@openrig/cli 0.7.0 → 0.7.1

package/daemon/dist/domain/occupant-invalidator.d.ts

@@ -1,3 +1,8 @@
+type SwapWatchdogJob = {
+    policy: string;
+    specYaml: string;
+    targetSession: string;
+};
 export interface OccupantInvalidator {
     invalidateRetiringOccupant(args: {
         retiringSessionName: string;
@@ -14,11 +19,17 @@ export interface OccupantInvalidatorDeps {
     contextUsage: {
         invalidateOccupantSidecar(sessionName: string): void;
     };
-    /** (e/Class-B) durable watchdog_jobs store — armed jobs registered by the retiring generation are
-     *  stopped at swap (a stale wake into the successor's context is the ghost). Optional: absent ⇒ the
-     *  watchdog branch is skipped (never a name-scoped fallback). */
+    /** (e/Class-B) durable watchdog_jobs store — armed jobs the retiring generation registered for its own
+     *  seat are stopped at swap (a stale wake into the successor's context is the ghost). Optional: absent ⇒
+     *  the watchdog branch is skipped (never a name-scoped fallback). */
     watchdog?: {
-        dropArmedByRegisteringGeneration(generationUuid: string, keepJobIds?: readonly string[]): number;
+        dropArmedByRegisteringGeneration(generationUuid: string, wakesRetiringSeat: (job: SwapWatchdogJob) => boolean, keepJobIds?: readonly string[]): number;
+    };
+    /** The names that currently reach a seat (`SessionRegistry.sessionAddresses`: its logical address and its
+     *  physical session), so a job addressed to either spelling counts as this seat's. Optional: absent ⇒ only
+     *  the retiring and successor names do. */
+    addresses?: {
+        sessionAddresses(sessionName: string): string[];
     };
     /** (e/Class-B) durable queue_items store — in-progress items claimed by the retiring generation are
      *  RELEASED to pending (never dropped: the role work is durable, the successor re-claims). Its current
@@ -38,4 +49,5 @@ export declare class DefaultOccupantInvalidator implements OccupantInvalidator {
         retiringGeneration?: string;
     }): void;
 }
+export {};
 //# sourceMappingURL=occupant-invalidator.d.ts.map

package/daemon/dist/domain/occupant-invalidator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"occupant-invalidator.d.ts","sourceRoot":"","sources":["../../src/domain/occupant-invalidator.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,mBAAmB;IAClC,0BAA0B,CAAC,IAAI,EAAE;QAC/B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,IAAI,CAAC;CACV;AAED;4DAC4D;AAC5D,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE;QAAE,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5D,YAAY,EAAE;QAAE,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACvE;;qEAEiE;IACjE,QAAQ,CAAC,EAAE;QAAE,gCAAgC,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAA;KAAE,CAAC;IAChH;;0GAEsG;IACtG,KAAK,CAAC,EAAE;QAAE,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,mBAAmB,CAAC,IAAI,MAAM,EAAE,CAAA;KAAE,CAAC;IACxG,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,qBAAa,0BAA2B,YAAW,mBAAmB;IACxD,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,uBAAuB;IAE1D,0BAA0B,CAAC,IAAI,EAAE;QAC/B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,IAAI;CA2CT"}
+{"version":3,"file":"occupant-invalidator.d.ts","sourceRoot":"","sources":["../../src/domain/occupant-invalidator.ts"],"names":[],"mappings":"AAkBA,KAAK,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnF,MAAM,WAAW,mBAAmB;IAClC,0BAA0B,CAAC,IAAI,EAAE;QAC/B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,IAAI,CAAC;CACV;AAED;4DAC4D;AAC5D,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE;QAAE,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5D,YAAY,EAAE;QAAE,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACvE;;yEAEqE;IACrE,QAAQ,CAAC,EAAE;QACT,gCAAgC,CAC9B,cAAc,EAAE,MAAM,EACtB,iBAAiB,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,EACpD,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAC7B,MAAM,CAAC;KACX,CAAC;IACF;;+CAE2C;IAC3C,SAAS,CAAC,EAAE;QAAE,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE,CAAC;IAChE;;0GAEsG;IACtG,KAAK,CAAC,EAAE;QAAE,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,mBAAmB,CAAC,IAAI,MAAM,EAAE,CAAA;KAAE,CAAC;IACxG,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,qBAAa,0BAA2B,YAAW,mBAAmB;IACxD,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,uBAAuB;IAE1D,0BAA0B,CAAC,IAAI,EAAE;QAC/B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,IAAI;CAsDT"}

package/daemon/dist/domain/occupant-invalidator.js

@@ -13,6 +13,7 @@
 //     NEUTRALIZE THE SUCCESSOR'S OWN legitimate role items, so it MUST gen-scope. That requires the
 //     occupant-generation identity (atom-B). Until `retiringGeneration` is supplied, Class-B is a LOUD
 //     no-op — NEVER a name-scoped drop.
+import { parseWatchdogSpec, watchdogJobTarget } from "./watchdog-policy-engine.js";
 export class DefaultOccupantInvalidator {
     deps;
     constructor(deps) {
@@ -33,12 +34,22 @@ export class DefaultOccupantInvalidator {
             return;
         }
         // atom-B present → Class-B gen-scoped invalidation.
-        // Watchdog (3b): stop every ARMED job registered by the retiring generation — a stale wake firing
-        // into the successor's context is the specimen; the successor re-arms its own. Gen-scoped so the
-        // successor's OWN armed jobs (same name, live gen) are untouched. A blocked row's current park timer
-        // is kept: it wakes the seat that owns the row, and nothing re-arms it if it stops.
+        // Watchdog (3b): stop every ARMED job the retiring generation registered for this seat — a stale wake
+        // firing into the successor's context is the specimen; the successor re-arms its own. Gen-scoped so the
+        // successor's OWN armed jobs (same name, live gen) are untouched. A job it registered for another seat
+        // wakes that seat, not the successor, so it keeps running (#1775). "This seat" is judged on the job's
+        // delivery target (the spec's, where the engine prefers it) against every name that reaches the seat.
+        // A blocked row's current park timer is kept: it wakes the seat that owns the row, and nothing re-arms
+        // it if it stops. A workflow keepalive is kept for the same reason: it wakes the workflow's current
+        // frontier owner (whom the successor succeeds, when it's this seat) and ends with the workflow.
+        const seatNames = new Set([retiringSessionName, args.successorSessionName]);
+        for (const name of [retiringSessionName, args.successorSessionName]) {
+            for (const address of this.deps.addresses?.sessionAddresses(name) ?? [])
+                seatNames.add(address);
+        }
+        const wakesThisSeat = (job) => job.policy !== "workflow-keepalive" && seatNames.has(watchdogJobTarget(job, specTarget(job.specYaml)).session);
         const keepJobIds = this.deps.queue?.currentParkTimerIds?.() ?? [];
-        const stopped = this.deps.watchdog?.dropArmedByRegisteringGeneration(retiringGeneration, keepJobIds) ?? 0;
+        const stopped = this.deps.watchdog?.dropArmedByRegisteringGeneration(retiringGeneration, wakesThisSeat, keepJobIds) ?? 0;
         if (stopped > 0) {
             log(`[occupant-invalidator] Class-B: stopped ${stopped} armed watchdog job(s) registered by retired ` +
                 `generation ${retiringGeneration} (seat "${retiringSessionName}") — successor re-arms its own.`);
@@ -54,4 +65,13 @@ export class DefaultOccupantInvalidator {
         }
     }
 }
+/** A stored spec was validated at registration; an unreadable one falls back to the stored target, as delivery can't use it. */
+function specTarget(specYaml) {
+    try {
+        return parseWatchdogSpec(specYaml).target;
+    }
+    catch {
+        return null;
+    }
+}
 //# sourceMappingURL=occupant-invalidator.js.map

package/daemon/dist/domain/occupant-invalidator.js.map

@@ -1 +1 @@
-{"version":3,"file":"occupant-invalidator.js","sourceRoot":"","sources":["../../src/domain/occupant-invalidator.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,iGAAiG;AACjG,oGAAoG;AACpG,qGAAqG;AACrG,qDAAqD;AACrD,EAAE;AACF,wEAAwE;AACxE,qGAAqG;AACrG,sGAAsG;AACtG,mGAAmG;AACnG,qEAAqE;AACrE,+FAA+F;AAC/F,oGAAoG;AACpG,uGAAuG;AACvG,wCAAwC;AA0BxC,MAAM,OAAO,0BAA0B;IACR;IAA7B,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;IAAG,CAAC;IAE9D,0BAA0B,CAAC,IAI1B;QACC,MAAM,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAExC,gGAAgG;QAChG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;QAEtE,6FAA6F;QAC7F,uFAAuF;QACvF,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,GAAG,CACD,gFAAgF,mBAAmB,IAAI;gBACrG,kGAAkG;gBAClG,oFAAoF,CACvF,CAAC;YACF,OAAO;QACT,CAAC;QACD,oDAAoD;QACpD,kGAAkG;QAClG,iGAAiG;QACjG,qGAAqG;QACrG,oFAAoF;QACpF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gCAAgC,CAAC,kBAAkB,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1G,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,GAAG,CACD,2CAA2C,OAAO,+CAA+C;gBAC/F,cAAc,kBAAkB,WAAW,mBAAmB,iCAAiC,CAClG,CAAC;QACJ,CAAC;QACD,mGAAmG;QACnG,gGAAgG;QAChG,gGAAgG;QAChG,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,yBAAyB,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACrF,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,GAAG,CACD,4CAA4C,QAAQ,gDAAgD;gBAClG,cAAc,kBAAkB,WAAW,mBAAmB,2CAA2C,CAC5G,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"occupant-invalidator.js","sourceRoot":"","sources":["../../src/domain/occupant-invalidator.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,iGAAiG;AACjG,oGAAoG;AACpG,qGAAqG;AACrG,qDAAqD;AACrD,EAAE;AACF,wEAAwE;AACxE,qGAAqG;AACrG,sGAAsG;AACtG,mGAAmG;AACnG,qEAAqE;AACrE,+FAA+F;AAC/F,oGAAoG;AACpG,uGAAuG;AACvG,wCAAwC;AAExC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAsCnF,MAAM,OAAO,0BAA0B;IACR;IAA7B,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;IAAG,CAAC;IAE9D,0BAA0B,CAAC,IAI1B;QACC,MAAM,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAExC,gGAAgG;QAChG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;QAEtE,6FAA6F;QAC7F,uFAAuF;QACvF,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,GAAG,CACD,gFAAgF,mBAAmB,IAAI;gBACrG,kGAAkG;gBAClG,oFAAoF,CACvF,CAAC;YACF,OAAO;QACT,CAAC;QACD,oDAAoD;QACpD,sGAAsG;QACtG,wGAAwG;QACxG,uGAAuG;QACvG,sGAAsG;QACtG,sGAAsG;QACtG,uGAAuG;QACvG,oGAAoG;QACpG,gGAAgG;QAChG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC5E,KAAK,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACpE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,GAAoB,EAAE,EAAE,CAC7C,GAAG,CAAC,MAAM,KAAK,oBAAoB,IAAI,SAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACjH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC;QAClE,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gCAAgC,CAAC,kBAAkB,EAAE,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3G,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,GAAG,CACD,2CAA2C,OAAO,+CAA+C;gBAC/F,cAAc,kBAAkB,WAAW,mBAAmB,iCAAiC,CAClG,CAAC;QACJ,CAAC;QACD,mGAAmG;QACnG,gGAAgG;QAChG,gGAAgG;QAChG,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,yBAAyB,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACrF,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,GAAG,CACD,4CAA4C,QAAQ,gDAAgD;gBAClG,cAAc,kBAAkB,WAAW,mBAAmB,2CAA2C,CAC5G,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,gIAAgI;AAChI,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/daemon/dist/domain/operation-correlation.d.ts

@@ -0,0 +1,78 @@
+import type Database from "better-sqlite3";
+export declare const OPERATION_CONTRACT = "operation-correlation.v1";
+export declare const OPERATION_KINDS: readonly ["rig.create", "rig.import", "member.add"];
+type OperationKind = typeof OPERATION_KINDS[number];
+export type RecordCreated = (rigId: string, nodeId?: string) => void;
+/** Accept RFC UUID versions used by clients; a missing header is an ordinary request. */
+export declare function validOperationId(header: string | undefined): boolean;
+/** Reserve synchronously before asynchronous preflight or effects. The hash binds the exact request envelope. */
+export declare function reserveOperation(db: Database.Database, header: string | undefined, kind: OperationKind, targets: string[], body: string, headers?: (string | null)[]): {
+    state: "absent";
+    operation?: undefined;
+    recordCreated?: undefined;
+    read?: undefined;
+} | {
+    state: "invalid";
+    operation?: undefined;
+    recordCreated?: undefined;
+    read?: undefined;
+} | {
+    state: "replay";
+    operation: {
+        contract: string;
+        operationId: string;
+        rigId: string | null;
+        nodeIds: string[];
+        current: {
+            rig: {
+                id: string;
+                exists: boolean;
+                archivedAt: string | null;
+            } | null;
+            nodes: {
+                id: string;
+                exists: boolean;
+                latestSession: {
+                    id: string;
+                    status: string;
+                    startupStatus: string | null;
+                } | null;
+            }[];
+        };
+    };
+    recordCreated?: undefined;
+    read?: undefined;
+} | {
+    state: "conflict";
+    operation?: undefined;
+    recordCreated?: undefined;
+    read?: undefined;
+} | {
+    state: "fresh";
+    recordCreated: (rigId: string, nodeId?: string) => void;
+    read: () => {
+        contract: string;
+        operationId: string;
+        rigId: string | null;
+        nodeIds: string[];
+        current: {
+            rig: {
+                id: string;
+                exists: boolean;
+                archivedAt: string | null;
+            } | null;
+            nodes: {
+                id: string;
+                exists: boolean;
+                latestSession: {
+                    id: string;
+                    status: string;
+                    startupStatus: string | null;
+                } | null;
+            }[];
+        };
+    };
+    operation?: undefined;
+};
+export {};
+//# sourceMappingURL=operation-correlation.d.ts.map

package/daemon/dist/domain/operation-correlation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-correlation.d.ts","sourceRoot":"","sources":["../../src/domain/operation-correlation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AAC7D,eAAO,MAAM,eAAe,qDAAsD,CAAC;AACnF,KAAK,aAAa,GAAG,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AAGpD,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAErE,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEpE;AAED,iHAAiH;AACjH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAqBR,MAAM;4BAAU,MAAM;mCAAiB,MAAM,GAAG,IAAI;;;;;;;;;;;;;;2BAa7C,MAAM,WAAW,MAAM;;;;;;;;;;;;;;;;wBAb9B,MAAM;4BAAU,MAAM;mCAAiB,MAAM,GAAG,IAAI;;;;;;EAuB5E"}

package/daemon/dist/domain/operation-correlation.js

@@ -0,0 +1,54 @@
+import { createHash } from "node:crypto";
+export const OPERATION_CONTRACT = "operation-correlation.v1";
+export const OPERATION_KINDS = ["rig.create", "rig.import", "member.add"];
+/** Accept RFC UUID versions used by clients; a missing header is an ordinary request. */
+export function validOperationId(header) {
+    return header === undefined || /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(header);
+}
+/** Reserve synchronously before asynchronous preflight or effects. The hash binds the exact request envelope. */
+export function reserveOperation(db, header, kind, targets, body, headers = []) {
+    if (header === undefined)
+        return { state: "absent" };
+    const operationId = header.toLowerCase();
+    if (!validOperationId(header)) {
+        return { state: "invalid" };
+    }
+    const hash = createHash("sha256").update(JSON.stringify(["v1", kind, targets, body, headers])).digest("hex");
+    const inserted = db.prepare("INSERT OR IGNORE INTO operation_correlations (operation_id, request_hash) VALUES (?, ?)")
+        .run(operationId, hash).changes === 1;
+    const read = () => db.transaction(() => {
+        const row = db.prepare("SELECT request_hash, rig_id, node_ids_json FROM operation_correlations WHERE operation_id = ?")
+            .get(operationId);
+        const nodeIds = JSON.parse(row.node_ids_json);
+        const rig = row.rig_id
+            ? db.prepare("SELECT id, archived_at AS archivedAt FROM rigs WHERE id = ?").get(row.rig_id)
+            : undefined;
+        const nodes = nodeIds.map((id) => {
+            const exists = !!db.prepare("SELECT 1 FROM nodes WHERE id = ?").get(id);
+            const session = exists ? db.prepare("SELECT id, status, startup_status AS startupStatus FROM sessions WHERE node_id = ? ORDER BY created_at DESC, id DESC LIMIT 1").get(id) : undefined;
+            return { id, exists, latestSession: session ?? null };
+        });
+        return { contract: OPERATION_CONTRACT, operationId, rigId: row.rig_id, nodeIds,
+            current: { rig: row.rig_id ? { id: row.rig_id, exists: !!rig, archivedAt: rig?.archivedAt ?? null } : null, nodes } };
+    })();
+    if (!inserted) {
+        const existing = db.prepare("SELECT request_hash FROM operation_correlations WHERE operation_id = ?")
+            .get(operationId);
+        return existing.request_hash === hash
+            ? { state: "replay", operation: read() }
+            : { state: "conflict" };
+    }
+    const recordCreated = (rigId, nodeId) => {
+        const row = db.prepare("SELECT rig_id, node_ids_json FROM operation_correlations WHERE operation_id = ?")
+            .get(operationId);
+        if (row.rig_id && row.rig_id !== rigId)
+            throw new Error("Operation rig identity changed");
+        const ids = JSON.parse(row.node_ids_json);
+        if (nodeId && !ids.includes(nodeId))
+            ids.push(nodeId);
+        db.prepare("UPDATE operation_correlations SET rig_id = ?, node_ids_json = ? WHERE operation_id = ?")
+            .run(rigId, JSON.stringify(ids), operationId);
+    };
+    return { state: "fresh", recordCreated, read };
+}
+//# sourceMappingURL=operation-correlation.js.map

package/daemon/dist/domain/operation-correlation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-correlation.js","sourceRoot":"","sources":["../../src/domain/operation-correlation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAMnF,yFAAyF;AACzF,MAAM,UAAU,gBAAgB,CAAC,MAA0B;IACzD,OAAO,MAAM,KAAK,SAAS,IAAI,4EAA4E,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3H,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,gBAAgB,CAC9B,EAAqB,EACrB,MAA0B,EAC1B,IAAmB,EACnB,OAAiB,EACjB,IAAY,EACZ,UAA6B,EAAE;IAE/B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,QAAiB,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7G,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,yFAAyF,CAAC;SACnH,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACrC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,+FAA+F,CAAC;aACpH,GAAG,CAAC,WAAW,CAAQ,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAa,CAAC;QAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM;YACpB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAA0D;YACpJ,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CACjC,8HAA8H,CAC/H,CAAC,GAAG,CAAC,EAAE,CAA6E,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO;YAC5E,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;IAC1H,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,wEAAwE,CAAC;aAClG,GAAG,CAAC,WAAW,CAA8B,CAAC;QACjD,OAAO,QAAQ,CAAC,YAAY,KAAK,IAAI;YACnC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;YACjD,CAAC,CAAC,EAAE,KAAK,EAAE,UAAmB,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,MAAe,EAAE,EAAE;QACvD,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,iFAAiF,CAAC;aACtG,GAAG,CAAC,WAAW,CAA0C,CAAC;QAC7D,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAa,CAAC;QACtD,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC;aACjG,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,OAAgB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAC1D,CAAC"}

package/daemon/dist/domain/permission-account.d.ts

@@ -0,0 +1,28 @@
+import type Database from "better-sqlite3";
+import { type StoredNativePermissionSelection } from "./native-permission-store.js";
+export type PermissionAccountSource = "explicit" | "member_policy" | "rig_policy" | "kernel_default" | "team_default" | "floor";
+export interface PermissionAccount {
+    basis: "planned";
+    runtime: string | null;
+    /** Null for a runtime OpenRig sets no native permission argument for (Pi, a terminal). */
+    source: PermissionAccountSource | null;
+    /** The native permission argument a fresh managed launch emits, verbatim (restore and rebuild: see `unknown`). */
+    nativeArgument: string | null;
+    /** The account in plain words. */
+    summary: string;
+    explicit?: Pick<StoredNativePermissionSelection, "mode" | "actor" | "reason" | "updatedAt">;
+    /** Recorded policies this seat's explicit choice is used instead of. */
+    overrides: string[];
+    /** What OpenRig adds to the launch beyond the native argument. Claude's lists are passed per launch, never saved. */
+    openRigAdds: {
+        claudeAllow: string[];
+        claudeAsk: string[];
+        notes: string[];
+    };
+    /** What this read can't know. */
+    unknown: string[];
+    /** The existing controls that change it, for future launches only. */
+    controls: string[];
+}
+export declare function planPermissionAccount(db: Database.Database, nodeId: string, seat: string, runtime: string | null, env?: NodeJS.ProcessEnv): PermissionAccount;
+//# sourceMappingURL=permission-account.d.ts.map

package/daemon/dist/domain/permission-account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-account.d.ts","sourceRoot":"","sources":["../../src/domain/permission-account.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAyB,KAAK,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAM3G,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,eAAe,GAAG,YAAY,GAAG,gBAAgB,GAAG,cAAc,GAAG,OAAO,CAAC;AAEhI,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,0FAA0F;IAC1F,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACvC,kHAAkH;IAClH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,IAAI,CAAC,+BAA+B,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC,CAAC;IAC5F,wEAAwE;IACxE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,qHAAqH;IACrH,WAAW,EAAE;QAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC7E,iCAAiC;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAmBD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,EAC/G,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAiFzD"}

package/daemon/dist/domain/permission-account.js

@@ -0,0 +1,102 @@
+import { NativePermissionStore } from "./native-permission-store.js";
+import { claudePostureFlag, codexPostureArg } from "../adapters/yolo-mode.js";
+import { KERNEL_CLAUDE_ALLOW, TEAM_CLAUDE_ALLOW, TEAM_CLAUDE_ASK } from "../adapters/kernel-authority.js";
+import { RigRepository } from "./rig-repository.js";
+const NOT_READ = "Native settings OpenRig doesn't manage still apply and aren't read here: your user, project and managed Claude settings, or your Codex configuration, profiles and requirements.";
+const UNVERIFIED = "Whether the harness applies this is unverified until a launch.";
+function policyRefs(db, nodeId) {
+    let refs = { member: null, rig: null, profile: null };
+    try {
+        const row = db.prepare(`SELECT n.permission_policy AS member, r.permission_policy AS rig, n.codex_config_profile AS profile
+      FROM nodes n JOIN rigs r ON r.id = n.rig_id WHERE n.id = ?`).get(nodeId);
+        refs = { member: row?.member ?? null, rig: row?.rig ?? null, profile: row?.profile?.trim() || null };
+    }
+    catch { /* an older database without these columns has nothing recorded */ }
+    let nonInterruptive = false;
+    try {
+        nonInterruptive = db.prepare("SELECT r.non_interruptive AS v FROM nodes n JOIN rigs r ON r.id = n.rig_id WHERE n.id = ?").get(nodeId)?.v === 1;
+    }
+    catch { /* the column predates this database */ }
+    return { ...refs, nonInterruptive };
+}
+export function planPermissionAccount(db, nodeId, seat, runtime, env = process.env) {
+    const controls = [
+        `rig seat set-permissions ${seat} --mode <mode> --reason "<why>"`,
+        `rig seat set-permissions ${seat} --mode inherit --reason "<why>" (clears the seat's choice)`,
+        `rig policy apply <policy> --seat ${seat} --reason "<why>"`,
+    ];
+    const none = { claudeAllow: [], claudeAsk: [], notes: [] };
+    if (runtime !== "claude-code" && runtime !== "codex") {
+        return { basis: "planned", runtime, source: null, nativeArgument: null, overrides: [], openRigAdds: none, unknown: [], controls: [],
+            summary: runtime === "pi" ? "Pi has no native permission policy; its resource trust is set at launch."
+                : runtime === "terminal" ? "A terminal shell; no agent permission argument." : "OpenRig sets no native permission argument for this runtime." };
+    }
+    const store = new NativePermissionStore(db);
+    const explicit = store.read(nodeId);
+    const override = store.launchOverride(nodeId, runtime);
+    const resolved = store.resolve(nodeId, runtime);
+    const refs = policyRefs(db, nodeId);
+    const source = override.kernelAuthority ? "kernel_default" : explicit ? "explicit"
+        : resolved.source === "member_spec" ? "member_policy" : resolved.source === "rig_spec" ? "rig_policy"
+            : override.teamPermissionDefault ? "team_default" : "floor";
+    // The binding a fresh managed launch of this seat starts from, built as the launch builds it: the persisted policy
+    // posture, else the explicit floor (an ambient OPENRIG_YOLO never widens a seat with no policy), then the seat's own
+    // choice and the team or kernel default through NativePermissionStore.apply.
+    const repo = new RigRepository(db);
+    const rigId = db.prepare("SELECT rig_id FROM nodes WHERE id = ?").get(nodeId)?.rig_id;
+    const bindingPosture = repo.getNodePolicyProvenance(nodeId)?.launchPosture
+        ?? (rigId ? repo.getRigPolicyProvenance(rigId)?.launchPosture : undefined) ?? "floor";
+    const planned = store.apply({ nodeId, launchPosture: bindingPosture }, runtime);
+    const posture = planned.launchPosture;
+    const mode = planned.permissionMode;
+    const profile = runtime === "codex" ? refs.profile : null;
+    const nativeArgument = runtime === "claude-code" ? claudePostureFlag(env, posture, mode)
+        : codexPostureArg(profile ? ` -p ${profile}` : "", env, posture).trim();
+    const openRigAdds = { claudeAllow: [], claudeAsk: [], notes: [] };
+    const unknown = [NOT_READ, UNVERIFIED,
+        runtime === "codex"
+            ? "This is the saved plan for a fresh launch. A restore re-reads a custom policy file, and a rebuild handover can carry the previous occupant's observed Codex sandbox and approvals instead, without the extra roots or network setting."
+            : "This is the saved plan for a fresh launch. A restore re-reads a custom policy file, which can differ from what's saved."];
+    if (runtime === "claude-code" && planned.kernelAuthority)
+        openRigAdds.claudeAllow = [...KERNEL_CLAUDE_ALLOW];
+    else if (runtime === "claude-code" && planned.teamPermissionDefault && !mode && (!posture || posture === "floor")) {
+        openRigAdds.claudeAllow = [...TEAM_CLAUDE_ALLOW];
+        openRigAdds.claudeAsk = [...TEAM_CLAUDE_ASK];
+        openRigAdds.notes.push("A hook asks before the listed lifecycle commands.");
+    }
+    if (runtime === "codex") {
+        openRigAdds.notes.push(planned.teamPermissionDefault && !profile && nativeArgument === "-s workspace-write"
+            ? "Extra writable roots: the shared workspace and the pod's state folder; git metadata folders on a fresh launch."
+            : "Extra writable roots for OpenRig's queue state, unless a read-only profile rules them out; git metadata folders on a fresh launch.");
+        if (nativeArgument === "-s workspace-write")
+            unknown.push("Codex network access: added at launch only if Codex's own configuration allows it; not read here.");
+    }
+    // The kernel's Codex seats always get them (operationalLaunchArgs); other seats when the rig records non-interruptive.
+    if ((runtime === "codex" && planned.kernelAuthority) || (refs.nonInterruptive && posture === "full_bypass")) {
+        openRigAdds.notes.push("Non-interruptive: supported harness warnings are accepted or hidden with launch flags.");
+    }
+    const overrides = explicit ? [refs.member ? `member policy ${refs.member}` : null, refs.rig ? `rig policy ${refs.rig}` : null].filter((v) => !!v) : [];
+    // The resolver's own fallback (Codex has no auto mode), and a named Codex profile that supplies the argument under a
+    // policy or seat choice; the floor's own wording already names its profile.
+    const notes = [
+        (source === "member_policy" || source === "rig_policy") && resolved.fallbackReason ? resolved.fallbackReason : null,
+        profile && source !== "floor" && nativeArgument === `-p ${profile}` ? `the named Codex profile ${profile} governs its sandbox and approvals` : null,
+    ].filter((n) => !!n).map((n) => `; ${n}`).join("");
+    const where = {
+        explicit: `this seat's own choice (${explicit?.actor ?? "unknown"}: ${explicit?.reason ?? ""})`,
+        member_policy: `the member's policy ${refs.member ?? ""}`.trim(),
+        rig_policy: `the rig's policy ${refs.rig ?? ""}`.trim(),
+        kernel_default: "the kernel's operational default",
+        team_default: "OpenRig's team default (no policy or seat choice is recorded)",
+        floor: profile ? `no policy or seat choice; the named Codex profile ${profile} governs its sandbox and approvals` : "no policy or seat choice; OpenRig's floor",
+    };
+    const adds = openRigAdds.claudeAllow.length
+        ? `; OpenRig adds ${openRigAdds.claudeAllow.length} allowances${openRigAdds.claudeAsk.length ? ` and asks before ${openRigAdds.claudeAsk.length} lifecycle commands` : ""}`
+        : "";
+    return {
+        basis: "planned", runtime, source, nativeArgument, overrides, openRigAdds, unknown, controls,
+        ...(explicit ? { explicit: { mode: explicit.mode, actor: explicit.actor, reason: explicit.reason, updatedAt: explicit.updatedAt } } : {}),
+        summary: `Next launch: ${nativeArgument}, from ${where[source]}${notes}${adds}.`,
+    };
+}
+//# sourceMappingURL=permission-account.js.map

package/daemon/dist/domain/permission-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-account.js","sourceRoot":"","sources":["../../src/domain/permission-account.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,qBAAqB,EAAwC,MAAM,8BAA8B,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC1G,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAyBpD,MAAM,QAAQ,GAAG,kLAAkL,CAAC;AACpM,MAAM,UAAU,GAAG,gEAAgE,CAAC;AAEpF,SAAS,UAAU,CAAC,EAAqB,EAAE,MAAc;IACvD,IAAI,IAAI,GAAG,EAAE,MAAM,EAAE,IAAqB,EAAE,GAAG,EAAE,IAAqB,EAAE,OAAO,EAAE,IAAqB,EAAE,CAAC;IACzG,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;iEACsC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAsF,CAAC;QAChK,IAAI,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;IAC9E,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAI,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC,CAAC,GAAG,CAAC,MAAM,CAAsC,EAAE,CAAC,KAAK,CAAC,CAAC;IACvL,CAAC;IAAC,MAAM,CAAC,CAAC,uCAAuC,CAAC,CAAC;IACnD,OAAO,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EAAqB,EAAE,MAAc,EAAE,IAAY,EAAE,OAAsB,EAC/G,MAAyB,OAAO,CAAC,GAAG;IACpC,MAAM,QAAQ,GAAG;QACf,4BAA4B,IAAI,iCAAiC;QACjE,4BAA4B,IAAI,6DAA6D;QAC7F,oCAAoC,IAAI,mBAAmB;KAC5D,CAAC;IACF,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC3D,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACrD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;YACjI,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,0EAA0E;gBACpG,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC,CAAC,8DAA8D,EAAE,CAAC;IACtJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAEpC,MAAM,MAAM,GAA4B,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;QACzG,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY;YACrG,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;IAE9D,mHAAmH;IACnH,qHAAqH;IACrH,6EAA6E;IAC7E,MAAM,IAAI,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,KAAK,GAAI,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAoC,EAAE,MAAM,CAAC;IAC1H,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,aAAa;WACrE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC;IACxF,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAiB,EAAE,OAAO,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC;IAEpC,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC;QACtF,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAqC,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACpG,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,UAAU;QACnC,OAAO,KAAK,OAAO;YACjB,CAAC,CAAC,wOAAwO;YAC1O,CAAC,CAAC,yHAAyH,CAAC,CAAC;IACjI,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,CAAC,eAAe;QAAE,WAAW,CAAC,WAAW,GAAG,CAAC,GAAG,mBAAmB,CAAC,CAAC;SACxG,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,CAAC,qBAAqB,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;QAClH,WAAW,CAAC,WAAW,GAAG,CAAC,GAAG,iBAAiB,CAAC,CAAC;QACjD,WAAW,CAAC,SAAS,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC;QAC7C,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,OAAO,IAAI,cAAc,KAAK,oBAAoB;YACzG,CAAC,CAAC,gHAAgH;YAClH,CAAC,CAAC,oIAAoI,CAAC,CAAC;QAC1I,IAAI,cAAc,KAAK,oBAAoB;YAAE,OAAO,CAAC,IAAI,CAAC,mGAAmG,CAAC,CAAC;IACjK,CAAC;IACD,uHAAuH;IACvH,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,OAAO,KAAK,aAAa,CAAC,EAAE,CAAC;QAC5G,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpK,qHAAqH;IACrH,4EAA4E;IAC5E,MAAM,KAAK,GAAG;QACZ,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,YAAY,CAAC,IAAI,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QACnH,OAAO,IAAI,MAAM,KAAK,OAAO,IAAI,cAAc,KAAK,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,2BAA2B,OAAO,oCAAoC,CAAC,CAAC,CAAC,IAAI;KACpJ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChE,MAAM,KAAK,GAA4C;QACrD,QAAQ,EAAE,2BAA2B,QAAQ,EAAE,KAAK,IAAI,SAAS,KAAK,QAAQ,EAAE,MAAM,IAAI,EAAE,GAAG;QAC/F,aAAa,EAAE,uBAAuB,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;QAChE,UAAU,EAAE,oBAAoB,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;QACvD,cAAc,EAAE,kCAAkC;QAClD,YAAY,EAAE,+DAA+D;QAC7E,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,qDAAqD,OAAO,oCAAoC,CAAC,CAAC,CAAC,2CAA2C;KAChK,CAAC;IACF,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM;QACzC,CAAC,CAAC,kBAAkB,WAAW,CAAC,WAAW,CAAC,MAAM,cAAc,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,WAAW,CAAC,SAAS,CAAC,MAAM,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3K,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ;QAC5F,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzI,OAAO,EAAE,gBAAgB,cAAc,UAAU,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG;KACjF,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/permission-drift.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission-drift.d.ts","sourceRoot":"","sources":["../../src/domain/permission-drift.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,SAAS,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAC/F,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,SAAS,CAAC;AAExD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,wHAAwH;IACxH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAC5E,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AACnE,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAE/D,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,gBAAgB,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,yBAAyB,GAAG,IAAI,CAAC;IACrD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE;QAAE,KAAK,EAAE,cAAc,CAAA;KAAE,CAAC;IACrC,OAAO,EAAE;QAAE,KAAK,EAAE,YAAY,CAAA;KAAE,CAAC;IACjC,WAAW,EAAE;QAAE,KAAK,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACzC,WAAW,EAAE,4BAA4B,CAAC;IAC1C,+FAA+F;IAC/F,aAAa,CAAC,EAAE;QACd,UAAU,EAAE,gBAAgB,CAAC;QAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,EAAE,yBAAyB,GAAG,IAAI,CAAC;QAC3C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAC1C,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAClD,iFAAiF;IACjF,qBAAqB,IAAI,MAAM,EAAE,GAAG,IAAI,CAAC;CAC1C;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAQxE;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,CAU9E;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAezE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,wBAAwB,CAEhG;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAS5E;AA0ID,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACzC,EAAE,EAAE,iBAAiB,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,yBAAyB,CA2B5B;AAED,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,yBAAyB,GAAG,MAAM,CAkB1F"}
+{"version":3,"file":"permission-drift.d.ts","sourceRoot":"","sources":["../../src/domain/permission-drift.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,SAAS,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAC/F,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,SAAS,CAAC;AAExD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,wHAAwH;IACxH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAC5E,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AACnE,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAE/D,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,gBAAgB,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,yBAAyB,GAAG,IAAI,CAAC;IACrD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE;QAAE,KAAK,EAAE,cAAc,CAAA;KAAE,CAAC;IACrC,OAAO,EAAE;QAAE,KAAK,EAAE,YAAY,CAAA;KAAE,CAAC;IACjC,WAAW,EAAE;QAAE,KAAK,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACzC,WAAW,EAAE,4BAA4B,CAAC;IAC1C,+FAA+F;IAC/F,aAAa,CAAC,EAAE;QACd,UAAU,EAAE,gBAAgB,CAAC;QAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,EAAE,yBAAyB,GAAG,IAAI,CAAC;QAC3C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAC1C,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAClD,iFAAiF;IACjF,qBAAqB,IAAI,MAAM,EAAE,GAAG,IAAI,CAAC;CAC1C;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAQxE;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,CAU9E;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAezE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,wBAAwB,CAEhG;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAS5E;AA8ID,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACzC,EAAE,EAAE,iBAAiB,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,yBAAyB,CA2B5B;AAED,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,yBAAyB,GAAG,MAAM,CAkB1F"}

package/daemon/dist/domain/permission-drift.js

@@ -121,14 +121,17 @@ function inspectClaude(cwd, applied, fs) {
     if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
         return unknownEnforcement("permission", expected, sourcePath, "settings_invalid_shape");
     }
-    const permissions = parsed.permissions;
+    const permissions = parsed.permissions === undefined
+        ? {} : parsed.permissions;
     if (typeof permissions !== "object" || permissions === null || Array.isArray(permissions)) {
-        return unknownEnforcement("permission", expected, sourcePath, permissions === undefined ? "permissions_missing" : "permissions_invalid_shape");
+        return unknownEnforcement("permission", expected, sourcePath, "permissions_invalid_shape");
     }
     const record = permissions;
-    const defaultMode = record.defaultMode;
+    // The explicit launch mode takes precedence over the person's manual-start default.
+    // Keep that file value in configuration detail without calling it session drift.
+    const defaultMode = record.defaultMode === undefined ? expected : record.defaultMode;
     if (typeof defaultMode !== "string") {
-        return unknownEnforcement("permission", expected, sourcePath, "default_mode_missing");
+        return unknownEnforcement("permission", expected, sourcePath, "default_mode_invalid_shape");
     }
     let supportedModes;
     try {
@@ -141,8 +144,8 @@ function inspectClaude(cwd, applied, fs) {
     catch {
         return unknownEnforcement("permission", expected, sourcePath, "harness_semantics_unknown");
     }
-    if (!supportedModes.has(defaultMode)) {
-        return unknownEnforcement("permission", expected, sourcePath, "unsupported_default_mode");
+    if (!supportedModes.has(expected)) {
+        return unknownEnforcement("permission", expected, sourcePath, "unsupported_launch_mode");
     }
     const allow = parseStringArray(record.allow);
     const ask = parseStringArray(record.ask);
@@ -157,7 +160,8 @@ function inspectClaude(cwd, applied, fs) {
     const effective = { defaultMode, allow, ask, deny };
     return {
         axis: "permission",
-        state: defaultMode === expected ? "aligned" : "drift",
+        state: "aligned",
+        reason: "emitted_launch_arguments",
         expected,
         effective,
         sourcePath,

package/daemon/dist/domain/permission-drift.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-drift.js","sourceRoot":"","sources":["../../src/domain/permission-drift.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,WAAW,CAAC;AA8DjC,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACvD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,GAAG,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAAG,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAE;YACzF,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,gCAAgC,EAAE,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC3I,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;AAC/H,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,UAAU,KAAK,oBAAoB,EAAE,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAChI,CAAC;IACD,IAAI,UAAU,KAAK,uBAAuB,EAAE,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,UAAU,KAAK,gCAAgC,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC5J,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA+B;IACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;AACvH,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,QAAQ,CAAC;IAC/C,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,EAAqB,EAAE,GAAkB;IAC7D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAqB,EAAE,OAAe;IAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAuB,EACvB,QAAuB,EACvB,UAAyB,EACzB,MAAc;IAEd,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CACpB,GAAkB,EAClB,OAAwC,EACxC,EAAqB;IAErB,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChI,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,IAAI,wBAAwB,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAChI,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,WAAW,GAAI,MAAkC,CAAC,WAAW,CAAC;IACpE,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1F,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACjJ,CAAC;IACD,MAAM,MAAM,GAAG,WAAsC,CAAC;IACtD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,cAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,EAAE,CAAC,qBAAqB,EAAE,CAAC;QAC7C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,2BAA2B,CAAC,CAAC;QAC7F,CAAC;QACD,cAAc,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,2BAA2B,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,SAAS,GAA8B,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC/E,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QACrD,QAAQ;QACR,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,OAAe,EACf,OAAwC;IAExC,MAAM,IAAI,GAAsB,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC5J,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvH,OAAO,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,IAAI,wBAAwB,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,OAAO,CAAC,KAAK;QACvB,SAAS,EAAE,OAAO,CAAC,KAAK;QACxB,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,kCAAkC;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAMtC;IACC,iFAAiF;IACjF,+EAA+E;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,eAAe,GAAG,OAAO,EAAE,KAAK,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WACrF,CAAC,KAAK,CAAC,OAAO,KAAK,aAAa,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,eAAe;QACjC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,qCAAqC,CAAC;QAC9F,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,aAAa;YACjC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YACnD,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,aAAa,IAAI,eAAe;QAC/D,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,OAAO;QACL,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;QAC/B,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE;QACrD,WAAW,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QACjE,WAAW;QACX,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE;gBAC5B,UAAU,EAAE,MAAM,CAAC,KAAK;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;gBACxE,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACT,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,UAAqC;IAChF,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,gBAAgB;QAChE,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,OAAO,UAAU,CAAC,WAAW,CAAC,SAAS,KAAK,QAAQ,IAAI,UAAU,CAAC,WAAW,CAAC,SAAS,KAAK,IAAI;QACjH,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW;QAC9C,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC;IACrC,MAAM,MAAM,GAAG;QACb,cAAc,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE;QAC1C,aAAa,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE;QACvC,iBAAiB,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE;QAC/C,GAAG,SAAS,KAAK,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE;KAC9D,CAAC;IACF,IAAI,UAAU,CAAC,WAAW,CAAC,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,YAAY,UAAU,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChG,IAAI,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,WAAW,CAAC,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,UAAU,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IAClG,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"permission-drift.js","sourceRoot":"","sources":["../../src/domain/permission-drift.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,WAAW,CAAC;AA8DjC,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACvD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,GAAG,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAAG,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAE;YACzF,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,gCAAgC,EAAE,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC3I,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;AAC/H,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,UAAU,KAAK,oBAAoB,EAAE,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAChI,CAAC;IACD,IAAI,UAAU,KAAK,uBAAuB,EAAE,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,UAAU,KAAK,gCAAgC,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC5J,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA+B;IACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;AACvH,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,QAAQ,CAAC;IAC/C,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,EAAqB,EAAE,GAAkB;IAC7D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAqB,EAAE,OAAe;IAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAuB,EACvB,QAAuB,EACvB,UAAyB,EACzB,MAAc;IAEd,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CACpB,GAAkB,EAClB,OAAwC,EACxC,EAAqB;IAErB,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChI,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,IAAI,wBAAwB,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAChI,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,WAAW,GAAI,MAAkC,CAAC,WAAW,KAAK,SAAS;QAC/E,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,MAAkC,CAAC,WAAW,CAAC;IACzD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1F,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,2BAA2B,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,MAAM,GAAG,WAAsC,CAAC;IACtD,oFAAoF;IACpF,iFAAiF;IACjF,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;IACrF,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,4BAA4B,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,cAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,EAAE,CAAC,qBAAqB,EAAE,CAAC;QAC7C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,2BAA2B,CAAC,CAAC;QAC7F,CAAC;QACD,cAAc,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,2BAA2B,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,yBAAyB,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,SAAS,GAA8B,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC/E,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,0BAA0B;QAClC,QAAQ;QACR,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,OAAe,EACf,OAAwC;IAExC,MAAM,IAAI,GAAsB,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC5J,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvH,OAAO,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,IAAI,wBAAwB,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,OAAO,CAAC,KAAK;QACvB,SAAS,EAAE,OAAO,CAAC,KAAK;QACxB,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,kCAAkC;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAMtC;IACC,iFAAiF;IACjF,+EAA+E;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,eAAe,GAAG,OAAO,EAAE,KAAK,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WACrF,CAAC,KAAK,CAAC,OAAO,KAAK,aAAa,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,eAAe;QACjC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,qCAAqC,CAAC;QAC9F,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,aAAa;YACjC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YACnD,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,aAAa,IAAI,eAAe;QAC/D,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,OAAO;QACL,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;QAC/B,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE;QACrD,WAAW,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QACjE,WAAW;QACX,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE;gBAC5B,UAAU,EAAE,MAAM,CAAC,KAAK;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;gBACxE,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACT,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,UAAqC;IAChF,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,gBAAgB;QAChE,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,OAAO,UAAU,CAAC,WAAW,CAAC,SAAS,KAAK,QAAQ,IAAI,UAAU,CAAC,WAAW,CAAC,SAAS,KAAK,IAAI;QACjH,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW;QAC9C,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC;IACrC,MAAM,MAAM,GAAG;QACb,cAAc,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE;QAC1C,aAAa,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE;QACvC,iBAAiB,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE;QAC/C,GAAG,SAAS,KAAK,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE;KAC9D,CAAC;IACF,IAAI,UAAU,CAAC,WAAW,CAAC,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,YAAY,UAAU,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChG,IAAI,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,WAAW,CAAC,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,UAAU,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IAClG,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/daemon/dist/domain/pod-bundle-assembler.d.ts

@@ -56,6 +56,7 @@ export declare class PodBundleAssembler {
      * @returns manifest and list of collected files
      */
     assemble(opts: PodAssembleOptions): PodAssembleResult;
+    private collectMemberAdditions;
     private collectRigFile;
     private collectStartupFiles;
     private vendorDirectory;

package/daemon/dist/domain/pod-bundle-assembler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pod-bundle-assembler.d.ts","sourceRoot":"","sources":["../../src/domain/pod-bundle-assembler.ts"],"names":[],"mappings":"AAIA,OAAO,EAA6C,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,EAA8B,KAAK,iBAAiB,EAA4D,KAAK,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGlM,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D,sGAAsG;IACtG,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3E,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,GAAG,MAAM,EAAE,CAAC;CAC/F;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;OAIG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,EAAE,CAAoB;gBAElB,IAAI,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAA;KAAE;IAI9C;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,iBAAiB;IAoLrD,OAAO,CAAC,cAAc;IAqBtB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,eAAe;IA0BvB,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,0BAA0B;IAkBlC,OAAO,CAAC,kBAAkB;CAoB3B"}
+{"version":3,"file":"pod-bundle-assembler.d.ts","sourceRoot":"","sources":["../../src/domain/pod-bundle-assembler.ts"],"names":[],"mappings":"AAIA,OAAO,EAA6C,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,EAA8B,KAAK,iBAAiB,EAA4D,KAAK,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGlM,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D,sGAAsG;IACtG,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3E,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,GAAG,MAAM,EAAE,CAAC;CAC/F;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;OAIG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,EAAE,CAAoB;gBAElB,IAAI,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAA;KAAE;IAI9C;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,iBAAiB;IAuLrD,OAAO,CAAC,sBAAsB;IAsB9B,OAAO,CAAC,cAAc;IAqBtB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,eAAe;IA0BvB,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,0BAA0B;IAkBlC,OAAO,CAAC,kBAAkB;CAoB3B"}

package/daemon/dist/domain/pod-bundle-assembler.js

@@ -67,6 +67,9 @@ export class PodBundleAssembler {
             for (const member of pod.members) {
                 // Member startup files
                 this.collectStartupFiles(member.startup, opts.rigRoot, opts.outputDir, collectedFiles);
+                // OPR.0.7.0.9 — a Claude member's own agent file, prompt file and plugin folders travel at their spec-relative paths,
+                // so an installed bundle's seat gets them. Declared means required: a missing one is refused here, not at install.
+                this.collectMemberAdditions(member, `${pod.id}.${member.id}`, opts.rigRoot, opts.outputDir, collectedFiles);
                 // Terminal members are bundle-native sentinels, not vendored agents.
                 if (member.agentRef === "builtin:terminal") {
                     continue;
@@ -170,6 +173,28 @@ export class PodBundleAssembler {
         collectedFiles.push("bundle.yaml");
         return { manifest, collectedFiles, ...(warnings.length > 0 ? { warnings } : {}) };
     }
+    collectMemberAdditions(member, seat, rigRoot, outputDir, collected) {
+        const declared = (relPath, key) => {
+            const absPath = nodePath.resolve(rigRoot, relPath);
+            if (!this.fs.exists(absPath))
+                throw new Error(`Declared ${key} not found for member ${seat}: ${relPath} (resolved to ${absPath}).`);
+            return absPath;
+        };
+        for (const [relPath, key] of [[member.agentFile, "agent_file"], [member.appendSystemPromptFile, "append_system_prompt_file"]]) {
+            if (!relPath)
+                continue;
+            declared(relPath, key);
+            this.collectRigFile(relPath, rigRoot, outputDir, collected);
+        }
+        for (const relPath of member.pluginDirs ?? []) {
+            const realRoot = this.fs.realpath(nodePath.resolve(rigRoot));
+            const realDir = this.fs.realpath(declared(relPath, "plugin_dirs folder"));
+            if (realDir !== realRoot && !realDir.startsWith(nodePath.join(realRoot, nodePath.sep))) {
+                throw new Error(`"${relPath}" resolves outside the rig root through a symlink; copy the folder into the rig to bundle it`);
+            }
+            this.vendorDirectory(realDir, nodePath.join(outputDir, relPath), collected, relPath);
+        }
+    }
     collectRigFile(relPath, rigRoot, outputDir, collected) {
         const root = nodePath.resolve(rigRoot);
         const absPath = nodePath.resolve(root, relPath);