@intentius/chant 0.49.0 → 0.51.0

package/dist/components/verbs/index.d.ts

@@ -30,7 +30,11 @@
  * ./wrangler.ts) and `r2-sync` (#1293, ./r2-sync.ts) are the Cloudflare
  * Workers apply leaves — real implementations over the same injectable
  * `ProcessRunner` `sign` uses, shelling to `wrangler`/`rclone` rather than an
- * AWS-shaped SDK client.
+ * AWS-shaped SDK client. `run-agent` (#1941, epic #1564 phase 1, ./run-agent.ts)
+ * is the typed schema + registry entry for a bounded, attested agent-turn
+ * capability over a fly Sprite — a typed stub for now (`run`/`rollback`
+ * reject with `CapabilityNotImplementedError`), `rollbackPolicy: "native"`
+ * declared up front; the real sprite-lifecycle implementation is #1942.
  */
 export * from "./build-archive.js";
 export * from "./build.js";
@@ -43,6 +47,7 @@ export * from "./component-bom.js";
 export * from "./reproducibility.js";
 export * from "./sign.js";
 export * from "./verify.js";
+export * from "./run-agent.js";
 export * from "./wrangler.js";
 export * from "./r2-sync.js";
 export * from "./vuln-scan.js";

package/dist/components/verbs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/verbs/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,QAAQ,CAAC;AACvB,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,OAAO,CAAC;AACtB,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/verbs/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,QAAQ,CAAC;AACvB,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,OAAO,CAAC;AACtB,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/components/verbs/run-agent.d.ts

@@ -0,0 +1,499 @@
+/**
+ * `run-agent` — phase 1 design: capability schema + registry entry (#1941,
+ * epic #1564 "run-agent as a bounded, attested component capability").
+ *
+ * **Decided (2026-08-25, maintainer comment on #1564).** The agent turn
+ * executes on a fly [Sprite](https://sprites.dev), via chant's own sprite
+ * lifecycle activities (`lexicons/fly/src/op/activities/sprites.ts` —
+ * `spriteCreate`/`spriteCheckpoint`/`spriteExec`/`spriteRestore`/`spriteDestroy`,
+ * plus the filesystem activities in `sprite-fs.ts` —
+ * `spriteWriteFile`/`spriteReadFile`), **not** fountain's hosted `fountainRun`
+ * path (`lexicons/fountain/src/op/activities/fountain-run.ts`): `fountainRun`
+ * polls a fountain-managed `Conversation` to a terminal HTTP status and gives
+ * chant no checkpoint control, but the epic's compensation story needs chant
+ * to own the sprite directly. Compensation is checkpoint-before/restore-on-unwind
+ * — "the environment is the transaction," no hand-written inverse action — the
+ * same pattern `examples/sprites-agent-task/ops/guarded-task.op.ts` already
+ * demonstrates at the Op layer. The offline path is `sprites-fake`/
+ * `sprites-emulator` (spritzer), the same `SPRITES_BASE_URL` endpoint-override
+ * story `sprites.ts` documents.
+ *
+ * **Input tracks fountain's `Agent` surface as it stands today**
+ * (`lexicons/fountain/src/spec/fountain-openapi.snapshot.json`): `agent` is
+ * resolved the same way `fountainRun`'s `resolveAgentId` resolves a name/id
+ * against `/api/agents`; `task` is `PromptRequest`-shaped (`prompt` +
+ * optional `images`, `ImageInput`'s exact shape). The output's `turn` facts
+ * track `Turn`'s shape (`status`/`exit_code`/`started_at`/`ended_at`), even
+ * though the turn runs on a chant-owned sprite rather than a fountain-managed
+ * `Sandbox` — fountain supplies the *declarative* facts (which model, which
+ * runtime, which egress policy via `Environment`), chant drives the
+ * *imperative* execution. Revisit only if `BinaryBourbon/fountain#586` (the
+ * `Estate` proposal) lands a breaking shape.
+ *
+ * **Placement.** Registered the same way `docker-build` is (./build.ts) — a
+ * factory over an injectable executor seam (`SpriteActivities` below, the
+ * `run-agent` analogue of ./cloud-executor.ts's `CloudExecutor`) — so core
+ * carries the typed schema without a hard package dependency on
+ * `@intentius/chant-lexicon-fly` (core stays cloud/vendor-agnostic in its
+ * dependency graph, see docs/components/cloud-boundary; the same reasoning
+ * that keeps the AWS leaves in `@intentius/chant-lexicon-aws` rather than
+ * here). Unlike the AWS leaves, there is today no fly-lexicon capability
+ * plugin for this verb to live in instead, and `run-agent` is a foundational,
+ * pipeline-level primitive in the same vein as `docker-build` or
+ * `wrangler-deploy` (./wrangler.ts) rather than a swappable per-cloud leaf —
+ * the same tradeoff `wrangler.ts`'s module doc weighs for the Cloudflare
+ * Workers verbs. Revisit if a broader agent-execution lexicon ever owns this
+ * seam instead.
+ *
+ * **Scope across phases.** Phase 1 (#1941) shipped the typed contract only —
+ * `run`/`rollback` were stubs throwing `CapabilityNotImplementedError`, per
+ * ../capability.ts's own module doc ("Verb implementations live under
+ * `./verbs/*` as typed stubs — no cloud calls, no side effects. Cloud
+ * implementations are a later phase"). `rollbackPolicy: "native"` was declared
+ * from phase 1 (so COMP003, ../lint/rules/comp/comp003-mutating-no-rollback.ts,
+ * never requires a `noRollback` opt-out for this verb once it composes into a
+ * component) even before the paired `rollback` body was real — the *policy*
+ * was the phase 1 design commitment, the *implementation* is phase 2 (#1942,
+ * below). This capability is deliberately not yet registered in any
+ * `CapabilityPlugin`'s `STARTER_VERB_FAMILIES`-equivalent set — the fly
+ * lexicon's own plugin (`lexicons/fly/src/components/capability-plugin.ts`)
+ * registers it under its own `FLY_VERB_FAMILIES`, but that is a separate,
+ * later decision from "does core's sequencing logic actually work," which
+ * this module answers. #1943 ("Provenance + attestation") owns the
+ * `provenance.sourceRef` transcript-hash basis and verify-gate interop; #1944
+ * owns the conformance/contract test suite (saga-unwind restore, COMP003
+ * refusal) beyond this module's own unit tests.
+ *
+ * **#1942 (phase 2, this module's `run`/`rollback` body) resolved the
+ * following:**
+ *  - **The exec-throw finding** (pre-merge review of #1946, recorded on
+ *    #1942): the real `spriteExec` (`lexicons/fly/src/op/activities/sprites.ts`)
+ *    throws on any non-zero exit, so a *thin* `SpriteActivities.exec` adapter
+ *    can only ever produce `turn.status: "failed"` without throwing if it
+ *    reclassifies that throw itself. That reclassification is the fly
+ *    lexicon adapter's job (`lexicons/fly/src/components/run-agent.ts`,
+ *    option (a) from the review comment) — `SpriteActivities.exec`'s
+ *    contract, as this module consumes it, is: **resolve** with `exitCode`
+ *    for any ordinary command outcome (zero or non-zero), **reject** only for
+ *    a genuine transport/infra failure. `run()` below trusts that contract
+ *    completely: it never wraps `sprites.exec` in a try/catch, so a rejection
+ *    from the injected `sprites` always propagates as a genuine `run()`
+ *    failure (triggering saga rollback in ../driver.ts), while an ordinary
+ *    non-zero exit becomes `turn.status: "failed"` on a normal return —
+ *    exactly the non-throwing first-class result the type already declared.
+ *  - **Rollback identity (#1944 closes the durable-path gap left open here).**
+ *    `rollback(ctx, input, output)` receives the identical `input` object
+ *    `run(ctx, input)` was called with, plus (since #1944) the exact `output`
+ *    `run()` returned — `../capability.ts`'s `Capability.rollback` grew an
+ *    optional third parameter for precisely this, and ../driver.ts's saga
+ *    unwind (both the local in-process path and, via
+ *    `lexicons/temporal/src/component-op/{activities,serializer}.ts`, the
+ *    durable Temporal path) always threads it through. `run()` records the
+ *    sprite id and exact pre-run checkpoint id two ways: in a private
+ *    `WeakMap` keyed by the exact `input` object (works only when `rollback`
+ *    is called with that same object — true in-process, e.g. this module's
+ *    own tests calling `rollback()` directly after `run()`), and — the
+ *    durable-safe channel — as `output.spriteId`/`output.checkpointId`,
+ *    already part of `RunAgentOutput` (#1943). `rollback()` prefers `output`'s
+ *    fields when present, falling back to the `WeakMap` only when a caller
+ *    never threads `output` through (backward-compatible for any capability
+ *    caller not yet passing it). **The checkpoint id, not the comment, is
+ *    what `rollback()` restores by** when either source has one:
+ *    `sprites.restore({ id, checkpoint: checkpointId })`, which
+ *    `spriteRestore`'s explicit-id resolution wins over comment on
+ *    (`lexicons/fly/src/op/activities/sprites.ts`). Restoring by comment alone
+ *    is unsafe on a reused sprite — two `run()` calls sharing the default
+ *    `"pre-run"` comment would make a comment-based restore always resolve to
+ *    the *newest* matching checkpoint, so rolling back the first run would
+ *    restore the second run's checkpoint (which already contains the first
+ *    run's mutation) instead of undoing it. Comment-based restore
+ *    (`workspace.checkpointComment`, default `"pre-run"`) is therefore only a
+ *    **fallback**, used when no checkpoint id is available from either source
+ *    (the `workspace.spriteName`-only path below). When there is no sprite id
+ *    to restore at all (no `output`, no `WeakMap` record, no
+ *    `workspace.spriteName`), `rollback()` degrades with an explicit,
+ *    commented no-op return — the same pattern
+ *    `../../lexicons/aws/src/components/host-delivery.ts`'s `code-deploy`
+ *    rollback uses (`if (!deploymentId) return;`) — rather than throwing.
+ *    **Before #1944**, the Temporal durable path (`run` and `rollback`
+ *    executing as separate Activities, each rebuilding `input` fresh via
+ *    `resolveStepInput`) never gave the `WeakMap` a hit, so a fresh sprite's
+ *    rollback there silently degraded to that no-op; passing `output` through
+ *    (this revision) closes that gap directly, without redesigning the
+ *    component-op wire format — see #1944's PR description for why this was
+ *    chosen over the "make the degrade loud" alternative. The generated
+ *    workflow's saga-unwind loop (`lexicons/temporal/src/component-op/
+ *    serializer.ts`) also no longer swallows a rollback failure silently
+ *    (any capability's, not just this one) — it now logs it and surfaces it
+ *    via a `RollbackFailed` search attribute, defense in depth for a rollback
+ *    failure unrelated to identity (e.g. the sprite backend itself erroring).
+ *  - **Destroy vs. leave-alive.** `run()` destroys a freshly created (not
+ *    `workspace.spriteName`-reused) sprite only when `turn.status ===
+ *    "completed"`. An ordinary failed turn leaves the sprite alive — it
+ *    returned normally, so no saga rollback runs, but the failure is exactly
+ *    when a caller (or this module's own tests) most wants to inspect the
+ *    sprite or explicitly call `rollback()` to restore it, per this issue's
+ *    acceptance criteria.
+ *
+ * **Still open, left for later phases:**
+ *  - Runtime invocation inside the sprite — `buildRuntimeCommand` below picks
+ *    a real one-shot CLI invocation for each known `Agent.runtime` value,
+ *    reading the staged prompt file; whether the sprite image already carries
+ *    that CLI (vs. `run()` needing a setup step) is unresolved. `RunAgentInput`
+ *    (frozen by #1941) has no separate `runtime` field, so `input.agent`
+ *    doubles as the runtime selector for phase 2 — an unrecognized value is
+ *    passed through verbatim as a literal command (a documented escape hatch
+ *    for a custom binary already present in the image, and how this module's
+ *    own tests exercise a scripted failure against the offline fake). Real
+ *    `agent` name/id -> `Agent.runtime` resolution against fountain's
+ *    `/api/agents` (`resolveAgentId`, `lexicons/fountain/.../fountain-run.ts`)
+ *    is out of this issue's scope (and would need a network call the offline
+ *    path forbids).
+ *  - Output artifact encoding — `run()` reads one conventional path
+ *    (`/work/output`) as the sole `artifacts.files` entry when present;
+ *    individual `spriteReadFile` calls per changed path vs. one tarred
+ *    snapshot folded into a `BuildArchiveManifest` entry (./build-archive.ts)
+ *    remains an open question, as does `artifacts.diff`, which `run()` never
+ *    populates (the real Sprites API has no built-in diff endpoint).
+ *  - Interrupted turns — `turn.status: "interrupted"` stays in the type but
+ *    is unreachable from this implementation: any `sprites.exec` rejection
+ *    (including one caused by an aborted signal) propagates as a genuine
+ *    `run()` failure rather than being classified as an interrupted turn.
+ *    Distinguishing "deadline hit mid-run" from "the sprite backend errored"
+ *    well enough to surface `"interrupted"` safely is left for #1944.
+ *
+ * **#1943 (this revision) resolved the transcript-hash basis and
+ * sign/verify-gate interop, closing #1941's open "transcript hash basis"
+ * question:**
+ *  - **Hash basis.** `provenance.sourceRef`'s digest component is
+ *    `sha256Digest(JSON.stringify(basis))` over a fixed-key-order object —
+ *    `{ agent, promptDigest, images, status, exitCode, stdoutDigest,
+ *    stderrDigest, artifacts, diffDigest }` — built fresh by
+ *    `computeTranscriptDigest` below every call, never re-ordered from a
+ *    caller-supplied object, so key order (and therefore the digest) never
+ *    drifts by construction. Every free-text field (`prompt`, `stdout`,
+ *    `stderr`, `diff`, each image's `data`) is folded in as its own
+ *    `sha256Digest`, not embedded verbatim — this keeps a (possibly large,
+ *    possibly secret-bearing) prompt or transcript out of the digest input's
+ *    own byte stream while the digest remains exactly as sensitive to those
+ *    bytes as embedding them would be, and it is *why* this module never
+ *    needs to retain raw stdout/stderr past computing their digest inline
+ *    (closing #1941's "is the raw transcript retained anywhere beyond the
+ *    attested digest" sub-question: no, not even internally). `startedAt`/
+ *    `endedAt` are deliberately excluded — including wall-clock time would
+ *    make "the same turn" (same prompt, same exec outcome, same artifacts)
+ *    hash differently on every real run, defeating the determinism property
+ *    (`same turn -> same sourceRef`) a verifier actually needs: identity is
+ *    about *what happened*, not *when*. `artifacts.files` is sorted by
+ *    `path` before hashing so collection order (never semantically
+ *    meaningful — there is exactly one conventional artifact today, see
+ *    `OUTPUT_PATH`) can't perturb the digest.
+ *  - **`sourceRef` folding.** `RunAgentInput.sourceRef`'s own doc comment
+ *    promises it is "folded into the output's `provenance.sourceRef`
+ *    alongside the transcript hash." Concretely: `sourceRef =
+ *    input.sourceRef ? \`${input.sourceRef}@${transcriptDigest}\` :
+ *    transcriptDigest` — an `"<sha>@sha256:<hex>"` shape when a source ref is
+ *    known, reading like the `repo@sha256:...` convention already used
+ *    throughout this codebase (./sign.ts, ./publish.ts's `uri`), or the bare
+ *    `sha256:<hex>` transcript digest alone when it is not. `@` (not `:`,
+ *    which `DockerBuildInput.sourceRef`'s own `"<sha>:<path>"` convention
+ *    already uses for a different purpose) keeps the split unambiguous.
+ *    `extractTranscriptDigest` below recovers the trailing
+ *    `sha256:<hex>` deterministically regardless of what `input.sourceRef`
+ *    contains, by anchoring on the fixed `sha256:[0-9a-f]{64}` pattern at the
+ *    very end of the string.
+ *  - **Attestation interop, decided.** `RunAgentOutput` gained one field,
+ *    `attestationRef` — a `"<component>/run-agent@sha256:<hex>"` string
+ *    already shaped like the digest-qualified `repo@sha256:...` reference
+ *    `./sign.ts`'s `assertDigestRef`/`./verify.ts` already require, built
+ *    from `ctx.component` and the transcript digest, so a `sign`/
+ *    `attest-provenance`/`verify` step composed after `run-agent` wires
+ *    `imageRef: "@RunAgent.attestationRef"` and needs **zero code changes**
+ *    to any of those three verbs — resolving design point 4 of #1943 exactly
+ *    as anticipated. The honest caveat, stated plainly rather than left
+ *    implicit: `attestationRef` is *shaped* like an OCI digest reference, but
+ *    is not by itself a real, registry-resolvable one — `run-agent`'s turn
+ *    output is never pushed anywhere by this module. A deployment that wants
+ *    a genuine `cosign sign`/`cosign verify` round trip against real
+ *    Rekor/Fulcio needs a registry-backed publish step ahead of `sign`
+ *    (mirroring `publish-image`'s `uri`, ./publish.ts) — out of this issue's
+ *    scope, and not needed for the offline contract this issue asks for
+ *    (injected `ProcessRunner`, no real `cosign`/registry ever touched).
+ *    `toRunAgentArchiveEntry` below folds the same digest into a
+ *    `BuildArchiveEntry` (`kind: "asset"`, ./build-archive.ts) per design
+ *    point 2, for a caller building a full archive manifest.
+ *  - **Predicate-type decision, made (not left open).** Reuses the existing
+ *    `predicateType: "https://slsa.dev/provenance/v1"` unchanged — does
+ *    *not* mint a `run-agent`-specific predicate type. `buildDefinition
+ *    .buildType` is the field SLSA v1 actually designates for "what kind of
+ *    recipe produced this" (`RUN_AGENT_BUILD_TYPE` below,
+ *    `"https://chant.dev/agent-turn/v1"`, the same role
+ *    `./sign.ts`'s `DEFAULT_BUILD_TYPE` plays for `docker-build`), so a
+ *    second, parallel `predicateType` taxonomy would duplicate what
+ *    `buildType` already discriminates. This is also what makes the "zero
+ *    code changes to `verify.ts`" claim above literally true:
+ *    `buildVerifyAttestationArgs` hardcodes `--type slsaprovenance1` — a
+ *    minted `predicateType` would have broken that interop outright, forcing
+ *    a `verify.ts` change this issue's design point 4 explicitly hoped to
+ *    avoid.
+ *  - **Fountain-supplied facts, honestly scoped.** `buildRunAgentProvenanceStatement`
+ *    below folds `input.agent` into `externalParameters` (the one *declared*
+ *    fact `RunAgentInput` actually carries today) and `spriteId`/
+ *    `checkpointId`/`turn.status`/`turn.exitCode` into `internalParameters`
+ *    (what actually happened). `model`/`runtime`/`Environment.networking_type`
+ *    /`allowed_hosts` are not included — populating them honestly needs
+ *    fountain `Agent`/`Environment` resolution against `/api/agents`, which
+ *    this module's own doc comment already marks out of scope ("Real `agent`
+ *    name/id -> `Agent.runtime` resolution ... is out of this issue's
+ *    scope"). Adding those keys later is additive (merged into
+ *    `externalParameters`, never replacing it), not a shape break.
+ */
+import type { Capability } from "../capability.js";
+import type { ProvenanceLink } from "./reproducibility.js";
+import type { BuildArchiveEntry } from "./build-archive.js";
+import { type InTotoProvenanceStatement } from "./sign.js";
+/** fountain's `ImageInput` (`PromptRequest.images[]`) — a base64-encoded image attached to a prompt. */
+export interface RunAgentImageInput {
+    /** Base64-encoded image bytes. */
+    data: string;
+    media_type: "image/png" | "image/jpeg" | "image/gif" | "image/webp";
+}
+/** fountain's `Agent.runtime` — the CLI the turn runs inside the sprite. */
+export type RunAgentRuntime = "claude" | "codex" | "gemini" | "opencode";
+export interface RunAgentInput {
+    /** fountain `Agent` name or id — resolved like `fountainRun`'s `resolveAgentId` (`lexicons/fountain/src/op/activities/fountain-run.ts`) against `/api/agents`. */
+    agent: string;
+    task: {
+        prompt: string;
+        /** fountain's `ImageInput` shape (`PromptRequest.images`). */
+        images?: RunAgentImageInput[];
+    };
+    workspace: {
+        /** Reuse an existing sprite (warm start). Omit to create a fresh sprite for this turn. */
+        spriteName?: string;
+        /** Base image for a freshly created sprite. Ignored when reusing `spriteName`. */
+        image?: string;
+        /** Checkpoint comment for the pre-run checkpoint `rollback()` restores to. Default: `"pre-run"`. */
+        checkpointComment?: string;
+    };
+    /** Folded into the output's `provenance.sourceRef` alongside the transcript hash — same field name `DockerBuildInput.sourceRef` already uses (#614, ./build.ts). Omit when unknown; no `provenance` basis beyond the transcript hash in that case. */
+    sourceRef?: string;
+}
+/** Mirrors fountain's `Turn` shape (`status`/`exit_code`/`started_at`/`ended_at`), even though the turn itself runs on a chant-owned sprite rather than a fountain-managed `Sandbox`. */
+export interface RunAgentTurn {
+    status: "completed" | "failed" | "interrupted";
+    exitCode: number | null;
+    startedAt: string;
+    endedAt: string | null;
+}
+/** One artifact file the turn produced, content-addressed the same way a `BuildArchiveEntry` is (./build-archive.ts). */
+export interface RunAgentArtifactFile {
+    path: string;
+    digest: string;
+}
+export interface RunAgentOutput {
+    /** The sprite this turn ran on — the same id `rollback()` restores. */
+    spriteId: string;
+    /** The pre-run checkpoint id — the same id `rollback()` restores to. */
+    checkpointId: string;
+    turn: RunAgentTurn;
+    artifacts: {
+        files: RunAgentArtifactFile[];
+        /** Unified diff of the workspace against its pre-run checkpoint, when applicable. */
+        diff?: string;
+    };
+    /** #614's shape (./reproducibility.ts) — `sourceRef` is the prompt/transcript hash, folded with `input.sourceRef` when supplied (see this module's doc comment, "sourceRef folding"). */
+    provenance: ProvenanceLink;
+    /**
+     * A `"<component>/run-agent@sha256:<hex>"` reference, digest-qualified the
+     * same shape `./sign.ts`'s `assertDigestRef`/`./verify.ts` require (#1943)
+     * — wire a `sign`/`attest-provenance`/`verify` step composed after
+     * `run-agent` with `imageRef: "@RunAgent.attestationRef"` and none of those
+     * three verbs need any code change. See this module's doc comment,
+     * "Attestation interop, decided" for the honest caveat (shaped like an OCI
+     * digest reference, not itself a registry-resolvable one) and
+     * `extractTranscriptDigest`/`toRunAgentArchiveEntry`/
+     * `buildRunAgentProvenanceStatement` below for the rest of the interop
+     * surface built on top of it.
+     */
+    attestationRef: string;
+}
+/**
+ * The subset of `lexicons/fly/src/op/activities/sprites.ts` +
+ * `sprite-fs.ts`'s activity contracts `run-agent` needs, restated
+ * structurally here (rather than imported) so this module carries no hard
+ * package dependency on `@intentius/chant-lexicon-fly` — the same
+ * injectable-seam shape ./cloud-executor.ts's `CloudExecutor`/`DockerClient`
+ * use to keep ./build.ts's `docker-build` testable with no real `docker`
+ * daemon. A real implementation (#1942) is structurally compatible with
+ * `spriteCreate`/`spriteCheckpoint`/`spriteExec`/`spriteRestore`/
+ * `spriteDestroy`/`spriteWriteFile`/`spriteReadFile`'s existing signatures —
+ * adapting them is a thin wrapper, not a rewrite.
+ */
+export interface SpriteActivities {
+    create(args: {
+        name: string;
+        image?: string;
+    }, signal?: AbortSignal): Promise<{
+        id: string;
+        url: string;
+    }>;
+    checkpoint(args: {
+        id: string;
+        comment?: string;
+    }, signal?: AbortSignal): Promise<{
+        checkpointId: string;
+    }>;
+    exec(args: {
+        id: string;
+        cmd: string;
+        timeoutMs?: number;
+    }, signal?: AbortSignal): Promise<{
+        stdout: string;
+        stderr: string;
+        exitCode: number;
+    }>;
+    restore(args: {
+        id: string;
+        checkpoint?: string;
+        comment?: string;
+    }, signal?: AbortSignal): Promise<void>;
+    destroy(args: {
+        id: string;
+    }, signal?: AbortSignal): Promise<void>;
+    writeFile(args: {
+        id: string;
+        path: string;
+        content: string;
+        mkdir?: boolean;
+    }, signal?: AbortSignal): Promise<void>;
+    readFile(args: {
+        id: string;
+        path: string;
+    }, signal?: AbortSignal): Promise<{
+        content: string;
+    }>;
+}
+/**
+ * Thrown by `defaultSpriteActivities()`'s methods when a caller never injects
+ * a real (or fake) `SpriteActivities` — the default remains this
+ * not-wired-yet placeholder even after #1942 wires `run()`/`rollback()`'s
+ * sequencing logic, because *some* concrete backend still has to be supplied
+ * for that logic to have anything to call. `lexicons/fly/src/components/
+ * run-agent.ts`'s adapter (the real backend, over this lexicon's own sprite
+ * lifecycle activities) or the offline `sprites-fake`/`sprites-emulator` path
+ * are what a caller injects instead. A caller that supplies its own
+ * `SpriteActivities` never hits this class.
+ */
+export declare class SpriteActivitiesNotWiredError extends Error {
+    readonly method: keyof SpriteActivities;
+    constructor(method: keyof SpriteActivities);
+}
+/** Phase 1's placeholder default: every method throws `SpriteActivitiesNotWiredError`. See that class's doc comment. */
+export declare function defaultSpriteActivities(): SpriteActivities;
+/**
+ * Build the `run-agent` capability. `sprites` is the injectable
+ * `SpriteActivities` seam (default: `defaultSpriteActivities()`, the
+ * not-wired-yet placeholder — see that function's doc comment) so unit tests
+ * never touch a real/emulated sprite, mirroring `createDockerBuildCapability`'s
+ * `executor: CloudExecutor` parameter (./build.ts). The fly lexicon's
+ * `flyRunAgentCapability` (`lexicons/fly/src/components/run-agent.ts`) is
+ * this same factory called with its real `SpriteActivities` adapter.
+ *
+ * `run()`: `sprites.create` (skipped when reusing `workspace.spriteName`) ->
+ * `sprites.checkpoint` (`comment: workspace.checkpointComment ?? "pre-run"`)
+ * -> `sprites.writeFile` to stage the prompt -> `sprites.exec` the runtime
+ * command (`buildRuntimeCommand`) -> `sprites.readFile` to collect the sole
+ * artifact -> `sprites.destroy`, only for a freshly created sprite whose turn
+ * completed. See this module's doc comment for the exec-throw resolution,
+ * the destroy-vs-leave-alive rule, and the rollback-identity design.
+ *
+ * `rollback()`: `sprites.restore({ id: spriteId, checkpoint: checkpointId })`
+ * — the sole compensation, restoring to the exact pre-run checkpoint `run()`
+ * recorded (see this module's doc comment, "Rollback identity"). Prefers the
+ * `output` parameter's `spriteId`/`checkpointId` (the durable-safe channel,
+ * #1944) over the in-process `WeakMap`, falls back to
+ * `sprites.restore({ id: spriteId, comment })` only when neither source has a
+ * checkpoint id, and degrades to an explicit no-op when there is no sprite id
+ * to restore at all. No hand-written inverse action otherwise; "the
+ * environment is the transaction."
+ *
+ * `rollbackPolicy: "native"` is set explicitly (not left to
+ * ../capability.ts's `rollback`-method inference) so the design commitment
+ * reads directly off this capability's declaration: a mutating `run-agent`
+ * step never needs a `noRollback` opt-out for COMP003
+ * (../lint/rules/comp/comp003-mutating-no-rollback.ts).
+ */
+export declare function createRunAgentCapability(sprites?: SpriteActivities): Capability<RunAgentInput, RunAgentOutput>;
+/**
+ * Compute the transcript digest that becomes (the digest component of)
+ * `provenance.sourceRef` and `attestationRef` — see this module's doc
+ * comment, "Hash basis," for the precise field list/order and the rationale
+ * for hashing rather than embedding each free-text field. Exported so a
+ * caller (or a test) can independently recompute/verify the same digest from
+ * the same run() inputs/outputs, without reaching into this module's private
+ * `run()` closure.
+ */
+export declare function computeTranscriptDigest(params: {
+    agent: string;
+    prompt: string;
+    images?: RunAgentImageInput[];
+    turn: RunAgentTurn;
+    stdout: string;
+    stderr: string;
+    artifacts: RunAgentOutput["artifacts"];
+}): string;
+/**
+ * Recover the bare transcript digest (`sha256:<hex>`) from a
+ * `provenance.sourceRef` or `attestationRef` string, regardless of what (if
+ * anything) precedes it — see this module's doc comment, "sourceRef
+ * folding," for why anchoring on the fixed `sha256:[0-9a-f]{64}` suffix
+ * pattern is unambiguous even when `input.sourceRef` itself contains `@`/`:`.
+ */
+export declare function extractTranscriptDigest(sourceRef: string): string;
+/**
+ * `run-agent`'s SLSA `buildDefinition.buildType` — the recipe-kind URI this
+ * module's doc comment ("Predicate-type decision, made") settles on in place
+ * of minting a new `predicateType`. Mirrors ./sign.ts's own
+ * `DEFAULT_BUILD_TYPE` for `docker-build`.
+ */
+export declare const RUN_AGENT_BUILD_TYPE = "https://chant.dev/agent-turn/v1";
+/**
+ * Fold a `RunAgentOutput` into a `BuildArchiveEntry` (#1943 design point 2,
+ * ./build-archive.ts) — `kind: "asset"`, content-addressed by the same
+ * transcript digest `attestationRef` carries. Returns a bare entry (no
+ * `reproducibility` assigned); pass it through `addArchiveEntry` for the
+ * kind-appropriate `"best-effort"` default (./reproducibility.ts), the same
+ * as any other `asset` entry.
+ */
+export declare function toRunAgentArchiveEntry(component: string, output: RunAgentOutput): BuildArchiveEntry;
+/**
+ * Build the in-toto SLSA provenance statement for a completed turn, reusing
+ * ./sign.ts's `buildProvenanceStatement` unmodified in behavior for every
+ * existing (image) caller — `predicateType` stays
+ * `"https://slsa.dev/provenance/v1"`, only `buildType` and the
+ * `external`/`internalParameters` merge fields (#1943's minimal, documented
+ * extension to `BuildProvenanceStatementInput`) differ. See this module's
+ * doc comment, "Fountain-supplied facts, honestly scoped," for exactly what
+ * is (and is not yet) folded in. The returned statement's `subject` is
+ * `output.attestationRef` — sign+attach it the same way `attest-provenance`
+ * already does for any other digest-qualified reference.
+ */
+export declare function buildRunAgentProvenanceStatement(input: RunAgentInput, output: RunAgentOutput, builderId: string, opts?: {
+    finishedOn?: string;
+    invocationId?: string;
+}): InTotoProvenanceStatement;
+/**
+ * Map `RunAgentInput.agent` to the one-shot, non-interactive command that
+ * reads the staged prompt (`PROMPT_PATH`) and runs it inside the sprite. Each
+ * known `RunAgentRuntime` gets its real CLI invocation; any other value is
+ * passed through verbatim as a literal command — a real-world escape hatch
+ * for a custom binary already present in the sprite image, and how this
+ * module's own tests drive a scripted failure/success against the offline
+ * fake without needing a real CLI. See this module's doc comment ("Still
+ * open, left for later phases") for why no fountain resolution happens here.
+ */
+export declare function buildRuntimeCommand(agent: string): string;
+/** Default `run-agent` capability, backed by the not-wired-yet placeholder `SpriteActivities`. */
+export declare const runAgentCapability: Capability<RunAgentInput, RunAgentOutput>;
+//# sourceMappingURL=run-agent.d.ts.map

package/dist/components/verbs/run-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-agent.d.ts","sourceRoot":"","sources":["../../../src/components/verbs/run-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyPG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAiB,MAAM,eAAe,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAA4B,KAAK,yBAAyB,EAAE,MAAM,QAAQ,CAAC;AAIlF,wGAAwG;AACxG,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;CACrE;AAED,4EAA4E;AAC5E,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;AAIzE,MAAM,WAAW,aAAa;IAC5B,kKAAkK;IAClK,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,8DAA8D;QAC9D,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;KAC/B,CAAC;IACF,SAAS,EAAE;QACT,0FAA0F;QAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,kFAAkF;QAClF,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,oGAAoG;QACpG,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,sPAAsP;IACtP,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,yLAAyL;AACzL,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,aAAa,CAAC;IAC/C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,yHAAyH;AACzH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE;QACT,KAAK,EAAE,oBAAoB,EAAE,CAAC;QAC9B,qFAAqF;QACrF,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,yLAAyL;IACzL,UAAU,EAAE,cAAc,CAAC;IAC3B;;;;;;;;;;;OAWG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAID;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CACJ,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EACtC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxC,UAAU,CACR,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EACtC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrC,IAAI,CACF,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EACrD,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,OAAO,CACL,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAC3D,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,SAAS,CACP,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EACpE,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,QAAQ,CACN,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAClC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;aAC1B,MAAM,EAAE,MAAM,gBAAgB;gBAA9B,MAAM,EAAE,MAAM,gBAAgB;CAQ3D;AAED,wHAAwH;AACxH,wBAAgB,uBAAuB,IAAI,gBAAgB,CAe1D;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,gBAA4C,GACpD,UAAU,CAAC,aAAa,EAAE,cAAc,CAAC,CA6G3C;AAkCD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;CACxC,GAAG,MAAM,CAiBT;AAKD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAQjE;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,oCAAoC,CAAC;AAEtE;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,iBAAiB,CAQnG;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD,yBAAyB,CAgB3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAazD;AAiDD,kGAAkG;AAClG,eAAO,MAAM,kBAAkB,EAAE,UAAU,CAAC,aAAa,EAAE,cAAc,CAA8B,CAAC"}

package/dist/components/verbs/sign.d.ts

@@ -40,6 +40,19 @@
  * `requireTool` throws `ToolNotAvailableError` with an actionable message if
  * `cosign` is absent, and no test here ever spawns a real process or talks
  * to Rekor/Fulcio.
+ *
+ * **#1943 extension (`run-agent` interop).** `BuildProvenanceStatementInput`
+ * gained two optional merge fields, `externalParameters`/`internalParameters`
+ * — additive only, every existing call site's statement is byte-identical
+ * without them. `run-agent` (./run-agent.ts's `buildRunAgentProvenanceStatement`)
+ * is the first caller to use them, plus `buildType` (already overridable,
+ * unchanged here) set to a `run-agent`-specific recipe URI. `predicateType`
+ * stays `"https://slsa.dev/provenance/v1"` for every caller, `run-agent`
+ * included — see ./run-agent.ts's own doc comment ("Attestation interop")
+ * for why a turn is attested as an SLSA-shaped provenance predicate rather
+ * than under a minted `run-agent`-specific `predicateType`, and why that
+ * decision means `sign`/`attestProvenance`/`../verbs/verify.ts` needed zero
+ * changes to their `cosign` invocations to attest/verify a turn.
  */
 import type { Capability } from "../capability.js";
 import { type ProcessRunner } from "./process-runner.js";
@@ -170,6 +183,23 @@ export interface BuildProvenanceStatementInput {
     finishedOn?: string;
     /** CI invocation/run id, when available (e.g. a GitHub Actions run id). */
     invocationId?: string;
+    /**
+     * Additional `buildDefinition.externalParameters` merged in alongside the
+     * `{ sourceRef }` default (#1943: `run-agent`'s provenance statement folds
+     * in the fountain-supplied *declared* facts — the agent selector today,
+     * more once fountain `Agent` resolution lands — without run-agent needing
+     * its own predicate builder). `sourceRef` is reserved by this function: a
+     * caller-supplied `sourceRef` is overridden, never signed; any other key
+     * name is the caller's choice.
+     */
+    externalParameters?: Record<string, unknown>;
+    /**
+     * Additional `buildDefinition.internalParameters` merged in alongside the
+     * `{ artifactDigest }` default (#1943: `run-agent` folds in what actually
+     * happened — sprite id, checkpoint id, turn status/exit code — the
+     * *imperative* facts a build's `internalParameters` are for).
+     */
+    internalParameters?: Record<string, unknown>;
 }
 /**
  * Build an in-toto SLSA provenance statement for `input.imageRef`, reusing

package/dist/components/verbs/sign.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../src/components/verbs/sign.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAwC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAIxD;;;;GAIG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;aAE/B,GAAG,EAAE,MAAM;aACX,IAAI,EAAE,MAAM,GAAG,QAAQ;gBADvB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GAAG,QAAQ;CAQ1C;AAcD;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,wGAAwG;IACxG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,6dAA6d;IAC7d,GAAG,EAAE,MAAM,CAAC;CACb;AAsBD,MAAM,WAAW,SAAS;IACxB,oOAAoO;IACpO,QAAQ,EAAE,MAAM,CAAC;IACjB,mLAAmL;IACnL,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,wJAAwJ;IACxJ,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,UAAU;IACzB,kIAAkI;IAClI,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,MAAM,EAAE,IAAI,CAAC;IACb,kEAAkE;IAClE,MAAM,EAAE,SAAS,GAAG,KAAK,CAAC;CAC3B;AAED,uKAAuK;AACvK,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAQtD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,GAAE,aAAsC,GACpD,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAUnC;AAED,qEAAqE;AACrE,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,CAA0B,CAAC;AAIxF,oNAAoN;AACpN,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,oBAAoB,CAAC,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC,CAAC;KAChF,CAAC;IACF,UAAU,EAAE;QACV,OAAO,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACxB,QAAQ,CAAC,EAAE;YACT,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB,CAAC;KACH,CAAC;CACH;AAED,oGAAoG;AACpG,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,iCAAiC,CAAC;IACzC,aAAa,EAAE,gCAAgC,CAAC;IAChD,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IAC7D,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAED,MAAM,WAAW,6BAA6B;IAC5C,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,uJAAuJ;IACvJ,UAAU,EAAE,cAAc,CAAC;IAC3B,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAC;IAClB,4JAA4J;IAC5J,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAWD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,yBAAyB,CAsBxG;AAED,MAAM,WAAW,qBAAsB,SAAQ,6BAA6B;IAC1E,yEAAyE;IACzE,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,wEAAwE;IACxE,GAAG,CAAC,EAAE,qBAAqB,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,8FAA8F;IAC9F,SAAS,EAAE,yBAAyB,CAAC;IACrC,yDAAyD;IACzD,QAAQ,EAAE,IAAI,CAAC;IACf,kEAAkE;IAClE,MAAM,EAAE,SAAS,GAAG,KAAK,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,qBAAqB,EAC5B,aAAa,EAAE,MAAM,GACpB,MAAM,CAKR;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAC9C,aAAa,GAAE,aAAsC,GACpD,UAAU,CAAC,qBAAqB,EAAE,sBAAsB,CAAC,CAgB3D;AAED,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,EAAE,UAAU,CAAC,qBAAqB,EAAE,sBAAsB,CAC7D,CAAC"}
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../src/components/verbs/sign.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAwC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAIxD;;;;GAIG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;aAE/B,GAAG,EAAE,MAAM;aACX,IAAI,EAAE,MAAM,GAAG,QAAQ;gBADvB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GAAG,QAAQ;CAQ1C;AAcD;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,wGAAwG;IACxG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,6dAA6d;IAC7d,GAAG,EAAE,MAAM,CAAC;CACb;AAsBD,MAAM,WAAW,SAAS;IACxB,oOAAoO;IACpO,QAAQ,EAAE,MAAM,CAAC;IACjB,mLAAmL;IACnL,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,wJAAwJ;IACxJ,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,UAAU;IACzB,kIAAkI;IAClI,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,MAAM,EAAE,IAAI,CAAC;IACb,kEAAkE;IAClE,MAAM,EAAE,SAAS,GAAG,KAAK,CAAC;CAC3B;AAED,uKAAuK;AACvK,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAQtD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,GAAE,aAAsC,GACpD,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAUnC;AAED,qEAAqE;AACrE,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,CAA0B,CAAC;AAIxF,oNAAoN;AACpN,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,oBAAoB,CAAC,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC,CAAC;KAChF,CAAC;IACF,UAAU,EAAE;QACV,OAAO,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACxB,QAAQ,CAAC,EAAE;YACT,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB,CAAC;KACH,CAAC;CACH;AAED,oGAAoG;AACpG,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,iCAAiC,CAAC;IACzC,aAAa,EAAE,gCAAgC,CAAC;IAChD,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IAC7D,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAED,MAAM,WAAW,6BAA6B;IAC5C,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,uJAAuJ;IACvJ,UAAU,EAAE,cAAc,CAAC;IAC3B,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAC;IAClB,4JAA4J;IAC5J,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAWD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,yBAAyB,CAwBxG;AAED,MAAM,WAAW,qBAAsB,SAAQ,6BAA6B;IAC1E,yEAAyE;IACzE,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,wEAAwE;IACxE,GAAG,CAAC,EAAE,qBAAqB,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,8FAA8F;IAC9F,SAAS,EAAE,yBAAyB,CAAC;IACrC,yDAAyD;IACzD,QAAQ,EAAE,IAAI,CAAC;IACf,kEAAkE;IAClE,MAAM,EAAE,SAAS,GAAG,KAAK,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,qBAAqB,EAC5B,aAAa,EAAE,MAAM,GACpB,MAAM,CAKR;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAC9C,aAAa,GAAE,aAAsC,GACpD,UAAU,CAAC,qBAAqB,EAAE,sBAAsB,CAAC,CAgB3D;AAED,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,EAAE,UAAU,CAAC,qBAAqB,EAAE,sBAAsB,CAC7D,CAAC"}

package/dist/composite.d.ts

@@ -73,8 +73,13 @@ export declare function Composite<P, M extends CompositeFactoryMembers = Composi
 /**
  * Expands a CompositeInstance into a flat Map of prefixed entity names to Declarables.
  * Handles nested composites recursively.
+ *
+ * @param instanceName - The composite INSTANCE every member belongs to (chant
+ *   #1443), which at the top call is the export name and stays that name
+ *   through nesting — `prefix` grows per member and is not an instance
+ *   identity. Defaults to `prefix` so the top call needs no extra argument.
  */
-export declare function expandComposite(prefix: string, instance: CompositeInstance): Map<string, Declarable>;
+export declare function expandComposite(prefix: string, instance: CompositeInstance, instanceName?: string): Map<string, Declarable>;
 /**
  * Type helpers for withDefaults.
  */

package/dist/composite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"composite.d.ts","sourceRoot":"","sources":["../src/composite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAG7D;;GAEG;AACH,eAAO,MAAM,gBAAgB,eAAgC,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,uBAAuB,GAE/B,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAO/D,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAE3B;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,uBAAuB,GAAG,gBAAgB;IACrF,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAEpB,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,uBAAuB,GAAG,gBAAgB;IAC1F,CAAC,KAAK,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAO9E;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAC,WAAW,CAAmD;IAE7E,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,IAAI;IAI/D,MAAM,CAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE;IAI/C,MAAM,CAAC,KAAK,IAAI,IAAI;IAIpB,MAAM,KAAK,IAAI,IAAI,MAAM,CAExB;CACF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,CAAC,SAAS,uBAAuB,GAAG,gBAAgB,EAC/E,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,EACxB,IAAI,CAAC,EAAE,MAAM,GACZ,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,CAmC3B;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,iBAAiB,GAC1B,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CA8DzB;AAED;;GAEG;AACH,KAAK,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,IAC3C,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AACzD,KAAK,QAAQ,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC;AAE5C;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,gBAAgB,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,EAC9E,UAAU,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,EACrC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GACvC,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAc1D;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,eAAuC,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,cAAc,eAA0C,CAAC;AAEtE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,SAAS,CAAC,CAAC,SAAS,gBAAgB,EAClD,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAM1B;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,EAC9C,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAC/D,KAAK,EAAE,CAAC,EACR,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,CAAC,CAEH;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7D,IAAI,EAAE,CAAC,EACP,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,GACrB,CAAC,CAqBH"}
+{"version":3,"file":"composite.d.ts","sourceRoot":"","sources":["../src/composite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAG7D;;GAEG;AACH,eAAO,MAAM,gBAAgB,eAAgC,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,uBAAuB,GAE/B,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAO/D,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAE3B;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,uBAAuB,GAAG,gBAAgB;IACrF,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAEpB,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,uBAAuB,GAAG,gBAAgB;IAC1F,CAAC,KAAK,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAO9E;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAC,WAAW,CAAmD;IAE7E,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,IAAI;IAI/D,MAAM,CAAC,MAAM,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE;IAI/C,MAAM,CAAC,KAAK,IAAI,IAAI;IAIpB,MAAM,KAAK,IAAI,IAAI,MAAM,CAExB;CACF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,CAAC,SAAS,uBAAuB,GAAG,gBAAgB,EAC/E,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,EACxB,IAAI,CAAC,EAAE,MAAM,GACZ,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,CAmC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,iBAAiB,EAC3B,YAAY,GAAE,MAAe,GAC5B,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAqFzB;AAED;;GAEG;AACH,KAAK,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,IAC3C,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AACzD,KAAK,QAAQ,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC;AAE5C;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,gBAAgB,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,EAC9E,UAAU,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,EACrC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GACvC,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAc1D;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,eAAuC,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,cAAc,eAA0C,CAAC;AAEtE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,SAAS,CAAC,CAAC,SAAS,gBAAgB,EAClD,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAM1B;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,EAC9C,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAC/D,KAAK,EAAE,CAAC,EACR,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,CAAC,CAEH;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7D,IAAI,EAAE,CAAC,EACP,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,GACrB,CAAC,CAqBH"}

package/dist/discovery/collect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collect.d.ts","sourceRoot":"","sources":["../../src/discovery/collect.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAgH9D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAClE,SAAS,CAAC,EAAE,MAAM,GACjB,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAiEzB"}
+{"version":3,"file":"collect.d.ts","sourceRoot":"","sources":["../../src/discovery/collect.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAyH9D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,EAClE,SAAS,CAAC,EAAE,MAAM,GACjB,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAiEzB"}