@openvtc/trust-tasks 0.17.2 → 0.17.4

package/CHANGELOG.md

@@ -11,6 +11,118 @@ The package versions over **its own API** — what a consumer compiles against
 not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
 component.
 
+## 0.17.4 — 2026-09-07
+
+
+### Specifications
+
+- **provision**: Separate where an admin lives from how far it reaches (#385)
+
+`provision/integration` writes the minted admin's ACL entry naming the
+  target context, and there is no way to ask for any other shape. That is
+  right for every integration-class consumer — a mediator acts where it was
+  provisioned — and it makes one consumer unrepresentable: an operator
+  console, whose whole job is administering the maintainer, needs an entry
+  with no context list at all.
+
+  The obvious spelling, making `context` optional to mean "everywhere", is
+  the wrong one. A console still has to keep its own configuration
+  somewhere, and that somewhere is one ordinary context; dropping `context`
+  would leave it with nowhere to put it, and would collapse "provision me
+  everywhere" and "provision me wherever you like" into the same document.
+
+  So `adminScope` is a second axis beside `context`, not a replacement for
+  it: `context` says where the admin DID is minted and where its owner
+  keeps its configuration, `adminScope` says whether the ACL entry names
+  that context or nothing at all. `context` is resolved on every request
+  either way.
+
+  Two MUSTs come with it. `unrestricted` is refused with `forbidden` unless
+  the relayer is itself a super-admin, because routing a grant through a
+  provisioning maintainer does not launder authority the caller does not
+  hold. And the outcome is echoed as `summary.adminScope` rather than
+  inferred from the ask — a maintainer that predates the member ignores it
+  and writes a context-scoped entry, which is otherwise indistinguishable
+  from success. `summary.context` is echoed for the same reason: a producer
+  that omitted `context` and let inference run currently has no way to learn
+  where it landed except by guessing at the maintainer's layout, which is
+  precisely the thing the inference rules exist because it cannot do.
+
+- **persona**: The step-up approval is the maintainer's state, not the request's (#384)
+
+#377 said `present` must refuse a `stepUp` claim when "no fresh approval bound
+  to that previewId **accompanies the request**". The request has no member to put
+  one in — `present` carries `contextId`, `previewId`, `challenge`, `mint` and
+  `ext` — so the rule as written was unimplementable, and the implementation found
+  it immediately.
+
+  The fix is not a new member. **An approval a producer carried would be a bearer
+  token**, and a bearer token authorising a disclosure is replayable by whoever
+  holds it — the property the single-use `previewId` exists to deny. So the rule
+  now says what it should have said: the maintainer holds the approval, bound to
+  the preview, sharing that preview's lifetime. Consumed with it, expired with it,
+  and unable to outlive the decision it belongs to.
+
+  Also stated explicitly, because it is what makes the error retryable and was
+  previously only implied by the error's own description: the refusal MUST NOT
+  consume the preview.
+
+- **persona**: Say what kind of prefix rule 3 means (#382)
+
+The VTA implementation asked, and the answer was not written down: is the
+  "longest registered prefix" matched over bytes or over dot segments?
+
+  It matters because **the same task answers the same question differently a few
+  lines away.** `attribute/list`'s `typePrefix` is explicitly a byte comparison
+  over UTF-8 and says so — "a prefix that ends mid-segment is a byte comparison
+  like any other" — so an implementer meeting that first would reasonably carry it
+  into §4, and `paymentology.card` would join the `payment` family.
+
+  Rule 3 can only tighten, so that reading yields spurious strictness rather than
+  a leak: an unrelated token gated behind a step-up nobody asked for. Wrong, and
+  worth stating, without pretending it was a hole.
+
+  Also stated: a proper prefix, so a token is not its own prefix — rule 2 has
+  already answered for an exact match, and a token compared against the floor
+  would contradict "an exact entry is used as written".
+
+  And a note for whoever extends the table: **"longest" is not currently
+  observable.** No two nested families disagree on any axis, and the floor is
+  already maximal on `sensitivity` and `mask`, so rule 3 can only move `release`
+  today — a shortest-prefix implementation passes every outcome these entries can
+  express. The rule is written for the table that adds `payment.crypto` with a
+  treatment of its own, and an implementation should be tested on the mechanism
+  rather than on a result the current entries make unobservable.
+
+  Third round of gaps found by implementing this table rather than reading it.
+
+## 0.17.3 — 2026-09-07
+
+
+### Specifications
+
+- **persona**: Say what a mask does at its two edges (#380)
+
+Two clients implemented this table independently and both met the same two
+  questions, neither of which `maskStyles` answered.
+
+  **A value shorter than the tail a style keeps.** `last4` of a four-character
+  value is the value — a four-digit card number printed whole is not a masked card
+  number. Both clients masked in full. Now stated.
+
+  **Whether a mask tracks the value's length.** Both drew a fixed run, and the
+  reasoning is worth keeping rather than rediscovering: a run of one character per
+  character hidden publishes the length of a passport number, a date of birth or a
+  card, which is what the mask was drawn to withhold and is often enough to
+  identify the format on its own. The exact width is the client's; that it does
+  not vary with the value is not.
+
+  They guessed alike, which is luck rather than a specification — and the third
+  implementation is the one that would have differed.
+
+  Also stated for `emailLocal`: a value with no local part or no `@` is masked in
+  full rather than guessed at.
+
 ## 0.17.2 — 2026-09-07
 
 

package/dist/provision/integration/0.3/payload.d.ts

@@ -28,6 +28,10 @@ export interface ProvisionIntegrationPayload {
      * When `true`, the maintainer provisions the target context inline if it does not already exist. Requires super-admin role on the maintainer; context-admin callers MUST receive `provision/integration:forbidden` against a missing context. Idempotent when the context already exists.
      */
     createContext?: boolean;
+    /**
+     * How wide the ACL entry the maintainer writes for the minted admin is. `context` (the default, and what every integration-class consumer wants) binds the admin to `context` alone. `unrestricted` binds it to no context at all — the shape an ACL reads as a super-admin, able to act in every context the maintainer holds today and in every one created later — and is what an operator console asks for. `context` is resolved and authoritative in BOTH cases: it is where the admin DID is minted and the home a consumer stores its own configuration under, so `unrestricted` widens the grant without making the target context optional. A maintainer MUST refuse `unrestricted` with `provision/integration:forbidden` unless the relayer is itself a super-admin, because no admin may confer authority it does not hold. A maintainer that does not implement this member ignores it and writes a `context`-scoped entry; that is why the outcome is echoed as `summary.adminScope` rather than assumed from the ask.
+     */
+    adminScope?: "context" | "unrestricted";
     /**
      * Ecosystem-defined extension members per SPEC.md §4.5.1.
      */
@@ -236,6 +240,14 @@ export interface ProvisionSummary {
      * True when `payload.createContext` was honoured and the maintainer provisioned the target context inline. False when the context already existed (or when `createContext` was omitted / false).
      */
     contextCreated?: boolean;
+    /**
+     * The context the integration was provisioned into — `payload.context` verbatim when it was sent, otherwise the one "Context inference" resolved. Present so a producer that omitted `context` learns where it landed, rather than re-deriving it from its own view of the maintainer's layout and being wrong in exactly the deployments the inference rules exist for. Absent from maintainers that predate this member.
+     */
+    context?: string;
+    /**
+     * The scope of the ACL entry the maintainer actually wrote for `adminDid`. Echoed rather than assumed: a maintainer that does not implement `payload.adminScope` ignores an `unrestricted` ask and writes a `context`-scoped entry, and a producer that read its own request back would record authority it does not have. Absent from maintainers that predate this member, which a producer MUST read as `context`.
+     */
+    adminScope?: "context" | "unrestricted";
 }
 /** Shared definitions this specification references, re-exported under the names it used to declare them with. */
 export type { DigestMultibase, Ext };
@@ -291,6 +303,12 @@ export declare const PAYLOAD_SCHEMA: {
             readonly default: false;
             readonly description: "When `true`, the maintainer provisions the target context inline if it does not already exist. Requires super-admin role on the maintainer; context-admin callers MUST receive `provision/integration:forbidden` against a missing context. Idempotent when the context already exists.";
         };
+        readonly adminScope: {
+            readonly type: "string";
+            readonly enum: readonly ["context", "unrestricted"];
+            readonly default: "context";
+            readonly description: "How wide the ACL entry the maintainer writes for the minted admin is. `context` (the default, and what every integration-class consumer wants) binds the admin to `context` alone. `unrestricted` binds it to no context at all — the shape an ACL reads as a super-admin, able to act in every context the maintainer holds today and in every one created later — and is what an operator console asks for. `context` is resolved and authoritative in BOTH cases: it is where the admin DID is minted and the home a consumer stores its own configuration under, so `unrestricted` widens the grant without making the target context optional. A maintainer MUST refuse `unrestricted` with `provision/integration:forbidden` unless the relayer is itself a super-admin, because no admin may confer authority it does not hold. A maintainer that does not implement this member ignores it and writes a `context`-scoped entry; that is why the outcome is echoed as `summary.adminScope` rather than assumed from the ask.";
+        };
         readonly ext: {
             readonly $ref: "#/$defs/Ext";
             readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
@@ -581,6 +599,16 @@ export declare const PAYLOAD_SCHEMA: {
                     readonly default: false;
                     readonly description: "True when `payload.createContext` was honoured and the maintainer provisioned the target context inline. False when the context already existed (or when `createContext` was omitted / false).";
                 };
+                readonly context: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "The context the integration was provisioned into — `payload.context` verbatim when it was sent, otherwise the one \"Context inference\" resolved. Present so a producer that omitted `context` learns where it landed, rather than re-deriving it from its own view of the maintainer's layout and being wrong in exactly the deployments the inference rules exist for. Absent from maintainers that predate this member.";
+                };
+                readonly adminScope: {
+                    readonly type: "string";
+                    readonly enum: readonly ["context", "unrestricted"];
+                    readonly description: "The scope of the ACL entry the maintainer actually wrote for `adminDid`. Echoed rather than assumed: a maintainer that does not implement `payload.adminScope` ignores an `unrestricted` ask and writes a `context`-scoped entry, and a producer that read its own request back would record authority it does not have. Absent from maintainers that predate this member, which a producer MUST read as `context`.";
+                };
             };
         };
         readonly Ext: {
@@ -892,6 +920,16 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
                     readonly default: false;
                     readonly description: "True when `payload.createContext` was honoured and the maintainer provisioned the target context inline. False when the context already existed (or when `createContext` was omitted / false).";
                 };
+                readonly context: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "The context the integration was provisioned into — `payload.context` verbatim when it was sent, otherwise the one \"Context inference\" resolved. Present so a producer that omitted `context` learns where it landed, rather than re-deriving it from its own view of the maintainer's layout and being wrong in exactly the deployments the inference rules exist for. Absent from maintainers that predate this member.";
+                };
+                readonly adminScope: {
+                    readonly type: "string";
+                    readonly enum: readonly ["context", "unrestricted"];
+                    readonly description: "The scope of the ACL entry the maintainer actually wrote for `adminDid`. Echoed rather than assumed: a maintainer that does not implement `payload.adminScope` ignores an `unrestricted` ask and writes a `context`-scoped entry, and a producer that read its own request back would record authority it does not have. Absent from maintainers that predate this member, which a producer MUST read as `context`.";
+                };
             };
         };
         readonly Ext: {
@@ -961,6 +999,12 @@ export declare const SPEC: {
                 readonly default: false;
                 readonly description: "When `true`, the maintainer provisions the target context inline if it does not already exist. Requires super-admin role on the maintainer; context-admin callers MUST receive `provision/integration:forbidden` against a missing context. Idempotent when the context already exists.";
             };
+            readonly adminScope: {
+                readonly type: "string";
+                readonly enum: readonly ["context", "unrestricted"];
+                readonly default: "context";
+                readonly description: "How wide the ACL entry the maintainer writes for the minted admin is. `context` (the default, and what every integration-class consumer wants) binds the admin to `context` alone. `unrestricted` binds it to no context at all — the shape an ACL reads as a super-admin, able to act in every context the maintainer holds today and in every one created later — and is what an operator console asks for. `context` is resolved and authoritative in BOTH cases: it is where the admin DID is minted and the home a consumer stores its own configuration under, so `unrestricted` widens the grant without making the target context optional. A maintainer MUST refuse `unrestricted` with `provision/integration:forbidden` unless the relayer is itself a super-admin, because no admin may confer authority it does not hold. A maintainer that does not implement this member ignores it and writes a `context`-scoped entry; that is why the outcome is echoed as `summary.adminScope` rather than assumed from the ask.";
+            };
             readonly ext: {
                 readonly $ref: "#/$defs/Ext";
                 readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
@@ -1251,6 +1295,16 @@ export declare const SPEC: {
                         readonly default: false;
                         readonly description: "True when `payload.createContext` was honoured and the maintainer provisioned the target context inline. False when the context already existed (or when `createContext` was omitted / false).";
                     };
+                    readonly context: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "The context the integration was provisioned into — `payload.context` verbatim when it was sent, otherwise the one \"Context inference\" resolved. Present so a producer that omitted `context` learns where it landed, rather than re-deriving it from its own view of the maintainer's layout and being wrong in exactly the deployments the inference rules exist for. Absent from maintainers that predate this member.";
+                    };
+                    readonly adminScope: {
+                        readonly type: "string";
+                        readonly enum: readonly ["context", "unrestricted"];
+                        readonly description: "The scope of the ACL entry the maintainer actually wrote for `adminDid`. Echoed rather than assumed: a maintainer that does not implement `payload.adminScope` ignores an `unrestricted` ask and writes a `context`-scoped entry, and a producer that read its own request back would record authority it does not have. Absent from maintainers that predate this member, which a producer MUST read as `context`.";
+                    };
                 };
             };
             readonly Ext: {
@@ -1573,6 +1627,16 @@ export declare const RESPONSE_SPEC: {
                         readonly default: false;
                         readonly description: "True when `payload.createContext` was honoured and the maintainer provisioned the target context inline. False when the context already existed (or when `createContext` was omitted / false).";
                     };
+                    readonly context: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "The context the integration was provisioned into — `payload.context` verbatim when it was sent, otherwise the one \"Context inference\" resolved. Present so a producer that omitted `context` learns where it landed, rather than re-deriving it from its own view of the maintainer's layout and being wrong in exactly the deployments the inference rules exist for. Absent from maintainers that predate this member.";
+                    };
+                    readonly adminScope: {
+                        readonly type: "string";
+                        readonly enum: readonly ["context", "unrestricted"];
+                        readonly description: "The scope of the ACL entry the maintainer actually wrote for `adminDid`. Echoed rather than assumed: a maintainer that does not implement `payload.adminScope` ignores an `unrestricted` ask and writes a `context`-scoped entry, and a producer that read its own request back would record authority it does not have. Absent from maintainers that predate this member, which a producer MUST read as `context`.";
+                    };
                 };
             };
             readonly Ext: {

package/dist/provision/integration/0.3/payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/provision/integration/0.3/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,gCAAgC,CAAC;AAG3E;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,gBAAgB,CAAC;IAC1B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;IACvC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C;;;;OAIG;IACH,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACpC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,YAAY,CAAC;IAClB,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AACD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,mBAAmB,CAAC;IAC1B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;IACzB,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,CAAC,EAAE;QACL,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;CACH;AACD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,CAAC,EAAE;QACL,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;CACH;AACD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,eAAe,CAAC;IACtB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,eAAe,CAAC;IAC/B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,CAAC,EAAE;QACL,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;CACH;AACD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,gBAAgB,CAAC;IAC/B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AACD;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,kHAAkH;AAClH,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC;AAErC,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,uDAAgE,CAAC;AAEzF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,2BAA2B,CAAC;AAElD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,gEAAyE,CAAC;AAE3G,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,mCAAmC,CAAC;AAE3D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmYjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyV1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/provision/integration/0.3/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,gCAAgC,CAAC;AAG3E;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,gBAAgB,CAAC;IAC1B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;IACvC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;OAEG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC;IACxC;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C;;;;OAIG;IACH,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACpC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,YAAY,CAAC;IAClB,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AACD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,mBAAmB,CAAC;IAC1B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;IACzB,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,CAAC,EAAE;QACL,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;CACH;AACD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,CAAC,EAAE;QACL,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;CACH;AACD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,eAAe,CAAC;IACtB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,eAAe,CAAC;IAC/B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,CAAC,EAAE;QACL,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;CACH;AACD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,gBAAgB,CAAC;IAC/B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AACD;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC;CACzC;AAED,kHAAkH;AAClH,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC;AAErC,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,uDAAgE,CAAC;AAEzF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,2BAA2B,CAAC;AAElD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,gEAAyE,CAAC;AAE3G,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,mCAAmC,CAAC;AAE3D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyZjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsW1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}

package/dist/provision/integration/0.3/payload.js

@@ -55,6 +55,15 @@ export const PAYLOAD_SCHEMA = {
             "default": false,
             "description": "When `true`, the maintainer provisions the target context inline if it does not already exist. Requires super-admin role on the maintainer; context-admin callers MUST receive `provision/integration:forbidden` against a missing context. Idempotent when the context already exists."
         },
+        "adminScope": {
+            "type": "string",
+            "enum": [
+                "context",
+                "unrestricted"
+            ],
+            "default": "context",
+            "description": "How wide the ACL entry the maintainer writes for the minted admin is. `context` (the default, and what every integration-class consumer wants) binds the admin to `context` alone. `unrestricted` binds it to no context at all — the shape an ACL reads as a super-admin, able to act in every context the maintainer holds today and in every one created later — and is what an operator console asks for. `context` is resolved and authoritative in BOTH cases: it is where the admin DID is minted and the home a consumer stores its own configuration under, so `unrestricted` widens the grant without making the target context optional. A maintainer MUST refuse `unrestricted` with `provision/integration:forbidden` unless the relayer is itself a super-admin, because no admin may confer authority it does not hold. A maintainer that does not implement this member ignores it and writes a `context`-scoped entry; that is why the outcome is echoed as `summary.adminScope` rather than assumed from the ask."
+        },
         "ext": {
             "$ref": "#/$defs/Ext",
             "description": "Ecosystem-defined extension members per SPEC.md §4.5.1."
@@ -378,6 +387,19 @@ export const PAYLOAD_SCHEMA = {
                     "type": "boolean",
                     "default": false,
                     "description": "True when `payload.createContext` was honoured and the maintainer provisioned the target context inline. False when the context already existed (or when `createContext` was omitted / false)."
+                },
+                "context": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "The context the integration was provisioned into — `payload.context` verbatim when it was sent, otherwise the one \"Context inference\" resolved. Present so a producer that omitted `context` learns where it landed, rather than re-deriving it from its own view of the maintainer's layout and being wrong in exactly the deployments the inference rules exist for. Absent from maintainers that predate this member."
+                },
+                "adminScope": {
+                    "type": "string",
+                    "enum": [
+                        "context",
+                        "unrestricted"
+                    ],
+                    "description": "The scope of the ACL entry the maintainer actually wrote for `adminDid`. Echoed rather than assumed: a maintainer that does not implement `payload.adminScope` ignores an `unrestricted` ask and writes a `context`-scoped entry, and a producer that read its own request back would record authority it does not have. Absent from maintainers that predate this member, which a producer MUST read as `context`."
                 }
             }
         },
@@ -725,6 +747,19 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
                     "type": "boolean",
                     "default": false,
                     "description": "True when `payload.createContext` was honoured and the maintainer provisioned the target context inline. False when the context already existed (or when `createContext` was omitted / false)."
+                },
+                "context": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "The context the integration was provisioned into — `payload.context` verbatim when it was sent, otherwise the one \"Context inference\" resolved. Present so a producer that omitted `context` learns where it landed, rather than re-deriving it from its own view of the maintainer's layout and being wrong in exactly the deployments the inference rules exist for. Absent from maintainers that predate this member."
+                },
+                "adminScope": {
+                    "type": "string",
+                    "enum": [
+                        "context",
+                        "unrestricted"
+                    ],
+                    "description": "The scope of the ACL entry the maintainer actually wrote for `adminDid`. Echoed rather than assumed: a maintainer that does not implement `payload.adminScope` ignores an `unrestricted` ask and writes a `context`-scoped entry, and a producer that read its own request back would record authority it does not have. Absent from maintainers that predate this member, which a producer MUST read as `context`."
                 }
             }
         },

package/dist/provision/integration/0.3/payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/provision/integration/0.3/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAoPH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,4YAA4Y;IAC3Z,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;KACV;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,0BAA0B;YAClC,aAAa,EAAE,oXAAoX;SACpY;QACD,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,myBAAmyB;SACnzB;QACD,WAAW,EAAE;YACX,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,WAAW;gBACX,YAAY;aACb;YACD,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE,kfAAkf;SAClgB;QACD,mBAAmB,EAAE;YACnB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,gQAAgQ;SAChR;QACD,eAAe,EAAE;YACf,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,yRAAyR;SACzS;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;YACrB,aAAa,EAAE,yDAAyD;SACzE;KACF;IACD,OAAO,EAAE;QACP,kBAAkB,EAAE;YAClB,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,4NAA4N;YAC3O,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,MAAM;gBACN,IAAI;gBACJ,QAAQ;gBACR,OAAO;gBACP,YAAY;gBACZ,KAAK;gBACL,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,QAAQ,EAAE,KAAK;qBAChB;oBACD,aAAa,EAAE,sLAAsL;iBACtM;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,CAAC;qBACf;oBACD,aAAa,EAAE,6HAA6H;iBAC7I;gBACD,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,8EAA8E;iBAC9F;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,SAAS,EAAE,kCAAkC;oBAC7C,aAAa,EAAE,yKAAyK;iBACzL;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,qBAAqB;oBAChC,aAAa,EAAE,6RAA6R;iBAC7S;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8FAA8F;iBAC9G;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,wEAAwE;iBACxF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,sBAAsB;oBAC9B,aAAa,EAAE,sHAAsH;iBACtI;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,4BAA4B;oBACpC,aAAa,EAAE,gQAAgQ;iBAChR;aACF;SACF;QACD,cAAc,EAAE;YACd,SAAS,EAAE,eAAe;YAC1B,OAAO,EAAE,cAAc;YACvB,aAAa,EAAE,gGAAgG;YAC/G,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,8BAA8B;iBACvC;gBACD;oBACE,MAAM,EAAE,0BAA0B;iBACnC;aACF;SACF;QACD,sBAAsB,EAAE;YACtB,SAAS,EAAE,wBAAwB;YACnC,OAAO,EAAE,sBAAsB;YAC/B,aAAa,EAAE,4KAA4K;YAC3L,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,UAAU;aACX;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,mBAAmB;iBAC7B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,gJAAgJ;iBAChK;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,2GAA2G;iBAC3H;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,wcAAwc;iBACxd;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,kEAAkE;iBAClF;aACF;SACF;QACD,kBAAkB,EAAE;YAClB,SAAS,EAAE,oBAAoB;YAC/B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,gMAAgM;YAC/M,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,eAAe;aAChB;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,eAAe;iBACzB;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,yFAAyF;iBACzG;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,gGAAgG;iBAChH;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,kEAAkE;iBAClF;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,SAAS,EAAE,kBAAkB;YAC7B,OAAO,EAAE,gBAAgB;YACzB,aAAa,EAAE,2RAA2R;YAC1S,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,wOAAwO;iBACxP;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,IAAI;oBAC5B,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qOAAqO;iBACrP;aACF;SACF;QACD,oBAAoB,EAAE;YACpB,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,oBAAoB;YAC7B,aAAa,EAAE,sKAAsK;YACrL,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,IAAI;YAC5B,UAAU,EAAE;gBACV,MAAM;gBACN,aAAa;gBACb,oBAAoB;gBACpB,cAAc;gBACd,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,oBAAoB;iBAC9B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sHAAsH;iBACtI;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,2EAA2E;iBAC3F;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,cAAc,EAAE;oBACd,OAAO,EAAE,gBAAgB;iBAC1B;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sCAAsC;iBACtD;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,aAAa,EAAE,4MAA4M;YAC3N,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;gBACR,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6OAA6O;iBAC7P;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,sRAAsR;iBACtS;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,0BAA0B;oBAClC,aAAa,EAAE,oHAAoH;iBACpI;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,kBAAkB,EAAE;YAClB,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,wMAAwM;YACvN,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,WAAW;gBACX,aAAa;gBACb,aAAa;gBACb,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6GAA6G;iBAC7H;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oXAAoX;iBACpY;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK;oBAChB,aAAa,EAAE,4IAA4I;iBAC5J;gBACD,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uGAAuG;iBACvH;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,iFAAiF;iBACjG;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,iHAAiH;iBACjI;gBACD,mBAAmB,EAAE;oBACnB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uJAAuJ;iBACvK;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,gBAAgB;oBAC3B,aAAa,EAAE,qPAAqP;iBACrQ;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,+OAA+O;iBAC/P;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,4JAA4J;iBAC5K;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,0NAA0N;iBAC1O;gBACD,gBAAgB,EAAE;oBAChB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK;oBAChB,aAAa,EAAE,gMAAgM;iBAChN;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,kBAAkB,EAAE;YAClB,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,4NAA4N;YAC3O,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,MAAM;gBACN,IAAI;gBACJ,QAAQ;gBACR,OAAO;gBACP,YAAY;gBACZ,KAAK;gBACL,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,QAAQ,EAAE,KAAK;qBAChB;oBACD,aAAa,EAAE,sLAAsL;iBACtM;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,CAAC;qBACf;oBACD,aAAa,EAAE,6HAA6H;iBAC7I;gBACD,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,8EAA8E;iBAC9F;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,SAAS,EAAE,kCAAkC;oBAC7C,aAAa,EAAE,yKAAyK;iBACzL;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,qBAAqB;oBAChC,aAAa,EAAE,6RAA6R;iBAC7S;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8FAA8F;iBAC9G;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,wEAAwE;iBACxF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,sBAAsB;oBAC9B,aAAa,EAAE,sHAAsH;iBACtI;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,4BAA4B;oBACpC,aAAa,EAAE,gQAAgQ;iBAChR;aACF;SACF;QACD,cAAc,EAAE;YACd,SAAS,EAAE,eAAe;YAC1B,OAAO,EAAE,cAAc;YACvB,aAAa,EAAE,gGAAgG;YAC/G,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,8BAA8B;iBACvC;gBACD;oBACE,MAAM,EAAE,0BAA0B;iBACnC;aACF;SACF;QACD,sBAAsB,EAAE;YACtB,SAAS,EAAE,wBAAwB;YACnC,OAAO,EAAE,sBAAsB;YAC/B,aAAa,EAAE,4KAA4K;YAC3L,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,UAAU;aACX;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,mBAAmB;iBAC7B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,gJAAgJ;iBAChK;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,2GAA2G;iBAC3H;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,wcAAwc;iBACxd;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,kEAAkE;iBAClF;aACF;SACF;QACD,kBAAkB,EAAE;YAClB,SAAS,EAAE,oBAAoB;YAC/B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,gMAAgM;YAC/M,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,eAAe;aAChB;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,eAAe;iBACzB;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,yFAAyF;iBACzG;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,gGAAgG;iBAChH;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,kEAAkE;iBAClF;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,SAAS,EAAE,kBAAkB;YAC7B,OAAO,EAAE,gBAAgB;YACzB,aAAa,EAAE,2RAA2R;YAC1S,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,wOAAwO;iBACxP;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,IAAI;oBAC5B,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qOAAqO;iBACrP;aACF;SACF;QACD,oBAAoB,EAAE;YACpB,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,oBAAoB;YAC7B,aAAa,EAAE,sKAAsK;YACrL,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,IAAI;YAC5B,UAAU,EAAE;gBACV,MAAM;gBACN,aAAa;gBACb,oBAAoB;gBACpB,cAAc;gBACd,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,oBAAoB;iBAC9B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sHAAsH;iBACtI;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,2EAA2E;iBAC3F;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,cAAc,EAAE;oBACd,OAAO,EAAE,gBAAgB;iBAC1B;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sCAAsC;iBACtD;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,aAAa,EAAE,4MAA4M;YAC3N,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;gBACR,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6OAA6O;iBAC7P;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,sRAAsR;iBACtS;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,0BAA0B;oBAClC,aAAa,EAAE,oHAAoH;iBACpI;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,kBAAkB,EAAE;YAClB,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,wMAAwM;YACvN,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,WAAW;gBACX,aAAa;gBACb,aAAa;gBACb,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6GAA6G;iBAC7H;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oXAAoX;iBACpY;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK;oBAChB,aAAa,EAAE,4IAA4I;iBAC5J;gBACD,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uGAAuG;iBACvH;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,iFAAiF;iBACjG;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,iHAAiH;iBACjI;gBACD,mBAAmB,EAAE;oBACnB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uJAAuJ;iBACvK;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,gBAAgB;oBAC3B,aAAa,EAAE,qPAAqP;iBACrQ;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,+OAA+O;iBAC/P;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,4JAA4J;iBAC5K;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,0NAA0N;iBAC1O;gBACD,gBAAgB,EAAE;oBAChB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK;oBAChB,aAAa,EAAE,gMAAgM;iBAChN;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,KAAK;IAC1B,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/provision/integration/0.3/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgQH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,4YAA4Y;IAC3Z,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;KACV;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,0BAA0B;YAClC,aAAa,EAAE,oXAAoX;SACpY;QACD,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,myBAAmyB;SACnzB;QACD,WAAW,EAAE;YACX,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,WAAW;gBACX,YAAY;aACb;YACD,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE,kfAAkf;SAClgB;QACD,mBAAmB,EAAE;YACnB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,gQAAgQ;SAChR;QACD,eAAe,EAAE;YACf,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,yRAAyR;SACzS;QACD,YAAY,EAAE;YACZ,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,SAAS;gBACT,cAAc;aACf;YACD,SAAS,EAAE,SAAS;YACpB,aAAa,EAAE,q+BAAq+B;SACr/B;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;YACrB,aAAa,EAAE,yDAAyD;SACzE;KACF;IACD,OAAO,EAAE;QACP,kBAAkB,EAAE;YAClB,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,4NAA4N;YAC3O,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,MAAM;gBACN,IAAI;gBACJ,QAAQ;gBACR,OAAO;gBACP,YAAY;gBACZ,KAAK;gBACL,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,QAAQ,EAAE,KAAK;qBAChB;oBACD,aAAa,EAAE,sLAAsL;iBACtM;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,CAAC;qBACf;oBACD,aAAa,EAAE,6HAA6H;iBAC7I;gBACD,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,8EAA8E;iBAC9F;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,SAAS,EAAE,kCAAkC;oBAC7C,aAAa,EAAE,yKAAyK;iBACzL;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,qBAAqB;oBAChC,aAAa,EAAE,6RAA6R;iBAC7S;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8FAA8F;iBAC9G;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,wEAAwE;iBACxF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,sBAAsB;oBAC9B,aAAa,EAAE,sHAAsH;iBACtI;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,4BAA4B;oBACpC,aAAa,EAAE,gQAAgQ;iBAChR;aACF;SACF;QACD,cAAc,EAAE;YACd,SAAS,EAAE,eAAe;YAC1B,OAAO,EAAE,cAAc;YACvB,aAAa,EAAE,gGAAgG;YAC/G,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,8BAA8B;iBACvC;gBACD;oBACE,MAAM,EAAE,0BAA0B;iBACnC;aACF;SACF;QACD,sBAAsB,EAAE;YACtB,SAAS,EAAE,wBAAwB;YACnC,OAAO,EAAE,sBAAsB;YAC/B,aAAa,EAAE,4KAA4K;YAC3L,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,UAAU;aACX;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,mBAAmB;iBAC7B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,gJAAgJ;iBAChK;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,2GAA2G;iBAC3H;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,wcAAwc;iBACxd;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,kEAAkE;iBAClF;aACF;SACF;QACD,kBAAkB,EAAE;YAClB,SAAS,EAAE,oBAAoB;YAC/B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,gMAAgM;YAC/M,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,eAAe;aAChB;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,eAAe;iBACzB;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,yFAAyF;iBACzG;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,gGAAgG;iBAChH;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,kEAAkE;iBAClF;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,SAAS,EAAE,kBAAkB;YAC7B,OAAO,EAAE,gBAAgB;YACzB,aAAa,EAAE,2RAA2R;YAC1S,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,wOAAwO;iBACxP;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,IAAI;oBAC5B,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qOAAqO;iBACrP;aACF;SACF;QACD,oBAAoB,EAAE;YACpB,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,oBAAoB;YAC7B,aAAa,EAAE,sKAAsK;YACrL,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,IAAI;YAC5B,UAAU,EAAE;gBACV,MAAM;gBACN,aAAa;gBACb,oBAAoB;gBACpB,cAAc;gBACd,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,oBAAoB;iBAC9B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sHAAsH;iBACtI;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,2EAA2E;iBAC3F;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,cAAc,EAAE;oBACd,OAAO,EAAE,gBAAgB;iBAC1B;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sCAAsC;iBACtD;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,aAAa,EAAE,4MAA4M;YAC3N,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;gBACR,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6OAA6O;iBAC7P;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,sRAAsR;iBACtS;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,0BAA0B;oBAClC,aAAa,EAAE,oHAAoH;iBACpI;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,kBAAkB,EAAE;YAClB,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,wMAAwM;YACvN,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,WAAW;gBACX,aAAa;gBACb,aAAa;gBACb,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6GAA6G;iBAC7H;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oXAAoX;iBACpY;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK;oBAChB,aAAa,EAAE,4IAA4I;iBAC5J;gBACD,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uGAAuG;iBACvH;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,iFAAiF;iBACjG;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,iHAAiH;iBACjI;gBACD,mBAAmB,EAAE;oBACnB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uJAAuJ;iBACvK;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,gBAAgB;oBAC3B,aAAa,EAAE,qPAAqP;iBACrQ;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,+OAA+O;iBAC/P;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,4JAA4J;iBAC5K;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,0NAA0N;iBAC1O;gBACD,gBAAgB,EAAE;oBAChB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK;oBAChB,aAAa,EAAE,gMAAgM;iBAChN;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4ZAA4Z;iBAC5a;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,cAAc;qBACf;oBACD,aAAa,EAAE,qZAAqZ;iBACra;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,kBAAkB,EAAE;YAClB,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,4NAA4N;YAC3O,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,MAAM;gBACN,IAAI;gBACJ,QAAQ;gBACR,OAAO;gBACP,YAAY;gBACZ,KAAK;gBACL,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,QAAQ,EAAE,KAAK;qBAChB;oBACD,aAAa,EAAE,sLAAsL;iBACtM;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,CAAC;qBACf;oBACD,aAAa,EAAE,6HAA6H;iBAC7I;gBACD,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,8EAA8E;iBAC9F;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,SAAS,EAAE,kCAAkC;oBAC7C,aAAa,EAAE,yKAAyK;iBACzL;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,qBAAqB;oBAChC,aAAa,EAAE,6RAA6R;iBAC7S;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8FAA8F;iBAC9G;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,wEAAwE;iBACxF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,sBAAsB;oBAC9B,aAAa,EAAE,sHAAsH;iBACtI;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,4BAA4B;oBACpC,aAAa,EAAE,gQAAgQ;iBAChR;aACF;SACF;QACD,cAAc,EAAE;YACd,SAAS,EAAE,eAAe;YAC1B,OAAO,EAAE,cAAc;YACvB,aAAa,EAAE,gGAAgG;YAC/G,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,8BAA8B;iBACvC;gBACD;oBACE,MAAM,EAAE,0BAA0B;iBACnC;aACF;SACF;QACD,sBAAsB,EAAE;YACtB,SAAS,EAAE,wBAAwB;YACnC,OAAO,EAAE,sBAAsB;YAC/B,aAAa,EAAE,4KAA4K;YAC3L,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,UAAU;aACX;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,mBAAmB;iBAC7B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,gJAAgJ;iBAChK;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,2GAA2G;iBAC3H;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,wcAAwc;iBACxd;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,kEAAkE;iBAClF;aACF;SACF;QACD,kBAAkB,EAAE;YAClB,SAAS,EAAE,oBAAoB;YAC/B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,gMAAgM;YAC/M,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,eAAe;aAChB;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,eAAe;iBACzB;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,yFAAyF;iBACzG;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,gGAAgG;iBAChH;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,kEAAkE;iBAClF;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,SAAS,EAAE,kBAAkB;YAC7B,OAAO,EAAE,gBAAgB;YACzB,aAAa,EAAE,2RAA2R;YAC1S,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,wOAAwO;iBACxP;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,IAAI;oBAC5B,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qOAAqO;iBACrP;aACF;SACF;QACD,oBAAoB,EAAE;YACpB,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,oBAAoB;YAC7B,aAAa,EAAE,sKAAsK;YACrL,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,IAAI;YAC5B,UAAU,EAAE;gBACV,MAAM;gBACN,aAAa;gBACb,oBAAoB;gBACpB,cAAc;gBACd,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,oBAAoB;iBAC9B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sHAAsH;iBACtI;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,2EAA2E;iBAC3F;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,cAAc,EAAE;oBACd,OAAO,EAAE,gBAAgB;iBAC1B;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sCAAsC;iBACtD;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,aAAa,EAAE,4MAA4M;YAC3N,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;gBACR,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6OAA6O;iBAC7P;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,sRAAsR;iBACtS;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,0BAA0B;oBAClC,aAAa,EAAE,oHAAoH;iBACpI;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,kBAAkB,EAAE;YAClB,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,kBAAkB;YAC3B,aAAa,EAAE,wMAAwM;YACvN,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,WAAW;gBACX,aAAa;gBACb,aAAa;gBACb,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6GAA6G;iBAC7H;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oXAAoX;iBACpY;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK;oBAChB,aAAa,EAAE,4IAA4I;iBAC5J;gBACD,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uGAAuG;iBACvH;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,iFAAiF;iBACjG;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,iHAAiH;iBACjI;gBACD,mBAAmB,EAAE;oBACnB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uJAAuJ;iBACvK;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,gBAAgB;oBAC3B,aAAa,EAAE,qPAAqP;iBACrQ;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,+OAA+O;iBAC/P;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,4JAA4J;iBAC5K;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,0NAA0N;iBAC1O;gBACD,gBAAgB,EAAE;oBAChB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK;oBAChB,aAAa,EAAE,gMAAgM;iBAChN;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4ZAA4Z;iBAC5a;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,cAAc;qBACf;oBACD,aAAa,EAAE,qZAAqZ;iBACra;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,KAAK;IAC1B,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openvtc/trust-tasks",
-  "version": "0.17.2",
+  "version": "0.17.4",
   "description": "Generated TypeScript bindings for the Trust Tasks framework registry.",
   "type": "module",
   "main": "./dist/index.js",

package/src/provision/integration/0.3/payload.ts

@@ -32,6 +32,10 @@ export interface ProvisionIntegrationPayload {
    * When `true`, the maintainer provisions the target context inline if it does not already exist. Requires super-admin role on the maintainer; context-admin callers MUST receive `provision/integration:forbidden` against a missing context. Idempotent when the context already exists.
    */
   createContext?: boolean;
+  /**
+   * How wide the ACL entry the maintainer writes for the minted admin is. `context` (the default, and what every integration-class consumer wants) binds the admin to `context` alone. `unrestricted` binds it to no context at all — the shape an ACL reads as a super-admin, able to act in every context the maintainer holds today and in every one created later — and is what an operator console asks for. `context` is resolved and authoritative in BOTH cases: it is where the admin DID is minted and the home a consumer stores its own configuration under, so `unrestricted` widens the grant without making the target context optional. A maintainer MUST refuse `unrestricted` with `provision/integration:forbidden` unless the relayer is itself a super-admin, because no admin may confer authority it does not hold. A maintainer that does not implement this member ignores it and writes a `context`-scoped entry; that is why the outcome is echoed as `summary.adminScope` rather than assumed from the ask.
+   */
+  adminScope?: "context" | "unrestricted";
   /**
    * Ecosystem-defined extension members per SPEC.md §4.5.1.
    */
@@ -240,6 +244,14 @@ export interface ProvisionSummary {
    * True when `payload.createContext` was honoured and the maintainer provisioned the target context inline. False when the context already existed (or when `createContext` was omitted / false).
    */
   contextCreated?: boolean;
+  /**
+   * The context the integration was provisioned into — `payload.context` verbatim when it was sent, otherwise the one "Context inference" resolved. Present so a producer that omitted `context` learns where it landed, rather than re-deriving it from its own view of the maintainer's layout and being wrong in exactly the deployments the inference rules exist for. Absent from maintainers that predate this member.
+   */
+  context?: string;
+  /**
+   * The scope of the ACL entry the maintainer actually wrote for `adminDid`. Echoed rather than assumed: a maintainer that does not implement `payload.adminScope` ignores an `unrestricted` ask and writes a `context`-scoped entry, and a producer that read its own request back would record authority it does not have. Absent from maintainers that predate this member, which a producer MUST read as `context`.
+   */
+  adminScope?: "context" | "unrestricted";
 }
 
 /** Shared definitions this specification references, re-exported under the names it used to declare them with. */
@@ -306,6 +318,15 @@ export const PAYLOAD_SCHEMA = {
       "default": false,
       "description": "When `true`, the maintainer provisions the target context inline if it does not already exist. Requires super-admin role on the maintainer; context-admin callers MUST receive `provision/integration:forbidden` against a missing context. Idempotent when the context already exists."
     },
+    "adminScope": {
+      "type": "string",
+      "enum": [
+        "context",
+        "unrestricted"
+      ],
+      "default": "context",
+      "description": "How wide the ACL entry the maintainer writes for the minted admin is. `context` (the default, and what every integration-class consumer wants) binds the admin to `context` alone. `unrestricted` binds it to no context at all — the shape an ACL reads as a super-admin, able to act in every context the maintainer holds today and in every one created later — and is what an operator console asks for. `context` is resolved and authoritative in BOTH cases: it is where the admin DID is minted and the home a consumer stores its own configuration under, so `unrestricted` widens the grant without making the target context optional. A maintainer MUST refuse `unrestricted` with `provision/integration:forbidden` unless the relayer is itself a super-admin, because no admin may confer authority it does not hold. A maintainer that does not implement this member ignores it and writes a `context`-scoped entry; that is why the outcome is echoed as `summary.adminScope` rather than assumed from the ask."
+    },
     "ext": {
       "$ref": "#/$defs/Ext",
       "description": "Ecosystem-defined extension members per SPEC.md §4.5.1."
@@ -629,6 +650,19 @@ export const PAYLOAD_SCHEMA = {
           "type": "boolean",
           "default": false,
           "description": "True when `payload.createContext` was honoured and the maintainer provisioned the target context inline. False when the context already existed (or when `createContext` was omitted / false)."
+        },
+        "context": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The context the integration was provisioned into — `payload.context` verbatim when it was sent, otherwise the one \"Context inference\" resolved. Present so a producer that omitted `context` learns where it landed, rather than re-deriving it from its own view of the maintainer's layout and being wrong in exactly the deployments the inference rules exist for. Absent from maintainers that predate this member."
+        },
+        "adminScope": {
+          "type": "string",
+          "enum": [
+            "context",
+            "unrestricted"
+          ],
+          "description": "The scope of the ACL entry the maintainer actually wrote for `adminDid`. Echoed rather than assumed: a maintainer that does not implement `payload.adminScope` ignores an `unrestricted` ask and writes a `context`-scoped entry, and a producer that read its own request back would record authority it does not have. Absent from maintainers that predate this member, which a producer MUST read as `context`."
         }
       }
     },
@@ -977,6 +1011,19 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           "type": "boolean",
           "default": false,
           "description": "True when `payload.createContext` was honoured and the maintainer provisioned the target context inline. False when the context already existed (or when `createContext` was omitted / false)."
+        },
+        "context": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The context the integration was provisioned into — `payload.context` verbatim when it was sent, otherwise the one \"Context inference\" resolved. Present so a producer that omitted `context` learns where it landed, rather than re-deriving it from its own view of the maintainer's layout and being wrong in exactly the deployments the inference rules exist for. Absent from maintainers that predate this member."
+        },
+        "adminScope": {
+          "type": "string",
+          "enum": [
+            "context",
+            "unrestricted"
+          ],
+          "description": "The scope of the ACL entry the maintainer actually wrote for `adminDid`. Echoed rather than assumed: a maintainer that does not implement `payload.adminScope` ignores an `unrestricted` ask and writes a `context`-scoped entry, and a producer that read its own request back would record authority it does not have. Absent from maintainers that predate this member, which a producer MUST read as `context`."
         }
       }
     },