@open-everywhere/core 0.1.0

package/dist/agent/access/job-posture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-posture.d.ts","sourceRoot":"","sources":["../../../agent/access/job-posture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkB,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAGhF,2OAA2O;AAC3O,eAAO,MAAM,aAAa,gBAAgB,CAAC;AAE3C,+NAA+N;AAC/N,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAE/C,KAAK,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC;AAE9E;;gGAEgG;AAChG,wBAAgB,YAAY,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,UAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAG9F;AAED,oMAAoM;AACpM,wBAAgB,eAAe,CAAC,UAAU,EAAE,KAAK,GAAG,OAAO,CAI1D;AAED;0EAC0E;AAC1E,wBAAgB,cAAc,CAAC,UAAU,EAAE,KAAK,GAAG,OAAO,CAIzD;AAED,qFAAqF;AACrF,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,cAAc,CAAC;AAE3D,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;+FAC2F;IAC3F,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B;2DACuD;IACvD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED,oSAAoS;AACpS,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,cAAc,GAAG,cAAc,CAIvE;AAED,kRAAkR;AAClR,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAA6B,CAAC;AAErF,wSAAwS;AACxS,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,WAAW,CAAC,MAAM,CAAkB,GAAG,OAAO,CAQ9G;AAED,wTAAwT;AACxT,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAE,WAAW,CAAC,MAAM,CAAkB,GAAG,MAAM,EAAE,CAQlI;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/agent/access/job-posture.js

@@ -0,0 +1,65 @@
+// The PURE policy half of the durable-job toolset restriction, applied per WAKE: an un-escalated fire is narrowed to the job kit, and a wake a real human addressed keeps that human's normal posture. Fail-closed over wake classification INSIDE a job session only, never over job-session detection.
+import { JOB_WAKE_TOOLS, withheldFromJobWake } from "./window-gate-manifest.js";
+import { classifyConnectorOpTier, isReservedNamespaceTool } from "./consequence.js";
+/** The host-set auth attribute marking a delivery as an AUTONOMOUS durable-job fire. Host-set only, unforgeable, and fresh on every delivery; an attribute rather than a token shape, because the continuation-token grammar is frozen. */
+export const JOB_FIRE_ATTR = "oe_job_fire";
+/** The host-set attribute marking a job fire whose LEDGER is tainted — the taint-forward carriage across a session replacement, so a durable write on the fire gates as if that turn had itself read the untrusted content. */
+export const JOB_TAINT_ATTR = "oe_job_tainted";
+/** The attributes a job fire adds to its delivery auth — the dispatcher's one call site. Empty for
+ *  a non-job routine, so every other fire stays byte-identical. Mirrors rootDmGrainAttrs' shape.
+ *  `ledgerTainted` rides along so a resumed OR replaced session inherits the ledger's taint. */
+export function jobFireAttrs(isJobFire, ledgerTainted = false) {
+    if (!isJobFire)
+        return {};
+    return ledgerTainted ? { [JOB_FIRE_ATTR]: "true", [JOB_TAINT_ATTR]: "true" } : { [JOB_FIRE_ATTR]: "true" };
+}
+/** Does THIS delivery carry the tainted-ledger stamp? Same positive-only read as the fire stamp; the seeding consumer is hooks/spawn-taint.ts, and this stays the named reader of the attribute. */
+export function jobTaintStamped(attributes) {
+    const v = attributes?.[JOB_TAINT_ATTR];
+    const first = typeof v === "string" ? v : Array.isArray(v) ? v[0] : undefined;
+    return first === "true";
+}
+/** Is THIS delivery a stamped autonomous job fire? Tolerates the `string[]` attribute spelling eve
+ *  can hand back (same collapse as routines/routine.ts routineMarker). */
+export function jobFireStamped(attributes) {
+    const v = attributes?.[JOB_FIRE_ATTR];
+    const first = typeof v === "string" ? v : Array.isArray(v) ? v[0] : undefined;
+    return first === "true";
+}
+/** The decision, and the ordering is the security argument: a stamped fire is ALWAYS restricted, checked first, because a human signal on a scheduler-built delivery is a bug or a forge. No job signal at all is out of scope, and a job session without a positive human signal is RESTRICTED. */
+export function resolveJobWakePosture(s) {
+    if (s.jobFire)
+        return "restricted";
+    if (!s.jobSession)
+        return "unrestricted";
+    return s.humanPrincipal ? "unrestricted" : "restricted";
+}
+/** Harness-internal names a per-wake toolset filter never removes: dropping `final_output` would leave a structured-output turn unable to return at all. Exported because the lean-seat filter shares the same seam and must share the same exemption — two lists would drift. */
+export const HARNESS_INTERNAL_TOOLS = new Set(["final_output"]);
+/** May `name` be held on a RESTRICTED job wake? DEFAULT-DENY, so an unknown name is withheld and the restriction cannot rot open; the one computed arm admits a connector op only when it classifies `read`, and a reserved namespace (`grant__…`) is refused ahead of it as ambient credential use. */
+export function allowedOnRestrictedJobWake(name, jobKit = JOB_WAKE_TOOLS) {
+    if (jobKit.has(name))
+        return true;
+    if (HARNESS_INTERNAL_TOOLS.has(name))
+        return true;
+    // The reserved namespaces are refused whatever their verb reads as. {@link isReservedNamespaceTool}, not `isGrantToolName`, on purpose: a default-deny roster must also refuse a reserved name the mount path could never have minted.
+    if (isReservedNamespaceTool(name))
+        return false;
+    // A qualified connector op: admit READS only, and through the pure built-in classifier rather than the seam, because a consumer arm may call an op `read` and an unattended wake has no human to card. This floor covers the job-wake toolset only.
+    if (name.includes("__"))
+        return classifyConnectorOpTier(name) === "read";
+    return false;
+}
+/** Apply the restriction to an assembled toolset IN PLACE, returning the removed names sorted; mutation is required because eve keys tool approvals in a WeakMap on the tool OBJECTS, so deleting a key is safe while swapping a value would drop an approval. Absence, not refusal — the model never sees the tool. */
+export function restrictToolsetForJobWake(toolset, jobKit = JOB_WAKE_TOOLS) {
+    const removed = [];
+    for (const name of Object.keys(toolset)) {
+        if (allowedOnRestrictedJobWake(name, jobKit))
+            continue;
+        delete toolset[name];
+        removed.push(name);
+    }
+    return removed.sort();
+}
+export { withheldFromJobWake };
+//# sourceMappingURL=job-posture.js.map

package/dist/agent/access/job-posture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-posture.js","sourceRoot":"","sources":["../../../agent/access/job-posture.ts"],"names":[],"mappings":"AAAA,ySAAyS;AAEzS,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEpF,2OAA2O;AAC3O,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;AAE3C,+NAA+N;AAC/N,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAI/C;;gGAEgG;AAChG,MAAM,UAAU,YAAY,CAAC,SAAkB,EAAE,aAAa,GAAG,KAAK;IACpE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;AAC7G,CAAC;AAED,oMAAoM;AACpM,MAAM,UAAU,eAAe,CAAC,UAAiB;IAC/C,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,OAAO,KAAK,KAAK,MAAM,CAAC;AAC1B,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,cAAc,CAAC,UAAiB;IAC9C,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,OAAO,KAAK,KAAK,MAAM,CAAC;AAC1B,CAAC;AAgBD,oSAAoS;AACpS,MAAM,UAAU,qBAAqB,CAAC,CAAiB;IACrD,IAAI,CAAC,CAAC,OAAO;QAAE,OAAO,YAAY,CAAC;IACnC,IAAI,CAAC,CAAC,CAAC,UAAU;QAAE,OAAO,cAAc,CAAC;IACzC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,kRAAkR;AAClR,MAAM,CAAC,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAErF,wSAAwS;AACxS,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,MAAM,GAAwB,cAAc;IACnG,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,uOAAuO;IACvO,IAAI,uBAAuB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,oPAAoP;IACpP,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC;IACzE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wTAAwT;AACxT,MAAM,UAAU,yBAAyB,CAAC,OAAgC,EAAE,MAAM,GAAwB,cAAc;IACtH,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,SAAS;QACvD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/agent/access/job-session-state.d.ts

@@ -0,0 +1,13 @@
+import { type JobWakePosture } from "./job-posture.js";
+/** Mark this session as a DURABLE-JOB session (sticky — never unset). Called from the turn.started
+ *  hook when the delivery carries the host-set job-fire stamp. */
+export declare function markJobSession(): void;
+/** Has this session ever taken a stamped job fire? Fail-soft to false. */
+export declare function isJobSession(): boolean;
+/** Record whether THIS turn is escalated (a real principal is in it). Written CLEAR-FIRST by the hook, so a throw mid-classification leaves the restricted verdict standing. */
+export declare function setJobWakeEscalated(escalated: boolean): void;
+/** Is THIS turn escalated? Fail-soft to false (the narrow answer). */
+export declare function jobWakeEscalated(): boolean;
+/** The posture for the turn in flight, computed from the two slots and never stored. `unrestricted` whenever this is not a job session, including every context-less caller. */
+export declare function currentJobWakePosture(): JobWakePosture;
+//# sourceMappingURL=job-session-state.d.ts.map

package/dist/agent/access/job-session-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-session-state.d.ts","sourceRoot":"","sources":["../../../agent/access/job-session-state.ts"],"names":[],"mappings":"AAGA,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAK9E;kEACkE;AAClE,wBAAgB,cAAc,IAAI,IAAI,CAMrC;AAED,0EAA0E;AAC1E,wBAAgB,YAAY,IAAI,OAAO,CAMtC;AAED,gLAAgL;AAChL,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAK5D;AAED,sEAAsE;AACtE,wBAAgB,gBAAgB,IAAI,OAAO,CAM1C;AAED,gLAAgL;AAChL,wBAAgB,qBAAqB,IAAI,cAAc,CAYtD"}

package/dist/agent/access/job-session-state.js

@@ -0,0 +1,57 @@
+// Two slots with deliberately OPPOSITE persistence intents: `job-session` is STICKY (set once a stamped fire is seen, never cleared) and `wake-escalated` is per turn and written clear-first, so staleness in either can only NARROW. The verdict is computed at read time and never stored, because eve state survives turns and a stale escalated verdict would fail open. A context-less caller reads `unrestricted`, which is not a hole: the execute backstop reads the fire stamp off the delivery auth instead.
+import { defineState } from "eve/context";
+import { resolveJobWakePosture } from "./job-posture.js";
+const jobSessionSlot = defineState("open-everywhere.job-session", () => false);
+const escalatedSlot = defineState("open-everywhere.job-wake-escalated", () => false);
+/** Mark this session as a DURABLE-JOB session (sticky — never unset). Called from the turn.started
+ *  hook when the delivery carries the host-set job-fire stamp. */
+export function markJobSession() {
+    try {
+        jobSessionSlot.update(() => true);
+    }
+    catch {
+        /* no eve context — nothing to mark; the execute backstop still reads the stamp directly */
+    }
+}
+/** Has this session ever taken a stamped job fire? Fail-soft to false. */
+export function isJobSession() {
+    try {
+        return jobSessionSlot.get();
+    }
+    catch {
+        return false;
+    }
+}
+/** Record whether THIS turn is escalated (a real principal is in it). Written CLEAR-FIRST by the hook, so a throw mid-classification leaves the restricted verdict standing. */
+export function setJobWakeEscalated(escalated) {
+    try {
+        escalatedSlot.update(() => escalated);
+    }
+    catch {
+    }
+}
+/** Is THIS turn escalated? Fail-soft to false (the narrow answer). */
+export function jobWakeEscalated() {
+    try {
+        return escalatedSlot.get();
+    }
+    catch {
+        return false;
+    }
+}
+/** The posture for the turn in flight, computed from the two slots and never stored. `unrestricted` whenever this is not a job session, including every context-less caller. */
+export function currentJobWakePosture() {
+    let jobSession = false;
+    let escalated = false;
+    try {
+        jobSession = jobSessionSlot.get();
+        escalated = escalatedSlot.get();
+    }
+    catch {
+        return "unrestricted";
+    }
+    // `jobFire` is deliberately false here: the fire's stamp has already been folded into the sticky
+    // session bit by the hook, and this read site (a model call) has no delivery auth of its own.
+    return resolveJobWakePosture({ jobFire: false, jobSession, humanPrincipal: escalated });
+}
+//# sourceMappingURL=job-session-state.js.map

package/dist/agent/access/job-session-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-session-state.js","sourceRoot":"","sources":["../../../agent/access/job-session-state.ts"],"names":[],"mappings":"AAAA,wfAAwf;AAExf,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAuB,MAAM,kBAAkB,CAAC;AAE9E,MAAM,cAAc,GAAG,WAAW,CAAU,6BAA6B,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;AACxF,MAAM,aAAa,GAAG,WAAW,CAAU,oCAAoC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;AAE9F;kEACkE;AAClE,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,2FAA2F;IAC7F,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gLAAgL;AAChL,MAAM,UAAU,mBAAmB,CAAC,SAAkB;IACpD,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;IACT,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gLAAgL;AAChL,MAAM,UAAU,qBAAqB;IACnC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC;QAClC,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,iGAAiG;IACjG,8FAA8F;IAC9F,OAAO,qBAAqB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1F,CAAC"}

package/dist/agent/access/lean-seat-state.d.ts

@@ -0,0 +1,12 @@
+import type { LeanSeatPosture } from "./lean-seat.js";
+/** Record whether THIS wake runs lean, and whether it is a DM/group-DM root. Written CLEAR-FIRST by
+ *  hooks/lean-seat.ts: `setLeanSeatWake(false)` runs before any classification. Fail-soft outside an
+ *  eve context. */
+export declare function setLeanSeatWake(lean: boolean, dmSeat?: boolean): void;
+/** The posture for the wake in flight. `full` for every context-less caller: with no context there is no conversational seat either, and the enforcement point that does hold one re-derives the answer from the seat identity. */
+export declare function currentLeanSeatPosture(): LeanSeatPosture;
+/** Is the wake in flight a DM/group-DM root (OPE-306)? Read alongside {@link currentLeanSeatPosture}
+ *  at the model-call seam so the filter can apply the DM carve-in. False for every context-less
+ *  caller — the narrower answer, and the one the seat-independent roster already assumes. */
+export declare function currentLeanSeatIsDm(): boolean;
+//# sourceMappingURL=lean-seat-state.d.ts.map

package/dist/agent/access/lean-seat-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean-seat-state.d.ts","sourceRoot":"","sources":["../../../agent/access/lean-seat-state.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAYtD;;mBAEmB;AACnB,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,UAAQ,GAAG,IAAI,CAMnE;AAED,mOAAmO;AACnO,wBAAgB,sBAAsB,IAAI,eAAe,CAMxD;AAED;;6FAE6F;AAC7F,wBAAgB,mBAAmB,IAAI,OAAO,CAM7C"}

package/dist/agent/access/lean-seat-state.js

@@ -0,0 +1,35 @@
+// The one per-session slot the lean-seat filter reads: written at `turn.started`, read at the model-call seam. It clears to `false` (the FULL kit), the OPPOSITE of the job filter's direction and deliberate — the lean cut is a routing doctrine, not a security fence.
+import { defineState } from "eve/context";
+const leanSeatSlot = defineState("open-everywhere.lean-seat", () => ({ lean: false, dmSeat: false }));
+/** Record whether THIS wake runs lean, and whether it is a DM/group-DM root. Written CLEAR-FIRST by
+ *  hooks/lean-seat.ts: `setLeanSeatWake(false)` runs before any classification. Fail-soft outside an
+ *  eve context. */
+export function setLeanSeatWake(lean, dmSeat = false) {
+    try {
+        leanSeatSlot.update(() => ({ lean, dmSeat }));
+    }
+    catch {
+        /* no eve context — nothing to narrow; the execute backstop reads the seat identity directly */
+    }
+}
+/** The posture for the wake in flight. `full` for every context-less caller: with no context there is no conversational seat either, and the enforcement point that does hold one re-derives the answer from the seat identity. */
+export function currentLeanSeatPosture() {
+    try {
+        return leanSeatSlot.get().lean ? "lean" : "full";
+    }
+    catch {
+        return "full";
+    }
+}
+/** Is the wake in flight a DM/group-DM root (OPE-306)? Read alongside {@link currentLeanSeatPosture}
+ *  at the model-call seam so the filter can apply the DM carve-in. False for every context-less
+ *  caller — the narrower answer, and the one the seat-independent roster already assumes. */
+export function currentLeanSeatIsDm() {
+    try {
+        return leanSeatSlot.get().dmSeat;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=lean-seat-state.js.map

package/dist/agent/access/lean-seat-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean-seat-state.js","sourceRoot":"","sources":["../../../agent/access/lean-seat-state.ts"],"names":[],"mappings":"AAAA,0QAA0Q;AAE1Q,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAW1C,MAAM,YAAY,GAAG,WAAW,CAAe,2BAA2B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAEpH;;mBAEmB;AACnB,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,MAAM,GAAG,KAAK;IAC3D,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,+FAA+F;IACjG,CAAC;AACH,CAAC;AAED,mOAAmO;AACnO,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;6FAE6F;AAC7F,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/agent/access/lean-seat.d.ts

@@ -0,0 +1,25 @@
+import type { WindowGrain } from "../identity/binding.js";
+/** Everything a delegating standing or thread seat may hold: the own-surface speak verbs, the delegation and thread-lifecycle verbs, eve's conversational plumbing, and the bounded recovery reads. It is the UNION over the lean grains — the window-gate manifest's grain matrix still decides which names resolve on a given seat — and anything not listed is removed by default-deny. */
+export declare const LEAN_SEAT_TOOLS: ReadonlySet<string>;
+/** The one roster addition that is a property of the SEAT, not the tool: each of these four hard-refuses outside a DM and needs an answer the person gives on THIS seat, so a seat cannot answer by delegating. Containment is a second act elsewhere — worker-seat.ts reserves the same four so a worker does not mount them — and the carve-in is positive, so an unresolvable DM bit simply does not carve in. */
+export declare const DM_SEAT_CARVE_IN: ReadonlySet<string>;
+/** What hands this WAKE gets on a conversational seat. `lean` ⇒ the {@link LEAN_SEAT_TOOLS} roster only. */
+export type LeanSeatPosture = "lean" | "full";
+export interface LeanSeatSignals {
+    /** The seat's grain (identity/binding.ts windowGrainOf — host stamp over token shape). */
+    readonly grain: WindowGrain;
+    /** `canDelegateFromSeat` (access/delegation-mount.ts) — is there a window to mint a worker into? */
+    readonly canDelegate: boolean;
+    /** Does THIS delivery carry a fire stamp (`oe_fire_unattended` or `oe_job_fire`)? Fires keep
+     *  their own posture — this cut never touches them. */
+    readonly unattendedFire: boolean;
+}
+/** Order is the doctrine: a fire is never lean, only a standing or thread conversational root is in scope, and such a seat is narrowed only if it can delegate. A seat with no delegation route keeps today's kit rather than being stranded with neither the doing verbs nor the verb that replaces them. */
+export declare function resolveLeanSeatPosture(s: LeanSeatSignals): LeanSeatPosture;
+/** DEFAULT-DENY, so an unknown name is withheld and the roster cannot rot open; harness internals always survive and the DM carve-in applies only on a DM root. 🔴 The granted-credential namespace is NOT carved in (OPE-2023): a lent tool mounts on the WORKERS of the conversation it was lent to, so the seat reaches a lent Notion page the same way it reaches the org connector — it delegates. The filter is default-deny, so the absence of a `grant__…` arm is the whole enforcement here; the resolver's own worker-only gate (tools/grant_tools.ts) is what keeps the name off a seat's toolset in the first place. */
+export declare function allowedOnLeanSeat(name: string, dmSeat?: boolean): boolean;
+/** Mutates the toolset IN PLACE and returns the removed names sorted. Deleting a KEY is safe while swapping a VALUE would drop an approval, because eve keys tool approvals in a WeakMap on the tool OBJECTS. The model never sees a removed tool, so there is no refusal text for an injected instruction to argue with. */
+export declare function restrictToolsetForLeanSeat(toolset: Record<string, unknown>, dmSeat?: boolean): string[];
+/** The static-surface names a lean wake withholds, for the audit row. Runtime-injected families are withheld by the default-deny filter at the seam and are deliberately not enumerable here — the granted-credential namespace among them, since a `grant__…` name is minted at runtime from a grant row and cannot sit in a static table. */
+export declare function withheldFromLeanSeat(gated: Readonly<Record<string, readonly string[]>>, ungated: ReadonlySet<string>, dmSeat?: boolean): string[];
+//# sourceMappingURL=lean-seat.d.ts.map

package/dist/agent/access/lean-seat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean-seat.d.ts","sourceRoot":"","sources":["../../../agent/access/lean-seat.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAG1D,8XAA8X;AAC9X,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAgC9C,CAAC;AAEH,qZAAqZ;AACrZ,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAA4F,CAAC;AAE9I,4GAA4G;AAC5G,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,0FAA0F;IAC1F,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,oGAAoG;IACpG,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B;2DACuD;IACvD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED,8SAA8S;AAC9S,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,eAAe,GAAG,eAAe,CAI1E;AAED,omBAAomB;AACpmB,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,UAAQ,GAAG,OAAO,CAEvE;AAED,6TAA6T;AAC7T,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,UAAQ,GAAG,MAAM,EAAE,CAQrG;AAED,+UAA+U;AAC/U,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,UAAQ,GAAG,MAAM,EAAE,CAE/I"}

package/dist/agent/access/lean-seat.js

@@ -0,0 +1,66 @@
+// The pure, framework-free policy for the lean conversational seat: a delegating standing or thread seat holds the conversational roster only and routes every other job to a worker. It is a PER-WAKE filter, not mount-time grain posture, because a seat that cannot delegate must keep today's kit rather than be stranded; fires are a separate seat class and are never narrowed, and an unclassifiable wake keeps the full kit.
+import { HARNESS_INTERNAL_TOOLS } from "./job-posture.js";
+/** Everything a delegating standing or thread seat may hold: the own-surface speak verbs, the delegation and thread-lifecycle verbs, eve's conversational plumbing, and the bounded recovery reads. It is the UNION over the lean grains — the window-gate manifest's grain matrix still decides which names resolve on a given seat — and anything not listed is removed by default-deny. */
+export const LEAN_SEAT_TOOLS = new Set([
+    "reply",
+    // Load-bearing membership that no lint covers: the filter is default-deny, so omitting this name takes the verb from every delegating seat. It cannot move to a worker — the ledger fence admits only messages this deployment's reply spine posted, and the seat is what posts.
+    "edit_reply",
+    "no_reply",
+    "react",
+    "update_status",
+    // Load-bearing membership that no lint covers: the filter is default-deny, so omitting this name takes the verb from every delegating seat. It cannot move to a worker, because the act is about this seat's own relationship with this room.
+    "stand_down",
+    // Load-bearing membership that no lint covers: omitting this name would leave every delegating seat able to stop the deployment only by dispatching a worker first, and a brake reached through a dispatch is not a brake. `resume` is deliberately NOT here — it widens, it is carded, and it stays a worker capability the seat routes.
+    "halt",
+    // Load-bearing membership that no lint covers: omitting this name removes the recipient's own stop on the agent's direct messages from every delegating DM seat. It cannot move to a worker, because the act is about this seat's own relationship with this person.
+    "set_dm_delivery",
+    // delegation + thread lifecycle (grain matrix still decides which resolve on a given seat)
+    "agent",
+    "spawn_thread_session",
+    "complete_thread",
+    // 🔴 `ask_question` AND `todo` ARE DELIBERATELY ABSENT (OPE-2023 addendum, Tommy 2026-09-21).
+    // "Parking a turn feels bad for a standing seat, doesn't it? If To Do is a scratch pad for its own
+    // planning, should we ever have it in a standing seat?" Both are a WORKER's turn plumbing: one
+    // blocks a turn waiting on a person, which a standing seat must never do — it answers and lets the
+    // room carry on — and the other is a scratch pad for planning work the seat does not do. A seat
+    // that needs something from a person REPLIES.
+    // 🔴 THE QUESTION BRIDGE IS UNAFFECTED. `channels/question-bridge.ts` routes eve's input requests by
+    // KIND, not by which seat holds the tool, so a delegated worker's question still reaches the room
+    // and its answer still comes back. `APPROVAL_REQUEST_KIND` routing is untouched.
+    // The lifecycle verb that stops THIS seat's own delegated work. There is no progress verb beside it: eve 0.54.1 removed `task_update` and shipped no replacement. The seat performs no read of a worker's answer: eve puts the output in the settlement notification, which arrives as ordinary turn content.
+    "task_cancel",
+    // Load-bearing membership that no lint covers: without these two reads a seat asked about a message the wake does not carry can only guess it or deny it exists, both false statements. They are bounded rather than merely allowed — the seat read budget gives a lean wake a few reads per turn and points the rest at a worker — so digestion stays worker work.
+    "read_channel",
+    "read_thread",
+    // 🔴 `request_credential_grant` IS DELIBERATELY ABSENT (OPE-2023). The ask is worker work, like every other doing verb: the seat hands "use my own account" to a task, and the worker raises the ask with a full kit and a fresh context. `requestCredentialGrantMount` (tools/request_credential_grant.ts) is the real floor — it admits a delegated worker and nothing else — and this absence is what makes the worker-capability index tell a seat to route it.
+]);
+/** The one roster addition that is a property of the SEAT, not the tool: each of these four hard-refuses outside a DM and needs an answer the person gives on THIS seat, so a seat cannot answer by delegating. Containment is a second act elsewhere — worker-seat.ts reserves the same four so a worker does not mount them — and the carve-in is positive, so an unresolvable DM bit simply does not carve in. */
+export const DM_SEAT_CARVE_IN = new Set(["link_identity", "confirm_link", "unlink_identity", "revoke_credential_grant"]);
+/** Order is the doctrine: a fire is never lean, only a standing or thread conversational root is in scope, and such a seat is narrowed only if it can delegate. A seat with no delegation route keeps today's kit rather than being stranded with neither the doing verbs nor the verb that replaces them. */
+export function resolveLeanSeatPosture(s) {
+    if (s.unattendedFire)
+        return "full";
+    if (s.grain !== "standing" && s.grain !== "thread")
+        return "full";
+    return s.canDelegate ? "lean" : "full";
+}
+/** DEFAULT-DENY, so an unknown name is withheld and the roster cannot rot open; harness internals always survive and the DM carve-in applies only on a DM root. 🔴 The granted-credential namespace is NOT carved in (OPE-2023): a lent tool mounts on the WORKERS of the conversation it was lent to, so the seat reaches a lent Notion page the same way it reaches the org connector — it delegates. The filter is default-deny, so the absence of a `grant__…` arm is the whole enforcement here; the resolver's own worker-only gate (tools/grant_tools.ts) is what keeps the name off a seat's toolset in the first place. */
+export function allowedOnLeanSeat(name, dmSeat = false) {
+    return LEAN_SEAT_TOOLS.has(name) || HARNESS_INTERNAL_TOOLS.has(name) || (dmSeat && DM_SEAT_CARVE_IN.has(name));
+}
+/** Mutates the toolset IN PLACE and returns the removed names sorted. Deleting a KEY is safe while swapping a VALUE would drop an approval, because eve keys tool approvals in a WeakMap on the tool OBJECTS. The model never sees a removed tool, so there is no refusal text for an injected instruction to argue with. */
+export function restrictToolsetForLeanSeat(toolset, dmSeat = false) {
+    const removed = [];
+    for (const name of Object.keys(toolset)) {
+        if (allowedOnLeanSeat(name, dmSeat))
+            continue;
+        delete toolset[name];
+        removed.push(name);
+    }
+    return removed.sort();
+}
+/** The static-surface names a lean wake withholds, for the audit row. Runtime-injected families are withheld by the default-deny filter at the seam and are deliberately not enumerable here — the granted-credential namespace among them, since a `grant__…` name is minted at runtime from a grant row and cannot sit in a static table. */
+export function withheldFromLeanSeat(gated, ungated, dmSeat = false) {
+    return [...new Set([...Object.keys(gated), ...ungated])].filter((name) => !allowedOnLeanSeat(name, dmSeat)).sort();
+}
+//# sourceMappingURL=lean-seat.js.map

package/dist/agent/access/lean-seat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean-seat.js","sourceRoot":"","sources":["../../../agent/access/lean-seat.ts"],"names":[],"mappings":"AAAA,uaAAua;AAGva,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,8XAA8X;AAC9X,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IAC1D,OAAO;IACP,iRAAiR;IACjR,YAAY;IACZ,UAAU;IACV,OAAO;IACP,eAAe;IACf,8OAA8O;IAC9O,YAAY;IACZ,0UAA0U;IAC1U,MAAM;IACN,qQAAqQ;IACrQ,iBAAiB;IACjB,2FAA2F;IAC3F,OAAO;IACP,sBAAsB;IACtB,iBAAiB;IACjB,8FAA8F;IAC9F,mGAAmG;IACnG,+FAA+F;IAC/F,mGAAmG;IACnG,gGAAgG;IAChG,8CAA8C;IAC9C,qGAAqG;IACrG,kGAAkG;IAClG,iFAAiF;IACjF,8SAA8S;IAC9S,aAAa;IACb,oWAAoW;IACpW,cAAc;IACd,aAAa;IACb,ocAAoc;CACrc,CAAC,CAAC;AAEH,qZAAqZ;AACrZ,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,CAAC;AAe9I,8SAA8S;AAC9S,MAAM,UAAU,sBAAsB,CAAC,CAAkB;IACvD,IAAI,CAAC,CAAC,cAAc;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAClE,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC;AAED,omBAAomB;AACpmB,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAM,GAAG,KAAK;IAC5D,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACjH,CAAC;AAED,6TAA6T;AAC7T,MAAM,UAAU,0BAA0B,CAAC,OAAgC,EAAE,MAAM,GAAG,KAAK;IACzF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,SAAS;QAC9C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,+UAA+U;AAC/U,MAAM,UAAU,oBAAoB,CAAC,KAAkD,EAAE,OAA4B,EAAE,MAAM,GAAG,KAAK;IACnI,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrH,CAAC"}

package/dist/agent/access/lint.d.ts

@@ -0,0 +1,39 @@
+import { type Binding, type Bundle } from "./bundle.js";
+import type { ConnectorCredentials } from "./connector-credentials.js";
+import type { PluginRegistry } from "../plugins/types.js";
+import { type Domain } from "../memory/domain.js";
+import { type Group } from "../identity/groups.js";
+/** The member count at which a credentialed group binding stops being a couple of teammates sharing a key and needs an acknowledgement. The number is a judgement, set where the reviewed-diff argument stops carrying its own weight; the escape is cheap on purpose. */
+export declare const GROUP_BROAD_MEMBERS = 8;
+/** Why a person-group counts as broad for a credentialed binding: it holds a link-set member, whose expansion into DMs grows with no diff, or it holds GROUP_BROAD_MEMBERS or more members. Exported because the self-serve grant path must ask the same question at propose time. */
+export declare function groupWidth(group: Group | undefined): string | undefined;
+/** One problem per offending binding and per misused escape. Org and tenant are broad by their address, a domain binding is broad while its domain claims a tenant with a container reach entry, and a group binding while its group is wide; domains defaults to empty, which reproduces the pre-OPE-222 verdict rather than a wrong one. */
+export declare function lintBroadGrants(bundles: readonly Bundle[], bindings: readonly Binding[], domains?: readonly Domain[], groups?: readonly Group[]): string[];
+/**
+ * Lint 2 — method narrowing on credentialed egress connections. Returns one problem per
+ * connection with no `methods` declaration; empty = clean. (Every Connection is
+ * credentialed by construction — credentialType + secretRef are required fields.)
+ */
+export declare function lintMethodNarrowing(bundles: readonly Bundle[]): string[];
+/** Two grants at the SAME scope naming one connector with different credentials resolve by declaration order, which is not a decision anybody made. There is no escape hatch, because whichever key wins the other grant is dead config. */
+export declare function lintCredentialCollisions(bundles: readonly Bundle[], bindings: readonly Binding[]): string[];
+/** One credential per host per session: the egress policy stamps the bearer by host alone, so two connections claiming one host is one grant silently killing the other. No escape hatch, and the runtime backstop is resolveAccess, which throws on the same condition. */
+export declare function lintEgressHostCollisions(bundles: readonly Bundle[], bindings: readonly Binding[]): string[];
+/** A bundle connection may not claim a host the git read-broker reserves: the broker replaces those hosts' rules mid-turn, so the connection's key is displaced by call order. Unconditional, no escape hatch, and the test is overlap rather than equality. */
+export declare function lintReservedBrokerHosts(bundles: readonly Bundle[]): string[];
+/** A domain is one static capability boundary, independently of whether its seats use unified or
+ * separate windows. Direct surface bindings inside it are forbidden. Broader tenant bindings may
+ * remain only when every tenant represented in the domain resolves to the same capability facts. */
+export declare function lintDomainCapabilityConsistency(bundles: readonly Bundle[], bindings: readonly Binding[], domains?: readonly Domain[], registry?: PluginRegistry, connectorCredentials?: readonly ConnectorCredentials[]): string[];
+/** A connector admitting a credential grant must declare endpoints.hosts, or an act-with-my-own-account ask withholds nothing and is answered on the team credential. The join is the shared secretRef and the reach test is overlap, so a connection carrying the vendor's key must also reach a declared host. */
+export declare function ownAccountWithholdingProblems(connectors: readonly string[], catalogues: readonly ConnectorCredentials[], bundles?: readonly Bundle[]): string[];
+/** The config-only lints the CI gate runs. Domains and groups are the registries a domain or group binding's width depends on, and both are optional so older call sites keep their exact old verdict. */
+export declare function lintAccessConfig(bundles: readonly Bundle[], bindings: readonly Binding[], domains?: readonly Domain[], groups?: readonly Group[], registry?: PluginRegistry, connectorCredentials?: readonly ConnectorCredentials[]): string[];
+/** A connector grant naming a credential its connector does not configure reads as a live capability and resolves to nothing, with no failure anywhere. No escape hatch, and a bare-slug grant is reported here too, because this lint also sees bundle sets that never passed load. */
+export declare function connectorGrantCredentialProblems(bundles: readonly Bundle[], catalogues: readonly {
+    readonly connector: string;
+    readonly credentials: readonly {
+        readonly id: string;
+    }[];
+}[]): string[];
+//# sourceMappingURL=lint.d.ts.map

package/dist/agent/access/lint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lint.d.ts","sourceRoot":"","sources":["../../../agent/access/lint.ts"],"names":[],"mappings":"AAEA,OAAO,EAAyF,KAAK,OAAO,EAAE,KAAK,MAAM,EAAc,MAAM,aAAa,CAAC;AAG3J,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI1D,OAAO,EAA6C,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAmB,KAAK,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAEpE,0QAA0Q;AAC1Q,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAsBrC,sRAAsR;AACtR,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAWvE;AAED,8UAA8U;AAC9U,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,GAAE,SAAS,MAAM,EAAO,EAC/B,MAAM,GAAE,SAAS,KAAK,EAAO,GAC5B,MAAM,EAAE,CAmEV;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAaxE;AAOD,4OAA4O;AAC5O,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,EAAE,CA0D3G;AA8DD,4QAA4Q;AAC5Q,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,EAAE,CA0C3G;AAED,gQAAgQ;AAChQ,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAc5E;AAkID;;oGAEoG;AACpG,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,GAAE,SAAS,MAAM,EAAO,EAC/B,QAAQ,GAAE,cAAmB,EAC7B,oBAAoB,GAAE,SAAS,oBAAoB,EAAO,GACzD,MAAM,EAAE,CA4DV;AAED,oTAAoT;AACpT,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,UAAU,EAAE,SAAS,oBAAoB,EAAE,EAC3C,OAAO,GAAE,SAAS,MAAM,EAAO,GAC9B,MAAM,EAAE,CAqCV;AAQD,0MAA0M;AAC1M,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,GAAE,SAAS,MAAM,EAAO,EAC/B,MAAM,GAAE,SAAS,KAAK,EAAO,EAC7B,QAAQ,GAAE,cAAmB,EAC7B,oBAAoB,GAAE,SAAS,oBAAoB,EAAO,GACzD,MAAM,EAAE,CASV;AAED,wRAAwR;AACxR,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,SAAS;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,EAAE,GAC9G,MAAM,EAAE,CA+BV"}