@substrat-run/contract-tests 0.118.0 → 0.120.0

package/dist/peer-suite.js

@@ -0,0 +1,357 @@
+/**
+ * The peer door (#1706), against both adapters — one vertical of a tenant calling another's
+ * operations through the platform, as `{ vertical, scope }`.
+ *
+ * Every "this is safe because…" the door claims is a test here, next to its positive twin: the
+ * same call as a principal who holds the key, or the same peer on the call it IS allowed, so a
+ * refusal cannot pass by refusing everything.
+ *
+ * - **Declared, or nothing.** The keys a peer holds are exactly the ones the target's manifest
+ *   declared (`peers`), seated at provisioning; an undeclared vertical, and an operation off the
+ *   allowlist, are refused at the door (`forbidden`, no K-35 row). A receive-only peer
+ *   (`operations: []`) holds its key and invokes nothing.
+ * - **On the spine as itself.** Every event and every denial names `{ vertical, scope }`.
+ * - **Revocation is the next call.** The per-(scope, peer) kill switch refuses a stub obtained
+ *   before it, answers `peerCovers` with nothing held, and survives a re-provision.
+ * - **Tenant-bound.** The door fails closed on a (tenant, scope) pair that does not match, and
+ *   the resolution only ever searches the tenant it is given.
+ * - **No person crosses.** The door takes no principal; a peer cannot mint a capability (the verb
+ *   that needs a person to vouch for it); its idempotency keys are its own instance's.
+ *
+ * The caller's LIVENESS (a live primary instance of its vertical) is the platform's gate, not the
+ * door's — the local broker's suite (adapter-sqlite) and the router hold it.
+ */
+import { describe, it, expect, beforeAll, afterAll } from 'vitest';
+import { errorCodeOf, permissionKey, platformActorId, principalId, scopeId, tenantId, } from '@substrat-run/contracts';
+import { ulid } from '@substrat-run/kernel';
+import { PEER_CALLER, PEER_LISTENER, peerMod } from './modules.js';
+const READ = permissionKey.parse('peer:read');
+const WRITE = permissionKey.parse('peer:write');
+const ADMIN = permissionKey.parse('peer:admin');
+/** The refusal a promise settles with, or `undefined` when it resolved. */
+const refusal = (p) => p.then(() => undefined, (e) => e);
+export function peerContractSuite(adapterName, makeFixture) {
+    describe(`peer door (#1706): ${adapterName}`, () => {
+        let fixture;
+        let host;
+        const staff = platformActorId.parse(ulid());
+        const t = tenantId.parse(ulid());
+        const u = tenantId.parse(ulid()); // another tenant
+        const s = scopeId.parse(ulid()); // the target instance, in t
+        const su = scopeId.parse(ulid()); // an instance in u
+        const alice = principalId.parse(ulid()); // holds every key, tenant-wide
+        const callerScope = scopeId.parse(ulid()); // the calling instance (another vertical's scope)
+        const secondCaller = scopeId.parse(ulid()); // a second instance of the same calling vertical
+        const caller = { vertical: PEER_CALLER, scope: callerScope };
+        const listener = { vertical: PEER_LISTENER, scope: scopeId.parse(ulid()) };
+        const reason = 'incident: the caller is misbehaving';
+        const asAlice = (scope = s) => host.getScope(alice, t, scope);
+        const asPeer = (c = caller, scope = s, tenant = t) => host.getVerticalScope(c, tenant, scope);
+        const outbox = async () => (await asAlice()).invoke('peer/outbox');
+        const denials = async () => (await asAlice()).invoke('peer/denials');
+        const tuples = async () => (await asAlice()).invoke('peer/tuples');
+        const covers = (vertical, keys = [READ, WRITE, ADMIN]) => host.peerCovers(t, s, vertical, keys);
+        const held = async (vertical) => (await covers(vertical)).filter((c) => c.held).map((c) => c.permission);
+        const off = (vertical = PEER_CALLER) => host.admin.revokeFromPeer(staff, { vertical, node: { tenantId: t, scopeId: s }, reason });
+        const on = (vertical = PEER_CALLER) => host.admin.restoreToPeer(staff, { vertical, node: { tenantId: t, scopeId: s }, reason: 'resolved' });
+        beforeAll(async () => {
+            fixture = await makeFixture();
+            host = fixture.host;
+            host.registerModule(peerMod);
+            for (const [tenant, scope, slug] of [
+                [t, s, 'peer-t'],
+                [u, su, 'peer-u'],
+            ]) {
+                await host.admin.createTenant(staff, { id: tenant, slug: `${slug}-${tenant.slice(-8).toLowerCase()}`, name: slug });
+                await host.admin.grantEntitlement(staff, tenant, 'peer');
+                await host.provisionScope(staff, { tenantId: tenant, scopeId: scope });
+                await host.admin.activateScope(staff, tenant, scope);
+                await host.admin.defineRole(staff, tenant, {
+                    key: 'owner',
+                    permissions: [READ, WRITE, ADMIN],
+                    source: 'vertical',
+                });
+            }
+            await host.admin.assignRole(staff, { principalId: alice, roleKey: 'owner', node: { tenantId: t, scopeId: null } });
+        });
+        afterAll(async () => {
+            await fixture.cleanup();
+        });
+        describe('declared, or nothing', () => {
+            it('provisioning seats exactly the declared keys, per peer, and nothing for an undeclared one', async () => {
+                const live = (await tuples())
+                    .filter((r) => r.revoked_at === null)
+                    .map((r) => `${r.subject} ${r.relation} ${r.object}`);
+                expect(live.sort()).toEqual([
+                    `vertical:${PEER_CALLER} granted:peer:read scope:${s}`,
+                    `vertical:${PEER_CALLER} granted:peer:write scope:${s}`,
+                    `vertical:${PEER_LISTENER} granted:peer:read scope:${s}`,
+                ].sort());
+            });
+            it('an allowlisted operation runs as the peer — the event names { vertical, scope }', async () => {
+                const peer = await asPeer();
+                await expect(peer.invoke('peer/note', { id: 'n-peer', body: 'from the board room' })).resolves.toEqual({
+                    id: 'n-peer',
+                });
+                const row = (await outbox()).find((r) => r.entity_id === 'n-peer');
+                expect(JSON.parse(row.actor)).toEqual({ vertical: PEER_CALLER, scope: callerScope });
+                expect(row.operation).toBe('peer/note');
+                // K-34: authorized by the declared key, recorded like any other authorization.
+                expect(JSON.parse(row.authorization ?? '[]')).toEqual([expect.objectContaining({ permission: WRITE })]);
+            });
+            it('twin: the same write by a person is recorded as that person', async () => {
+                await (await asAlice()).invoke('peer/note', { id: 'n-alice', body: 'from alice' });
+                const row = (await outbox()).find((r) => r.entity_id === 'n-alice');
+                expect(JSON.parse(row.actor)).toBe(alice);
+            });
+            it('a read through a declared key sees the scope', async () => {
+                const notes = await (await asPeer()).invoke('peer/list');
+                expect(notes.map((n) => n.id)).toEqual(expect.arrayContaining(['n-alice', 'n-peer']));
+            });
+            it('an allowlisted operation checking an UNDECLARED key is a K-35 denial against the peer', async () => {
+                const err = await refusal((await asPeer()).invoke('peer/admin'));
+                expect(errorCodeOf(err)).toBe('permission_denied');
+                const row = (await denials()).find((d) => d.operation === 'peer/admin');
+                expect(JSON.parse(row.actor)).toEqual({ vertical: PEER_CALLER, scope: callerScope });
+                expect(row.permission).toBe(ADMIN);
+            });
+            it('twin: a person holding that key runs it', async () => {
+                await expect((await asAlice()).invoke('peer/admin')).resolves.toEqual({ admin: true });
+            });
+            it('an operation OFF the allowlist is refused at the door — forbidden, and no K-35 row', async () => {
+                const before = (await denials()).length;
+                const err = await refusal((await asPeer()).invoke('peer/off-list'));
+                expect(errorCodeOf(err)).toBe('forbidden');
+                expect((await denials()).length).toBe(before);
+            });
+            it('twin: a person reaches that operation', async () => {
+                await expect((await asAlice()).invoke('peer/off-list')).resolves.toEqual({ reached: true });
+            });
+            it('a vertical the target never declared is refused at the door, whatever it asks for', async () => {
+                const stranger = { vertical: 'acme/stranger', scope: callerScope };
+                for (const op of ['peer/list', 'peer/note', 'peer/off-list']) {
+                    expect(errorCodeOf(await refusal((await asPeer(stranger)).invoke(op, { id: 'x', body: 'x' })))).toBe('forbidden');
+                }
+                expect(await held('acme/stranger')).toEqual([]);
+            });
+            it('a receive-only peer (`operations: []`) holds its key and invokes nothing', async () => {
+                expect(await held(PEER_LISTENER)).toEqual([READ]);
+                for (const op of ['peer/list', 'peer/note']) {
+                    expect(errorCodeOf(await refusal((await asPeer(listener)).invoke(op, { id: 'y', body: 'y' })))).toBe('forbidden');
+                }
+            });
+            it('peerCovers answers the checker’s own view, key by key', async () => {
+                expect(await covers(PEER_CALLER)).toEqual([
+                    { permission: READ, held: true },
+                    { permission: WRITE, held: true },
+                    { permission: ADMIN, held: false },
+                ]);
+            });
+        });
+        describe('revocation is the next call: the per-(scope, peer) kill switch', () => {
+            it('OFF refuses a stub obtained BEFORE it, and every key reads as not held', async () => {
+                const early = await asPeer();
+                await expect(early.invoke('peer/list')).resolves.toBeDefined();
+                const result = await off();
+                expect(result).toMatchObject({ vertical: PEER_CALLER, calls: 'off', changed: true });
+                expect([...result.permissions].sort()).toEqual([READ, WRITE]);
+                expect(errorCodeOf(await refusal(early.invoke('peer/list')))).toBe('forbidden');
+                expect(errorCodeOf(await refusal((await asPeer()).invoke('peer/list')))).toBe('forbidden');
+                expect(await held(PEER_CALLER)).toEqual([]);
+            });
+            it('is per peer: the receive-only peer keeps its key', async () => {
+                expect(await held(PEER_LISTENER)).toEqual([READ]);
+            });
+            it('a re-provision does not seat a switched-off peer back', async () => {
+                await host.provisionScope(staff, { tenantId: t, scopeId: s });
+                expect(await held(PEER_CALLER)).toEqual([]);
+                expect(errorCodeOf(await refusal((await asPeer()).invoke('peer/list')))).toBe('forbidden');
+            });
+            it('a repeat OFF changes nothing and says so', async () => {
+                await expect(off()).resolves.toMatchObject({ calls: 'off', changed: false, permissions: [] });
+            });
+            it('restoreToPeer gives back exactly what OFF took, and the peer calls again', async () => {
+                const result = await on();
+                expect(result).toMatchObject({ vertical: PEER_CALLER, calls: 'on', changed: true });
+                expect([...result.permissions].sort()).toEqual([READ, WRITE]);
+                expect(await held(PEER_CALLER)).toEqual([READ, WRITE]);
+                await expect((await asPeer()).invoke('peer/list')).resolves.toBeDefined();
+            });
+            it('a switch for a peer the scope never held writes nothing and says not_found', async () => {
+                expect(errorCodeOf(await refusal(off('acme/stranger')))).toBe('not_found');
+                expect((await tuples()).some((r) => r.subject === 'vertical:acme/stranger')).toBe(false);
+            });
+        });
+        /**
+         * The switch's READ half (#1706) — what a tenant is shown about "which of my other apps
+         * may call into here". It must answer from the same predicate the door refuses on, or a
+         * tenant reads `on` for a peer whose next call is refused; the ordering below runs the
+         * switch and the read against each other rather than asserting the read alone.
+         */
+        describe('the status read', () => {
+            const statusOf = async (vertical) => (await host.admin.peerGrantsStatus(staff, { tenantId: t, scopeId: s })).find((p) => p.vertical === vertical);
+            it('lists every declared peer as on, with no explanation to give', async () => {
+                const all = await host.admin.peerGrantsStatus(staff, { tenantId: t, scopeId: s });
+                expect(all).toEqual([
+                    { vertical: PEER_CALLER, calls: 'on', switchedOff: null },
+                    { vertical: PEER_LISTENER, calls: 'on', switchedOff: null },
+                ]);
+            });
+            it('a peer the scope holds no row for is absent, not reported', async () => {
+                expect(await statusOf('acme/stranger')).toBeUndefined();
+            });
+            it('OFF shows as off, and names who, when and why — while the peer keeps its row', async () => {
+                await off();
+                const entry = await statusOf(PEER_CALLER);
+                expect(entry).toMatchObject({ vertical: PEER_CALLER, calls: 'off' });
+                expect(entry?.switchedOff).toMatchObject({ actor: staff, reason: expect.any(String) });
+                expect(entry?.switchedOff?.at).toEqual(expect.any(String));
+                // The read and the door agree, which is the whole point of sharing the predicate.
+                expect(errorCodeOf(await refusal((await asPeer()).invoke('peer/list')))).toBe('forbidden');
+            });
+            it('is per peer: the other one is untouched and still explains nothing', async () => {
+                expect(await statusOf(PEER_LISTENER)).toEqual({
+                    vertical: PEER_LISTENER,
+                    calls: 'on',
+                    switchedOff: null,
+                });
+            });
+            it('ON clears the explanation with the position — a stale reason is worse than none', async () => {
+                await on();
+                expect(await statusOf(PEER_CALLER)).toEqual({ vertical: PEER_CALLER, calls: 'on', switchedOff: null });
+                await expect((await asPeer()).invoke('peer/list')).resolves.toBeDefined();
+            });
+        });
+        describe('tenant-bound', () => {
+            it('the door fails closed on a scope of another tenant, named under this one', async () => {
+                // K-3's pair check — the confinement this whole door rests on, so the test pins the
+                // CODE and not merely "something threw" (#1714 review). `not_found` on both adapters:
+                // a scope of another tenant reads exactly as one that does not exist.
+                for (const refused of [refusal(asPeer(caller, su, t)), refusal(host.peerCovers(t, su, PEER_CALLER, [READ]))]) {
+                    const err = await refused;
+                    expect(errorCodeOf(err)).toBe('not_found');
+                    expect(String(err.message)).toMatch(/unknown scope/);
+                }
+            });
+            it('twin: that scope, under its own tenant, is a door like any other', async () => {
+                await expect((await asPeer(caller, su, u)).invoke('peer/list')).resolves.toEqual([]);
+            });
+        });
+        describe('no person crosses', () => {
+            it('a peer cannot mint a capability — the verb that needs a person to vouch for it', async () => {
+                const err = await refusal((await asPeer()).invoke('peer/share', { id: 'n-peer' }));
+                expect(String(err?.message)).toMatch(/only a principal may mint/);
+            });
+            it('twin: the person who holds the key mints one', async () => {
+                await expect((await asAlice()).invoke('peer/share', { id: 'n-peer' })).resolves.toMatchObject({
+                    id: expect.any(String),
+                });
+            });
+            it('every record a peer call left names the peer, never a person', async () => {
+                const peerRows = (await outbox()).filter((r) => typeof JSON.parse(r.actor) !== 'string');
+                expect(peerRows.length).toBeGreaterThan(0);
+                for (const row of peerRows)
+                    expect(JSON.parse(row.actor)).toMatchObject({ vertical: PEER_CALLER });
+                for (const d of (await denials()).filter((d) => d.operation === 'peer/admin')) {
+                    expect(JSON.parse(d.actor)).toMatchObject({ vertical: PEER_CALLER });
+                }
+            });
+            it('an idempotency key is the calling INSTANCE’s: a second instance’s same key is not a replay', async () => {
+                const first = await asPeer();
+                await first.invoke('peer/note', { id: 'idem-1', body: 'one' }, { idempotencyKey: 'k-1' });
+                // Same instance, same key, same request → a replay: nothing new is written.
+                await first.invoke('peer/note', { id: 'idem-1', body: 'one' }, { idempotencyKey: 'k-1' });
+                expect((await outbox()).filter((r) => r.entity_id === 'idem-1')).toHaveLength(1);
+                // A SECOND instance of the same vertical choosing the same key is a different caller.
+                const second = await asPeer({ vertical: PEER_CALLER, scope: secondCaller });
+                await second.invoke('peer/note', { id: 'idem-2', body: 'two' }, { idempotencyKey: 'k-1' });
+                const row = (await outbox()).find((r) => r.entity_id === 'idem-2');
+                expect(JSON.parse(row.actor)).toEqual({ vertical: PEER_CALLER, scope: secondCaller });
+            });
+        });
+    });
+}
+/**
+ * `HostAdmin.resolveVerticalInstance` (#1706) — the directory's half, against both adapters: the
+ * kernel's one rule (same tenant, primary, active, exactly one) over each adapter's own directory.
+ */
+export function verticalResolutionContractSuite(adapterName, makeFixture) {
+    describe(`vertical instance resolution (#1706): ${adapterName}`, () => {
+        let fixture;
+        let host;
+        const staff = platformActorId.parse(ulid());
+        const t = tenantId.parse(ulid());
+        const u = tenantId.parse(ulid());
+        // A vertical slug no other suite binds a scope to, so the answer is this suite's alone.
+        const slug = `acme/resolve-${t.slice(-6).toLowerCase()}`;
+        const other = `acme/other-${t.slice(-6).toLowerCase()}`;
+        const scope = async (tenant, extra = {}, activate = true) => {
+            const s = scopeId.parse(ulid());
+            await host.provisionScope(staff, { tenantId: tenant, scopeId: s, vertical: slug, ...extra });
+            if (activate)
+                await host.admin.activateScope(staff, tenant, s);
+            return s;
+        };
+        beforeAll(async () => {
+            fixture = await makeFixture();
+            host = fixture.host;
+            for (const tenant of [t, u]) {
+                await host.admin.createTenant(staff, {
+                    id: tenant,
+                    slug: `resolve-${tenant.slice(-10).toLowerCase()}`,
+                    name: 'Resolve',
+                });
+            }
+        });
+        afterAll(async () => {
+            await fixture.cleanup();
+        });
+        it('not installed: nothing of that vertical in the tenant', async () => {
+            await expect(host.admin.resolveVerticalInstance(t, slug)).resolves.toEqual({
+                outcome: 'not-installed',
+                tenantId: t,
+                vertical: slug,
+            });
+        });
+        let primary;
+        it('a preview, a fork and a still-provisioning scope are never the instance', async () => {
+            await scope(t, { kind: 'preview' });
+            const source = await scope(u); // a fork's source, in the OTHER tenant so it does not count here
+            await scope(t, { forkedFrom: source, forkedAt: new Date().toISOString() });
+            await scope(t, {}, false);
+            expect((await host.admin.resolveVerticalInstance(t, slug)).outcome).toBe('not-installed');
+        });
+        it('twin: one primary, active scope resolves — and only in its own tenant', async () => {
+            primary = await scope(t);
+            await expect(host.admin.resolveVerticalInstance(t, slug)).resolves.toEqual({
+                outcome: 'resolved',
+                instance: { tenantId: t, scopeId: primary, vertical: slug },
+            });
+            // `u` holds the fork source — a primary, active instance of the same vertical — and `t`
+            // never sees it, nor `u` the one in `t`.
+            const inU = await host.admin.resolveVerticalInstance(u, slug);
+            expect(inU.outcome).toBe('resolved');
+            if (inU.outcome === 'resolved')
+                expect(inU.instance.tenantId).toBe(u);
+        });
+        it('another vertical of the same tenant is a different question', async () => {
+            expect((await host.admin.resolveVerticalInstance(t, other)).outcome).toBe('not-installed');
+        });
+        it('a suspended instance is not a callable one', async () => {
+            await host.admin.suspendScope(staff, t, primary);
+            expect((await host.admin.resolveVerticalInstance(t, slug)).outcome).toBe('not-installed');
+            await host.admin.unsuspendScope(staff, t, primary);
+            expect((await host.admin.resolveVerticalInstance(t, slug)).outcome).toBe('resolved');
+        });
+        it('two live instances are ambiguous — refused, never guessed', async () => {
+            await scope(t);
+            await expect(host.admin.resolveVerticalInstance(t, slug)).resolves.toEqual({
+                outcome: 'ambiguous',
+                tenantId: t,
+                vertical: slug,
+                count: 2,
+            });
+        });
+    });
+}
+//# sourceMappingURL=peer-suite.js.map

package/dist/peer-suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-suite.js","sourceRoot":"","sources":["../src/peer-suite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EACL,WAAW,EACX,aAAa,EACb,eAAe,EACf,WAAW,EACX,OAAO,EACP,QAAQ,GAIT,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,IAAI,EAAkB,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEnE,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAChD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAoBhD,2EAA2E;AAC3E,MAAM,OAAO,GAAG,CAAC,CAAmB,EAAoB,EAAE,CACxD,CAAC,CAAC,IAAI,CACJ,GAAG,EAAE,CAAC,SAAS,EACf,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAClB,CAAC;AAEJ,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,WAA4C;IACjG,QAAQ,CAAC,sBAAsB,WAAW,EAAE,EAAE,GAAG,EAAE;QACjD,IAAI,OAAyB,CAAC;QAC9B,IAAI,IAAe,CAAC;QACpB,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,iBAAiB;QACnD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,4BAA4B;QAC7D,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,mBAAmB;QACrD,MAAM,KAAK,GAAgB,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,+BAA+B;QACrF,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,kDAAkD;QAC7F,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,iDAAiD;QAC7F,MAAM,MAAM,GAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAC7E,MAAM,QAAQ,GAAmB,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3F,MAAM,MAAM,GAAG,qCAAqC,CAAC;QAErD,MAAM,OAAO,GAAG,CAAC,KAAK,GAAY,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAmB,MAAM,EAAE,KAAK,GAAY,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACvH,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAc,aAAa,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAc,cAAc,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAa,aAAa,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxG,MAAM,IAAI,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE,CACtC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,CAAC,QAAQ,GAAG,WAAW,EAAE,EAAE,CACrC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5F,MAAM,EAAE,GAAG,CAAC,QAAQ,GAAG,WAAW,EAAE,EAAE,CACpC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAEvG,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YACpB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC7B,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI;gBAClC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;gBAChB,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC;aACT,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpH,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBACrD,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE;oBACzC,GAAG,EAAE,OAAO;oBACZ,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;oBACjC,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACrH,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;YAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;YACpC,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;gBACzG,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC;qBAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;qBACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CACzB;oBACE,YAAY,WAAW,4BAA4B,CAAC,EAAE;oBACtD,YAAY,WAAW,6BAA6B,CAAC,EAAE;oBACvD,YAAY,aAAa,4BAA4B,CAAC,EAAE;iBACzD,CAAC,IAAI,EAAE,CACT,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;gBAC/F,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;gBAC5B,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACrG,EAAE,EAAE,QAAQ;iBACb,CAAC,CAAC;gBACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAE,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACrF,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACxC,+EAA+E;gBAC/E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1G,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;gBAC3E,MAAM,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;gBACnF,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAE,CAAC;gBACrE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;gBAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAmB,WAAW,CAAC,CAAC;gBAC3E,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACxF,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;gBACrG,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBACjE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACnD,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACrF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;gBACvD,MAAM,MAAM,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzF,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;gBAClG,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;gBACxC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;gBACpE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC3C,MAAM,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;gBACrD,MAAM,MAAM,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;gBACjG,MAAM,QAAQ,GAAmB,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;gBACnF,KAAK,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAClG,WAAW,CACZ,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;gBACxF,MAAM,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAClD,KAAK,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;oBAC5C,MAAM,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAClG,WAAW,CACZ,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;gBACrE,MAAM,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;oBACxC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;oBAChC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE;oBACjC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;iBACnC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,gEAAgE,EAAE,GAAG,EAAE;YAC9E,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;gBACtF,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC;gBAC7B,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC/D,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;gBAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrF,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC9D,MAAM,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAChF,MAAM,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC3F,MAAM,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;gBAChE,MAAM,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;gBACrE,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9D,MAAM,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC5C,MAAM,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7F,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;gBACxD,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YAChG,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;gBACxF,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpF,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC9D,MAAM,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBACvD,MAAM,MAAM,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5E,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;gBAC1F,MAAM,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC3E,MAAM,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3F,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH;;;;;WAKG;QACH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;YAC/B,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE,CAC1C,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YAE/G,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;gBAC5E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;gBAClF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;oBAClB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;oBACzD,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;iBAC5D,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;gBACzE,MAAM,CAAC,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YAC1D,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;gBAC5F,MAAM,GAAG,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACrE,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvF,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC3D,kFAAkF;gBAClF,MAAM,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7F,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;gBAClF,MAAM,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC5C,QAAQ,EAAE,aAAa;oBACvB,KAAK,EAAE,IAAI;oBACX,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;gBAC/F,MAAM,EAAE,EAAE,CAAC;gBACX,MAAM,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvG,MAAM,MAAM,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;YAC5B,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;gBACxF,oFAAoF;gBACpF,sFAAsF;gBACtF,sEAAsE;gBACtE,KAAK,MAAM,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7G,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;oBAC1B,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC3C,MAAM,CAAC,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;gBAChF,MAAM,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACvF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;YACjC,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;gBAC9F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACnF,MAAM,CAAC,MAAM,CAAE,GAAyB,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;YAC3F,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;gBAC5D,MAAM,MAAM,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;oBAC5F,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;iBACvB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;gBAC5E,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC;gBACzF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAC3C,KAAK,MAAM,GAAG,IAAI,QAAQ;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;gBACnG,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,EAAE,CAAC;oBAC9E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;gBAC1G,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC;gBAC7B,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1F,4EAA4E;gBAC5E,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1F,MAAM,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACjF,sFAAsF;gBACtF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC5E,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3F,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAE,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YACxF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,WAAmB,EACnB,WAA4C;IAE5C,QAAQ,CAAC,yCAAyC,WAAW,EAAE,EAAE,GAAG,EAAE;QACpE,IAAI,OAAyB,CAAC;QAC9B,IAAI,IAAe,CAAC;QACpB,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,wFAAwF;QACxF,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAExD,MAAM,KAAK,GAAG,KAAK,EAAE,MAAgB,EAAE,KAAK,GAA4B,EAAE,EAAE,QAAQ,GAAG,IAAI,EAAE,EAAE;YAC7F,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAChC,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAC7F,IAAI,QAAQ;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;QAEF,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YACpB,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE;oBACnC,EAAE,EAAE,MAAM;oBACV,IAAI,EAAE,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE;oBAClD,IAAI,EAAE,SAAS;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;YAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACzE,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,OAAgB,CAAC;QACrB,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;YACvF,MAAM,KAAK,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,iEAAiE;YAChG,MAAM,KAAK,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3E,MAAM,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1B,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;YACrF,OAAO,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACzE,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC5D,CAAC,CAAC;YACH,wFAAwF;YACxF,yCAAyC;YACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,OAAO,KAAK,UAAU;gBAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC1F,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACzE,OAAO,EAAE,WAAW;gBACpB,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC;aACT,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/scope-host-suite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-host-suite.d.ts","sourceRoot":"","sources":["../src/scope-host-suite.ts"],"names":[],"mappings":"AA4BA,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,sBAAsB,CAAC;AAW9B,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,SAAS,CAAC;IAChB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AA6DD,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;CACvC;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAC5C,IAAI,GAAE,qBAA0B,GAC/B,IAAI,CAu0NN"}
+{"version":3,"file":"scope-host-suite.d.ts","sourceRoot":"","sources":["../src/scope-host-suite.ts"],"names":[],"mappings":"AA4BA,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,sBAAsB,CAAC;AAW9B,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,SAAS,CAAC;IAChB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AA6DD,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;CACvC;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAC5C,IAAI,GAAE,qBAA0B,GAC/B,IAAI,CAw6NN"}

package/dist/scope-host-suite.js

@@ -4424,6 +4424,54 @@ export function scopeHostContractSuite(adapterName, makeFixture, opts = {}) {
             await host.admin.promoteVersion(staff, 'tenant-a/crm', 'prod', v3);
             expect((await host.admin.getScopeRecord(staff, t2, appScope))?.verticalVersionId).toBe(v3);
         });
+        it('embedded prod promotion leaves previews and real forks intact beside advancing installs (#1724)', async () => {
+            const slug = 'tenant-a/preview-prevention';
+            await host.admin.registerVertical(staff, { slug, name: 'Preview prevention', source: 'cli', ownerTenant: t2 });
+            const first = await publishPrivate(slug, '1.0.0');
+            const next = await publishPrivate(slug, '1.0.1');
+            const make = async (kind, tenant = t2, active = true) => {
+                const id = scopeId.parse(ulid());
+                await host.provisionScope(staff, { tenantId: tenant, scopeId: id, vertical: slug, kind });
+                if (active)
+                    await host.admin.activateScope(staff, tenant, id);
+                await host.admin.bindScopeVersion(staff, tenant, id, first);
+                return id;
+            };
+            const install = await make('production');
+            const clean = await make('preview');
+            const pinned = await make('preview');
+            await host.admin.setScopeServingRef(staff, t2, pinned, 'historical-serving-script');
+            const suspended = await make('production');
+            await host.admin.suspendScope(staff, t2, suspended);
+            const provisioning = await make('production', t2, false);
+            const foreign = await make('production', t1);
+            await (await host.getScope(alice, t2, clean)).invoke('test/write-marker', { v: 'preview-data' });
+            // An actual snapshot copies data and records forkedFrom, rather than naming a fork in the title.
+            const fork = await host.snapshotScope(staff, t2, clean);
+            expect((await host.admin.getScopeRecord(staff, t2, fork))?.forkedFrom).toBe(clean);
+            const frozen = [clean, pinned, fork, suspended, provisioning];
+            const before = await Promise.all(frozen.map((id) => host.admin.getScopeRecord(staff, t2, id)));
+            const dataBefore = await host.admin.readScopeTable(staff, t2, clean, { table: 'marker', limit: 200, offset: 0 });
+            const hostname = `preview-${clean.toLowerCase()}.example.test`;
+            await host.admin.bindHostname(staff, { hostname, tenantId: t2, scopeId: clean, surface: 'app', region: null, canonical: false });
+            await host.admin.setHostnameStatus(staff, hostname, 'active');
+            const routeBefore = await host.admin.resolveHostname(hostname);
+            expect(routeBefore).toMatchObject({ scopeId: clean, deploymentRef: null });
+            for (let retry = 0; retry < 2; retry++) {
+                await host.admin.promoteVersion(staff, slug, 'prod', next);
+                expect((await host.admin.getScopeRecord(staff, t2, install))?.verticalVersionId).toBe(next);
+                expect(await Promise.all(frozen.map((id) => host.admin.getScopeRecord(staff, t2, id)))).toEqual(before);
+                expect((await host.admin.getScopeRecord(staff, t1, foreign))?.verticalVersionId).toBe(first);
+                expect(await host.admin.resolveHostname(hostname)).toEqual(routeBefore);
+                expect(await host.admin.readScopeTable(staff, t2, clean, { table: 'marker', limit: 200, offset: 0 })).toEqual(dataBefore);
+                expect(await host.admin.readScopeTable(staff, t2, fork, { table: 'marker', limit: 200, offset: 0 })).toEqual(dataBefore);
+            }
+            // Listing retains the existing opt-in update behavior for ordinary installs too.
+            await host.admin.admitVersion(staff, next);
+            await host.admin.setVerticalListed(staff, slug, true);
+            await host.admin.promoteVersion(staff, slug, 'prod', first);
+            expect((await host.admin.getScopeRecord(staff, t2, install))?.verticalVersionId).toBe(next);
+        });
         it('publish refuses an auto-admitted prod version until a staff admit vouches for it', async () => {
             // Listing is the moment OTHER tenants start trusting this code, so the version
             // they would install needs a recorded human decision — the auto-admission note
@@ -4491,6 +4539,53 @@ export function scopeHostContractSuite(adapterName, makeFixture, opts = {}) {
         // -- the hostname map (K-26) ---------------------------------------------
         // §4.2 provisions a scope; this is what finally gives it a URL. The router
         // resolves against these rows before dispatching to a vertical's worker.
+        it('gates hostname routing on scope and tenant lifecycle without changing bindings (#1713)', async () => {
+            const tenant = tenantId.parse(ulid());
+            const otherTenant = tenantId.parse(ulid());
+            const target = scopeId.parse(ulid());
+            const sibling = scopeId.parse(ulid());
+            const other = scopeId.parse(ulid());
+            for (const id of [tenant, otherTenant]) {
+                await host.admin.createTenant(staff, { id, slug: `route-${id.toLowerCase()}`, name: 'Routing' });
+            }
+            for (const [t, sc] of [[tenant, target], [tenant, sibling], [otherTenant, other]]) {
+                await host.provisionScope(staff, { tenantId: t, scopeId: sc });
+                await host.admin.bindHostname(staff, {
+                    hostname: `${sc.toLowerCase()}.example.com`, tenantId: t, scopeId: sc,
+                    surface: 'app', region: null, canonical: true,
+                });
+                await host.admin.setHostnameStatus(staff, `${sc.toLowerCase()}.example.com`, 'active');
+            }
+            const resolve = (sc) => host.admin.resolveHostname(`${sc.toLowerCase()}.example.com`);
+            const binding = () => host.admin.listHostnames(staff, { scopeId: target });
+            const original = await binding();
+            expect(original[0]?.status).toBe('active');
+            expect(await resolve(target)).toBeUndefined(); // provisioning, despite active binding
+            for (const [t, sc] of [[tenant, target], [tenant, sibling], [otherTenant, other]]) {
+                await host.admin.activateScope(staff, t, sc);
+            }
+            const active = await resolve(target);
+            expect(active).toMatchObject({ tenantId: tenant, scopeId: target, deploymentRef: null });
+            await host.admin.suspendScope(staff, tenant, target);
+            expect(await resolve(target)).toBeUndefined();
+            expect(await resolve(sibling)).toBeDefined();
+            expect(await resolve(other)).toBeDefined();
+            expect(await binding()).toEqual(original);
+            await host.admin.unsuspendScope(staff, tenant, target);
+            expect(await resolve(target)).toEqual(active);
+            for (const status of ['suspended', 'deleting']) {
+                await host.admin.setTenantStatus(staff, tenant, status);
+                expect(await resolve(target)).toBeUndefined();
+                expect(await resolve(sibling)).toBeUndefined();
+                expect(await resolve(other)).toBeDefined();
+                expect(await binding()).toEqual(original);
+                await host.admin.setTenantStatus(staff, tenant, 'active');
+                expect(await resolve(target)).toEqual(active);
+            }
+            await host.admin.archiveScope(staff, tenant, target);
+            expect(await resolve(target)).toBeUndefined();
+            expect(await binding()).toEqual(original);
+        });
         it('binds a hostname as pending, and resolves nothing until it is active', async () => {
             await host.admin.bindHostname(staff, {
                 hostname: 'acme.example.com',
@@ -4516,7 +4611,7 @@ export function scopeHostContractSuite(adapterName, makeFixture, opts = {}) {
             // A hostname routes to exactly one place, so a rebind that would move another
             // scope's traffic is refused — unless the holder is archived or reaped, which is
             // how a deleted app's name becomes claimable again. Both adapters read the
-            // holder's scope status to decide, and neither reads it on the router's path.
+            // holder's scope status to decide; routing independently requires active lifecycle.
             const holder = scopeId.parse(ulid());
             const claimant = scopeId.parse(ulid());
             for (const sc of [holder, claimant]) {
@@ -4547,6 +4642,7 @@ export function scopeHostContractSuite(adapterName, makeFixture, opts = {}) {
             // the row, then the read-back 400d at the Zod boundary and the app got no URL.
             const sc = scopeId.parse(ulid());
             await host.provisionScope(staff, { tenantId: t1, scopeId: sc, vertical: 't-acme/crm', jurisdiction: 'eu' });
+            await host.admin.activateScope(staff, t1, sc);
             await host.admin.bindHostname(staff, {
                 hostname: 'crm-acme.global.example.com',
                 tenantId: t1,