@sourcey/catalog-verifier 1.1.4 → 1.1.6

package/dist/modules/agent-readiness-engine/src/path.js

@@ -0,0 +1,308 @@
+import { compareInstants } from "provenry/primitives";
+import { AGENT_READINESS_STEPS, } from "../../../contracts/agent-readiness/src/index.js";
+const MAXIMUM_EVIDENCE = 32;
+/** Facts that name an interface an agent can call; others (metadata, registration) do not. */
+const NAMING_FACTS = new Set([
+    "mcp_endpoint",
+    "ard_entry",
+    "api_catalog_link",
+    "openapi_server",
+    "oauth_protected_resource",
+]);
+/**
+ * The Operate path a profile's runs establish: one outcome per step, each
+ * resting on entries of the runs. The latest run decides every step; earlier
+ * runs count only to reproduce a refusal, the one way a step is `blocked`.
+ * Documentation never enters: only exchanges, discovery attempts, recorded
+ * credentials and recorded human steps.
+ */
+export function evaluatePath(input) {
+    const runs = [...input.runs].sort((left, right) => compareInstants(left.finished_at, right.finished_at) ||
+        (left.run_digest < right.run_digest ? -1 : 1));
+    const current = runs.at(-1);
+    if (!current)
+        throw new Error("A path needs at least one run.");
+    const { job, binding } = input;
+    const succeeded = (run) => run.assertions.length === job.assertions.length &&
+        job.assertions.every(({ name }) => run.assertions.some(({ assertion, holds }) => assertion === name && holds));
+    const ok = succeeded(current);
+    const jobEvidence = exchangeEvidence(current, (entry) => entry.purpose === "job");
+    const refusal = (purpose) => reproducedRefusal(runs, purpose, input.policy.blocked);
+    const jobRefusal = ok ? null : refusal("job");
+    const jobStep = (() => {
+        if (ok)
+            return result("job", "machine", null, jobEvidence);
+        if (jobRefusal && jobRefusal.status !== 402) {
+            return result("job", "blocked", null, jobRefusal.evidence);
+        }
+        return notAssessed("job");
+    })();
+    const usedRoles = [...new Set(binding.calls.flatMap(({ credentials }) => credentials))];
+    const delegationStep = (() => {
+        if (binding.delegation.kind === "none") {
+            return ok && usedRoles.length === 0
+                ? result("delegation", "not_applicable", null, jobEvidence)
+                : notAssessed("delegation");
+        }
+        const delegationRefusal = refusal("delegation");
+        if (delegationRefusal)
+            return result("delegation", "blocked", null, delegationRefusal.evidence);
+        // The authority the job actually carried: the handles on its own requests.
+        const carried = new Set(current.exchanges.flatMap((entry) => entry.purpose === "job" && entry.role === "request"
+            ? entry.record.request.credentials.map(({ handle_digest }) => handle_digest)
+            : []));
+        const held = current.credentials.filter(({ handle_digest }) => carried.has(handle_digest));
+        if (usedRoles.length === 0 || held.length === 0 || held.length !== carried.size) {
+            return notAssessed("delegation");
+        }
+        const evidence = held.map((source) => ({
+            kind: "credential",
+            run_digest: current.run_digest,
+            handle_digest: source.handle_digest,
+        }));
+        const issuedBy = new Set(held.flatMap(({ source }) => (source.kind === "issued" ? [source.exchange_digest] : [])));
+        evidence.push(...exchangeEvidence(current, (entry) => issuedBy.has(entry.record.exchange_digest)));
+        if (held.some(({ source }) => source.kind === "entered")) {
+            return result("delegation", "workaround", "setup", evidence);
+        }
+        return binding.delegation.kind === "oauth"
+            ? result("delegation", "approval", "setup", evidence)
+            : result("delegation", "machine", null, evidence);
+    })();
+    const payStep = (() => {
+        if (jobRefusal?.status === 402)
+            return result("pay", "blocked", null, jobRefusal.evidence);
+        if (binding.payment.kind === "none") {
+            return ok ? result("pay", "not_applicable", null, jobEvidence) : notAssessed("pay");
+        }
+        return human(current, "pay", ok ? jobEvidence : []) ?? notAssessed("pay");
+    })();
+    const confirmStep = (() => {
+        if (!ok || current.error_probe === null)
+            return notAssessed("confirm");
+        const evidence = [
+            ...jobEvidence,
+            ...exchangeEvidence(current, (entry) => entry.purpose === "error_probe"),
+        ];
+        return current.error_probe.typed
+            ? result("confirm", "machine", null, evidence)
+            : result("confirm", "workaround", "recurring", evidence);
+    })();
+    const discoverStep = (() => {
+        const { attempts, facts } = current.discovery;
+        if (attempts.length === 0)
+            return notAssessed("discover");
+        const used = binding.calls.flatMap(({ endpoint_id }) => {
+            const uri = input.endpoints.get(endpoint_id);
+            return uri ? [uri] : [];
+        });
+        const named = facts.filter((fact) => NAMING_FACTS.has(fact.fact) && used.some((uri) => namesEndpoint(fact.value, uri)));
+        const evidence = (named.length > 0 ? named.map(({ attempt_digest }) => attempt_digest) : attempts).map((attempt) => ({
+            kind: "discovery",
+            run_digest: current.run_digest,
+            attempt_digest: attempt,
+        }));
+        return named.length > 0
+            ? result("discover", "machine", null, evidence)
+            : result("discover", "workaround", "setup", evidence);
+    })();
+    const sustainStep = (() => {
+        if (binding.delegation.kind === "none") {
+            return ok ? result("sustain", "not_applicable", null, jobEvidence) : notAssessed("sustain");
+        }
+        const { rotation, revocation } = binding.sustain;
+        const handoffs = current.handoffs.flatMap((handoff, index) => handoff.step === "sustain" ? [index] : []);
+        const evidence = [
+            ...exchangeEvidence(current, (entry) => entry.purpose.startsWith("sustain_")),
+            ...handoffs.map((handoff) => ({ kind: "handoff", run_digest: current.run_digest, handoff })),
+        ];
+        const witnessed = upkeepWitnesses(current);
+        const part = (kind, purpose) => {
+            if (kind === "manual")
+                return handoffs.some((index) => current.handoffs[index]?.kind === "workaround")
+                    ? "workaround"
+                    : "not_assessed";
+            return (purpose === "sustain_rotation" ? witnessed.rotation : witnessed.revocation)
+                ? "machine"
+                : "not_assessed";
+        };
+        const parts = [
+            part(rotation.kind, "sustain_rotation"),
+            part(revocation.kind, "sustain_revocation"),
+        ];
+        if (parts.includes("not_assessed"))
+            return notAssessed("sustain");
+        return parts.includes("workaround")
+            ? result("sustain", "workaround", "recurring", evidence)
+            : result("sustain", "machine", null, evidence);
+    })();
+    return {
+        runDigest: current.run_digest,
+        steps: [discoverStep, delegationStep, payStep, jobStep, confirmStep, sustainStep].map((step) => step.outcome === "not_assessed" || step.outcome === "blocked"
+            ? step
+            : (human(current, step.step, step.evidence, step) ?? step)),
+    };
+}
+/** Accepted maintenance requests are not effects: correlate their readbacks. */
+function upkeepWitnesses(run) {
+    const at = (purpose) => run.exchanges.findIndex((entry) => entry.purpose === purpose && entry.role === "request");
+    const baselineAt = at("sustain_baseline");
+    const rotationAt = at("sustain_rotation");
+    const rotatedAt = at("sustain_rotated_probe");
+    const revokeAt = at("sustain_revocation");
+    const refusedAt = at("sustain_revoked_probe");
+    const controlAt = at("sustain_control_probe");
+    const baseline = run.exchanges[baselineAt];
+    const rotation = run.exchanges[rotationAt];
+    const rotated = run.exchanges[rotatedAt];
+    const revoke = run.exchanges[revokeAt];
+    const refused = run.exchanges[refusedAt];
+    const control = run.exchanges[controlAt];
+    const succeeded = (entry) => entry?.record.outcome === "responded" &&
+        entry.record.response.status >= 200 &&
+        entry.record.response.status <= 299;
+    const handles = (entry) => entry?.record.request.credentials.map(({ handle_digest }) => handle_digest) ?? [];
+    const sameHandles = (a, b) => {
+        const left = handles(a);
+        const right = handles(b);
+        return (left.length > 0 &&
+            left.length === right.length &&
+            left.every((handle) => right.includes(handle)));
+    };
+    const sameProbe = (a, b) => a !== undefined &&
+        b !== undefined &&
+        a.record.request.method === "GET" &&
+        b.record.request.method === "GET" &&
+        a.record.request.url === b.record.request.url &&
+        a.record.request.body === null &&
+        b.record.request.body === null;
+    const issued = handles(rotated).length > 0 &&
+        handles(rotated).every((handle) => run.credentials.some((credential) => credential.handle_digest === handle &&
+            credential.source.kind === "issued" &&
+            credential.source.exchange_digest === rotation?.record.exchange_digest));
+    const renewed = baselineAt >= 0 &&
+        baselineAt < rotationAt &&
+        rotationAt < rotatedAt &&
+        succeeded(baseline) &&
+        succeeded(rotation) &&
+        succeeded(rotated) &&
+        sameProbe(baseline, rotated) &&
+        issued &&
+        handles(rotated).every((handle) => !handles(baseline).includes(handle));
+    const activeAt = rotatedAt >= 0 ? rotatedAt : baselineAt;
+    const active = run.exchanges[activeAt];
+    const revoked = activeAt >= 0 &&
+        activeAt < revokeAt &&
+        revokeAt < refusedAt &&
+        refusedAt < controlAt &&
+        succeeded(active) &&
+        succeeded(revoke) &&
+        succeeded(control) &&
+        refused?.record.outcome === "responded" &&
+        [401, 403].includes(refused.record.response.status) &&
+        sameHandles(active, refused) &&
+        sameProbe(active, refused) &&
+        sameProbe(refused, control) &&
+        handles(control).length > 0 &&
+        handles(control).every((handle) => !handles(refused).includes(handle));
+    return { rotation: renewed, revocation: revoked };
+}
+/** A listing no binding has run: every step not assessed, so no letter. */
+export function unexercisedPath() {
+    return AGENT_READINESS_STEPS.map(notAssessed);
+}
+/**
+ * Every human step the runner recorded at `step`. A workaround dominates
+ * approval, and recurrence is decided among handoffs of that outcome: a
+ * recurring consent must not turn a one-time mechanical setup into recurring
+ * work. All handoffs remain evidence, independent of their input order.
+ */
+function human(run, step, evidence, inferred) {
+    const handoffs = run.handoffs.flatMap((handoff, index) => handoff.step === step ? [{ handoff, index }] : []);
+    if (handoffs.length === 0)
+        return null;
+    const kind = inferred?.outcome === "workaround" ||
+        handoffs.some(({ handoff }) => handoff.kind === "workaround")
+        ? "workaround"
+        : "approval";
+    const timing = (inferred?.outcome === kind && inferred.timing === "recurring") ||
+        handoffs.some(({ handoff }) => handoff.kind === kind && handoff.timing === "recurring")
+        ? "recurring"
+        : "setup";
+    return result(step, kind, timing, [
+        ...evidence,
+        ...handoffs
+            .filter(({ index }) => !evidence.some((entry) => entry.kind === "handoff" &&
+            entry.run_digest === run.run_digest &&
+            entry.handoff === index))
+            .map(({ index }) => ({ kind: "handoff", run_digest: run.run_digest, handoff: index })),
+    ]);
+}
+/**
+ * A refusal reproduced across runs: the latest run and earlier ones refused at
+ * `purpose` with the same status from the policy's list, at least the policy's
+ * interval apart, each time holding authority the same run proved valid (the
+ * same credentials succeeded on another exchange) or needing none.
+ */
+function reproducedRefusal(runs, purpose, rule) {
+    const refusals = runs.map((run) => {
+        const refused = run.exchanges.find((entry) => entry.purpose === purpose &&
+            entry.record.outcome === "responded" &&
+            rule.statuses.includes(entry.record.response.status));
+        if (refused?.record.outcome !== "responded")
+            return null;
+        const credentials = refused.record.request.credentials.map(({ handle_digest }) => handle_digest);
+        const succeeded = (entry) => entry.record.outcome === "responded" &&
+            entry.record.response.status >= 200 &&
+            entry.record.response.status <= 299;
+        // Authority is proved valid by the run itself: the service issued it in this
+        // run, or it succeeded on another exchange of this run.
+        const proved = (handle) => run.credentials.some(({ handle_digest, source }) => handle_digest === handle &&
+            source.kind === "issued" &&
+            run.exchanges.some((entry) => entry.record.exchange_digest === source.exchange_digest && succeeded(entry))) ||
+            run.exchanges.some((entry) => entry !== refused &&
+                succeeded(entry) &&
+                entry.record.request.credentials.some(({ handle_digest }) => handle_digest === handle));
+        const valid = credentials.every(proved);
+        return valid ? { run, entry: refused, status: refused.record.response.status } : null;
+    });
+    const latest = refusals.at(-1);
+    if (!latest)
+        return null;
+    const same = refusals.filter((refusal) => refusal?.status === latest.status);
+    const first = same[0];
+    if (!first ||
+        same.length < rule.attempts ||
+        Date.parse(latest.run.finished_at) - Date.parse(first.run.finished_at) <
+            rule.minimum_interval_seconds * 1_000) {
+        return null;
+    }
+    return {
+        status: latest.status,
+        evidence: same.slice(-MAXIMUM_EVIDENCE).map(({ run, entry }) => ({
+            kind: "exchange",
+            run_digest: run.run_digest,
+            exchange_digest: entry.record.exchange_digest,
+        })),
+    };
+}
+function exchangeEvidence(run, include) {
+    return run.exchanges.filter(include).map((entry) => ({
+        kind: "exchange",
+        run_digest: run.run_digest,
+        exchange_digest: entry.record.exchange_digest,
+    }));
+}
+/** A descriptor names an endpoint when it gives its exact URI or a base the URI sits under. */
+function namesEndpoint(value, uri) {
+    const base = value.replace(/\/+$/u, "");
+    const endpoint = uri.replace(/\/+$/u, "");
+    return endpoint === base || endpoint.startsWith(`${base}/`);
+}
+function result(step, outcome, timing, evidence) {
+    return { step, outcome, timing, evidence: evidence.slice(0, MAXIMUM_EVIDENCE) };
+}
+function notAssessed(step) {
+    return { step, outcome: "not_assessed", timing: null, evidence: [] };
+}
+//# sourceMappingURL=path.js.map

package/dist/modules/agent-readiness-engine/src/path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAe,MAAM,qBAAqB,CAAC;AAEnE,OAAO,EACL,qBAAqB,GAOtB,MAAM,iDAAiD,CAAC;AAMzD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,8FAA8F;AAC9F,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,cAAc;IACd,WAAW;IACX,kBAAkB;IAClB,gBAAgB;IAChB,0BAA0B;CAC3B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAO5B;IACC,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAC/B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC;QACpD,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChD,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,SAAS,GAAG,CAAC,GAA4B,EAAE,EAAE,CACjD,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,MAAM;QAC/C,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAChC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,CAC3E,CAAC;IACJ,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,CAAC,OAA+B,EAAE,EAAE,CAClD,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEzD,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,CAAC,GAA6B,EAAE;QAC9C,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,cAAc,GAAG,CAAC,GAA6B,EAAE;QACrD,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACvC,OAAO,EAAE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBACjC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,CAAC;gBAC3D,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,iBAAiB;YAAE,OAAO,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAChG,2EAA2E;QAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAClC,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YACjD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC;YAC5E,CAAC,CAAC,EAAE,CACP,CACF,CAAC;QACF,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QAC3F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;YAChF,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,QAAQ,GAAe,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACzF,CAAC;QACF,QAAQ,CAAC,IAAI,CACX,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CACpF,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;YACzD,OAAO,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO;YACxC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC;YACrD,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,OAAO,GAAG,CAAC,GAA6B,EAAE;QAC9C,IAAI,UAAU,EAAE,MAAM,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC3F,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,WAAW,GAAG,CAAC,GAA6B,EAAE;QAClD,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI;YAAE,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG;YACf,GAAG,WAAW;YACd,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,aAAa,CAAC;SACzE,CAAC;QACF,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK;YAC9B,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC;YAC9C,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,YAAY,GAAG,CAAC,GAA6B,EAAE;QACnD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;YACrD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC7C,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CACxB,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC5F,CAAC;QACF,MAAM,QAAQ,GAAG,CACf,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAChF,CAAC,GAAG,CACH,CAAC,OAAO,EAAY,EAAE,CAAC,CAAC;YACtB,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,cAAc,EAAE,OAAO;SACxB,CAAC,CACH,CAAC;QACF,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC;YAC/C,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,WAAW,GAAG,CAAC,GAA6B,EAAE;QAClD,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC3D,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAC1C,CAAC;QACF,MAAM,QAAQ,GAAe;YAC3B,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC7E,GAAG,QAAQ,CAAC,GAAG,CACb,CAAC,OAAO,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CACtF;SACF,CAAC;QACF,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,CACX,IAAY,EACZ,OAAkD,EACP,EAAE;YAC7C,IAAI,IAAI,KAAK,QAAQ;gBACnB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,YAAY,CAAC;oBAC7E,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,cAAc,CAAC;YACrB,OAAO,CAAC,OAAO,KAAK,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;gBACjF,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,cAAc,CAAC;QACrB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG;YACZ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,oBAAoB,CAAC;SAC5C,CAAC;QACF,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;YACjC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC;YACxD,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,UAAoB;QACvC,KAAK,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC7F,IAAI,CAAC,OAAO,KAAK,cAAc,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAC3D,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,CAC7D;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,eAAe,CAAC,GAA4B;IACnD,MAAM,EAAE,GAAG,CAAC,OAA+B,EAAE,EAAE,CAC7C,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,EAAE,CAAC,oBAAoB,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,CAAC,KAA8B,EAAE,EAAE,CACnD,KAAK,EAAE,MAAM,CAAC,OAAO,KAAK,WAAW;QACrC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG;QACnC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC;IACtC,MAAM,OAAO,GAAG,CAAC,KAA8B,EAAE,EAAE,CACjD,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IACpF,MAAM,WAAW,GAAG,CAAC,CAA0B,EAAE,CAA0B,EAAE,EAAE;QAC7E,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,OAAO,CACL,IAAI,CAAC,MAAM,GAAG,CAAC;YACf,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC5B,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC/C,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,CAA0B,EAAE,CAA0B,EAAE,EAAE,CAC3E,CAAC,KAAK,SAAS;QACf,CAAC,KAAK,SAAS;QACf,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK;QACjC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK;QACjC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG;QAC7C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI;QAC9B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC;IACjC,MAAM,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAChC,GAAG,CAAC,WAAW,CAAC,IAAI,CAClB,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,aAAa,KAAK,MAAM;YACnC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YACnC,UAAU,CAAC,MAAM,CAAC,eAAe,KAAK,QAAQ,EAAE,MAAM,CAAC,eAAe,CACzE,CACF,CAAC;IACJ,MAAM,OAAO,GACX,UAAU,IAAI,CAAC;QACf,UAAU,GAAG,UAAU;QACvB,UAAU,GAAG,SAAS;QACtB,SAAS,CAAC,QAAQ,CAAC;QACnB,SAAS,CAAC,QAAQ,CAAC;QACnB,SAAS,CAAC,OAAO,CAAC;QAClB,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC5B,MAAM;QACN,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IACzD,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,OAAO,GACX,QAAQ,IAAI,CAAC;QACb,QAAQ,GAAG,QAAQ;QACnB,QAAQ,GAAG,SAAS;QACpB,SAAS,GAAG,SAAS;QACrB,SAAS,CAAC,MAAM,CAAC;QACjB,SAAS,CAAC,MAAM,CAAC;QACjB,SAAS,CAAC,OAAO,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,WAAW;QACvC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnD,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC;QAC5B,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC;QAC1B,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe;IAC7B,OAAO,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAS,KAAK,CACZ,GAA4B,EAC5B,IAAwB,EACxB,QAA6B,EAC7B,QAAmC;IAEnC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACvD,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAClD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,GACR,QAAQ,EAAE,OAAO,KAAK,YAAY;QAClC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC;QAC3D,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,UAAU,CAAC;IACjB,MAAM,MAAM,GACV,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC;QACrF,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,OAAO,CAAC;IACd,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;QAChC,GAAG,QAAQ;QACX,GAAG,QAAQ;aACR,MAAM,CACL,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CACZ,CAAC,QAAQ,CAAC,IAAI,CACZ,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,SAAS;YACxB,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;YACnC,KAAK,CAAC,OAAO,KAAK,KAAK,CAC1B,CACJ;aACA,GAAG,CACF,CAAC,EAAE,KAAK,EAAE,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAC3F;KACJ,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CACxB,IAAwC,EACxC,OAA+B,EAC/B,IAAqC;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAChC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,KAAK,OAAO;YACzB,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,WAAW;YACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CACvD,CAAC;QACF,IAAI,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CACxD,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CACrC,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,KAAkB,EAAE,EAAE,CACvC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,WAAW;YACpC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG;YACnC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC;QACtC,6EAA6E;QAC7E,wDAAwD;QACxD,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAChC,GAAG,CAAC,WAAW,CAAC,IAAI,CAClB,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5B,aAAa,KAAK,MAAM;YACxB,MAAM,CAAC,IAAI,KAAK,QAAQ;YACxB,GAAG,CAAC,SAAS,CAAC,IAAI,CAChB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,eAAe,IAAI,SAAS,CAAC,KAAK,CAAC,CACvF,CACJ;YACD,GAAG,CAAC,SAAS,CAAC,IAAI,CAChB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,OAAO;gBACjB,SAAS,CAAC,KAAK,CAAC;gBAChB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,KAAK,MAAM,CAAC,CACzF,CAAC;QACJ,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAC1B,CAAC,OAAO,EAA0C,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CACvF,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IACE,CAAC,KAAK;QACN,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;YACpE,IAAI,CAAC,wBAAwB,GAAG,KAAK,EACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/D,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe;SAC9C,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,GAA4B,EAC5B,OAAwC;IAExC,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe;KAC9C,CAAC,CAAC,CAAC;AACN,CAAC;AAED,+FAA+F;AAC/F,SAAS,aAAa,CAAC,KAAa,EAAE,GAAW;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,MAAM,CACb,IAAwB,EACxB,OAA4C,EAC5C,MAA0C,EAC1C,QAA6B;IAE7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,WAAW,CAAC,IAAwB;IAC3C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACvE,CAAC"}

package/dist/modules/agent-readiness-engine/src/rate.d.ts

@@ -0,0 +1,23 @@
+import type { AgentReadinessJobBinding, AgentReadinessOperateLetter, AgentReadinessStep, AgentReadinessStepResult } from "../../../contracts/agent-readiness/src/index.js";
+import type { AgentReadinessPolicy } from "../../../contracts/agent-readiness/src/operate-policy.js";
+export interface OperateRating {
+    /** Null shows the dash: the job has not been exercised, or no letter's coverage is met. */
+    readonly letter: AgentReadinessOperateLetter | null;
+    /** Steps not yet assessed, in path order. */
+    readonly missing: readonly AgentReadinessStep[];
+}
+/**
+ * The Operate letter of a path, by the policy's rules: a blocked Delegation or
+ * Pay is D and a blocked Job is F; otherwise the job must have been exercised,
+ * and the first letter, best first, whose condition and coverage both hold is
+ * the letter. A lower letter is never inferred: each asserts a recurring
+ * workaround that would have to be observed.
+ */
+export declare function rateOperate(policy: Pick<AgentReadinessPolicy, "letters">, steps: readonly AgentReadinessStepResult[]): OperateRating;
+/**
+ * The Onboard level the Operate path alone establishes: 1 when the exercised
+ * job needed no account (no credential, and no payment or payment per call).
+ * Levels 2 to 6 come only from onboarding runs; otherwise not yet assessed.
+ */
+export declare function onboardLevelFromOperate(binding: Pick<AgentReadinessJobBinding, "payment">, steps: readonly AgentReadinessStepResult[]): number | null;
+//# sourceMappingURL=rate.d.ts.map

package/dist/modules/agent-readiness-engine/src/rate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate.d.ts","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/rate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,iDAAiD,CAAC;AAEzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0DAA0D,CAAC;AAErG,MAAM,WAAW,aAAa;IAC5B,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,EAAE,2BAA2B,GAAG,IAAI,CAAC;IACpD,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACjD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,CAAC,EAC7C,KAAK,EAAE,SAAS,wBAAwB,EAAE,GACzC,aAAa,CAkCf;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,SAAS,CAAC,EAClD,KAAK,EAAE,SAAS,wBAAwB,EAAE,GACzC,MAAM,GAAG,IAAI,CAQf"}

package/dist/modules/agent-readiness-engine/src/rate.js

@@ -0,0 +1,57 @@
+import { AGENT_READINESS_STEPS } from "../../../contracts/agent-readiness/src/index.js";
+/**
+ * The Operate letter of a path, by the policy's rules: a blocked Delegation or
+ * Pay is D and a blocked Job is F; otherwise the job must have been exercised,
+ * and the first letter, best first, whose condition and coverage both hold is
+ * the letter. A lower letter is never inferred: each asserts a recurring
+ * workaround that would have to be observed.
+ */
+export function rateOperate(policy, steps) {
+    const outcome = new Map(steps.map((step) => [step.step, step]));
+    if (outcome.size !== AGENT_READINESS_STEPS.length) {
+        throw new Error("A path has exactly one result per step.");
+    }
+    const missing = AGENT_READINESS_STEPS.filter((step) => outcome.get(step)?.outcome === "not_assessed");
+    const blocked = (step) => outcome.get(step)?.outcome === "blocked";
+    if (blocked("delegation") || blocked("pay"))
+        return { letter: "D", missing };
+    if (blocked("job"))
+        return { letter: "F", missing };
+    const job = outcome.get("job")?.outcome;
+    if (job !== "machine" && job !== "approval" && job !== "workaround") {
+        return { letter: null, missing };
+    }
+    const workarounds = steps.filter(({ outcome }) => outcome === "workaround");
+    const recurring = workarounds
+        .filter(({ timing }) => timing === "recurring")
+        .map(({ step }) => step);
+    const setup = workarounds.filter(({ timing }) => timing === "setup").length;
+    for (const rule of policy.letters) {
+        const { condition } = rule;
+        const holds = (condition.workarounds_allowed || workarounds.length === 0) &&
+            recurring.every((step) => condition.recurring_allowed_in.includes(step)) &&
+            (condition.recurring_required_in === null ||
+                recurring.some((step) => condition.recurring_required_in?.includes(step))) &&
+            setup >= condition.setup_workarounds.minimum &&
+            (condition.setup_workarounds.maximum === null ||
+                setup <= condition.setup_workarounds.maximum) &&
+            rule.coverage.every((step) => outcome.get(step)?.outcome !== "not_assessed");
+        if (holds)
+            return { letter: rule.letter, missing };
+    }
+    return { letter: null, missing };
+}
+/**
+ * The Onboard level the Operate path alone establishes: 1 when the exercised
+ * job needed no account (no credential, and no payment or payment per call).
+ * Levels 2 to 6 come only from onboarding runs; otherwise not yet assessed.
+ */
+export function onboardLevelFromOperate(binding, steps) {
+    const outcome = new Map(steps.map((step) => [step.step, step.outcome]));
+    const exercised = ["machine", "approval", "workaround"].includes(outcome.get("job") ?? "");
+    const accountless = outcome.get("delegation") === "not_applicable";
+    const payment = outcome.get("pay") === "not_applicable" ||
+        (binding.payment.kind === "per_call" && outcome.get("pay") === "machine");
+    return exercised && accountless && payment ? 1 : null;
+}
+//# sourceMappingURL=rate.js.map

package/dist/modules/agent-readiness-engine/src/rate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate.js","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/rate.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AAUxF;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,MAA6C,EAC7C,KAA0C;IAE1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,MAAM,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAC1C,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,cAAc,CACxD,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,IAAwB,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC;IACvF,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC7E,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,WAAW;SAC1B,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC;SAC9C,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAC3B,MAAM,KAAK,GACT,CAAC,SAAS,CAAC,mBAAmB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC;YAC3D,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxE,CAAC,SAAS,CAAC,qBAAqB,KAAK,IAAI;gBACvC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,qBAAqB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5E,KAAK,IAAI,SAAS,CAAC,iBAAiB,CAAC,OAAO;YAC5C,CAAC,SAAS,CAAC,iBAAiB,CAAC,OAAO,KAAK,IAAI;gBAC3C,KAAK,IAAI,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC;YAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,cAAc,CAAC,CAAC;QAC/E,IAAI,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAkD,EAClD,KAA0C;IAE1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,gBAAgB,CAAC;IACnE,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,gBAAgB;QACvC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;IAC5E,OAAO,SAAS,IAAI,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC"}

package/dist/modules/agent-readiness-engine/src/run.d.ts

@@ -0,0 +1,9 @@
+import type { z } from "zod";
+import { type AgentReadinessRunRecord, type AgentReadinessRunSummary, agentReadinessRunRecordCoreSchema } from "../../../contracts/agent-readiness/src/index.js";
+/** A run record with its digest, checked as every reader checks it. */
+export declare function sealAgentReadinessRunRecord(core: z.input<typeof agentReadinessRunRecordCoreSchema>): AgentReadinessRunRecord;
+/** A published run record, only when its digest closes its content. */
+export declare function verifyAgentReadinessRunRecord(value: unknown): AgentReadinessRunRecord;
+/** The run as a card shows it: its reads, each request and what came back, what held. */
+export declare function summarizeAgentReadinessRun(record: AgentReadinessRunRecord): AgentReadinessRunSummary;
+//# sourceMappingURL=run.d.ts.map

package/dist/modules/agent-readiness-engine/src/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/run.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,iCAAiC,EAGlC,MAAM,iDAAiD,CAAC;AAEzD,uEAAuE;AACvE,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,GACtD,uBAAuB,CAGzB;AAED,uEAAuE;AACvE,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAOrF;AAED,yFAAyF;AACzF,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,uBAAuB,GAC9B,wBAAwB,CA2B1B"}

package/dist/modules/agent-readiness-engine/src/run.js

@@ -0,0 +1,45 @@
+import { digest } from "provenry/primitives";
+import { agentReadinessRunRecordCoreSchema, agentReadinessRunRecordSchema, agentReadinessRunSummarySchema, } from "../../../contracts/agent-readiness/src/index.js";
+/** A run record with its digest, checked as every reader checks it. */
+export function sealAgentReadinessRunRecord(core) {
+    const parsed = agentReadinessRunRecordCoreSchema.parse(core);
+    return agentReadinessRunRecordSchema.parse({ ...parsed, run_digest: digest(parsed) });
+}
+/** A published run record, only when its digest closes its content. */
+export function verifyAgentReadinessRunRecord(value) {
+    const record = agentReadinessRunRecordSchema.parse(value);
+    const { run_digest, ...core } = record;
+    if (digest(agentReadinessRunRecordCoreSchema.parse(core)) !== run_digest) {
+        throw new Error("Agent Readiness run record digest does not match its content.");
+    }
+    return record;
+}
+/** The run as a card shows it: its reads, each request and what came back, what held. */
+export function summarizeAgentReadinessRun(record) {
+    return agentReadinessRunSummarySchema.parse({
+        started_at: record.started_at,
+        finished_at: record.finished_at,
+        discovery_reads: record.discovery.attempts.length,
+        exchanges: record.exchanges.map(({ purpose, role, record: exchange }) => ({
+            purpose,
+            role,
+            method: exchange.request.method,
+            url: exchange.request.url,
+            started_at: exchange.started_at,
+            finished_at: exchange.finished_at,
+            response: exchange.outcome === "responded"
+                ? {
+                    status: exchange.response.status,
+                    media_type: exchange.response.body.media_type,
+                    content_bytes: exchange.response.body.content_bytes,
+                    content_digest: exchange.response.body.content_digest,
+                }
+                : null,
+            transport_error: exchange.outcome === "transport_error" ? exchange.reason : null,
+            exchange_digest: exchange.exchange_digest,
+        })),
+        assertions: record.assertions,
+        error_probe: record.error_probe,
+    });
+}
+//# sourceMappingURL=run.js.map

package/dist/modules/agent-readiness-engine/src/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,OAAO,EAGL,iCAAiC,EACjC,6BAA6B,EAC7B,8BAA8B,GAC/B,MAAM,iDAAiD,CAAC;AAEzD,uEAAuE;AACvE,MAAM,UAAU,2BAA2B,CACzC,IAAuD;IAEvD,MAAM,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,6BAA6B,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACvC,IAAI,MAAM,CAAC,iCAAiC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,0BAA0B,CACxC,MAA+B;IAE/B,OAAO,8BAA8B,CAAC,KAAK,CAAC;QAC1C,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM;QACjD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YACxE,OAAO;YACP,IAAI;YACJ,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;YAC/B,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG;YACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EACN,QAAQ,CAAC,OAAO,KAAK,WAAW;gBAC9B,CAAC,CAAC;oBACE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;oBAChC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU;oBAC7C,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa;oBACnD,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc;iBACtD;gBACH,CAAC,CAAC,IAAI;YACV,eAAe,EAAE,QAAQ,CAAC,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAChF,eAAe,EAAE,QAAQ,CAAC,eAAe;SAC1C,CAAC,CAAC;QACH,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC;AACL,CAAC"}

package/dist/modules/agent-readiness-engine/src/templates.d.ts

@@ -0,0 +1,21 @@
+/** What a template may read: job inputs, the run's nonce, sink addresses and earlier calls' JSON. */
+export interface TemplateContext {
+    readonly inputs: Readonly<Record<string, string | number | boolean>>;
+    readonly nonce: string;
+    readonly sinks: Readonly<Record<string, string>>;
+    readonly calls: ReadonlyMap<string, unknown>;
+}
+/** A template the run cannot fill: residue of this run, never a fact about the service. */
+export declare class TemplateError extends Error {
+    readonly name = "TemplateError";
+}
+/** A string template filled in; every placeholder must name a scalar the run holds. */
+export declare function resolveTemplate(template: string, context: TemplateContext): string;
+/**
+ * A JSON template filled in. A string that is exactly one placeholder takes the
+ * referenced value with its JSON type; any other string interpolates scalars.
+ */
+export declare function resolveJsonTemplate(value: unknown, context: TemplateContext): unknown;
+/** The value an RFC 6901 pointer names, or undefined. */
+export declare function valueAtPointer(document: unknown, pointer: string): unknown;
+//# sourceMappingURL=templates.d.ts.map

package/dist/modules/agent-readiness-engine/src/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/templates.ts"],"names":[],"mappings":"AAEA,qGAAqG;AACrG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IACrE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED,2FAA2F;AAC3F,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAkB,IAAI,mBAAmB;CAC1C;AAID,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,MAAM,CAWlF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAerF;AAiCD,yDAAyD;AACzD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAe1E"}

package/dist/modules/agent-readiness-engine/src/templates.js

@@ -0,0 +1,89 @@
+import { agentReadinessTemplateReferences } from "../../../contracts/agent-readiness/src/index.js";
+/** A template the run cannot fill: residue of this run, never a fact about the service. */
+export class TemplateError extends Error {
+    name = "TemplateError";
+}
+const WHOLE = /^\{\{([^{}]+)\}\}$/u;
+/** A string template filled in; every placeholder must name a scalar the run holds. */
+export function resolveTemplate(template, context) {
+    const references = agentReadinessTemplateReferences(template);
+    if (references === null)
+        throw new TemplateError("The template is not valid.");
+    let index = 0;
+    return template.replace(/\{\{[^{}]+\}\}/gu, () => {
+        const value = referenced(references[index++], context);
+        if (value === null || typeof value === "object") {
+            throw new TemplateError("Only a scalar can be interpolated into text.");
+        }
+        return String(value);
+    });
+}
+/**
+ * A JSON template filled in. A string that is exactly one placeholder takes the
+ * referenced value with its JSON type; any other string interpolates scalars.
+ */
+export function resolveJsonTemplate(value, context) {
+    if (typeof value === "string") {
+        const references = agentReadinessTemplateReferences(value);
+        if (references?.length === 1 && WHOLE.test(value)) {
+            return referenced(references[0], context);
+        }
+        return resolveTemplate(value, context);
+    }
+    if (Array.isArray(value))
+        return value.map((item) => resolveJsonTemplate(item, context));
+    if (value !== null && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, resolveJsonTemplate(item, context)]));
+    }
+    return value;
+}
+function referenced(reference, context) {
+    switch (reference.kind) {
+        case "nonce":
+            return context.nonce;
+        case "input": {
+            if (!Object.hasOwn(context.inputs, reference.name)) {
+                throw new TemplateError(`The job has no input ${reference.name}.`);
+            }
+            return context.inputs[reference.name];
+        }
+        case "sink": {
+            const address = context.sinks[reference.name];
+            if (address === undefined)
+                throw new TemplateError(`No sink ${reference.name} is bound.`);
+            return address;
+        }
+        case "call": {
+            if (!context.calls.has(reference.callId)) {
+                throw new TemplateError(`Call ${reference.callId} has no JSON response to read.`);
+            }
+            const value = valueAtPointer(context.calls.get(reference.callId), reference.pointer);
+            if (value === undefined) {
+                throw new TemplateError(`Call ${reference.callId} has nothing at ${reference.pointer}.`);
+            }
+            return value;
+        }
+    }
+}
+/** The value an RFC 6901 pointer names, or undefined. */
+export function valueAtPointer(document, pointer) {
+    if (pointer === "")
+        return document;
+    let value = document;
+    for (const raw of pointer.slice(1).split("/")) {
+        const token = raw.replaceAll("~1", "/").replaceAll("~0", "~");
+        if (Array.isArray(value)) {
+            if (!/^(?:0|[1-9][0-9]*)$/u.test(token))
+                return undefined;
+            value = value[Number(token)];
+        }
+        else if (value !== null && typeof value === "object" && Object.hasOwn(value, token)) {
+            value = value[token];
+        }
+        else {
+            return undefined;
+        }
+    }
+    return value;
+}
+//# sourceMappingURL=templates.js.map

package/dist/modules/agent-readiness-engine/src/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAC;AAUnG,2FAA2F;AAC3F,MAAM,OAAO,aAAc,SAAQ,KAAK;IACpB,IAAI,GAAG,eAAe,CAAC;CAC1C;AAED,MAAM,KAAK,GAAG,qBAAqB,CAAC;AAEpC,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAwB;IACxE,MAAM,UAAU,GAAG,gCAAgC,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,UAAU,KAAK,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;IAC/E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,CAAU,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,aAAa,CAAC,8CAA8C,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,OAAwB;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,UAAU,EAAE,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAU,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACzF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CACjB,SAAmF,EACnF,OAAwB;IAExB,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,KAAK,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,aAAa,CAAC,wBAAwB,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;YACrE,CAAC;YACD,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,MAAM,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,aAAa,CAAC,WAAW,SAAS,CAAC,IAAI,YAAY,CAAC,CAAC;YAC1F,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,aAAa,CAAC,QAAQ,SAAS,CAAC,MAAM,gCAAgC,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;YACrF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,aAAa,CAAC,QAAQ,SAAS,CAAC,MAAM,mBAAmB,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAAC,QAAiB,EAAE,OAAe;IAC/D,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACpC,IAAI,KAAK,GAAG,QAAQ,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC1D,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YACtF,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}