@nklisch/pi-enhanced 0.1.0

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-contract.js

@@ -0,0 +1,201 @@
+import { z } from "zod";
+import { ConfigurationKeySchema } from "../domain/configuration.js";
+import { ContentDigestSchema } from "../domain/content-manifest.js";
+import { PluginKeySchema } from "../domain/identity.js";
+import { MarketplaceCandidateIdSchema, MarketplaceRegistrationIdSchema, MarketplaceSnapshotTokenSchema, } from "../domain/marketplace-registration.js";
+import { SourceHashSchema } from "../domain/source.js";
+import { PluginConfigurationRefSchema, TrustSubjectRefSchema } from "../domain/state/references.js";
+import { ScopeReferenceSchema } from "../domain/state/scope.js";
+import { EpochMillisecondsSchema } from "./ports/lifecycle-clock.js";
+import { SensitiveValue } from "./sensitive-value.js";
+import { InspectionDetailIdSchema, InspectionSnapshotIdSchema, NativeComponentInventoryViewSchema, NativeDiagnosticSchema, NativeInspectionDetailSchema, NativeSourceViewSchema, NativeRuntimeRequirementViewSchema, SafeDisplayFieldSchema, } from "./native-inspection-contract.js";
+export const TrustedInstallSessionPolicy = Object.freeze({
+    idleTtlMs: 15 * 60_000,
+    absoluteTtlMs: 60 * 60_000,
+    terminalRetentionMs: 5 * 60_000,
+    maxProgressEvents: 32,
+});
+export const TrustedInstallSessionTokenSchema = z.string()
+    .regex(/^trusted-install-session-v1:[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\.[0-9a-f]{64}$/)
+    .max(128)
+    .brand();
+export const TrustedInstallSessionVersionSchema = z.number().int().nonnegative();
+export const TrustedInstallConsentIdSchema = z.string()
+    .regex(/^trusted-install-consent-v1:sha256:[0-9a-f]{64}$/)
+    .brand();
+export const PreparedLifecycleCandidateBindingSchema = z.object({
+    scope: ScopeReferenceSchema,
+    registrationId: MarketplaceRegistrationIdSchema,
+    candidateId: MarketplaceCandidateIdSchema,
+    catalogSnapshot: MarketplaceSnapshotTokenSchema,
+    plugin: PluginKeySchema,
+    sourceIdentity: SourceHashSchema,
+    immutableRevision: ContentDigestSchema,
+    contentDigest: ContentDigestSchema,
+    compatibilityFingerprint: ContentDigestSchema,
+    configurationDescriptorDigest: ContentDigestSchema,
+    consentDisclosureDigest: ContentDigestSchema,
+    configurationRef: PluginConfigurationRefSchema.optional(),
+    trustSubject: TrustSubjectRefSchema,
+    executableSurfaceDigest: ContentDigestSchema,
+    capabilityDigest: ContentDigestSchema,
+    projectEpoch: ContentDigestSchema.optional(),
+}).strict().readonly();
+/** Source-compatible trusted-install name for the shared prepared candidate contract. */
+export const TrustedInstallCandidateBindingSchema = PreparedLifecycleCandidateBindingSchema;
+export const TrustedInstallSessionStateRegistry = Object.freeze({
+    awaitingInput: { tag: "awaiting-input" }, ready: { tag: "ready" }, activating: { tag: "activating" },
+    succeeded: { tag: "succeeded" }, currentState: { tag: "current-state" }, cancelled: { tag: "cancelled" },
+    rejected: { tag: "rejected" }, stale: { tag: "stale" }, conflict: { tag: "conflict" },
+    rolledBack: { tag: "rolled-back" }, recoveryRequired: { tag: "recovery-required" }, failed: { tag: "failed" },
+    expired: { tag: "expired" }, disposed: { tag: "disposed" },
+});
+const sessionStates = Object.values(TrustedInstallSessionStateRegistry).map((entry) => entry.tag);
+export const TrustedInstallSessionStateSchema = z.enum(sessionStates);
+const DefaultValueSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("string"), value: SafeDisplayFieldSchema }).strict().readonly(),
+    z.object({ kind: z.literal("number"), value: z.number().finite() }).strict().readonly(),
+    z.object({ kind: z.literal("boolean"), value: z.boolean() }).strict().readonly(),
+    z.object({ kind: z.literal("strings"), values: z.array(SafeDisplayFieldSchema).readonly() }).strict().readonly(),
+    z.object({ kind: z.enum(["directory", "file"]), value: SafeDisplayFieldSchema }).strict().readonly(),
+]);
+export const TrustedInstallConstraintViewSchema = z.object({
+    pattern: SafeDisplayFieldSchema.optional(),
+    min: z.number().finite().optional(), max: z.number().finite().optional(),
+    minItems: z.number().int().nonnegative().optional(), maxItems: z.number().int().nonnegative().optional(),
+    mustExist: z.boolean().optional(),
+}).strict().readonly();
+export const TrustedInstallConfigurationFieldSchema = z.object({
+    key: ConfigurationKeySchema,
+    label: SafeDisplayFieldSchema,
+    description: SafeDisplayFieldSchema.optional(),
+    kind: z.enum(["string", "number", "boolean", "directory", "file", "strings"]),
+    required: z.boolean(), sensitive: z.boolean(), defaultPresent: z.boolean(),
+    default: DefaultValueSchema.optional(),
+    constraints: TrustedInstallConstraintViewSchema,
+    state: z.enum(["missing", "defaulted", "configured", "unavailable", "invalid"]),
+}).strict().readonly().superRefine((field, context) => {
+    if (field.sensitive && (field.defaultPresent || field.default !== undefined))
+        context.addIssue({ code: "custom", path: ["default"], message: "sensitive fields cannot disclose defaults" });
+    if (field.defaultPresent !== (field.default !== undefined))
+        context.addIssue({ code: "custom", path: ["defaultPresent"], message: "default presence does not match default view" });
+    if (field.default !== undefined && field.default.kind !== field.kind)
+        context.addIssue({ code: "custom", path: ["default"], message: "default kind does not match field" });
+});
+export const TrustedInstallConsentDisclosureSchema = z.object({
+    consentId: TrustedInstallConsentIdSchema,
+    source: NativeSourceViewSchema,
+    immutableRevision: ContentDigestSchema,
+    executableSurfaceDigest: ContentDigestSchema,
+    components: NativeComponentInventoryViewSchema,
+    requirements: z.array(NativeRuntimeRequirementViewSchema).readonly(),
+    persistentData: z.literal(true),
+    configurationEnvironmentNames: z.array(SafeDisplayFieldSchema).readonly(),
+    subagentInterception: z.enum(["not-declared", "available", "unavailable"]),
+    remoteMcpDiscovery: z.literal("not-performed"),
+    statement: SafeDisplayFieldSchema,
+}).strict().readonly();
+export const TrustedInstallProgressPhaseRegistry = Object.freeze({
+    candidateAcquisition: { tag: "candidate-acquisition" }, inputValidation: { tag: "input-validation" },
+    configurationCustody: { tag: "configuration-custody" }, trustDecision: { tag: "trust-decision" },
+    activationTransaction: { tag: "activation-transaction" }, activationObservation: { tag: "activation-observation" },
+    completed: { tag: "completed" },
+});
+const progressPhases = Object.values(TrustedInstallProgressPhaseRegistry).map((entry) => entry.tag);
+export const TrustedInstallProgressEventSchema = z.object({
+    sequence: z.number().int().nonnegative(), phase: z.enum(progressPhases),
+    state: z.enum(["started", "completed", "retained", "failed"]),
+    plugin: PluginKeySchema, scope: ScopeReferenceSchema, revision: ContentDigestSchema,
+    code: z.string().regex(/^[A-Z][A-Z0-9_]{0,63}$/).optional(),
+}).strict().readonly();
+export const TrustedInstallSessionViewSchema = z.object({
+    token: TrustedInstallSessionTokenSchema,
+    version: TrustedInstallSessionVersionSchema,
+    state: TrustedInstallSessionStateSchema,
+    expiresAt: EpochMillisecondsSchema,
+    binding: TrustedInstallCandidateBindingSchema,
+    candidate: NativeInspectionDetailSchema,
+    fields: z.array(TrustedInstallConfigurationFieldSchema).readonly(),
+    consent: TrustedInstallConsentDisclosureSchema,
+    progress: z.array(TrustedInstallProgressEventSchema).max(TrustedInstallSessionPolicy.maxProgressEvents).readonly(),
+    retained: z.object({ configuration: z.boolean(), trust: z.boolean() }).strict().readonly(),
+}).strict().readonly();
+export const TrustedInstallOpenRequestSchema = z.object({
+    inspectionSnapshotId: InspectionSnapshotIdSchema,
+    detailId: InspectionDetailIdSchema,
+}).strict().readonly();
+const SensitiveInputSchema = z.custom((value) => value instanceof SensitiveValue, { message: "sensitive input requires SensitiveValue" });
+const KeyValueSchema = z.object({ key: ConfigurationKeySchema, value: z.unknown() }).strict().readonly();
+const SecretValueSchema = z.object({ key: ConfigurationKeySchema, value: SensitiveInputSchema }).strict().readonly();
+const ConsentSubmissionSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("grant"), consentId: TrustedInstallConsentIdSchema }).strict().readonly(),
+    z.object({ kind: z.literal("deny"), consentId: TrustedInstallConsentIdSchema }).strict().readonly(),
+]);
+export const TrustedInstallSubmissionSchema = z.object({
+    expectedVersion: TrustedInstallSessionVersionSchema,
+    nonSensitive: z.array(KeyValueSchema).readonly(),
+    sensitive: z.array(SecretValueSchema).readonly(),
+    consent: ConsentSubmissionSchema,
+}).strict().readonly();
+export const TrustedInstallInputIssueRegistry = Object.freeze({
+    unknownKey: { tag: "CONFIG_UNKNOWN_KEY" }, duplicateInput: { tag: "CONFIG_DUPLICATE_INPUT" },
+    required: { tag: "CONFIG_REQUIRED" }, type: { tag: "CONFIG_TYPE" }, pattern: { tag: "CONFIG_PATTERN" },
+    bounds: { tag: "CONFIG_BOUNDS" }, pathInvalid: { tag: "CONFIG_PATH_INVALID" }, pathMissing: { tag: "CONFIG_PATH_MISSING" },
+    pathWrongKind: { tag: "CONFIG_PATH_WRONG_KIND" }, pathAdapterFailed: { tag: "CONFIG_PATH_ADAPTER_FAILED" },
+    sensitivityMismatch: { tag: "CONFIG_SENSITIVITY_MISMATCH" }, secretCustodyUnavailable: { tag: "SECRET_CUSTODY_UNAVAILABLE" },
+    consentRequired: { tag: "CONSENT_REQUIRED" }, consentStale: { tag: "CONSENT_STALE" },
+});
+const inputIssueCodes = Object.values(TrustedInstallInputIssueRegistry).map((entry) => entry.tag);
+export const TrustedInstallInputIssueSchema = z.object({ code: z.enum(inputIssueCodes), key: ConfigurationKeySchema.optional() }).strict().readonly();
+const RetainedSchema = z.object({ configuration: z.boolean(), trust: z.boolean() }).strict().readonly();
+const SafeProgressSchema = z.array(TrustedInstallProgressEventSchema).max(TrustedInstallSessionPolicy.maxProgressEvents).readonly();
+const ComponentCountsSchema = z.object({ skills: z.number().int().nonnegative(), hooks: z.number().int().nonnegative(), mcpServers: z.number().int().nonnegative() }).strict().readonly();
+export const TrustedInstallStaleReasonSchema = z.enum(["session", "candidate", "configuration", "consent", "project", "capability"]);
+export const TrustedInstallConflictReasonSchema = z.enum(["already-installed-different-revision", "operation-in-progress", "pending-transition", "concurrent-mutation"]);
+export const TrustedInstallOpenResultSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("opened"), session: TrustedInstallSessionViewSchema }).strict().readonly(),
+    z.object({ kind: z.literal("stale"), reason: z.enum(["candidate", "project", "capability"]) }).strict().readonly(),
+    z.object({ kind: z.literal("unavailable"), code: z.string().regex(/^[A-Z][A-Z0-9_]{0,63}$/), diagnostics: z.array(NativeDiagnosticSchema).readonly() }).strict().readonly(),
+    z.object({ kind: z.literal("rejected"), code: z.string().regex(/^[A-Z][A-Z0-9_]{0,63}$/), diagnostics: z.array(NativeDiagnosticSchema).readonly() }).strict().readonly(),
+]);
+export const TrustedInstallActivationResultSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("needs-input"), issues: z.array(TrustedInstallInputIssueSchema).nonempty().readonly(), session: TrustedInstallSessionViewSchema }).strict().readonly(),
+    z.object({ kind: z.literal("succeeded"), plugin: PluginKeySchema, scope: ScopeReferenceSchema, revision: ContentDigestSchema, projectionDigest: ContentDigestSchema, components: ComponentCountsSchema, progress: SafeProgressSchema, diagnostics: z.array(NativeDiagnosticSchema).readonly(), retained: RetainedSchema }).strict().readonly(),
+    z.object({ kind: z.literal("current-state"), plugin: PluginKeySchema, scope: ScopeReferenceSchema, revision: ContentDigestSchema, activation: z.enum(["enabled", "disabled"]), reason: z.enum(["already-active", "enabled-existing"]), progress: SafeProgressSchema, retained: RetainedSchema }).strict().readonly(),
+    z.object({ kind: z.literal("cancelled"), phase: z.enum(progressPhases), progress: SafeProgressSchema, retained: RetainedSchema }).strict().readonly(),
+    z.object({ kind: z.literal("stale"), reason: TrustedInstallStaleReasonSchema, progress: SafeProgressSchema, retained: RetainedSchema }).strict().readonly(),
+    z.object({ kind: z.literal("conflict"), reason: TrustedInstallConflictReasonSchema, progress: SafeProgressSchema, retained: RetainedSchema }).strict().readonly(),
+    z.object({ kind: z.literal("rejected"), code: z.string().regex(/^[A-Z][A-Z0-9_]{0,63}$/), diagnostics: z.array(NativeDiagnosticSchema).readonly(), progress: SafeProgressSchema, retained: RetainedSchema }).strict().readonly(),
+    z.object({ kind: z.literal("rolled-back"), failure: z.enum(["reload-rejected", "observation-mismatch", "adapter-error"]), restored: z.boolean(), progress: SafeProgressSchema, retained: RetainedSchema }).strict().readonly(),
+    z.object({
+        kind: z.literal("recovery-required"),
+        transition: z.string().regex(/^pending-transition-v1:sha256:[0-9a-f]{64}$/).optional(),
+        committed: z.number().int().nonnegative().optional(),
+        action: z.enum(["run-recovery", "retry-configuration-recovery", "retry-trust-recovery"]),
+        session: TrustedInstallSessionViewSchema.optional(),
+        progress: SafeProgressSchema,
+        retained: RetainedSchema,
+    }).strict().readonly().superRefine((result, context) => {
+        if (result.action !== "run-recovery") {
+            if (result.session === undefined)
+                context.addIssue({ code: "custom", path: ["session"], message: "workflow recovery requires the owning session" });
+            if (result.transition !== undefined || result.committed !== undefined)
+                context.addIssue({ code: "custom", path: ["transition"], message: "workflow recovery cannot cite lifecycle evidence" });
+        }
+        else if (result.session !== undefined) {
+            context.addIssue({ code: "custom", path: ["session"], message: "lifecycle recovery cannot cite a workflow session action" });
+        }
+    }),
+    z.object({ kind: z.literal("failed"), code: z.enum(["ADAPTER_FAILED", "INTERACTION_FAILED", "CLEANUP_FAILED", "DISPOSED"]), progress: SafeProgressSchema, retained: RetainedSchema }).strict().readonly(),
+    z.object({ kind: z.literal("expired") }).strict().readonly(),
+    z.object({ kind: z.literal("disposed") }).strict().readonly(),
+]);
+export const TrustedInstallStatusResultSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("found"), session: TrustedInstallSessionViewSchema, result: TrustedInstallActivationResultSchema.optional() }).strict().readonly(),
+    z.object({ kind: z.enum(["missing", "expired", "disposed"]) }).strict().readonly(),
+]);
+export const TrustedInstallCancellationResultSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("accepted"), state: TrustedInstallSessionStateSchema }).strict().readonly(),
+    z.object({ kind: z.enum(["missing", "expired", "disposed"]) }).strict().readonly(),
+]);
+//# sourceMappingURL=trusted-install-contract.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-install-contract.js","sourceRoot":"","sources":["../../src/application/trusted-install-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,kCAAkC,EAClC,sBAAsB,EACtB,4BAA4B,EAC5B,sBAAsB,EACtB,kCAAkC,EAClC,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,SAAS,EAAE,EAAE,GAAG,MAAM;IACtB,aAAa,EAAE,EAAE,GAAG,MAAM;IAC1B,mBAAmB,EAAE,CAAC,GAAG,MAAM;IAC/B,iBAAiB,EAAE,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,EAAE;KACvD,KAAK,CAAC,gHAAgH,CAAC;KACvH,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,EAAgC,CAAC;AACzC,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AACjF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,EAAE;KACpD,KAAK,CAAC,kDAAkD,CAAC;KACzD,KAAK,EAA6B,CAAC;AAEtC,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,KAAK,EAAE,oBAAoB;IAC3B,cAAc,EAAE,+BAA+B;IAC/C,WAAW,EAAE,4BAA4B;IACzC,eAAe,EAAE,8BAA8B;IAC/C,MAAM,EAAE,eAAe;IACvB,cAAc,EAAE,gBAAgB;IAChC,iBAAiB,EAAE,mBAAmB;IACtC,aAAa,EAAE,mBAAmB;IAClC,wBAAwB,EAAE,mBAAmB;IAC7C,6BAA6B,EAAE,mBAAmB;IAClD,uBAAuB,EAAE,mBAAmB;IAC5C,gBAAgB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACzD,YAAY,EAAE,qBAAqB;IACnC,uBAAuB,EAAE,mBAAmB;IAC5C,gBAAgB,EAAE,mBAAmB;IACrC,YAAY,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEvB,yFAAyF;AACzF,MAAM,CAAC,MAAM,oCAAoC,GAAG,uCAAuC,CAAC;AAE5F,MAAM,CAAC,MAAM,kCAAkC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9D,aAAa,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;IACpG,SAAS,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;IACxG,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;IACrF,UAAU,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE;IAC7G,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;CAClD,CAAC,CAAC;AACZ,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;AAC3H,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAEtE,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1F,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChH,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrG,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,OAAO,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACxG,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AACvB,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,GAAG,EAAE,sBAAsB;IAC3B,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC9C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1E,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,kCAAkC;IAC/C,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;CAChF,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACpD,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;IAC5L,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;IACpL,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;AAC9K,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,SAAS,EAAE,6BAA6B;IACxC,MAAM,EAAE,sBAAsB;IAC9B,iBAAiB,EAAE,mBAAmB;IACtC,uBAAuB,EAAE,mBAAmB;IAC5C,UAAU,EAAE,kCAAkC;IAC9C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,QAAQ,EAAE;IACpE,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/B,6BAA6B,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IACzE,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAC1E,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAC9C,SAAS,EAAE,sBAAsB;CAClC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,mCAAmC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,oBAAoB,EAAE,EAAE,GAAG,EAAE,uBAAuB,EAAE,EAAE,eAAe,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE;IACpG,oBAAoB,EAAE,EAAE,GAAG,EAAE,uBAAuB,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE;IAChG,qBAAqB,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE;IAClH,SAAS,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;CACvB,CAAC,CAAC;AACZ,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;AAC7H,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IACvE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB;IACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,KAAK,EAAE,gCAAgC;IACvC,OAAO,EAAE,kCAAkC;IAC3C,KAAK,EAAE,gCAAgC;IACvC,SAAS,EAAE,uBAAuB;IAClC,OAAO,EAAE,oCAAoC;IAC7C,SAAS,EAAE,4BAA4B;IACvC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,QAAQ,EAAE;IAClE,OAAO,EAAE,qCAAqC;IAC9C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAClH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3F,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,oBAAoB,EAAE,0BAA0B;IAChD,QAAQ,EAAE,wBAAwB;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEvB,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAiB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,cAAc,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;AAC1J,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AACzG,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AACrH,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,6BAA6B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,6BAA6B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpG,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,eAAe,EAAE,kCAAkC;IACnD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,uBAAuB;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5D,UAAU,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE;IAC5F,QAAQ,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE;IACtG,MAAM,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE;IAC1H,aAAa,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,EAAE,iBAAiB,EAAE,EAAE,GAAG,EAAE,4BAA4B,EAAE;IAC1G,mBAAmB,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,EAAE,wBAAwB,EAAE,EAAE,GAAG,EAAE,4BAA4B,EAAE;IAC5H,eAAe,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE;CAC5E,CAAC,CAAC;AACZ,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;AAC3H,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,sBAAsB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEtJ,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AACxG,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC;AACpI,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAC1L,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AACrI,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,sCAAsC,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAEzK,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClH,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3K,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACzK,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/E,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjL,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,UAAU,EAAE,qBAAqB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9U,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpT,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrJ,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3J,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,kCAAkC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjK,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChO,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,eAAe,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9N,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC,QAAQ,EAAE;QACtF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACpD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,8BAA8B,EAAE,sBAAsB,CAAC,CAAC;QACxF,OAAO,EAAE,+BAA+B,CAAC,QAAQ,EAAE;QACnD,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,cAAc;KACzB,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACrD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;YACpJ,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;QACjM,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzM,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3E,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,oCAAoC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7J,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnF,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACjF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnF,CAAC,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-identifiers.d.ts

@@ -0,0 +1,10 @@
+import { type ContentDigest } from "../domain/content-manifest.js";
+import { type NativeComponentInventoryView } from "./native-inspection-contract.js";
+import type { Sha256 } from "../domain/source.js";
+import { type TrustedInstallCandidateBinding, type TrustedInstallConsentId, type TrustedInstallSessionToken } from "./trusted-install-contract.js";
+/** A token is only a host-epoch lookup capability; it contains no workflow evidence. */
+export declare function createTrustedInstallSessionToken(sessionId: string, hostEpochInput: ContentDigest, sha256: Sha256): TrustedInstallSessionToken;
+export declare function verifyTrustedInstallSessionToken(tokenInput: unknown, hostEpochInput: ContentDigest, sha256: Sha256): string | undefined;
+export declare function deriveTrustedInstallConsentDisclosureDigest(componentsInput: NativeComponentInventoryView, sha256: Sha256): ContentDigest;
+/** Bind consent to the complete exact candidate authority tuple. */
+export declare function deriveTrustedInstallConsentId(bindingInput: TrustedInstallCandidateBinding, sha256: Sha256): TrustedInstallConsentId;

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-identifiers.js

@@ -0,0 +1,49 @@
+import { canonicalJson } from "../domain/canonical-json.js";
+import { ContentDigestSchema } from "../domain/content-manifest.js";
+import { NativeComponentInventoryViewSchema } from "./native-inspection-contract.js";
+import { TrustedInstallCandidateBindingSchema, TrustedInstallConsentIdSchema, TrustedInstallSessionTokenSchema, } from "./trusted-install-contract.js";
+const encoder = new TextEncoder();
+function digestHex(value, sha256) {
+    const bytes = sha256(encoder.encode(value));
+    if (!(bytes instanceof Uint8Array) || bytes.byteLength !== 32)
+        throw new Error("SHA-256 must return exactly 32 bytes");
+    return [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function constantTimeEqual(left, right) {
+    let difference = left.length ^ right.length;
+    for (let index = 0; index < Math.max(left.length, right.length); index += 1) {
+        difference |= (left.charCodeAt(index) || 0) ^ (right.charCodeAt(index) || 0);
+    }
+    return difference === 0;
+}
+/** A token is only a host-epoch lookup capability; it contains no workflow evidence. */
+export function createTrustedInstallSessionToken(sessionId, hostEpochInput, sha256) {
+    const id = sessionId.toLowerCase();
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(id))
+        throw new TypeError("trusted-install session id must be a UUID v4");
+    const hostEpoch = ContentDigestSchema.parse(hostEpochInput);
+    const checksum = digestHex(`trusted-install-session-v1\0${id}\0${hostEpoch}`, sha256);
+    return TrustedInstallSessionTokenSchema.parse(`trusted-install-session-v1:${id}.${checksum}`);
+}
+export function verifyTrustedInstallSessionToken(tokenInput, hostEpochInput, sha256) {
+    const parsed = TrustedInstallSessionTokenSchema.safeParse(tokenInput);
+    if (!parsed.success)
+        return undefined;
+    const hostEpoch = ContentDigestSchema.parse(hostEpochInput);
+    const match = /^trusted-install-session-v1:([0-9a-f-]{36})\.([0-9a-f]{64})$/.exec(parsed.data);
+    if (match === null)
+        return undefined;
+    const expected = digestHex(`trusted-install-session-v1\0${match[1]}\0${hostEpoch}`, sha256);
+    return constantTimeEqual(match[2], expected) ? match[1] : undefined;
+}
+export function deriveTrustedInstallConsentDisclosureDigest(componentsInput, sha256) {
+    const components = NativeComponentInventoryViewSchema.parse(componentsInput);
+    return ContentDigestSchema.parse(`sha256:${digestHex(`trusted-install-disclosure-v1\0${canonicalJson(components)}`, sha256)}`);
+}
+/** Bind consent to the complete exact candidate authority tuple. */
+export function deriveTrustedInstallConsentId(bindingInput, sha256) {
+    const binding = TrustedInstallCandidateBindingSchema.parse(bindingInput);
+    const digest = digestHex(`trusted-install-consent-v1\0${canonicalJson(binding)}`, sha256);
+    return TrustedInstallConsentIdSchema.parse(`trusted-install-consent-v1:sha256:${digest}`);
+}
+//# sourceMappingURL=trusted-install-identifiers.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-identifiers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-install-identifiers.js","sourceRoot":"","sources":["../../src/application/trusted-install-identifiers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAsB,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAAE,kCAAkC,EAAqC,MAAM,iCAAiC,CAAC;AAExH,OAAO,EACL,oCAAoC,EACpC,6BAA6B,EAC7B,gCAAgC,GAIjC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,SAAS,SAAS,CAAC,KAAa,EAAE,MAAc;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACvH,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,UAAU,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gCAAgC,CAC9C,SAAiB,EACjB,cAA6B,EAC7B,MAAc;IAEd,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,uEAAuE,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IAC3J,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,SAAS,CAAC,+BAA+B,EAAE,KAAK,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IACtF,OAAO,gCAAgC,CAAC,KAAK,CAAC,8BAA8B,EAAE,IAAI,QAAQ,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,UAAmB,EACnB,cAA6B,EAC7B,MAAc;IAEd,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,8DAA8D,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/F,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,+BAA+B,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5F,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,2CAA2C,CACzD,eAA6C,EAC7C,MAAc;IAEd,MAAM,UAAU,GAAG,kCAAkC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7E,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,SAAS,CAAC,kCAAkC,aAAa,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AACjI,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,6BAA6B,CAC3C,YAA4C,EAC5C,MAAc;IAEd,MAAM,OAAO,GAAG,oCAAoC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,+BAA+B,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1F,OAAO,6BAA6B,CAAC,KAAK,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;AAC5F,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-lifecycle.d.ts

@@ -0,0 +1,30 @@
+import type { ContentDigest } from "../domain/content-manifest.js";
+import type { TrustedInstallCandidate } from "./trusted-install-candidate.js";
+import type { ConfigurationPathContext } from "./ports/configuration-path.js";
+import type { LifecycleStateStore } from "./ports/lifecycle-state-store.js";
+import type { PluginLifecycleResult, PluginLifecycleService, PreparedInstallLifecycleAuthority } from "./plugin-lifecycle-service.js";
+export type TrustedInstallLifecycleResult = Readonly<{
+    kind: "lifecycle";
+    result: PluginLifecycleResult;
+    enabledExisting: boolean;
+}> | Readonly<{
+    kind: "current-state";
+    activation: "enabled";
+    revision: TrustedInstallCandidate["revision"]["revision"];
+}> | Readonly<{
+    kind: "conflict";
+    reason: "already-installed-different-revision" | "pending-transition";
+}> | Readonly<{
+    kind: "recovery-required";
+}> | Readonly<{
+    kind: "boundary-failure";
+    boundary: "before-transaction";
+    reason: "aborted" | "adapter-failed" | "cleanup-failed";
+}>;
+export type TrustedInstallLifecycleDependencies = Readonly<{
+    state: LifecycleStateStore;
+    prepared: PreparedInstallLifecycleAuthority;
+    publicLifecycle: Pick<PluginLifecycleService, "enable">;
+}>;
+/** Select install/enable/current/conflict, leaving all mutation semantics to lifecycle. */
+export declare function executeTrustedInstallLifecycle(candidate: TrustedInstallCandidate, configurationPathContext: ConfigurationPathContext, dependencies: TrustedInstallLifecycleDependencies, signal: AbortSignal, expectedConfigurationRevision?: ContentDigest): Promise<TrustedInstallLifecycleResult>;

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-lifecycle.js

@@ -0,0 +1,87 @@
+function sourceContext(candidate) {
+    return candidate.resolved.entry.source.value.kind === "marketplace-path"
+        ? {
+            kind: "marketplace",
+            root: candidate.resolved.marketplace.root,
+            source: candidate.resolved.marketplace.source,
+            contentRootDigest: candidate.resolved.marketplace.content.rootDigest,
+            content: candidate.resolved.marketplace.content,
+            binding: candidate.resolved.marketplace.binding,
+        }
+        : { kind: "external" };
+}
+async function releaseBeforeTransaction(candidate) {
+    try {
+        await candidate.lease.release();
+        return undefined;
+    }
+    catch {
+        return { kind: "boundary-failure", boundary: "before-transaction", reason: "cleanup-failed" };
+    }
+}
+/** Select install/enable/current/conflict, leaving all mutation semantics to lifecycle. */
+export async function executeTrustedInstallLifecycle(candidate, configurationPathContext, dependencies, signal, expectedConfigurationRevision) {
+    if (signal.aborted) {
+        return { kind: "boundary-failure", boundary: "before-transaction", reason: "aborted" };
+    }
+    let loaded;
+    try {
+        loaded = await dependencies.state.read(candidate.resolved.scope, signal);
+    }
+    catch {
+        return {
+            kind: "boundary-failure",
+            boundary: "before-transaction",
+            reason: signal.aborted ? "aborted" : "adapter-failed",
+        };
+    }
+    if (!loaded.ok) {
+        const cleanup = await releaseBeforeTransaction(candidate);
+        return cleanup ?? { kind: "recovery-required" };
+    }
+    const records = "installed" in loaded.snapshot ? loaded.snapshot.installed.plugins : loaded.snapshot.project.plugins;
+    const current = records.find((record) => record.plugin === candidate.binding.plugin);
+    if (current?.pendingTransition !== undefined) {
+        const cleanup = await releaseBeforeTransaction(candidate);
+        return cleanup ?? { kind: "conflict", reason: "pending-transition" };
+    }
+    if (current !== undefined && current.selectedRevision !== candidate.binding.immutableRevision) {
+        const cleanup = await releaseBeforeTransaction(candidate);
+        return cleanup ?? { kind: "conflict", reason: "already-installed-different-revision" };
+    }
+    if (current?.activation === "enabled") {
+        const cleanup = await releaseBeforeTransaction(candidate);
+        return cleanup ?? { kind: "current-state", activation: "enabled", revision: candidate.binding.immutableRevision };
+    }
+    if (current?.activation === "disabled") {
+        const cleanup = await releaseBeforeTransaction(candidate);
+        if (cleanup !== undefined)
+            return cleanup;
+        return {
+            kind: "lifecycle",
+            enabledExisting: true,
+            result: await dependencies.publicLifecycle.enable({
+                scope: candidate.resolved.scope,
+                plugin: candidate.binding.plugin,
+                configurationPathContext,
+                ...(expectedConfigurationRevision === undefined ? {} : { expectedConfigurationRevision }),
+            }, signal),
+        };
+    }
+    return {
+        kind: "lifecycle",
+        enabledExisting: false,
+        result: await dependencies.prepared.installPrepared({
+            scope: candidate.resolved.scope,
+            plugin: candidate.binding.plugin,
+            entry: candidate.resolved.entry,
+            marketplaceSource: candidate.resolved.marketplace.source,
+            sourceContext: sourceContext(candidate),
+            lease: candidate.lease,
+            expected: candidate.binding,
+            ...(expectedConfigurationRevision === undefined ? {} : { expectedConfigurationRevision }),
+            configurationPathContext,
+        }, signal),
+    };
+}
+//# sourceMappingURL=trusted-install-lifecycle.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-install-lifecycle.js","sourceRoot":"","sources":["../../src/application/trusted-install-lifecycle.ts"],"names":[],"mappings":"AA2BA,SAAS,aAAa,CAAC,SAAkC;IACvD,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB;QACtE,CAAC,CAAC;YACE,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI;YACzC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM;YAC7C,iBAAiB,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU;YACpE,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO;YAC/C,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO;SAChD;QACH,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,SAAkC;IAElC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAChG,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,SAAkC,EAClC,wBAAkD,EAClD,YAAiD,EACjD,MAAmB,EACnB,6BAA6C;IAE7C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,MAAwD,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,oBAAoB;YAC9B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB;SACtD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAC1D,OAAO,OAAO,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;IACrH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,OAAO,EAAE,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAC1D,OAAO,OAAO,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9F,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAC1D,OAAO,OAAO,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAC1D,OAAO,OAAO,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,OAAO,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,eAAe,EAAE,IAAI;YACrB,MAAM,EAAE,MAAM,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC;gBAChD,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;gBAC/B,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM;gBAChC,wBAAwB;gBACxB,GAAG,CAAC,6BAA6B,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,6BAA6B,EAAE,CAAC;aAC1F,EAAE,MAAM,CAAC;SACX,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,eAAe,EAAE,KAAK;QACtB,MAAM,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC;YAClD,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;YAC/B,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM;YAChC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;YAC/B,iBAAiB,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM;YACxD,aAAa,EAAE,aAAa,CAAC,SAAS,CAAC;YACvC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,QAAQ,EAAE,SAAS,CAAC,OAAO;YAC3B,GAAG,CAAC,6BAA6B,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,6BAA6B,EAAE,CAAC;YACzF,wBAAwB;SACzB,EAAE,MAAM,CAAC;KACX,CAAC;AACJ,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-service.d.ts

@@ -0,0 +1,31 @@
+import type { ContentDigest } from "../domain/content-manifest.js";
+import type { Sha256 } from "../domain/source.js";
+import { type BoundPluginConfigurationService } from "./configuration-service.js";
+import type { ExactTrustGrantService } from "./exact-trust-grant-service.js";
+import type { LifecycleOperationIdPort } from "./ports/lifecycle-operation-id.js";
+import type { LifecycleClock } from "./ports/lifecycle-clock.js";
+import type { NativeInspectionEvidencePort } from "./ports/native-inspection-evidence.js";
+import type { ProjectRootAuthorityPort, TrustedProjectRoot } from "./ports/project-root-authority.js";
+import { type TrustedInstallCandidate, type TrustedInstallCandidateService } from "./trusted-install-candidate.js";
+import { type TrustedInstallationService } from "./trusted-install-contract.js";
+import { type TrustedInstallConfigurationAuthority, type TrustedInstallConfigurationDependencies } from "./trusted-install-configuration.js";
+import { type TrustedInstallLifecycleDependencies } from "./trusted-install-lifecycle.js";
+export type TrustedInstallationServiceDependencies = Readonly<{
+    candidate: TrustedInstallCandidateService;
+    configuration: BoundPluginConfigurationService;
+    configurationAuthority: TrustedInstallConfigurationAuthority;
+    configurationInput(candidate: TrustedInstallCandidate, projectRoot: TrustedProjectRoot | undefined): Omit<TrustedInstallConfigurationDependencies, "configurationRef" | "plugin" | "scope" | "descriptors">;
+    trust: ExactTrustGrantService;
+    lifecycle: TrustedInstallLifecycleDependencies;
+    evidence: NativeInspectionEvidencePort;
+    projectRoots: ProjectRootAuthorityPort;
+    clock: LifecycleClock;
+    sessionIds: LifecycleOperationIdPort;
+    hostEpoch: ContentDigest;
+    sha256: Sha256;
+}>;
+export declare function createTrustedInstallationService(dependencies: TrustedInstallationServiceDependencies): Readonly<{
+    application: TrustedInstallationService;
+    quiesce(): void;
+    close(): Promise<void>;
+}>;