@groundnuty/macf-core 0.2.53 → 0.2.55

package/dist/guest.d.ts

@@ -23,6 +23,7 @@
  */
 import { z } from 'zod';
 import { MacfError } from './errors.js';
+import type { AgentInfo } from './registry/types.js';
 /**
  * How the consumer reaches the guest (DR-036 §two enabler paths, Amendment A):
  *  - `route`          — the guest is App-scoped + GitHub-@mention-routable
@@ -74,6 +75,7 @@ export declare const MacfFleetConfigSchema: z.ZodObject<{
         }>;
         until: z.ZodDefault<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
     }, z.core.$strip>>>;
+    federated_cas: z.ZodDefault<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export type MacfFleetConfig = z.infer<typeof MacfFleetConfigSchema>;
 /** Raised when a `.github/macf-fleet.json` value violates the schema. */
@@ -97,4 +99,76 @@ export declare function parseGuestAgentRef(agent: string): {
     readonly homeProject: string;
     readonly name: string;
 };
+/**
+ * DR-041 Amendment A (cross-fleet guest ADDRESSING, groundnuty/macf#786):
+ * resolve a guest's `<home-project>/<name>` registry slot to its `AgentInfo`.
+ * Mirrors `fleet-guests.ts`'s `GuestResolveFn` shape exactly — kept as an
+ * independent type here (rather than the reverse) so the outbound MESSAGING
+ * clients (`macf-channel-server`'s `notify_peer` + outbound A2A dispatch,
+ * `macf`'s `macf-ping` CLI) can depend on macf-core WITHOUT depending on the
+ * `macf` package's `fleet-guests.ts` (the STATUS-layer module, DR-036,
+ * which lives one package over and pulls in CLI-only concerns).
+ */
+export type CrossProjectAgentResolver = (homeProject: string, name: string) => Promise<AgentInfo | null>;
+/**
+ * Outcome of resolving a `to` address string against DR-041 Amendment A's
+ * 4-rung cross-fleet guest resolution ladder (groundnuty/macf#786):
+ *
+ *   1. `to` parses as `<project>/<name>` + the home project is federated +
+ *      the registry slot resolves → `resolved` — attempt delivery.
+ *   2. `to` parses but the home project is NOT in `federatedCas` →
+ *      `not-federated` — clear DR-041 error, never a silent no-op.
+ *   3. `to` parses + home project federated, but the registry slot is
+ *      missing/unresolvable → `not-found` — clear error.
+ *   4. `to` does NOT parse as a `<project>/<name>` slug at all →
+ *      `not-a-guest-ref` — the caller falls through to its OWN, UNCHANGED
+ *      own-project resolution. Deliberately NOT folded into this ladder:
+ *      each call site's own-project lookup mechanics differ (a direct
+ *      `registry.get(name)` in `notify-peer.ts` vs. a sanitized-name
+ *      `list()`-then-`find()` in `macf-ping`), so unifying THAT part would
+ *      require reshaping call sites that aren't broken, for no shared
+ *      benefit — only the GUEST ladder (parse + trust-gate + cross-project
+ *      resolve + error text) is common enough to be worth one shared
+ *      implementation.
+ */
+export type GuestAddressResolution = {
+    readonly kind: 'not-a-guest-ref';
+} | {
+    readonly kind: 'not-federated';
+    readonly homeProject: string;
+    readonly name: string;
+    readonly error: string;
+} | {
+    readonly kind: 'not-found';
+    readonly homeProject: string;
+    readonly name: string;
+    readonly error: string;
+} | {
+    readonly kind: 'resolved';
+    readonly homeProject: string;
+    readonly name: string;
+    readonly info: AgentInfo;
+};
+/**
+ * DR-041 Amendment A's unified cross-fleet guest resolution ladder
+ * (groundnuty/macf#786) — the SINGLE implementation `notify_peer` (outbound
+ * `/notify` + outbound A2A `message/send`, both dispatch through the SAME
+ * resolved peer in `notify-peer.ts`) and `macf-ping` reuse, so the addressing
+ * gate + its exact error text can never drift between call sites.
+ *
+ * Gated on `federatedCas` ALONE (DR-041 Amendment A decision 1) — NEVER on a
+ * `guests` binding. Rationale (science-ratified on macf#786): trust (the
+ * per-fleet-CA mTLS bundle, #785) is the SOLE admission gate for cross-fleet
+ * addressing — once a fleet's CA is federated, every agent that CA has
+ * signed is mTLS-reachable, so gating addressing on that SAME set keeps
+ * "can I address it" and "can I mTLS it" consistent. The `guests` binding
+ * (`.github/macf-fleet.json` `guests[]`) remains a relationship/metadata
+ * layer (DR-036) — consulted for scope-awareness in a FUTURE amendment
+ * (`scope_out`/`capabilities`, #779), never a second hard addressing gate.
+ *
+ * A malformed / non-slug `to` (rung 4) is NOT an error here — it returns
+ * `{ kind: 'not-a-guest-ref' }` so the caller falls through to its own
+ * unchanged own-project resolution, byte-identical to pre-#786 behavior.
+ */
+export declare function resolveGuestAddress(to: string, federatedCas: readonly string[], resolve: CrossProjectAgentResolver): Promise<GuestAddressResolution>;
 //# sourceMappingURL=guest.d.ts.map

package/dist/guest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guest.d.ts","sourceRoot":"","sources":["../src/guest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,sCAAuC,CAAC;AACvE,eAAO,MAAM,sBAAsB;;;EAA6B,CAAC;AACjE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAUtE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;iBAgB7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;iBAShC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,yEAAyE;AACzE,qBAAa,gBAAiB,SAAQ,SAAS;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,CASlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAQA"}
+{"version":3,"file":"guest.d.ts","sourceRoot":"","sources":["../src/guest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,sCAAuC,CAAC;AACvE,eAAO,MAAM,sBAAsB;;;EAA6B,CAAC;AACjE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAUtE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;iBAgB7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;iBAuBhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,yEAAyE;AACzE,qBAAa,gBAAiB,SAAQ,SAAS;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,CASlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAQA;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACtC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;AAE/B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;CAC1B,CAAC;AAEN;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,sBAAsB,CAAC,CA+BjC"}

package/dist/guest.js

@@ -80,6 +80,20 @@ export const MacfFleetConfigSchema = z.object({
     routing_fleet: z.boolean().optional(),
     /** Consumer-side cross-fleet guest bindings (DR-036 Amendment A, #679). */
     guests: z.array(GuestBindingSchema).default([]),
+    /**
+     * DR-041 Decision 1 (cross-fleet trust federation, macf#784): home-project
+     * identifiers whose per-fleet CA is added to this fleet's mTLS trust bundle.
+     * Each entry names a project (e.g. `ppam-2026`) — NOT an individual agent —
+     * whose `<PROJECT>_CA_CERT` shared-registry variable the channel-server
+     * resolves at startup and appends to its `ca` trust bundle. v1 (this) is the
+     * static-committed-bundle tier (DR-041 Decision 1c Tier v1); the well-known
+     * bundle-endpoint tier is documented as v2 (backlog `#783`). Federating a
+     * fleet's CA trusts EVERY certificate that CA has signed — admission is
+     * per-fleet-CA, all-or-nothing (intended; per-agent/per-skill restriction is
+     * a deferred capability-token concern, NOT this mechanism). Defaults to `[]`
+     * so an absent key is exactly "no federation" (unchanged single-CA trust).
+     */
+    federated_cas: z.array(z.string()).default([]),
 });
 /** Raised when a `.github/macf-fleet.json` value violates the schema. */
 export class GuestConfigError extends MacfError {
@@ -117,4 +131,54 @@ export function parseGuestAgentRef(agent) {
     }
     return { homeProject: agent.slice(0, slash), name: agent.slice(slash + 1) };
 }
+/**
+ * DR-041 Amendment A's unified cross-fleet guest resolution ladder
+ * (groundnuty/macf#786) — the SINGLE implementation `notify_peer` (outbound
+ * `/notify` + outbound A2A `message/send`, both dispatch through the SAME
+ * resolved peer in `notify-peer.ts`) and `macf-ping` reuse, so the addressing
+ * gate + its exact error text can never drift between call sites.
+ *
+ * Gated on `federatedCas` ALONE (DR-041 Amendment A decision 1) — NEVER on a
+ * `guests` binding. Rationale (science-ratified on macf#786): trust (the
+ * per-fleet-CA mTLS bundle, #785) is the SOLE admission gate for cross-fleet
+ * addressing — once a fleet's CA is federated, every agent that CA has
+ * signed is mTLS-reachable, so gating addressing on that SAME set keeps
+ * "can I address it" and "can I mTLS it" consistent. The `guests` binding
+ * (`.github/macf-fleet.json` `guests[]`) remains a relationship/metadata
+ * layer (DR-036) — consulted for scope-awareness in a FUTURE amendment
+ * (`scope_out`/`capabilities`, #779), never a second hard addressing gate.
+ *
+ * A malformed / non-slug `to` (rung 4) is NOT an error here — it returns
+ * `{ kind: 'not-a-guest-ref' }` so the caller falls through to its own
+ * unchanged own-project resolution, byte-identical to pre-#786 behavior.
+ */
+export async function resolveGuestAddress(to, federatedCas, resolve) {
+    let ref;
+    try {
+        ref = parseGuestAgentRef(to);
+    }
+    catch {
+        return { kind: 'not-a-guest-ref' };
+    }
+    const { homeProject, name } = ref;
+    if (!federatedCas.includes(homeProject)) {
+        return {
+            kind: 'not-federated',
+            homeProject,
+            name,
+            error: `guest ${homeProject}/${name}: home fleet '${homeProject}' not in federated_cas — ` +
+                'federate it (DR-041) to message this guest.',
+        };
+    }
+    const info = await resolve(homeProject, name);
+    if (info === null) {
+        return {
+            kind: 'not-found',
+            homeProject,
+            name,
+            error: `guest ${homeProject}/${name} not found in registry.`,
+        };
+    }
+    return { kind: 'resolved', homeProject, name, info };
+}
 //# sourceMappingURL=guest.js.map

package/dist/guest.js.map

@@ -1 +1 @@
-{"version":3,"file":"guest.js","sourceRoot":"","sources":["../src/guest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAU,CAAC;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAGjE;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,oCAAoC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,sFAAsF;IACtF,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,kBAAkB,EAAE,oEAAoE,CAAC;IAClG,uGAAuG;IACvG,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;IACnE,gFAAgF;IAChF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iCAAiC,CAAC;IAC7D,sFAAsF;IACtF,YAAY,EAAE,sBAAsB;IACpC;;;OAGG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACtD,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,2EAA2E;IAC3E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAChD,CAAC,CAAC;AAGH,yEAAyE;AACzE,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACrD,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAI9C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,gBAAgB,CACxB,gBAAgB,KAAK,uDAAuD,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"guest.js","sourceRoot":"","sources":["../src/guest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAU,CAAC;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAGjE;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,oCAAoC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,sFAAsF;IACtF,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,kBAAkB,EAAE,oEAAoE,CAAC;IAClG,uGAAuG;IACvG,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;IACnE,gFAAgF;IAChF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iCAAiC,CAAC;IAC7D,sFAAsF;IACtF,YAAY,EAAE,sBAAsB;IACpC;;;OAGG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACtD,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,2EAA2E;IAC3E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/C,CAAC,CAAC;AAGH,yEAAyE;AACzE,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACrD,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAI9C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,gBAAgB,CACxB,gBAAgB,KAAK,uDAAuD,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AA2DD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAU,EACV,YAA+B,EAC/B,OAAkC;IAElC,IAAI,GAA4D,CAAC;IACjE,IAAI,CAAC;QACH,GAAG,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAElC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,WAAW;YACX,IAAI;YACJ,KAAK,EACH,SAAS,WAAW,IAAI,IAAI,iBAAiB,WAAW,2BAA2B;gBACnF,6CAA6C;SAChD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,WAAW;YACX,IAAI;YACJ,KAAK,EAAE,SAAS,WAAW,IAAI,IAAI,yBAAyB;SAC7D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACvD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@groundnuty/macf-core",
-  "version": "0.2.53",
+  "version": "0.2.55",
   "description": "Shared internals consumed by the MACF CLI and channel-server packages. Not intended for direct external use — will be marked deprecated-internal on first npm publish per DR-022 Amendment A.",
   "type": "module",
   "main": "dist/index.js",