@jini-ai/cms 0.1.0

package/dist/settings/settings.js

@@ -0,0 +1,238 @@
+import { DefinitionInvalidError, SecretNotSupportedError } from "./errors.js";
+import { SCOPE_BIT, } from "./types.js";
+const NAMESPACE_FENCE = {
+    core: (input) => input.namespace.startsWith("core.") && input.workspaceId === null,
+    theme: (input) => input.namespace.startsWith("theme.") && input.workspaceId === null,
+    site: (input) => input.namespace.startsWith("site.") && input.workspaceId !== null,
+};
+/**
+ * REQ-02/REQ-09/INV-05/INV-08 — the pure half of `registerDefinitions`.
+ * Never throws; returns a discriminated result so the chokepoint decides how
+ * to surface the failure (matches `ValueValidationFailedError`'s pattern of
+ * keeping I/O out of validation).
+ *
+ * @complexity O(1) per definition.
+ * @overallScore 100
+ */
+export function validateDefinitionInput(input) {
+    if (input.secret) {
+        return {
+            valid: false,
+            error: new SecretNotSupportedError("secret:true definitions are not supported in the core-only subset (REQ-09/INV-08)"),
+        };
+    }
+    if (!NAMESPACE_FENCE[input.ownerKind](input)) {
+        return {
+            valid: false,
+            error: new DefinitionInvalidError(`namespace '${input.namespace}' does not match the owner fence for owner_kind '${input.ownerKind}' (REQ-02)`),
+        };
+    }
+    if (input.scopes < 1 || input.scopes > 7) {
+        return {
+            valid: false,
+            error: new DefinitionInvalidError(`scopes bitmask ${input.scopes} is out of range 1..7`),
+        };
+    }
+    // INV-05: a site-owned def (workspace_id NOT NULL) may never declare the global scope bit.
+    if (input.workspaceId !== null && (input.scopes & SCOPE_BIT.global) !== 0) {
+        return {
+            valid: false,
+            error: new DefinitionInvalidError("a site-owned definition may not declare the global scope bit (INV-05)"),
+        };
+    }
+    // Totality (behavior.spec §3): every non-secret def needs a non-null default so
+    // getEffective is always total (INV-02) and factory-reset is provably bootable.
+    if (input.defaultValue === null) {
+        return {
+            valid: false,
+            error: new DefinitionInvalidError("non-secret definitions require a non-null default_json (totality, INV-02)"),
+        };
+    }
+    return { valid: true };
+}
+export function validateValueAgainstSchema(schema, value) {
+    if (value === null)
+        return schema.nullable === true;
+    switch (schema.type) {
+        case "string":
+            return typeof value === "string";
+        case "number":
+            return typeof value === "number";
+        case "boolean":
+            return typeof value === "boolean";
+        case "enum":
+            return typeof value === "string" && schema.values.includes(value);
+        case "json":
+            // Any JSON value is accepted; internal shape/length validation is the
+            // registering feature's own write-path job — see
+            // docs/decisions/settings-json-schema-variant.md.
+            return true;
+    }
+}
+/** Identity-registry of total coercers keyed by `coercionTag` (EC-08). `"identity"` is always registered. */
+const coercers = new Map([["identity", (v) => v]]);
+export function registerCoercer(tag, fn) {
+    coercers.set(tag, fn);
+}
+const cacheByRepo = new WeakMap();
+function getCacheStore(repo) {
+    let store = cacheByRepo.get(repo);
+    if (!store) {
+        store = { definitions: new Map(), epoch: new Map() };
+        cacheByRepo.set(repo, store);
+    }
+    return store;
+}
+function namespaceEpoch(store, namespace) {
+    return store.epoch.get(namespace) ?? 0;
+}
+function workspaceCachePart(workspaceId) {
+    return workspaceId ?? "platform";
+}
+function definitionCacheKey(workspaceId, namespace, key, epoch) {
+    return `def:${workspaceCachePart(workspaceId)}:${namespace}:${key}:e${epoch}`;
+}
+/**
+ * Bumps the namespace's definition-cache epoch (lazy invalidation) — every
+ * previously-cached definition-cache entry for this
+ * namespace (across every workspace) becomes unreachable on the next read,
+ * without needing to enumerate tenants. Call after any write that changes a
+ * definition's identity/shape/status in this namespace: register, rename
+ * (both the old and new namespace), retype, deprecate, tombstone.
+ */
+export function invalidateDefinitionNamespaceCache(repo, namespace) {
+    const store = getCacheStore(repo);
+    store.epoch.set(namespace, namespaceEpoch(store, namespace) + 1);
+}
+/**
+ * Purge support — now a no-op, deliberately kept rather than deleted.
+ *
+ * This cleared the workspace- and user-scope layer-cache entries a tenant/principal teardown
+ * invalidated, because a purge deletes an unbounded number of value rows across an unknown set of
+ * namespaces and per-namespace single-key invalidation was not practical for it. With the layer
+ * cache gone (see this module's cache header) there is nothing left to clear: the rows are deleted,
+ * and the next read goes to the repo and sees them gone.
+ *
+ * Kept as an explicit no-op instead of removed because of what it guards. `purge-service.ts` calls
+ * it as the last step of deleting a tenant's settings, and its correctness question — "can a purged
+ * value still be read back?" — is exactly the kind that must be answered again if anyone
+ * reintroduces caching. Deleting the call site would remove the place that question is asked. A
+ * cache added without restoring a purge hook is a tenant-teardown leak, so this stays as the seam.
+ */
+export function invalidateWorkspaceSettingsCache(_repo, _workspaceId, _principalId) {
+    // Intentionally empty — see doc above. Do not delete without re-reading `purge-service.ts`.
+}
+/**
+ * Follows an alias marker (depth <=1) to the current row and returns it as
+ * stored — status intact, including `tombstone`. `resolveDefinition` (below)
+ * is the read-path wrapper that collapses tombstone to typed-absent (EC-10);
+ * `write-service.ts` uses this raw form directly so it can report
+ * `DEFINITION_TOMBSTONED` distinctly from "not found".
+ */
+export async function resolveDefinitionRaw(deps, input) {
+    // Namespace fencing (REQ-02) makes `site.*` (non-null workspace_id) and
+    // `core.*`/`theme.*` (null workspace_id) disjoint by construction, so a
+    // caller resolving inside a workspace context may still be asking for a
+    // platform definition. Try the caller's own partition first, then fall
+    // back to the platform (null) partition.
+    const found = (await deps.repo.findActiveDefinition(input)) ??
+        (input.workspaceId !== null
+            ? await deps.repo.findActiveDefinition({ ...input, workspaceId: null })
+            : null);
+    if (!found)
+        return null;
+    if (found.status === "alias") {
+        if (found.aliasOfNamespace == null || found.aliasOfKey == null)
+            return null;
+        return resolveDefinitionRaw(deps, {
+            namespace: found.aliasOfNamespace,
+            key: found.aliasOfKey,
+            workspaceId: input.workspaceId,
+        });
+    }
+    return found;
+}
+/**
+ * The read-path resolver: typed-absent (`null`) for a tombstoned or
+ * missing key. Cached — keyed by
+ * `(workspaceId, namespace, key, namespace-epoch)`, so it is workspace-
+ * qualified by construction and invalidated wholesale by
+ * `invalidateDefinitionNamespaceCache` on any definition-lifecycle write
+ * (register/rename/retype/deprecate/tombstone). `resolveDefinitionRaw`
+ * itself stays uncached — the write chokepoint (`write-service.ts`) calls it
+ * directly so authorization/validation decisions are always made against
+ * live data, never a cached read.
+ */
+export async function resolveDefinition(deps, input) {
+    const store = getCacheStore(deps.repo);
+    const epoch = namespaceEpoch(store, input.namespace);
+    const cacheKey = definitionCacheKey(input.workspaceId, input.namespace, input.key, epoch);
+    if (store.definitions.has(cacheKey))
+        return store.definitions.get(cacheKey);
+    const found = await resolveDefinitionRaw(deps, input);
+    const resolved = !found || found.status === "tombstone" ? null : found;
+    store.definitions.set(cacheKey, resolved);
+    return resolved;
+}
+/**
+ * REQ-03/INV-02 — total for a live key: never throws, never returns
+ * undefined. Precedence `user ?? workspace ?? global ?? default`. A
+ * `cleared` row is treated as absent at that layer (behavior.spec §1.2).
+ *
+ * Per-layer reads go straight to the repo (see this module's cache header for
+ * why the per-layer value cache that used to wrap these three calls does not
+ * exist here).
+ *
+ * @complexity O(1) — up to 3 layer reads + 1 definition read.
+ * @overallScore 100
+ */
+export async function getEffective(deps, input) {
+    const definition = await resolveDefinition(deps, {
+        namespace: input.namespace,
+        key: input.key,
+        workspaceId: input.scopeContext.workspaceId ?? null,
+    });
+    if (!definition)
+        return null;
+    const coerce = (value, defVersion) => {
+        if (defVersion === definition.version)
+            return value;
+        const coercer = coercers.get(definition.coercionTag ?? "identity") ?? coercers.get("identity");
+        return coercer(value);
+    };
+    // Every layer read below goes straight to the repo. See this module's cache header for why there
+    // is no per-layer cache wrapping these three calls.
+    if (input.scopeContext.workspaceId && input.scopeContext.principalId) {
+        const workspaceId = input.scopeContext.workspaceId;
+        const principalId = input.scopeContext.principalId;
+        const userValue = await deps.repo.getUserValue({ workspaceId, principalId, settingId: definition.settingId });
+        if (userValue && userValue.state === "set") {
+            return {
+                value: coerce(userValue.valueJson, userValue.defVersion),
+                sourceLayer: "user",
+                defVersion: definition.version,
+            };
+        }
+    }
+    if (input.scopeContext.workspaceId) {
+        const workspaceId = input.scopeContext.workspaceId;
+        const workspaceValue = await deps.repo.getWorkspaceValue({ workspaceId, settingId: definition.settingId });
+        if (workspaceValue && workspaceValue.state === "set") {
+            return {
+                value: coerce(workspaceValue.valueJson, workspaceValue.defVersion),
+                sourceLayer: "workspace",
+                defVersion: definition.version,
+            };
+        }
+    }
+    const globalValue = await deps.repo.getGlobalValue(definition.settingId);
+    if (globalValue && globalValue.state === "set") {
+        return {
+            value: coerce(globalValue.valueJson, globalValue.defVersion),
+            sourceLayer: "global",
+            defVersion: definition.version,
+        };
+    }
+    return { value: definition.defaultValue, sourceLayer: "default", defVersion: definition.version };
+}
+//# sourceMappingURL=settings.js.map

package/dist/settings/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/settings/settings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EACL,SAAS,GAMV,MAAM,YAAY,CAAC;AAyBpB,MAAM,eAAe,GAAkE;IACrF,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;IAClF,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;IACpF,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;CACnF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAsB;IAEtB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,IAAI,uBAAuB,CAChC,mFAAmF,CACpF;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,IAAI,sBAAsB,CAC/B,cAAc,KAAK,CAAC,SAAS,oDAAoD,KAAK,CAAC,SAAS,YAAY,CAC7G;SACF,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,IAAI,sBAAsB,CAAC,kBAAkB,KAAK,CAAC,MAAM,uBAAuB,CAAC;SACzF,CAAC;IACJ,CAAC;IAED,2FAA2F;IAC3F,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,IAAI,sBAAsB,CAC/B,uEAAuE,CACxE;SACF,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,gFAAgF;IAChF,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,IAAI,sBAAsB,CAC/B,2EAA2E,CAC5E;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAA0B,EAAE,KAAgB;IACrF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC;IACpD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpE,KAAK,MAAM;YACT,sEAAsE;YACtE,iDAAiD;YACjD,kDAAkD;YAClD,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,6GAA6G;AAC7G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAA0C,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE5F,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,EAAmC;IAC9E,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AA6CD,MAAM,WAAW,GAAG,IAAI,OAAO,EAAwC,CAAC;AAExE,SAAS,aAAa,CAAC,IAAsB;IAC3C,IAAI,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QACrD,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB,EAAE,SAAiB;IAClE,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAsC;IAChE,OAAO,WAAW,IAAI,UAAU,CAAC;AACnC,CAAC;AAED,SAAS,kBAAkB,CAAC,WAA0B,EAAE,SAAiB,EAAE,GAAW,EAAE,KAAa;IACnG,OAAO,OAAO,kBAAkB,CAAC,WAAW,CAAC,IAAI,SAAS,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kCAAkC,CAAC,IAAsB,EAAE,SAAiB;IAC1F,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gCAAgC,CAAC,KAAuB,EAAE,YAAoB,EAAE,YAAqB;IACnH,4FAA4F;AAC9F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAgC,EAChC,KAAqE;IAErE,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,yCAAyC;IACzC,MAAM,KAAK,GACT,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI;YACzB,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACvE,CAAC,CAAC,IAAI,CAAC,CAAC;IACZ,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,gBAAgB,IAAI,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5E,OAAO,oBAAoB,CAAC,IAAI,EAAE;YAChC,SAAS,EAAE,KAAK,CAAC,gBAAgB;YACjC,GAAG,EAAE,KAAK,CAAC,UAAU;YACrB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAgC,EAChC,KAAqE;IAErE,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;IAE7E,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACvE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAgC,EAChC,KAA4E;IAE5E,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE;QAC/C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW,IAAI,IAAI;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,MAAM,MAAM,GAAG,CAAC,KAAgB,EAAE,UAAkB,EAAa,EAAE;QACjE,IAAI,UAAU,KAAK,UAAU,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAChG,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC;IAEF,iGAAiG;IACjG,oDAAoD;IACpD,IAAI,KAAK,CAAC,YAAY,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QACrE,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC;QACnD,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC;QACnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9G,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC3C,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC;gBACxD,WAAW,EAAE,MAAM;gBACnB,UAAU,EAAE,UAAU,CAAC,OAAO;aAC/B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC;QACnD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3G,IAAI,cAAc,IAAI,cAAc,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACrD,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,UAAU,CAAC;gBAClE,WAAW,EAAE,WAAW;gBACxB,UAAU,EAAE,UAAU,CAAC,OAAO;aAC/B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACzE,IAAI,WAAW,IAAI,WAAW,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,UAAU,CAAC;YAC5D,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,UAAU,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;AACpG,CAAC"}

package/dist/settings/tool-registrations.d.ts

@@ -0,0 +1,56 @@
+/**
+ * @file Settings' tool-registration wiring: maps the wireable subset of `agent-tools.ts`'s eight
+ * catalog entries onto three reads and one curated write, as `ToolRegistration`s. See
+ * `agent-tools.ts`'s own file header for why the four GENERIC write entries are documented but
+ * deliberately never wired ({@link UNWIRED_SETTINGS_TOOL_IDS}), and why `settings_set_ui_preference`
+ * is not one of them.
+ *
+ * The one write here is shaped so that its blast radius is a property of the code rather than of
+ * the caller's restraint: its target key comes from a fixed enum
+ * (`agent-writable-preferences.ts`), its scope is a constant, and it never names a principal — so
+ * "write another operator's settings" and "write a key outside the list" are unrepresentable
+ * inputs, not merely unauthorized ones.
+ *
+ * Authorization shape: `getEffective`/`resolveDefinition` (`settings.ts`) and a direct
+ * `settingsRepo.listActiveDefinitions`/`getGlobalValue`/`getWorkspaceValue`/`getUserValue` read
+ * carry no `authorize()` call of their own — a host's admin routes gate inline — so every handler
+ * here calls the kit's `requireToolPermission` itself, mirroring those routes' identical checks.
+ * `resolveOwnOrOtherPrincipalRead` below deliberately duplicates (rather than imports) any HTTP
+ * admin layer's read-target resolution logic — this file is domain-owned wiring, and importing
+ * logic from a host's HTTP admin layer would invert this library's ports/adapters direction
+ * (features must not depend on a host's server/routes layer); the two are kept behaviorally
+ * identical by inspection, the same discipline that logic's own host-side callers should apply.
+ */
+import type { AuthorizeFn } from "../core/commands/command.js";
+import { type DerivedRiskByToolId, type ToolRegistration } from "../core/tools/registration-kit.js";
+import type { PrincipalRepoPort } from "../identity/index.js";
+import type { SettingsRepoPort } from "./ports.js";
+/**
+ * The exact slice of a host's route-deps bag Settings' tool handlers read. Declared structurally
+ * (rather than importing any host's own route-deps type) so this module carries no back-edge into
+ * a host's composition root. A host satisfies this structurally by passing its existing route deps
+ * object; nothing there needs to change shape.
+ */
+export interface SettingsToolDeps {
+    authorize: AuthorizeFn;
+    workspaceId: string;
+    clock: {
+        nowIso(): string;
+    };
+    idGen: {
+        newId(): string;
+    };
+    settingsReady: Promise<void>;
+    settingsUiTabsReady: Promise<void>;
+    settingsRepo: SettingsRepoPort;
+    principalRepo: PrincipalRepoPort;
+}
+/**
+ * This wiring layer's OWN risk classification, authored from what each handler below actually
+ * calls. See `DerivedRiskByToolId` in the kit for why it is independent of the catalog's own
+ * `sideEffects` declaration — and note that the four excluded writes appear NOWHERE here, which is
+ * itself the strongest of the guards: an unclassified id cannot be wired at all.
+ */
+export declare const settingsDerivedRisk: DerivedRiskByToolId;
+export declare function buildSettingsRegistrations(routeDeps: SettingsToolDeps): ToolRegistration[];
+//# sourceMappingURL=tool-registrations.d.ts.map

package/dist/settings/tool-registrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registrations.d.ts","sourceRoot":"","sources":["../../src/settings/tool-registrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAUL,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACtB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAa9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAOnD;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,WAAW,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE;QAAE,MAAM,IAAI,MAAM,CAAA;KAAE,CAAC;IAC5B,KAAK,EAAE;QAAE,KAAK,IAAI,MAAM,CAAA;KAAE,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,aAAa,EAAE,iBAAiB,CAAC;CAClC;AAmFD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,mBAYhC,CAAC;AAkBH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAsJ1F"}

package/dist/settings/tool-registrations.js

@@ -0,0 +1,240 @@
+import { buildDomainRegistrations, indexCatalogById, optionalString, requireInputRecord, requireNoInput, requireString, requireToolPermission, withSchemaOnRejection, } from "../core/tools/registration-kit.js";
+import { getSettingsAgentToolCatalog } from "./agent-tools.js";
+import { AGENT_PREFERENCE_WRITE_SCOPE, AGENT_WRITABLE_PREFERENCE_IDS, resolveAgentWritablePreference, } from "./agent-writable-preferences.js";
+import { DefinitionNotFoundError, DefinitionTombstonedError, ScopeNotAllowedError, ValueValidationFailedError, } from "./errors.js";
+import { getEffective, resolveDefinition } from "./settings.js";
+import { set as setSettingValue } from "./write-service.js";
+const CATALOG_BY_ID = indexCatalogById(getSettingsAgentToolCatalog());
+/** Permission gating a read that names a DIFFERENT principal than the caller — mirrors a host's
+ * own HTTP admin layer's equivalent constant (kept as a literal here per this file's header; the
+ * two are data, not logic, so duplication carries no drift risk beyond a string comparison). */
+const CROSS_PRINCIPAL_SETTINGS_READ_PERMISSION = "settings.user.read";
+/**
+ * Decides which principal's user layer a settings read tool may target — the tool-wiring twin of
+ * a host's own HTTP admin layer's equivalent read-target resolver (see this file's header for why
+ * it is duplicated rather than imported).
+ *
+ * @throws {ForbiddenError} (`core/commands`, via `requireToolPermission`) If `requestedPrincipalId`
+ * names a different principal than the caller and the caller lacks `settings.user.read`.
+ * @returns The principal id to read (`undefined` = skip the user layer entirely).
+ * @complexity O(1); at most one `authorize()` call (none for a self-read or no-op read).
+ * @overallScore 100
+ */
+async function resolveOwnOrOtherPrincipalRead(routeDeps, required) {
+    const { requestedPrincipalId, callerPrincipalId } = required;
+    // Defaults to the CALLER, never to `undefined`. `undefined` does not mean "the caller" to
+    // `getEffective` — it means "skip the user layer entirely" (`settings.ts`'s
+    // `if (workspaceId && principalId)` guard), so an omitted `principalId` would otherwise make
+    // every read tool report the workspace/global/default value while silently ignoring the
+    // operator's own — a read tool that cannot see the layer the operator is actually looking at
+    // does not fail loudly; it produces confident wrong answers.
+    const target = requestedPrincipalId ?? callerPrincipalId;
+    if (target === callerPrincipalId)
+        return target;
+    await requireToolPermission(routeDeps, {
+        principalId: callerPrincipalId,
+        permission: CROSS_PRINCIPAL_SETTINGS_READ_PERMISSION,
+        entityType: "setting-value",
+    });
+    return requestedPrincipalId;
+}
+function layerValueOf(record) {
+    return record && record.state === "set" ? record.valueJson : null;
+}
+/**
+ * Builds `write-service.ts`'s own five-field dep shape from `RouteDeps`.
+ *
+ * Deliberately duplicates a host's own HTTP admin layer's equivalent field-mapping helper rather
+ * than importing it, for the reason this file's header already gives about
+ * `resolveOwnOrOtherPrincipalRead`: this is domain-owned wiring, and importing from a host's HTTP
+ * admin layer would invert the ports/adapters direction. It is a field mapping, not logic, so the
+ * two copies carry no behavioral drift risk — and `write-service.ts` is the single chokepoint
+ * either way, so a divergence here could only produce a missing dependency, which fails loudly.
+ */
+function toWriteDeps(routeDeps) {
+    return {
+        repo: routeDeps.settingsRepo,
+        clock: routeDeps.clock,
+        ids: routeDeps.idGen,
+        authorize: routeDeps.authorize,
+        principals: routeDeps.principalRepo,
+    };
+}
+/**
+ * Errors a DIFFERENT input would fix, for `withSchemaOnRejection`'s decoration.
+ *
+ * `ValueValidationFailedError` is the common one — the model sent a value of the wrong shape for
+ * the chosen setting, and republishing the schema (with its per-key value hints) lets it correct
+ * in one turn instead of guessing. The two definition errors are included because they are
+ * genuinely reachable from a bad `setting`: an id that passed the enum but names a definition this
+ * workspace has tombstoned. A `ForbiddenError` is deliberately absent — no input change fixes a
+ * missing grant, and decorating it would imply the call is worth retrying.
+ */
+function isPreferenceShapeRejection(error) {
+    return (error instanceof ValueValidationFailedError ||
+        error instanceof DefinitionNotFoundError ||
+        error instanceof DefinitionTombstonedError ||
+        error instanceof ScopeNotAllowedError);
+}
+/**
+ * This wiring layer's OWN risk classification, authored from what each handler below actually
+ * calls. See `DerivedRiskByToolId` in the kit for why it is independent of the catalog's own
+ * `sideEffects` declaration — and note that the four excluded writes appear NOWHERE here, which is
+ * itself the strongest of the guards: an unclassified id cannot be wired at all.
+ */
+export const settingsDerivedRisk = new Map([
+    // -> settingsRepo.listActiveDefinitions() x2 (platform + this workspace): reads only.
+    ["settings_list_definitions", "none"],
+    // -> settingsRepo.listActiveDefinitions() x2 + getEffective() per key: reads only, no write path.
+    ["settings_get_effective", "none"],
+    // -> resolveDefinition() + settingsRepo.getGlobalValue/getWorkspaceValue/getUserValue: reads only.
+    ["settings_get_raw", "none"],
+    // -> write-service.set() at scope=user against the caller's own principal: writes a value row
+    // and a revision-ledger entry. Durable, and correctly classified as such even though every key
+    // it can reach is a reversible display preference — the classification describes what the
+    // handler DOES, not how much the operator would mind.
+    ["settings_set_ui_preference", "mutates-durable-state"],
+]);
+/** Settings catalog entries this pass does not wire, and why — see `agent-tools.ts`'s own per-entry comments for the full reasoning. */
+const UNWIRED_SETTINGS_TOOL_IDS = new Set([
+    // EXCLUDED BY DESIGN: generic "set any setting key" — a typical human admin UI for this domain
+    // is itself an uncurated free-text/raw-JSON editor, not a fixed named list (see agent-tools.ts
+    // file header).
+    "settings_set",
+    "settings_clear",
+    // EXCLUDED BY DESIGN: bulk variant — clears every value in an operator-named namespace at a
+    // scope in one call, irreversible.
+    "settings_reset",
+    // EXCLUDED BY DESIGN: schema-level, not value-level — can rename/retype/deprecate/tombstone the
+    // definition a key resolves through, reinterpreting every existing stored value for that key
+    // platform-wide.
+    "settings_register_definitions",
+]);
+export function buildSettingsRegistrations(routeDeps) {
+    const handlers = {
+        settings_list_definitions: async (ctx) => {
+            requireNoInput(ctx.input);
+            await routeDeps.settingsReady;
+            await requireToolPermission(routeDeps, { principalId: ctx.principal.id, permission: "settings.read.definitions", entityType: "setting-definition" });
+            const [platformDefs, siteDefs] = await Promise.all([
+                routeDeps.settingsRepo.listActiveDefinitions({ workspaceId: null }),
+                routeDeps.settingsRepo.listActiveDefinitions({ workspaceId: routeDeps.workspaceId }),
+            ]);
+            const data = [...platformDefs, ...siteDefs]
+                .map((def) => ({ namespace: def.namespace, key: def.key, ownerKind: def.ownerKind, scopes: def.scopes, status: def.status, version: def.version }))
+                .sort((a, b) => a.namespace.localeCompare(b.namespace) || a.key.localeCompare(b.key));
+            return { data };
+        },
+        settings_get_effective: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            const namespace = requireString(input, "namespace");
+            await routeDeps.settingsReady;
+            await requireToolPermission(routeDeps, { principalId: ctx.principal.id, permission: "settings.read", entityType: "setting-value" });
+            const workspaceId = routeDeps.workspaceId;
+            const principalId = await resolveOwnOrOtherPrincipalRead(routeDeps, {
+                requestedPrincipalId: optionalString(input, "principalId"),
+                callerPrincipalId: ctx.principal.id,
+            });
+            const [platformDefs, siteDefs] = await Promise.all([
+                routeDeps.settingsRepo.listActiveDefinitions({ workspaceId: null }),
+                routeDeps.settingsRepo.listActiveDefinitions({ workspaceId }),
+            ]);
+            const keys = new Set([...platformDefs, ...siteDefs].filter((d) => d.namespace === namespace).map((d) => d.key));
+            const data = [];
+            for (const key of keys) {
+                const resolved = await getEffective({ repo: routeDeps.settingsRepo }, { namespace, key, scopeContext: { workspaceId, principalId } });
+                if (resolved)
+                    data.push({ key, value: resolved.value, sourceLayer: resolved.sourceLayer, defVersion: resolved.defVersion });
+            }
+            return { data };
+        },
+        settings_get_raw: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            const namespace = requireString(input, "namespace");
+            const key = requireString(input, "key");
+            await routeDeps.settingsReady;
+            await requireToolPermission(routeDeps, { principalId: ctx.principal.id, permission: "settings.read.raw", entityType: "setting-value" });
+            const workspaceId = routeDeps.workspaceId;
+            const principalId = await resolveOwnOrOtherPrincipalRead(routeDeps, {
+                requestedPrincipalId: optionalString(input, "principalId"),
+                callerPrincipalId: ctx.principal.id,
+            });
+            const definition = await resolveDefinition({ repo: routeDeps.settingsRepo }, { namespace, key, workspaceId });
+            if (!definition)
+                throw new Error(`definition '${namespace}.${key}' was not found`);
+            const [globalValue, workspaceValue, userValue] = await Promise.all([
+                routeDeps.settingsRepo.getGlobalValue(definition.settingId),
+                routeDeps.settingsRepo.getWorkspaceValue({ workspaceId, settingId: definition.settingId }),
+                principalId ? routeDeps.settingsRepo.getUserValue({ workspaceId, principalId, settingId: definition.settingId }) : Promise.resolve(null),
+            ]);
+            return {
+                key: `${namespace}.${key}`,
+                global: layerValueOf(globalValue),
+                workspace: layerValueOf(workspaceValue),
+                user: layerValueOf(userValue),
+                default: definition.defaultValue,
+            };
+        },
+        settings_set_ui_preference: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            const settingId = requireString(input, "setting");
+            // Re-checked here even though the published schema carries the same enum. See
+            // `agent-writable-preferences.ts` on why: the enum is enforced by a caller's descriptor
+            // validation, and this is the check that still holds if a stale or bypassed descriptor lets
+            // an unlisted id through. Rejected BEFORE `settingsUiTabsReady` is awaited so an unlisted id
+            // cannot even be used to probe which definitions exist.
+            const preference = resolveAgentWritablePreference(settingId);
+            if (!preference) {
+                throw new Error(`'${settingId}' is not an agent-writable preference. Allowed: ${AGENT_WRITABLE_PREFERENCE_IDS.join(", ")}.`);
+            }
+            // `in` rather than a truthiness check: `false` and `0` are legitimate values here
+            // (`soundEnabled`, `desktopEnabled`), and rejecting them would make the two boolean
+            // preferences settable in one direction only.
+            if (!("value" in input)) {
+                throw new Error(`a 'value' is required to set '${settingId}'`);
+            }
+            const value = input.value;
+            // This tool's definitions are registered by `ensureSettingsUiTabDefinitions()` at boot, not
+            // by any legacy-migration promise a host might also cover — awaiting the wrong promise would
+            // make an early call fail with a spurious "definition was not found".
+            await routeDeps.settingsUiTabsReady;
+            // No `requireToolPermission` call here, unlike every read above. That is deliberate and is
+            // the opposite of the reads' situation: the read paths carry no `authorize()` of their own,
+            // so this layer must supply it, whereas `write-service.set()` IS the authorization
+            // chokepoint (INV-07) and derives the permission itself from the scope and target. Adding a
+            // pre-check would mean this file naming a permission string that the chokepoint might later
+            // derive differently — the exact fail-open drift `deriveRequiredPermission`'s own header
+            // (Red-Team RT-003) says must not be duplicated. Omitting `principalId` is what makes the
+            // derived permission `settings.user.self.write`.
+            const { value: stored, revisionSeq } = await withSchemaOnRejection({
+                toolId: "settings_set_ui_preference",
+                catalog: CATALOG_BY_ID,
+                isShapeRejection: isPreferenceShapeRejection,
+            }, () => setSettingValue({
+                deps: toWriteDeps(routeDeps),
+                input: {
+                    namespace: preference.namespace,
+                    key: preference.key,
+                    scope: AGENT_PREFERENCE_WRITE_SCOPE,
+                    value,
+                    workspaceId: routeDeps.workspaceId,
+                    // `principalId` is deliberately NOT passed. `write-service.set()` falls back to
+                    // `callerPrincipalId` for a user-scoped write, so the caller's own layer is the only
+                    // reachable target — and the self-vs-other permission derivation sees a self-write.
+                    callerPrincipalId: ctx.principal.id,
+                    authWorkspaceId: routeDeps.workspaceId,
+                },
+            }));
+            return { setting: settingId, value: stored, scope: AGENT_PREFERENCE_WRITE_SCOPE, revisionSeq };
+        },
+    };
+    return buildDomainRegistrations({
+        domain: "settings",
+        catalogModule: "settings/agent-tools.ts",
+        catalog: CATALOG_BY_ID,
+        handlers,
+        derivedRisk: settingsDerivedRisk,
+        unwiredToolIds: UNWIRED_SETTINGS_TOOL_IDS,
+    });
+}
+//# sourceMappingURL=tool-registrations.js.map

package/dist/settings/tool-registrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registrations.js","sourceRoot":"","sources":["../../src/settings/tool-registrations.ts"],"names":[],"mappings":"AAwBA,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,qBAAqB,EACrB,qBAAqB,GAKtB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,8BAA8B,GAC/B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,EAAE,GAAG,IAAI,eAAe,EAAiC,MAAM,oBAAoB,CAAC;AAE3F,MAAM,aAAa,GAAG,gBAAgB,CAAC,2BAA2B,EAAE,CAAC,CAAC;AAmBtE;;gGAEgG;AAChG,MAAM,wCAAwC,GAAG,oBAAoB,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,KAAK,UAAU,8BAA8B,CAC3C,SAA2B,EAC3B,QAAiF;IAEjF,MAAM,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,GAAG,QAAQ,CAAC;IAC7D,0FAA0F;IAC1F,4EAA4E;IAC5E,6FAA6F;IAC7F,wFAAwF;IACxF,6FAA6F;IAC7F,6DAA6D;IAC7D,MAAM,MAAM,GAAG,oBAAoB,IAAI,iBAAiB,CAAC;IACzD,IAAI,MAAM,KAAK,iBAAiB;QAAE,OAAO,MAAM,CAAC;IAEhD,MAAM,qBAAqB,CAAC,SAAS,EAAE;QACrC,WAAW,EAAE,iBAAiB;QAC9B,UAAU,EAAE,wCAAwC;QACpD,UAAU,EAAE,eAAe;KAC5B,CAAC,CAAC;IACH,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,MAAiC;IACrD,OAAO,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,SAA2B;IAC9C,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,YAAY;QAC5B,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,GAAG,EAAE,SAAS,CAAC,KAAK;QACpB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,UAAU,EAAE,SAAS,CAAC,aAAa;KACpC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,0BAA0B,CAAC,KAAc;IAChD,OAAO,CACL,KAAK,YAAY,0BAA0B;QAC3C,KAAK,YAAY,uBAAuB;QACxC,KAAK,YAAY,yBAAyB;QAC1C,KAAK,YAAY,oBAAoB,CACtC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAA8B;IAC3F,sFAAsF;IACtF,CAAC,2BAA2B,EAAE,MAAM,CAAC;IACrC,kGAAkG;IAClG,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAClC,mGAAmG;IACnG,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAC5B,8FAA8F;IAC9F,+FAA+F;IAC/F,0FAA0F;IAC1F,sDAAsD;IACtD,CAAC,4BAA4B,EAAE,uBAAuB,CAAC;CACxD,CAAC,CAAC;AAEH,wIAAwI;AACxI,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,+FAA+F;IAC/F,+FAA+F;IAC/F,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,4FAA4F;IAC5F,mCAAmC;IACnC,gBAAgB;IAChB,gGAAgG;IAChG,6FAA6F;IAC7F,iBAAiB;IACjB,+BAA+B;CAChC,CAAC,CAAC;AAEH,MAAM,UAAU,0BAA0B,CAAC,SAA2B;IACpE,MAAM,QAAQ,GAAgC;QAC5C,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACvC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,SAAS,CAAC,aAAa,CAAC;YAC9B,MAAM,qBAAqB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,2BAA2B,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAErJ,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACjD,SAAS,CAAC,YAAY,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;gBACnE,SAAS,CAAC,YAAY,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC;aACrF,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,QAAQ,CAAC;iBACxC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;iBAClJ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAExF,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACpC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACpD,MAAM,SAAS,CAAC,aAAa,CAAC;YAC9B,MAAM,qBAAqB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;YAEpI,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;YAC1C,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC,SAAS,EAAE;gBAClE,oBAAoB,EAAE,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC;gBAC1D,iBAAiB,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;aACpC,CAAC,CAAC;YAEH,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACjD,SAAS,CAAC,YAAY,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;gBACnE,SAAS,CAAC,YAAY,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAEhH,MAAM,IAAI,GAAoF,EAAE,CAAC;YACjG,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;gBACtI,IAAI,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAC9H,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,SAAS,CAAC,aAAa,CAAC;YAC9B,MAAM,qBAAqB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;YAExI,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;YAC1C,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC,SAAS,EAAE;gBAClE,oBAAoB,EAAE,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC;gBAC1D,iBAAiB,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;aACpC,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9G,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,SAAS,IAAI,GAAG,iBAAiB,CAAC,CAAC;YAEnF,MAAM,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACjE,SAAS,CAAC,YAAY,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC3D,SAAS,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC1F,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;aACzI,CAAC,CAAC;YAEH,OAAO;gBACL,GAAG,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE;gBAC1B,MAAM,EAAE,YAAY,CAAC,WAAW,CAAC;gBACjC,SAAS,EAAE,YAAY,CAAC,cAAc,CAAC;gBACvC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC;gBAC7B,OAAO,EAAE,UAAU,CAAC,YAAY;aACjC,CAAC;QACJ,CAAC;QAED,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAElD,8EAA8E;YAC9E,wFAAwF;YACxF,4FAA4F;YAC5F,6FAA6F;YAC7F,wDAAwD;YACxD,MAAM,UAAU,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,IAAI,SAAS,mDAAmD,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5G,CAAC;YACJ,CAAC;YAED,kFAAkF;YAClF,oFAAoF;YACpF,8CAA8C;YAC9C,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,GAAG,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAkB,CAAC;YAEvC,4FAA4F;YAC5F,6FAA6F;YAC7F,sEAAsE;YACtE,MAAM,SAAS,CAAC,mBAAmB,CAAC;YAEpC,2FAA2F;YAC3F,4FAA4F;YAC5F,mFAAmF;YACnF,4FAA4F;YAC5F,4FAA4F;YAC5F,yFAAyF;YACzF,0FAA0F;YAC1F,iDAAiD;YACjD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,qBAAqB,CAChE;gBACE,MAAM,EAAE,4BAA4B;gBACpC,OAAO,EAAE,aAAa;gBACtB,gBAAgB,EAAE,0BAA0B;aAC7C,EACD,GAAG,EAAE,CACH,eAAe,CAAC;gBACd,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC;gBAC5B,KAAK,EAAE;oBACL,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,GAAG,EAAE,UAAU,CAAC,GAAG;oBACnB,KAAK,EAAE,4BAA4B;oBACnC,KAAK;oBACL,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,gFAAgF;oBAChF,qFAAqF;oBACrF,oFAAoF;oBACpF,iBAAiB,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;oBACnC,eAAe,EAAE,SAAS,CAAC,WAAW;iBACvC;aACF,CAAC,CACL,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,4BAA4B,EAAE,WAAW,EAAE,CAAC;QACjG,CAAC;KACF,CAAC;IAEF,OAAO,wBAAwB,CAAC;QAC9B,MAAM,EAAE,UAAU;QAClB,aAAa,EAAE,yBAAyB;QACxC,OAAO,EAAE,aAAa;QACtB,QAAQ;QACR,WAAW,EAAE,mBAAmB;QAChC,cAAc,EAAE,yBAAyB;KAC1C,CAAC,CAAC;AACL,CAAC"}