@openrig/cli 0.4.8 → 0.5.1

package/node_modules/@openrig/daemon/dist/domain/gateway/human-registry.js

@@ -0,0 +1,319 @@
+// OPR gateway M1 A3 — human specs: file-per-human FRAGMENTS + a GENERATED registry
+// projection. Schema sealed in GATEWAY-M1-A3-ENTITY-SCHEMA (b2a2594b, supersedes
+// e499dab6): prefs are PER-ENTITY (loudness once per human) and `role` is PER-BINDING
+// (routing / default delivery channel) — two DISTINCT axes.
+//
+// TRUTH MODEL (design-record §7 / plan §1): each human is one YAML fragment at
+// <home>/gateway/humans/<entityId>.yaml. The registry is a GENERATED PROJECTION of
+// the fragments (humans.generated.yaml) — NEVER hand-edited; the fragment is truth.
+// The projection carries a DO-NOT-EDIT header and a drift pin (mirrors the
+// attestation-lineage.generated codegen convention). Admission/resolution is the
+// A1/A4 gateway's job — this module only owns the fragment + projection contract.
+//
+// Validation is add-time == load-time (the hosts-registry entry pattern): the SAME
+// validateHumanFragment runs on `add` and on load, so a present-but-invalid fragment
+// is a loud error, never silently projected.
+import { existsSync, readFileSync, writeFileSync, renameSync, mkdirSync, readdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
+import { getOpenRigHome } from "../../openrig-compat.js";
+// ── Schema (closed enums; extend only additively behind the contract) ──
+export const HUMAN_ENTITY_CLASSES = new Set(["human"]); // M1's only class
+export const HUMAN_CONNECTOR_KINDS = new Set(["slack"]); // M1's only kind
+export const HUMAN_BINDING_ROLES = new Set(["primary", "secondary"]);
+export const HUMAN_DELIVERY_CLASSES = new Set(["A", "B", "C", "D"]);
+// entityId is the fragment key + filename: a stable slug that survives platform
+// renames. Lowercase alnum + separators, no path chars (it is spliced into a path).
+export const ENTITY_ID_PATTERN = /^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$/;
+// The registered @external ref shape (the section2 registered mode). A registry
+// fragment's address is <entityId>@external by convention; literal-scheme addresses
+// (slack:U...@external) are one-off ADDRESSES, never registry entries.
+export const ADDRESS_DOMAIN = "external";
+// Closed key sets — a typo'd field must fail LOUD, never silently degrade behavior.
+const ALLOWED_FRAGMENT_KEYS = new Set(["entityId", "class", "displayName", "address", "connectorBindings", "prefs"]);
+const ALLOWED_BINDING_KEYS = new Set(["kind", "connectorRef", "secretsRef", "role", "handle"]);
+// A connector handle (M1 A6 v3 schema 9e468b2f): the platform-native id of the human ON that
+// connector (e.g. a Slack user id). Constrained so it can never forge a session ref (no ':' / '@'
+// / whitespace) — it is compared to an inbound sender id and spliced into teaching text.
+export const HANDLE_PATTERN = /^[A-Za-z0-9._-]+$/;
+const ALLOWED_PREFS_KEYS = new Set(["deliveryClass", "away"]);
+function unknownKey(obj, allowed) {
+    for (const k of Object.keys(obj))
+        if (!allowed.has(k))
+            return k;
+    return undefined;
+}
+function isObj(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+/** add-time == load-time validation. Returns the typed fragment or a loud error.
+ *  Structural + closed-enum + the two cross-field invariants (>=1 binding,
+ *  exactly-one-primary-per-entity). Does NOT touch the filesystem. */
+export function validateHumanFragment(raw) {
+    if (!isObj(raw))
+        return { ok: false, error: "human fragment must be a mapping" };
+    const uk = unknownKey(raw, ALLOWED_FRAGMENT_KEYS);
+    if (uk)
+        return { ok: false, error: `unknown fragment key "${uk}" — allowed: ${[...ALLOWED_FRAGMENT_KEYS].join(", ")} (a typo must not silently degrade)` };
+    const { entityId, class: cls, displayName, address, connectorBindings, prefs } = raw;
+    if (typeof entityId !== "string" || !ENTITY_ID_PATTERN.test(entityId)) {
+        return { ok: false, error: `entityId "${String(entityId)}" must be a lowercase slug (a-z0-9._- , no leading/trailing separator)` };
+    }
+    if (cls !== "human") {
+        return { ok: false, error: `class "${String(cls)}" is not a known entity class (M1: ${[...HUMAN_ENTITY_CLASSES].join(", ")})` };
+    }
+    if (typeof displayName !== "string" || displayName.length === 0) {
+        return { ok: false, error: "displayName must be a non-empty string" };
+    }
+    if (typeof address !== "string" || address.length === 0) {
+        return { ok: false, error: "address must be a non-empty string (the registered @external ref)" };
+    }
+    // Registered-mode pin: the address is <entityId>@external (collision-free, ties the
+    // ref to the fragment key). Not a loose @external match — mike@externalx is NOT a ref.
+    if (address !== `${entityId}@${ADDRESS_DOMAIN}`) {
+        return { ok: false, error: `address "${address}" must be the registered ref "${entityId}@${ADDRESS_DOMAIN}" (the <entityId>@external convention)` };
+    }
+    if (!Array.isArray(connectorBindings) || connectorBindings.length < 1) {
+        return { ok: false, error: "connectorBindings must be a non-empty list (>=1)" };
+    }
+    const bindings = [];
+    let primaryCount = 0;
+    for (let i = 0; i < connectorBindings.length; i++) {
+        const b = connectorBindings[i];
+        if (!isObj(b))
+            return { ok: false, error: `connectorBindings[${i}] must be a mapping` };
+        const ubk = unknownKey(b, ALLOWED_BINDING_KEYS);
+        if (ubk)
+            return { ok: false, error: `connectorBindings[${i}] has unknown key "${ubk}" — allowed: ${[...ALLOWED_BINDING_KEYS].join(", ")}` };
+        if (!HUMAN_CONNECTOR_KINDS.has(String(b.kind))) {
+            return { ok: false, error: `connectorBindings[${i}].kind "${String(b.kind)}" is not a known connector kind (M1: ${[...HUMAN_CONNECTOR_KINDS].join(", ")})` };
+        }
+        if (typeof b.connectorRef !== "string" || b.connectorRef.length === 0) {
+            return { ok: false, error: `connectorBindings[${i}].connectorRef must be a non-empty string` };
+        }
+        if (typeof b.secretsRef !== "string" || b.secretsRef.length === 0) {
+            return { ok: false, error: `connectorBindings[${i}].secretsRef must be a non-empty vault POINTER (never the secret)` };
+        }
+        if (!HUMAN_BINDING_ROLES.has(String(b.role))) {
+            return { ok: false, error: `connectorBindings[${i}].role "${String(b.role)}" must be primary|secondary` };
+        }
+        if (b.role === "primary")
+            primaryCount++;
+        // A6 v3: handle is OPTIONAL; when present it must be a clean platform id (ref-forgery-safe).
+        let handle;
+        if (b.handle !== undefined) {
+            if (typeof b.handle !== "string" || !HANDLE_PATTERN.test(b.handle)) {
+                return { ok: false, error: `connectorBindings[${i}].handle "${String(b.handle)}" must match ${HANDLE_PATTERN} (a platform id — no ':' '@' or whitespace, which could forge a ref)` };
+            }
+        }
+        const binding = { kind: "slack", connectorRef: b.connectorRef, secretsRef: b.secretsRef, role: b.role };
+        if (b.handle !== undefined) {
+            handle = b.handle;
+            binding.handle = handle;
+        }
+        bindings.push(binding);
+    }
+    // EXACTLY ONE primary binding per entity = the default delivery channel.
+    if (primaryCount !== 1) {
+        return { ok: false, error: `exactly one connectorBinding must have role "primary" (found ${primaryCount}) — it is the default delivery channel` };
+    }
+    // A6 v3 pin-1 (within-fragment): a handle is UNIQUE per kind across this human's bindings —
+    // one human must not claim the same platform id twice. (Cross-fragment uniqueness is enforced
+    // in projectHumans, which sees every human at once.)
+    const seenHandles = new Set();
+    for (const b of bindings) {
+        if (b.handle === undefined)
+            continue;
+        const key = `${b.kind}:${b.handle}`;
+        if (seenHandles.has(key)) {
+            return { ok: false, error: `duplicate ${b.kind} handle "${b.handle}" across this human's bindings — a handle is unique per kind (one platform id = one human)` };
+        }
+        seenHandles.add(key);
+    }
+    if (!isObj(prefs))
+        return { ok: false, error: "prefs must be a mapping { deliveryClass, away? }" };
+    const upk = unknownKey(prefs, ALLOWED_PREFS_KEYS);
+    if (upk)
+        return { ok: false, error: `prefs has unknown key "${upk}" — allowed: ${[...ALLOWED_PREFS_KEYS].join(", ")} (the notifications register selection)` };
+    if (!HUMAN_DELIVERY_CLASSES.has(String(prefs.deliveryClass))) {
+        return { ok: false, error: `prefs.deliveryClass "${String(prefs.deliveryClass)}" must be one of A|B|C|D (the notifications register)` };
+    }
+    if (prefs.away !== undefined && typeof prefs.away !== "boolean") {
+        return { ok: false, error: "prefs.away must be a boolean when present" };
+    }
+    const validatedPrefs = { deliveryClass: prefs.deliveryClass };
+    if (prefs.away !== undefined)
+        validatedPrefs.away = prefs.away;
+    return {
+        ok: true,
+        fragment: { entityId, class: "human", displayName, address, connectorBindings: bindings, prefs: validatedPrefs },
+    };
+}
+// ── Paths (under getOpenRigHome(); `home` injectable for hermetic tests) ──
+export function humansDir(home = getOpenRigHome()) {
+    return join(home, "gateway", "humans");
+}
+export function projectionPath(home = getOpenRigHome()) {
+    return join(home, "gateway", "humans.generated.yaml");
+}
+/** The default HUMAN operator identity — the fallback HUMAN when admission resolves no
+ *  addressable entity. NOT a fragment (never an entities[] entry) and NOT the inbound
+ *  routing destination (that is the operator-AGENT operator-agent@kernel, which has its
+ *  own home in the slack connector config — a different seat). Named with the human-seat
+ *  PREFIX convention so it classifies as human-CLASS (isHumanSeatSessionRef); the parity
+ *  test pins that, killing the '-human'-suffix footgun class. Canonical home for this
+ *  constant — external-admission.ts imports it (ONE source, no dup). */
+export const OPERATOR_HUMAN_DEFAULT_SLOT = "human-operator@kernel";
+const PROJECTION_HEADER = "# GENERATED FILE — DO NOT EDIT.\n" +
+    "# Projection of the human fragments under gateway/humans/<entityId>.yaml.\n" +
+    "# The fragment is truth: add/edit a human via its fragment (or `rig gateway human\n" +
+    "# add`), then re-project. A hand-edit here is REFUSED at load.\n";
+/** Generate the canonical registry projection from the fragments (the ONE generator
+ *  used by both the write path and the drift/load check). Load-time validation is the
+ *  SAME validateHumanFragment as add-time; the filename must equal <entityId>.yaml
+ *  (collision-free key). Entities are sorted by entityId for a stable, diffable body. */
+export function projectHumans(home = getOpenRigHome()) {
+    const dir = humansDir(home);
+    const entities = [];
+    if (existsSync(dir)) {
+        const files = readdirSync(dir).filter((f) => f.endsWith(".yaml") && !f.startsWith(".")).sort();
+        for (const f of files) {
+            let raw;
+            try {
+                raw = parseYaml(readFileSync(join(dir, f), "utf8"));
+            }
+            catch (err) {
+                return { ok: false, error: `failed to parse human fragment ${f}: ${err.message}` };
+            }
+            const v = validateHumanFragment(raw);
+            if (!v.ok)
+                return { ok: false, error: `invalid human fragment ${f}: ${v.error}` };
+            if (`${v.fragment.entityId}.yaml` !== f) {
+                return { ok: false, error: `human fragment ${f} declares entityId "${v.fragment.entityId}" — the filename must be <entityId>.yaml` };
+            }
+            entities.push(v.fragment);
+        }
+    }
+    entities.sort((a, b) => (a.entityId < b.entityId ? -1 : a.entityId > b.entityId ? 1 : 0));
+    // A6 v3 pin-1 (cross-fragment): a handle is UNIQUE per kind across ALL humans — one platform
+    // id maps to exactly one human, so the inbound resolver is unambiguous. A collision between two
+    // fragments is a registration conflict, REFUSED at projection (so add/load/drift all catch it).
+    const handleOwner = new Map();
+    for (const e of entities) {
+        for (const b of e.connectorBindings) {
+            if (b.handle === undefined)
+                continue;
+            const key = `${b.kind}:${b.handle}`;
+            const prior = handleOwner.get(key);
+            if (prior !== undefined && prior !== e.entityId) {
+                return { ok: false, error: `${b.kind} handle "${b.handle}" is claimed by both "${prior}" and "${e.entityId}" — a handle maps to exactly one human (registration conflict)` };
+            }
+            handleOwner.set(key, e.entityId);
+        }
+    }
+    return { ok: true, body: PROJECTION_HEADER + stringifyYaml({ entities }), entities };
+}
+/** A6 v3 pins 2+3 — resolve an INBOUND connector handle to its registered human. Walks every
+ *  human's bindings of `connectorKind` for one whose `handle` equals `handle`:
+ *   - a match          -> registered (admit as that entity; its address is the human-class source)
+ *   - no match         -> unregistered LOUD teaching (admit-iff-registered — never fabricate a
+ *                         human seat from a raw platform id; a handle-LESS binding is outbound-only
+ *                         and simply never matches, so it fails inbound here, loudly).
+ *  Cross-fragment uniqueness (projectHumans) guarantees at most one match. */
+export function resolveSlackHandle(handle, entities, connectorKind = "slack") {
+    for (const e of entities) {
+        for (const b of e.connectorBindings) {
+            if (b.kind === connectorKind && b.handle !== undefined && b.handle === handle) {
+                return { kind: "registered", entityId: e.entityId, address: e.address };
+            }
+        }
+    }
+    return {
+        kind: "unregistered",
+        handle,
+        error: `inbound ${connectorKind} sender "${handle}" is not a registered human (no binding with handle "${handle}"). ` +
+            `Register the human + their handle first: rig gateway human add <entityId> --display-name … ` +
+            `--binding ${connectorKind}:<connectorRef>:<secretsRef>:primary:handle=${handle} --delivery-class …; ` +
+            `until then this message is REFUSED (it was NOT landed as a fabricated human seat).`,
+    };
+}
+function atomicWrite(path, body) {
+    try {
+        mkdirSync(dirname(path), { recursive: true });
+        const tmp = `${path}.tmp-${process.pid}`;
+        writeFileSync(tmp, body, { mode: 0o600 });
+        renameSync(tmp, path);
+        return { ok: true };
+    }
+    catch (err) {
+        return { ok: false, error: `failed to write ${path}: ${err.message}` };
+    }
+}
+/** (Re)write the generated projection from the current fragments. Atomic. */
+export function writeProjection(home = getOpenRigHome()) {
+    const proj = projectHumans(home);
+    if (!proj.ok)
+        return { ok: false, error: proj.error };
+    const path = projectionPath(home);
+    const w = atomicWrite(path, proj.body);
+    return w.ok ? { ok: true, path } : w;
+}
+/** The verb-add writer: validate (add-time) -> atomic write the ONE fragment file ->
+ *  re-project. Operators never hand-create the fragment YAML; the verb owns it.
+ *  NO SILENT CLOBBER (mirrors hosts-registry addHostEntry): an existing entityId is
+ *  REFUSED unless `replace` is passed explicitly — a re-run must not silently replace
+ *  a human's data (managed-config data-safety class). */
+export function addHumanFragment(raw, home = getOpenRigHome(), opts = {}) {
+    const v = validateHumanFragment(raw);
+    if (!v.ok)
+        return { ok: false, error: v.error };
+    const file = join(humansDir(home), `${v.fragment.entityId}.yaml`);
+    if (!opts.replace && existsSync(file)) {
+        return { ok: false, error: `human "${v.fragment.entityId}" already exists at ${file} — pass an explicit replace to update it (no silent overwrite)` };
+    }
+    // A6 v3 pin-1: reject a handle already claimed by a DIFFERENT human BEFORE writing (never leave a
+    // conflicting fragment on disk with a failed re-projection). projectHumans is the load-time backstop.
+    const existing = projectHumans(home);
+    if (!existing.ok)
+        return { ok: false, error: `cannot validate handle uniqueness — existing registry is invalid: ${existing.error}` };
+    const claimed = new Map();
+    for (const e of existing.entities) {
+        if (e.entityId === v.fragment.entityId)
+            continue; // a replace of the same human is fine
+        for (const b of e.connectorBindings)
+            if (b.handle !== undefined)
+                claimed.set(`${b.kind}:${b.handle}`, e.entityId);
+    }
+    for (const b of v.fragment.connectorBindings) {
+        if (b.handle === undefined)
+            continue;
+        const owner = claimed.get(`${b.kind}:${b.handle}`);
+        if (owner !== undefined) {
+            return { ok: false, error: `${b.kind} handle "${b.handle}" is already registered to human "${owner}" — a handle maps to exactly one human (registration conflict)` };
+        }
+    }
+    const w = atomicWrite(file, stringifyYaml(v.fragment));
+    if (!w.ok)
+        return { ok: false, error: w.error };
+    const proj = writeProjection(home);
+    if (!proj.ok)
+        return { ok: false, error: `fragment written but re-projection failed: ${proj.error}` };
+    return { ok: true, path: file, fragment: v.fragment };
+}
+/** Load the registry via the projection, but REFUSE a hand-edited/drifted projection:
+ *  the fragments are truth, so the on-disk projection must byte-match a fresh one.
+ *  This is the drift pin's runtime half (the vitest parity pin is the CI half). */
+export function loadHumanRegistry(home = getOpenRigHome()) {
+    const proj = projectHumans(home);
+    if (!proj.ok)
+        return { ok: false, error: proj.error };
+    const path = projectionPath(home);
+    if (!existsSync(path)) {
+        return { ok: false, error: `registry projection missing at ${path} — re-project from the fragments` };
+    }
+    if (readFileSync(path, "utf8") !== proj.body) {
+        return { ok: false, error: `registry projection at ${path} is HAND-EDITED or DRIFTED from the fragments — the fragment is truth; re-project, never hand-edit` };
+    }
+    return { ok: true, entities: proj.entities };
+}
+//# sourceMappingURL=human-registry.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/human-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"human-registry.js","sourceRoot":"","sources":["../../../src/domain/gateway/human-registry.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,iFAAiF;AACjF,sFAAsF;AACtF,4DAA4D;AAC5D,EAAE;AACF,+EAA+E;AAC/E,mFAAmF;AACnF,oFAAoF;AACpF,2EAA2E;AAC3E,iFAAiF;AACjF,kFAAkF;AAClF,EAAE;AACF,mFAAmF;AACnF,qFAAqF;AACrF,6CAA6C;AAE7C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAU,kBAAkB;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAU,iBAAiB;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AACpE,gFAAgF;AAChF,oFAAoF;AACpF,MAAM,CAAC,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AACvE,gFAAgF;AAChF,oFAAoF;AACpF,uEAAuE;AACvE,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AAEzC,oFAAoF;AACpF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC;AACrH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/F,6FAA6F;AAC7F,kGAAkG;AAClG,yFAAyF;AACzF,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAClD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9D,SAAS,UAAU,CAAC,GAA4B,EAAE,OAAoB;IACpE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAChE,OAAO,SAAS,CAAC;AACnB,CAAC;AAuCD,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;sEAEsE;AACtE,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IACjF,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAClD,IAAI,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,gBAAgB,CAAC,GAAG,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,EAAE,CAAC;IAC3J,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IAErF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,MAAM,CAAC,QAAQ,CAAC,wEAAwE,EAAE,CAAC;IACrI,CAAC;IACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAClI,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mEAAmE,EAAE,CAAC;IACnG,CAAC;IACD,oFAAoF;IACpF,uFAAuF;IACvF,IAAI,OAAO,KAAK,GAAG,QAAQ,IAAI,cAAc,EAAE,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,OAAO,iCAAiC,QAAQ,IAAI,cAAc,wCAAwC,EAAE,CAAC;IACtJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,qBAAqB,EAAE,CAAC;QACxF,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAChD,IAAI,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,sBAAsB,GAAG,gBAAgB,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC5I,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,WAAW,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,wCAAwC,CAAC,GAAG,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/J,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,2CAA2C,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,mEAAmE,EAAE,CAAC;QACzH,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,WAAW,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAC5G,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,YAAY,EAAE,CAAC;QACzC,6FAA6F;QAC7F,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,aAAa,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,cAAc,sEAAsE,EAAE,CAAC;YACvL,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAA0B,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAA+B,EAAE,CAAC;QAC1J,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,MAAM,GAAG,CAAC,CAAC,MAAgB,CAAC;YAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QAAC,CAAC;QACrF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,yEAAyE;IACzE,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gEAAgE,YAAY,wCAAwC,EAAE,CAAC;IACpJ,CAAC;IACD,4FAA4F;IAC5F,8FAA8F;IAC9F,qDAAqD;IACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,MAAM,4FAA4F,EAAE,CAAC;QACnK,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;IACnG,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAClD,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,GAAG,gBAAgB,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC,EAAE,CAAC;IAC/J,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,uDAAuD,EAAE,CAAC;IAC1I,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,cAAc,GAAe,EAAE,aAAa,EAAE,KAAK,CAAC,aAA4C,EAAE,CAAC;IACzG,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,cAAc,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAE/D,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;KACjH,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,SAAS,CAAC,OAAe,cAAc,EAAE;IACvD,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,OAAe,cAAc,EAAE;IAC5D,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,uBAAuB,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;wEAMwE;AACxE,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AAEnE,MAAM,iBAAiB,GACrB,mCAAmC;IACnC,6EAA6E;IAC7E,qFAAqF;IACrF,kEAAkE,CAAC;AAMrE;;;yFAGyF;AACzF,MAAM,UAAU,aAAa,CAAC,OAAe,cAAc,EAAE;IAC3D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/F,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,GAAY,CAAC;YACjB,IAAI,CAAC;gBACH,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAChG,CAAC;YACD,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAClF,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,OAAO,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,QAAQ,0CAA0C,EAAE,CAAC;YACvI,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,6FAA6F;IAC7F,gGAAgG;IAChG,gGAAgG;IAChG,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,MAAM,yBAAyB,KAAK,UAAU,CAAC,CAAC,QAAQ,gEAAgE,EAAE,CAAC;YAC/K,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;AACvF,CAAC;AAMD;;;;;;8EAM8E;AAC9E,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,QAAkC,EAClC,gBAAyB,OAAO;IAEhC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9E,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,MAAM;QACN,KAAK,EACH,WAAW,aAAa,YAAY,MAAM,wDAAwD,MAAM,MAAM;YAC9G,6FAA6F;YAC7F,aAAa,aAAa,+CAA+C,MAAM,uBAAuB;YACtG,oFAAoF;KACvF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IACpF,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,OAAe,cAAc,EAAE;IAC7D,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAMD;;;;yDAIyD;AACzD,MAAM,UAAU,gBAAgB,CAC9B,GAAY,EACZ,OAAe,cAAc,EAAE,EAC/B,OAA8B,EAAE;IAEhC,MAAM,CAAC,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,uBAAuB,IAAI,gEAAgE,EAAE,CAAC;IACxJ,CAAC;IACD,kGAAkG;IAClG,sGAAsG;IACtG,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qEAAqE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IACrI,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ;YAAE,SAAS,CAAC,sCAAsC;QACxF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB;YAAE,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,MAAM,qCAAqC,KAAK,gEAAgE,EAAE,CAAC;QACvK,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IACtG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACxD,CAAC;AAMD;;mFAEmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,OAAe,cAAc,EAAE;IAC/D,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,IAAI,kCAAkC,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,IAAI,oGAAoG,EAAE,CAAC;IAClK,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AAC/C,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/protocol.d.ts

@@ -0,0 +1,54 @@
+export declare const GATEWAY_PROTOCOL_VERSION = 1;
+export declare const GATEWAY_MESSAGE_KINDS: readonly ["capability", "outbound_decision", "ack"];
+export type GatewayMessageKind = (typeof GATEWAY_MESSAGE_KINDS)[number];
+/** connector -> gateway at connect: what this connector can do. `ops` is a CLOSED set;
+ *  the gateway dispatches only advertised ops. */
+export interface CapabilityDescriptor {
+    kind: "capability";
+    connectorId: string;
+    platform: string;
+    protocolVersion: number;
+    ops: string[];
+    limits?: Record<string, unknown>;
+}
+/** gateway -> connector: one outbound decision. `op` MUST be advertised; `decisionId` is
+ *  the idempotency key. */
+export interface OutboundDecision {
+    kind: "outbound_decision";
+    decisionId: string;
+    op: string;
+    entityBindingRef: string;
+    payload: unknown;
+}
+/** connector -> gateway: the terminal ack for a decisionId (drives the dispatch buffer's
+ *  ack-gated drain). */
+export type Ack = {
+    kind: "ack";
+    decisionId: string;
+    ok: true;
+} | {
+    kind: "ack";
+    decisionId: string;
+    ok: false;
+    failed: {
+        class: string;
+        detail?: string;
+    };
+};
+export type GatewayMessage = CapabilityDescriptor | OutboundDecision | Ack;
+export type DecodeResult = {
+    ok: true;
+    message: GatewayMessage;
+} | {
+    ok: false;
+    error: string;
+};
+/** Decode + validate ONE framed JSON message. Unknown kind = LOUD refuse (proof-9);
+ *  each kind's required fields are structurally validated (closed union, no partials). */
+export declare function decodeGatewayMessage(raw: string): DecodeResult;
+/** Encode a message to a framed JSON line (newline-delimited). */
+export declare function encodeGatewayMessage(msg: GatewayMessage): string;
+/** proof-9 guard: an OutboundDecision op MUST be advertised by the connector's descriptor;
+ *  an unadvertised op is REFUSED, never attempted. */
+export declare function isAdvertisedOp(descriptor: CapabilityDescriptor, op: string): boolean;
+//# sourceMappingURL=protocol.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../src/domain/gateway/protocol.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,eAAO,MAAM,qBAAqB,qDAAsD,CAAC;AACzF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE;kDACkD;AAClD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;2BAC2B;AAC3B,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;wBACwB;AACxB,MAAM,MAAM,GAAG,GACX;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAE/F,MAAM,MAAM,cAAc,GAAG,oBAAoB,GAAG,gBAAgB,GAAG,GAAG,CAAC;AAE3E,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AASjC;0FAC0F;AAC1F,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAqC9D;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,CAEhE;AAED;sDACsD;AACtD,wBAAgB,cAAc,CAAC,UAAU,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAEpF"}

package/node_modules/@openrig/daemon/dist/domain/gateway/protocol.js

@@ -0,0 +1,83 @@
+// M1 A4a — the gateway<->connector WIRE: a CLOSED, minimal framed-JSON union over a local
+// UNIX-domain socket (arch a8343a38 / contract a305310d). NOT a new interop protocol — an
+// internal IPC seam. The gateway OUT-dials the socket the connector listens on; the wire
+// carries OUTBOUND decisions + acks + the capability descriptor ONLY (inbound stays on the
+// connector's existing platform socket for M1).
+//
+// Rails: unknown message kind = LOUD refuse; protocolVersion is ADDITIVE-ONLY; an
+// OutboundDecision.op MUST be advertised in the connector's CapabilityDescriptor (an
+// unadvertised op is REFUSED, never attempted — proof-9); decisionId is the end-to-end
+// idempotency key (a gateway retry produces a BYTE-IDENTICAL dup at the connector).
+export const GATEWAY_PROTOCOL_VERSION = 1;
+export const GATEWAY_MESSAGE_KINDS = ["capability", "outbound_decision", "ack"];
+function isObj(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function nonEmptyStr(v) {
+    return typeof v === "string" && v.length > 0;
+}
+/** Decode + validate ONE framed JSON message. Unknown kind = LOUD refuse (proof-9);
+ *  each kind's required fields are structurally validated (closed union, no partials). */
+export function decodeGatewayMessage(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        return { ok: false, error: `gateway frame is not valid JSON: ${err.message}` };
+    }
+    if (!isObj(parsed))
+        return { ok: false, error: "gateway frame must be a JSON object" };
+    const kind = parsed.kind;
+    if (typeof kind !== "string" || !GATEWAY_MESSAGE_KINDS.includes(kind)) {
+        return { ok: false, error: `unknown gateway message kind "${String(kind)}" — refused (allowed: ${GATEWAY_MESSAGE_KINDS.join(", ")})` };
+    }
+    if (kind === "capability") {
+        if (!nonEmptyStr(parsed.connectorId))
+            return { ok: false, error: "capability.connectorId must be a non-empty string" };
+        if (!nonEmptyStr(parsed.platform))
+            return { ok: false, error: "capability.platform must be a non-empty string" };
+        if (typeof parsed.protocolVersion !== "number")
+            return { ok: false, error: "capability.protocolVersion must be a number" };
+        if (!Array.isArray(parsed.ops) || !parsed.ops.every((o) => nonEmptyStr(o)))
+            return { ok: false, error: "capability.ops must be a non-empty-string array" };
+        const d = { kind, connectorId: parsed.connectorId, platform: parsed.platform, protocolVersion: parsed.protocolVersion, ops: parsed.ops };
+        if (parsed.limits !== undefined) {
+            if (!isObj(parsed.limits))
+                return { ok: false, error: "capability.limits must be an object when present" };
+            d.limits = parsed.limits;
+        }
+        return { ok: true, message: d };
+    }
+    if (kind === "outbound_decision") {
+        if (!nonEmptyStr(parsed.decisionId))
+            return { ok: false, error: "outbound_decision.decisionId must be a non-empty string" };
+        if (!nonEmptyStr(parsed.op))
+            return { ok: false, error: "outbound_decision.op must be a non-empty string" };
+        if (!nonEmptyStr(parsed.entityBindingRef))
+            return { ok: false, error: "outbound_decision.entityBindingRef must be a non-empty string" };
+        return { ok: true, message: { kind, decisionId: parsed.decisionId, op: parsed.op, entityBindingRef: parsed.entityBindingRef, payload: parsed.payload } };
+    }
+    // ack
+    if (!nonEmptyStr(parsed.decisionId))
+        return { ok: false, error: "ack.decisionId must be a non-empty string" };
+    if (parsed.ok === true)
+        return { ok: true, message: { kind: "ack", decisionId: parsed.decisionId, ok: true } };
+    if (parsed.ok === false) {
+        const failed = parsed.failed;
+        if (!isObj(failed) || !nonEmptyStr(failed.class))
+            return { ok: false, error: "ack.failed must be { class, detail? } when ok is false" };
+        return { ok: true, message: { kind: "ack", decisionId: parsed.decisionId, ok: false, failed: { class: failed.class, detail: typeof failed.detail === "string" ? failed.detail : undefined } } };
+    }
+    return { ok: false, error: "ack.ok must be a boolean" };
+}
+/** Encode a message to a framed JSON line (newline-delimited). */
+export function encodeGatewayMessage(msg) {
+    return JSON.stringify(msg) + "\n";
+}
+/** proof-9 guard: an OutboundDecision op MUST be advertised by the connector's descriptor;
+ *  an unadvertised op is REFUSED, never attempted. */
+export function isAdvertisedOp(descriptor, op) {
+    return descriptor.ops.includes(op);
+}
+//# sourceMappingURL=protocol.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/domain/gateway/protocol.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,0FAA0F;AAC1F,yFAAyF;AACzF,2FAA2F;AAC3F,gDAAgD;AAChD,EAAE;AACF,kFAAkF;AAClF,qFAAqF;AACrF,uFAAuF;AACvF,oFAAoF;AAEpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,YAAY,EAAE,mBAAmB,EAAE,KAAK,CAAU,CAAC;AAoCzF,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AACD,SAAS,WAAW,CAAC,CAAU;IAC7B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED;0FAC0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAqC,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;IACvF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAE,qBAA2C,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,MAAM,CAAC,IAAI,CAAC,yBAAyB,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACzI,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;QACvH,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC;QACjH,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;QAC3H,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QAC3J,MAAM,CAAC,GAAyB,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,GAAG,EAAE,MAAM,CAAC,GAAe,EAAE,CAAC;QAC3K,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;YAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC;QAC1K,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yDAAyD,EAAE,CAAC;QAC5H,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QAC5G,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+DAA+D,EAAE,CAAC;QACxI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3J,CAAC;IACD,MAAM;IACN,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;IAC9G,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;IAC/G,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC;QACxI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC;IAClM,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;AAC1D,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,oBAAoB,CAAC,GAAmB;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;AACpC,CAAC;AAED;sDACsD;AACtD,MAAM,UAAU,cAAc,CAAC,UAAgC,EAAE,EAAU;IACzE,OAAO,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/spawn-gateway.d.ts

@@ -0,0 +1,15 @@
+import { type ChildProcess } from "node:child_process";
+export interface SpawnGatewayOpts {
+    socketPath: string;
+    home?: string;
+    /** Override the compiled entry file (tests point at the built dist entry). */
+    entryPath?: string;
+    env?: NodeJS.ProcessEnv;
+}
+/** The compiled entry the daemon spawns: the sibling gateway-process-main.js in dist. Resolved
+ *  via import.meta.url so it is correct wherever the daemon's dist is installed. */
+export declare function gatewayProcessEntry(): string;
+/** Spawn the gateway OS process, out-dialling `socketPath`. Returns the ChildProcess so the
+ *  daemon can supervise/kill it. stdout/stderr are piped for the daemon to fold into its logs. */
+export declare function spawnGatewayProcess(opts: SpawnGatewayOpts): ChildProcess;
+//# sourceMappingURL=spawn-gateway.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/spawn-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-gateway.d.ts","sourceRoot":"","sources":["../../../src/domain/gateway/spawn-gateway.ts"],"names":[],"mappings":"AAMA,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAI9D,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED;oFACoF;AACpF,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED;kGACkG;AAClG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAQxE"}

package/node_modules/@openrig/daemon/dist/domain/gateway/spawn-gateway.js

@@ -0,0 +1,26 @@
+// M1 A4a — the daemon-side SPAWN WRAPPER: launches the gateway as a separate OS process
+// (arch a8343a38: a daemon-spawned process, not an in-daemon thread). Thin — it resolves the
+// compiled entry sibling, sets the socket path in the child env, and returns the ChildProcess
+// handle for the daemon's lifecycle to supervise. The child's liveness/reconnect is its own
+// concern (gateway-process.ts heartbeat); this wrapper only starts it.
+import { spawn } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { GATEWAY_SOCKET_ENV } from "./gateway-process-main.js";
+/** The compiled entry the daemon spawns: the sibling gateway-process-main.js in dist. Resolved
+ *  via import.meta.url so it is correct wherever the daemon's dist is installed. */
+export function gatewayProcessEntry() {
+    return fileURLToPath(new URL("./gateway-process-main.js", import.meta.url));
+}
+/** Spawn the gateway OS process, out-dialling `socketPath`. Returns the ChildProcess so the
+ *  daemon can supervise/kill it. stdout/stderr are piped for the daemon to fold into its logs. */
+export function spawnGatewayProcess(opts) {
+    const entry = opts.entryPath ?? gatewayProcessEntry();
+    const env = {
+        ...(opts.env ?? process.env),
+        [GATEWAY_SOCKET_ENV]: opts.socketPath,
+    };
+    if (opts.home)
+        env.OPENRIG_HOME = opts.home;
+    return spawn(process.execPath, [entry], { env, stdio: ["ignore", "pipe", "pipe"] });
+}
+//# sourceMappingURL=spawn-gateway.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/spawn-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-gateway.js","sourceRoot":"","sources":["../../../src/domain/gateway/spawn-gateway.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,6FAA6F;AAC7F,8FAA8F;AAC9F,4FAA4F;AAC5F,uEAAuE;AAEvE,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAU/D;oFACoF;AACpF,MAAM,UAAU,mBAAmB;IACjC,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;kGACkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,IAAsB;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,mBAAmB,EAAE,CAAC;IACtD,MAAM,GAAG,GAAsB;QAC7B,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QAC5B,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC,UAAU;KACtC,CAAC;IACF,IAAI,IAAI,CAAC,IAAI;QAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/transport.d.ts

@@ -0,0 +1,24 @@
+import type { DispatchBuffer } from "./dispatch-buffer.js";
+import { GatewayDispatcher } from "./dispatcher.js";
+export interface GatewayConnection {
+    dispatcher: GatewayDispatcher;
+    close(): void;
+}
+export interface ConnectOpts {
+    socketPath: string;
+    buffer: DispatchBuffer;
+    /** LOUD surface for a refused/malformed frame (never a silent drop). */
+    onProtocolError?: (error: string) => void;
+    /** Socket-level error (connector down / dropped). A handler is ALWAYS attached so an
+     *  ECONNREFUSED/EPIPE never crashes the daemon — the durable buffer already guarantees
+     *  no-loss and the spawn wrapper drives reconnect; this is only the observability surface. */
+    onError?: (error: Error) => void;
+    /** The socket closed (connector went away). The spawn wrapper uses this to re-dial. */
+    onClose?: () => void;
+    newDecisionId?: () => string;
+}
+/** Out-dial the connector socket + wire it to a GatewayDispatcher. On the CapabilityDescriptor
+ *  handshake the dispatcher becomes ready and replays any un-Acked decisions (reconnect no-loss);
+ *  Ack frames drain the buffer. Returns the dispatcher so the daemon can dispatch decisions. */
+export declare function connectGateway(opts: ConnectOpts): GatewayConnection;
+//# sourceMappingURL=transport.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/domain/gateway/transport.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC;IACvB,wEAAwE;IACxE,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C;;kGAE8F;IAC9F,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;CAC9B;AAED;;gGAEgG;AAChG,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,iBAAiB,CAmDnE"}