@substrat-run/contracts 0.153.0 → 0.155.0

package/dist/connection-landing.d.ts

@@ -0,0 +1,59 @@
+import { z } from 'zod';
+/**
+ * Connection landings (#2316): how a poll-only connector's data enters a vertical's scope, declared
+ * by the vertical that receives it.
+ *
+ * A poll-only connector (Fortnox, Planima) has nothing inside a scope to start its work, so it
+ * needs a BINDING: "sweep this connection into that scope, through this operation, holding this
+ * key". Before this declaration a binding came only from a person running `substrat connection
+ * bind`, and the key it needs from a vertical's own credential relay. A connection a company
+ * approved through a connect link or the dashboard's door held no key and had no binding, so
+ * nothing landed and nothing said so.
+ *
+ * The shape of the mechanism, so the pieces below read in place:
+ *
+ * - **The vertical declares the landing** — `connections` in its module manifest
+ *   (`connectionLandingSpec`): the provider, the operation the connector invokes, and the key that
+ *   operation checks. It is lifted into the permission registry, so it is rendered in the
+ *   vertical's PERMISSIONS.md and hashed into its permission digest: the key a connection is
+ *   given is a reviewed permission diff, and a version that widens it cannot be promoted
+ *   unacknowledged.
+ * - **The platform seats and binds from the running version.** On each connector pass, every
+ *   live connection of a declared provider in a tenant where the vertical is installed is granted
+ *   the declared key on each primary, active install, and bound to it. Both steps happen only when
+ *   missing or different, so a pass that finds them in place writes nothing. The bind is the
+ *   connector's own, and it still refuses a connection that does not hold the key.
+ * - **Revocation is the connection's.** Revoking a connection tombstones its grants and deletes
+ *   its bindings, and a revoked connection is never seated again.
+ */
+/** The most option keys one landing may carry. */
+export declare const CONNECTION_LANDING_OPTIONS_MAX = 16;
+/**
+ * Provider-specific binding options (Planima's `organizationId`, `currency`, `window`,
+ * `horizonYears`), as JSON. Not typed per provider here: the contracts package names no connector,
+ * and the platform validates them with the provider's own schema before it binds. A declaration a
+ * provider refuses is reported on that connection's sweep row, never bound with a guess.
+ */
+export declare const connectionLandingOptions: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export type ConnectionLandingOptions = z.infer<typeof connectionLandingOptions>;
+/**
+ * One declared landing — "a `provider` connection of this tenant lands through `operation`,
+ * holding `permission`" — as a module manifest's `connections` entry.
+ *
+ * `operation` is the full `module/operation` name the connector invokes. It is not checked against
+ * the module's own operations here: a vertical may land through an operation of an engine it
+ * composes, and the host's registry is what knows every name. `lint:permissions` reports an
+ * unknown one, and an unknown name lands nothing (the sweep reports the refusal).
+ *
+ * `permission` is what the connection is granted, and it must be a key some module declares and
+ * that is not reserved to a system principal: a connection acts for the external provider holding
+ * its token. The registry builder refuses both.
+ */
+export declare const connectionLandingSpec: z.ZodObject<{
+    provider: z.ZodString;
+    operation: z.ZodString;
+    permission: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
+    options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+export type ConnectionLandingSpec = z.infer<typeof connectionLandingSpec>;
+//# sourceMappingURL=connection-landing.d.ts.map

package/dist/connection-landing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-landing.d.ts","sourceRoot":"","sources":["../src/connection-landing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,kDAAkD;AAClD,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,wCAIjC,CAAC;AACL,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB;;;;;kBAOvB,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/connection-landing.js

@@ -0,0 +1,65 @@
+import { z } from 'zod';
+import { permissionKey } from './ids.js';
+import { connectionProvider } from './connections.js';
+/**
+ * Connection landings (#2316): how a poll-only connector's data enters a vertical's scope, declared
+ * by the vertical that receives it.
+ *
+ * A poll-only connector (Fortnox, Planima) has nothing inside a scope to start its work, so it
+ * needs a BINDING: "sweep this connection into that scope, through this operation, holding this
+ * key". Before this declaration a binding came only from a person running `substrat connection
+ * bind`, and the key it needs from a vertical's own credential relay. A connection a company
+ * approved through a connect link or the dashboard's door held no key and had no binding, so
+ * nothing landed and nothing said so.
+ *
+ * The shape of the mechanism, so the pieces below read in place:
+ *
+ * - **The vertical declares the landing** — `connections` in its module manifest
+ *   (`connectionLandingSpec`): the provider, the operation the connector invokes, and the key that
+ *   operation checks. It is lifted into the permission registry, so it is rendered in the
+ *   vertical's PERMISSIONS.md and hashed into its permission digest: the key a connection is
+ *   given is a reviewed permission diff, and a version that widens it cannot be promoted
+ *   unacknowledged.
+ * - **The platform seats and binds from the running version.** On each connector pass, every
+ *   live connection of a declared provider in a tenant where the vertical is installed is granted
+ *   the declared key on each primary, active install, and bound to it. Both steps happen only when
+ *   missing or different, so a pass that finds them in place writes nothing. The bind is the
+ *   connector's own, and it still refuses a connection that does not hold the key.
+ * - **Revocation is the connection's.** Revoking a connection tombstones its grants and deletes
+ *   its bindings, and a revoked connection is never seated again.
+ */
+/** The most option keys one landing may carry. */
+export const CONNECTION_LANDING_OPTIONS_MAX = 16;
+/**
+ * Provider-specific binding options (Planima's `organizationId`, `currency`, `window`,
+ * `horizonYears`), as JSON. Not typed per provider here: the contracts package names no connector,
+ * and the platform validates them with the provider's own schema before it binds. A declaration a
+ * provider refuses is reported on that connection's sweep row, never bound with a guess.
+ */
+export const connectionLandingOptions = z
+    .record(z.string().min(1), z.unknown())
+    .refine((o) => Object.keys(o).length <= CONNECTION_LANDING_OPTIONS_MAX, {
+    message: `a landing carries at most ${CONNECTION_LANDING_OPTIONS_MAX} options`,
+});
+/**
+ * One declared landing — "a `provider` connection of this tenant lands through `operation`,
+ * holding `permission`" — as a module manifest's `connections` entry.
+ *
+ * `operation` is the full `module/operation` name the connector invokes. It is not checked against
+ * the module's own operations here: a vertical may land through an operation of an engine it
+ * composes, and the host's registry is what knows every name. `lint:permissions` reports an
+ * unknown one, and an unknown name lands nothing (the sweep reports the refusal).
+ *
+ * `permission` is what the connection is granted, and it must be a key some module declares and
+ * that is not reserved to a system principal: a connection acts for the external provider holding
+ * its token. The registry builder refuses both.
+ */
+export const connectionLandingSpec = z
+    .object({
+    provider: connectionProvider,
+    operation: z.string().regex(/^[a-zA-Z0-9_-]+\/[a-zA-Z0-9_-]+$/, 'operation is `module/operation`'),
+    permission: permissionKey,
+    options: connectionLandingOptions.optional(),
+})
+    .strict();
+//# sourceMappingURL=connection-landing.js.map

package/dist/connection-landing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-landing.js","sourceRoot":"","sources":["../src/connection-landing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,kDAAkD;AAClD,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,8BAA8B,EAAE;IACtE,OAAO,EAAE,6BAA6B,8BAA8B,UAAU;CAC/E,CAAC,CAAC;AAGL;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kCAAkC,EAAE,iCAAiC,CAAC;IAClG,UAAU,EAAE,aAAa;IACzB,OAAO,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/deploy.d.ts

@@ -721,6 +721,24 @@ export type ManifestExports = {
     reason: string;
 };
 export declare function exportsOfManifestJson(manifestJson: string | null | undefined): ManifestExports;
+/**
+ * What a STORED manifest says about connection landings (#2316), in `importsOfManifestJson`'s three
+ * answers. The connector pass reads it for the version each install runs: a `landings` row is what
+ * the platform grants a connection of that provider and binds it with.
+ *
+ * `unreadable` is never acted on — a pass grants nothing from a declaration it cannot read — and
+ * it is reported on the connection's sweep row, so a broken manifest is not silent.
+ */
+export type ManifestConnectionLandings = {
+    kind: 'none';
+} | {
+    kind: 'landings';
+    rows: Omit<PermissionRegistryConnection, 'declaredBy'>[];
+} | {
+    kind: 'unreadable';
+    reason: string;
+};
+export declare function connectionLandingsOfManifestJson(manifestJson: string | null | undefined): ManifestConnectionLandings;
 /**
  * #2178: the binding-shape gate over two STORED manifests — the version that runs now and the one
  * that would run instead — refused `precondition_failed` with {@link bindingShapeRefusal} when the
@@ -822,6 +840,7 @@ export declare const permissionRegistryEntry: z.ZodObject<{
     key: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
     description: z.ZodString;
     declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
+    holder: z.ZodOptional<z.ZodLiteral<"system">>;
 }, z.core.$strip>;
 export type PermissionRegistryEntry = z.infer<typeof permissionRegistryEntry>;
 export declare const entityGrantShape: z.ZodObject<{
@@ -895,11 +914,26 @@ export declare const permissionRegistryImport: z.ZodObject<{
     declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
 }, z.core.$strip>;
 export type PermissionRegistryImport = z.infer<typeof permissionRegistryImport>;
+/**
+ * One provider whose connections land in this vertical (#2316): the operation the connector
+ * invokes and the key a connection is granted for it. A row here is authority handed to whoever
+ * holds the provider token, so it belongs in the same artifact, and the same digest, as the keys a
+ * person is given.
+ */
+export declare const permissionRegistryConnection: z.ZodObject<{
+    provider: z.ZodString;
+    operation: z.ZodString;
+    permission: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
+    options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
+}, z.core.$strip>;
+export type PermissionRegistryConnection = z.infer<typeof permissionRegistryConnection>;
 export declare const permissionRegistry: z.ZodObject<{
     permissions: z.ZodArray<z.ZodObject<{
         key: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
         description: z.ZodString;
         declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
+        holder: z.ZodOptional<z.ZodLiteral<"system">>;
     }, z.core.$strip>>;
     roles: z.ZodArray<z.ZodObject<{
         key: z.ZodString;
@@ -936,6 +970,13 @@ export declare const permissionRegistry: z.ZodObject<{
         schemaVersion: z.ZodNumber;
         declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
     }, z.core.$strip>>>;
+    connections: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        provider: z.ZodString;
+        operation: z.ZodString;
+        permission: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
+        options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type PermissionRegistry = z.infer<typeof permissionRegistry>;
 /**
@@ -949,6 +990,7 @@ export declare const pushedPermissionRegistry: z.ZodObject<{
         key: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
         description: z.ZodString;
         declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
+        holder: z.ZodOptional<z.ZodLiteral<"system">>;
     }, z.core.$strip>>;
     roles: z.ZodArray<z.ZodObject<{
         key: z.ZodString;
@@ -971,6 +1013,13 @@ export declare const pushedPermissionRegistry: z.ZodObject<{
         schemaVersion: z.ZodNumber;
         declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
     }, z.core.$strip>>>;
+    connections: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        provider: z.ZodString;
+        operation: z.ZodString;
+        permission: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
+        options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
+    }, z.core.$strip>>>;
     entityGrants: z.ZodDefault<z.ZodArray<z.ZodObject<{
         permissions: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">>;
         bootstrap: z.ZodOptional<z.ZodLiteral<true>>;
@@ -986,6 +1035,16 @@ export declare const pushedPermissionRegistry: z.ZodObject<{
         entityType: z.ZodString;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
+/**
+ * #2430: the deploy manifest's `ownerGrants` (package.json `substrat.ownerGrants`, which an install
+ * grants to its owner, a person) against the reservations its registry's rows mark. The control
+ * plane's push routes call it beside {@link pushedPermissionRegistry}: a manifest cannot carry a
+ * refinement, since history is read through an `extend` of it.
+ */
+export declare function pushedOwnerGrantProblems(manifest: {
+    ownerGrants?: readonly string[];
+    registry?: Pick<PermissionRegistry, 'permissions' | 'roles' | 'entityGrants'>;
+}): string[];
 /**
  * A vertical's declared permission surface, as the **single typed source** — the input the
  * permission checkpoint (`tools/permission-diff.mts`) and `substrat push` both read to derive
@@ -1442,6 +1501,7 @@ export declare const deployManifest: z.ZodObject<{
             key: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
             description: z.ZodString;
             declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
+            holder: z.ZodOptional<z.ZodLiteral<"system">>;
         }, z.core.$strip>>;
         roles: z.ZodArray<z.ZodObject<{
             key: z.ZodString;
@@ -1464,6 +1524,13 @@ export declare const deployManifest: z.ZodObject<{
             schemaVersion: z.ZodNumber;
             declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
         }, z.core.$strip>>>;
+        connections: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            provider: z.ZodString;
+            operation: z.ZodString;
+            permission: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
+            options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
+        }, z.core.$strip>>>;
         entityGrants: z.ZodDefault<z.ZodArray<z.ZodObject<{
             permissions: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">>;
             bootstrap: z.ZodOptional<z.ZodLiteral<true>>;
@@ -1658,6 +1725,7 @@ export declare const storedDeployManifest: z.ZodObject<{
             key: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
             description: z.ZodString;
             declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
+            holder: z.ZodOptional<z.ZodLiteral<"system">>;
         }, z.core.$strip>>;
         roles: z.ZodArray<z.ZodObject<{
             key: z.ZodString;
@@ -1694,6 +1762,13 @@ export declare const storedDeployManifest: z.ZodObject<{
             schemaVersion: z.ZodNumber;
             declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
         }, z.core.$strip>>>;
+        connections: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            provider: z.ZodString;
+            operation: z.ZodString;
+            permission: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
+            options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            declaredBy: z.ZodArray<z.core.$ZodBranded<z.ZodString, "ModuleId", "out">>;
+        }, z.core.$strip>>>;
     }, z.core.$strip>>;
     platformSweeper: z.ZodOptional<z.ZodBoolean>;
     migrations: z.ZodOptional<z.ZodArray<z.ZodObject<{

package/dist/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAmH,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAErK,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAiBtE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,SAAS;;;iBAKpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,eAAe;;;iBAQ1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;;iBAG9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhF;AAqBD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa;;;iBASxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;iBAI1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,gBAAgB,CAAC;AAErD,mFAAmF;AACnF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS;IAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,EAAE,GACtE,OAAO,CAET;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EACD;IACE,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAAA;KAAE,EAAE,CAAC;CACtF,GACD,SAAS;AACb,qEAAqE;AACrE,QAAQ,EAAE,OAAO,GAChB,aAAa,EAAE,CAoBjB;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;iBASvB,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,8BAA8B,YAAI,gBAAgB,CAAU,CAAC;AAE1E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;iBAGrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAGpD,OAAO,EAAE,yBAAyB,EAAE,KAAK,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnG,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,aAI0E,CAAC;AAM1G,qGAAqG;AACrG,eAAO,MAAM,aAAa,aAAmF,CAAC;AAE9G;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB;;;;kBAMpB,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;iBAgBlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,uBAAuB,EAAO,CAAC;AAEpE,mGAAmG;AACnG,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AAExD,4FAA4F;AAC5F,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAiF9C,MAAM,MAAM,sBAAsB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAM/H;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CA0B9E;AAED;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;kBAS1B,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,wGAAwG;AACxG,eAAO,MAAM,wBAAwB,8BAA8B,CAAC;AAKpE;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC;CACtF,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BlB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,CAUtF;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACvC,OAAO,GAAE,SAAS,uBAAuB,EAAkB,GAC1D,OAAO,CAIT;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,uEAAuE,CAAC;AAC7G,eAAO,MAAM,cAAc;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,2DAA2D;AAC3D,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjH;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAErG;AAED,qDAAqD;AACrD,eAAO,MAAM,YAAY;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;sFACsF;AACtF,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AAEH,uEAAuE;AACvE,eAAO,MAAM,aAAa;;;;;;;;oBAGxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,eAAe;;iBAAsD,CAAC;AACnF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,eAAe;;iBAA6C,CAAC;AAC1E,eAAO,MAAM,gBAAgB;;iBAAuD,CAAC;AACrF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,iBAAiB;;;;;;;iBAAgD,CAAC;AAC/E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,gBAAgB;;;;;;;iBAAgD,CAAC;AAC9E,eAAO,MAAM,iBAAiB;;iBAAuD,CAAC;AACtF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,eAAe,gCAAe,CAAC;AAC5C,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,gBAAgB,EAAE,gBAAgB,CAAC;CACpC;AAED,8DAA8D;AAC9D,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuBvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,GAAG,SAAS,GAC5H;IAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IAAC,UAAU,EAAE,aAAa,EAAE,CAAA;CAAE,CA4BlE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,GAAG,SAAS;AAC7H,qEAAqE;AACrE,QAAQ,EAAE,OAAO,GAChB;IAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IAAC,UAAU,EAAE,aAAa,EAAE,CAAA;CAAE,CAMlE;AAaD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,GAAG,IAAI,CAqDP;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GACxE;IAAE,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAMxD;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,OAAO,GAAE,SAAS,uBAAuB,EAAkB,GAC1D,IAAI,CAUN;AAED,qFAAqF;AACrF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACvD,GAAG,IAAI,CAGP;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,aAMtB,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAK1F;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,IAAI,CAU/F;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAClF;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAiC3C,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,CAK9F;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,CAK9F;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC3C,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC3C,IAAI,GAAE;IACJ,wGAAwG;IACxG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACtC,GACL,IAAI,CAoBN;AAED;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;;;;;;;iBAStB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,IAAI,CAQ5F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,wBAAwB,YACnC,0BAA0B,EAC1B,IAAI,EACJ,cAAc,EACd,OAAO,EACP,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,YAAY,CACJ,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E;;;wFAGwF;AACxF,eAAO,MAAM,eAAe;;;;;;iBAO1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;iBAIlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAQ9E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;iBAkI3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AACzG,uGAAuG;AACvG,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAC7B,MAAM,EAAE,CAcV;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,aAAa,GAAG,WAAW,GAAG,SAAS,CAAC,GAAG,MAAM,EAAE,CAWpI;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa,GAAG,WAAW,GAAG,SAAS,CAAC,GAAG,MAAM,EAAE,CAG9G;AAED;;;;;;;;;;;GAWG;AACH;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF;;;GAGG;AACH,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAY7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBASnC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;6FACyF;IACzF,OAAO,EAAE,SAAS;QAAE,QAAQ,EAAE,cAAc,CAAC;QAAC,UAAU,CAAC,EAAE,SAAS;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,EAAE,CAAC;IAC3G,+DAA+D;IAC/D,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IACjC,2FAA2F;IAC3F,YAAY,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC3C;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,gBAAgB,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,SAAS,MAAM,EAAE,GAC1F,MAAM,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAC9B,KAAK,GACL,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GACnB,KAAK,CAAC;AAEV;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,CAAC,CAAC,SAAS,gBAAgB,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAG/E;AA6BD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,gBAAgB,GAAG,kBAAkB,CAyEnF;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,UAAU;;;;;iBAQrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAuB1C;;;;;;;;;;;GAWG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAYlF;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;iBAEvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAE9C,wEAAwE;AACxE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;;;;;;;iBAW/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,6FAA6F;AAC7F,eAAO,MAAM,iCAAiC,QAAa,CAAC;AAC5D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,QAAoB,CAAC;AAE5D,oFAAoF;AACpF,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,gEAAgE;AAChE,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD,6DAA6D;AAC7D,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAuBjD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;;;;iBA0B5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAClE,gHAAgH;AAChH,eAAO,MAAM,6BAA6B;;;iBAA0D,CAAC;AAIrG,oCAAoC;AACpC,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,uFAAuF;AACvF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,GAAG,MAAM,CAMrI;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,EAAE,GAAG,MAAM,CAE9J;AAoBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,SAAS;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KAC7C,EAAE,CAAC;IACJ,iBAAiB,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;CACxC,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBlB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/D;AACD,eAAO,MAAM,8BAA8B,YAAY,CAAC;AAExD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwMzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAmH,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAErK,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AA2BtE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,SAAS;;;iBAKpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,eAAe;;;iBAQ1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;;iBAG9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhF;AAqBD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa;;;iBASxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;iBAI1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,gBAAgB,CAAC;AAErD,mFAAmF;AACnF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS;IAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,EAAE,GACtE,OAAO,CAET;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EACD;IACE,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAAA;KAAE,EAAE,CAAC;CACtF,GACD,SAAS;AACb,qEAAqE;AACrE,QAAQ,EAAE,OAAO,GAChB,aAAa,EAAE,CAoBjB;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;iBASvB,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,8BAA8B,YAAI,gBAAgB,CAAU,CAAC;AAE1E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;iBAGrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAGpD,OAAO,EAAE,yBAAyB,EAAE,KAAK,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnG,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,aAI0E,CAAC;AAM1G,qGAAqG;AACrG,eAAO,MAAM,aAAa,aAAmF,CAAC;AAE9G;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB;;;;kBAMpB,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;iBAgBlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,uBAAuB,EAAO,CAAC;AAEpE,mGAAmG;AACnG,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AAExD,4FAA4F;AAC5F,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAiF9C,MAAM,MAAM,sBAAsB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAM/H;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CA0B9E;AAED;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;kBAS1B,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,wGAAwG;AACxG,eAAO,MAAM,wBAAwB,8BAA8B,CAAC;AAKpE;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC;CACtF,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BlB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,CAUtF;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACvC,OAAO,GAAE,SAAS,uBAAuB,EAAkB,GAC1D,OAAO,CAIT;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,uEAAuE,CAAC;AAC7G,eAAO,MAAM,cAAc;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,2DAA2D;AAC3D,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjH;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAErG;AAED,qDAAqD;AACrD,eAAO,MAAM,YAAY;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;sFACsF;AACtF,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AAEH,uEAAuE;AACvE,eAAO,MAAM,aAAa;;;;;;;;oBAGxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,eAAe;;iBAAsD,CAAC;AACnF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,eAAe;;iBAA6C,CAAC;AAC1E,eAAO,MAAM,gBAAgB;;iBAAuD,CAAC;AACrF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,iBAAiB;;;;;;;iBAAgD,CAAC;AAC/E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,gBAAgB;;;;;;;iBAAgD,CAAC;AAC9E,eAAO,MAAM,iBAAiB;;iBAAuD,CAAC;AACtF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,eAAe,gCAAe,CAAC;AAC5C,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,gBAAgB,EAAE,gBAAgB,CAAC;CACpC;AAED,8DAA8D;AAC9D,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuBvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,GAAG,SAAS,GAC5H;IAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IAAC,UAAU,EAAE,aAAa,EAAE,CAAA;CAAE,CA4BlE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,GAAG,SAAS;AAC7H,qEAAqE;AACrE,QAAQ,EAAE,OAAO,GAChB;IAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IAAC,UAAU,EAAE,aAAa,EAAE,CAAA;CAAE,CAMlE;AAaD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,GAAG,IAAI,CAqDP;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GACxE;IAAE,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAMxD;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,OAAO,GAAE,SAAS,uBAAuB,EAAkB,GAC1D,IAAI,CAUN;AAED,qFAAqF;AACrF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACvD,GAAG,IAAI,CAGP;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,aAMtB,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAK1F;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,IAAI,CAU/F;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAClF;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAiC3C,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,CAK9F;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,CAK9F;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC,4BAA4B,EAAE,YAAY,CAAC,EAAE,CAAA;CAAE,GAC9E;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,wBAAgB,gCAAgC,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,0BAA0B,CAQpH;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC3C,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC3C,IAAI,GAAE;IACJ,wGAAwG;IACxG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACtC,GACL,IAAI,CAoBN;AAED;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;;;;;;;iBAStB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,IAAI,CAQ5F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,wBAAwB,YACnC,0BAA0B,EAC1B,IAAI,EACJ,cAAc,EACd,OAAO,EACP,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,YAAY,CACJ,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E;;;wFAGwF;AACxF,eAAO,MAAM,eAAe;;;;;;iBAO1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;iBAWlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAQ9E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;iBAkI3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AACzG,uGAAuG;AACvG,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAC7B,MAAM,EAAE,CAcV;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,aAAa,GAAG,WAAW,GAAG,SAAS,CAAC,GAAG,MAAM,EAAE,CAWpI;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa,GAAG,WAAW,GAAG,SAAS,CAAC,GAAG,MAAM,EAAE,CAG9G;AAED;;;;;;;;;;;GAWG;AACH;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF;;;GAGG;AACH,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;;iBAMvC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAExF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAc7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyBjC,CAAC;AAqBL;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE;IAAE,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,GAAG,OAAO,GAAG,cAAc,CAAC,CAAA;CAAE,GAAG,MAAM,EAAE,CAO/K;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;6FACyF;IACzF,OAAO,EAAE,SAAS;QAAE,QAAQ,EAAE,cAAc,CAAC;QAAC,UAAU,CAAC,EAAE,SAAS;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,EAAE,CAAC;IAC3G,+DAA+D;IAC/D,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IACjC,2FAA2F;IAC3F,YAAY,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC3C;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,gBAAgB,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,SAAS,MAAM,EAAE,GAC1F,MAAM,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAC9B,KAAK,GACL,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GACnB,KAAK,CAAC;AAEV;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,CAAC,CAAC,SAAS,gBAAgB,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAG/E;AA6BD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,gBAAgB,GAAG,kBAAkB,CAoFnF;AAuCD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,UAAU;;;;;iBAQrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAuB1C;;;;;;;;;;;GAWG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAYlF;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;iBAEvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAE9C,wEAAwE;AACxE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;;;;;;;iBAW/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,6FAA6F;AAC7F,eAAO,MAAM,iCAAiC,QAAa,CAAC;AAC5D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,QAAoB,CAAC;AAE5D,oFAAoF;AACpF,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,gEAAgE;AAChE,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD,6DAA6D;AAC7D,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAuBjD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;;;;iBA0B5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAClE,gHAAgH;AAChH,eAAO,MAAM,6BAA6B;;;iBAA0D,CAAC;AAIrG,oCAAoC;AACpC,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,uFAAuF;AACvF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,GAAG,MAAM,CAMrI;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,EAAE,GAAG,MAAM,CAE9J;AAoBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,SAAS;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KAC7C,EAAE,CAAC;IACJ,iBAAiB,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;CACxC,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBlB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/D;AACD,eAAO,MAAM,8BAA8B,YAAY,CAAC;AAExD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwMzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/deploy.js

@@ -11,6 +11,9 @@ import { substratError } from './errors.js';
 import { blankReason } from './review-text.js';
 import { SCOPE_STORE_CANARY, STORE_DRIVER_ID } from './script-names.js';
 import { bindingShapeBreaks, bindingShapeRefusal } from './registry-diff.js';
+import { connectionLandingOptions } from './connection-landing.js';
+import { connectionProvider } from './connections.js';
+import { ownerGrantSets, reservedKeyLine, reservedKeyOffences, reservedKeysOf, } from './reserved-keys.js';
 // The deploy manifest is the JSON part a `substrat push` sends alongside the
 // module files (self-serve-deploy.md). It lives here — not in the transport
 // package — because BOTH ends must speak the same shape: the CLI builds and
@@ -907,6 +910,17 @@ export function exportsOfManifestJson(manifestJson) {
         return { kind: 'unreadable', reason: read.unreadable };
     return { kind: 'exports', rows: read.rows.map((r) => ({ type: r.type, schemaVersion: r.schemaVersion })) };
 }
+export function connectionLandingsOfManifestJson(manifestJson) {
+    const read = registryRowsOfManifestJson(manifestJson, 'connections', permissionRegistryConnection);
+    if (read === null)
+        return { kind: 'none' };
+    if ('unreadable' in read)
+        return { kind: 'unreadable', reason: read.unreadable };
+    return {
+        kind: 'landings',
+        rows: read.rows.map((r) => ({ provider: r.provider, operation: r.operation, permission: r.permission, ...(r.options ? { options: r.options } : {}) })),
+    };
+}
 /**
  * #2178: the binding-shape gate over two STORED manifests — the version that runs now and the one
  * that would run instead — refused `precondition_failed` with {@link bindingShapeRefusal} when the
@@ -1028,6 +1042,13 @@ export const permissionRegistryEntry = z.object({
     key: permissionKey,
     description: z.string().min(1),
     declaredBy: z.array(moduleId).min(1),
+    /**
+     * #2430: the key is reserved to a system principal, because a module in `declaredBy` declares it
+     * `holder: 'system'` (the union rule of `reservedKeysOf`). Omitted otherwise, so a registry that
+     * reserves nothing keeps the permission digest it had. ABSENT means a person key, on a registry
+     * pushed before the field too, so nothing older is read as reserved.
+     */
+    holder: z.literal('system').optional(),
 });
 /** An entity-narrowed grant SHAPE — which keys a per-entity grant carries (§4 of
  *  PERMISSIONS.md). The grants themselves are per-principal, runtime, scope-local; only
@@ -1255,6 +1276,19 @@ export const permissionRegistryImport = z.object({
     schemaVersion: z.number().int().positive(),
     declaredBy: z.array(moduleId).min(1),
 });
+/**
+ * One provider whose connections land in this vertical (#2316): the operation the connector
+ * invokes and the key a connection is granted for it. A row here is authority handed to whoever
+ * holds the provider token, so it belongs in the same artifact, and the same digest, as the keys a
+ * person is given.
+ */
+export const permissionRegistryConnection = z.object({
+    provider: connectionProvider,
+    operation: z.string().regex(/^[a-zA-Z0-9_-]+\/[a-zA-Z0-9_-]+$/),
+    permission: permissionKey,
+    options: connectionLandingOptions.optional(),
+    declaredBy: z.array(moduleId).min(1),
+});
 export const permissionRegistry = z.object({
     permissions: z.array(permissionRegistryEntry),
     roles: z.array(roleDefinition),
@@ -1267,6 +1301,8 @@ export const permissionRegistry = z.object({
     // or what enters it, cannot be promoted unacknowledged.
     exports: z.array(permissionRegistryExport).optional(),
     imports: z.array(permissionRegistryImport).optional(),
+    // #2316: connection landings. Optional and omitted when none, for the digest reason above.
+    connections: z.array(permissionRegistryConnection).optional(),
 });
 /**
  * The registry as a PUSH carries it (#1869): an `entityGrants` shape naming a kernel namespace
@@ -1274,7 +1310,8 @@ export const permissionRegistry = z.object({
  * Only at the push boundary: {@link storedDeployManifest} reads history with the plain
  * {@link permissionRegistry}, so a version stored before the refusal stays readable.
  */
-export const pushedPermissionRegistry = permissionRegistry.extend({
+export const pushedPermissionRegistry = permissionRegistry
+    .extend({
     entityGrants: z
         .array(entityGrantShape.extend({ entityType: declaredEntityType }).superRefine((shape, ctx) => {
         for (const message of retiredShapeProblems(shape))
@@ -1283,7 +1320,49 @@ export const pushedPermissionRegistry = permissionRegistry.extend({
             ctx.addIssue({ code: 'custom', path: ['bind'], message });
     }))
         .default([]),
+})
+    // #2430: the push boundary holds the reservation the registry's rows carry, as the CLI did.
+    .superRefine((registry, ctx) => {
+    for (const message of registryReservedKeyProblems(registry))
+        ctx.addIssue({ code: 'custom', path: [], message });
+    // #2316: a landing's key is one the registry declares and does not reserve, and one landing per provider.
+    const keys = new Map(registry.permissions.map((p) => [p.key, p]));
+    const providers = new Set();
+    for (const l of registry.connections ?? []) {
+        const where = `connections '${l.provider}'`;
+        const key = keys.get(l.permission);
+        if (!key)
+            ctx.addIssue({ code: 'custom', path: ['connections'], message: `${where}: lands holding ${l.permission}, which the registry does not declare` });
+        else if (key.holder === 'system')
+            ctx.addIssue({ code: 'custom', path: ['connections'], message: `${where}: lands holding ${l.permission}, which is reserved to a system principal` });
+        if (providers.has(l.provider))
+            ctx.addIssue({ code: 'custom', path: ['connections'], message: `${where}: declared more than once` });
+        providers.add(l.provider);
+    }
 });
+/**
+ * #2430: a registry's reserved-key offences, one line each — a person's role, grant shape or
+ * owner grant holding a reserved key, and a system-held role holding anything else or nothing.
+ * Checked where a registry is BUILT ({@link buildPermissionRegistry}, which passes the `reserved`
+ * map it read off the manifests, so a refusal names the module that marks the key) and where a push
+ * carries one ({@link pushedPermissionRegistry}, which has only the rows' marks and names no
+ * module). A registry from a CLI that predates the field marks no key, so it is refused nothing.
+ */
+function registryReservedKeyProblems(registry, reserved, personGrants = []) {
+    const marked = reserved ?? new Set(registry.permissions.filter((p) => p.holder === 'system').map((p) => p.key));
+    return reservedKeyOffences({ roles: registry.roles, grants: registry.entityGrants, personGrants }, marked).map((o) => reservedKeyLine(o, reserved));
+}
+/**
+ * #2430: the deploy manifest's `ownerGrants` (package.json `substrat.ownerGrants`, which an install
+ * grants to its owner, a person) against the reservations its registry's rows mark. The control
+ * plane's push routes call it beside {@link pushedPermissionRegistry}: a manifest cannot carry a
+ * refinement, since history is read through an `extend` of it.
+ */
+export function pushedOwnerGrantProblems(manifest) {
+    if (!manifest.registry || !manifest.ownerGrants?.length)
+        return [];
+    return registryReservedKeyProblems({ permissions: manifest.registry.permissions, roles: [], entityGrants: [] }, undefined, ownerGrantSets([], manifest.ownerGrants));
+}
 /**
  * Declare a vertical's permission surface, once, in TypeScript. A near-identity helper: it pins the
  * shape so a missing or mistyped field is a **compile error**, not a silently-skipped vertical,
@@ -1356,15 +1435,23 @@ export function buildPermissionRegistry(input) {
                 declaredBy.set(p.key, { description: p.description, modules: new Set([m.manifest.id]) });
         }
     }
+    // #2430: a system-held role (K-55) says so in the registry, as a reserved key does below. A
+    // person role carries no holder (`'person'` is the same as none), so no existing digest moves.
     const roles = [...input.roles]
         .sort((a, b) => cmp(a.key, b.key))
         .map((r) => {
         if (!r.source)
             throw new Error(`buildPermissionRegistry: role '${r.key}' has no source`);
-        return { key: r.key, permissions: sortKeys(r.permissions), source: r.source };
+        return { key: r.key, permissions: sortKeys(r.permissions), source: r.source, ...(r.holder === 'system' ? { holder: r.holder } : {}) };
     });
+    const reserved = reservedKeysOf(input.modules);
     const permissions = [...declaredBy.entries()]
-        .map(([key, v]) => ({ key, description: v.description, declaredBy: [...v.modules].sort(cmp) }))
+        .map(([key, v]) => ({
+        key,
+        description: v.description,
+        declaredBy: [...v.modules].sort(cmp),
+        ...(reserved.has(key) ? { holder: 'system' } : {}),
+    }))
         .sort((a, b) => cmp(a.key, b.key));
     const entityGrants = [...(input.entityGrants ?? [])]
         .sort((a, b) => cmp(a.entityType, b.entityType))
@@ -1379,6 +1466,7 @@ export function buildPermissionRegistry(input) {
     const problems = [
         ...entityGrants.flatMap(retiredShapeProblems),
         ...entityGrants.flatMap((g) => bindShapeProblems(g, new Set(declaredBy.keys()))),
+        ...registryReservedKeyProblems({ permissions, roles, entityGrants }, reserved, ownerGrantSets(input.modules)),
     ];
     if (problems.length > 0)
         throw new Error(`buildPermissionRegistry: ${problems.join('; ')}`);
@@ -1412,14 +1500,52 @@ export function buildPermissionRegistry(input) {
     }
     const exports = [...exportRows.values()].sort((a, b) => cmp(a.type, b.type));
     const imports = [...importRows.values()].sort((a, b) => cmp(a.from, b.from) || cmp(a.type, b.type));
+    const connections = connectionRowsOf(input.modules, new Set(declaredBy.keys()), reserved);
     return {
         permissions,
         roles,
         entityGrants,
         ...(exports.length ? { exports } : {}),
         ...(imports.length ? { imports } : {}),
+        ...(connections.length ? { connections } : {}),
     };
 }
+/**
+ * #2316: the modules' connection landings as registry rows, one per provider. Two modules stating
+ * the same landing collapse into one row naming both; two stating DIFFERENT landings for one
+ * provider are refused, since a connection binds one operation per scope and the platform would
+ * otherwise pick one. Refused as well: a key no module declares (the grant could never be
+ * checked) and a key reserved to a system principal (a connection acts for whoever holds the
+ * provider's token, #2430).
+ */
+function connectionRowsOf(modules, declared, reserved) {
+    const rows = new Map();
+    const problems = [];
+    const same = (a, b) => a.operation === b.operation && a.permission === b.permission && JSON.stringify(a.options ?? {}) === JSON.stringify(b.options ?? {});
+    // `?? []` although parsed manifests carry the field: the CLI imports a vertical's modules as plain JS.
+    for (const m of modules) {
+        for (const l of m.manifest.connections ?? []) {
+            const where = `connections '${l.provider}' (${m.manifest.id})`;
+            if (!declared.has(l.permission))
+                problems.push(`${where}: lands holding ${l.permission}, which no module declares`);
+            if (reserved.has(l.permission))
+                problems.push(`${where}: lands holding ${l.permission}, which is reserved to a system principal`);
+            const row = rows.get(l.provider);
+            if (!row) {
+                rows.set(l.provider, { provider: l.provider, operation: l.operation, permission: l.permission, ...(l.options ? { options: l.options } : {}), declaredBy: [m.manifest.id] });
+            }
+            else if (same(row, l)) {
+                row.declaredBy = [...new Set([...row.declaredBy, m.manifest.id])].sort((a, b) => a.localeCompare(b));
+            }
+            else {
+                problems.push(`${where}: declares a different landing for '${l.provider}' than ${row.declaredBy.join(', ')}`);
+            }
+        }
+    }
+    if (problems.length > 0)
+        throw new Error(`buildPermissionRegistry: ${problems.join('; ')}`);
+    return [...rows.values()].sort((a, b) => a.provider.localeCompare(b.provider));
+}
 /**
  * One static file in the shipped manifest (#340). The trio Cloudflare's asset store keys
  * on — content-addressed `hash`, `size` — plus the `contentType` the platform attaches at