@jungjaehoon/mama-os 0.70.0 → 0.72.0

package/dist/runtime/native-session.d.ts

@@ -1,3 +1,4 @@
+import type { JudgmentAccess } from '@jungjaehoon/mama-core';
 import type { ActionCall, ActionResult, NativeToolCaller } from '@jungjaehoon/mama-core/action-contracts';
 import { type NativeModelRunPort, type NativeTurnRequest, type NativeTurnResult } from '@jungjaehoon/mama-core/runtime/native-turn';
 import { type SessionPool } from '@jungjaehoon/mama-core/runtime/session-pool';
@@ -29,6 +30,9 @@ export interface NativeDriverOptions {
     requestMaxMs?: number;
     effort: RuntimeEffort;
     codexHome?: string;
+    isolatedHome?: string;
+    registryRoot?: string;
+    authSourcePath?: string;
     pluginDir?: string;
     mcpConfigPath?: string;
     createSubagentBridge: (info: SubagentBridgeRequest) => Promise<SubagentBridge | null>;
@@ -49,6 +53,18 @@ export interface NativeSessionOptions {
     workspaceDir: string;
     runtimeRoot: string;
     actionSurface: ActionSurface;
+    principal?: {
+        principalId: string;
+        agentId: string;
+        sessionKey: string;
+        systemPrompt: string;
+        prepareAccess: () => JudgmentAccess;
+    };
+    claudeConfigDir?: string;
+    socketPath?: string;
+    credentialPath?: string;
+    journalPath?: string;
+    deniedReadPaths?: readonly string[];
     ownerSystemPrompt?: string;
     ownerPolicyProvider?: OwnerPolicyProvider;
     effort?: RuntimeEffort;
@@ -59,6 +75,10 @@ export interface NativeSessionOptions {
     maxTurns: number;
     runTokenBudget?: number;
     codexHome?: string;
+    /** A member's Codex home copies the owner's managed credential; the owner signs in to its own. */
+    codexAuthSourcePath?: string;
+    isolatedHome?: string;
+    registryRoot?: string;
     replayKeyFile?: string;
     /** The host's logging proxy for the Claude shell sandbox's network (W35.4). */
     sandboxNetworkProxy?: SandboxNetworkProxy;

package/dist/runtime/native-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native-session.d.ts","sourceRoot":"","sources":["../../src/runtime/native-session.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,gBAAgB,EACjB,MAAM,yCAAyC,CAAC;AAGjD,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAEtB,MAAM,4CAA4C,CAAC;AAGpD,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,KAAK,EAEV,YAAY,EAEZ,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EACnB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACtB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAuB,MAAM,mBAAmB,CAAC;AAElF,eAAO,MAAM,yBAAyB,kBAAkB,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,oEAAoE;IACpE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,SAAS,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,+EAA+E;IAC/E,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,aAAa,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,YAAY,CAAC;IAC7D,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,mBAAmB,IAAI,kBAAkB,EAAE,CAAC;IAC5C,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9E,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5F,KAAK,CACH,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAkJD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,WAAW,EAAE,CAK7F;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CAqKhF;AAED,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"native-session.d.ts","sourceRoot":"","sources":["../../src/runtime/native-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAO7D,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,gBAAgB,EACjB,MAAM,yCAAyC,CAAC;AAGjD,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAEtB,MAAM,4CAA4C,CAAC;AAGpD,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,KAAK,EAEV,YAAY,EAEZ,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EACnB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACtB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAuB,MAAM,mBAAmB,CAAC;AAElF,eAAO,MAAM,yBAAyB,kBAAkB,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,oEAAoE;IACpE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,SAAS,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,+EAA+E;IAC/E,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,CAAC,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,cAAc,CAAC;KACrC,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kGAAkG;IAClG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,YAAY,CAAC;IAC7D,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,mBAAmB,IAAI,kBAAkB,EAAE,CAAC;IAC5C,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9E,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5F,KAAK,CACH,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAwLD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,WAAW,EAAE,CAK7F;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CA0NhF;AAED,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/runtime/native-session.js

@@ -3,7 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.OWNER_RUNTIME_SESSION_KEY = void 0;
 exports.ownerSystemLayers = ownerSystemLayers;
 exports.createNativeSession = createNativeSession;
+const member_system_prompt_js_1 = require("./member-system-prompt.js");
 const backend_security_js_1 = require("./backend-security.js");
+const member_paths_js_1 = require("./member-paths.js");
 const untrusted_content_js_1 = require("../utils/untrusted-content.js");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
@@ -15,8 +17,8 @@ const claude_native_tool_policy_js_1 = require("../agent/claude-native-tool-poli
 const action_mcp_config_js_1 = require("../cli/runtime/action-mcp-config.js");
 const claude_caller_config_js_1 = require("../cli/runtime/claude-caller-config.js");
 exports.OWNER_RUNTIME_SESSION_KEY = 'owner:runtime';
-function actionToolDefinitions(surface) {
-    return surface.hostToolDefinitions().map((tool) => ({
+function actionToolDefinitions(surface, access) {
+    return surface.hostToolDefinitions(access).map((tool) => ({
         type: 'function',
         name: tool.name,
         description: tool.description,
@@ -50,15 +52,27 @@ function modelToolResult(name, result) {
         error: (0, untrusted_content_js_1.untrustedToolData)(name, result.error),
     };
 }
-function driverOptions(options, bridge) {
+function driverOptions(options, deniedReadPaths, bridge) {
     const path = process.env.PATH;
     if (options.backend === 'codex' && !path?.trim()) {
         throw new Error('Owner Codex shell requires the host PATH');
     }
     return {
         backend: options.backend,
-        processEnv: (0, backend_security_js_1.backendEnvironment)(),
-        deniedReadPaths: (0, backend_security_js_1.credentialReadPaths)(options.runtimeRoot, options.codexHome, options.replayKeyFile),
+        processEnv: {
+            ...(0, backend_security_js_1.backendEnvironment)(),
+            ...(options.principal === undefined ? {} : { TMPDIR: (0, node_path_1.join)(options.workspaceDir, '.tmp') }),
+            // A member's own config dir keeps its sessions and CLI state out of the owner's. The
+            // credential store follows the CLI's own key rule: an explicit store dir, else the config
+            // dir, else '' for the default; so the member signs in with the owner's login.
+            ...(options.claudeConfigDir === undefined
+                ? {}
+                : {
+                    CLAUDE_CONFIG_DIR: options.claudeConfigDir,
+                    CLAUDE_SECURESTORAGE_CONFIG_DIR: process.env.CLAUDE_SECURESTORAGE_CONFIG_DIR ?? process.env.CLAUDE_CONFIG_DIR ?? '',
+                }),
+        },
+        deniedReadPaths,
         model: options.model,
         workspaceDir: options.workspaceDir,
         cwd: options.workspaceDir,
@@ -69,22 +83,38 @@ function driverOptions(options, bridge) {
         ...(options.backend === 'codex'
             ? {
                 shellTool: true,
-                webSearch: true,
+                webSearch: options.principal === undefined,
                 // macOS login shells run path_helper and put the system Python before Homebrew.
                 // Keep the daemon's toolchain PATH and the driver's isolated HOME; no user profiles.
-                shellEnvironment: { PATH: path },
+                shellEnvironment: {
+                    PATH: path,
+                    ...(options.principal === undefined
+                        ? {}
+                        : { TMPDIR: (0, node_path_1.join)(options.workspaceDir, '.tmp') }),
+                },
                 allowLoginShell: false,
+                ...(options.codexAuthSourcePath === undefined
+                    ? {}
+                    : { authSourcePath: options.codexAuthSourcePath }),
             }
             : { permissionMode: 'dontAsk' }),
         requestTimeout: options.timeout,
         ...(options.maxTurnMs === undefined ? {} : { requestMaxMs: options.maxTurnMs }),
         effort: options.effort ?? 'medium',
         ...(options.codexHome === undefined ? {} : { codexHome: options.codexHome }),
+        ...(options.isolatedHome === undefined ? {} : { isolatedHome: options.isolatedHome }),
+        ...(options.registryRoot === undefined ? {} : { registryRoot: options.registryRoot }),
         ...(options.pluginDir === undefined ? {} : { pluginDir: options.pluginDir }),
         ...(options.mcpConfigPath === undefined ? {} : { mcpConfigPath: options.mcpConfigPath }),
         createSubagentBridge: bridge,
     };
 }
+/** The Claude CLI's temp root: the workspace's for the owner, a short private one for a member. */
+function claudeTmpDir(options) {
+    return options.principal === undefined
+        ? (0, node_path_1.join)(options.workspaceDir, '.tmp')
+        : (0, member_paths_js_1.memberClaudeTmpDir)(options.principal.principalId);
+}
 function createDriver(options, nativeOptions, bridge) {
     if (options.backend === 'codex') {
         return new runtime_process_1.CodexRuntimeProcess({
@@ -103,6 +133,9 @@ function createDriver(options, nativeOptions, bridge) {
                 ? {}
                 : { requestMaxMs: nativeOptions.requestMaxMs }),
             codexHome: options.codexHome,
+            isolatedHome: options.isolatedHome,
+            registryRoot: options.registryRoot,
+            authSourcePath: nativeOptions.authSourcePath,
             effort: nativeOptions.effort,
             createSubagentBridge: bridge,
         });
@@ -112,16 +145,22 @@ function createDriver(options, nativeOptions, bridge) {
         mcpConfigPath,
         ...(options.mcpServerPath === undefined ? {} : { serverPath: options.mcpServerPath }),
         mamaHome: options.runtimeRoot,
+        socketPath: options.socketPath,
+        credentialPath: options.credentialPath,
+        journalPath: options.journalPath,
+        allowedActions: options.principal?.prepareAccess().actions,
     });
     return new persistent_cli_adapter_1.PersistentCLIAdapter({
         workspaceDir: options.workspaceDir,
         model: options.model,
         mcpConfigPath,
         permissionMode: nativeOptions.permissionMode,
-        allowedTools: (0, claude_native_tool_policy_js_1.claudeOwnerAllowedTools)(options.workspaceDir),
-        disallowedTools: (0, claude_native_tool_policy_js_1.claudeOwnerDisallowedTools)(nativeOptions.deniedReadPaths, options.workspaceDir),
+        allowedTools: (0, claude_native_tool_policy_js_1.claudeOwnerAllowedTools)(options.workspaceDir).filter((tool) => options.principal === undefined || !['WebFetch', 'WebSearch'].includes(tool)),
+        disallowedTools: (options.principal === undefined
+            ? claude_native_tool_policy_js_1.claudeOwnerDisallowedTools
+            : claude_native_tool_policy_js_1.claudeMemberDisallowedTools)(nativeOptions.deniedReadPaths, options.workspaceDir),
         processEnv: nativeOptions.processEnv,
-        env: { CLAUDE_CODE_TMPDIR: (0, node_path_1.join)(options.workspaceDir, '.tmp') },
+        env: { CLAUDE_CODE_TMPDIR: claudeTmpDir(options) },
         pluginDir: nativeOptions.pluginDir,
         requestTimeout: nativeOptions.requestTimeout,
         ...(nativeOptions.requestMaxMs === undefined
@@ -151,9 +190,24 @@ function createNativeSession(options) {
         throw new Error('The owner Codex session requires the workspace-write sandbox');
     }
     (0, node_fs_1.mkdirSync)(options.workspaceDir, { recursive: true });
+    if (options.principal !== undefined)
+        (0, node_fs_1.mkdirSync)((0, node_path_1.join)(options.workspaceDir, '.tmp'), { recursive: true, mode: 0o700 });
+    const readPaths = (0, backend_security_js_1.credentialReadPaths)(options.runtimeRoot, options.codexHome, options.replayKeyFile).concat(options.deniedReadPaths ?? []);
+    const deniedReadPaths = options.principal === undefined
+        ? [...new Set([...readPaths.map((path) => (0, node_path_1.resolve)(path)), ...(0, backend_security_js_1.normalizeReadPaths)(readPaths)])]
+        : (0, backend_security_js_1.normalizeReadPaths)(readPaths);
     if (options.backend === 'claude')
-        (0, claude_caller_config_js_1.ensureClaudeCallerHook)(options.workspaceDir, (0, backend_security_js_1.credentialReadPaths)(options.runtimeRoot, options.codexHome, options.replayKeyFile), options.sandboxNetworkProxy);
-    const tools = actionToolDefinitions(options.actionSurface);
+        (0, claude_caller_config_js_1.ensureClaudeCallerHook)(options.workspaceDir, deniedReadPaths, options.sandboxNetworkProxy, claudeTmpDir(options));
+    const sessionKey = options.principal?.sessionKey ?? exports.OWNER_RUNTIME_SESSION_KEY;
+    const prepareAccess = options.principal?.prepareAccess ?? (() => options.actionSurface.ownerAccess);
+    const tools = actionToolDefinitions(options.actionSurface, options.principal?.prepareAccess());
+    // Core prepares a member's access before it builds the tool list or runs a tool; without it a
+    // member call must fail rather than reach the surface's owner default.
+    const memberAccess = (access) => {
+        if (!access)
+            throw new Error(`No prepared access for ${options.principal.principalId}`);
+        return access;
+    };
     const runnerRef = {};
     const bridge = (info) => runnerRef.current?.createSubagentBridge(info) ?? Promise.resolve(null);
     const configuredMcpOptions = options.backend === 'claude' &&
@@ -171,15 +225,19 @@ function createNativeSession(options) {
                 ? {}
                 : { serverPath: configuredMcpOptions.mcpServerPath }),
             mamaHome: configuredMcpOptions.runtimeRoot,
+            socketPath: configuredMcpOptions.socketPath,
+            credentialPath: configuredMcpOptions.credentialPath,
+            journalPath: configuredMcpOptions.journalPath,
+            allowedActions: configuredMcpOptions.principal?.prepareAccess().actions,
         });
     }
-    const nativeOptions = driverOptions(configuredMcpOptions, bridge);
+    const nativeOptions = driverOptions(configuredMcpOptions, deniedReadPaths, bridge);
     const agent = configuredMcpOptions.agent ??
         configuredMcpOptions.createAgent?.(nativeOptions) ??
         createDriver(configuredMcpOptions, nativeOptions, bridge);
     const sessionPool = options.sessionPool ?? (0, session_pool_1.getSessionPool)();
-    const standingPrompt = options.ownerSystemPrompt ?? '';
-    const ownerPolicyProvider = options.ownerPolicyProvider;
+    const standingPrompt = options.principal?.systemPrompt ?? options.ownerSystemPrompt ?? '';
+    const ownerPolicyProvider = options.principal === undefined ? options.ownerPolicyProvider : undefined;
     const emptyOwnerPolicy = {
         content: null,
         fingerprint: '',
@@ -199,12 +257,21 @@ function createNativeSession(options) {
             const current = request;
             const systemPrompt = current?.systemPrompt ?? standingPrompt;
             const ownerPolicy = ownerPolicyProvider?.() ?? emptyOwnerPolicy;
-            const role = current?.nativeRole ?? defaultRole;
+            const requestedRole = current?.nativeRole ?? defaultRole;
+            const role = options.principal === undefined
+                ? requestedRole
+                : {
+                    ...requestedRole,
+                    blockedTools: [...(requestedRole.blockedTools ?? []), 'WebFetch', 'WebSearch'],
+                };
             const nativeTools = options.backend === 'claude' ? (0, claude_native_tool_policy_js_1.projectClaudeNativeTools)(role) : undefined;
-            const systemLayers = ownerSystemLayers(systemPrompt, ownerPolicy.content);
-            const buildSystemLayers = async () => ownerSystemLayers(systemPrompt, (ownerPolicyProvider?.() ?? emptyOwnerPolicy).content);
+            const layers = (policy) => options.principal === undefined
+                ? ownerSystemLayers(systemPrompt, policy)
+                : (0, member_system_prompt_js_1.memberSystemLayers)(systemPrompt);
+            const systemLayers = layers(ownerPolicy.content);
+            const buildSystemLayers = async () => layers((ownerPolicyProvider?.() ?? emptyOwnerPolicy).content);
             return {
-                channelKey: current?.sessionKey ?? exports.OWNER_RUNTIME_SESSION_KEY,
+                channelKey: current?.sessionKey ?? sessionKey,
                 systemLayers,
                 reanchorLayers: buildSystemLayers,
                 resumeLayers: buildSystemLayers,
@@ -230,16 +297,22 @@ function createNativeSession(options) {
                     ? { sourceMessageRef: current.sourceMessageRef }
                     : {}),
                 ...(current?.sourceRefs === undefined ? {} : { sourceRefs: current.sourceRefs }),
-                channelId: current?.channelId ?? current?.sessionKey ?? exports.OWNER_RUNTIME_SESSION_KEY,
-                agentId: options.actionSurface.ownerAccess.agentId,
+                channelId: current?.channelId ?? current?.sessionKey ?? sessionKey,
+                agentId: options.principal?.agentId ?? options.actionSurface.ownerAccess.agentId,
                 ...(replaySourceEndMs === undefined ? {} : { replaySourceEndMs }),
             };
         },
         createNativeEffectObserver: (context) => {
             const { modelRunId } = toolContext(context);
-            return modelRunId ? options.actionSurface.createNativeEffectObserver(modelRunId) : undefined;
+            if (!modelRunId)
+                return undefined;
+            return options.principal === undefined
+                ? options.actionSurface.createNativeEffectObserver(modelRunId)
+                : options.actionSurface.createNativeEffectObserver(modelRunId, memberAccess(context?.access));
         },
-        hostToolDefinitions: () => tools,
+        hostToolDefinitions: (request) => options.principal === undefined
+            ? tools
+            : actionToolDefinitions(options.actionSurface, memberAccess(request?.access)),
         ...(options.modelRun === undefined ? {} : { modelRun: options.modelRun }),
         callTool: async (name, input, context) => {
             const facts = toolContext(context);
@@ -247,6 +320,7 @@ function createNativeSession(options) {
                 throw new Error('Native action call is missing its tool-call identity');
             }
             return modelToolResult(name, await options.actionSurface.hostToolCall(name, input, facts.gatewayCallId, {
+                ...(options.principal === undefined ? {} : { access: memberAccess(context?.access) }),
                 session: {
                     ...(facts.modelRunId === undefined ? {} : { modelRunId: facts.modelRunId }),
                     gatewayCallId: facts.gatewayCallId,
@@ -265,13 +339,15 @@ function createNativeSession(options) {
     runnerRef.current = (0, native_turn_1.createNativeSessionRunner)(host);
     return {
         backend: options.backend,
-        sessionKey: exports.OWNER_RUNTIME_SESSION_KEY,
+        sessionKey,
         supportsNativeSubagents: agent.supportsNativeSubagents === true,
-        hostToolDefinitions: () => [...tools],
+        hostToolDefinitions: () => options.principal === undefined
+            ? [...tools]
+            : actionToolDefinitions(options.actionSurface, options.principal.prepareAccess()),
         callAction: (call, caller) => runnerRef.current.withToolCaller(caller, async (context) => {
             const facts = toolContext(context);
             return options.actionSurface.dispatch(call, {
-                access: context.access,
+                access: options.principal?.prepareAccess() ?? context.access,
                 session: facts,
             });
         }),
@@ -279,9 +355,9 @@ function createNativeSession(options) {
         runTurn: (content, request) => {
             const nativeRequest = {
                 ...(request ?? {}),
-                sessionKey: request?.sessionKey ?? exports.OWNER_RUNTIME_SESSION_KEY,
-                access: options.actionSurface.ownerAccess,
-                prepareAccess: request?.prepareAccess ?? (async () => options.actionSurface.ownerAccess),
+                sessionKey: request?.sessionKey ?? sessionKey,
+                access: options.principal === undefined ? options.actionSurface.ownerAccess : undefined,
+                prepareAccess: request?.prepareAccess ?? prepareAccess,
             };
             return runnerRef.current.runTurn(content, nativeRequest);
         },

package/dist/runtime/native-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"native-session.js","sourceRoot":"","sources":["../../src/runtime/native-session.ts"],"names":[],"mappings":";;;AAyRA,8CAKC;AAGD,kDAqKC;AAtcD,+DAAgF;AAChF,wEAAkE;AAClE,qCAAoC;AACpC,yCAAiC;AAQjC,4EAOoD;AACpD,oFAAqF;AACrF,0GAAqG;AACrG,8EAA+F;AAc/F,wFAK+C;AAC/C,8EAA0E;AAC1E,oFAGgD;AAKnC,QAAA,yBAAyB,GAAG,eAAe,CAAC;AAmFzD,SAAS,qBAAqB,CAAC,OAAsB;IACnD,OAAO,OAAO,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAgD;KACnE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAAC,KAAkC;IAQrD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,OAAO;QACL,GAAG,CAAC,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ;YAC9C,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ;YAC/C,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,MAA0D;IAE1D,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAA,wCAAiB,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACvE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,IAAA,wCAAiB,EAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAA6B,EAC7B,MAAmD;IAEnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,IAAA,wCAAkB,GAAE;QAChC,eAAe,EAAE,IAAA,yCAAmB,EAClC,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACtB;QACD,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,GAAG,EAAE,OAAO,CAAC,YAAY;QACzB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,iBAAiB;QAC1B,+EAA+E;QAC/E,+EAA+E;QAC/E,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO;YAC7B,CAAC,CAAC;gBACE,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;gBACf,gFAAgF;gBAChF,qFAAqF;gBACrF,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAK,EAAE;gBACjC,eAAe,EAAE,KAAK;aACvB;YACH,CAAC,CAAC,EAAE,cAAc,EAAE,SAAkB,EAAE,CAAC;QAC3C,cAAc,EAAE,OAAO,CAAC,OAAO;QAC/B,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC/E,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,QAAQ;QAClC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;QACxF,oBAAoB,EAAE,MAAM;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,OAA6B,EAC7B,aAAkC,EAClC,MAAmD;IAEnD,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,IAAI,qCAAmB,CAAC;YAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;YAChD,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,GAAG,CAAC,aAAa,CAAC,YAAY,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,aAAa,CAAC,YAAY,EAAE,CAAC;YACjD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,oBAAoB,EAAE,MAAM;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,GAAG,OAAO,CAAC,WAAW,uBAAuB,CAAC;IAC7F,IAAA,0CAAmB,EAAC;QAClB,aAAa;QACb,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;QACrF,QAAQ,EAAE,OAAO,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,OAAO,IAAI,6CAAoB,CAAC;QAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa;QACb,cAAc,EAAE,aAAa,CAAC,cAAc;QAC5C,YAAY,EAAE,IAAA,sDAAuB,EAAC,OAAO,CAAC,YAAY,CAAC;QAC3D,eAAe,EAAE,IAAA,yDAA0B,EACzC,aAAa,CAAC,eAAe,EAC7B,OAAO,CAAC,YAAY,CACrB;QACD,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAA,gBAAI,EAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE;QAC/D,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,cAAc,EAAE,aAAa,CAAC,cAAc;QAC5C,GAAG,CAAC,aAAa,CAAC,YAAY,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,aAAa,CAAC,YAAY,EAAE,CAAC;QACjD,MAAM,EAAE,aAAa,CAAC,MAAM;KAC7B,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,WAA0B;IAC5E,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAgB,mBAAmB,CAAC,OAA6B;IAC/D,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IACE,OAAO,CAAC,OAAO,KAAK,OAAO;QAC3B,OAAO,CAAC,YAAY,KAAK,SAAS;QAClC,OAAO,CAAC,YAAY,KAAK,iBAAiB,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAA,mBAAS,EAAC,OAAO,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;QAC9B,IAAA,gDAAsB,EACpB,OAAO,CAAC,YAAY,EACpB,IAAA,yCAAmB,EAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,EAClF,OAAO,CAAC,mBAAmB,CAC5B,CAAC;IACJ,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,SAAS,GAA4D,EAAE,CAAC;IAC9E,MAAM,MAAM,GAAgD,CAAC,IAAI,EAAE,EAAE,CACnE,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,oBAAoB,GACxB,OAAO,CAAC,OAAO,KAAK,QAAQ;QAC5B,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC;QAC1E,CAAC,CAAC;YACE,GAAG,OAAO;YACV,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG,OAAO,CAAC,WAAW,uBAAuB;SACtF;QACH,CAAC,CAAC,OAAO,CAAC;IACd,IACE,oBAAoB,CAAC,OAAO,KAAK,QAAQ;QACzC,oBAAoB,CAAC,aAAa,KAAK,SAAS,EAChD,CAAC;QACD,IAAA,0CAAmB,EAAC;YAClB,aAAa,EAAE,oBAAoB,CAAC,aAAa;YACjD,GAAG,CAAC,oBAAoB,CAAC,aAAa,KAAK,SAAS;gBAClD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,aAAa,EAAE,CAAC;YACvD,QAAQ,EAAE,oBAAoB,CAAC,WAAW;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,aAAa,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IAClE,MAAM,KAAK,GACT,oBAAoB,CAAC,KAAK;QAC1B,oBAAoB,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC;QACjD,YAAY,CAAC,oBAAoB,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAA,6BAAc,GAAE,CAAC;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC;IACvD,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IACxD,MAAM,gBAAgB,GAAwB;QAC5C,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,KAAK;KACd,CAAC;IACF,MAAM,WAAW,GAAmB,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAE5D,MAAM,IAAI,GAA4C;QACpD,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,OAAsB;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,aAAa,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,CAAC;QAC3C,WAAW;QACX,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,OAA2C,CAAC;YAC5D,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,cAAc,CAAC;YAC7D,MAAM,WAAW,GAAG,mBAAmB,EAAE,EAAE,IAAI,gBAAgB,CAAC;YAChE,MAAM,IAAI,GAAG,OAAO,EAAE,UAAU,IAAI,WAAW,CAAC;YAChD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,uDAAwB,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,MAAM,YAAY,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;YAC1E,MAAM,iBAAiB,GAAG,KAAK,IAAI,EAAE,CACnC,iBAAiB,CAAC,YAAY,EAAE,CAAC,mBAAmB,EAAE,EAAE,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC;YACzF,OAAO;gBACL,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,iCAAyB;gBAC5D,YAAY;gBACZ,cAAc,EAAE,iBAAiB;gBACjC,YAAY,EAAE,iBAAiB;gBAC/B,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC;oBACvC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,WAAW,EAAE,WAAW,IAAI,IAAI;oBAChC,YAAY;oBACZ,sBAAsB,EAAE,WAAW,CAAC,WAAW;iBAChD,CAAC;gBACF,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;gBACrD,cAAc,EAAE,IAAI;aACrB,CAAC;QACJ,CAAC;QACD,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE;YAC5B,MAAM,OAAO,GAAG,OAA2C,CAAC;YAC5D,MAAM,iBAAiB,GAAG,OAAO,EAAE,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACtF,OAAO;gBACL,MAAM,EAAE,OAAO,EAAE,MAAM;gBACvB,GAAG,CAAC,OAAO,OAAO,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,GAAG,CAAC,OAAO,OAAO,EAAE,gBAAgB,KAAK,QAAQ;oBAC/C,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;oBAChD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;gBAChF,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,UAAU,IAAI,iCAAyB;gBACjF,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO;gBAClD,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;aAClE,CAAC;QACJ,CAAC;QACD,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YAC5C,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,CAAC;QACD,mBAAmB,EAAE,GAAG,EAAE,CAAC,KAAK;QAChC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,eAAe,CACpB,IAAI,EACJ,MAAM,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE;gBACzE,OAAO,EAAE;oBACP,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC3E,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;wBACtC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;oBACjD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC3E,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;oBACxE,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;wBACvC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;iBACpD;aACF,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,SAAS,CAAC,OAAO,GAAG,IAAA,uCAAyB,EAAC,IAAI,CAAC,CAAC;IACpD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,iCAAyB;QACrC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,KAAK,IAAI;QAC/D,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QACrC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAC3B,SAAS,CAAC,OAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAiC;gBACjD,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;QACL,CAAC,CAAC;QACJ,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,OAAQ,CAAC,YAAY,CAAC,UAAU,CAAC;QACzE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YAC5B,MAAM,aAAa,GAAG;gBACpB,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;gBAClB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,iCAAyB;gBAC5D,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,WAAW;gBACzC,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC;aACpE,CAAC;YACvB,OAAO,SAAS,CAAC,OAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,OAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC;QAC7F,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAQ,CAAC,IAAI,EAAE;KACtC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"native-session.js","sourceRoot":"","sources":["../../src/runtime/native-session.ts"],"names":[],"mappings":";;;AAsVA,8CAKC;AAGD,kDA0NC;AAvjBD,uEAA+D;AAC/D,+DAAoG;AACpG,uDAAuD;AACvD,wEAAkE;AAClE,qCAAoC;AACpC,yCAA0C;AAQ1C,4EAOoD;AACpD,oFAAqF;AACrF,0GAAqG;AACrG,8EAA+F;AAc/F,wFAM+C;AAC/C,8EAA0E;AAC1E,oFAGgD;AAKnC,QAAA,yBAAyB,GAAG,eAAe,CAAC;AAsGzD,SAAS,qBAAqB,CAC5B,OAAsB,EACtB,MAAuB;IAEvB,OAAO,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAgD;KACnE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAAC,KAAkC;IAQrD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,OAAO;QACL,GAAG,CAAC,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ;YAC9C,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ;YAC/C,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,MAA0D;IAE1D,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAA,wCAAiB,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACvE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,IAAA,wCAAiB,EAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAA6B,EAC7B,eAAyB,EACzB,MAAmD;IAEnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE;YACV,GAAG,IAAA,wCAAkB,GAAE;YACvB,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAA,gBAAI,EAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;YAC1F,qFAAqF;YACrF,0FAA0F;YAC1F,+EAA+E;YAC/E,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,iBAAiB,EAAE,OAAO,CAAC,eAAe;oBAC1C,+BAA+B,EAC7B,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;iBACrF,CAAC;SACP;QACD,eAAe;QACf,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,GAAG,EAAE,OAAO,CAAC,YAAY;QACzB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,iBAAiB;QAC1B,+EAA+E;QAC/E,+EAA+E;QAC/E,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO;YAC7B,CAAC,CAAC;gBACE,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS;gBAC1C,gFAAgF;gBAChF,qFAAqF;gBACrF,gBAAgB,EAAE;oBAChB,IAAI,EAAE,IAAK;oBACX,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;wBACjC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,IAAA,gBAAI,EAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;iBACpD;gBACD,eAAe,EAAE,KAAK;gBACtB,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;aACrD;YACH,CAAC,CAAC,EAAE,cAAc,EAAE,SAAkB,EAAE,CAAC;QAC3C,cAAc,EAAE,OAAO,CAAC,OAAO;QAC/B,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC/E,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,QAAQ;QAClC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;QACxF,oBAAoB,EAAE,MAAM;KAC7B,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,SAAS,YAAY,CAAC,OAA6B;IACjD,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS;QACpC,CAAC,CAAC,IAAA,gBAAI,EAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC;QACpC,CAAC,CAAC,IAAA,oCAAkB,EAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CACnB,OAA6B,EAC7B,aAAkC,EAClC,MAAmD;IAEnD,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,IAAI,qCAAmB,CAAC;YAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;YAChD,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,GAAG,CAAC,aAAa,CAAC,YAAY,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,aAAa,CAAC,YAAY,EAAE,CAAC;YACjD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,oBAAoB,EAAE,MAAM;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,GAAG,OAAO,CAAC,WAAW,uBAAuB,CAAC;IAC7F,IAAA,0CAAmB,EAAC;QAClB,aAAa;QACb,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;QACrF,QAAQ,EAAE,OAAO,CAAC,WAAW;QAC7B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC,OAAO;KAC3D,CAAC,CAAC;IACH,OAAO,IAAI,6CAAoB,CAAC;QAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa;QACb,cAAc,EAAE,aAAa,CAAC,cAAc;QAC5C,YAAY,EAAE,IAAA,sDAAuB,EAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CAChE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvF;QACD,eAAe,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;YAC/C,CAAC,CAAC,yDAA0B;YAC5B,CAAC,CAAC,0DAA2B,CAAC,CAAC,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC;QACrF,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,GAAG,EAAE,EAAE,kBAAkB,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE;QAClD,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,cAAc,EAAE,aAAa,CAAC,cAAc;QAC5C,GAAG,CAAC,aAAa,CAAC,YAAY,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,aAAa,CAAC,YAAY,EAAE,CAAC;QACjD,MAAM,EAAE,aAAa,CAAC,MAAM;KAC7B,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,QAAgB,EAAE,WAA0B;IAC5E,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAgB,mBAAmB,CAAC,OAA6B;IAC/D,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IACE,OAAO,CAAC,OAAO,KAAK,OAAO;QAC3B,OAAO,CAAC,YAAY,KAAK,SAAS;QAClC,OAAO,CAAC,YAAY,KAAK,iBAAiB,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAA,mBAAS,EAAC,OAAO,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QACjC,IAAA,mBAAS,EAAC,IAAA,gBAAI,EAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,IAAA,yCAAmB,EACnC,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACtB,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,eAAe,GACnB,OAAO,CAAC,SAAS,KAAK,SAAS;QAC7B,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAA,wCAAkB,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC,CAAC,IAAA,wCAAkB,EAAC,SAAS,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;QAC9B,IAAA,gDAAsB,EACpB,OAAO,CAAC,YAAY,EACpB,eAAe,EACf,OAAO,CAAC,mBAAmB,EAC3B,YAAY,CAAC,OAAO,CAAC,CACtB,CAAC;IACJ,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,IAAI,iCAAyB,CAAC;IAC9E,MAAM,aAAa,GACjB,OAAO,CAAC,SAAS,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/F,8FAA8F;IAC9F,uEAAuE;IACvE,MAAM,YAAY,GAAG,CAAC,MAAe,EAAkB,EAAE;QACvD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,CAAC,SAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QACzF,OAAO,MAAwB,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,SAAS,GAA4D,EAAE,CAAC;IAC9E,MAAM,MAAM,GAAgD,CAAC,IAAI,EAAE,EAAE,CACnE,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,oBAAoB,GACxB,OAAO,CAAC,OAAO,KAAK,QAAQ;QAC5B,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC;QAC1E,CAAC,CAAC;YACE,GAAG,OAAO;YACV,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG,OAAO,CAAC,WAAW,uBAAuB;SACtF;QACH,CAAC,CAAC,OAAO,CAAC;IACd,IACE,oBAAoB,CAAC,OAAO,KAAK,QAAQ;QACzC,oBAAoB,CAAC,aAAa,KAAK,SAAS,EAChD,CAAC;QACD,IAAA,0CAAmB,EAAC;YAClB,aAAa,EAAE,oBAAoB,CAAC,aAAa;YACjD,GAAG,CAAC,oBAAoB,CAAC,aAAa,KAAK,SAAS;gBAClD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,aAAa,EAAE,CAAC;YACvD,QAAQ,EAAE,oBAAoB,CAAC,WAAW;YAC1C,UAAU,EAAE,oBAAoB,CAAC,UAAU;YAC3C,cAAc,EAAE,oBAAoB,CAAC,cAAc;YACnD,WAAW,EAAE,oBAAoB,CAAC,WAAW;YAC7C,cAAc,EAAE,oBAAoB,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC,OAAO;SACxE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,aAAa,CAAC,oBAAoB,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IACnF,MAAM,KAAK,GACT,oBAAoB,CAAC,KAAK;QAC1B,oBAAoB,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC;QACjD,YAAY,CAAC,oBAAoB,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAA,6BAAc,GAAE,CAAC;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,EAAE,YAAY,IAAI,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC;IAC1F,MAAM,mBAAmB,GACvB,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,gBAAgB,GAAwB;QAC5C,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,KAAK;KACd,CAAC;IACF,MAAM,WAAW,GAAmB,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAE5D,MAAM,IAAI,GAA4C;QACpD,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,OAAsB;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,aAAa,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,CAAC;QAC3C,WAAW;QACX,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,OAA2C,CAAC;YAC5D,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,cAAc,CAAC;YAC7D,MAAM,WAAW,GAAG,mBAAmB,EAAE,EAAE,IAAI,gBAAgB,CAAC;YAChE,MAAM,aAAa,GAAG,OAAO,EAAE,UAAU,IAAI,WAAW,CAAC;YACzD,MAAM,IAAI,GACR,OAAO,CAAC,SAAS,KAAK,SAAS;gBAC7B,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC;oBACE,GAAG,aAAa;oBAChB,YAAY,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC;iBAC/E,CAAC;YACR,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,uDAAwB,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE,CACvC,OAAO,CAAC,SAAS,KAAK,SAAS;gBAC7B,CAAC,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC;gBACzC,CAAC,CAAC,IAAA,4CAAkB,EAAC,YAAY,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,iBAAiB,GAAG,KAAK,IAAI,EAAE,CACnC,MAAM,CAAC,CAAC,mBAAmB,EAAE,EAAE,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC;YAChE,OAAO;gBACL,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,UAAU;gBAC7C,YAAY;gBACZ,cAAc,EAAE,iBAAiB;gBACjC,YAAY,EAAE,iBAAiB;gBAC/B,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC;oBACvC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,WAAW,EAAE,WAAW,IAAI,IAAI;oBAChC,YAAY;oBACZ,sBAAsB,EAAE,WAAW,CAAC,WAAW;iBAChD,CAAC;gBACF,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;gBACrD,cAAc,EAAE,IAAI;aACrB,CAAC;QACJ,CAAC;QACD,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE;YAC5B,MAAM,OAAO,GAAG,OAA2C,CAAC;YAC5D,MAAM,iBAAiB,GAAG,OAAO,EAAE,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACtF,OAAO;gBACL,MAAM,EAAE,OAAO,EAAE,MAAM;gBACvB,GAAG,CAAC,OAAO,OAAO,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,GAAG,CAAC,OAAO,OAAO,EAAE,gBAAgB,KAAK,QAAQ;oBAC/C,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;oBAChD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;gBAChF,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,UAAU,IAAI,UAAU;gBAClE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO;gBAChF,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;aAClE,CAAC;QACJ,CAAC;QACD,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU;gBAAE,OAAO,SAAS,CAAC;YAClC,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS;gBACpC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,0BAA0B,CAAC,UAAU,CAAC;gBAC9D,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,0BAA0B,CAC9C,UAAU,EACV,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAC9B,CAAC;QACR,CAAC;QACD,mBAAmB,EAAE,CAAC,OAAO,EAAE,EAAE,CAC/B,OAAO,CAAC,SAAS,KAAK,SAAS;YAC7B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,qBAAqB,CACnB,OAAO,CAAC,aAAa,EACrB,YAAY,CAAE,OAA4C,EAAE,MAAM,CAAC,CACpE;QACP,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,eAAe,CACpB,IAAI,EACJ,MAAM,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE;gBACzE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;gBACrF,OAAO,EAAE;oBACP,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC3E,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;wBACtC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;oBACjD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC3E,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;oBACxE,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;wBACvC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;iBACpD;aACF,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,SAAS,CAAC,OAAO,GAAG,IAAA,uCAAyB,EAAC,IAAI,CAAC,CAAC;IACpD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU;QACV,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,KAAK,IAAI;QAC/D,mBAAmB,EAAE,GAAG,EAAE,CACxB,OAAO,CAAC,SAAS,KAAK,SAAS;YAC7B,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;YACZ,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QACrF,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAC3B,SAAS,CAAC,OAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,IAAK,OAAO,CAAC,MAAkC;gBACzF,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;QACL,CAAC,CAAC;QACJ,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,OAAQ,CAAC,YAAY,CAAC,UAAU,CAAC;QACzE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YAC5B,MAAM,aAAa,GAAG;gBACpB,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;gBAClB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,UAAU;gBAC7C,MAAM,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACvF,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,aAAa;aAClC,CAAC;YACvB,OAAO,SAAS,CAAC,OAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,OAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC;QAC7F,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAQ,CAAC,IAAI,EAAE;KACtC,CAAC;AACJ,CAAC"}

package/dist/runtime/outbound-attempts.d.ts

@@ -7,6 +7,8 @@
  * clients in command position, not URL literals: a
  * script that reads a sheet full of links is not an attempt. They are a heuristic: a client they do
  * not name, or a script file written first and run after, is missed.
+ * Member shell starts stay in tool_traces only: they are not proof of a refused connection.
+ * Members have no web tools. Their bound sandbox proxy alone reports refusals to the owner.
  */
 import type { NativeEffectObserver } from '@jungjaehoon/mama-core/runtime/native-effect-observer';
 import type { OutboundAttemptEvent } from '../api/security-events.js';
@@ -16,5 +18,8 @@ export declare function outboundAttempt(name: string, input: Record<string, unkn
  * Wraps a run's trace observer. A runtime can announce one call twice, so the trace observer drops
  * a repeated call id; the owner is told once per call the same way.
  */
-export declare function withOutboundAttempts(inner: NativeEffectObserver, modelRunId: string, sink: (event: OutboundAttemptEvent) => void): NativeEffectObserver;
+export declare function withOutboundAttempts(inner: NativeEffectObserver, modelRunId: string, sink: (event: OutboundAttemptEvent) => void, principal?: {
+    principalId: string;
+    ownerPrincipalId: string;
+}): NativeEffectObserver;
 //# sourceMappingURL=outbound-attempts.d.ts.map

package/dist/runtime/outbound-attempts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outbound-attempts.d.ts","sourceRoot":"","sources":["../../src/runtime/outbound-attempts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAGlG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAwDtE,iFAAiF;AACjF,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,UAAU,EAAE,MAAM,GACjB,oBAAoB,GAAG,IAAI,CA4B7B;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,oBAAoB,EAC3B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAC1C,oBAAoB,CAkBtB"}
+{"version":3,"file":"outbound-attempts.d.ts","sourceRoot":"","sources":["../../src/runtime/outbound-attempts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAGlG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAwDtE,iFAAiF;AACjF,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,UAAU,EAAE,MAAM,GACjB,oBAAoB,GAAG,IAAI,CA4B7B;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,oBAAoB,EAC3B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,EAC3C,SAAS,CAAC,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GAC5D,oBAAoB,CAmBtB"}

package/dist/runtime/outbound-attempts.js

@@ -91,11 +91,13 @@ function outboundAttempt(name, input, modelRunId) {
  * Wraps a run's trace observer. A runtime can announce one call twice, so the trace observer drops
  * a repeated call id; the owner is told once per call the same way.
  */
-function withOutboundAttempts(inner, modelRunId, sink) {
+function withOutboundAttempts(inner, modelRunId, sink, principal) {
     const seen = new Set();
     return {
         started(name, input) {
             inner.started(name, input);
+            if (principal !== undefined && principal.principalId !== principal.ownerPrincipalId)
+                return;
             const event = outboundAttempt(name, input, modelRunId);
             if (event === null)
                 return;

package/dist/runtime/outbound-attempts.js.map

@@ -1 +1 @@
-{"version":3,"file":"outbound-attempts.js","sourceRoot":"","sources":["../../src/runtime/outbound-attempts.ts"],"names":[],"mappings":";;AAsEA,0CAgCC;AAMD,oDAsBC;AAvHD,gFAA4E;AAI5E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAE9C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,MAAM;IACN,kBAAkB;IAClB,OAAO;IACP,eAAe;IACf,cAAc;IACd,iBAAiB;CAClB,CAAC,CAAC;AAEH,iHAAiH;AACjH,oGAAoG;AACpG,iGAAiG;AACjG,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA,+HAA+H,CAAC;AAC7J,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,UAAU,MAAM,KAAK,iBAAiB,CAAC,CAAC;AAE3F,MAAM,OAAO,GAAG;IACd,SAAS,CAAC,oFAAoF,CAAC;IAC/F,SAAS,CAAC,MAAM,CAAC,GAAG,CAAA,2EAA2E,CAAC;IAChG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAA,iDAAiD,CAAC;IACtE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAA,oCAAoC,CAAC;IACzD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAA,2BAA2B,CAAC;IAChD,sJAAsJ;CACvJ,CAAC;AACF,4DAA4D;AAC5D,MAAM,UAAU,GAAG;IACjB,iKAAiK;IACjK,qCAAqC;IACrC,SAAS,CAAC,yBAAyB,CAAC;IACpC,2BAA2B;IAC3B,kCAAkC;IAClC,4CAA4C;IAC5C,sIAAsI;IACtI,+EAA+E;IAC/E,wGAAwG;CACzG,CAAC;AAEF,SAAS,WAAW,CAAC,KAA8B;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,2FAA2F;IAC3F,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,MAAM,GAAG,IAAA,4BAAY,EAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,oFAAoF;IACpF,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,MAAM,CAAC;AACxE,CAAC;AAED,iFAAiF;AACjF,SAAgB,eAAe,CAC7B,IAAY,EACZ,KAA8B,EAC9B,UAAkB;IAElB,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC5C,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO;YACL,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;YAClC,qFAAqF;YACrF,SAAS,EAAE,IAAI;YACf,UAAU;YACV,MAAM;SACP,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,OAAO;QACL,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC9B,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB;QACvD,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;QAChC,SAAS;QACT,UAAU;QACV,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAClC,KAA2B,EAC3B,UAAkB,EAClB,IAA2C;IAE3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO;QACL,OAAO,CAAC,IAAI,EAAE,KAAK;YACjB,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACvD,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO;YAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;oBAAE,OAAO;gBACnC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAC7C,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC;QAClD,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;QACtC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE;KACnC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"outbound-attempts.js","sourceRoot":"","sources":["../../src/runtime/outbound-attempts.ts"],"names":[],"mappings":";;AAwEA,0CAgCC;AAMD,oDAwBC;AAzHD,gFAA4E;AAI5E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAE9C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,MAAM;IACN,kBAAkB;IAClB,OAAO;IACP,eAAe;IACf,cAAc;IACd,iBAAiB;CAClB,CAAC,CAAC;AAEH,iHAAiH;AACjH,oGAAoG;AACpG,iGAAiG;AACjG,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA,+HAA+H,CAAC;AAC7J,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,UAAU,MAAM,KAAK,iBAAiB,CAAC,CAAC;AAE3F,MAAM,OAAO,GAAG;IACd,SAAS,CAAC,oFAAoF,CAAC;IAC/F,SAAS,CAAC,MAAM,CAAC,GAAG,CAAA,2EAA2E,CAAC;IAChG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAA,iDAAiD,CAAC;IACtE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAA,oCAAoC,CAAC;IACzD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAA,2BAA2B,CAAC;IAChD,sJAAsJ;CACvJ,CAAC;AACF,4DAA4D;AAC5D,MAAM,UAAU,GAAG;IACjB,iKAAiK;IACjK,qCAAqC;IACrC,SAAS,CAAC,yBAAyB,CAAC;IACpC,2BAA2B;IAC3B,kCAAkC;IAClC,4CAA4C;IAC5C,sIAAsI;IACtI,+EAA+E;IAC/E,wGAAwG;CACzG,CAAC;AAEF,SAAS,WAAW,CAAC,KAA8B;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,2FAA2F;IAC3F,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,MAAM,GAAG,IAAA,4BAAY,EAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,oFAAoF;IACpF,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,MAAM,CAAC;AACxE,CAAC;AAED,iFAAiF;AACjF,SAAgB,eAAe,CAC7B,IAAY,EACZ,KAA8B,EAC9B,UAAkB;IAElB,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC5C,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO;YACL,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;YAClC,qFAAqF;YACrF,SAAS,EAAE,IAAI;YACf,UAAU;YACV,MAAM;SACP,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,OAAO;QACL,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC9B,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB;QACvD,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;QAChC,SAAS;QACT,UAAU;QACV,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAClC,KAA2B,EAC3B,UAAkB,EAClB,IAA2C,EAC3C,SAA6D;IAE7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO;QACL,OAAO,CAAC,IAAI,EAAE,KAAK;YACjB,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3B,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,CAAC,gBAAgB;gBAAE,OAAO;YAC5F,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACvD,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO;YAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;oBAAE,OAAO;gBACnC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAC7C,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC;QAClD,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;QACtC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE;KACnC,CAAC;AACJ,CAAC"}

package/dist/runtime/owner-authority.d.ts

@@ -5,18 +5,22 @@
  * and only an owner-chat turn replaces or retires it. Rules learned in other turns are memory too,
  * and any turn may add or change them.
  *
- * Decided from the message refs the messenger gateways write for owner messages (telegram.ts,
- * discord.ts, slack.ts), not from the mailbox, which drops handled rows after seven days while a
- * rule lasts. A subagent's calls carry `subagent:<thread>`: the agent that heard the owner records
- * the correction.
+ * Authorship comes from the durable judgment command binding, and the message ref identifies
+ * the chat turn. The mailbox drops handled rows after seven days while a rule lasts. A
+ * subagent's calls carry `subagent:<thread>`: the agent that heard the owner records the correction.
  */
 import type { ActionContext, ActionRegistration, DatabaseInstance } from '@jungjaehoon/mama-core';
 export declare const RULE_KINDS: readonly ["lesson", "preference", "constraint", "workflow"];
 export declare const POLICY_UPDATE_ACTION = "manage.policy.update";
 export declare function isOwnerChatRef(ref: unknown): boolean;
-/** The ids among these that are owner rules. */
-export declare function ownerRuleIds(adapter: DatabaseInstance, ids: readonly string[]): Set<string>;
+/**
+ * Owner-authored chat rules among these ids. Migration 075 left earlier records without command
+ * bindings; without authenticated authorship they remain learned rules, even with a chat ref.
+ */
+export declare function ownerRuleIds(adapter: DatabaseInstance, ids: readonly string[], ownerPrincipalId: string): Set<string>;
 export declare function ownerSpeaking(context: ActionContext, ownerPrincipalId: string): boolean;
+/** The records a memory.save replaces, or the one a memory.retire retires. */
+export declare function amendedRecordIds(action: string, input: unknown): string[];
 /** Policy revisions have one writer; other owner rules change only in owner chat. */
 export declare function guardOwnerRules(registration: ActionRegistration, adapter: DatabaseInstance, ownerPrincipalId: string): ActionRegistration;
 //# sourceMappingURL=owner-authority.d.ts.map

package/dist/runtime/owner-authority.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owner-authority.d.ts","sourceRoot":"","sources":["../../src/runtime/owner-authority.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAElG,eAAO,MAAM,UAAU,6DAA8D,CAAC;AACtF,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAI3D,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEpD;AAED,gDAAgD;AAChD,wBAAgB,YAAY,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAqB3F;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAMvF;AAgBD,qFAAqF;AACrF,wBAAgB,eAAe,CAC7B,YAAY,EAAE,kBAAkB,EAChC,OAAO,EAAE,gBAAgB,EACzB,gBAAgB,EAAE,MAAM,GACvB,kBAAkB,CAmDpB"}
+{"version":3,"file":"owner-authority.d.ts","sourceRoot":"","sources":["../../src/runtime/owner-authority.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAElG,eAAO,MAAM,UAAU,6DAA8D,CAAC;AACtF,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAI3D,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEpD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,gBAAgB,EACzB,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,gBAAgB,EAAE,MAAM,GACvB,GAAG,CAAC,MAAM,CAAC,CAiCb;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAMvF;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAWzE;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAC7B,YAAY,EAAE,kBAAkB,EAChC,OAAO,EAAE,gBAAgB,EACzB,gBAAgB,EAAE,MAAM,GACvB,kBAAkB,CAmDpB"}

package/dist/runtime/owner-authority.js

@@ -4,6 +4,7 @@ exports.POLICY_UPDATE_ACTION = exports.RULE_KINDS = void 0;
 exports.isOwnerChatRef = isOwnerChatRef;
 exports.ownerRuleIds = ownerRuleIds;
 exports.ownerSpeaking = ownerSpeaking;
+exports.amendedRecordIds = amendedRecordIds;
 exports.guardOwnerRules = guardOwnerRules;
 exports.RULE_KINDS = ['lesson', 'preference', 'constraint', 'workflow'];
 exports.POLICY_UPDATE_ACTION = 'manage.policy.update';
@@ -11,14 +12,25 @@ const OWNER_CHAT_REF = /^(?:telegram|discord|slack):[^:]+:[^:]+$/;
 function isOwnerChatRef(ref) {
     return typeof ref === 'string' && OWNER_CHAT_REF.test(ref);
 }
-/** The ids among these that are owner rules. */
-function ownerRuleIds(adapter, ids) {
+/**
+ * Owner-authored chat rules among these ids. Migration 075 left earlier records without command
+ * bindings; without authenticated authorship they remain learned rules, even with a chat ref.
+ */
+function ownerRuleIds(adapter, ids, ownerPrincipalId) {
     if (ids.length === 0) {
         return new Set();
     }
     const rows = adapter
-        .prepare(`SELECT id, kind, provenance_json FROM decisions WHERE id IN (${ids.map(() => '?').join(',')})`)
-        .all(...ids);
+        .prepare(`SELECT d.id, d.kind, d.provenance_json FROM decisions d
+       WHERE d.id IN (${ids.map(() => '?').join(',')})
+         AND EXISTS (
+           SELECT 1 FROM judgment_commands j
+           JOIN command_bindings b ON b.command_id = j.command_id
+           WHERE j.record_id = d.id AND b.principal_id = ?
+             AND b.action = 'judgment.append' AND b.receipt_kind = 'judgment'
+             AND b.receipt_key = d.id
+         )`)
+        .all(...ids, ownerPrincipalId);
     return new Set(rows
         .filter((row) => exports.RULE_KINDS.includes(row.kind) &&
         row.provenance_json !== null &&
@@ -31,7 +43,7 @@ function ownerSpeaking(context, ownerPrincipalId) {
         isOwnerChatRef(context.session?.sourceMessageRef));
 }
 /** The records a memory.save replaces, or the one a memory.retire retires. */
-function targets(action, input) {
+function amendedRecordIds(action, input) {
     const named = action === 'memory.retire'
         ? [input.memory_id]
         : (() => {
@@ -49,7 +61,7 @@ function guardOwnerRules(registration, adapter, ownerPrincipalId) {
         ...registration,
         exec: async (input, context) => {
             const body = input;
-            const ids = targets(action, input);
+            const ids = amendedRecordIds(action, input);
             const revisions = ids.length === 0
                 ? []
                 : adapter
@@ -66,7 +78,7 @@ function guardOwnerRules(registration, adapter, ownerPrincipalId) {
                 error.name = 'denied';
                 throw error;
             }
-            const owned = ownerRuleIds(adapter, ids);
+            const owned = ownerRuleIds(adapter, ids, ownerPrincipalId);
             if (owned.size > 0 && !ownerSpeaking(context, ownerPrincipalId)) {
                 const error = new Error(`${[...owned].join(', ')} ${owned.size === 1 ? 'is an owner rule' : 'are owner rules'}: ` +
                     'only the owner changes one, in an owner chat turn. Save what you learned as a lesson ' +

package/dist/runtime/owner-authority.js.map

@@ -1 +1 @@
-{"version":3,"file":"owner-authority.js","sourceRoot":"","sources":["../../src/runtime/owner-authority.ts"],"names":[],"mappings":";;;AAmBA,wCAEC;AAGD,oCAqBC;AAED,sCAMC;AAiBD,0CAuDC;AA/GY,QAAA,UAAU,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,CAAU,CAAC;AACzE,QAAA,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAElE,SAAgB,cAAc,CAAC,GAAY;IACzC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,gDAAgD;AAChD,SAAgB,YAAY,CAAC,OAAyB,EAAE,GAAsB;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CACN,gEAAgE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAChG;SACA,GAAG,CAAC,GAAG,GAAG,CAAwE,CAAC;IACtF,OAAO,IAAI,GAAG,CACZ,IAAI;SACD,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACL,kBAAgC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QACpD,GAAG,CAAC,eAAe,KAAK,IAAI;QAC5B,cAAc,CACX,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAsC,CAAC,kBAAkB,CACzF,CACJ;SACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CACxB,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa,CAAC,OAAsB,EAAE,gBAAwB;IAC5E,OAAO,CACL,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,gBAAgB;QAC/C,OAAO,CAAC,OAAO,EAAE,iBAAiB,KAAK,SAAS;QAChD,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,OAAO,CAAC,MAAc,EAAE,KAAc;IAC7C,MAAM,KAAK,GACT,MAAM,KAAK,eAAe;QACxB,CAAC,CAAC,CAAE,KAAiC,CAAC,SAAS,CAAC;QAChD,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,MAAM,QAAQ,GAAI,KAAgC,CAAC,QAAQ,CAAC;YAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC5B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAE,KAAiC,EAAE,EAAE,CAAC;gBACjE,CAAC,CAAC,EAAE,CAAC;QACT,CAAC,CAAC,EAAE,CAAC;IACX,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,qFAAqF;AACrF,SAAgB,eAAe,CAC7B,YAAgC,EAChC,OAAyB,EACzB,gBAAwB;IAExB,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,OAAO;QACL,GAAG,YAAY;QACf,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,KAGZ,CAAC;YACF,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnC,MAAM,SAAS,GACb,GAAG,CAAC,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,EAAE;gBACJ,CAAC,CACG,OAAO;qBACJ,OAAO,CACN,0DAA0D,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAC1F;qBACA,GAAG,CAAC,GAAG,GAAG,CACd,CAAC,MAAM,CACN,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,eAAe,KAAK,IAAI;oBAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAA6B,CAAC,SAAS;wBACpE,4BAAoB,CACzB,CAAC;YACR,wFAAwF;YACxF,IACE,SAAS,CAAC,MAAM,GAAG,CAAC;gBACpB,IAAI,CAAC,MAAM,EAAE,WAAW,KAAK,4BAAoB;gBACjD,IAAI,CAAC,UAAU,EAAE,SAAS,KAAK,4BAAoB;gBACnD,OAAO,CAAC,OAAO,EAAE,QAAQ,KAAK,4BAAoB,EAClD,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,8CAA8C,4BAAoB,EAAE,CACrE,CAAC;gBACF,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBAChE,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,iBAAiB,IAAI;oBACvF,uFAAuF;oBACvF,iEAAiE,CACpE,CAAC;gBACF,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"owner-authority.js","sourceRoot":"","sources":["../../src/runtime/owner-authority.ts"],"names":[],"mappings":";;;AAkBA,wCAEC;AAMD,oCAqCC;AAED,sCAMC;AAGD,4CAWC;AAGD,0CAuDC;AAlIY,QAAA,UAAU,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,CAAU,CAAC;AACzE,QAAA,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAElE,SAAgB,cAAc,CAAC,GAAY;IACzC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAC1B,OAAyB,EACzB,GAAsB,EACtB,gBAAwB;IAExB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CACN;wBACkB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;WAOzC,CACN;SACA,GAAG,CAAC,GAAG,GAAG,EAAE,gBAAgB,CAI7B,CAAC;IACH,OAAO,IAAI,GAAG,CACZ,IAAI;SACD,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACL,kBAAgC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QACpD,GAAG,CAAC,eAAe,KAAK,IAAI;QAC5B,cAAc,CACX,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAsC,CAAC,kBAAkB,CACzF,CACJ;SACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CACxB,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa,CAAC,OAAsB,EAAE,gBAAwB;IAC5E,OAAO,CACL,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,gBAAgB;QAC/C,OAAO,CAAC,OAAO,EAAE,iBAAiB,KAAK,SAAS;QAChD,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAgB,gBAAgB,CAAC,MAAc,EAAE,KAAc;IAC7D,MAAM,KAAK,GACT,MAAM,KAAK,eAAe;QACxB,CAAC,CAAC,CAAE,KAAiC,CAAC,SAAS,CAAC;QAChD,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,MAAM,QAAQ,GAAI,KAAgC,CAAC,QAAQ,CAAC;YAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC5B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAE,KAAiC,EAAE,EAAE,CAAC;gBACjE,CAAC,CAAC,EAAE,CAAC;QACT,CAAC,CAAC,EAAE,CAAC;IACX,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,qFAAqF;AACrF,SAAgB,eAAe,CAC7B,YAAgC,EAChC,OAAyB,EACzB,gBAAwB;IAExB,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC1C,OAAO;QACL,GAAG,YAAY;QACf,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,KAGZ,CAAC;YACF,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM,SAAS,GACb,GAAG,CAAC,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,EAAE;gBACJ,CAAC,CACG,OAAO;qBACJ,OAAO,CACN,0DAA0D,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAC1F;qBACA,GAAG,CAAC,GAAG,GAAG,CACd,CAAC,MAAM,CACN,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,eAAe,KAAK,IAAI;oBAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAA6B,CAAC,SAAS;wBACpE,4BAAoB,CACzB,CAAC;YACR,wFAAwF;YACxF,IACE,SAAS,CAAC,MAAM,GAAG,CAAC;gBACpB,IAAI,CAAC,MAAM,EAAE,WAAW,KAAK,4BAAoB;gBACjD,IAAI,CAAC,UAAU,EAAE,SAAS,KAAK,4BAAoB;gBACnD,OAAO,CAAC,OAAO,EAAE,QAAQ,KAAK,4BAAoB,EAClD,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,8CAA8C,4BAAoB,EAAE,CACrE,CAAC;gBACF,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC3D,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBAChE,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,iBAAiB,IAAI;oBACvF,uFAAuF;oBACvF,iEAAiE,CACpE,CAAC;gBACF,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;KACF,CAAC;AACJ,CAAC"}