for (const key of Object.keys(record))
+        if (!allowed.has(key))
+            errors.push(`entries[${index}] unknown properties: ${key}`);
+    errors.push(...validateOpaqueId(record.attempt_id, `entries[${index}].attempt_id`).errors);
+    errors.push(...validateOpaqueRef(record.idempotency_key, `entries[${index}].idempotency_key`).errors);
+    if (typeof record.state !== "string" ||
+        !FLOWDESK_DISPATCH_IDEMPOTENCY_ENTRY_STATES.includes(record.state))
+        errors.push(`entries[${index}].state is invalid`);
+    errors.push(...validateTimestamp(record.recorded_at, `entries[${index}].recorded_at`).errors);
+    errors.push(...validateNoForbiddenRawPayloads(record, `entries[${index}]`).errors);
+    return errors.length === 0 ? valid() : invalid(...errors);
+}
+export function validateFlowDeskDispatchIdempotencySnapshotV1(value, expectedWorkflowId) {
+    if (!isRecord(value))
+        return invalid("dispatch idempotency snapshot must be an object");
+    const record = value;
+    const errors = [];
+    const allowed = new Set([
+        "schema_version",
+        "workflow_id",
+        "snapshot_ref",
+        "observed_at",
+        "entries",
+        "dispatch_authority_enabled",
+        "realOpenCodeDispatch",
+        "actualLaneLaunch",
+        "providerCall",
+        "runtimeExecution",
+    ]);
+    for (const key of Object.keys(record))
+        if (!allowed.has(key))
+            errors.push(`unknown properties: ${key}`);
+    if (record.schema_version !== "flowdesk.dispatch_idempotency_snapshot.v1")
+        errors.push("dispatch idempotency snapshot schema_version is invalid");
+    errors.push(...validateOpaqueId(record.workflow_id, "workflow_id").errors);
+    if (expectedWorkflowId !== undefined && record.workflow_id !== expectedWorkflowId)
+        errors.push("dispatch idempotency snapshot workflow_id mismatch");
+    errors.push(...validateOpaqueRef(record.snapshot_ref, "snapshot_ref").errors);
+    errors.push(...validateTimestamp(record.observed_at, "observed_at").errors);
+    if (!Array.isArray(record.entries)) {
+        errors.push("entries must be an array");
+    }
+    else {
+        if (record.entries.length > 200)
+            errors.push("entries must be bounded to 200");
+        const seenAttempts = new Set();
+        const seenIdempotencyKeys = new Set();
+        for (const [index, entry] of record.entries.entries()) {
+            errors.push(...validateEntry(entry, index).errors);
+            if (isRecord(entry) && typeof entry.attempt_id === "string") {
+                if (seenAttempts.has(entry.attempt_id))
+                    errors.push(`entries[${index}].attempt_id is duplicated`);
+                seenAttempts.add(entry.attempt_id);
+            }
+            if (isRecord(entry) && typeof entry.idempotency_key === "string") {
+                if (seenIdempotencyKeys.has(entry.idempotency_key))
+                    errors.push(`entries[${index}].idempotency_key is duplicated`);
+                seenIdempotencyKeys.add(entry.idempotency_key);
+            }
+        }
+    }
+    if (record.dispatch_authority_enabled !== false ||
+        record.realOpenCodeDispatch !== false ||
+        record.actualLaneLaunch !== false ||
+        record.providerCall !== false ||
+        record.runtimeExecution !== false)
+        errors.push("dispatch idempotency snapshot cannot enable runtime authority");
+    errors.push(...validateNoForbiddenRawPayloads(record, "dispatch_idempotency_snapshot").errors);
+    return errors.length === 0 ? valid() : invalid(...errors);
+}
+export function evaluateFlowDeskDispatchIdempotencyReplayV1(input) {
+    const errors = [];
+    const blockedLabels = [];
+    errors.push(...validateOpaqueId(input.workflowId, "workflow_id").errors);
+    errors.push(...validateOpaqueId(input.attemptId, "attempt_id").errors);
+    errors.push(...validateOpaqueRef(input.idempotencyKey, "idempotency_key").errors);
+    if (input.snapshot === undefined) {
+        blockedLabels.push("idempotency_snapshot_missing");
+    }
+    else {
+        const snapshot = validateFlowDeskDispatchIdempotencySnapshotV1(input.snapshot, input.workflowId);
+        errors.push(...snapshot.errors);
+        if (!snapshot.ok)
+            blockedLabels.push("idempotency_snapshot_invalid");
+        const entries = Array.isArray(input.snapshot.entries)
+            ? input.snapshot.entries
+            : [];
+        for (const entry of entries) {
+            if (entry.attempt_id === input.attemptId)
+                blockedLabels.push("attempt_already_recorded");
+            if (entry.idempotency_key === input.idempotencyKey)
+                blockedLabels.push("idempotency_key_reused");
+        }
+    }
+    const uniqueBlockedLabels = [...new Set(blockedLabels)];
+    const replaySafe = errors.length === 0 && uniqueBlockedLabels.length === 0;
+    return {
+        schema_version: "flowdesk.dispatch_idempotency_replay_evaluation.v1",
+        workflow_id: input.workflowId,
+        attempt_id: input.attemptId,
+        ok: errors.length === 0,
+        errors,
+        state: replaySafe ? "unique" : "replay_blocked",
+        replay_safe: replaySafe,
+        blocked_labels: uniqueBlockedLabels,
+        ...disabledAuthority,
+    };
+}
+export function prepareFlowDeskDispatchIdempotencyReservationV1(input) {
+    const errors = [];
+    const blockedLabels = [];
+    errors.push(...validateOpaqueId(input.workflowId, "workflow_id").errors);
+    errors.push(...validateOpaqueId(input.attemptId, "attempt_id").errors);
+    errors.push(...validateOpaqueRef(input.idempotencyKey, "idempotency_key").errors);
+    errors.push(...validateOpaqueRef(input.snapshotRef, "snapshot_ref").errors);
+    errors.push(...validateTimestamp(input.reservedAt, "reserved_at").errors);
+    const existingEntries = input.existingSnapshot?.entries ?? [];
+    if (input.existingSnapshot !== undefined) {
+        const existing = validateFlowDeskDispatchIdempotencySnapshotV1(input.existingSnapshot, input.workflowId);
+        errors.push(...existing.errors);
+        if (!existing.ok)
+            blockedLabels.push("existing_snapshot_invalid");
+    }
+    const replay = evaluateFlowDeskDispatchIdempotencyReplayV1({
+        workflowId: input.workflowId,
+        attemptId: input.attemptId,
+        idempotencyKey: input.idempotencyKey,
+        snapshot: input.existingSnapshot ?? {
+            schema_version: "flowdesk.dispatch_idempotency_snapshot.v1",
+            workflow_id: input.workflowId,
+            snapshot_ref: input.snapshotRef,
+            observed_at: input.reservedAt,
+            entries: [],
+            ...disabledAuthority,
+        },
+    });
+    errors.push(...replay.errors);
+    if (!replay.replay_safe)
+        blockedLabels.push(...replay.blocked_labels.map((label) => `reservation_${label}`));
+    const uniqueBlockedLabels = [...new Set(blockedLabels)];
+    let snapshot;
+    if (errors.length === 0 && uniqueBlockedLabels.length === 0) {
+        const candidate = {
+            schema_version: "flowdesk.dispatch_idempotency_snapshot.v1",
+            workflow_id: input.workflowId,
+            snapshot_ref: input.snapshotRef,
+            observed_at: input.reservedAt,
+            entries: [
+                ...existingEntries,
+                {
+                    attempt_id: input.attemptId,
+                    idempotency_key: input.idempotencyKey,
+                    state: "reserved",
+                    recorded_at: input.reservedAt,
+                },
+            ],
+            ...disabledAuthority,
+        };
+        const candidateValidation = validateFlowDeskDispatchIdempotencySnapshotV1(candidate, input.workflowId);
+        errors.push(...candidateValidation.errors);
+        if (candidateValidation.ok) {
+            snapshot = candidate;
+        }
+        else {
+            uniqueBlockedLabels.push("reservation_snapshot_invalid");
+        }
+    }
+    const prepared = errors.length === 0 && uniqueBlockedLabels.length === 0;
+    return {
+        schema_version: "flowdesk.dispatch_idempotency_reservation_result.v1",
+        workflow_id: input.workflowId,
+        attempt_id: input.attemptId,
+        snapshot_ref: input.snapshotRef,
+        ok: errors.length === 0,
+        errors,
+        state: prepared ? "reservation_prepared" : "blocked_before_reservation",
+        reservation_prepared: prepared,
+        blocked_labels: uniqueBlockedLabels,
+        ...(snapshot === undefined ? {} : { snapshot }),
+        ...disabledAuthority,
+    };
+}
+export function prepareFlowDeskDispatchIdempotencyStateUpdateV1(input) {
+    const errors = [];
+    const blockedLabels = [];
+    errors.push(...validateOpaqueId(input.workflowId, "workflow_id").errors);
+    errors.push(...validateOpaqueId(input.attemptId, "attempt_id").errors);
+    errors.push(...validateOpaqueRef(input.idempotencyKey, "idempotency_key").errors);
+    errors.push(...validateOpaqueRef(input.snapshotRef, "snapshot_ref").errors);
+    errors.push(...validateTimestamp(input.recordedAt, "recorded_at").errors);
+    if (!FLOWDESK_DISPATCH_IDEMPOTENCY_ENTRY_STATES.includes(input.nextState) ||
+        input.nextState === "reserved")
+        errors.push("next_state must be a terminal or post-reservation state");
+    if (input.existingSnapshot === undefined) {
+        blockedLabels.push("existing_snapshot_missing");
+    }
+    else {
+        const existing = validateFlowDeskDispatchIdempotencySnapshotV1(input.existingSnapshot, input.workflowId);
+        errors.push(...existing.errors);
+        if (!existing.ok)
+            blockedLabels.push("existing_snapshot_invalid");
+    }
+    const entries = input.existingSnapshot?.entries ?? [];
+    const matchingIndex = entries.findIndex((entry) => entry.attempt_id === input.attemptId &&
+        entry.idempotency_key === input.idempotencyKey);
+    if (matchingIndex === -1)
+        blockedLabels.push("idempotency_entry_missing");
+    const uniqueBlockedLabels = [...new Set(blockedLabels)];
+    let snapshot;
+    if (errors.length === 0 && uniqueBlockedLabels.length === 0) {
+        const updatedEntries = entries.map((entry, index) => index === matchingIndex
+            ? { ...entry, state: input.nextState, recorded_at: input.recordedAt }
+            : entry);
+        const candidate = {
+            schema_version: "flowdesk.dispatch_idempotency_snapshot.v1",
+            workflow_id: input.workflowId,
+            snapshot_ref: input.snapshotRef,
+            observed_at: input.recordedAt,
+            entries: updatedEntries,
+            ...disabledAuthority,
+        };
+        const candidateValidation = validateFlowDeskDispatchIdempotencySnapshotV1(candidate, input.workflowId);
+        errors.push(...candidateValidation.errors);
+        if (candidateValidation.ok) {
+            snapshot = candidate;
+        }
+        else {
+            uniqueBlockedLabels.push("state_update_snapshot_invalid");
+        }
+    }
+    const prepared = errors.length === 0 && uniqueBlockedLabels.length === 0;
+    return {
+        schema_version: "flowdesk.dispatch_idempotency_state_update_result.v1",
+        workflow_id: input.workflowId,
+        attempt_id: input.attemptId,
+        snapshot_ref: input.snapshotRef,
+        ok: errors.length === 0,
+        errors,
+        state: prepared ? "state_update_prepared" : "blocked_before_state_update",
+        state_update_prepared: prepared,
+        blocked_labels: uniqueBlockedLabels,
+        ...(snapshot === undefined ? {} : { snapshot }),
+        ...disabledAuthority,
+    };
+}
+//# sourceMappingURL=dispatch-idempotency.js.map

package/dist/dispatch-idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-idempotency.js","sourceRoot":"","sources":["../src/dispatch-idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,OAAO,EAEP,KAAK,EACL,8BAA8B,EAC9B,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,0CAA0C,GAAG;IACzD,UAAU;IACV,oBAAoB;IACpB,oBAAoB;IACpB,iBAAiB;IACjB,aAAa;CACJ,CAAC;AAyEX,MAAM,iBAAiB,GAAG;IACzB,0BAA0B,EAAE,KAAc;IAC1C,oBAAoB,EAAE,KAAc;IACpC,gBAAgB,EAAE,KAAc;IAChC,YAAY,EAAE,KAAc;IAC5B,gBAAgB,EAAE,KAAc;CAChC,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrE,CAAC,CAAC,KAAK,EAAE;QACT,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,WAAW,KAAK,qBAAqB,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,KAA0D,CAAC;IAC1E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IACnF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,yBAAyB,GAAG,EAAE,CAAC,CAAC;IACpF,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,KAAK,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3F,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,KAAK,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;IACtG,IACC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,CAAE,0CAAgE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAEzF,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,KAAK,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9F,MAAM,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,MAAM,EAAE,WAAW,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,6CAA6C,CAC5D,KAAc,EACd,kBAA2B;IAE3B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,KAAuD,CAAC;IACvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACvB,gBAAgB;QAChB,aAAa;QACb,cAAc;QACd,aAAa;QACb,SAAS;QACT,4BAA4B;QAC5B,sBAAsB;QACtB,kBAAkB;QAClB,cAAc;QACd,kBAAkB;KAClB,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,cAAc,KAAK,2CAA2C;QACxE,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACxE,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3E,IAAI,kBAAkB,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,kBAAkB;QAChF,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9E,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACP,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC/E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC7D,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;oBACrC,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,4BAA4B,CAAC,CAAC;gBAC3D,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;gBAClE,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;oBACjD,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,iCAAiC,CAAC,CAAC;gBAChE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAChD,CAAC;QACF,CAAC;IACF,CAAC;IACD,IACC,MAAM,CAAC,0BAA0B,KAAK,KAAK;QAC3C,MAAM,CAAC,oBAAoB,KAAK,KAAK;QACrC,MAAM,CAAC,gBAAgB,KAAK,KAAK;QACjC,MAAM,CAAC,YAAY,KAAK,KAAK;QAC7B,MAAM,CAAC,gBAAgB,KAAK,KAAK;QAEjC,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC9E,MAAM,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,2CAA2C,CAAC,KAK3D;IACA,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,aAAa,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACP,MAAM,QAAQ,GAAG,6CAA6C,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACjG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,aAAa,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YACpD,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO;YACxB,CAAC,CAAC,EAAE,CAAC;QACN,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,SAAS;gBACvC,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAChD,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc;gBACjD,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC;IACD,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC;IAC3E,OAAO;QACN,cAAc,EAAE,oDAAoD;QACpE,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM;QACN,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB;QAC/C,WAAW,EAAE,UAAU;QACvB,cAAc,EAAE,mBAAmB;QACnC,GAAG,iBAAiB;KACpB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+CAA+C,CAAC,KAO/D;IACA,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1E,MAAM,eAAe,GAAG,KAAK,CAAC,gBAAgB,EAAE,OAAO,IAAI,EAAE,CAAC;IAC9D,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,6CAA6C,CAC7D,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,UAAU,CAChB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,aAAa,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,2CAA2C,CAAC;QAC1D,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,gBAAgB,IAAI;YACnC,cAAc,EAAE,2CAA2C;YAC3D,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,OAAO,EAAE,EAAE;YACX,GAAG,iBAAiB;SACpB;KACD,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,WAAW;QACtB,aAAa,CAAC,IAAI,CACjB,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,KAAK,EAAE,CAAC,CAC/D,CAAC;IACH,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,IAAI,QAA2D,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,SAAS,GAA0C;YACxD,cAAc,EAAE,2CAA2C;YAC3D,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,OAAO,EAAE;gBACR,GAAG,eAAe;gBAClB;oBACC,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,eAAe,EAAE,KAAK,CAAC,cAAc;oBACrC,KAAK,EAAE,UAAU;oBACjB,WAAW,EAAE,KAAK,CAAC,UAAU;iBAC7B;aACD;YACD,GAAG,iBAAiB;SACpB,CAAC;QACF,MAAM,mBAAmB,GAAG,6CAA6C,CACxE,SAAS,EACT,KAAK,CAAC,UAAU,CAChB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,mBAAmB,CAAC,EAAE,EAAE,CAAC;YAC5B,QAAQ,GAAG,SAAS,CAAC;QACtB,CAAC;aAAM,CAAC;YACP,mBAAmB,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC1D,CAAC;IACF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC;IACzE,OAAO;QACN,cAAc,EAAE,qDAAqD;QACrE,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM;QACN,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,4BAA4B;QACvE,oBAAoB,EAAE,QAAQ;QAC9B,cAAc,EAAE,mBAAmB;QACnC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,iBAAiB;KACpB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+CAA+C,CAAC,KAQ/D;IACA,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1E,IACC,CAAE,0CAAgE,CAAC,QAAQ,CAC1E,KAAK,CAAC,SAAS,CACf;QACD,KAAK,CAAC,SAAS,KAAK,UAAU;QAE9B,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,aAAa,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACP,MAAM,QAAQ,GAAG,6CAA6C,CAC7D,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,UAAU,CAChB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,aAAa,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,EAAE,OAAO,IAAI,EAAE,CAAC;IACtD,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CACtC,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,SAAS;QACpC,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc,CAC/C,CAAC;IACF,IAAI,aAAa,KAAK,CAAC,CAAC;QAAE,aAAa,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC1E,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,IAAI,QAA2D,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACnD,KAAK,KAAK,aAAa;YACtB,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE;YACrE,CAAC,CAAC,KAAK,CACR,CAAC;QACF,MAAM,SAAS,GAA0C;YACxD,cAAc,EAAE,2CAA2C;YAC3D,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,OAAO,EAAE,cAAc;YACvB,GAAG,iBAAiB;SACpB,CAAC;QACF,MAAM,mBAAmB,GAAG,6CAA6C,CACxE,SAAS,EACT,KAAK,CAAC,UAAU,CAChB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,mBAAmB,CAAC,EAAE,EAAE,CAAC;YAC5B,QAAQ,GAAG,SAAS,CAAC;QACtB,CAAC;aAAM,CAAC;YACP,mBAAmB,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC;IACzE,OAAO;QACN,cAAc,EAAE,sDAAsD;QACtE,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM;QACN,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,6BAA6B;QACzE,qBAAqB,EAAE,QAAQ;QAC/B,cAAc,EAAE,mBAAmB;QACnC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,iBAAiB;KACpB,CAAC;AACH,CAAC"}

package/dist/external-auth-policy.d.ts

@@ -0,0 +1,49 @@
+import type { ProviderFamily } from "./release1-contracts.js";
+import { type ValidationResult } from "./validators.js";
+export declare const FLOWDESK_EXTERNAL_AUTH_PROVIDER_POLICY_RESULTS: readonly ["passed", "failed"];
+export type FlowDeskExternalAuthProviderPolicyResultLabelV1 = (typeof FLOWDESK_EXTERNAL_AUTH_PROVIDER_POLICY_RESULTS)[number];
+export interface FlowDeskExternalAuthProviderPolicyResultV1 {
+    schema_version: "flowdesk.external_auth_provider_policy_result.v1";
+    external_auth_policy_ref: string;
+    provider_policy_ref: string;
+    workflow_id: string;
+    provider_family: ProviderFamily;
+    provider_qualified_model_id: string;
+    auth_profile_ref: string;
+    auth_evidence_ref: string;
+    credential_scope_ref: string;
+    account_boundary_ref: string;
+    sanitizer_ref: string;
+    source_ref: string;
+    result: FlowDeskExternalAuthProviderPolicyResultLabelV1;
+    sanitized_at: string;
+    metadata_labels: string[];
+    evidence_refs: string[];
+    raw_auth_object_persisted: false;
+    token_material_persisted: false;
+    provider_call_made: false;
+    runtime_execution_made: false;
+    actual_lane_launch_made: false;
+    dispatch_authority_enabled: false;
+    safe_next_actions: string[];
+}
+export interface FlowDeskExternalAuthProviderPolicyResultInputV1 {
+    externalAuthPolicyRef: string;
+    providerPolicyRef: string;
+    workflowId: string;
+    providerFamily: ProviderFamily;
+    providerQualifiedModelId: string;
+    authProfileRef: string;
+    authEvidenceRef: string;
+    credentialScopeRef: string;
+    accountBoundaryRef: string;
+    sanitizerRef: string;
+    sourceRef: string;
+    result: FlowDeskExternalAuthProviderPolicyResultLabelV1;
+    sanitizedAt: string;
+    metadataLabels: string[];
+    evidenceRefs?: string[];
+}
+export declare function createFlowDeskExternalAuthProviderPolicyResultV1(input: FlowDeskExternalAuthProviderPolicyResultInputV1): FlowDeskExternalAuthProviderPolicyResultV1;
+export declare function validateFlowDeskExternalAuthProviderPolicyResultV1(value: unknown, expectedWorkflowId?: string, expectedExternalAuthPolicyRef?: string, expectedProviderPolicyRef?: string): ValidationResult;
+//# sourceMappingURL=external-auth-policy.d.ts.map

package/dist/external-auth-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-auth-policy.d.ts","sourceRoot":"","sources":["../src/external-auth-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAEN,KAAK,gBAAgB,EAOrB,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,8CAA8C,+BAGjD,CAAC;AACX,MAAM,MAAM,+CAA+C,GAC1D,CAAC,OAAO,8CAA8C,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,MAAM,WAAW,0CAA0C;IAC1D,cAAc,EAAE,kDAAkD,CAAC;IACnE,wBAAwB,EAAE,MAAM,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,cAAc,CAAC;IAChC,2BAA2B,EAAE,MAAM,CAAC;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,+CAA+C,CAAC;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,yBAAyB,EAAE,KAAK,CAAC;IACjC,wBAAwB,EAAE,KAAK,CAAC;IAChC,kBAAkB,EAAE,KAAK,CAAC;IAC1B,sBAAsB,EAAE,KAAK,CAAC;IAC9B,uBAAuB,EAAE,KAAK,CAAC;IAC/B,0BAA0B,EAAE,KAAK,CAAC;IAClC,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,+CAA+C;IAC/D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,cAAc,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,+CAA+C,CAAC;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAqDD,wBAAgB,gDAAgD,CAC/D,KAAK,EAAE,+CAA+C,GACpD,0CAA0C,CA6B5C;AAED,wBAAgB,kDAAkD,CACjE,KAAK,EAAE,OAAO,EACd,kBAAkB,CAAC,EAAE,MAAM,EAC3B,6BAA6B,CAAC,EAAE,MAAM,EACtC,yBAAyB,CAAC,EAAE,MAAM,GAChC,gBAAgB,CA8GlB"}

package/dist/external-auth-policy.js

@@ -0,0 +1,166 @@
+import { invalid, valid, validateConcreteProviderQualifiedModelId, validateNoForbiddenRawPayloads, validateOpaqueId, validateOpaqueRef, validateProviderFamily, } from "./validators.js";
+export const FLOWDESK_EXTERNAL_AUTH_PROVIDER_POLICY_RESULTS = [
+    "passed",
+    "failed",
+];
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isParseableTimestamp(value) {
+    return typeof value === "string" && Number.isFinite(Date.parse(value));
+}
+function validateBoundedLabelArray(value, label, maxItems) {
+    const errors = [];
+    if (!Array.isArray(value))
+        return invalid(`${label} must be an array`);
+    if (value.length === 0)
+        errors.push(`${label} must not be empty`);
+    if (value.length > maxItems)
+        errors.push(`${label} has too many entries`);
+    for (const [index, item] of value.entries()) {
+        if (typeof item !== "string" || item.length === 0 || item.length > 80)
+            errors.push(`${label}[${index}] is invalid`);
+        else if (!/^[A-Za-z0-9_.:-]+$/.test(item))
+            errors.push(`${label}[${index}] contains unsupported characters`);
+    }
+    return errors.length === 0 ? valid() : invalid(...errors);
+}
+function validateRefArray(value, label, maxItems) {
+    const errors = [];
+    if (!Array.isArray(value))
+        return invalid(`${label} must be an array`);
+    if (value.length > maxItems)
+        errors.push(`${label} has too many entries`);
+    for (const [index, item] of value.entries())
+        errors.push(...validateOpaqueRef(item, `${label}[${index}]`).errors);
+    return errors.length === 0 ? valid() : invalid(...errors);
+}
+function validateSafeActions(value) {
+    const errors = [];
+    if (!Array.isArray(value))
+        return invalid("safe_next_actions must be an array");
+    if (value.length === 0)
+        errors.push("safe_next_actions must not be empty");
+    if (value.length > 5)
+        errors.push("safe_next_actions has too many entries");
+    for (const [index, action] of value.entries()) {
+        if (typeof action !== "string" || !action.startsWith("/flowdesk-"))
+            errors.push(`safe_next_actions[${index}] is invalid`);
+    }
+    return errors.length === 0 ? valid() : invalid(...errors);
+}
+export function createFlowDeskExternalAuthProviderPolicyResultV1(input) {
+    return {
+        schema_version: "flowdesk.external_auth_provider_policy_result.v1",
+        external_auth_policy_ref: input.externalAuthPolicyRef,
+        provider_policy_ref: input.providerPolicyRef,
+        workflow_id: input.workflowId,
+        provider_family: input.providerFamily,
+        provider_qualified_model_id: input.providerQualifiedModelId,
+        auth_profile_ref: input.authProfileRef,
+        auth_evidence_ref: input.authEvidenceRef,
+        credential_scope_ref: input.credentialScopeRef,
+        account_boundary_ref: input.accountBoundaryRef,
+        sanitizer_ref: input.sanitizerRef,
+        source_ref: input.sourceRef,
+        result: input.result,
+        sanitized_at: input.sanitizedAt,
+        metadata_labels: [...input.metadataLabels],
+        evidence_refs: [...(input.evidenceRefs ?? [])],
+        raw_auth_object_persisted: false,
+        token_material_persisted: false,
+        provider_call_made: false,
+        runtime_execution_made: false,
+        actual_lane_launch_made: false,
+        dispatch_authority_enabled: false,
+        safe_next_actions: input.result === "passed"
+            ? ["/flowdesk-status"]
+            : ["/flowdesk-doctor", "/flowdesk-status"],
+    };
+}
+export function validateFlowDeskExternalAuthProviderPolicyResultV1(value, expectedWorkflowId, expectedExternalAuthPolicyRef, expectedProviderPolicyRef) {
+    if (!isRecord(value))
+        return invalid("external auth provider policy result must be an object");
+    const errors = [];
+    const allowed = new Set([
+        "schema_version",
+        "external_auth_policy_ref",
+        "provider_policy_ref",
+        "workflow_id",
+        "provider_family",
+        "provider_qualified_model_id",
+        "auth_profile_ref",
+        "auth_evidence_ref",
+        "credential_scope_ref",
+        "account_boundary_ref",
+        "sanitizer_ref",
+        "source_ref",
+        "result",
+        "sanitized_at",
+        "metadata_labels",
+        "evidence_refs",
+        "raw_auth_object_persisted",
+        "token_material_persisted",
+        "provider_call_made",
+        "runtime_execution_made",
+        "actual_lane_launch_made",
+        "dispatch_authority_enabled",
+        "safe_next_actions",
+    ]);
+    for (const key of Object.keys(value))
+        if (!allowed.has(key))
+            errors.push(`unknown properties: ${key}`);
+    if (value.schema_version !== "flowdesk.external_auth_provider_policy_result.v1")
+        errors.push("external auth provider policy schema_version is invalid");
+    errors.push(...validateOpaqueRef(value.external_auth_policy_ref, "external_auth_policy_ref").errors);
+    errors.push(...validateOpaqueRef(value.provider_policy_ref, "provider_policy_ref").errors);
+    errors.push(...validateOpaqueId(value.workflow_id, "workflow_id").errors);
+    if (expectedExternalAuthPolicyRef !== undefined &&
+        value.external_auth_policy_ref !== expectedExternalAuthPolicyRef)
+        errors.push("external auth policy ref mismatch");
+    if (expectedProviderPolicyRef !== undefined &&
+        value.provider_policy_ref !== expectedProviderPolicyRef)
+        errors.push("provider policy ref mismatch");
+    if (expectedWorkflowId !== undefined && value.workflow_id !== expectedWorkflowId)
+        errors.push("external auth provider policy workflow_id mismatch");
+    errors.push(...validateProviderFamily(value.provider_family).errors);
+    if (value.provider_family === "unknown" || value.provider_family === "all")
+        errors.push("provider_family must be concrete for policy evaluation");
+    errors.push(...validateConcreteProviderQualifiedModelId(value.provider_qualified_model_id, "provider_qualified_model_id").errors);
+    if (typeof value.provider_qualified_model_id === "string" &&
+        typeof value.provider_family === "string" &&
+        !value.provider_qualified_model_id.startsWith(`${value.provider_family}/`))
+        errors.push("provider_qualified_model_id must match provider_family");
+    for (const [field, label] of [
+        [value.auth_profile_ref, "auth_profile_ref"],
+        [value.auth_evidence_ref, "auth_evidence_ref"],
+        [value.credential_scope_ref, "credential_scope_ref"],
+        [value.account_boundary_ref, "account_boundary_ref"],
+        [value.sanitizer_ref, "sanitizer_ref"],
+        [value.source_ref, "source_ref"],
+    ])
+        errors.push(...validateOpaqueRef(field, label).errors);
+    if (!FLOWDESK_EXTERNAL_AUTH_PROVIDER_POLICY_RESULTS.includes(String(value.result)))
+        errors.push("external auth provider policy result is invalid");
+    if (!isParseableTimestamp(value.sanitized_at))
+        errors.push("external auth provider policy sanitized_at is invalid");
+    errors.push(...validateBoundedLabelArray(value.metadata_labels, "metadata_labels", 20)
+        .errors);
+    errors.push(...validateRefArray(value.evidence_refs, "evidence_refs", 20).errors);
+    if (value.raw_auth_object_persisted !== false)
+        errors.push("raw auth objects cannot be persisted");
+    if (value.token_material_persisted !== false)
+        errors.push("token material cannot be persisted");
+    if (value.provider_call_made !== false)
+        errors.push("external auth provider policy cannot make provider calls");
+    if (value.runtime_execution_made !== false)
+        errors.push("external auth provider policy cannot make runtime execution");
+    if (value.actual_lane_launch_made !== false)
+        errors.push("external auth provider policy cannot launch lanes");
+    if (value.dispatch_authority_enabled !== false)
+        errors.push("external auth provider policy cannot enable dispatch authority");
+    errors.push(...validateSafeActions(value.safe_next_actions).errors);
+    errors.push(...validateNoForbiddenRawPayloads(value, "external_auth_provider_policy_result").errors);
+    return errors.length === 0 ? valid() : invalid(...errors);
+}
+//# sourceMappingURL=external-auth-policy.js.map

package/dist/external-auth-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-auth-policy.js","sourceRoot":"","sources":["../src/external-auth-policy.ts"],"names":[],"mappings":"AACA,OAAO,EACN,OAAO,EAEP,KAAK,EACL,wCAAwC,EACxC,8BAA8B,EAC9B,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,8CAA8C,GAAG;IAC7D,QAAQ;IACR,QAAQ;CACC,CAAC;AAgDX,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,yBAAyB,CACjC,KAAc,EACd,KAAa,EACb,QAAgB;IAEhB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YACpE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,KAAK,cAAc,CAAC,CAAC;aACzC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,KAAK,mCAAmC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,gBAAgB,CACxB,KAAc,EACd,KAAa,EACb,QAAgB;IAEhB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAChF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,qBAAqB,KAAK,cAAc,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,gDAAgD,CAC/D,KAAsD;IAEtD,OAAO;QACN,cAAc,EAAE,kDAAkD;QAClE,wBAAwB,EAAE,KAAK,CAAC,qBAAqB;QACrD,mBAAmB,EAAE,KAAK,CAAC,iBAAiB;QAC5C,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,2BAA2B,EAAE,KAAK,CAAC,wBAAwB;QAC3D,gBAAgB,EAAE,KAAK,CAAC,cAAc;QACtC,iBAAiB,EAAE,KAAK,CAAC,eAAe;QACxC,oBAAoB,EAAE,KAAK,CAAC,kBAAkB;QAC9C,oBAAoB,EAAE,KAAK,CAAC,kBAAkB;QAC9C,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;QAC1C,aAAa,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC9C,yBAAyB,EAAE,KAAK;QAChC,wBAAwB,EAAE,KAAK;QAC/B,kBAAkB,EAAE,KAAK;QACzB,sBAAsB,EAAE,KAAK;QAC7B,uBAAuB,EAAE,KAAK;QAC9B,0BAA0B,EAAE,KAAK;QACjC,iBAAiB,EAChB,KAAK,CAAC,MAAM,KAAK,QAAQ;YACxB,CAAC,CAAC,CAAC,kBAAkB,CAAC;YACtB,CAAC,CAAC,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;KAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kDAAkD,CACjE,KAAc,EACd,kBAA2B,EAC3B,6BAAsC,EACtC,yBAAkC;IAElC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnB,OAAO,OAAO,CAAC,wDAAwD,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACvB,gBAAgB;QAChB,0BAA0B;QAC1B,qBAAqB;QACrB,aAAa;QACb,iBAAiB;QACjB,6BAA6B;QAC7B,kBAAkB;QAClB,mBAAmB;QACnB,sBAAsB;QACtB,sBAAsB;QACtB,eAAe;QACf,YAAY;QACZ,QAAQ;QACR,cAAc;QACd,iBAAiB;QACjB,eAAe;QACf,2BAA2B;QAC3B,0BAA0B;QAC1B,oBAAoB;QACpB,wBAAwB;QACxB,yBAAyB;QACzB,4BAA4B;QAC5B,mBAAmB;KACnB,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,cAAc,KAAK,kDAAkD;QAC9E,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACxE,MAAM,CAAC,IAAI,CACV,GAAG,iBAAiB,CACnB,KAAK,CAAC,wBAAwB,EAC9B,0BAA0B,CAC1B,CAAC,MAAM,CACR,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3F,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1E,IACC,6BAA6B,KAAK,SAAS;QAC3C,KAAK,CAAC,wBAAwB,KAAK,6BAA6B;QAEhE,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAClD,IACC,yBAAyB,KAAK,SAAS;QACvC,KAAK,CAAC,mBAAmB,KAAK,yBAAyB;QAEvD,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC7C,IAAI,kBAAkB,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,kBAAkB;QAC/E,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK;QACzE,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACvE,MAAM,CAAC,IAAI,CACV,GAAG,wCAAwC,CAC1C,KAAK,CAAC,2BAA2B,EACjC,6BAA6B,CAC7B,CAAC,MAAM,CACR,CAAC;IACF,IACC,OAAO,KAAK,CAAC,2BAA2B,KAAK,QAAQ;QACrD,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;QACzC,CAAC,KAAK,CAAC,2BAA2B,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,eAAe,GAAG,CAAC;QAE1E,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;QAC5B,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC5C,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QAC9C,CAAC,KAAK,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;QACpD,CAAC,KAAK,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;QACpD,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC;QACtC,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC;KACvB;QACT,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,IACC,CACC,8CACA,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEhC,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAChE,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,CACV,GAAG,yBAAyB,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,EAAE,EAAE,CAAC;SACxE,MAAM,CACR,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,yBAAyB,KAAK,KAAK;QAC5C,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,wBAAwB,KAAK,KAAK;QAC3C,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK;QACrC,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,sBAAsB,KAAK,KAAK;QACzC,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,uBAAuB,KAAK,KAAK;QAC1C,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,0BAA0B,KAAK,KAAK;QAC7C,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IAC/E,MAAM,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,CAAC,IAAI,CACV,GAAG,8BAA8B,CAChC,KAAK,EACL,sCAAsC,CACtC,CAAC,MAAM,CACR,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC"}

package/dist/fake-remote-connector-adapter.d.ts

@@ -0,0 +1,37 @@
+import type { FlowDeskProductionApprovalSourceV1 } from "./production-approval-source.js";
+import { type FlowDeskRemoteWriteConnectorCapabilityV1, type FlowDeskRemoteWriteConnectorKindV1, type FlowDeskRemoteWritePlanV1 } from "./remote-write-connector-gate.js";
+import { type ValidationResult } from "./validators.js";
+export interface FlowDeskFakeRemoteConnectorWriteResultV1 extends ValidationResult {
+    schema_version: "flowdesk.fake_remote_connector_write_result.v1";
+    workflow_id?: string;
+    attempt_id?: string;
+    connector_kind?: FlowDeskRemoteWriteConnectorKindV1;
+    connector_ref?: string;
+    target_ref?: string;
+    content_hash_ref?: string;
+    redacted_remote_ref?: string;
+    state: "fake_write_recorded" | "blocked";
+    blocked_labels: string[];
+    fake_remote_write_attempted: boolean;
+    remote_write_attempted: false;
+    connector_write_attempted: false;
+    github_write_attempted: false;
+    storage_write_attempted: false;
+    database_write_attempted: false;
+    url_write_attempted: false;
+    raw_path_write_attempted: false;
+    remote_write_authority_enabled: false;
+    external_write_authority_enabled: false;
+    dispatch_authority_enabled: false;
+    providerCall: false;
+    actualLaneLaunch: false;
+    runtimeExecution: false;
+}
+export declare function prepareFlowDeskFakeRemoteConnectorWriteV1(input: {
+    capability: FlowDeskRemoteWriteConnectorCapabilityV1;
+    writePlan: FlowDeskRemoteWritePlanV1;
+    consumedApproval: FlowDeskProductionApprovalSourceV1;
+    redactedRemoteRef: string;
+}): FlowDeskFakeRemoteConnectorWriteResultV1;
+export declare function validateFlowDeskFakeRemoteConnectorWriteResultV1(value: unknown): ValidationResult;
+//# sourceMappingURL=fake-remote-connector-adapter.d.ts.map

package/dist/fake-remote-connector-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-remote-connector-adapter.d.ts","sourceRoot":"","sources":["../src/fake-remote-connector-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AAC1F,OAAO,EAEN,KAAK,wCAAwC,EAC7C,KAAK,kCAAkC,EACvC,KAAK,yBAAyB,EAC9B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAEN,KAAK,gBAAgB,EAKrB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,wCAAyC,SAAQ,gBAAgB;IACjF,cAAc,EAAE,gDAAgD,CAAC;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,kCAAkC,CAAC;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACzC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,2BAA2B,EAAE,OAAO,CAAC;IACrC,sBAAsB,EAAE,KAAK,CAAC;IAC9B,yBAAyB,EAAE,KAAK,CAAC;IACjC,sBAAsB,EAAE,KAAK,CAAC;IAC9B,uBAAuB,EAAE,KAAK,CAAC;IAC/B,wBAAwB,EAAE,KAAK,CAAC;IAChC,mBAAmB,EAAE,KAAK,CAAC;IAC3B,wBAAwB,EAAE,KAAK,CAAC;IAChC,8BAA8B,EAAE,KAAK,CAAC;IACtC,gCAAgC,EAAE,KAAK,CAAC;IACxC,0BAA0B,EAAE,KAAK,CAAC;IAClC,YAAY,EAAE,KAAK,CAAC;IACpB,gBAAgB,EAAE,KAAK,CAAC;IACxB,gBAAgB,EAAE,KAAK,CAAC;CACxB;AAyCD,wBAAgB,yCAAyC,CAAC,KAAK,EAAE;IAChE,UAAU,EAAE,wCAAwC,CAAC;IACrD,SAAS,EAAE,yBAAyB,CAAC;IACrC,gBAAgB,EAAE,kCAAkC,CAAC;IACrD,iBAAiB,EAAE,MAAM,CAAC;CAC1B,GAAG,wCAAwC,CA2C3C;AAED,wBAAgB,gDAAgD,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CA6EjG"}