@maiaos/protocol 0.1.0-canary.1

package/dist/session-guard/contract.d.ts

@@ -0,0 +1,176 @@
+import type { LocalNodeRequestMethod } from "../local-node/node-api/index.js";
+import type { InferRuntimeSchema } from "../runtime-schema/index.js";
+export declare const sessionRoleSchema: import("../runtime-schema/runtime-schema.js").RuntimeSchema<"orchestrator" | "worker">;
+export type SessionRole = InferRuntimeSchema<typeof sessionRoleSchema>;
+export declare const sessionGuardLimitsSchema: import("../runtime-schema/runtime-schema.js").RuntimeSchema<{
+    readonly maxDepth: number;
+    readonly maxLeasesPerSession: number;
+    readonly maxLiveChildren: number;
+    readonly maxMessagesPerMinute: number;
+}>;
+export type SessionGuardLimits = InferRuntimeSchema<typeof sessionGuardLimitsSchema>;
+export declare const projectGuardSchema: import("../runtime-schema/runtime-schema.js").RuntimeSchema<{
+    readonly limits: {
+        readonly maxDepth: number;
+        readonly maxLeasesPerSession: number;
+        readonly maxLiveChildren: number;
+        readonly maxMessagesPerMinute: number;
+    };
+    readonly projectId: string;
+    readonly revision: string;
+    readonly schemaVersion: "maia.session-guard/v1";
+    readonly source: "default" | "project";
+    readonly updatedAt?: string | undefined;
+}>;
+export type ProjectGuard = InferRuntimeSchema<typeof projectGuardSchema>;
+export declare const projectGuardShowParametersSchema: import("../runtime-schema/runtime-schema.js").RuntimeSchema<{
+    readonly projectId: string;
+}>;
+export type ProjectGuardShowParameters = InferRuntimeSchema<typeof projectGuardShowParametersSchema>;
+export declare const projectGuardPreviewParametersSchema: import("../runtime-schema/runtime-schema.js").RuntimeSchema<{
+    readonly commandId: string;
+    readonly expectedRevision: string;
+    readonly limits: {
+        readonly maxDepth: number;
+        readonly maxLeasesPerSession: number;
+        readonly maxLiveChildren: number;
+        readonly maxMessagesPerMinute: number;
+    };
+    readonly projectId: string;
+}>;
+export type ProjectGuardPreviewParameters = InferRuntimeSchema<typeof projectGuardPreviewParametersSchema>;
+export declare const projectGuardConfirmParametersSchema: import("../runtime-schema/runtime-schema.js").RuntimeSchema<{
+    readonly commandId: string;
+    readonly expectedRevision: string;
+    readonly limits: {
+        readonly maxDepth: number;
+        readonly maxLeasesPerSession: number;
+        readonly maxLiveChildren: number;
+        readonly maxMessagesPerMinute: number;
+    };
+    readonly projectId: string;
+    readonly inputDigest: string;
+    readonly proof: string;
+}>;
+export type ProjectGuardConfirmParameters = InferRuntimeSchema<typeof projectGuardConfirmParametersSchema>;
+export declare const projectGuardShowResultSchema: import("../runtime-schema/runtime-schema.js").RuntimeSchema<{
+    readonly guard: {
+        readonly limits: {
+            readonly maxDepth: number;
+            readonly maxLeasesPerSession: number;
+            readonly maxLiveChildren: number;
+            readonly maxMessagesPerMinute: number;
+        };
+        readonly projectId: string;
+        readonly revision: string;
+        readonly schemaVersion: "maia.session-guard/v1";
+        readonly source: "default" | "project";
+        readonly updatedAt?: string | undefined;
+    };
+    readonly method: "project.guard.show";
+}>;
+export type ProjectGuardShowResult = InferRuntimeSchema<typeof projectGuardShowResultSchema>;
+export declare const projectGuardPreviewResultSchema: import("../runtime-schema/runtime-schema.js").RuntimeSchema<{
+    readonly inputDigest: string;
+    readonly proof: string;
+    readonly actorId: string;
+    readonly commandId: string;
+    readonly current: {
+        readonly limits: {
+            readonly maxDepth: number;
+            readonly maxLeasesPerSession: number;
+            readonly maxLiveChildren: number;
+            readonly maxMessagesPerMinute: number;
+        };
+        readonly projectId: string;
+        readonly revision: string;
+        readonly schemaVersion: "maia.session-guard/v1";
+        readonly source: "default" | "project";
+        readonly updatedAt?: string | undefined;
+    };
+    readonly expectedRevision: string;
+    readonly expiresAt: string;
+    readonly issuedAt: string;
+    readonly limits: {
+        readonly maxDepth: number;
+        readonly maxLeasesPerSession: number;
+        readonly maxLiveChildren: number;
+        readonly maxMessagesPerMinute: number;
+    };
+    readonly method: "project.guard.preview";
+    readonly projectId: string;
+}>;
+export type ProjectGuardPreviewResult = InferRuntimeSchema<typeof projectGuardPreviewResultSchema>;
+export declare const projectGuardConfirmResultSchema: import("../runtime-schema/runtime-schema.js").RuntimeSchema<{
+    readonly commandId: string;
+    readonly delivery: "duplicate" | "new";
+    readonly expectedRevision: string;
+    readonly guard: {
+        readonly limits: {
+            readonly maxDepth: number;
+            readonly maxLeasesPerSession: number;
+            readonly maxLiveChildren: number;
+            readonly maxMessagesPerMinute: number;
+        };
+        readonly projectId: string;
+        readonly revision: string;
+        readonly schemaVersion: "maia.session-guard/v1";
+        readonly source: "default" | "project";
+        readonly updatedAt?: string | undefined;
+    };
+    readonly inputDigest: string;
+    readonly method: "project.guard.confirm";
+    readonly receipt: {
+        readonly actorId: string;
+        readonly aggregateRevision: string;
+        readonly commandId: string;
+        readonly createdAt: string;
+        readonly eventCursor: string;
+        readonly method: string;
+        readonly receiptId: string;
+        readonly schemaVersion: 1;
+        readonly state: "succeeded";
+        readonly target: {
+            readonly id: string;
+            readonly type: string;
+        };
+        readonly updatedAt: string;
+    };
+}>;
+export type ProjectGuardConfirmResult = InferRuntimeSchema<typeof projectGuardConfirmResultSchema>;
+export declare const SESSION_GUARD_SCHEMA_VERSION: "maia.session-guard/v1";
+export declare const PROJECT_GUARD_AGGREGATE_TYPE: "project_guard";
+export declare const SESSION_ROLES: readonly SessionRole[];
+export declare const DEFAULT_SESSION_GUARD_LIMITS: SessionGuardLimits;
+export declare const SESSION_GUARD_BOUNDS: Readonly<Record<keyof SessionGuardLimits, {
+    readonly maximum: number;
+    readonly minimum: number;
+}>>;
+/**
+ * Each guard trips with its own code, so the error names the limit: depth
+ * of a new child, live children of its parent, messages a Session sends per
+ * minute and leases a Session holds.
+ */
+export declare const SESSION_GUARD_ERROR_CODES: {
+    readonly maxDepth: "guard_depth_exceeded";
+    readonly maxLeasesPerSession: "guard_leases_per_session_exceeded";
+    readonly maxLiveChildren: "guard_live_children_exceeded";
+    readonly maxMessagesPerMinute: "guard_messages_per_minute_exceeded";
+};
+export type SessionGuardErrorCode = (typeof SESSION_GUARD_ERROR_CODES)[keyof SessionGuardLimits];
+/** A Session credential asked for an operation its role does not allow. */
+export declare const SESSION_ROLE_DENIED_ERROR_CODE: "role_denied";
+/**
+ * The operations a Session-bound credential reaches, per role; the Node
+ * scopes each to the Session itself (its own leases, its own Project's
+ * guards and Session list, children in its own Workspace). Everything else is `role_denied`.
+ */
+export declare const SESSION_ROLE_OPERATIONS: Readonly<Record<SessionRole, readonly LocalNodeRequestMethod[]>>;
+/**
+ * The launch environment of a vendor executor Session carries its own
+ * credential and the Node's exact loopback origin, never the operator's
+ * bearer or the runtime directory.
+ */
+export declare const SESSION_CREDENTIAL_VARIABLE: "MAIA_SESSION_CREDENTIAL";
+export declare const SESSION_NODE_ORIGIN_VARIABLE: "MAIA_NODE_ORIGIN";
+//# sourceMappingURL=contract.d.ts.map

package/dist/session-guard/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/session-guard/contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAE9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAqBrE,eAAO,MAAM,iBAAiB,wFAE7B,CAAC;AACF,MAAM,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACvE,eAAO,MAAM,wBAAwB;;;;;EAEpC,CAAC;AACF,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,CACjD,OAAO,wBAAwB,CAChC,CAAC;AACF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAE9B,CAAC;AACF,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACzE,eAAO,MAAM,gCAAgC;;EAE5C,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,CACzD,OAAO,gCAAgC,CACxC,CAAC;AACF,eAAO,MAAM,mCAAmC;;;;;;;;;;EAE/C,CAAC;AACF,MAAM,MAAM,6BAA6B,GAAG,kBAAkB,CAC5D,OAAO,mCAAmC,CAC3C,CAAC;AACF,eAAO,MAAM,mCAAmC;;;;;;;;;;;;EAE/C,CAAC;AACF,MAAM,MAAM,6BAA6B,GAAG,kBAAkB,CAC5D,OAAO,mCAAmC,CAC3C,CAAC;AACF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;EAExC,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,CACrD,OAAO,4BAA4B,CACpC,CAAC;AACF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE3C,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,kBAAkB,CACxD,OAAO,+BAA+B,CACvC,CAAC;AACF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE3C,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,kBAAkB,CACxD,OAAO,+BAA+B,CACvC,CAAC;AAGF,eAAO,MAAM,4BAA4B,EAAE,uBAC5B,CAAC;AAChB,eAAO,MAAM,4BAA4B,EAAE,eAA+B,CAAC;AAC3E,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EAAU,CAAC;AAC3D,eAAO,MAAM,4BAA4B,EAAE,kBAAkC,CAAC;AAC9E,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CACzC,MAAM,CACJ,MAAM,kBAAkB,EACxB;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CACvD,CACO,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;uBAC1B,sBAAsB;kCACX,mCAAmC;8BACvC,8BAA8B;mCACzB,oCAAoC;CACC,CAAC;AAC9D,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,kBAAkB,CAAC,CAAC;AAE/D,2EAA2E;AAC3E,eAAO,MAAM,8BAA8B,EAAG,aAAsB,CAAC;AAYrE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAC5C,MAAM,CAAC,WAAW,EAAE,SAAS,sBAAsB,EAAE,CAAC,CAQtD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAG,yBAAkC,CAAC;AAC9E,eAAO,MAAM,4BAA4B,EAAG,kBAA2B,CAAC"}

package/dist/session-guard/contract.js

@@ -0,0 +1,61 @@
+import { makeEffectRuntimeSchema } from "../runtime-schema/effect-schema.js";
+import { DEFAULT_SESSION_GUARD_LIMITS as defaultLimits, projectGuardConfirmParametersEffectSchema, projectGuardEffectSchema, projectGuardPreviewParametersEffectSchema, projectGuardShowParametersEffectSchema, SESSION_GUARD_BOUNDS as bounds, SESSION_GUARD_SCHEMA_VERSION as schemaVersion, SESSION_ROLES as roles, sessionGuardLimitsEffectSchema, sessionRoleEffectSchema, } from "./request-effect-schema.js";
+import { PROJECT_GUARD_AGGREGATE_TYPE as aggregateType, projectGuardConfirmResultEffectSchema, projectGuardPreviewResultEffectSchema, projectGuardShowResultEffectSchema, } from "./result-effect-schema.js";
+export const sessionRoleSchema = makeEffectRuntimeSchema(sessionRoleEffectSchema);
+export const sessionGuardLimitsSchema = makeEffectRuntimeSchema(sessionGuardLimitsEffectSchema);
+export const projectGuardSchema = makeEffectRuntimeSchema(projectGuardEffectSchema);
+export const projectGuardShowParametersSchema = makeEffectRuntimeSchema(projectGuardShowParametersEffectSchema);
+export const projectGuardPreviewParametersSchema = makeEffectRuntimeSchema(projectGuardPreviewParametersEffectSchema);
+export const projectGuardConfirmParametersSchema = makeEffectRuntimeSchema(projectGuardConfirmParametersEffectSchema);
+export const projectGuardShowResultSchema = makeEffectRuntimeSchema(projectGuardShowResultEffectSchema);
+export const projectGuardPreviewResultSchema = makeEffectRuntimeSchema(projectGuardPreviewResultEffectSchema);
+export const projectGuardConfirmResultSchema = makeEffectRuntimeSchema(projectGuardConfirmResultEffectSchema);
+// Keep public declarations independent of the private Effect schema module.
+export const SESSION_GUARD_SCHEMA_VERSION = schemaVersion;
+export const PROJECT_GUARD_AGGREGATE_TYPE = aggregateType;
+export const SESSION_ROLES = roles;
+export const DEFAULT_SESSION_GUARD_LIMITS = defaultLimits;
+export const SESSION_GUARD_BOUNDS = bounds;
+/**
+ * Each guard trips with its own code, so the error names the limit: depth
+ * of a new child, live children of its parent, messages a Session sends per
+ * minute and leases a Session holds.
+ */
+export const SESSION_GUARD_ERROR_CODES = {
+    maxDepth: "guard_depth_exceeded",
+    maxLeasesPerSession: "guard_leases_per_session_exceeded",
+    maxLiveChildren: "guard_live_children_exceeded",
+    maxMessagesPerMinute: "guard_messages_per_minute_exceeded",
+};
+/** A Session credential asked for an operation its role does not allow. */
+export const SESSION_ROLE_DENIED_ERROR_CODE = "role_denied";
+const workerOperations = [
+    "context.show",
+    "node.status",
+    "port.lease.acquire",
+    "port.lease.list",
+    "port.lease.release",
+    "port.lease.renew",
+    "session.list",
+];
+/**
+ * The operations a Session-bound credential reaches, per role; the Node
+ * scopes each to the Session itself (its own leases, its own Project's
+ * guards and Session list, children in its own Workspace). Everything else is `role_denied`.
+ */
+export const SESSION_ROLE_OPERATIONS = Object.freeze({
+    orchestrator: Object.freeze([
+        ...workerOperations,
+        "project.guard.show",
+        "session.create",
+    ]),
+    worker: Object.freeze(workerOperations),
+});
+/**
+ * The launch environment of a vendor executor Session carries its own
+ * credential and the Node's exact loopback origin, never the operator's
+ * bearer or the runtime directory.
+ */
+export const SESSION_CREDENTIAL_VARIABLE = "MAIA_SESSION_CREDENTIAL";
+export const SESSION_NODE_ORIGIN_VARIABLE = "MAIA_NODE_ORIGIN";
+//# sourceMappingURL=contract.js.map

package/dist/session-guard/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/session-guard/contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAG7E,OAAO,EACL,4BAA4B,IAAI,aAAa,EAC7C,yCAAyC,EACzC,wBAAwB,EACxB,yCAAyC,EACzC,sCAAsC,EACtC,oBAAoB,IAAI,MAAM,EAC9B,4BAA4B,IAAI,aAAa,EAC7C,aAAa,IAAI,KAAK,EACtB,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,IAAI,aAAa,EAC7C,qCAAqC,EACrC,qCAAqC,EACrC,kCAAkC,GACnC,MAAM,2BAA2B,CAAC;AAEnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CACtD,uBAAuB,CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,uBAAuB,CAC7D,8BAA8B,CAC/B,CAAC;AAIF,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAuB,CACvD,wBAAwB,CACzB,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,uBAAuB,CACrE,sCAAsC,CACvC,CAAC;AAIF,MAAM,CAAC,MAAM,mCAAmC,GAAG,uBAAuB,CACxE,yCAAyC,CAC1C,CAAC;AAIF,MAAM,CAAC,MAAM,mCAAmC,GAAG,uBAAuB,CACxE,yCAAyC,CAC1C,CAAC;AAIF,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CACjE,kCAAkC,CACnC,CAAC;AAIF,MAAM,CAAC,MAAM,+BAA+B,GAAG,uBAAuB,CACpE,qCAAqC,CACtC,CAAC;AAIF,MAAM,CAAC,MAAM,+BAA+B,GAAG,uBAAuB,CACpE,qCAAqC,CACtC,CAAC;AAKF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GACvC,aAAa,CAAC;AAChB,MAAM,CAAC,MAAM,4BAA4B,GAAoB,aAAa,CAAC;AAC3E,MAAM,CAAC,MAAM,aAAa,GAA2B,KAAK,CAAC;AAC3D,MAAM,CAAC,MAAM,4BAA4B,GAAuB,aAAa,CAAC;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAK7B,MAAM,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ,EAAE,sBAAsB;IAChC,mBAAmB,EAAE,mCAAmC;IACxD,eAAe,EAAE,8BAA8B;IAC/C,oBAAoB,EAAE,oCAAoC;CACC,CAAC;AAI9D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,8BAA8B,GAAG,aAAsB,CAAC;AAErE,MAAM,gBAAgB,GAAG;IACvB,cAAc;IACd,aAAa;IACb,oBAAoB;IACpB,iBAAiB;IACjB,oBAAoB;IACpB,kBAAkB;IAClB,cAAc;CACsC,CAAC;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAEhC,MAAM,CAAC,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1B,GAAG,gBAAgB;QACnB,oBAAoB;QACpB,gBAAgB;KACoC,CAAC;IACvD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;CACxC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAkC,CAAC;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAA2B,CAAC"}

package/dist/session-guard/effect-schema.d.ts

@@ -0,0 +1,3 @@
+export { DEFAULT_SESSION_GUARD_LIMITS, projectGuardConfirmParametersEffectSchema, projectGuardEffectSchema, projectGuardPreviewParametersEffectSchema, projectGuardRequestEffectSchema, projectGuardShowParametersEffectSchema, SESSION_GUARD_BOUNDS, SESSION_GUARD_SCHEMA_VERSION, SESSION_ROLES, sessionGuardLimitsEffectSchema, sessionRoleEffectSchema, } from "./request-effect-schema.js";
+export { PROJECT_GUARD_AGGREGATE_TYPE, projectGuardConfirmResultEffectSchema, projectGuardPreviewResultEffectSchema, projectGuardResultEffectSchema, projectGuardShowResultEffectSchema, } from "./result-effect-schema.js";
+//# sourceMappingURL=effect-schema.d.ts.map

package/dist/session-guard/effect-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"effect-schema.d.ts","sourceRoot":"","sources":["../../src/session-guard/effect-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,yCAAyC,EACzC,wBAAwB,EACxB,yCAAyC,EACzC,+BAA+B,EAC/B,sCAAsC,EACtC,oBAAoB,EACpB,4BAA4B,EAC5B,aAAa,EACb,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EACrC,qCAAqC,EACrC,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,2BAA2B,CAAC"}

package/dist/session-guard/effect-schema.js

@@ -0,0 +1,3 @@
+export { DEFAULT_SESSION_GUARD_LIMITS, projectGuardConfirmParametersEffectSchema, projectGuardEffectSchema, projectGuardPreviewParametersEffectSchema, projectGuardRequestEffectSchema, projectGuardShowParametersEffectSchema, SESSION_GUARD_BOUNDS, SESSION_GUARD_SCHEMA_VERSION, SESSION_ROLES, sessionGuardLimitsEffectSchema, sessionRoleEffectSchema, } from "./request-effect-schema.js";
+export { PROJECT_GUARD_AGGREGATE_TYPE, projectGuardConfirmResultEffectSchema, projectGuardPreviewResultEffectSchema, projectGuardResultEffectSchema, projectGuardShowResultEffectSchema, } from "./result-effect-schema.js";
+//# sourceMappingURL=effect-schema.js.map

package/dist/session-guard/effect-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effect-schema.js","sourceRoot":"","sources":["../../src/session-guard/effect-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,yCAAyC,EACzC,wBAAwB,EACxB,yCAAyC,EACzC,+BAA+B,EAC/B,sCAAsC,EACtC,oBAAoB,EACpB,4BAA4B,EAC5B,aAAa,EACb,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EACrC,qCAAqC,EACrC,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,2BAA2B,CAAC"}

package/dist/session-guard/feature.d.ts

@@ -0,0 +1,34 @@
+import { type MaiaOperationsFeature } from "../feature/descriptor/index.js";
+/** A Project's fan-out guards; a person previews and changes them. */
+export declare const PROJECT_GUARD_FEATURE_OPERATIONS: readonly [{
+    readonly method: "project.guard.show";
+    readonly nodeHandler: "projectGuard";
+    readonly policy: {
+        readonly confirmation: "none";
+        readonly effectClass: "none";
+        readonly idempotency: "none";
+        readonly ownReceipt: false;
+        readonly receipt: "none";
+        readonly releaseQualified: false;
+        readonly revisionGuard: false;
+        readonly risk: "read";
+    };
+    readonly primitives: readonly ["read"];
+    readonly projections: {
+        readonly cli: true;
+        readonly coordinator: {
+            readonly description: "Show a Project's fan-out guards: the depth of child Sessions, live children per parent Session, messages per Session per minute and leases per Session. Revision 0 means the defaults; only a person changes them.";
+            readonly destructive: false;
+            readonly readOnly: true;
+        };
+        readonly desktop: false;
+        readonly mobile: false;
+        readonly voice: false;
+    };
+    readonly sdk: {
+        readonly client: "local-node";
+        readonly operation: "showProjectGuard";
+    };
+}];
+export declare const PROJECT_GUARD_FEATURE: MaiaOperationsFeature<"project-guard", typeof PROJECT_GUARD_FEATURE_OPERATIONS>;
+//# sourceMappingURL=feature.d.ts.map

package/dist/session-guard/feature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature.d.ts","sourceRoot":"","sources":["../../src/session-guard/feature.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,gCAAgC,CAAC;AAExC,sEAAsE;AACtE,eAAO,MAAM,gCAAgC;qBAEjC,oBAAoB;0BACf,cAAc;;iBAEzB,YAAY,EAAE,MAAM;iBACpB,WAAW,EAAE,MAAM;iBACnB,WAAW,EAAE,MAAM;iBACnB,UAAU;iBACV,OAAO,EAAE,MAAM;iBACf,gBAAgB;iBAChB,aAAa;iBACb,IAAI,EAAE,MAAM;;;;iBAIZ,GAAG;iBACH,WAAW;qBACT,WAAW,EACT,oNAAoN;qBACtN,WAAW;qBACX,QAAQ;;iBAEV,OAAO;iBACP,MAAM;iBACN,KAAK;;;iBAEA,MAAM,EAAE,YAAY;iBAAE,SAAS,EAAE,kBAAkB;;EAEA,CAAC;AAE/D,eAAO,MAAM,qBAAqB,EAAE,qBAAqB,CACvD,eAAe,EACf,OAAO,gCAAgC,CAMvC,CAAC"}

package/dist/session-guard/feature.js

@@ -0,0 +1,38 @@
+import { defineMaiaFeature, } from "../feature/descriptor/index.js";
+/** A Project's fan-out guards; a person previews and changes them. */
+export const PROJECT_GUARD_FEATURE_OPERATIONS = [
+    {
+        method: "project.guard.show",
+        nodeHandler: "projectGuard",
+        policy: {
+            confirmation: "none",
+            effectClass: "none",
+            idempotency: "none",
+            ownReceipt: false,
+            receipt: "none",
+            releaseQualified: false,
+            revisionGuard: false,
+            risk: "read",
+        },
+        primitives: ["read"],
+        projections: {
+            cli: true,
+            coordinator: {
+                description: "Show a Project's fan-out guards: the depth of child Sessions, live children per parent Session, messages per Session per minute and leases per Session. Revision 0 means the defaults; only a person changes them.",
+                destructive: false,
+                readOnly: true,
+            },
+            desktop: false,
+            mobile: false,
+            voice: false,
+        },
+        sdk: { client: "local-node", operation: "showProjectGuard" },
+    },
+];
+export const PROJECT_GUARD_FEATURE = defineMaiaFeature({
+    contributions: { routines: [], rules: [], schedules: [], skills: [] },
+    id: "project-guard",
+    operations: PROJECT_GUARD_FEATURE_OPERATIONS,
+    schemaVersion: "maia.feature/project-guard/v1",
+});
+//# sourceMappingURL=feature.js.map

package/dist/session-guard/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature.js","sourceRoot":"","sources":["../../src/session-guard/feature.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,GAGlB,MAAM,gCAAgC,CAAC;AAExC,sEAAsE;AACtE,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C;QACE,MAAM,EAAE,oBAAoB;QAC5B,WAAW,EAAE,cAAc;QAC3B,MAAM,EAAE;YACN,YAAY,EAAE,MAAM;YACpB,WAAW,EAAE,MAAM;YACnB,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,MAAM;YACf,gBAAgB,EAAE,KAAK;YACvB,aAAa,EAAE,KAAK;YACpB,IAAI,EAAE,MAAM;SACb;QACD,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE;YACX,GAAG,EAAE,IAAI;YACT,WAAW,EAAE;gBACX,WAAW,EACT,oNAAoN;gBACtN,WAAW,EAAE,KAAK;gBAClB,QAAQ,EAAE,IAAI;aACf;YACD,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,KAAK;SACb;QACD,GAAG,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE;KAC7D;CAC2D,CAAC;AAE/D,MAAM,CAAC,MAAM,qBAAqB,GAG9B,iBAAiB,CAAC;IACpB,aAAa,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;IACrE,EAAE,EAAE,eAAe;IACnB,UAAU,EAAE,gCAAgC;IAC5C,aAAa,EAAE,+BAA+B;CAC/C,CAAC,CAAC"}

package/dist/session-guard/index.d.ts

@@ -0,0 +1,3 @@
+export { DEFAULT_SESSION_GUARD_LIMITS, PROJECT_GUARD_AGGREGATE_TYPE, type ProjectGuard, type ProjectGuardConfirmParameters, projectGuardConfirmParametersSchema, type ProjectGuardConfirmResult, projectGuardConfirmResultSchema, type ProjectGuardPreviewParameters, projectGuardPreviewParametersSchema, type ProjectGuardPreviewResult, projectGuardPreviewResultSchema, projectGuardSchema, type ProjectGuardShowParameters, projectGuardShowParametersSchema, type ProjectGuardShowResult, projectGuardShowResultSchema, SESSION_CREDENTIAL_VARIABLE, SESSION_GUARD_BOUNDS, SESSION_GUARD_ERROR_CODES, SESSION_GUARD_SCHEMA_VERSION, SESSION_NODE_ORIGIN_VARIABLE, SESSION_ROLE_DENIED_ERROR_CODE, SESSION_ROLE_OPERATIONS, SESSION_ROLES, type SessionGuardErrorCode, type SessionGuardLimits, sessionGuardLimitsSchema, type SessionRole, sessionRoleSchema, } from "./contract.js";
+export { PROJECT_GUARD_FEATURE } from "./feature.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/session-guard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session-guard/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,KAAK,YAAY,EACjB,KAAK,6BAA6B,EAClC,mCAAmC,EACnC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,6BAA6B,EAClC,mCAAmC,EACnC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,kBAAkB,EAClB,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,yBAAyB,EACzB,4BAA4B,EAC5B,4BAA4B,EAC5B,8BAA8B,EAC9B,uBAAuB,EACvB,aAAa,EACb,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,WAAW,EAChB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}

package/dist/session-guard/index.js

@@ -0,0 +1,3 @@
+export { DEFAULT_SESSION_GUARD_LIMITS, PROJECT_GUARD_AGGREGATE_TYPE, projectGuardConfirmParametersSchema, projectGuardConfirmResultSchema, projectGuardPreviewParametersSchema, projectGuardPreviewResultSchema, projectGuardSchema, projectGuardShowParametersSchema, projectGuardShowResultSchema, SESSION_CREDENTIAL_VARIABLE, SESSION_GUARD_BOUNDS, SESSION_GUARD_ERROR_CODES, SESSION_GUARD_SCHEMA_VERSION, SESSION_NODE_ORIGIN_VARIABLE, SESSION_ROLE_DENIED_ERROR_CODE, SESSION_ROLE_OPERATIONS, SESSION_ROLES, sessionGuardLimitsSchema, sessionRoleSchema, } from "./contract.js";
+export { PROJECT_GUARD_FEATURE } from "./feature.js";
+//# sourceMappingURL=index.js.map

package/dist/session-guard/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session-guard/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAG5B,mCAAmC,EAEnC,+BAA+B,EAE/B,mCAAmC,EAEnC,+BAA+B,EAC/B,kBAAkB,EAElB,gCAAgC,EAEhC,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,yBAAyB,EACzB,4BAA4B,EAC5B,4BAA4B,EAC5B,8BAA8B,EAC9B,uBAAuB,EACvB,aAAa,EAGb,wBAAwB,EAExB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}

package/dist/session-guard/request-effect-schema.d.ts

@@ -0,0 +1,125 @@
+import * as Schema from "effect/Schema";
+export declare const SESSION_GUARD_SCHEMA_VERSION = "maia.session-guard/v1";
+/**
+ * What a Session may ask the Node with its own credential: a `worker` uses
+ * its own leases and context; an `orchestrator` may also create child
+ * Sessions in its Workspace, within the Project's guards.
+ */
+export declare const SESSION_ROLES: readonly ["orchestrator", "worker"];
+export declare const sessionRoleEffectSchema: Schema.Literals<readonly ["orchestrator", "worker"]>;
+/** Inclusive bounds of each guard; the Node never accepts a limit outside them. */
+export declare const SESSION_GUARD_BOUNDS: {
+    readonly maxDepth: {
+        readonly maximum: 4;
+        readonly minimum: 1;
+    };
+    readonly maxLeasesPerSession: {
+        readonly maximum: 64;
+        readonly minimum: 1;
+    };
+    readonly maxLiveChildren: {
+        readonly maximum: 64;
+        readonly minimum: 1;
+    };
+    readonly maxMessagesPerMinute: {
+        readonly maximum: 600;
+        readonly minimum: 1;
+    };
+};
+/**
+ * Defaults of a Project that set none: Sessions an operator creates sit at
+ * depth 1 and cannot create children until a person raises `maxDepth`.
+ */
+export declare const DEFAULT_SESSION_GUARD_LIMITS: {
+    readonly maxDepth: 1;
+    readonly maxLeasesPerSession: 8;
+    readonly maxLiveChildren: 8;
+    readonly maxMessagesPerMinute: 60;
+};
+export declare const sessionGuardLimitsEffectSchema: Schema.Struct<{
+    readonly maxDepth: Schema.Int;
+    readonly maxLeasesPerSession: Schema.Int;
+    readonly maxLiveChildren: Schema.Int;
+    readonly maxMessagesPerMinute: Schema.Int;
+}>;
+/** Revision `0` is the defaults of a Project that never set its guards. */
+export declare const projectGuardEffectSchema: Schema.Struct<{
+    readonly limits: Schema.Struct<{
+        readonly maxDepth: Schema.Int;
+        readonly maxLeasesPerSession: Schema.Int;
+        readonly maxLiveChildren: Schema.Int;
+        readonly maxMessagesPerMinute: Schema.Int;
+    }>;
+    readonly projectId: Schema.String;
+    readonly revision: Schema.String;
+    readonly schemaVersion: Schema.Literal<"maia.session-guard/v1">;
+    readonly source: Schema.Literals<readonly ["default", "project"]>;
+    readonly updatedAt: Schema.optional<Schema.String>;
+}>;
+export declare const projectGuardShowParametersEffectSchema: Schema.Struct<{
+    readonly projectId: Schema.String;
+}>;
+/** A person previews new limits, then confirms the exact preview: raising a guard is consequential. */
+export declare const projectGuardPreviewParametersEffectSchema: Schema.Struct<{
+    commandId: Schema.String;
+    expectedRevision: Schema.String;
+    limits: Schema.Struct<{
+        readonly maxDepth: Schema.Int;
+        readonly maxLeasesPerSession: Schema.Int;
+        readonly maxLiveChildren: Schema.Int;
+        readonly maxMessagesPerMinute: Schema.Int;
+    }>;
+    projectId: Schema.String;
+}>;
+export declare const projectGuardConfirmParametersEffectSchema: Schema.Struct<{
+    readonly commandId: Schema.String;
+    readonly expectedRevision: Schema.String;
+    readonly limits: Schema.Struct<{
+        readonly maxDepth: Schema.Int;
+        readonly maxLeasesPerSession: Schema.Int;
+        readonly maxLiveChildren: Schema.Int;
+        readonly maxMessagesPerMinute: Schema.Int;
+    }>;
+    readonly projectId: Schema.String;
+    readonly inputDigest: Schema.String;
+    readonly proof: Schema.String;
+}>;
+export declare const projectGuardRequestEffectSchema: Schema.Union<readonly [Schema.Struct<{
+    readonly method: Schema.Literal<"project.guard.show">;
+    readonly parameters: Schema.Struct<{
+        readonly projectId: Schema.String;
+    }>;
+}>, Schema.Struct<{
+    readonly method: Schema.Literal<"project.guard.preview">;
+    readonly parameters: Schema.Struct<{
+        commandId: Schema.String;
+        expectedRevision: Schema.String;
+        limits: Schema.Struct<{
+            readonly maxDepth: Schema.Int;
+            readonly maxLeasesPerSession: Schema.Int;
+            readonly maxLiveChildren: Schema.Int;
+            readonly maxMessagesPerMinute: Schema.Int;
+        }>;
+        projectId: Schema.String;
+    }>;
+}>, Schema.Struct<{
+    readonly method: Schema.Literal<"project.guard.confirm">;
+    readonly parameters: Schema.Struct<{
+        readonly commandId: Schema.String;
+        readonly expectedRevision: Schema.String;
+        readonly limits: Schema.Struct<{
+            readonly maxDepth: Schema.Int;
+            readonly maxLeasesPerSession: Schema.Int;
+            readonly maxLiveChildren: Schema.Int;
+            readonly maxMessagesPerMinute: Schema.Int;
+        }>;
+        readonly projectId: Schema.String;
+        readonly inputDigest: Schema.String;
+        readonly proof: Schema.String;
+    }>;
+}>]>;
+export declare const projectGuardConfirmationEffectFields: {
+    inputDigest: Schema.String;
+    proof: Schema.String;
+};
+//# sourceMappingURL=request-effect-schema.d.ts.map

package/dist/session-guard/request-effect-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-effect-schema.d.ts","sourceRoot":"","sources":["../../src/session-guard/request-effect-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAQxC,eAAO,MAAM,4BAA4B,0BAA0B,CAAC;AAEpE;;;;GAIG;AACH,eAAO,MAAM,aAAa,YAAI,cAAc,EAAE,QAAQ,CAAU,CAAC;AACjE,eAAO,MAAM,uBAAuB,sDAAiC,CAAC;AAEtE,mFAAmF;AACnF,eAAO,MAAM,oBAAoB;aAC/B,QAAQ;iBAAI,OAAO,EAAE,CAAC;iBAAE,OAAO,EAAE,CAAC;;aAClC,mBAAmB;iBAAI,OAAO,EAAE,EAAE;iBAAE,OAAO,EAAE,CAAC;;aAC9C,eAAe;iBAAI,OAAO,EAAE,EAAE;iBAAE,OAAO,EAAE,CAAC;;aAC1C,oBAAoB;iBAAI,OAAO,EAAE,GAAG;iBAAE,OAAO,EAAE,CAAC;;CACxC,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,4BAA4B;aACvC,QAAQ,EAAE,CAAC;aACX,mBAAmB,EAAE,CAAC;aACtB,eAAe,EAAE,CAAC;aAClB,oBAAoB,EAAE,EAAE;CAChB,CAAC;AAOX,eAAO,MAAM,8BAA8B;;;;;EAKzC,CAAC;AAEH,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;EAkBpC,CAAC;AAEF,eAAO,MAAM,sCAAsC;;EAEjD,CAAC;AAaH,uGAAuG;AACvG,eAAO,MAAM,yCAAyC;;;;;;;;;;EAAwB,CAAC;AAC/E,eAAO,MAAM,yCAAyC;;;;;;;;;;;;EAGpD,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAa1C,CAAC;AAEH,eAAO,MAAM,oCAAoC;;;CAAe,CAAC"}

package/dist/session-guard/request-effect-schema.js

@@ -0,0 +1,82 @@
+import * as Schema from "effect/Schema";
+import { aggregateRevisionEffectSchema, protocolIdentifierEffectSchema as id, recordedAtEffectSchema, } from "../envelope/effect-schema.js";
+export const SESSION_GUARD_SCHEMA_VERSION = "maia.session-guard/v1";
+/**
+ * What a Session may ask the Node with its own credential: a `worker` uses
+ * its own leases and context; an `orchestrator` may also create child
+ * Sessions in its Workspace, within the Project's guards.
+ */
+export const SESSION_ROLES = ["orchestrator", "worker"];
+export const sessionRoleEffectSchema = Schema.Literals(SESSION_ROLES);
+/** Inclusive bounds of each guard; the Node never accepts a limit outside them. */
+export const SESSION_GUARD_BOUNDS = {
+    maxDepth: { maximum: 4, minimum: 1 },
+    maxLeasesPerSession: { maximum: 64, minimum: 1 },
+    maxLiveChildren: { maximum: 64, minimum: 1 },
+    maxMessagesPerMinute: { maximum: 600, minimum: 1 },
+};
+/**
+ * Defaults of a Project that set none: Sessions an operator creates sit at
+ * depth 1 and cannot create children until a person raises `maxDepth`.
+ */
+export const DEFAULT_SESSION_GUARD_LIMITS = {
+    maxDepth: 1,
+    maxLeasesPerSession: 8,
+    maxLiveChildren: 8,
+    maxMessagesPerMinute: 60,
+};
+const bounded = (bounds) => Schema.Int.check(Schema.isBetween(bounds));
+export const sessionGuardLimitsEffectSchema = Schema.Struct({
+    maxDepth: bounded(SESSION_GUARD_BOUNDS.maxDepth),
+    maxLeasesPerSession: bounded(SESSION_GUARD_BOUNDS.maxLeasesPerSession),
+    maxLiveChildren: bounded(SESSION_GUARD_BOUNDS.maxLiveChildren),
+    maxMessagesPerMinute: bounded(SESSION_GUARD_BOUNDS.maxMessagesPerMinute),
+});
+/** Revision `0` is the defaults of a Project that never set its guards. */
+export const projectGuardEffectSchema = Schema.Struct({
+    limits: sessionGuardLimitsEffectSchema,
+    projectId: id,
+    revision: aggregateRevisionEffectSchema,
+    schemaVersion: Schema.Literal(SESSION_GUARD_SCHEMA_VERSION),
+    source: Schema.Literals(["default", "project"]),
+    updatedAt: Schema.optional(recordedAtEffectSchema),
+}).check(Schema.makeFilter((value) => value.source === "default"
+    ? value.revision === "0" && value.updatedAt === undefined
+    : value.revision !== "0" && value.updatedAt !== undefined, {
+    expected: "Project guards at revision 0 without updatedAt, or set guards with both",
+}));
+export const projectGuardShowParametersEffectSchema = Schema.Struct({
+    projectId: id,
+});
+const change = {
+    commandId: id,
+    expectedRevision: aggregateRevisionEffectSchema,
+    limits: sessionGuardLimitsEffectSchema,
+    projectId: id,
+};
+const confirmation = {
+    inputDigest: Schema.String.check(Schema.isPattern(/^sha256:[a-f0-9]{64}$/u)),
+    proof: Schema.String.check(Schema.isPattern(/^[A-Za-z0-9_-]{43}$/u)),
+};
+/** A person previews new limits, then confirms the exact preview: raising a guard is consequential. */
+export const projectGuardPreviewParametersEffectSchema = Schema.Struct(change);
+export const projectGuardConfirmParametersEffectSchema = Schema.Struct({
+    ...change,
+    ...confirmation,
+});
+export const projectGuardRequestEffectSchema = Schema.Union([
+    Schema.Struct({
+        method: Schema.Literal("project.guard.show"),
+        parameters: projectGuardShowParametersEffectSchema,
+    }),
+    Schema.Struct({
+        method: Schema.Literal("project.guard.preview"),
+        parameters: projectGuardPreviewParametersEffectSchema,
+    }),
+    Schema.Struct({
+        method: Schema.Literal("project.guard.confirm"),
+        parameters: projectGuardConfirmParametersEffectSchema,
+    }),
+]);
+export const projectGuardConfirmationEffectFields = confirmation;
+//# sourceMappingURL=request-effect-schema.js.map

package/dist/session-guard/request-effect-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-effect-schema.js","sourceRoot":"","sources":["../../src/session-guard/request-effect-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,IAAI,EAAE,EACpC,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AAEpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAU,CAAC;AACjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAEtE,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;IACpC,mBAAmB,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;IAChD,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;IAC5C,oBAAoB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE;CAC1C,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,CAAC;IACX,mBAAmB,EAAE,CAAC;IACtB,eAAe,EAAE,CAAC;IAClB,oBAAoB,EAAE,EAAE;CAChB,CAAC;AAEX,MAAM,OAAO,GAAG,CAAC,MAGhB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAEjD,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1D,QAAQ,EAAE,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC;IAChD,mBAAmB,EAAE,OAAO,CAAC,oBAAoB,CAAC,mBAAmB,CAAC;IACtE,eAAe,EAAE,OAAO,CAAC,oBAAoB,CAAC,eAAe,CAAC;IAC9D,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,CAAC;CACzE,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,8BAA8B;IACtC,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,6BAA6B;IACvC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,4BAA4B,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC;CACnD,CAAC,CAAC,KAAK,CACN,MAAM,CAAC,UAAU,CACf,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,SAAS;IACxB,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;IACzD,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAC7D;IACE,QAAQ,EACN,yEAAyE;CAC5E,CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAG,MAAM,CAAC,MAAM,CAAC;IAClE,SAAS,EAAE,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG;IACb,SAAS,EAAE,EAAE;IACb,gBAAgB,EAAE,6BAA6B;IAC/C,MAAM,EAAE,8BAA8B;IACtC,SAAS,EAAE,EAAE;CACd,CAAC;AACF,MAAM,YAAY,GAAG;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAC5E,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;CACrE,CAAC;AAEF,uGAAuG;AACvG,MAAM,CAAC,MAAM,yCAAyC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,yCAAyC,GAAG,MAAM,CAAC,MAAM,CAAC;IACrE,GAAG,MAAM;IACT,GAAG,YAAY;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,KAAK,CAAC;IAC1D,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAC5C,UAAU,EAAE,sCAAsC;KACnD,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC;QAC/C,UAAU,EAAE,yCAAyC;KACtD,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC;QAC/C,UAAU,EAAE,yCAAyC;KACtD,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,YAAY,CAAC"}