@nklisch/pi-enhanced 0.2.3 → 0.2.4

package/node_modules/@nklisch/pi-plugins/dist/application/trust-service.d.ts

@@ -1,25 +0,0 @@
-import { type TrustCandidate } from "../domain/trust-policy.js";
-import type { ProjectTrustPort } from "./ports/project-trust.js";
-import type { Sha256 } from "../domain/source.js";
-import { type ScopeContext } from "../domain/state/scope.js";
-import type { TrustStateRecord } from "../domain/state/trust-state.js";
-export type TrustAuthorizationResult = Readonly<{
-    kind: "authorized";
-    subject: TrustCandidate["subject"];
-}> | Readonly<{
-    kind: "denied";
-    code: "PROJECT_UNTRUSTED" | "TRUST_ABSENT" | "TRUST_REVOKED" | "TRUST_EVIDENCE_INVALID";
-}>;
-/**
- * Check project trust before plugin trust. User-scope candidates intentionally
- * never call the project port, preserving the separate trust boundary.
- */
-export declare function authorizeTrustCandidate(request: Readonly<{
-    candidate: TrustCandidate;
-    records: readonly TrustStateRecord[];
-    /** Optional runtime provenance for callers that have a full project context. */
-    scope?: ScopeContext;
-}>, dependencies: Readonly<{
-    projectTrust: ProjectTrustPort;
-    sha256: Sha256;
-}>, signal: AbortSignal): Promise<TrustAuthorizationResult>;

package/node_modules/@nklisch/pi-plugins/dist/application/trust-service.js

@@ -1,76 +0,0 @@
-import { BoundaryError, ErrorCodeRegistry, } from "../domain/errors.js";
-import { evaluateTrust, verifyTrustCandidate, } from "../domain/trust-policy.js";
-import { createScopeContext, } from "../domain/state/scope.js";
-import { ProjectTrustAssessmentSchema } from "./ports/project-trust.js";
-import { isAbortRejection } from "./abort-rejection.js";
-function adapterFailure() {
-    // Deliberately omit the native cause. Credential/project adapters may put
-    // sensitive paths or account material in their errors.
-    return new BoundaryError({
-        code: ErrorCodeRegistry.adapterFailed,
-        operation: "assessProjectTrust",
-        message: "project trust assessment failed",
-    });
-}
-function projectScope(scope) {
-    return scope.kind === "project" ? scope.projectKey : undefined;
-}
-function mapDecision(decision) {
-    if (decision.kind === "authorized")
-        return decision;
-    switch (decision.reason) {
-        case "ABSENT": return { kind: "denied", code: "TRUST_ABSENT" };
-        case "REVOKED": return { kind: "denied", code: "TRUST_REVOKED" };
-        case "EVIDENCE_MISMATCH": return { kind: "denied", code: "TRUST_EVIDENCE_INVALID" };
-        default: return assertNever(decision.reason);
-    }
-}
-/**
- * Check project trust before plugin trust. User-scope candidates intentionally
- * never call the project port, preserving the separate trust boundary.
- */
-export async function authorizeTrustCandidate(request, dependencies, signal) {
-    signal.throwIfAborted();
-    let candidate;
-    try {
-        candidate = verifyTrustCandidate(request.candidate, dependencies.sha256);
-    }
-    catch {
-        return { kind: "denied", code: "TRUST_EVIDENCE_INVALID" };
-    }
-    const projectKey = projectScope(candidate.evidence.scope);
-    if (projectKey !== undefined) {
-        let assessment;
-        try {
-            assessment = ProjectTrustAssessmentSchema.parse(await dependencies.projectTrust.assess(projectKey, signal));
-        }
-        catch (error) {
-            if (signal.aborted)
-                throw signal.reason;
-            if (isAbortRejection(error))
-                throw error;
-            throw adapterFailure();
-        }
-        signal.throwIfAborted();
-        if (request.scope !== undefined) {
-            let verifiedScope;
-            try {
-                verifiedScope = createScopeContext(request.scope, dependencies.sha256);
-            }
-            catch {
-                return { kind: "denied", code: "TRUST_EVIDENCE_INVALID" };
-            }
-            if (verifiedScope.kind !== "project" || verifiedScope.projectKey !== projectKey) {
-                return { kind: "denied", code: "TRUST_EVIDENCE_INVALID" };
-            }
-        }
-        if (assessment.kind !== "trusted") {
-            return { kind: "denied", code: "PROJECT_UNTRUSTED" };
-        }
-    }
-    return mapDecision(evaluateTrust(candidate, request.records, dependencies.sha256));
-}
-function assertNever(value) {
-    throw new Error(`unhandled trust decision: ${String(value)}`);
-}
-//# sourceMappingURL=trust-service.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/trust-service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-service.js","sourceRoot":"","sources":["../../src/application/trust-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,oBAAoB,GAGrB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,kBAAkB,GAInB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AASxD,SAAS,cAAc;IACrB,0EAA0E;IAC1E,uDAAuD;IACvD,OAAO,IAAI,aAAa,CAAC;QACvB,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,oBAAoB;QAC/B,OAAO,EAAE,iCAAiC;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAqB;IACzC,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,QAAuB;IAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAC;IACpD,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAC/D,KAAK,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACjE,KAAK,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;QACpF,SAAS,OAAO,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAKE,EACF,YAGE,EACF,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAC;IAExB,IAAI,SAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,UAA2D,CAAC;QAChE,IAAI,CAAC;YACH,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;YACxC,IAAI,gBAAgB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACzC,MAAM,cAAc,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,aAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS,IAAI,aAAa,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBAChF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAChE,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-candidate.d.ts

@@ -1,55 +0,0 @@
-import { type CompatibilityReport } from "../domain/compatibility.js";
-import { type InstalledRevisionRecord } from "../domain/state/installed-state.js";
-import { type TrustCandidate } from "../domain/trust-policy.js";
-import { type CandidateContentCleanupRecovery, type CandidateContentLease, type CandidateContentLeasePort } from "./ports/candidate-content-lease.js";
-import type { InspectionReadinessPort } from "./ports/inspection-readiness.js";
-import type { InspectionEvidenceSnapshot } from "./ports/native-inspection-evidence.js";
-import type { PluginInspectionService } from "./inspection-service.js";
-import type { MarketplaceCatalogService, ResolvedMarketplaceCandidate } from "./marketplace-catalog-service.js";
-import { type CandidateInspectionDetailSubject } from "./native-inspection-identifiers.js";
-import { type NativeInspectionDetail } from "./native-inspection-contract.js";
-import { type TrustedInstallCandidateBinding, type TrustedInstallConfigurationField, type TrustedInstallConsentDisclosure } from "./trusted-install-contract.js";
-import type { Sha256 } from "../domain/source.js";
-export type TrustedInstallCandidate = Readonly<{
-    lease: CandidateContentLease;
-    resolved: ResolvedMarketplaceCandidate;
-    plugin: import("../domain/plugin.js").NormalizedPlugin;
-    compatibility: CompatibilityReport;
-    revision: InstalledRevisionRecord;
-    trust: TrustCandidate;
-    binding: TrustedInstallCandidateBinding;
-    detail: NativeInspectionDetail;
-    fields: readonly TrustedInstallConfigurationField[];
-    consent: TrustedInstallConsentDisclosure;
-    snapshotBinding: InspectionEvidenceSnapshot["binding"];
-}>;
-export type TrustedInstallCandidateDependencies = Readonly<{
-    catalog: Pick<MarketplaceCatalogService, "resolve">;
-    content: CandidateContentLeasePort;
-    inspector: PluginInspectionService;
-    readiness: InspectionReadinessPort;
-    sha256: Sha256;
-}>;
-export interface TrustedInstallCandidateService {
-    acquire(request: Readonly<{
-        subject: CandidateInspectionDetailSubject;
-        snapshot: InspectionEvidenceSnapshot;
-    }>, signal: AbortSignal): Promise<TrustedInstallCandidateResult>;
-    validate(candidate: TrustedInstallCandidate, signal: AbortSignal): Promise<"current" | "stale">;
-}
-export type TrustedInstallCandidateResult = Readonly<{
-    kind: "ready";
-    candidate: TrustedInstallCandidate;
-}> | Readonly<{
-    kind: "stale" | "unavailable" | "rejected";
-    diagnostics: readonly import("./native-inspection-contract.js").NativeDiagnostic[];
-}> | Readonly<{
-    kind: "cleanup-failed";
-    cleanup: CandidateContentCleanupRecovery;
-    diagnostics: readonly import("./native-inspection-contract.js").NativeDiagnostic[];
-}>;
-export declare function createTrustedInstallCandidateService(dependencies: TrustedInstallCandidateDependencies): TrustedInstallCandidateService;
-export declare const acquireTrustedInstallCandidate: (request: Readonly<{
-    subject: CandidateInspectionDetailSubject;
-    snapshot: InspectionEvidenceSnapshot;
-}>, dependencies: TrustedInstallCandidateDependencies, signal: AbortSignal) => Promise<TrustedInstallCandidateResult>;

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-candidate.js

@@ -1,319 +0,0 @@
-import { compareUtf8 } from "../domain/canonical-json.js";
-import { evaluateCompatibility } from "../domain/compatibility-evaluator.js";
-import { CompatibilityReportSchema } from "../domain/compatibility.js";
-import { RuntimeCapabilityRegistry } from "../domain/compatibility-policy.js";
-import { digestConfigurationDescriptors } from "../domain/configured-values.js";
-import { createInstalledRevisionRecord } from "../domain/state/installed-state.js";
-import { toScopeReference } from "../domain/state/scope.js";
-import { createTrustCandidate } from "../domain/trust-policy.js";
-import { deriveMarketplaceSourceIdentity, derivePluginSourceIdentity } from "../domain/update-policy.js";
-import { createMcpLaunchTemplate } from "../domain/mcp-launch-template.js";
-import { digestCompatibilityReport } from "./ports/runtime-projection.js";
-import { isCandidateContentCleanupError, } from "./ports/candidate-content-lease.js";
-import { createNativeCandidateInspector } from "./native-candidate-inspection.js";
-import { projectSafeComponents, projectSafeSource } from "./native-inspection-disclosure.js";
-import { NativeDisplayLimits, toSafeDisplayField } from "./native-inspection-display.js";
-import { deriveInspectionDetailId, deriveInspectionEvidenceSnapshotId, } from "./native-inspection-identifiers.js";
-import { NativeInspectionDetailResultSchema, } from "./native-inspection-contract.js";
-import { TrustedInstallCandidateBindingSchema, TrustedInstallConfigurationFieldSchema, TrustedInstallConsentDisclosureSchema, } from "./trusted-install-contract.js";
-import { deriveTrustedInstallConsentDisclosureDigest, deriveTrustedInstallConsentId, } from "./trusted-install-identifiers.js";
-function leaseCleanupRecovery(lease) {
-    return Object.freeze({ retry: () => lease.release() });
-}
-async function releaseForResult(lease, result) {
-    try {
-        await lease.release();
-        return result;
-    }
-    catch (error) {
-        return {
-            kind: "cleanup-failed",
-            cleanup: isCandidateContentCleanupError(error) ? error.recovery : leaseCleanupRecovery(lease),
-            diagnostics: result.diagnostics,
-        };
-    }
-}
-function sameScope(left, right) {
-    return left.kind === right.kind && (left.kind === "user" || (right.kind === "project" && left.projectKey === right.projectKey));
-}
-function exactCandidate(candidate, subject) {
-    return candidate.id === subject.candidateId && candidate.registrationId === subject.registrationId &&
-        candidate.snapshot === subject.catalogSnapshot && candidate.entry.identity.value.key === subject.plugin &&
-        sameScope(toScopeReference(candidate.scope), subject.scope);
-}
-function catalogAuthority(snapshot, subject) {
-    const scopes = snapshot.binding.scopes.filter((candidate) => sameScope(candidate.scope, subject.scope));
-    if (scopes.length !== 1)
-        return scopes.length === 0 ? "stale" : "unavailable";
-    if (scopes[0].status !== "ready" || scopes[0].generation === undefined)
-        return "unavailable";
-    const bindings = snapshot.binding.catalogs.filter((catalog) => catalog.registrationId === subject.registrationId && sameScope(catalog.scope, subject.scope));
-    if (bindings.length !== 1)
-        return bindings.length === 0 ? "stale" : "unavailable";
-    const selected = bindings[0];
-    if (selected.snapshot !== subject.catalogSnapshot)
-        return "stale";
-    if (selected.cache.kind === "corrupt" || selected.cache.kind === "unavailable" || selected.cache.kind === "not-materialized") {
-        return "unavailable";
-    }
-    return "current";
-}
-function safe(value, maxScalars = NativeDisplayLimits.labelScalars) {
-    return toSafeDisplayField(value, { maxScalars });
-}
-function defaultView(option) {
-    if (!("default" in option.value) || option.value.default === undefined || option.sensitive)
-        return undefined;
-    switch (option.value.kind) {
-        case "string": return { kind: "string", value: safe(option.value.default) };
-        case "number": return { kind: "number", value: option.value.default };
-        case "boolean": return { kind: "boolean", value: option.value.default };
-        case "strings": return { kind: "strings", values: option.value.default.map((entry) => safe(entry)) };
-        case "directory": return { kind: "directory", value: safe(option.value.default, NativeDisplayLimits.pathScalars) };
-        case "file": return { kind: "file", value: safe(option.value.default, NativeDisplayLimits.pathScalars) };
-    }
-}
-function fields(plugin, readiness) {
-    const state = new Map(readiness.map((field) => [field.key, field.state]));
-    return Object.freeze(plugin.configuration.options.map((option) => {
-        const constraints = option.value.kind === "string" ? { ...(option.value.pattern === undefined ? {} : { pattern: safe(option.value.pattern, NativeDisplayLimits.descriptionScalars) }) }
-            : option.value.kind === "number" ? { ...(option.value.min === undefined ? {} : { min: option.value.min }), ...(option.value.max === undefined ? {} : { max: option.value.max }) }
-                : option.value.kind === "strings" ? { ...(option.value.minItems === undefined ? {} : { minItems: option.value.minItems }), ...(option.value.maxItems === undefined ? {} : { maxItems: option.value.maxItems }) }
-                    : option.value.kind === "directory" || option.value.kind === "file" ? { mustExist: option.value.mustExist }
-                        : {};
-        const projectedDefault = defaultView(option);
-        return TrustedInstallConfigurationFieldSchema.parse({
-            key: option.key,
-            label: safe(option.label.value),
-            ...(option.description === undefined ? {} : { description: safe(option.description.value, NativeDisplayLimits.descriptionScalars) }),
-            kind: option.value.kind,
-            required: option.required,
-            sensitive: option.sensitive,
-            defaultPresent: projectedDefault !== undefined,
-            ...(projectedDefault === undefined ? {} : { default: projectedDefault }),
-            constraints,
-            state: state.get(option.key) ?? (projectedDefault === undefined ? "missing" : "defaulted"),
-        });
-    }).sort((left, right) => compareUtf8(left.key, right.key)));
-}
-function subagentInterception(plugin, snapshot) {
-    const declared = plugin.components.hooks.some((hook) => hook.event.value === "SubagentStart" || hook.event.value === "SubagentStop");
-    if (!declared)
-        return "not-declared";
-    return snapshot.capabilities?.capabilities[RuntimeCapabilityRegistry.subagentInterception.id]?.status === "available"
-        ? "available" : "unavailable";
-}
-function displayComplete(field) {
-    return field === undefined || !field.truncated;
-}
-/** Consent never silently drops or truncates a launch-bearing declaration. */
-function executableDisclosureComplete(plugin, components) {
-    if (components.skills.some((component) => !displayComplete(component.name) || !displayComplete(component.root)))
-        return false;
-    for (const component of components.hooks) {
-        if (!displayComplete(component.event) || !displayComplete(component.matcher) || !displayComplete(component.handler.command))
-            return false;
-        if (component.handler.kind === "exec") {
-            const source = plugin.components.hooks.find((candidate) => candidate.id === component.componentId);
-            if (source?.handler.value.kind !== "exec" || source.handler.value.args.length !== component.handler.args.length ||
-                component.handler.args.some((argument) => !displayComplete(argument)))
-                return false;
-        }
-    }
-    for (const component of components.mcpServers) {
-        if (!displayComplete(component.nativeKey) || !displayComplete(component.command) ||
-            component.args.some((argument) => !displayComplete(argument)) ||
-            component.environmentNames.some((name) => !displayComplete(name)) ||
-            component.headerNames.some((name) => !displayComplete(name)) ||
-            component.toolPolicy.allowed.some((name) => !displayComplete(name)) ||
-            component.toolPolicy.denied.some((name) => !displayComplete(name)) ||
-            !displayComplete(component.url?.host) || !displayComplete(component.url?.port) || !displayComplete(component.url?.path))
-            return false;
-        const source = plugin.components.mcpServers.find((candidate) => candidate.id === component.componentId);
-        if (source === undefined)
-            return false;
-        try {
-            const template = createMcpLaunchTemplate(source, plugin.identity.key);
-            if (template.transport === "stdio") {
-                if (component.args.length !== template.args.length || component.environmentNames.length !== template.env.length)
-                    return false;
-            }
-            else {
-                const authenticationEnvironmentCount = template.bearerToken?.kind === "environment" ? 1 : 0;
-                if (component.headerNames.length !== template.headers.length || component.environmentNames.length !== authenticationEnvironmentCount)
-                    return false;
-            }
-        }
-        catch {
-            return false;
-        }
-    }
-    return true;
-}
-async function nativeDetail(subject, snapshot, candidate, lease, dependencies, signal) {
-    const inspector = createNativeCandidateInspector({
-        catalog: { resolve: async () => ({ kind: "resolved", candidate }) },
-        content: { withMaterialized: async (_candidate, useSignal, use) => { useSignal.throwIfAborted(); return use(lease.materialized); } },
-        inspector: dependencies.inspector,
-        readiness: dependencies.readiness,
-        sha256: dependencies.sha256,
-    });
-    return NativeInspectionDetailResultSchema.parse(await inspector.inspect(subject, snapshot, signal));
-}
-export function createTrustedInstallCandidateService(dependencies) {
-    if (dependencies === null || typeof dependencies !== "object" || typeof dependencies.sha256 !== "function")
-        throw new TypeError("trusted-install candidate dependencies are required");
-    async function acquire(request, signal) {
-        signal.throwIfAborted();
-        const authority = catalogAuthority(request.snapshot, request.subject);
-        if (authority === "stale")
-            return { kind: "stale", diagnostics: [] };
-        if (authority === "unavailable")
-            return { kind: "unavailable", diagnostics: [] };
-        if (request.subject.scope.kind === "project" &&
-            (request.snapshot.binding.currentProject.projectKey !== request.subject.scope.projectKey || request.snapshot.binding.currentProject.trust.kind !== "trusted")) {
-            return { kind: "rejected", diagnostics: [] };
-        }
-        const resolution = await dependencies.catalog.resolve({ candidateId: request.subject.candidateId, snapshot: request.subject.catalogSnapshot }, signal)
-            .catch(() => ({ kind: "catalog-unavailable" }));
-        if (resolution.kind === "candidate-stale" || resolution.kind === "candidate-missing")
-            return { kind: "stale", diagnostics: [] };
-        if (resolution.kind !== "resolved")
-            return { kind: "unavailable", diagnostics: [] };
-        if (!exactCandidate(resolution.candidate, request.subject))
-            return { kind: "stale", diagnostics: [] };
-        let lease;
-        try {
-            lease = await dependencies.content.acquire(resolution.candidate, signal);
-        }
-        catch (error) {
-            if (isCandidateContentCleanupError(error)) {
-                return { kind: "cleanup-failed", cleanup: error.recovery, diagnostics: [] };
-            }
-            if (signal.aborted)
-                throw signal.reason ?? error;
-            return { kind: "unavailable", diagnostics: [] };
-        }
-        try {
-            const inspected = await dependencies.inspector.inspect({ entry: resolution.candidate.entry, materialized: lease.materialized }, signal);
-            const detailResult = await nativeDetail(request.subject, request.snapshot, resolution.candidate, lease, dependencies, signal);
-            if (detailResult.kind !== "found") {
-                if (detailResult.kind === "stale" || detailResult.kind === "missing" || detailResult.kind === "invalid-id") {
-                    return releaseForResult(lease, { kind: "stale", diagnostics: [] });
-                }
-                return releaseForResult(lease, { kind: "unavailable", diagnostics: detailResult.diagnostics });
-            }
-            const detail = detailResult.detail;
-            if (!inspected.ok || inspected.value.identity.key !== request.subject.plugin || request.snapshot.capabilities === undefined || request.snapshot.binding.capability.digest === undefined) {
-                return releaseForResult(lease, { kind: "rejected", diagnostics: detail.diagnostics });
-            }
-            const plugin = inspected.value;
-            const compatibility = CompatibilityReportSchema.parse(evaluateCompatibility({
-                plugin,
-                capabilities: request.snapshot.capabilities,
-                ...(resolution.candidate.entry.policy === undefined ? {} : { marketplacePolicy: resolution.candidate.entry.policy }),
-            }));
-            if (!compatibility.activatable) {
-                return releaseForResult(lease, { kind: "rejected", diagnostics: detail.diagnostics });
-            }
-            const components = projectSafeComponents({ plugin, compatibility });
-            if (!executableDisclosureComplete(plugin, components)) {
-                return releaseForResult(lease, { kind: "rejected", diagnostics: detail.diagnostics });
-            }
-            const consentDisclosureDigest = deriveTrustedInstallConsentDisclosureDigest(components, dependencies.sha256);
-            const scope = toScopeReference(resolution.candidate.scope);
-            const trust = createTrustCandidate({
-                scope,
-                marketplaceSource: resolution.candidate.marketplace.source,
-                plugin,
-                compatibility,
-                content: lease.materialized.content,
-                materializationBinding: lease.materialized.binding,
-            }, dependencies.sha256);
-            const revision = createInstalledRevisionRecord({
-                plugin,
-                compatibility,
-                content: lease.materialized.content,
-                scope,
-                marketplaceSourceIdentity: deriveMarketplaceSourceIdentity(resolution.candidate.marketplace.source.declared, dependencies.sha256),
-                pluginSourceIdentity: derivePluginSourceIdentity(resolution.candidate.entry.source.value, dependencies.sha256),
-                ...(plugin.version?.value === undefined && resolution.candidate.entry.version?.value === undefined ? {} : { declaredVersion: plugin.version?.value ?? resolution.candidate.entry.version?.value }),
-            }, dependencies.sha256);
-            const binding = TrustedInstallCandidateBindingSchema.parse({
-                scope,
-                registrationId: resolution.candidate.registrationId,
-                candidateId: resolution.candidate.id,
-                catalogSnapshot: resolution.candidate.snapshot,
-                plugin: plugin.identity.key,
-                sourceIdentity: lease.materialized.source.hash,
-                immutableRevision: revision.revision,
-                contentDigest: lease.materialized.content.rootDigest,
-                compatibilityFingerprint: digestCompatibilityReport(compatibility, dependencies.sha256),
-                configurationDescriptorDigest: digestConfigurationDescriptors(plugin.configuration, dependencies.sha256),
-                consentDisclosureDigest,
-                ...(revision.configurationRef === undefined ? {} : { configurationRef: revision.configurationRef }),
-                trustSubject: trust.subject,
-                executableSurfaceDigest: trust.evidence.executableSurfaceDigest,
-                capabilityDigest: request.snapshot.binding.capability.digest,
-                ...(scope.kind === "project" ? { projectEpoch: request.snapshot.binding.currentProject.epoch } : {}),
-            });
-            const exactDetail = detail.snapshotId === deriveInspectionEvidenceSnapshotId(request.snapshot.binding, dependencies.sha256) &&
-                detail.summary.detailId === deriveInspectionDetailId(request.subject, dependencies.sha256) &&
-                detail.summary.subject === "marketplace-candidate" && detail.summary.plugin === binding.plugin &&
-                sameScope(detail.summary.scope, binding.scope) && detail.summary.revision.immutable === binding.immutableRevision &&
-                detail.source.identity === binding.sourceIdentity && detail.compatibility.status === "activatable" &&
-                detail.compatibility.reportFingerprint === binding.compatibilityFingerprint;
-            if (!exactDetail || detail.summary.condition === "unavailable" || detail.trust === "unavailable" || detail.trust === "project-untrusted") {
-                return releaseForResult(lease, {
-                    kind: detail.summary.condition === "unavailable" || detail.trust === "unavailable" ? "unavailable" : "rejected",
-                    diagnostics: detail.diagnostics,
-                });
-            }
-            // Candidate inspection has no installed-revision reference. The install
-            // form does, so enrich its field state from that exact configuration
-            // authority without changing the parsed inspection result.
-            const configurationReadiness = await dependencies.readiness.configuration({
-                plugin: plugin.identity.key,
-                scope,
-                descriptors: plugin.configuration,
-                ...(revision.configurationRef === undefined ? {} : { configurationRef: revision.configurationRef }),
-            }, signal);
-            const configurationFields = fields(plugin, configurationReadiness);
-            const consent = TrustedInstallConsentDisclosureSchema.parse({
-                consentId: deriveTrustedInstallConsentId(binding, dependencies.sha256),
-                source: projectSafeSource(lease.materialized.source),
-                immutableRevision: revision.revision,
-                executableSurfaceDigest: trust.evidence.executableSurfaceDigest,
-                components,
-                requirements: detail.compatibility.requirements,
-                persistentData: true,
-                configurationEnvironmentNames: plugin.configuration.options.map((option) => safe(`CLAUDE_PLUGIN_OPTION_${option.key}`)).sort((left, right) => compareUtf8(left.text, right.text)),
-                subagentInterception: subagentInterception(plugin, request.snapshot),
-                remoteMcpDiscovery: "not-performed",
-                statement: safe("Grant trust to this exact revision and executable surface.", NativeDisplayLimits.descriptionScalars),
-            });
-            return { kind: "ready", candidate: Object.freeze({ lease, resolved: resolution.candidate, plugin, compatibility, revision, trust, binding, detail, fields: configurationFields, consent, snapshotBinding: request.snapshot.binding }) };
-        }
-        catch (error) {
-            const released = await releaseForResult(lease, { kind: "rejected", diagnostics: [] });
-            if (released.kind === "cleanup-failed")
-                return released;
-            if (signal.aborted)
-                throw signal.reason ?? error;
-            return released;
-        }
-    }
-    const service = {
-        acquire,
-        async validate(candidate, signal) {
-            const resolved = await dependencies.catalog.resolve({ candidateId: candidate.binding.candidateId, snapshot: candidate.binding.catalogSnapshot }, signal).catch(() => undefined);
-            return resolved?.kind === "resolved" && exactCandidate(resolved.candidate, {
-                version: 1, subject: "marketplace-candidate", scope: candidate.binding.scope, plugin: candidate.binding.plugin,
-                registrationId: candidate.binding.registrationId, candidateId: candidate.binding.candidateId, catalogSnapshot: candidate.binding.catalogSnapshot,
-            }) ? "current" : "stale";
-        },
-    };
-    return Object.freeze(service);
-}
-export const acquireTrustedInstallCandidate = (request, dependencies, signal) => createTrustedInstallCandidateService(dependencies).acquire(request, signal);
-//# sourceMappingURL=trusted-install-candidate.js.map

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-candidate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trusted-install-candidate.js","sourceRoot":"","sources":["../../src/application/trusted-install-candidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAA4B,MAAM,4BAA4B,CAAC;AACjG,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAgC,MAAM,oCAAoC,CAAC;AACjH,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAuB,MAAM,2BAA2B,CAAC;AACtF,OAAO,EAAE,+BAA+B,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACzG,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EACL,8BAA8B,GAI/B,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzF,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GAEnC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,kCAAkC,GAInC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,oCAAoC,EACpC,sCAAsC,EACtC,qCAAqC,GAItC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,2CAA2C,EAC3C,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAuC1C,SAAS,oBAAoB,CAAC,KAA4B;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAoC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,KAA4B,EAC5B,MAAoF;IAEpF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC;YAC7F,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAyC,EAAE,KAAgD;IAC5G,OAAO,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAClI,CAAC;AAED,SAAS,cAAc,CAAC,SAAuC,EAAE,OAAyC;IACxG,OAAO,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QAChG,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM;QACvG,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAoC,EACpC,OAAyC;IAEzC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;IAC9E,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC/F,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5D,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAChG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;IAClF,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IAC9B,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,eAAe;QAAE,OAAO,OAAO,CAAC;IAClE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC7H,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,UAAU,GAAW,mBAAmB,CAAC,YAAY;IAChF,OAAO,kBAAkB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,WAAW,CAAC,MAAgE;IACnF,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7G,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAQ,CAAC,EAAE,CAAC;QAC7E,KAAK,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAQ,EAAE,CAAC;QACvE,KAAK,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAQ,EAAE,CAAC;QACzE,KAAK,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtG,KAAK,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAQ,EAAE,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;QACpH,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAQ,EAAE,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CACb,MAAyC,EACzC,SAA6F;IAE7F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC/D,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE;YACrL,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE;gBACjL,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE;oBAChN,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE;wBAC3G,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO,sCAAsC,CAAC,KAAK,CAAC;YAClD,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACpI,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,cAAc,EAAE,gBAAgB,KAAK,SAAS;YAC9C,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;YACxE,WAAW;YACX,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAyC,EAAE,QAAoC;IAC3G,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,eAAe,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC;IACrI,IAAI,CAAC,QAAQ;QAAE,OAAO,cAAuB,CAAC;IAC9C,OAAO,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,yBAAyB,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,MAAM,KAAK,WAAW;QACnH,CAAC,CAAC,WAAoB,CAAC,CAAC,CAAC,aAAsB,CAAC;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,KAAyC;IAChE,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,SAAS,4BAA4B,CACnC,MAAyC,EACzC,UAAwC;IAExC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9H,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACzC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1I,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,WAAW,CAAC,CAAC;YACnG,IAAI,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM;gBAC3G,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC9C,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC;YAC5E,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC7D,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACjE,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC5D,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACnE,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAClE,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1I,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,WAAW,CAAC,CAAC;QACxG,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACtE,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;gBACnC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,MAAM,KAAK,QAAQ,CAAC,GAAG,CAAC,MAAM;oBAAE,OAAO,KAAK,CAAC;YAChI,CAAC;iBAAM,CAAC;gBACN,MAAM,8BAA8B,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5F,IAAI,SAAS,CAAC,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,MAAM,KAAK,8BAA8B;oBAAE,OAAO,KAAK,CAAC;YACrJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAyC,EACzC,QAAoC,EACpC,SAAuC,EACvC,KAA4B,EAC5B,YAAiD,EACjD,MAAmB;IAEnB,MAAM,SAAS,GAAG,8BAA8B,CAAC;QAC/C,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,SAAS,EAAE,CAAC,EAAE;QAC5E,OAAO,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;QACpI,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,MAAM,EAAE,YAAY,CAAC,MAAM;KAC5B,CAAC,CAAC;IACH,OAAO,kCAAkC,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,YAAiD;IACpG,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,OAAO,YAAY,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAEvL,KAAK,UAAU,OAAO,CACpB,OAAsG,EACtG,MAAmB;QAEnB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,SAAS,KAAK,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACrE,IAAI,SAAS,KAAK,aAAa;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACjF,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YACxC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YAClK,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC;aACnJ,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,qBAA8B,EAAE,CAAC,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,iBAAiB,IAAI,UAAU,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAChI,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAEtG,IAAI,KAA4B,CAAC;QACjC,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QACjF,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,8BAA8B,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;YAC9E,CAAC;YACD,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;YACxI,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YAC9H,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAClC,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,IAAI,YAAY,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC3G,OAAO,gBAAgB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,OAAO,gBAAgB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACxL,OAAO,gBAAgB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC;YAC/B,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,qBAAqB,CAAC;gBAC1E,MAAM;gBACN,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAC3C,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aACrH,CAAC,CAAC,CAAC;YACJ,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;gBAC/B,OAAO,gBAAgB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;gBACtD,OAAO,gBAAgB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,uBAAuB,GAAG,2CAA2C,CAAC,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YAC7G,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,oBAAoB,CAAC;gBACjC,KAAK;gBACL,iBAAiB,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM;gBAC1D,MAAM;gBACN,aAAa;gBACb,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,OAAO;gBACnC,sBAAsB,EAAE,KAAK,CAAC,YAAY,CAAC,OAAO;aACnD,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACxB,MAAM,QAAQ,GAAG,6BAA6B,CAAC;gBAC7C,MAAM;gBACN,aAAa;gBACb,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,OAAO;gBACnC,KAAK;gBACL,yBAAyB,EAAE,+BAA+B,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC;gBACjI,oBAAoB,EAAE,0BAA0B,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;gBAC9G,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;aACnM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,oCAAoC,CAAC,KAAK,CAAC;gBACzD,KAAK;gBACL,cAAc,EAAE,UAAU,CAAC,SAAS,CAAC,cAAc;gBACnD,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE;gBACpC,eAAe,EAAE,UAAU,CAAC,SAAS,CAAC,QAAQ;gBAC9C,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;gBAC3B,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI;gBAC9C,iBAAiB,EAAE,QAAQ,CAAC,QAAQ;gBACpC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU;gBACpD,wBAAwB,EAAE,yBAAyB,CAAC,aAAa,EAAE,YAAY,CAAC,MAAM,CAAC;gBACvF,6BAA6B,EAAE,8BAA8B,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,MAAM,CAAC;gBACxG,uBAAuB;gBACvB,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBACnG,YAAY,EAAE,KAAK,CAAC,OAAO;gBAC3B,uBAAuB,EAAE,KAAK,CAAC,QAAQ,CAAC,uBAAuB;gBAC/D,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM;gBAC5D,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrG,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,KAAK,kCAAkC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;gBACzH,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;gBAC1F,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,uBAAuB,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAC9F,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,iBAAiB;gBACjH,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,aAAa;gBAClG,MAAM,CAAC,aAAa,CAAC,iBAAiB,KAAK,OAAO,CAAC,wBAAwB,CAAC;YAC9E,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,KAAK,aAAa,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,IAAI,MAAM,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;gBACzI,OAAO,gBAAgB,CAAC,KAAK,EAAE;oBAC7B,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,KAAK,aAAa,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU;oBAC/G,WAAW,EAAE,MAAM,CAAC,WAAW;iBAChC,CAAC,CAAC;YACL,CAAC;YACD,wEAAwE;YACxE,qEAAqE;YACrE,2DAA2D;YAC3D,MAAM,sBAAsB,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC;gBACxE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;gBAC3B,KAAK;gBACL,WAAW,EAAE,MAAM,CAAC,aAAa;gBACjC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;aACpG,EAAE,MAAM,CAAC,CAAC;YACX,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,qCAAqC,CAAC,KAAK,CAAC;gBAC1D,SAAS,EAAE,6BAA6B,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;gBACtE,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;gBACpD,iBAAiB,EAAE,QAAQ,CAAC,QAAQ;gBACpC,uBAAuB,EAAE,KAAK,CAAC,QAAQ,CAAC,uBAAuB;gBAC/D,UAAU;gBACV,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,YAAY;gBAC/C,cAAc,EAAE,IAAI;gBACpB,6BAA6B,EAAE,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjL,oBAAoB,EAAE,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;gBACpE,kBAAkB,EAAE,eAAe;gBACnC,SAAS,EAAE,IAAI,CAAC,4DAA4D,EAAE,mBAAmB,CAAC,kBAAkB,CAAC;aACtH,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC1O,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YACtF,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB;gBAAE,OAAO,QAAQ,CAAC;YACxD,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;YACjD,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAmC;QAC9C,OAAO;QACP,KAAK,CAAC,QAAQ,CAAC,SAAkC,EAAE,MAAmB;YACpE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAChL,OAAO,QAAQ,EAAE,IAAI,KAAK,UAAU,IAAI,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE;gBACzE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM;gBAC9G,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,OAAO,CAAC,eAAe;aACjJ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3B,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,OAAsG,EACtG,YAAiD,EACjD,MAAmB,EACqB,EAAE,CAAC,oCAAoC,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/application/trusted-install-configuration.d.ts

@@ -1,53 +0,0 @@
-import { type PluginConfigurationDocument } from "../domain/configured-values.js";
-import type { PluginConfiguration } from "../domain/configuration.js";
-import type { PluginConfigurationStore } from "./ports/plugin-configuration-store.js";
-import type { ConfigurationPathContext, ConfigurationPathPort } from "./ports/configuration-path.js";
-import type { HostCapabilityStatus } from "./host-observation-contract.js";
-import type { SavePluginConfigurationRequest } from "./configuration-service.js";
-import type { Sha256 } from "../domain/source.js";
-import type { PluginKey } from "../domain/identity.js";
-import type { ScopeContext, ScopeReference } from "../domain/state/scope.js";
-import { type TrustedInstallConfigurationField, type TrustedInstallInputIssue, type TrustedInstallSubmission } from "./trusted-install-contract.js";
-import type { PluginConfigurationRef } from "../domain/state/references.js";
-export type TrustedInstallConfigurationDependencies = Readonly<{
-    configurationRef: PluginConfigurationRef;
-    plugin: PluginKey;
-    scope: ScopeContext;
-    descriptors: PluginConfiguration;
-    pathContext: ConfigurationPathContext;
-    paths: ConfigurationPathPort;
-    secretCustody: HostCapabilityStatus;
-    existing?: PluginConfigurationDocument;
-}>;
-export type TrustedInstallConfigurationValidationResult = Readonly<{
-    kind: "valid";
-    request: SavePluginConfigurationRequest;
-}> | Readonly<{
-    kind: "invalid";
-    issues: readonly TrustedInstallInputIssue[];
-}>;
-/** Partition untrusted workflow input before it reaches generic validation/custody. */
-export declare function validateTrustedInstallSubmission(fieldsInput: readonly TrustedInstallConfigurationField[], submission: TrustedInstallSubmission, dependencies: TrustedInstallConfigurationDependencies, signal: AbortSignal): Promise<TrustedInstallConfigurationValidationResult>;
-export type TrustedInstallConfigurationAuthorityResult = Readonly<{
-    kind: "current";
-    document: PluginConfigurationDocument;
-}> | Readonly<{
-    kind: "missing" | "stale" | "unavailable";
-}>;
-export type TrustedInstallConfigurationAuthorityRequest = Readonly<{
-    configurationRef: PluginConfigurationRef;
-    plugin: PluginKey;
-    scope: ScopeReference;
-    descriptors: PluginConfiguration;
-}>;
-export interface TrustedInstallConfigurationAuthority {
-    readCurrent(request: TrustedInstallConfigurationAuthorityRequest, signal: AbortSignal): Promise<TrustedInstallConfigurationAuthorityResult>;
-    readExact(request: TrustedInstallConfigurationAuthorityRequest & Readonly<{
-        expectedRevision: string;
-    }>, signal: AbortSignal): Promise<TrustedInstallConfigurationAuthorityResult>;
-}
-/** Exact read-only authority checks used for reuse and lifecycle transfer. */
-export declare function createTrustedInstallConfigurationAuthority(dependencies: Readonly<{
-    configurations: PluginConfigurationStore;
-    sha256: Sha256;
-}>): TrustedInstallConfigurationAuthority;