@open-everywhere/core 0.1.0

package/dist/agent/access/member-plane.js

@@ -0,0 +1,114 @@
+// The one decision that admits a member's OWN connector credential into a SHARED room: five ANDed gates — both arming flags, the domain's member grant, exactly one verified requester, a member room, and READ tier only. There is no per-thread mount table, the room half needs the operator's own `internal` DECLARATION because absence of refutation is not a vouch, and a DM never reaches this verdict.
+/** Admits only when every gate holds; otherwise it names the FIRST gate that refused, in a fixed order. The admitting arm carries `requesterPrincipalId`, the id the mint must key its vault subject on, so the admission and the identity it admitted can never disagree — the mint site's own acting-principal read answers a different question on a shared window. */
+export function memberPlaneVerdict(input) {
+    if (!input.armed)
+        return { admit: false, reason: "member_plane_disarmed" };
+    if (!input.opTiered)
+        return { admit: false, reason: "member_plane_untiered" };
+    if (!input.granted)
+        return { admit: false, reason: "member_plane_ungranted" };
+    if (input.requester.kind !== "requester" || input.requester.principalId.length === 0) {
+        return { admit: false, reason: "member_plane_unverified_requester" };
+    }
+    // G4 joins both halves under one refusal reason. A positive refutation answers no, and so does a room the operator never declared internal, because an undeclared room vouches for nobody.
+    if (input.nonMemberWake || !input.roomVouchedInternal) {
+        return { admit: false, reason: "member_plane_nonmember_wake" };
+    }
+    if (input.opTier !== undefined && input.opTier !== "read") {
+        return { admit: false, reason: "member_plane_write" };
+    }
+    return { admit: true, requesterPrincipalId: input.requester.principalId };
+}
+/** G4b's derivation, in one place, so the mint site cannot spell it a second way. Both conjuncts are load-bearing: the declaration is the operator's vouch, and the trust join is what keeps a coarse tenant declaration from re-promoting a positively-external room. Every unresolvable input answers false, and the parameters are strings so an unexpected value refuses instead of type-erroring. */
+export function roomVouchedInternalFrom(declaredTrust, trust) {
+    return declaredTrust === "internal" && trust === "internal";
+}
+/** The operator-facing sentence for each refusal — used in the thrown tool error, so the model relays
+ *  a cause rather than a bare denial. Never names another person and never names a credential value. */
+export function memberPlaneRefusalMessage(connector, reason) {
+    switch (reason) {
+        case "member_plane_disarmed":
+            return (`connection "${connector}": personal credentials are not admitted outside a DM in this deployment. ` +
+                `The member plane is disarmed (\`connectors: { memberPlane: true }\` in agent/settings.ts). ` +
+                `This is a deployment rule enforced at the credential layer, not a permission that can be requested in-chat.`);
+        case "member_plane_untiered":
+            return (`connection "${connector}": personal credentials are not admitted outside a DM in this deployment. ` +
+                `The member plane needs per-op consequence tiering (\`connectors: { opTiering: true }\` in ` +
+                `agent/settings.ts), because that is what keeps a personal credential to READS in a shared room.`);
+        case "member_plane_ungranted":
+            return (`connection "${connector}": this domain does not admit personal credentials in its rooms. ` +
+                `A domain grants the member plane by declaring the connector's member role in its own ` +
+                `\`credentials\` (agent/memory/config/domains.ts) — absence is a refusal, never the org default.`);
+        case "member_plane_unverified_requester":
+            return (`connection "${connector}": refusing to use a personal credential here — this turn could not be ` +
+                `attributed to exactly one person, so there is no single asker whose account to act as. ` +
+                `Ask again on your own, or in a DM.`);
+        case "member_plane_nonmember_wake":
+            return (`connection "${connector}": refusing to use a personal credential here — this room is not ` +
+                `vouched as a members-only room. Either this conversation includes a message from somebody ` +
+                `the workspace could not vouch for as a member, or nobody has declared this room internal. ` +
+                `A declaration is a defineSurface({ key: "…", trust: "internal" }) line in ` +
+                `agent/identity/surfaces.ts, written on this room, on the container it sits in, or on the ` +
+                `whole workspace. Without one, no personal credential is admitted here.`);
+        case "member_plane_write":
+            return (`connection "${connector}": personal credentials are READ-ONLY outside a DM. A write would be ` +
+                `recorded under your own name at the provider, which needs its own approval path. ` +
+                `Do the write in a DM, or use this domain's work-surface credential.`);
+    }
+}
+/** Reads the shared-room arm FIRST, so the member-plane denial is unchanged whatever the other inputs say, then proves the DM, then cross-checks the requester. Every unresolvable input refuses; an APP-principal credential is not this function's business and prompts unchanged. */
+export function personalConnectorWriteVerdict(input) {
+    // THE SHARED-ROOM DENIAL, UNCHANGED AND FIRST. The stamp means "admitted outside a DM", so it is
+    // the whole of the member plane's G5 and it never depends on the reads below.
+    if (input.memberPlaneBinding)
+        return { prompt: false, reason: "member_plane_write" };
+    // Not somebody's own account ⇒ nothing here applies; the tier decides, exactly as before.
+    if (!input.personalCredential)
+        return { prompt: true };
+    // POSITIVE DM PROOF. Not "not a channel" — the literal mode the binding resolved to.
+    if (input.surfaceMode !== "dm")
+        return { prompt: false, reason: "personal_write_unproven_dm" };
+    // A DM with no resolvable actor cannot satisfy the equality the ruling rests on.
+    if (input.actingPrincipalId === undefined || input.actingPrincipalId.length === 0) {
+        return { prompt: false, reason: "personal_write_unproven_dm" };
+    }
+    // THE EQUALITY THE RULING WAS GRANTED ON. Only a NAMED requester can contradict it.
+    if (input.requester.kind === "requester" && input.requester.principalId !== input.actingPrincipalId) {
+        return { prompt: false, reason: "personal_write_requester_mismatch" };
+    }
+    return { prompt: true };
+}
+/** The operator-facing sentence for each personal-write refusal. The shared-room arm delegates to
+ *  {@link memberPlaneRefusalMessage} so that copy has exactly one home. Never names another person. */
+export function personalWriteRefusalMessage(connector, reason) {
+    switch (reason) {
+        case "member_plane_write":
+            return memberPlaneRefusalMessage(connector, "member_plane_write");
+        case "personal_write_unproven_dm":
+            return (`connection "${connector}": refusing to write with your personal credential — this surface did ` +
+                `not resolve as a DM. A write records your own name at the provider, so it is admitted only ` +
+                `where the asker, the approver and that name are the same person. Ask again in a DM.`);
+        case "personal_write_requester_mismatch":
+            return (`connection "${connector}": refusing to write with a personal credential — the person this ` +
+                `turn serves and the person this conversation belongs to are not the same. A write would ` +
+                `record one person's name on another person's approval.`);
+    }
+}
+function attrOf(auth, key) {
+    const v = auth?.current?.attributes?.[key];
+    return typeof v === "string" && v.length > 0 ? v : undefined;
+}
+/** FAIL CLOSED IN EVERY UNREADABLE ARM: no bag, no stamp, an empty stamp or the unverified sentinel all answer a non-admitting kind, and only a non-empty non-sentinel stamp names a requester. The sentinel is passed in so this module stays a leaf and imports no eve context. */
+export function requesterFromAuth(auth, requesterAttr, unverifiedSentinel) {
+    const stamp = attrOf(auth, requesterAttr);
+    if (stamp === undefined)
+        return { kind: "none" };
+    if (stamp === unverifiedSentinel)
+        return { kind: "unverified" };
+    return { kind: "requester", principalId: stamp };
+}
+/** POSITIVE-ONLY, matching the producer: the attribute is written as the literal "true" and absent otherwise, so anything else reads as "not refuted". This is G4's refutation half ONLY — not refuted is not vouched, and the room declaration carries the vouch. */
+export function nonMemberWakeFromAuth(auth, nonMemberAttr) {
+    return attrOf(auth, nonMemberAttr) === "true";
+}
+//# sourceMappingURL=member-plane.js.map

package/dist/agent/access/member-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-plane.js","sourceRoot":"","sources":["../../../agent/access/member-plane.ts"],"names":[],"mappings":"AAAA,gZAAgZ;AAgDhZ,0WAA0W;AAC1W,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IACxD,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC9E,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC9E,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACvE,CAAC;IACD,2LAA2L;IAC3L,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;QACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;AAC5E,CAAC;AAED,0YAA0Y;AAC1Y,MAAM,UAAU,uBAAuB,CAAC,aAAiC,EAAE,KAAyB;IAClG,OAAO,aAAa,KAAK,UAAU,IAAI,KAAK,KAAK,UAAU,CAAC;AAC9D,CAAC;AAED;wGACwG;AACxG,MAAM,UAAU,yBAAyB,CAAC,SAAiB,EAAE,MAA0B;IACrF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,uBAAuB;YAC1B,OAAO,CACL,eAAe,SAAS,4EAA4E;gBACpG,6FAA6F;gBAC7F,6GAA6G,CAC9G,CAAC;QACJ,KAAK,uBAAuB;YAC1B,OAAO,CACL,eAAe,SAAS,4EAA4E;gBACpG,4FAA4F;gBAC5F,iGAAiG,CAClG,CAAC;QACJ,KAAK,wBAAwB;YAC3B,OAAO,CACL,eAAe,SAAS,mEAAmE;gBAC3F,uFAAuF;gBACvF,iGAAiG,CAClG,CAAC;QACJ,KAAK,mCAAmC;YACtC,OAAO,CACL,eAAe,SAAS,yEAAyE;gBACjG,yFAAyF;gBACzF,oCAAoC,CACrC,CAAC;QACJ,KAAK,6BAA6B;YAChC,OAAO,CACL,eAAe,SAAS,mEAAmE;gBAC3F,4FAA4F;gBAC5F,4FAA4F;gBAC5F,4EAA4E;gBAC5E,2FAA2F;gBAC3F,wEAAwE,CACzE,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO,CACL,eAAe,SAAS,uEAAuE;gBAC/F,mFAAmF;gBACnF,qEAAqE,CACtE,CAAC;IACN,CAAC;AACH,CAAC;AAgCD,wRAAwR;AACxR,MAAM,UAAU,6BAA6B,CAAC,KAAkC;IAC9E,iGAAiG;IACjG,8EAA8E;IAC9E,IAAI,KAAK,CAAC,kBAAkB;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACrF,0FAA0F;IAC1F,IAAI,CAAC,KAAK,CAAC,kBAAkB;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvD,qFAAqF;IACrF,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAC/F,iFAAiF;IACjF,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,KAAK,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACjE,CAAC;IACD,oFAAoF;IACpF,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACpG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;uGACuG;AACvG,MAAM,UAAU,2BAA2B,CAAC,SAAiB,EAAE,MAA4B;IACzF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,oBAAoB;YACvB,OAAO,yBAAyB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACpE,KAAK,4BAA4B;YAC/B,OAAO,CACL,eAAe,SAAS,wEAAwE;gBAChG,6FAA6F;gBAC7F,qFAAqF,CACtF,CAAC;QACJ,KAAK,mCAAmC;YACtC,OAAO,CACL,eAAe,SAAS,oEAAoE;gBAC5F,0FAA0F;gBAC1F,wDAAwD,CACzD,CAAC;IACN,CAAC;AACH,CAAC;AASD,SAAS,MAAM,CAAC,IAAqC,EAAE,GAAW;IAChE,MAAM,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,qRAAqR;AACrR,MAAM,UAAU,iBAAiB,CAAC,IAAqC,EAAE,aAAqB,EAAE,kBAA0B;IACxH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACjD,IAAI,KAAK,KAAK,kBAAkB;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,sQAAsQ;AACtQ,MAAM,UAAU,qBAAqB,CAAC,IAAqC,EAAE,aAAqB;IAChG,OAAO,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,MAAM,CAAC;AAChD,CAAC"}

package/dist/agent/access/native-admin.d.ts

@@ -0,0 +1,13 @@
+/** A surface's native admin-standing check: is `principalId` an administrator of the scope named by
+ *  `scopeKey` (a `<platform>/<workspace>[/<surface>]` key)? Resolves a boolean; MUST NOT throw (the
+ *  caller treats a rejection as "not admin"). */
+export type NativeAdminCheck = (scopeKey: string, principalId: string) => Promise<boolean>;
+/** Register (or replace) a platform's native admin-standing check. Called once per bundle at boot. */
+export declare function registerNativeAdminCheck(platform: string, check: NativeAdminCheck): void;
+export declare function nativeAdminCheck(platform: string | undefined): NativeAdminCheck | undefined;
+/** Is `principalId` a FULL member of the scope named by `scopeKey`? "Full member" is the platform's strongest membership signal: a guest, a cross-organisation participant, a bot, a deleted account and a non-member all read false. Must not throw — the caller treats a rejection as "not a member". */
+export type NativeMemberCheck = (scopeKey: string, principalId: string) => Promise<boolean>;
+/** Register (or replace) a platform's native member-standing check. Called once per bundle at boot. */
+export declare function registerNativeMemberCheck(platform: string, check: NativeMemberCheck): void;
+export declare function nativeMemberCheck(platform: string | undefined): NativeMemberCheck | undefined;
+//# sourceMappingURL=native-admin.d.ts.map

package/dist/agent/access/native-admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-admin.d.ts","sourceRoot":"","sources":["../../../agent/access/native-admin.ts"],"names":[],"mappings":"AAIA;;iDAEiD;AACjD,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAI3F,sGAAsG;AACtG,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAGxF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,gBAAgB,GAAG,SAAS,CAE3F;AAED,2SAA2S;AAC3S,MAAM,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAI5F,uGAAuG;AACvG,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAG1F;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAE7F"}

package/dist/agent/access/native-admin.js

@@ -0,0 +1,23 @@
+// Per-platform registry of a surface's NATIVE standing checks, registered by the provider bundle at boot so the vendor REST call stays out of core. `NativeMemberCheck` is registered by the bundles but has NO caller in core today — never describe it as feeding a live gate. FAIL-CLOSED BY OMISSION: a platform with no registered check resolves undefined, so the caller falls back to the roster verdict for admin and to a refusal for member.
+import { admitProviderRegistration } from "./provider-selection.js";
+const REGISTRY = new Map();
+/** Register (or replace) a platform's native admin-standing check. Called once per bundle at boot. */
+export function registerNativeAdminCheck(platform, check) {
+    if (!admitProviderRegistration(platform, "native-admin-check"))
+        return;
+    REGISTRY.set(platform, check);
+}
+export function nativeAdminCheck(platform) {
+    return platform === undefined ? undefined : REGISTRY.get(platform);
+}
+const MEMBER_REGISTRY = new Map();
+/** Register (or replace) a platform's native member-standing check. Called once per bundle at boot. */
+export function registerNativeMemberCheck(platform, check) {
+    if (!admitProviderRegistration(platform, "native-member-check"))
+        return;
+    MEMBER_REGISTRY.set(platform, check);
+}
+export function nativeMemberCheck(platform) {
+    return platform === undefined ? undefined : MEMBER_REGISTRY.get(platform);
+}
+//# sourceMappingURL=native-admin.js.map

package/dist/agent/access/native-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-admin.js","sourceRoot":"","sources":["../../../agent/access/native-admin.ts"],"names":[],"mappings":"AAAA,wbAAwb;AAExb,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAOpE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;AAErD,sGAAsG;AACtG,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,KAAuB;IAChF,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QAAE,OAAO;IACvE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAA4B;IAC3D,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACrE,CAAC;AAKD,MAAM,eAAe,GAAG,IAAI,GAAG,EAA6B,CAAC;AAE7D,uGAAuG;AACvG,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,KAAwB;IAClF,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,qBAAqB,CAAC;QAAE,OAAO;IACxE,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA4B;IAC5D,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC5E,CAAC"}

package/dist/agent/access/native-delegation-state.d.ts

@@ -0,0 +1,16 @@
+/** Why the built-in was allowed or denied for the wake in flight. Recorded for the audit row and for
+ *  a human reading a "why did the model not delegate?" question; never model-visible. */
+export type NativeDelegationVerdict = 
+/** Positively classified: a delegating conversational seat that is not a child. */
+"allow"
+/** This session IS an eve subagent child — a leaf. Recursion is closed here (eve closes its own). */
+ | "leaf"
+/** No window to mint from, wrong grain, or the delegation model is disarmed. */
+ | "no-seat"
+/** Nothing classified this wake (the hook did not run, or threw). The clear-first default. */
+ | "unclassified";
+/** Record whether the wake in flight may hold eve's built-in `agent`. Written CLEAR-FIRST as `unclassified` by hooks/lean-seat.ts, so a throw mid-classification leaves the seat DENIED rather than allowed. Fail-soft outside an eve context. */
+export declare function setNativeDelegationSeat(verdict: NativeDelegationVerdict): void;
+/** May the model be offered eve's built-in `agent` on this model call? ONE conjunct, the per-wake seat: a tainted turn KEEPS its delegation verb and the child inherits the parent's taint mark. The residual is a step that issues an untrusted read and an `agent` call in the same response, where that one child can run clean; on a `taint.mode: "off"` deployment nothing taints and no child is marked at all. */
+export declare function nativeAgentAllowedNow(): boolean;
+//# sourceMappingURL=native-delegation-state.d.ts.map

package/dist/agent/access/native-delegation-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-delegation-state.d.ts","sourceRoot":"","sources":["../../../agent/access/native-delegation-state.ts"],"names":[],"mappings":"AAIA;yFACyF;AACzF,MAAM,MAAM,uBAAuB;AACjC,mFAAmF;AACjF,OAAO;AACT,qGAAqG;GACnG,MAAM;AACR,gFAAgF;GAC9E,SAAS;AACX,8FAA8F;GAC5F,cAAc,CAAC;AAInB,kPAAkP;AAClP,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAK9E;AAYD,yZAAyZ;AACzZ,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C"}

package/dist/agent/access/native-delegation-state.js

@@ -0,0 +1,26 @@
+// Per-wake verdict for "may this seat hold eve's built-in `agent`?", written at `turn.started` and read at the projection seam, which is the only lever — the built-in is injected on every root session and cannot be re-registered. FAIL-CLOSED, the opposite of the lean slot: it clears to DENY, because a wrongly-allowed built-in hands a child the parent's whole credentialed identity in the parent's own sandbox.
+import { defineState } from "eve/context";
+const slot = defineState("open-everywhere.native-delegation", () => "unclassified");
+/** Record whether the wake in flight may hold eve's built-in `agent`. Written CLEAR-FIRST as `unclassified` by hooks/lean-seat.ts, so a throw mid-classification leaves the seat DENIED rather than allowed. Fail-soft outside an eve context. */
+export function setNativeDelegationSeat(verdict) {
+    try {
+        slot.update(() => verdict);
+    }
+    catch {
+    }
+}
+/** The verdict for the wake in flight. `unclassified` for every context-less caller — which reads as
+ *  DENY at the one consumer, by design (see this file's header). */
+function currentNativeDelegationSeat() {
+    try {
+        return slot.get();
+    }
+    catch {
+        return "unclassified";
+    }
+}
+/** May the model be offered eve's built-in `agent` on this model call? ONE conjunct, the per-wake seat: a tainted turn KEEPS its delegation verb and the child inherits the parent's taint mark. The residual is a step that issues an untrusted read and an `agent` call in the same response, where that one child can run clean; on a `taint.mode: "off"` deployment nothing taints and no child is marked at all. */
+export function nativeAgentAllowedNow() {
+    return currentNativeDelegationSeat() === "allow";
+}
+//# sourceMappingURL=native-delegation-state.js.map

package/dist/agent/access/native-delegation-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-delegation-state.js","sourceRoot":"","sources":["../../../agent/access/native-delegation-state.ts"],"names":[],"mappings":"AAAA,4ZAA4Z;AAE5Z,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAc1C,MAAM,IAAI,GAAG,WAAW,CAA0B,mCAAmC,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;AAE7G,kPAAkP;AAClP,MAAM,UAAU,uBAAuB,CAAC,OAAgC;IACtE,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;IACT,CAAC;AACH,CAAC;AAED;oEACoE;AACpE,SAAS,2BAA2B;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAED,yZAAyZ;AACzZ,MAAM,UAAU,qBAAqB;IACnC,OAAO,2BAA2B,EAAE,KAAK,OAAO,CAAC;AACnD,CAAC"}

package/dist/agent/access/network-access.d.ts

@@ -0,0 +1,23 @@
+import type { EffectiveAccess } from "./resolver.js";
+import { type Scope } from "./bundle.js";
+export type NetworkAccessLevel = "trusted" | "none" | "full";
+/** Developer hosts folded into "trusted". github.com is the only entry, and any further addition needs the same kind of evidence this one has. */
+export declare const TRUSTED_ACCESS_DEVELOPER_HOSTS: readonly string[];
+/** The one place the trusted host set is assembled; a level compiles by reading this constant, never by re-deriving the list. */
+export declare const TRUSTED_ACCESS_HOSTS: readonly string[];
+/** The floor when no networkAccess binding reaches a request at all. */
+export declare const DEFAULT_NETWORK_ACCESS_LEVEL: NetworkAccessLevel;
+export interface NetworkAccessBinding {
+    readonly scope: Scope;
+    readonly level: NetworkAccessLevel;
+}
+export declare function defineNetworkAccess(binding: NetworkAccessBinding): NetworkAccessBinding;
+export interface NetworkAccessValidationDeps {
+    /** OMITTED ⇒ `console.warn` (the boot log). A test passes its own sink to assert on the text. */
+    readonly warn?: (message: string) => void;
+}
+/** Fail-loud validation of networkAccess bindings at config load: known level, container-ladder scope, exactly its level's one address field, and no two bindings on the same scope. The broad-grant finding for a "full" pin at org or tenant scope is WARN ONLY — it never throws and never fails lint:access. */
+export declare function assertNetworkAccessValid(bindings: readonly NetworkAccessBinding[], deps?: NetworkAccessValidationDeps): void;
+/** Resolve one request's network-access level — narrowest-wins, default otherwise. Pure, and deliberately separate from resolveAccess; it takes an EffectiveAccess-shaped echo rather than a raw request. */
+export declare function resolveNetworkAccessLevel(access: Pick<EffectiveAccess, "mode" | "tenantKey" | "surfaceKey" | "domains">, bindings: readonly NetworkAccessBinding[]): NetworkAccessLevel;
+//# sourceMappingURL=network-access.d.ts.map

package/dist/agent/access/network-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-access.d.ts","sourceRoot":"","sources":["../../../agent/access/network-access.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAmD,KAAK,KAAK,EAAmB,MAAM,aAAa,CAAC;AAE3G,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAI7D,kJAAkJ;AAClJ,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAAmB,CAAC;AAEhF,iIAAiI;AACjI,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAAmE,CAAC;AAEtH,wEAAwE;AACxE,eAAO,MAAM,4BAA4B,EAAE,kBAA2B,CAAC;AAQvE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;CACpC;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,oBAAoB,CAEvF;AASD,MAAM,WAAW,2BAA2B;IAC1C,iGAAiG;IACjG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAED,oTAAoT;AACpT,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,EAAE,IAAI,GAAE,2BAAgC,GAAG,IAAI,CAsDhI;AAkBD,6MAA6M;AAC7M,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,CAAC,EAC9E,QAAQ,EAAE,SAAS,oBAAoB,EAAE,GACxC,kBAAkB,CASpB"}

package/dist/agent/access/network-access.js

@@ -0,0 +1,108 @@
+// A network-access level only ADDS credential-less reach on top of what a bundle already grants; it never removes a host a bundle opened. Resolution is narrowest-wins on the container ladder only (org/tenant/domain/surface), defaulting to "none" when no pin matches.
+import { PACKAGE_REGISTRY_HOSTS, TENANT_KEY, SURFACE_KEY } from "./bundle.js";
+const KNOWN_LEVELS = new Set(["trusted", "none", "full"]);
+/** Developer hosts folded into "trusted". github.com is the only entry, and any further addition needs the same kind of evidence this one has. */
+export const TRUSTED_ACCESS_DEVELOPER_HOSTS = ["github.com"];
+/** The one place the trusted host set is assembled; a level compiles by reading this constant, never by re-deriving the list. */
+export const TRUSTED_ACCESS_HOSTS = [...PACKAGE_REGISTRY_HOSTS, ...TRUSTED_ACCESS_DEVELOPER_HOSTS];
+/** The floor when no networkAccess binding reaches a request at all. */
+export const DEFAULT_NETWORK_ACCESS_LEVEL = "none";
+/** The scope levels a network-access binding may pin — the container ladder only. */
+const CONTAINER_LEVELS = new Set(["org", "tenant", "domain", "surface"]);
+/** Same specificity ordering resolver.ts uses for the container ladder — higher = narrower. */
+const SPECIFICITY = { org: 0, tenant: 1, domain: 2, surface: 3 };
+export function defineNetworkAccess(binding) {
+    return binding;
+}
+const LEVEL_FIELD = {
+    org: undefined,
+    tenant: "tenant",
+    domain: "domain",
+    surface: "surface",
+};
+/** Fail-loud validation of networkAccess bindings at config load: known level, container-ladder scope, exactly its level's one address field, and no two bindings on the same scope. The broad-grant finding for a "full" pin at org or tenant scope is WARN ONLY — it never throws and never fails lint:access. */
+export function assertNetworkAccessValid(bindings, deps = {}) {
+    const bad = [];
+    const seen = new Set();
+    for (const b of bindings) {
+        const where = `networkAccess binding (${b.scope.level} scope)`;
+        if (!KNOWN_LEVELS.has(b.level)) {
+            bad.push(`  ${where} has unknown level ${JSON.stringify(b.level)} — known levels: "trusted" | "none" | "full"`);
+        }
+        if (!CONTAINER_LEVELS.has(b.scope.level)) {
+            bad.push(`  ${where} — network access is pinned on the CONTAINER LADDER only (org | tenant | domain | surface); ` +
+                `"group"/"principal" scopes are the DM personal universe and never pin a compute environment ` +
+                `(Tag's own Environment object is org-scoped, never per-account — see network-access.ts's header)`);
+            continue;
+        }
+        const required = LEVEL_FIELD[b.scope.level];
+        const { tenant, domain, surface } = b.scope;
+        for (const [field, value] of [["tenant", tenant], ["domain", domain], ["surface", surface]]) {
+            if (field === required) {
+                if (!value)
+                    bad.push(`  ${where} needs scope.${field} — a ${b.scope.level}-level binding can never match without one`);
+            }
+            else if (value !== undefined) {
+                bad.push(`  ${where} also sets scope.${field} — a ${b.scope.level}-level scope carries only scope.${required ?? "(nothing)"}; drop it or change the level`);
+            }
+        }
+        if (tenant && !TENANT_KEY.test(tenant)) {
+            bad.push(`  ${where} scope.tenant "${tenant}" must be the PLATFORM-QUALIFIED tenant key "platform/<tenant-id>" (e.g. "slack/T0123ABC")`);
+        }
+        if (surface && !SURFACE_KEY.test(surface)) {
+            bad.push(`  ${where} scope.surface "${surface}" must be the fully-qualified surface key "platform/<tenant-id>/<container-id>" (e.g. "slack/T0123ABC/C0123ABC")`);
+        }
+        if (domain?.includes("/")) {
+            bad.push(`  ${where} scope.domain "${domain}" contains "/" — a domain scope takes the BARE domain name, deliberately not tenant-qualified`);
+        }
+        const key = `${b.scope.level}:${tenant ?? domain ?? surface ?? ""}`;
+        if (seen.has(key)) {
+            bad.push(`  two networkAccess bindings pin the SAME scope (${b.scope.level}${tenant ?? domain ?? surface ? ` "${tenant ?? domain ?? surface}"` : ""}) — resolution order would be undefined; merge them into one binding`);
+        }
+        seen.add(key);
+    }
+    if (bad.length > 0) {
+        throw new Error("open-everywhere: invalid networkAccess binding(s):\n" + bad.join("\n") + "\n(access/network-access.ts / docs/how-it-works/access-and-scoping.md)");
+    }
+    // WARN ONLY — see the doc comment above. Runs only once config is known-valid; never throws.
+    const warn = deps.warn ?? ((m) => console.warn(m));
+    for (const b of bindings) {
+        if (b.level !== "full")
+            continue;
+        if (b.scope.level !== "org" && b.scope.level !== "tenant")
+            continue;
+        const where = b.scope.level === "org" ? "org scope" : `tenant scope ("${b.scope.tenant}")`;
+        warn(`[open-everywhere:network-access] broad grant: a "full" networkAccess pin sits at ${where} — every surface under it ` +
+            `(including future ones) gets unrestricted, credential-less egress. Narrow it to a domain or surface scope if possible.`);
+    }
+}
+/** Container ladder only. `org` matches everywhere, INCLUDING a DM; tenant, domain and surface require non-DM, because tenantKey and surfaceKey name the DM conversation itself in DM mode. */
+function scopeMatchesContainer(scope, access) {
+    switch (scope.level) {
+        case "org":
+            return true;
+        case "tenant":
+            return access.mode !== "dm" && scope.tenant === access.tenantKey;
+        case "domain":
+            return access.mode !== "dm" && (scope.domain !== undefined && access.domains.includes(scope.domain));
+        case "surface":
+            return access.mode !== "dm" && scope.surface === access.surfaceKey;
+        default:
+            return false; // group/principal — this plane never resolves them
+    }
+}
+/** Resolve one request's network-access level — narrowest-wins, default otherwise. Pure, and deliberately separate from resolveAccess; it takes an EffectiveAccess-shaped echo rather than a raw request. */
+export function resolveNetworkAccessLevel(access, bindings) {
+    let best;
+    for (const b of bindings) {
+        if (!CONTAINER_LEVELS.has(b.scope.level))
+            continue; // defence-in-depth: resolver never sees an invalid one that validation would have refused
+        if (!scopeMatchesContainer(b.scope, access))
+            continue;
+        const specificity = SPECIFICITY[b.scope.level];
+        if (best === undefined || specificity > best.specificity)
+            best = { specificity, level: b.level };
+    }
+    return best?.level ?? DEFAULT_NETWORK_ACCESS_LEVEL;
+}
+//# sourceMappingURL=network-access.js.map

package/dist/agent/access/network-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-access.js","sourceRoot":"","sources":["../../../agent/access/network-access.ts"],"names":[],"mappings":"AAAA,2QAA2Q;AAG3Q,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,WAAW,EAA+B,MAAM,aAAa,CAAC;AAI3G,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEnG,kJAAkJ;AAClJ,MAAM,CAAC,MAAM,8BAA8B,GAAsB,CAAC,YAAY,CAAC,CAAC;AAEhF,iIAAiI;AACjI,MAAM,CAAC,MAAM,oBAAoB,GAAsB,CAAC,GAAG,sBAAsB,EAAE,GAAG,8BAA8B,CAAC,CAAC;AAEtH,wEAAwE;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAuB,MAAM,CAAC;AAEvE,qFAAqF;AACrF,MAAM,gBAAgB,GAA4B,IAAI,GAAG,CAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAE9G,+FAA+F;AAC/F,MAAM,WAAW,GAAqC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAOnG,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,WAAW,GAA0E;IACzF,GAAG,EAAE,SAAS;IACd,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;CACnB,CAAC;AAOF,oTAAoT;AACpT,MAAM,UAAU,wBAAwB,CAAC,QAAyC,EAAE,IAAI,GAAgC,EAAE;IACxH,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,0BAA0B,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;QAC/D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClH,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CACN,KAAK,KAAK,8FAA8F;gBACtG,8FAA8F;gBAC9F,kGAAkG,CACrG,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC;QAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAU,EAAE,CAAC;YACrG,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvB,IAAI,CAAC,KAAK;oBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,gBAAgB,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,4CAA4C,CAAC,CAAC;YACzH,CAAC;iBAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,oBAAoB,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,mCAAmC,QAAQ,IAAI,WAAW,+BAA+B,CAAC,CAAC;YAC9J,CAAC;QACH,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,kBAAkB,MAAM,4FAA4F,CAAC,CAAC;QAC3I,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,mBAAmB,OAAO,kHAAkH,CAAC,CAAC;QACnK,CAAC;QACD,IAAI,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,kBAAkB,MAAM,+FAA+F,CAAC,CAAC;QAC9I,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,MAAM,IAAI,MAAM,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QACpE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,IAAI,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,sEAAsE,CAAC,CAAC;QAC7N,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sDAAsD,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,wEAAwE,CAAC,CAAC;IACtK,CAAC;IACD,6FAA6F;IAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;YAAE,SAAS;QACjC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QACpE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;QAC3F,IAAI,CACF,oFAAoF,KAAK,4BAA4B;YACnH,wHAAwH,CAC3H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+LAA+L;AAC/L,SAAS,qBAAqB,CAAC,KAAY,EAAE,MAA8E;IACzH,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,KAAK;YACR,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,SAAS,CAAC;QACnE,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACvG,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,UAAU,CAAC;QACrE;YACE,OAAO,KAAK,CAAC,CAAC,mDAAmD;IACrE,CAAC;AACH,CAAC;AAED,6MAA6M;AAC7M,MAAM,UAAU,yBAAyB,CACvC,MAA8E,EAC9E,QAAyC;IAEzC,IAAI,IAAoE,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,0FAA0F;QAC9I,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC;YAAE,SAAS;QACtD,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC;QAChD,IAAI,IAAI,KAAK,SAAS,IAAI,WAAW,GAAG,IAAI,CAAC,WAAW;YAAE,IAAI,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACnG,CAAC;IACD,OAAO,IAAI,EAAE,KAAK,IAAI,4BAA4B,CAAC;AACrD,CAAC"}

package/dist/agent/access/nullable-optional-fields.d.ts

@@ -0,0 +1,13 @@
+/** True when a JSON schema node already accepts `null`. */
+export declare function allowsNull(node: unknown): boolean;
+/** The model-facing form of one JSON schema node. Returns the SAME object when nothing changes. */
+export declare function nullableOptionalJsonSchema(node: unknown): unknown;
+/** Remove every null the rewrite ADDED, walking the ORIGINAL schema: an optional property that did not allow null, sent as null, becomes absent. */
+export declare function stripAddedNulls(node: unknown, value: unknown): unknown;
+/** Names every property path that is optional and does NOT allow null — the slots the model fills with an invented value. Empty on a model-facing schema this module has rewritten. */
+export declare function optionalNonNullablePaths(node: unknown, at?: string): string[];
+/** The replacement schema for one tool input schema, or `undefined` when the schema has nothing to rewrite. */
+export declare function nullableOptionalSchema(current: unknown): unknown;
+/** Rewrite every tool in an assembled tool set, in place. A tool whose schema cannot be read keeps its schema: that is the behaviour before this module, not a new failure. */
+export declare function nullableOptionalToolSet(toolset: Record<string, unknown>): void;
+//# sourceMappingURL=nullable-optional-fields.d.ts.map

package/dist/agent/access/nullable-optional-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nullable-optional-fields.d.ts","sourceRoot":"","sources":["../../../agent/access/nullable-optional-fields.ts"],"names":[],"mappings":"AA8BA,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAcjD;AAuBD,mGAAmG;AACnG,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAsBjE;AAED,oJAAoJ;AACpJ,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAoBtE;AAED,uLAAuL;AACvL,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,SAAK,GAAG,MAAM,EAAE,CAezE;AAMD,+GAA+G;AAC/G,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CA6BhE;AAED,+KAA+K;AAC/K,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAY9E"}

package/dist/agent/access/nullable-optional-fields.js

@@ -0,0 +1,190 @@
+// An OPTIONAL tool field is advertised to the model as NULLABLE, and a null the model sends for it is STRIPPED before the tool validates (OPE-2068).
+// Why: gpt-6-luna sends a value for every property in a tool's input schema, `required` or not (15 of 15 measured). It cannot omit a field, so an optional field it has no value for gets an invented one — a minimum, a maximum, or a copy of another field ("1 tokens/mo" on a spend card). When the field's type allows null, it sends null (5 of 5). The description text did not change this; the type did.
+// Where: this runs at the eve patch's `__oeProjectToolSet` seam, called from `projectToolSet` (access/untrusted-projection.ts) on the fully-assembled tool set before every model call. So it reaches every tool the model can call — authored, framework, dynamic and connector tools — with no per-tool edit.
+// How: the tool's model-facing JSON schema is rewritten (each property that is not in `required`, and does not already allow null, gets null added; nested object properties and array items recurse). The replacement's `validate` removes those null keys, then calls the ORIGINAL schema's `validate`, so the tool's own validation and its `execute` see "absent", exactly as before. A field that ALREADY allowed null keeps its null: there null is the tool's own meaning, not an absent value.
+// The tool object is MUTATED in place (only its `inputSchema` changes), because eve keys tool approvals in a WeakMap on the built tool object.
+import { asSchema, jsonSchema } from "ai";
+function isRecord(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function isThenable(v) {
+    return isRecord(v) && typeof v.then === "function";
+}
+/** Keys that constrain a JSON schema value. A node with none of them accepts anything, null included. */
+const CONSTRAINT_KEYS = ["type", "enum", "const", "anyOf", "oneOf", "allOf", "not", "$ref", "properties", "items"];
+/** True when a JSON schema node already accepts `null`. */
+export function allowsNull(node) {
+    if (node === true)
+        return true;
+    if (!isRecord(node))
+        return false;
+    if (!CONSTRAINT_KEYS.some((k) => k in node))
+        return true;
+    const type = node["type"];
+    if (type === "null")
+        return true;
+    if (Array.isArray(type) && type.includes("null"))
+        return true;
+    if (Array.isArray(node["enum"]) && node["enum"].includes(null))
+        return true;
+    if ("const" in node && node["const"] === null)
+        return true;
+    for (const key of ["anyOf", "oneOf"]) {
+        const branches = node[key];
+        if (Array.isArray(branches) && branches.some(allowsNull))
+            return true;
+    }
+    return false;
+}
+/** The same node, with null added to the values it accepts. */
+function withNull(node) {
+    const type = node["type"];
+    const addEnumNull = (n) => (Array.isArray(n["enum"]) ? { ...n, enum: [...n["enum"], null] } : n);
+    if (typeof type === "string" && !("const" in node))
+        return addEnumNull({ ...node, type: [type, "null"] });
+    if (Array.isArray(type) && !("const" in node))
+        return addEnumNull({ ...node, type: [...type, "null"] });
+    if (Array.isArray(node["anyOf"]))
+        return { ...node, anyOf: [...node["anyOf"], { type: "null" }] };
+    // Any other shape (a `$ref`, a `oneOf`, a `const`): keep its annotations outside and offer null as a second branch.
+    const { description, title, default: dflt, ...rest } = node;
+    return {
+        ...(description !== undefined ? { description } : {}),
+        ...(title !== undefined ? { title } : {}),
+        ...(dflt !== undefined ? { default: dflt } : {}),
+        anyOf: [rest, { type: "null" }],
+    };
+}
+function requiredOf(node) {
+    return Array.isArray(node["required"]) ? node["required"] : [];
+}
+/** The model-facing form of one JSON schema node. Returns the SAME object when nothing changes. */
+export function nullableOptionalJsonSchema(node) {
+    if (!isRecord(node))
+        return node;
+    let out = node;
+    const properties = node["properties"];
+    if (isRecord(properties)) {
+        const required = requiredOf(node);
+        let changed = false;
+        const next = {};
+        for (const [key, prop] of Object.entries(properties)) {
+            let p = nullableOptionalJsonSchema(prop);
+            if (!required.includes(key) && isRecord(p) && !allowsNull(p))
+                p = withNull(p);
+            if (p !== prop)
+                changed = true;
+            next[key] = p;
+        }
+        if (changed)
+            out = { ...out, properties: next };
+    }
+    const items = node["items"];
+    if (isRecord(items)) {
+        const nextItems = nullableOptionalJsonSchema(items);
+        if (nextItems !== items)
+            out = { ...out, items: nextItems };
+    }
+    return out;
+}
+/** Remove every null the rewrite ADDED, walking the ORIGINAL schema: an optional property that did not allow null, sent as null, becomes absent. */
+export function stripAddedNulls(node, value) {
+    if (!isRecord(node))
+        return value;
+    if (Array.isArray(value)) {
+        const items = node["items"];
+        return isRecord(items) ? value.map((v) => stripAddedNulls(items, v)) : value;
+    }
+    const properties = node["properties"];
+    if (!isRecord(value) || !isRecord(properties))
+        return value;
+    const required = requiredOf(node);
+    const out = {};
+    for (const [key, v] of Object.entries(value)) {
+        const prop = properties[key];
+        if (prop === undefined) {
+            out[key] = v;
+            continue;
+        }
+        if (v === null && !required.includes(key) && !allowsNull(prop))
+            continue;
+        out[key] = stripAddedNulls(prop, v);
+    }
+    return out;
+}
+/** Names every property path that is optional and does NOT allow null — the slots the model fills with an invented value. Empty on a model-facing schema this module has rewritten. */
+export function optionalNonNullablePaths(node, at = "") {
+    if (!isRecord(node))
+        return [];
+    const found = [];
+    const properties = node["properties"];
+    if (isRecord(properties)) {
+        const required = requiredOf(node);
+        for (const [key, prop] of Object.entries(properties)) {
+            const path = at === "" ? key : `${at}.${key}`;
+            if (!required.includes(key) && isRecord(prop) && !allowsNull(prop))
+                found.push(path);
+            found.push(...optionalNonNullablePaths(prop, path));
+        }
+    }
+    const items = node["items"];
+    if (isRecord(items))
+        found.push(...optionalNonNullablePaths(items, `${at}[]`));
+    return found;
+}
+/** One replacement per original schema object, so the advertised bytes and their identity stay stable across model calls (the prompt cache wants that). */
+const replacements = new WeakMap();
+const ours = new WeakSet();
+/** The replacement schema for one tool input schema, or `undefined` when the schema has nothing to rewrite. */
+export function nullableOptionalSchema(current) {
+    if (current === null || typeof current !== "object")
+        return undefined;
+    if (ours.has(current))
+        return undefined;
+    const cached = replacements.get(current);
+    if (cached !== undefined)
+        return cached;
+    const original = asSchema(current);
+    const source = original.jsonSchema;
+    let advertised;
+    if (isThenable(source)) {
+        // A lazily-resolved schema: rewrite it when the SDK awaits it.
+        advertised = async () => nullableOptionalJsonSchema(await source);
+    }
+    else {
+        const rewritten = nullableOptionalJsonSchema(source);
+        if (rewritten === source)
+            return undefined;
+        advertised = rewritten;
+    }
+    const replacement = jsonSchema(advertised, {
+        validate: async (value) => {
+            const stripped = stripAddedNulls(await source, value);
+            // The original schema stays the rule: this replacement only removes the nulls it invited.
+            if (typeof original.validate !== "function")
+                return { success: true, value: stripped };
+            return (await original.validate(stripped));
+        },
+    });
+    replacements.set(current, replacement);
+    ours.add(replacement);
+    return replacement;
+}
+/** Rewrite every tool in an assembled tool set, in place. A tool whose schema cannot be read keeps its schema: that is the behaviour before this module, not a new failure. */
+export function nullableOptionalToolSet(toolset) {
+    for (const raw of Object.values(toolset)) {
+        if (raw === null || typeof raw !== "object")
+            continue;
+        const tool = raw;
+        let replacement;
+        try {
+            replacement = nullableOptionalSchema(tool.inputSchema);
+        }
+        catch {
+            continue;
+        }
+        if (replacement !== undefined)
+            tool.inputSchema = replacement;
+    }
+}
+//# sourceMappingURL=nullable-optional-fields.js.map

package/dist/agent/access/nullable-optional-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nullable-optional-fields.js","sourceRoot":"","sources":["../../../agent/access/nullable-optional-fields.ts"],"names":[],"mappings":"AAAA,qJAAqJ;AACrJ,iZAAiZ;AACjZ,gTAAgT;AAChT,ueAAue;AACve,+IAA+I;AAE/I,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAa1C,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAQ,CAAwB,CAAC,IAAI,KAAK,UAAU,CAAC;AAC7E,CAAC;AAED,yGAAyG;AACzG,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAU,CAAC;AAE5H,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAK,IAAI,CAAC,MAAM,CAAe,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,SAAS,QAAQ,CAAC,IAAU;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,WAAW,GAAG,CAAC,CAAO,EAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAI,CAAC,CAAC,MAAM,CAAe,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5H,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1G,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACxG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,GAAI,IAAI,CAAC,OAAO,CAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACjH,oHAAoH;IACpH,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAC5D,OAAO;QACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAU;IAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,UAAU,CAAc,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,0BAA0B,CAAC,IAAa;IACtD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,GAAG,GAAS,IAAI,CAAC;IACrB,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAS,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC9E,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,OAAO;YAAE,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,KAAK;YAAE,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oJAAoJ;AACpJ,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,KAAc;IAC3D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/E,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAS,EAAE,CAAC;IACrB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACzE,GAAG,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uLAAuL;AACvL,MAAM,UAAU,wBAAwB,CAAC,IAAa,EAAE,EAAE,GAAG,EAAE;IAC7D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrF,KAAK,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,QAAQ,CAAC,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2JAA2J;AAC3J,MAAM,YAAY,GAAG,IAAI,OAAO,EAAmB,CAAC;AACpD,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;AAEnC,+GAA+G;AAC/G,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAgB,CAAgC,CAAC;IAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;IACnC,IAAI,UAAmB,CAAC;IACxB,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,+DAA+D;QAC/D,UAAU,GAAG,KAAK,IAAI,EAAE,CAAC,0BAA0B,CAAC,MAAM,MAAM,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,SAAS,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC;QAC3C,UAAU,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,UAAmB,EAAE;QAClD,QAAQ,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YACjC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,MAAM,EAAE,KAAK,CAAC,CAAC;YACtD,0FAA0F;YAC1F,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YAChG,OAAO,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAyE,CAAC;QACrH,CAAC;KACF,CAAC,CAAC;IACH,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,WAAqB,CAAC,CAAC;IAChC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,+KAA+K;AAC/K,MAAM,UAAU,uBAAuB,CAAC,OAAgC;IACtE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACtD,MAAM,IAAI,GAAG,GAA0B,CAAC;QACxC,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACH,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAChE,CAAC;AACH,CAAC"}