@msn-control/liftoff 0.10.3 → 0.11.1

package/dist/domain/governance/activation/approvals.js

@@ -0,0 +1,528 @@
+import { canonicalJson, canonicalSha256 } from './canonical-json.js';
+import { currentActivationIdentity } from './graph.js';
+import { githubRepositoryFromPushUrl, remoteRepository } from './inputs.js';
+const destinationTypes = new Set([
+    'repository',
+    'subscription',
+    'environment',
+    'tenant',
+    'local',
+    'external'
+]);
+const currencyPattern = /^[A-Z]{3}$/u;
+const hex64Pattern = /^[a-f0-9]{64}$/u;
+const isoLikePattern = /^\d{4}-\d{2}-\d{2}T/u;
+const activationIdentityProperties = {
+    liftoffVersion: { const: currentActivationIdentity.liftoffVersion },
+    manifestArtifactVersion: { const: currentActivationIdentity.manifestArtifactVersion },
+    policyVersion: { const: currentActivationIdentity.policyVersion },
+    activationContractVersion: { const: currentActivationIdentity.activationContractVersion },
+    phaseGraphSchemaVersion: { const: currentActivationIdentity.phaseGraphSchemaVersion },
+    phaseGraphHash: { const: currentActivationIdentity.phaseGraphHash },
+    activationStateSchemaVersion: { const: currentActivationIdentity.activationStateSchemaVersion },
+    evidenceHeaderSchemaVersion: { const: currentActivationIdentity.evidenceHeaderSchemaVersion },
+    approvalEnvelopeSchemaVersion: { const: currentActivationIdentity.approvalEnvelopeSchemaVersion },
+    supersessionSchemaVersion: { const: currentActivationIdentity.supersessionSchemaVersion },
+    credentialPolicySchemaVersion: { const: currentActivationIdentity.credentialPolicySchemaVersion }
+};
+export const approvalEnvelopeV2Schema = {
+    $schema: 'https://json-schema.org/draft/2020-12/schema',
+    $id: 'https://mission-control.local/liftoff/governance/approval-envelope.schema.v2.json',
+    title: 'Liftoff governance approval envelope v2',
+    type: 'object',
+    additionalProperties: false,
+    required: [
+        'schemaVersion',
+        'id',
+        'phaseId',
+        'gateKind',
+        'identity',
+        'baselineSha',
+        'planDigest',
+        'resources',
+        'destinations',
+        'permissions',
+        'costCeiling',
+        'policyExceptions',
+        'destructiveScope',
+        'expiresAt',
+        'approvedAt',
+        'approver'
+    ],
+    properties: {
+        schemaVersion: { const: currentActivationIdentity.approvalEnvelopeSchemaVersion },
+        id: { type: 'string', minLength: 1 },
+        phaseId: { type: 'string' },
+        gateKind: { type: 'string' },
+        identity: {
+            type: 'object',
+            additionalProperties: false,
+            required: Object.keys(activationIdentityProperties),
+            properties: activationIdentityProperties
+        },
+        baselineSha: { type: 'string', pattern: '^[a-f0-9]{64}$' },
+        planDigest: { type: 'string', pattern: '^[a-f0-9]{64}$' },
+        resources: {
+            type: 'array',
+            items: {
+                type: 'object',
+                additionalProperties: false,
+                required: ['type', 'identity'],
+                properties: {
+                    type: { type: 'string', minLength: 1 },
+                    identity: { type: 'string', minLength: 1 }
+                }
+            }
+        },
+        destinations: {
+            type: 'array',
+            items: {
+                type: 'object',
+                additionalProperties: false,
+                required: ['type', 'identity', 'repository', 'subscriptionId'],
+                properties: {
+                    type: { enum: ['repository', 'subscription', 'environment', 'tenant', 'local', 'external'] },
+                    identity: { type: 'string', minLength: 1 },
+                    repository: { type: ['string', 'null'] },
+                    subscriptionId: { type: ['string', 'null'] }
+                }
+            }
+        },
+        permissions: { type: 'array', items: { type: 'string', minLength: 1 } },
+        costCeiling: {
+            type: 'object',
+            additionalProperties: false,
+            required: ['currency', 'fixedMonthlyCents', 'usageMonthlyCents'],
+            properties: {
+                currency: { type: 'string', pattern: '^[A-Z]{3}$' },
+                fixedMonthlyCents: { type: 'integer', minimum: 0 },
+                usageMonthlyCents: { type: 'integer', minimum: 0 }
+            }
+        },
+        policyExceptions: { type: 'array', items: { type: 'string', minLength: 1 } },
+        destructiveScope: { type: 'array', items: { type: 'string', minLength: 1 } },
+        expiresAt: { type: 'string', format: 'date-time' },
+        approvedAt: { type: 'string', format: 'date-time' },
+        approver: { type: 'string', minLength: 1 }
+    }
+};
+/** @deprecated The current schema is v2. */
+export const approvalEnvelopeV1Schema = approvalEnvelopeV2Schema;
+function cleanString(value, path) {
+    if (typeof value !== 'string') {
+        throw new Error(`${path} must be a string.`);
+    }
+    const cleaned = value.trim();
+    if (cleaned.length === 0) {
+        throw new Error(`${path} must be a non-empty string.`);
+    }
+    return cleaned;
+}
+function sortedUnique(values, path, normalize, keyFor) {
+    const normalized = values.map((value, index) => normalize(value, index));
+    const seen = new Set();
+    for (const value of normalized) {
+        const key = keyFor(value);
+        if (seen.has(key)) {
+            throw new Error(`${path} must not contain duplicate ${key}.`);
+        }
+        seen.add(key);
+    }
+    return [...normalized].sort((left, right) => keyFor(left).localeCompare(keyFor(right), 'en'));
+}
+function normalizeResource(resource, index) {
+    return {
+        type: cleanString(resource.type, `approvalEnvelope.resources[${index}].type`).toLowerCase(),
+        identity: cleanString(resource.identity, `approvalEnvelope.resources[${index}].identity`)
+    };
+}
+function resourceKey(resource) {
+    return canonicalJson(resource);
+}
+function normalizeDestination(destination, index) {
+    if (!destinationTypes.has(destination.type)) {
+        throw new Error(`approvalEnvelope.destinations[${index}].type contains unsupported value ${JSON.stringify(destination.type)}.`);
+    }
+    return {
+        type: destination.type,
+        identity: cleanString(destination.identity, `approvalEnvelope.destinations[${index}].identity`),
+        repository: destination.repository === null
+            ? null
+            : cleanString(destination.repository, `approvalEnvelope.destinations[${index}].repository`),
+        subscriptionId: destination.subscriptionId === null
+            ? null
+            : cleanString(destination.subscriptionId, `approvalEnvelope.destinations[${index}].subscriptionId`)
+    };
+}
+function destinationKey(destination) {
+    return canonicalJson(destination);
+}
+function normalizePermission(permission, index) {
+    return cleanString(permission, `approvalEnvelope.permissions[${index}]`).toLowerCase();
+}
+function normalizePlainScope(scope, index, field) {
+    return cleanString(scope, `approvalEnvelope.${field}[${index}]`);
+}
+function identityDigest(identity) {
+    return canonicalSha256(identity);
+}
+function sameIdentity(left, right) {
+    return identityDigest(left) === identityDigest(right);
+}
+function digest(value, path) {
+    if (!hex64Pattern.test(value)) {
+        throw new Error(`${path} must be a SHA-256 hex digest.`);
+    }
+    return value;
+}
+function timestamp(value, path) {
+    if (!isoLikePattern.test(value) || Number.isNaN(Date.parse(value))) {
+        throw new Error(`${path} must be a valid ISO timestamp.`);
+    }
+    return value;
+}
+export function normalizeApprovalCostCeiling(cost) {
+    const currency = cleanString(cost.currency, 'approvalEnvelope.costCeiling.currency');
+    if (!currencyPattern.test(currency)) {
+        throw new Error('approvalEnvelope.costCeiling.currency must be a three-letter uppercase ISO currency code.');
+    }
+    for (const key of ['fixedMonthlyCents', 'usageMonthlyCents']) {
+        if (!Number.isSafeInteger(cost[key]) || cost[key] < 0) {
+            throw new Error(`approvalEnvelope.costCeiling.${key} must be a non-negative safe integer number of cents.`);
+        }
+    }
+    return {
+        currency,
+        fixedMonthlyCents: cost.fixedMonthlyCents,
+        usageMonthlyCents: cost.usageMonthlyCents
+    };
+}
+export function normalizeApprovalResources(resources) {
+    return sortedUnique(resources, 'approvalEnvelope.resources', normalizeResource, resourceKey);
+}
+export function normalizeApprovalDestinations(destinations) {
+    return sortedUnique(destinations, 'approvalEnvelope.destinations', normalizeDestination, destinationKey);
+}
+export function normalizeApprovalPermissions(permissions) {
+    return sortedUnique(permissions, 'approvalEnvelope.permissions', normalizePermission, (value) => value);
+}
+export function normalizeApprovalPolicyExceptions(exceptions) {
+    return sortedUnique(exceptions, 'approvalEnvelope.policyExceptions', (value, index) => normalizePlainScope(value, index, 'policyExceptions'), (value) => value);
+}
+export function normalizeApprovalDestructiveScope(scope) {
+    return sortedUnique(scope, 'approvalEnvelope.destructiveScope', (value, index) => normalizePlainScope(value, index, 'destructiveScope'), (value) => value);
+}
+export function normalizeApprovalScope(scope) {
+    return {
+        phaseId: scope.phaseId,
+        gateKind: scope.gateKind,
+        identity: scope.identity,
+        baselineSha: digest(scope.baselineSha, 'approvalEnvelope.baselineSha'),
+        planDigest: digest(scope.planDigest, 'approvalEnvelope.planDigest'),
+        resources: normalizeApprovalResources(scope.resources),
+        destinations: normalizeApprovalDestinations(scope.destinations),
+        permissions: normalizeApprovalPermissions(scope.permissions),
+        costCeiling: normalizeApprovalCostCeiling(scope.costCeiling),
+        policyExceptions: normalizeApprovalPolicyExceptions(scope.policyExceptions),
+        destructiveScope: normalizeApprovalDestructiveScope(scope.destructiveScope)
+    };
+}
+/**
+ * Authorization references also bind the authorization interval and approver.
+ */
+export function canonicalApprovalEnvelopeScope(envelope) {
+    const normalized = normalizeApprovalScope(envelope);
+    return {
+        schemaVersion: envelope.schemaVersion,
+        phaseId: normalized.phaseId,
+        gateKind: normalized.gateKind,
+        identity: normalized.identity,
+        baselineSha: normalized.baselineSha,
+        planDigest: normalized.planDigest,
+        resources: normalized.resources,
+        destinations: normalized.destinations,
+        permissions: normalized.permissions,
+        costCeiling: normalized.costCeiling,
+        policyExceptions: normalized.policyExceptions,
+        destructiveScope: normalized.destructiveScope,
+        expiresAt: timestamp(envelope.expiresAt, 'approvalEnvelope.expiresAt'),
+        approvedAt: timestamp(envelope.approvedAt, 'approvalEnvelope.approvedAt'),
+        approver: cleanString(envelope.approver, 'approvalEnvelope.approver')
+    };
+}
+export function canonicalApprovalEnvelopeHash(envelope) {
+    return canonicalSha256(canonicalApprovalEnvelopeScope(envelope));
+}
+export const approvalEnvelopeHash = canonicalApprovalEnvelopeHash;
+export function questionKindForApprovalGate(gateKind) {
+    switch (gateKind) {
+        case 'none':
+            return null;
+        case 'repository-publish':
+            return 'repository-creation-initial-commit-push';
+        case 'activation-plan':
+        case 'infrastructure-cost':
+            return 'billed-infrastructure-policy-exception-cost-ceiling';
+        case 'credential-enrollment':
+            return 'credential-enrollment';
+        case 'enforcement':
+            return 'final-enforcement';
+        case 'destructive-disposal':
+            return 'destructive-operation';
+        case 'external-blocker':
+            return 'external-blocker';
+    }
+}
+export function determineHumanAuthorityQuestion(plan) {
+    const normalized = normalizeApprovalScope(plan);
+    const questionKind = questionKindForApprovalGate(normalized.gateKind);
+    if (normalized.gateKind === 'none') {
+        const authorityReasons = [
+            ...(normalized.costCeiling.fixedMonthlyCents > 0 ? ['fixed monthly cost'] : []),
+            ...(normalized.costCeiling.usageMonthlyCents > 0 ? ['usage monthly cost'] : []),
+            ...(normalized.policyExceptions.length > 0 ? ['policy exception'] : []),
+            ...(normalized.destructiveScope.length > 0 ? ['destructive scope'] : [])
+        ];
+        if (authorityReasons.length > 0) {
+            throw new Error(`Approval gate none cannot request ${authorityReasons.join(', ')} authority.`);
+        }
+    }
+    if (normalized.destructiveScope.length > 0 && normalized.gateKind !== 'destructive-disposal') {
+        throw new Error('Destructive scope requires the destructive-disposal approval gate.');
+    }
+    if ((normalized.costCeiling.fixedMonthlyCents > 0 ||
+        normalized.costCeiling.usageMonthlyCents > 0 ||
+        normalized.policyExceptions.length > 0) &&
+        normalized.gateKind !== 'activation-plan' &&
+        normalized.gateKind !== 'infrastructure-cost') {
+        throw new Error('Cost ceilings and policy exceptions require an activation-plan or infrastructure-cost approval gate.');
+    }
+    return questionKind;
+}
+function containsAll(approved, requested, keyFor) {
+    const approvedKeys = new Set(approved.map((value) => keyFor(value)));
+    return requested.map((value) => keyFor(value)).filter((key) => !approvedKeys.has(key));
+}
+function expansionReasons(approved, requested) {
+    const reasons = [];
+    const resourceMisses = containsAll(approved.resources, requested.resources, resourceKey);
+    reasons.push(...resourceMisses.map((key) => `resource scope expanded: ${key.trim()}`));
+    const destinationMisses = containsAll(approved.destinations, requested.destinations, destinationKey);
+    reasons.push(...destinationMisses.map((key) => `destination scope expanded: ${key.trim()}`));
+    const permissionMisses = containsAll(approved.permissions, requested.permissions, (value) => value);
+    reasons.push(...permissionMisses.map((permission) => `permission scope expanded: ${permission}`));
+    if (approved.costCeiling.currency !== requested.costCeiling.currency) {
+        reasons.push(`cost currency changed from ${approved.costCeiling.currency} to ${requested.costCeiling.currency}`);
+    }
+    else {
+        if (requested.costCeiling.fixedMonthlyCents > approved.costCeiling.fixedMonthlyCents) {
+            reasons.push(`fixed monthly cost ceiling increased from ${approved.costCeiling.fixedMonthlyCents} to ${requested.costCeiling.fixedMonthlyCents} ${approved.costCeiling.currency} cents`);
+        }
+        if (requested.costCeiling.usageMonthlyCents > approved.costCeiling.usageMonthlyCents) {
+            reasons.push(`usage monthly cost ceiling increased from ${approved.costCeiling.usageMonthlyCents} to ${requested.costCeiling.usageMonthlyCents} ${approved.costCeiling.currency} cents`);
+        }
+    }
+    const exceptionMisses = containsAll(approved.policyExceptions, requested.policyExceptions, (value) => value);
+    reasons.push(...exceptionMisses.map((exception) => `policy exception added: ${exception}`));
+    const destructiveMisses = containsAll(approved.destructiveScope, requested.destructiveScope, (value) => value);
+    reasons.push(...destructiveMisses.map((scope) => `destructive scope expanded: ${scope}`));
+    return reasons;
+}
+function invalidationReasons(approved, requested) {
+    const reasons = [];
+    if (!sameIdentity(approved.identity, requested.identity)) {
+        reasons.push('activation identity changed');
+    }
+    if (approved.phaseId !== requested.phaseId) {
+        reasons.push(`phase changed from ${approved.phaseId} to ${requested.phaseId}`);
+    }
+    if (approved.gateKind !== requested.gateKind) {
+        reasons.push(`approval gate changed from ${approved.gateKind} to ${requested.gateKind}`);
+    }
+    if (approved.baselineSha !== requested.baselineSha) {
+        reasons.push('baseline SHA changed');
+    }
+    if (approved.planDigest !== requested.planDigest) {
+        reasons.push('plan authority digest changed');
+    }
+    return reasons;
+}
+function noApprovalRequired(plan) {
+    return {
+        phaseId: plan.phaseId,
+        gateKind: plan.gateKind,
+        questionKind: null,
+        approvalRequired: false,
+        status: 'not-required',
+        envelopeId: null,
+        envelopeHash: null,
+        reasons: ['approval gate is none'],
+        expansionReasons: []
+    };
+}
+export function evaluateApprovalForTransitionPlan(plan, envelopes, options = {}) {
+    const requested = normalizeApprovalScope(plan);
+    const questionKind = determineHumanAuthorityQuestion(requested);
+    if (questionKind === null) {
+        return noApprovalRequired(requested);
+    }
+    const now = options.now ?? new Date();
+    const candidates = envelopes.filter((envelope) => envelope.phaseId === requested.phaseId || envelope.gateKind === requested.gateKind);
+    if (candidates.length === 0) {
+        return {
+            phaseId: requested.phaseId,
+            gateKind: requested.gateKind,
+            questionKind,
+            approvalRequired: true,
+            status: 'approval-required',
+            envelopeId: null,
+            envelopeHash: null,
+            reasons: [`no approval envelope exists for ${requested.phaseId} (${requested.gateKind})`],
+            expansionReasons: []
+        };
+    }
+    let best = null;
+    for (const envelope of candidates) {
+        const approvedAt = Date.parse(envelope.approvedAt);
+        const expiresAt = Date.parse(envelope.expiresAt);
+        if (!Number.isFinite(approvedAt) || !Number.isFinite(expiresAt) ||
+            approvedAt >= expiresAt || approvedAt > now.getTime() || expiresAt <= now.getTime()) {
+            best ??= {
+                phaseId: requested.phaseId, gateKind: requested.gateKind, questionKind,
+                approvalRequired: true, status: 'expired', envelopeId: envelope.id, envelopeHash: null,
+                reasons: [`Approval ${envelope.id} requires a valid approvedAt <= now < expiresAt interval.`],
+                expansionReasons: []
+            };
+            continue;
+        }
+        const approved = normalizeApprovalScope(envelope);
+        const hash = canonicalApprovalEnvelopeHash(envelope);
+        const reasons = invalidationReasons(approved, requested);
+        const expansions = expansionReasons(approved, requested);
+        if (Date.parse(envelope.expiresAt) <= now.getTime()) {
+            const expired = {
+                phaseId: requested.phaseId,
+                gateKind: requested.gateKind,
+                questionKind,
+                approvalRequired: true,
+                status: 'expired',
+                envelopeId: envelope.id,
+                envelopeHash: hash,
+                reasons: [`approval envelope ${envelope.id} expired at ${envelope.expiresAt}`],
+                expansionReasons: []
+            };
+            best ??= expired;
+            continue;
+        }
+        if (reasons.length === 0 && expansions.length === 0) {
+            return {
+                phaseId: requested.phaseId,
+                gateKind: requested.gateKind,
+                questionKind,
+                approvalRequired: false,
+                status: 'reused',
+                envelopeId: envelope.id,
+                envelopeHash: hash,
+                reasons: [`approval envelope ${envelope.id} covers the requested transition scope`],
+                expansionReasons: []
+            };
+        }
+        const invalidated = {
+            phaseId: requested.phaseId,
+            gateKind: requested.gateKind,
+            questionKind,
+            approvalRequired: true,
+            status: expansions.length > 0 ? 'approval-required' : 'invalidated',
+            envelopeId: envelope.id,
+            envelopeHash: hash,
+            reasons: [...reasons, ...expansions],
+            expansionReasons: expansions
+        };
+        if (best === null ||
+            (best.status === 'expired' && invalidated.status !== 'expired') ||
+            invalidated.reasons.length < best.reasons.length) {
+            best = invalidated;
+        }
+    }
+    return best ?? {
+        phaseId: requested.phaseId,
+        gateKind: requested.gateKind,
+        questionKind,
+        approvalRequired: true,
+        status: 'approval-required',
+        envelopeId: null,
+        envelopeHash: null,
+        reasons: ['approval is required'],
+        expansionReasons: []
+    };
+}
+function destinationsForPhase(phase, state, publicationDestination) {
+    const destinations = new Map();
+    for (const mutation of [...phase.allowedMutations.local, ...phase.allowedMutations.remote]) {
+        if (mutation === 'none' || mutation === 'read-worktree') {
+            continue;
+        }
+        if (mutation.startsWith('git-') || mutation.startsWith('github-')) {
+            if (phase.id === 'committed') {
+                destinations.set('local', { type: 'local', identity: state.repository.id, repository: null, subscriptionId: null });
+                continue;
+            }
+            destinations.set('repository', {
+                type: 'repository',
+                identity: phase.id === 'pushed' && publicationDestination ? publicationDestination : remoteRepository(state).name,
+                repository: phase.id === 'pushed' && publicationDestination ? githubRepositoryFromPushUrl(publicationDestination) : remoteRepository(state).name,
+                subscriptionId: null
+            });
+        }
+        else if (mutation.startsWith('azure-')) {
+            destinations.set('subscription', {
+                type: 'subscription',
+                identity: 'phase-0-discovered-subscription',
+                repository: null,
+                subscriptionId: 'phase-0-discovered-subscription'
+            });
+        }
+        else {
+            destinations.set('local', {
+                type: 'local',
+                identity: state.repository.id,
+                repository: null,
+                subscriptionId: null
+            });
+        }
+    }
+    return [...destinations.values()];
+}
+export function transitionPlanForPhase(phase, state, transition, _projectRoot, publicationDestination) {
+    const mutations = [...phase.allowedMutations.local, ...phase.allowedMutations.remote]
+        .filter((mutation) => mutation !== 'none');
+    return normalizeApprovalScope({
+        phaseId: phase.id,
+        gateKind: phase.approvalGate.kind,
+        identity: state.identity,
+        baselineSha: transition.baselineSha,
+        planDigest: canonicalSha256({
+            phaseId: phase.id,
+            gateKind: phase.approvalGate.kind,
+            transitionDigest: transition.transitionDigest,
+            allowedMutations: phase.allowedMutations
+        }),
+        resources: mutations.map((mutation) => ({
+            type: mutation,
+            identity: `${phase.id}:${mutation}`
+        })),
+        destinations: destinationsForPhase(phase, state, publicationDestination),
+        permissions: mutations,
+        costCeiling: {
+            currency: 'USD',
+            fixedMonthlyCents: 0,
+            usageMonthlyCents: 0
+        },
+        policyExceptions: [],
+        destructiveScope: phase.approvalGate.kind === 'destructive-disposal'
+            ? [...(state.bootstrapState?.encryptedStatePathParts ?? []), ...(state.bootstrapState?.encryptionKeyPathParts ?? [])]
+                .map((parts) => parts.join('/'))
+            : []
+    });
+}
+//# sourceMappingURL=approvals.js.map

package/dist/domain/governance/activation/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../../../../src/domain/governance/activation/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAmB5E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAmC;IACjE,YAAY;IACZ,cAAc;IACd,aAAa;IACb,QAAQ;IACR,OAAO;IACP,UAAU;CACX,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAE9C,MAAM,4BAA4B,GAAG;IACnC,cAAc,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,cAAc,EAAE;IACnE,uBAAuB,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,uBAAuB,EAAE;IACrF,aAAa,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,aAAa,EAAE;IACjE,yBAAyB,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,yBAAyB,EAAE;IACzF,uBAAuB,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,uBAAuB,EAAE;IACrF,cAAc,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,cAAc,EAAE;IACnE,4BAA4B,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,4BAA4B,EAAE;IAC/F,2BAA2B,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,2BAA2B,EAAE;IAC7F,6BAA6B,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,6BAA6B,EAAE;IACjG,yBAAyB,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,yBAAyB,EAAE;IACzF,6BAA6B,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,6BAA6B,EAAE;CAChE,CAAC;AAEpC,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,OAAO,EAAE,8CAA8C;IACvD,GAAG,EAAE,mFAAmF;IACxF,KAAK,EAAE,yCAAyC;IAChD,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE;QACR,eAAe;QACf,IAAI;QACJ,SAAS;QACT,UAAU;QACV,UAAU;QACV,aAAa;QACb,YAAY;QACZ,WAAW;QACX,cAAc;QACd,aAAa;QACb,aAAa;QACb,kBAAkB;QAClB,kBAAkB;QAClB,WAAW;QACX,YAAY;QACZ,UAAU;KACX;IACD,UAAU,EAAE;QACV,aAAa,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,6BAA6B,EAAE;QACjF,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACpC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5B,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC;YACnD,UAAU,EAAE,4BAA4B;SACzC;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;QAC1D,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;QACzD,SAAS,EAAE;YACT,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;gBAC9B,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;oBACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;iBAC3C;aACF;SACF;QACD,YAAY,EAAE;YACZ,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,CAAC;gBAC9D,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE;oBAC5F,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;oBAC1C,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACxC,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;iBAC7C;aACF;SACF;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;QACvE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,CAAC;YAChE,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;gBACnD,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;gBAClD,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;aACnD;SACF;QACD,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;QAC5E,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;QAC5E,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;QAClD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;QACnD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;KAC3C;CACO,CAAC;AAEX,4CAA4C;AAC5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAEjE,SAAS,WAAW,CAAC,KAAa,EAAE,IAAY;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CACnB,MAAoB,EACpB,IAAY,EACZ,SAAyC,EACzC,MAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+BAA+B,GAAG,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA+B,EAAE,KAAa;IACvE,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,8BAA8B,KAAK,QAAQ,CAAC,CAAC,WAAW,EAAE;QAC3F,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,KAAK,YAAY,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,QAA+B;IAClD,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAqC,EAAE,KAAa;IAChF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,qCAAqC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClI,CAAC;IACD,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,iCAAiC,KAAK,YAAY,CAAC;QAC/F,UAAU,EAAE,WAAW,CAAC,UAAU,KAAK,IAAI;YACzC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,EAAE,iCAAiC,KAAK,cAAc,CAAC;QAC7F,cAAc,EAAE,WAAW,CAAC,cAAc,KAAK,IAAI;YACjD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,cAAc,EAAE,iCAAiC,KAAK,kBAAkB,CAAC;KACtG,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,WAAqC;IAC3D,OAAO,aAAa,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB,EAAE,KAAa;IAC5D,OAAO,WAAW,CAAC,UAAU,EAAE,gCAAgC,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAa,EAAE,KAA8C;IACvG,OAAO,WAAW,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,QAA4B;IAClD,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB,EAAE,KAAyB;IACvE,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,IAAY;IACzC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,IAAY;IAC5C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAyB;IACpE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC;IACrF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;IAC/G,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,CAAU,EAAE,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,uDAAuD,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IACD,OAAO;QACL,QAAQ;QACR,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,SAA2C;IACpF,OAAO,YAAY,CAAC,SAAS,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,YAAiD;IAC7F,OAAO,YAAY,CAAC,YAAY,EAAE,+BAA+B,EAAE,oBAAoB,EAAE,cAAc,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,WAA8B;IACzE,OAAO,YAAY,CAAC,WAAW,EAAE,8BAA8B,EAAE,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,UAA6B;IAC7E,OAAO,YAAY,CACjB,UAAU,EACV,mCAAmC,EACnC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,kBAAkB,CAAC,EACvE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAwB;IACxE,OAAO,YAAY,CACjB,KAAK,EACL,mCAAmC,EACnC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,kBAAkB,CAAC,EACvE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IACzD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,8BAA8B,CAAC;QACtE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,6BAA6B,CAAC;QACnE,SAAS,EAAE,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC;QACtD,YAAY,EAAE,6BAA6B,CAAC,KAAK,CAAC,YAAY,CAAC;QAC/D,WAAW,EAAE,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC;QAC5D,WAAW,EAAE,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC;QAC5D,gBAAgB,EAAE,iCAAiC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC3E,gBAAgB,EAAE,iCAAiC,CAAC,KAAK,CAAC,gBAAgB,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAAC,QAA0B;IACvE,MAAM,UAAU,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,4BAA4B,CAAC;QACtE,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;QACzE,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAA0B;IACtE,OAAO,eAAe,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAElE,MAAM,UAAU,2BAA2B,CAAC,QAA0B;IACpE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,oBAAoB;YACvB,OAAO,yCAAyC,CAAC;QACnD,KAAK,iBAAiB,CAAC;QACvB,KAAK,qBAAqB;YACxB,OAAO,qDAAqD,CAAC;QAC/D,KAAK,uBAAuB;YAC1B,OAAO,uBAAuB,CAAC;QACjC,KAAK,aAAa;YAChB,OAAO,mBAAmB,CAAC;QAC7B,KAAK,sBAAsB;YACzB,OAAO,uBAAuB,CAAC;QACjC,KAAK,kBAAkB;YACrB,OAAO,kBAAkB,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,IAA6B;IAC3E,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,2BAA2B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtE,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACnC,MAAM,gBAAgB,GAAG;YACvB,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC;QACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,qCAAqC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,IACE,CAAC,UAAU,CAAC,WAAW,CAAC,iBAAiB,GAAG,CAAC;QAC3C,UAAU,CAAC,WAAW,CAAC,iBAAiB,GAAG,CAAC;QAC5C,UAAU,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;QACzC,UAAU,CAAC,QAAQ,KAAK,iBAAiB;QACzC,UAAU,CAAC,QAAQ,KAAK,qBAAqB,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAI,QAAsB,EAAE,SAAuB,EAAE,MAA4B;IACnG,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAiC,EAAE,SAAkC;IAC7F,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzF,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,4BAA4B,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACvF,MAAM,iBAAiB,GAAG,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACrG,OAAO,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,+BAA+B,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7F,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACpG,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,8BAA8B,UAAU,EAAE,CAAC,CAAC,CAAC;IAClG,IAAI,QAAQ,CAAC,WAAW,CAAC,QAAQ,KAAK,SAAS,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,8BAA8B,QAAQ,CAAC,WAAW,CAAC,QAAQ,OAAO,SAAS,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnH,CAAC;SAAM,CAAC;QACN,IAAI,SAAS,CAAC,WAAW,CAAC,iBAAiB,GAAG,QAAQ,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,6CAA6C,QAAQ,CAAC,WAAW,CAAC,iBAAiB,OAAO,SAAS,CAAC,WAAW,CAAC,iBAAiB,IAAI,QAAQ,CAAC,WAAW,CAAC,QAAQ,QAAQ,CAAC,CAAC;QAC3L,CAAC;QACD,IAAI,SAAS,CAAC,WAAW,CAAC,iBAAiB,GAAG,QAAQ,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,6CAA6C,QAAQ,CAAC,WAAW,CAAC,iBAAiB,OAAO,SAAS,CAAC,WAAW,CAAC,iBAAiB,IAAI,QAAQ,CAAC,WAAW,CAAC,QAAQ,QAAQ,CAAC,CAAC;QAC3L,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC7G,OAAO,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,iBAAiB,GAAG,WAAW,CAAC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC/G,OAAO,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAiC,EAAE,SAAkC;IAChG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,OAAO,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,8BAA8B,QAAQ,CAAC,QAAQ,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA6B;IACvD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,KAAK;QACvB,MAAM,EAAE,cAAc;QACtB,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,gBAAgB,EAAE,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,IAA6B,EAC7B,SAAsC,EACtC,OAAO,GAAmB,EAAE;IAE5B,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC/C,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CACnF,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY;YACZ,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,CAAC,mCAAmC,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,QAAQ,GAAG,CAAC;YACzF,gBAAgB,EAAE,EAAE;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,GAA8B,IAAI,CAAC;IAC3C,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC7D,UAAU,IAAI,SAAS,IAAI,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACtF,IAAI,KAAK;gBACP,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,YAAY;gBACtE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI;gBACtF,OAAO,EAAE,CAAC,YAAY,QAAQ,CAAC,EAAE,2DAA2D,CAAC;gBAC7F,gBAAgB,EAAE,EAAE;aACrB,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,OAAO,GAAuB;gBAClC,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,YAAY;gBACZ,gBAAgB,EAAE,IAAI;gBACtB,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,YAAY,EAAE,IAAI;gBAClB,OAAO,EAAE,CAAC,qBAAqB,QAAQ,CAAC,EAAE,eAAe,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC9E,gBAAgB,EAAE,EAAE;aACrB,CAAC;YACF,IAAI,KAAK,OAAO,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,YAAY;gBACZ,gBAAgB,EAAE,KAAK;gBACvB,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,YAAY,EAAE,IAAI;gBAClB,OAAO,EAAE,CAAC,qBAAqB,QAAQ,CAAC,EAAE,wCAAwC,CAAC;gBACnF,gBAAgB,EAAE,EAAE;aACrB,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAuB;YACtC,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY;YACZ,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa;YACnE,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC;YACpC,gBAAgB,EAAE,UAAU;SAC7B,CAAC;QACF,IACE,IAAI,KAAK,IAAI;YACb,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC;YAC/D,WAAW,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAChD,CAAC;YACD,IAAI,GAAG,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,IAAI;QACb,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,YAAY;QACZ,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,mBAAmB;QAC3B,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,CAAC,sBAAsB,CAAC;QACjC,gBAAgB,EAAE,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAqB,EACrB,KAA0B,EAC1B,sBAA+B;IAE/B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoC,CAAC;IACjE,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3F,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAClE,IAAI,KAAK,CAAC,EAAE,KAAK,WAAW,EAAE,CAAC;gBAC7B,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpH,SAAS;YACX,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE;gBAC7B,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI;gBACjH,UAAU,EAAE,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,sBAAsB,CAAC,CAAC,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI;gBAChJ,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE;gBAC/B,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,iCAAiC;gBAC3C,UAAU,EAAE,IAAI;gBAChB,cAAc,EAAE,iCAAiC;aAClD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE;gBACxB,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;gBAC7B,UAAU,EAAE,IAAI;gBAChB,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAqB,EACrB,KAA0B,EAC1B,UAAsC,EACtC,YAAqB,EACrB,sBAA+B;IAE/B,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;SAClF,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAC7C,OAAO,sBAAsB,CAAC;QAC5B,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,UAAU,EAAE,eAAe,CAAC;YAC1B,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI;YACjC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;YAC7C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC;QACF,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,QAAQ,EAAE;SACpC,CAAC,CAAC;QACH,YAAY,EAAE,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,sBAAsB,CAAC;QACxE,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE;YACX,QAAQ,EAAE,KAAK;YACf,iBAAiB,EAAE,CAAC;YACpB,iBAAiB,EAAE,CAAC;SACrB;QACD,gBAAgB,EAAE,EAAE;QACpB,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,sBAAsB;YAClE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,uBAAuB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC;iBAClH,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC,CAAC,EAAE;KACP,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/governance/activation/canonical-json.d.ts

@@ -0,0 +1,4 @@
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export declare function canonicalJson(value: unknown): string;
+export declare function sha256Hex(value: string): string;
+export declare function canonicalSha256(value: unknown): string;

package/dist/domain/governance/activation/canonical-json.js

@@ -0,0 +1,39 @@
+import { createHash } from 'node:crypto';
+export function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function canonicalValue(value) {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean') {
+        return value;
+    }
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value)) {
+            throw new Error('Canonical JSON cannot encode non-finite numbers.');
+        }
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => canonicalValue(entry));
+    }
+    if (typeof value === 'object') {
+        const record = value;
+        return Object.fromEntries(Object.keys(record).sort().map((key) => {
+            const entry = record[key];
+            if (entry === undefined) {
+                throw new Error(`Canonical JSON cannot encode undefined field ${key}.`);
+            }
+            return [key, canonicalValue(entry)];
+        }));
+    }
+    throw new Error(`Canonical JSON cannot encode ${typeof value}.`);
+}
+export function canonicalJson(value) {
+    return `${JSON.stringify(canonicalValue(value))}\n`;
+}
+export function sha256Hex(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+export function canonicalSha256(value) {
+    return sha256Hex(canonicalJson(value));
+}
+//# sourceMappingURL=canonical-json.js.map

package/dist/domain/governance/activation/canonical-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../../../../src/domain/governance/activation/canonical-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,gDAAgD,GAAG,GAAG,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,KAAK,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/domain/governance/activation/capabilities.d.ts

@@ -0,0 +1,7 @@
+import type { PhaseId } from './types.js';
+export interface PhaseCapability {
+    executor: 'built-in' | 'injected-only' | 'unavailable';
+    retry: 'explicit-local' | 'none';
+    blocker?: string;
+}
+export declare const phaseCapabilities: Readonly<Record<PhaseId, PhaseCapability>>;

package/dist/domain/governance/activation/capabilities.js

@@ -0,0 +1,33 @@
+const builtIn = { executor: 'built-in', retry: 'none' };
+const local = { executor: 'built-in', retry: 'explicit-local' };
+const unavailable = { executor: 'unavailable', retry: 'none', blocker: 'No production executor is available.' };
+const injected = { executor: 'injected-only', retry: 'none', blocker: 'An explicit GitHub ruleset adapter is required; no production adapter is configured.' };
+export const phaseCapabilities = {
+    'seed-valid': local,
+    'seed-verified': local,
+    'seed-archived': local,
+    committed: builtIn,
+    pushed: builtIn,
+    'phase-0-complete': builtIn,
+    'activation-approved': { ...builtIn, blocker: 'Public approval persistence is unavailable; this authority gate cannot be entered through the CLI.' },
+    'credential-ready': { ...builtIn, blocker: 'Independent credential readback and public credential enrollment are unavailable.' },
+    'provider-ready': unavailable,
+    'state-path-selected': unavailable,
+    'existing-private-path': unavailable,
+    'bootstrap-local': unavailable,
+    'runner-ready': unavailable,
+    'private-backend-proof': unavailable,
+    'remote-import-verified': unavailable,
+    'remote-ready': builtIn,
+    'application-foundation': unavailable,
+    'workflow-source-ready': unavailable,
+    'dev-proof': unavailable,
+    'staging-qualified': unavailable,
+    'production-rehearsed': unavailable,
+    'green-red-proof': unavailable,
+    'enforcement-approved': unavailable,
+    'rulesets-applied': injected,
+    'live-readback': injected,
+    'bootstrap-state-disposed': builtIn
+};
+//# sourceMappingURL=capabilities.js.map