@neuralis/brain-core 0.3.2 → 0.4.0

package/dist/src/services/baselineRepair.d.ts

@@ -24,7 +24,7 @@
  * REPLACES the whole persisted floor class with what its `trustedBaselines`
  * argument names — it does not merge. Reconciling a `data` source against the
  * connector floors alone (the `local` connector declares none) would therefore
- * DELETE the eight `floor:true` rules agent-core declares, silently (this repair
+ * DELETE the nine `floor:true` rules agent-core declares, silently (this repair
  * is `void`-fired and its catch only warns) and persistently. The two sources:
  *
  *   1. scheme-keyed MANIFEST `uriPolicies` (`data`/`packages` only — four
@@ -56,8 +56,18 @@ import type { SourceConfigPort } from '../connectors/types.js';
  * the manifest edit reaches new sources only and every existing deployment
  * stays open. A bump also re-runs the non-floor baseline UNION, and
  * `mergeBaselines` does not dedupe: expect every manifest path row to appear
- * twice in the persisted config. That is by design — evaluation is order- and
- * duplicate-insensitive for these rows — do not "fix" it here.
+ * twice in the persisted config. A duplicate of a manifest row is harmless, but
+ * the last row declaring a bit decides: a bump re-appends every manifest row
+ * AFTER the stored subject-scoped grant rows (agent attach rows, conversation
+ * widenings) and revokes them. A bump therefore ships WITH an offline step that
+ * re-appends those rows after the union (the `source-uri-subject-v1` shape) —
+ * never a dedupe here, do not "fix" it in this file.
+ *
+ * A row whose SUBJECT changes is not a bump: the stored owner/admin rows took
+ * `priority: 2` (the caller's role priority, admin or stronger) from the
+ * offline `source-uri-subject-v1` upgrade
+ * (`brain-core/source-config` v6), which rewrites rows in place instead of
+ * appending the manifest rows a second time over hand-made edits.
  */
 export declare const SOURCE_BASELINE_REPAIR_VERSION = 5;
 export type BaselineRepairResult = {

package/dist/src/services/baselineRepair.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"baselineRepair.d.ts","sourceRoot":"","sources":["../../../src/services/baselineRepair.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAKH,OAAO,KAAK,EACV,gCAAgC,EAChC,uBAAuB,EACxB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,MAAM,MAAM,oBAAoB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzE,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,aAAa,EAAE,gBAAgB,CAAC;IAChC,qBAAqB,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC,CAAC;IAC9F;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,uBAAuB,EAAE,CAAC;IAChE,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,CAAC;CACzI,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAyEhC;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD,MAAM,MAAM,qBAAqB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAI3F,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,aAAa,EAAE,gBAAgB,CAAC;IAChC;;;;;;OAMG;IACH,oBAAoB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,CAAC;CACzI,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA2FjC"}
+{"version":3,"file":"baselineRepair.d.ts","sourceRoot":"","sources":["../../../src/services/baselineRepair.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAKH,OAAO,KAAK,EACV,gCAAgC,EAChC,uBAAuB,EACxB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,MAAM,MAAM,oBAAoB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzE,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,aAAa,EAAE,gBAAgB,CAAC;IAChC,qBAAqB,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC,CAAC;IAC9F;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,uBAAuB,EAAE,CAAC;IAChE,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,CAAC;CACzI,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAyEhC;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD,MAAM,MAAM,qBAAqB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAI3F,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,aAAa,EAAE,gBAAgB,CAAC;IAChC;;;;;;OAMG;IACH,oBAAoB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,CAAC;CACzI,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA2FjC"}

package/dist/src/services/baselineRepair.js

@@ -24,7 +24,7 @@
  * REPLACES the whole persisted floor class with what its `trustedBaselines`
  * argument names — it does not merge. Reconciling a `data` source against the
  * connector floors alone (the `local` connector declares none) would therefore
- * DELETE the eight `floor:true` rules agent-core declares, silently (this repair
+ * DELETE the nine `floor:true` rules agent-core declares, silently (this repair
  * is `void`-fired and its catch only warns) and persistently. The two sources:
  *
  *   1. scheme-keyed MANIFEST `uriPolicies` (`data`/`packages` only — four
@@ -55,8 +55,18 @@ import { applyTrustedSourceBaselines, } from '@neuralis/package-system/policies'
  * the manifest edit reaches new sources only and every existing deployment
  * stays open. A bump also re-runs the non-floor baseline UNION, and
  * `mergeBaselines` does not dedupe: expect every manifest path row to appear
- * twice in the persisted config. That is by design — evaluation is order- and
- * duplicate-insensitive for these rows — do not "fix" it here.
+ * twice in the persisted config. A duplicate of a manifest row is harmless, but
+ * the last row declaring a bit decides: a bump re-appends every manifest row
+ * AFTER the stored subject-scoped grant rows (agent attach rows, conversation
+ * widenings) and revokes them. A bump therefore ships WITH an offline step that
+ * re-appends those rows after the union (the `source-uri-subject-v1` shape) —
+ * never a dedupe here, do not "fix" it in this file.
+ *
+ * A row whose SUBJECT changes is not a bump: the stored owner/admin rows took
+ * `priority: 2` (the caller's role priority, admin or stronger) from the
+ * offline `source-uri-subject-v1` upgrade
+ * (`brain-core/source-config` v6), which rewrites rows in place instead of
+ * appending the manifest rows a second time over hand-made edits.
  */
 export const SOURCE_BASELINE_REPAIR_VERSION = 5;
 export async function repairSourceBaselines(deps) {

package/dist/src/services/baselineRepair.js.map

@@ -1 +1 @@
-{"version":3,"file":"baselineRepair.js","sourceRoot":"","sources":["../../../src/services/baselineRepair.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EACL,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAQ3C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAIhD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAiB3C;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;IACzC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE;YACrD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACvC,kEAAkE;QAClE,6EAA6E;QAC7E,IAAI,eAAe,GAA8B,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,wEAAwE;YACxE,2EAA2E;YAC3E,qBAAqB;YACrB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,+DAA+D,EAAE;gBACnF,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,2BAA2B,CAAC;gBAC1C,WAAW,EAAE,MAAM,CAAC,WAA0D;gBAC9E,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,kBAAkB,EAAE,GAAG;gBACvB,eAAe;gBACf,cAAc,EAAE,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,CAAC,GAAG,8BAA8B;aACrF,CAAC,CAAC;YACH,oEAAoE;YACpE,yEAAyE;YACzE,yEAAyE;YACzE,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE;gBACrC,GAAG,MAAM;gBACT,WAAW,EAAE,OAAO,CAAC,WAAiD;gBACtE,uEAAuE;gBACvE,6DAA6D;gBAC7D,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,EAAE,8BAA8B,CAAC;gBAClG,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,mCAAmC,EAAE;gBACvD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,gCAAgC,EAAE;YACpD,OAAO,EAAE,8BAA8B;YACvC,QAAQ;YACR,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAMlD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAW5C;IACC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,mCAAmC,EAAE;YACvD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,CAAC,IAAI,gCAAgC,EAAE,CAAC;YAC7E,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,cAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,cAAc,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,sDAAsD,EAAE;gBAC1E,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,0EAA0E;YAC1E,0EAA0E;YAC1E,0EAA0E;YAC1E,2EAA2E;YAC3E,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,WAA0D,CAAC;QACtF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAqC,EAAE,GAAG,WAAW,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,CAAC,GAA8B,EAAiB,EAAE;YACjE,IAAI,GAAG,EAAE,IAAI,KAAK,SAAS;gBAAE,OAAO,GAAG,IAAI,CAAC;YAC5C,mEAAmE;YACnE,OAAO,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACxE,CAAC,CAAC;QAEF,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzG,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,GAAG;gBACZ,GAAG,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC7B,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;gBAC1C,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;aAC3C,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,+DAA+D;QAE/D,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAA0C,CAAC,CAAC;YAC7E,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,mCAAmC,EAAE;oBACvD,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oBACxB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,qCAAqC,EAAE;gBACzD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,kCAAkC,EAAE;YACtD,OAAO,EAAE,gCAAgC;YACzC,QAAQ;YACR,OAAO;YACP,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,KAAK,CAClB,IAAyC,EACzC,KAAgD,EAChD,MAA0E,EAC1E,WAAoC;IAEpC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE;QACrC,GAAG,MAAM;QACT,WAAW;QACX,sBAAsB,EAAE,gCAAgC;QACxD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"baselineRepair.js","sourceRoot":"","sources":["../../../src/services/baselineRepair.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EACL,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAQ3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAIhD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAiB3C;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;IACzC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE;YACrD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACvC,kEAAkE;QAClE,6EAA6E;QAC7E,IAAI,eAAe,GAA8B,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,wEAAwE;YACxE,2EAA2E;YAC3E,qBAAqB;YACrB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,+DAA+D,EAAE;gBACnF,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,2BAA2B,CAAC;gBAC1C,WAAW,EAAE,MAAM,CAAC,WAA0D;gBAC9E,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,kBAAkB,EAAE,GAAG;gBACvB,eAAe;gBACf,cAAc,EAAE,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,CAAC,GAAG,8BAA8B;aACrF,CAAC,CAAC;YACH,oEAAoE;YACpE,yEAAyE;YACzE,yEAAyE;YACzE,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE;gBACrC,GAAG,MAAM;gBACT,WAAW,EAAE,OAAO,CAAC,WAAiD;gBACtE,uEAAuE;gBACvE,6DAA6D;gBAC7D,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,EAAE,8BAA8B,CAAC;gBAClG,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,mCAAmC,EAAE;gBACvD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,gCAAgC,EAAE;YACpD,OAAO,EAAE,8BAA8B;YACvC,QAAQ;YACR,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAMlD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAW5C;IACC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,mCAAmC,EAAE;YACvD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,CAAC,IAAI,gCAAgC,EAAE,CAAC;YAC7E,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,cAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,cAAc,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,sDAAsD,EAAE;gBAC1E,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,0EAA0E;YAC1E,0EAA0E;YAC1E,0EAA0E;YAC1E,2EAA2E;YAC3E,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,WAA0D,CAAC;QACtF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAqC,EAAE,GAAG,WAAW,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,CAAC,GAA8B,EAAiB,EAAE;YACjE,IAAI,GAAG,EAAE,IAAI,KAAK,SAAS;gBAAE,OAAO,GAAG,IAAI,CAAC;YAC5C,mEAAmE;YACnE,OAAO,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACxE,CAAC,CAAC;QAEF,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzG,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,GAAG;gBACZ,GAAG,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC7B,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;gBAC1C,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;aAC3C,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,+DAA+D;QAE/D,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAA0C,CAAC,CAAC;YAC7E,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,mCAAmC,EAAE;oBACvD,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oBACxB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,qCAAqC,EAAE;gBACzD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,kCAAkC,EAAE;YACtD,OAAO,EAAE,gCAAgC;YACzC,QAAQ;YACR,OAAO;YACP,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,KAAK,CAClB,IAAyC,EACzC,KAAgD,EAChD,MAA0E,EAC1E,WAAoC;IAEpC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE;QACrC,GAAG,MAAM;QACT,WAAW;QACX,sBAAsB,EAAE,gCAAgC;QACxD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/services/declaredSources.d.ts

@@ -9,7 +9,7 @@
  *
  *  - `matchDeclaredSource` — the UNSPOOFABLE attribution match used by
  *    `listSourceRuntimeSummaries` to resolve `origin_package` + the description
- *    fallback. Matches on slug + connection kind AND, for local kinds, the
+ *    fallback. Matches on slug + connection kind AND, for rooted kinds, the
  *    RESOLVED root (a user mount named `app` whose root is not the platform app
  *    zone will NOT match the admin app-zone declaration → it stays "Mounted").
  *  - `repairDeclaredSources` — the version-stamped description backfill
@@ -30,7 +30,7 @@
  * declaration reaching here is trust-authorized.
  */
 export { createMissingDeclaredSources, type DeclaredSourceFailure } from '../usecases/createDeclaredSources.js';
-import type { ConnectorHierarchicalPermissions, ConnectorPathPermission, MachineWrittenEntry, PackageSourceDeclaration, SourceLiveReason, SourceScope } from '@neuralis/package-system/contracts';
+import type { ConnectorHierarchicalPermissions, ConnectorPathPermission, MachineWrittenEntry, PackageSourceDeclaration, PackageSourceRoot, SourceLiveReason, SourceScope } from '@neuralis/package-system/contracts';
 import type { RuntimeStackInfo } from '@neuralis/package-system/paths';
 import type { SourceConfig } from '../domain/sourceConfig.js';
 import { type SourceEnabledDeps } from '../domain/access/sourceEnabled.js';
@@ -53,18 +53,19 @@ export declare function isOwnDataZoneDeclaration(originPackage: string, decl: Pa
 type MatchCtx = {
     projectRoot: string;
     appRoot: string | null;
+    isDocker: boolean;
 };
 /**
  * Contract-backed source attribution. Returns the declaring package id + the
  * declaration when `config` is an instance of a declared source, else null.
- * Slug + kind must match; for `local` kinds with a declared root the RESOLVED
+ * Slug + kind must match; for a declaration with a root the RESOLVED
  * roots must match too — this is the anti-spoof guard (a user mount that merely
  * shares a declared slug but points elsewhere is NOT attributed).
  *
  * PRECONDITION (architect MINOR-1): `declsByPkg` contains ONLY trusted-or-above
  * packages' declarations — `aggregateTrustedSourceDeclarations` (agent-core)
  * filters the map at bootstrap. Without that filter an untrusted package could
- * replicate a first-party `(slug, root)` or a registered sandbox kind and be
+ * replicate a native `(slug, root)` or a registered sandbox kind and be
  * attributed here; the match key alone is not a trust boundary.
  */
 export declare function matchDeclaredSource(config: Pick<SourceConfig, 'source' | 'connection'>, declsByPkg: Record<string, PackageSourceDeclaration[]>, ctx: MatchCtx): {
@@ -75,7 +76,7 @@ export declare function matchDeclaredSource(config: Pick<SourceConfig, 'source'
  * Build a persisted `SourceConfig` from a `seed:'auto'` project-scope
  * declaration for create-missing (existing projects predating the declaration).
  * Returns null for shapes create-missing does not handle (user/agent scope,
- * a local kind without a project-relative root) — those are skipped + logged.
+ * a folder without a project-relative root) — those are skipped + logged.
  */
 export declare function buildDeclaredSourceConfig(decl: PackageSourceDeclaration, ctx: {
     projectId: string;
@@ -150,7 +151,7 @@ export declare function autoProjectDeclarations(declsByPkg: Record<string, Packa
  * One filesystem-coverable source root for the shell uri-policy gate (S1 —
  * `briny-fencing-pelican`). `containerRoot` is resolved with the SAME
  * canonical `resolveLocalRoot` the connector wiring uses (relative join /
- * absolute as written), so the gate's
+ * the plane's half of an absolute pair), so the gate's
  * container-path → source mapping never diverges from what the connector
  * actually mounts. Server-internal: the list is NOT access-filtered — the
  * consumer evaluates `permissions` against the caller's own session context
@@ -176,43 +177,29 @@ export type ShellSourceRoot = {
      * infer it from the slug string, because a plain local source may
      * legitimately be named `host-notes`.
      */
-    plane?: 'container' | 'host';
-    /** Absolute HOST path. Set only for `plane: 'host'`. */
+    plane?: 'local' | 'device';
+    /** Absolute HOST path. Set only for `plane: 'device'`. */
     hostRoot?: string;
     /**
-     * The paired device a `plane: 'host'` source lives on — its
+     * The paired device a `plane: 'device'` source lives on — its
      * `connection.config.device`, read as an opaque string (brain-core knows no
-     * device semantics). The consumer partitions the host plane by it.
+     * device semantics). The consumer partitions the device plane by it.
      */
     device?: string;
 };
 /**
- * R2 — one candidate row for the host's runtime-WASM package activation. The
- * host (`projectPackages`) enumerates these and constructs a package scanner
- * for every source that is project-scoped, `recognizesPackages`, enabled, and
- * `local`-kind. ALL project-associated sources are returned (no pre-filter) so
- * the host can log each skip; deny-by-default lives in the host filter.
+ * R2 — one candidate row for the host's runtime package activation: the
+ * kernel's `PackageSourceRoot` (ONE shape, `contracts/services.ts`). The host
+ * (`projectPackages`) enumerates these and constructs a package scanner for
+ * every `packageFolders` entry of an enabled source whose root it can open in
+ * process. ALL project-associated sources are returned (no pre-filter) so the
+ * host can log each skip; deny-by-default lives in the host filter.
  */
-export type PackageSourceRoot = {
-    /** Source slug. */
-    slug: string;
-    /** Canonical URI root — `${slug}://`. */
-    uriRoot: string;
-    /** Absolute container-side root dir, or '' for non-local kinds. */
-    containerRoot: string;
-    /** Source scope (the host loads only `kind: 'project'` in R2; user/agent → R2b). */
-    scope: SourceScope;
-    /** The opt-in flag (deny-by-default false). */
-    recognizesPackages: boolean;
-    /** Effective enabled state (`resolveEnabledState !== false`). */
-    enabled: boolean;
-    /** The persisted `connection.kind`. */
-    kind: string;
-};
+export type { PackageSourceRoot };
 /**
  * One access-filtered source row for the agent-core `<runtime_stack>` source
  * table. The READ sibling of `ShellSourceRoot`: scope/feature-filtered to the
- * caller, all connector kinds (not just `local`), and stats-bearing — but read
+ * caller, all connector kinds (not just folders), and stats-bearing — but read
  * PURELY from persisted source-config JSON (`description` + `sync.stats`), with
  * NO live walk / connector.count() / vector count. Loaded once per stream, so
  * it sits in the cacheable system-prompt prefix. SLIM by design — the
@@ -221,10 +208,23 @@ export type PackageSourceRoot = {
 export type SourceRuntimeSummary = {
     /** `${slug}://`. */
     uriRoot: string;
-    /** Coarse connector family — `local` | `brain` | `webtop` | the kind. */
+    /** Coarse connector family — `host` | `brain` | `webtop` | the kind. */
     connector: string;
-    /** The persisted `connection.kind` (e.g. `local`, `brain`, `machine-user`). */
+    /** The persisted `connection.kind` (e.g. `host`, `brain`, `webtop`). */
     kind: string;
+    /**
+     * A device source's machine: the owner-given name and the platform it claimed
+     * (stable), and its live confinement verdict (volatile — `<workspace_live>`).
+     * `retired` when the device was revoked, must pair again, or is gone (then its
+     * id stands for the name and the platform reads `unknown`). Absent for a
+     * source on this server.
+     */
+    device?: {
+        name: string;
+        os: string;
+        confinement?: 'sandboxed' | 'unconfined' | 'unproven';
+        retired?: true;
+    };
     /** Human description from the source config, or null. */
     description: string | null;
     /** Host-side absolute root, or null when not host-resolvable. */
@@ -299,11 +299,65 @@ export type SourceEnumerationDeps = {
     packageSourceDeclarations(): Record<string, PackageSourceDeclaration[]>;
     /** The platform app root (resolves `${appRoot}` declarations), or null before boot. */
     appRoot(): string | null;
+    /** The runtime stack's plane: which half of a source's root pair this process opens. */
+    isDocker(): boolean;
+    /**
+     * The device folder as THIS process may open it to load packages — agent-core's
+     * `devices.localFolderRoot` (a loopback device, a ceiling-checked directory):
+     * `{ root }`, or `{ skipped }` with a fixed reason code. Absent ⇒ no device
+     * folder is ever opened in process.
+     */
+    localDeviceFolder?(input: {
+        device: string;
+        root: string;
+        project?: {
+            projectId: string;
+        };
+    }): Promise<{
+        root: string;
+    } | {
+        skipped: string;
+    }>;
+    /**
+     * A device folder's packages read OVER ITS LINK — agent-core's
+     * `devices.devicePackageFolder`: the reader factory of its package folders, or
+     * `{ skipped }` with a fixed code. Absent ⇒ no device folder of another machine
+     * (or of any machine, inside a container) loads packages. A PROJECT-scope
+     * folder carries its `project`, so agent-core re-asks at every read whether the
+     * device's owner still holds `device.own` there.
+     */
+    devicePackageFolder?(input: {
+        source: string;
+        device: string;
+        root: string;
+        project?: {
+            projectId: string;
+        };
+    }): NonNullable<PackageSourceRoot['device']> | {
+        skipped: string;
+    };
+    /** agent-core's `devices.describe`: a device's name, platform and live confinement, `retired` for a revoked one (`null` ⇒ not held, e.g. purged). */
+    describeDevice?(deviceId: string): Promise<{
+        name: string;
+        os: string;
+        confinement?: 'sandboxed' | 'unconfined' | 'unproven';
+        retired?: true;
+    } | null>;
+    /**
+     * A source with package folders that loads none, and why (a fixed code, never
+     * a path) — the caller logs each (project, source, reason) once.
+     */
+    packageFolderSkipped?(projectId: string, slug: string, reason: string): void;
 };
 export declare function listShellSourceRoots(deps: SourceEnumerationDeps, projectId: string): Promise<ShellSourceRoot[]>;
 export declare function listPackageSourceRoots(deps: SourceEnumerationDeps, projectId: string): Promise<PackageSourceRoot[]>;
-/** THE package-source projection of one persisted config (runtime listing and offline upgrade alike). */
-export declare function toPackageSourceRoot(config: SourceConfig, projectRoot: string): PackageSourceRoot;
+/**
+ * THE package-source projection of one persisted config (runtime listing and
+ * offline upgrade alike). `containerRoot` is the in-process folder's resolved
+ * root; a device folder's is `''` here (only the async runtime listing may ask
+ * agent-core whether this process can open it).
+ */
+export declare function toPackageSourceRoot(config: SourceConfig, projectRoot: string, isDocker: boolean): PackageSourceRoot;
 export declare function listSourceRuntimeSummaries(deps: SourceEnumerationDeps, projectId: string, opts: SourceRuntimeSummaryOptions): Promise<SourceRuntimeSummary[]>;
 export type SourceConfigPatch = {
     source: string;
@@ -314,15 +368,44 @@ export type SourceConfigPatch = {
     description?: string;
 };
 /**
- * The ONE sanctioned cross-package source-config write (`upsertSourceConfig`
- * on the package API): re-read, merge permissions + sync + description,
- * validate, persist. Admin and other host callers must NOT write source JSON
- * directly — this keeps the connector registry and on-disk configs in sync.
+ * Who asks for a cross-package source-config edit: the scope the config is read
+ * under plus the caller's features (the device-owner gate reads them; absent
+ * features answer like none — deny by default).
+ */
+export type SourceConfigCaller = SourceConfigScope & {
+    agentId?: string;
+    grantedFeatures: readonly string[];
+};
+/** A refused edit: the route PATCH's status, text and (for a floor) code. */
+export type SourceEditRefusal = {
+    status: 400 | 403 | 409;
+    error: string;
+    code?: string;
+};
+/**
+ * The edit gates the route's PATCH runs, bound per package state: the refusal,
+ * or null. Another member's user/agent source needs `files.writeOthers`; an
+ * immutable `floor:true` row is never dropped or altered (409); a device-plane
+ * source is edited only by its device's owner holding `device.own`; a
+ * protected-zone root needs `sources.privileged`; a source the native folder
+ * fence refuses (it predates the fence) may be narrowed, never widened.
  */
-export declare function upsertSourceConfig(sourceConfigs: SourceConfigPort, scope: SourceConfigScope, patch: SourceConfigPatch, logger: RepairLogger): Promise<{
+export type SourceEditFence = (caller: SourceConfigCaller, existing: SourceConfig, next: SourceConfig) => Promise<SourceEditRefusal | null>;
+/** A refused edit answers the route PATCH's status (403, 409 for a floor), an unknown or invalid one 400. */
+export type SourceConfigWriteResult = {
     ok: true;
 } | {
     ok: false;
+    status: 400 | 403 | 409;
     error: string;
-}>;
+    code?: string;
+};
+/**
+ * The ONE sanctioned cross-package source-config write (`upsertSourceConfig`
+ * on the package API): re-read, merge permissions + sync + description,
+ * fence, validate, persist. Admin and other host callers must NOT write source
+ * JSON directly — this keeps the connector registry and on-disk configs in
+ * sync, and the native fence on every writer.
+ */
+export declare function upsertSourceConfig(sourceConfigs: SourceConfigPort, caller: SourceConfigCaller, patch: SourceConfigPatch, logger: RepairLogger, refusesEdit: SourceEditFence): Promise<SourceConfigWriteResult>;
 //# sourceMappingURL=declaredSources.d.ts.map

package/dist/src/services/declaredSources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"declaredSources.d.ts","sourceRoot":"","sources":["../../../src/services/declaredSources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAIH,OAAO,EAAE,4BAA4B,EAAE,KAAK,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAChH,OAAO,KAAK,EACV,gCAAgC,EAChC,uBAAuB,EACvB,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,EAChB,WAAW,EACZ,MAAM,oCAAoC,CAAC;AAE5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAGvE,OAAO,KAAK,EAA2B,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGvF,OAAO,EAA8B,KAAK,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACvG,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAsB,MAAM,wBAAwB,CAAC;AACtG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,qBAAqB,CAAC;AAE7B;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAOhD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAE9H;AAED,KAAK,QAAQ,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAYhE;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,YAAY,CAAC,EACnD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,EACtD,GAAG,EAAE,QAAQ,GACZ;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,wBAAwB,CAAA;CAAE,GAAG,IAAI,CA6BlE;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,wBAAwB,EAC9B,GAAG,EAAE;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACtC,sFAAsF;IACtF,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,GACA,YAAY,GAAG,IAAI,CAkDrB;AAED,MAAM,MAAM,oBAAoB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5F,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,aAAa,EAAE,gBAAgB,CAAC;IAChC,UAAU,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,4BAA4B,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC/E,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB,oGAAoG;IACpG,sBAAsB,CAAC,EAAE,MAAM,SAAS,mBAAmB,EAAE,CAAC;IAC9D;;;;OAIG;IACH,qBAAqB,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC,CAAC;IAC9F,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,uBAAuB,EAAE,CAAC;IAChE,eAAe,CAAC,EAAE,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAChD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC7D,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAC9D,CAAC;CACH,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiGhC;AAED,KAAK,YAAY,GAAG;IAClB,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9D,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,aAAa,EAAE,gBAAgB,CAAC;IAChC,QAAQ,EAAE,IAAI,CACZ,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAC3C,eAAe,GAAG,QAAQ,GAAG,uBAAuB,GAAG,oBAAoB,CAC5E,CAAC;IACF,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,GAAG,QAAQ,CAAC,CAAC;IACzF,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,GAAG,QAAQ,CAAC,CAAC;IAC3F,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhB;AAGD,qFAAqF;AACrF,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,GACrD,KAAK,CAAC;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,wBAAwB,CAAA;CAAE,CAAC,CAQlE;AAMD;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,WAAW,EAAE,gCAAgC,CAAC;IAC9C,oEAAoE;IACpE,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,KAAK,EAAE,WAAW,CAAC;IACnB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;IAC7B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,aAAa,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,KAAK,EAAE,WAAW,CAAC;IACnB,+CAA+C;IAC/C,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iEAAiE;IACjE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iEAAiE;IACjE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mFAAmF;IACnF,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,kEAAkE;IAClE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iFAAiF;IACjF,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4DAA4D;IAC5D,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,0EAA0E;IAC1E,SAAS,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5D;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,wDAAwD;AACxD,KAAK,eAAe,GAAG,IAAI,CAAC,eAAe,EAAE,YAAY,GAAG,aAAa,GAAG,eAAe,GAAG,aAAa,CAAC,CAAC;AAE7G,0FAA0F;AAC1F,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtD,uGAAuG;IACvG,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC,CAAC;IACtG,wCAAwC;IACxC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,wEAAwE;IACxE,yBAAyB,IAAI,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACxE,uFAAuF;IACvF,OAAO,IAAI,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAwDrH;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAGzH;AAED,yGAAyG;AACzG,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,iBAAiB,CAehG;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,qBAAqB,EAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA2KjC;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;kCAC8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,gBAAgB,EAC/B,KAAK,EAAE,iBAAiB,EACxB,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBtD"}
+{"version":3,"file":"declaredSources.d.ts","sourceRoot":"","sources":["../../../src/services/declaredSources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAIH,OAAO,EAAE,4BAA4B,EAAE,KAAK,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAChH,OAAO,KAAK,EACV,gCAAgC,EAChC,uBAAuB,EACvB,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACZ,MAAM,oCAAoC,CAAC;AAE5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAGvE,OAAO,KAAK,EAA2B,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGvF,OAAO,EAA8B,KAAK,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACvG,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAsB,MAAM,wBAAwB,CAAC;AACtG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,qBAAqB,CAAC;AAE7B;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAOhD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAE9H;AAED,KAAK,QAAQ,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC;AAYnF;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,YAAY,CAAC,EACnD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,EACtD,GAAG,EAAE,QAAQ,GACZ;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,wBAAwB,CAAA;CAAE,GAAG,IAAI,CA+BlE;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,wBAAwB,EAC9B,GAAG,EAAE;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACtC,sFAAsF;IACtF,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,GACA,YAAY,GAAG,IAAI,CAmDrB;AAED,MAAM,MAAM,oBAAoB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5F,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,aAAa,EAAE,gBAAgB,CAAC;IAChC,UAAU,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,4BAA4B,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC/E,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB,oGAAoG;IACpG,sBAAsB,CAAC,EAAE,MAAM,SAAS,mBAAmB,EAAE,CAAC;IAC9D;;;;OAIG;IACH,qBAAqB,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC,CAAC;IAC9F,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,uBAAuB,EAAE,CAAC;IAChE,eAAe,CAAC,EAAE,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAChD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC7D,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAC9D,CAAC;CACH,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiGhC;AAED,KAAK,YAAY,GAAG;IAClB,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9D,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,aAAa,EAAE,gBAAgB,CAAC;IAChC,QAAQ,EAAE,IAAI,CACZ,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAC3C,eAAe,GAAG,QAAQ,GAAG,uBAAuB,GAAG,oBAAoB,CAC5E,CAAC;IACF,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,GAAG,QAAQ,CAAC,CAAC;IACzF,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,GAAG,QAAQ,CAAC,CAAC;IAC3F,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhB;AAGD,qFAAqF;AACrF,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,GACrD,KAAK,CAAC;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,wBAAwB,CAAA;CAAE,CAAC,CAQlE;AAMD;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,WAAW,EAAE,gCAAgC,CAAC;IAC9C,oEAAoE;IACpE,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,KAAK,EAAE,WAAW,CAAC;IACnB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;;GAOG;AACH,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,GAAG,YAAY,GAAG,UAAU,CAAC;QAAC,OAAO,CAAC,EAAE,IAAI,CAAA;KAAE,CAAC;IAC7G,yDAAyD;IACzD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iEAAiE;IACjE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iEAAiE;IACjE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mFAAmF;IACnF,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,kEAAkE;IAClE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iFAAiF;IACjF,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4DAA4D;IAC5D,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,0EAA0E;IAC1E,SAAS,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5D;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,wDAAwD;AACxD,KAAK,eAAe,GAAG,IAAI,CAAC,eAAe,EAAE,YAAY,GAAG,aAAa,GAAG,eAAe,GAAG,aAAa,CAAC,CAAC;AAE7G,0FAA0F;AAC1F,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtD,uGAAuG;IACvG,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC,CAAC;IACtG,wCAAwC;IACxC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,wEAAwE;IACxE,yBAAyB,IAAI,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACxE,uFAAuF;IACvF,OAAO,IAAI,MAAM,GAAG,IAAI,CAAC;IACzB,wFAAwF;IACxF,QAAQ,IAAI,OAAO,CAAC;IACpB;;;;;OAKG;IACH,iBAAiB,CAAC,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9I;;;;;;;OAOG;IACH,mBAAmB,CAAC,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/K,qJAAqJ;IACrJ,cAAc,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,GAAG,YAAY,GAAG,UAAU,CAAC;QAAC,OAAO,CAAC,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACvJ;;;OAGG;IACH,oBAAoB,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9E,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CA4DrH;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAoCzH;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,iBAAiB,CAiBnH;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,qBAAqB,EAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAuLjC;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;kCAC8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAE9G,6EAA6E;AAC7E,MAAM,MAAM,iBAAiB,GAAG;IAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;AAE5I,6GAA6G;AAC7G,MAAM,MAAM,uBAAuB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1H;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,gBAAgB,EAC/B,MAAM,EAAE,kBAAkB,EAC1B,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,eAAe,GAC3B,OAAO,CAAC,uBAAuB,CAAC,CAuBlC"}