@uns-kit/core 3.0.41 → 3.0.42

package/MIGRATIONS.md

@@ -9,6 +9,29 @@ Agents must inspect the application's existing ownership and shutdown flow
 before editing it. The examples below describe the intended behavior, not a
 mechanical search-and-replace operation.
 
+## 3.0.42 - Opt-in registered operator APIs and Service API body metadata
+
+Existing applications require no operator-API change when crossing this version.
+To expose a protected read or command to generic Controller orchestration, declare
+`operatorOperations` on the existing GET/POST registration. Use bounded request
+schemas and, for commands, a UUID request ID, write domain and application-owned
+durable idempotency receipt. See the shared
+[operator API contract](https://github.com/uns-openhub/uns-kit/blob/master/docs/operator-api.md)
+and [receipt example](https://github.com/uns-openhub/uns-kit/blob/master/docs/examples/operator-command-receipt.ts).
+
+Declarations grant no permissions. Delegated operations require current Controller
+ownership, explicit workload tools and a short-lived purpose-specific credential;
+the SDK checks current parent authorization before invoking the handler. Ordinary
+API bearer credentials remain separate. A missing Controller authority fails a
+delegated call closed without changing standalone drain/signal cleanup. Reconcile
+unknown command outcomes with the same actor/request ID and exact payload instead
+of issuing a new command. Never mark an uncertain effect as not applied.
+
+Shared POST/PUT/PATCH/DELETE registration also synchronizes Service API request-body
+metadata with an explicitly supplied OpenAPI body. Existing catalog schemas and
+examples are retained; the full JSON Schema remains in OpenAPI. No application
+handler or permission change is required for that metadata correction.
+
 ## 3.0.41 - Explicit typed null scalar clears
 
 Null publication is opt-in per MQTT publisher (`allowNullData: true`). A null

package/dist/runtime/compatibility/energenti-authorization-v1.d.ts

@@ -17,8 +17,8 @@ export declare const hvAuthorizationSchema: z.ZodObject<{
             [x: string]: string;
         }>;
         role: z.ZodEnum<{
-            source: "source";
             target: "target";
+            source: "source";
             receiver: "receiver";
         }>;
         configurationSha256: z.ZodString;
@@ -51,8 +51,8 @@ export declare const processGroupAuthorizationSchema: z.ZodObject<{
         instanceId: z.ZodString;
         processName: z.ZodString;
         role: z.ZodEnum<{
-            source: "source";
             target: "target";
+            source: "source";
             receiver: "receiver";
         }>;
         configurationSha256: z.ZodString;

package/dist/runtime/configuration-group-authorization.d.ts

@@ -21,8 +21,8 @@ export declare const configurationGroupAuthorizationSchema: z.ZodObject<{
         instanceId: z.ZodString;
         processName: z.ZodString;
         role: z.ZodEnum<{
-            source: "source";
             target: "target";
+            source: "source";
             receiver: "receiver";
         }>;
         configurationSha256: z.ZodString;
@@ -40,7 +40,7 @@ export declare function verifyConfigurationGroupPolicy(context: ProcessGroupAuth
     file: string;
     directory: string;
     journalId: string;
-    role: "source" | "target" | "receiver";
+    role: "target" | "source" | "receiver";
     groupId: string;
     groupProcessName: string;
     namespace: string;

package/dist/runtime/operator-api.d.ts

@@ -0,0 +1,74 @@
+import { z } from "zod";
+/** Explicit opt-in. OpenAPI paths alone are never operator authority. */
+export declare const OPERATOR_API_EXTENSION = "x-uns-operator-operations";
+export declare const OPERATOR_DELEGATION_CLAIM = "unsOperatorDelegation";
+export declare const OPERATOR_OUTCOME_HEADER = "x-uns-operator-outcome";
+export declare const OPERATOR_AUTH_SCHEME = "UNS-Operator";
+export declare const OPERATOR_JWT_TYPE = "uns-operator-api+jwt";
+export declare const OPERATOR_JWT_AUDIENCE = "uns-operator-api";
+export declare const OPERATOR_JWT_ALGORITHM = "PS256";
+export declare const OPERATOR_JSON_MAX_BYTES = 65536;
+export declare class OperatorApiError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(code: string, status?: number);
+}
+/** Canonical bounded JSON is shared by reviews, wire claims and receipts.
+ * Never hashes JSON with dropped undefined values or non-finite numbers. */
+export declare function operatorJson(value: unknown): string;
+export declare const operatorDigest: (value: unknown) => string;
+/** Protocol 1 deliberately excludes references, executable regex and extensions.
+ * UUID format already enforces the standard UUID constraint without a pattern. */
+export declare function operatorRequestSchema(value: unknown): Record<string, unknown>;
+declare const definitionSchema: z.ZodObject<{
+    protocol: z.ZodLiteral<1>;
+    id: z.ZodString;
+    title: z.ZodString;
+    kind: z.ZodEnum<{
+        read: "read";
+        command: "command";
+    }>;
+    requestSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    writeDomain: z.ZodOptional<z.ZodString>;
+    replay: z.ZodOptional<z.ZodLiteral<"request-id-v1">>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
+export type OperatorOperationDefinition = z.input<typeof definitionSchema>;
+export type OperatorOperation = z.output<typeof definitionSchema> & {
+    method: "GET" | "POST";
+    path: string;
+};
+export declare function operatorOperation(definition: unknown, method: unknown, path: unknown): OperatorOperation;
+export declare function operatorOperationFromWire(input: unknown): OperatorOperation;
+export declare function assertOperatorPayload(operation: OperatorOperation, value: unknown): void;
+export declare const operatorDeploymentSchema: z.ZodObject<{
+    controllerName: z.ZodString;
+    rttNode: z.ZodString;
+    version: z.ZodString;
+    instanceId: z.ZodString;
+    launchId: z.ZodUUID;
+}, z.core.$strict>;
+export type OperatorDeployment = z.infer<typeof operatorDeploymentSchema>;
+export declare const operatorDelegationSchema: z.ZodObject<{
+    protocol: z.ZodLiteral<1>;
+    operationId: z.ZodString;
+    operationDigest: z.ZodString;
+    requestDigest: z.ZodString;
+    target: z.ZodObject<{
+        controllerName: z.ZodString;
+        rttNode: z.ZodString;
+        version: z.ZodString;
+        instanceId: z.ZodString;
+        launchId: z.ZodUUID;
+    }, z.core.$strict>;
+    tool: z.ZodEnum<{
+        controller_read_runtime_operator_operation: "controller_read_runtime_operator_operation";
+        controller_execute_runtime_operator_command: "controller_execute_runtime_operator_command";
+    }>;
+}, z.core.$strict>;
+export type OperatorDelegation = z.infer<typeof operatorDelegationSchema>;
+/** Called only AFTER normal JWT cryptographic, expiry and route-grant checks. */
+export declare function assertOperatorDelegation(claims: Record<string, unknown>, operation: OperatorOperation, payload: unknown, deployment: OperatorDeployment, nowSeconds?: number): OperatorDelegation;
+export {};
+//# sourceMappingURL=operator-api.d.ts.map

package/dist/runtime/operator-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-api.d.ts","sourceRoot":"","sources":["../../src/runtime/operator-api.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yEAAyE;AACzE,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAClE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AACjE,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAChE,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AACnD,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AACxD,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAC9C,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAiB7C,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAAE,MAAM;aACZ,MAAM;gBADN,IAAI,EAAE,MAAM,EACZ,MAAM,SAAM;CAI/B;AAED;4EAC4E;AAC5E,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAyBnD;AACD,eAAO,MAAM,cAAc,GAAI,OAAO,OAAO,KAAG,MAAwE,CAAC;AAEzH;kFACkF;AAClF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoE7E;AACD,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;kBAiBlB,CAAC;AACL,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC3E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,GAAG;IAAE,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7G,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,iBAAiB,CAKxG;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAI3E;AACD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAWxF;AACD,eAAO,MAAM,wBAAwB;;;;;;kBAQ1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;kBAS1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,iFAAiF;AACjF,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,kBAAkB,EAC9B,UAAU,SAAgC,GACzC,kBAAkB,CAkCpB"}

package/dist/runtime/operator-api.js

@@ -0,0 +1,241 @@
+import { createHash } from "node:crypto";
+import { z } from "zod";
+/** Explicit opt-in. OpenAPI paths alone are never operator authority. */
+export const OPERATOR_API_EXTENSION = "x-uns-operator-operations";
+export const OPERATOR_DELEGATION_CLAIM = "unsOperatorDelegation";
+export const OPERATOR_OUTCOME_HEADER = "x-uns-operator-outcome";
+export const OPERATOR_AUTH_SCHEME = "UNS-Operator";
+export const OPERATOR_JWT_TYPE = "uns-operator-api+jwt";
+export const OPERATOR_JWT_AUDIENCE = "uns-operator-api";
+export const OPERATOR_JWT_ALGORITHM = "PS256";
+export const OPERATOR_JSON_MAX_BYTES = 65536;
+const identifier = z
+    .string()
+    .min(1)
+    .max(120)
+    .regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/);
+const digest = z.string().regex(/^[a-f0-9]{64}$/);
+const resource = z.string().min(1).max(256);
+const localPath = z
+    .string()
+    .min(1)
+    .max(2048)
+    .refine((value) => /^\/[a-zA-Z0-9_./-]+$/.test(value) && !value.includes("//") && !value.split("/").some((part) => part === "." || part === ".."), "Expected an exact local API path");
+export class OperatorApiError extends Error {
+    code;
+    status;
+    constructor(code, status = 400) {
+        super(code);
+        this.code = code;
+        this.status = status;
+    }
+}
+/** Canonical bounded JSON is shared by reviews, wire claims and receipts.
+ * Never hashes JSON with dropped undefined values or non-finite numbers. */
+export function operatorJson(value) {
+    let nodes = 0;
+    const visit = (item, depth) => {
+        if (++nodes > 4096 || depth > 20)
+            throw new OperatorApiError("operator_json_budget");
+        if (item === null || typeof item === "boolean")
+            return item;
+        if (typeof item === "number" && Number.isFinite(item))
+            return Object.is(item, -0) ? 0 : item;
+        if (typeof item === "string" && item.length <= 32768)
+            return item;
+        if (Array.isArray(item) && item.length <= 1024)
+            return item.map((entry) => visit(entry, depth + 1));
+        if (item && typeof item === "object" && [Object.prototype, null].includes(Object.getPrototypeOf(item))) {
+            const entries = Object.entries(item);
+            if (entries.length > 128)
+                throw new OperatorApiError("operator_json_budget");
+            return Object.fromEntries(entries
+                .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+                .map(([key, entry]) => {
+                if (key.length > 256 || ["__proto__", "prototype", "constructor"].includes(key))
+                    throw new OperatorApiError("operator_json_key");
+                return [key, visit(entry, depth + 1)];
+            }));
+        }
+        throw new OperatorApiError("operator_json_value");
+    };
+    const json = JSON.stringify(visit(value, 0));
+    if (Buffer.byteLength(json, "utf8") > OPERATOR_JSON_MAX_BYTES)
+        throw new OperatorApiError("operator_json_budget");
+    return json;
+}
+export const operatorDigest = (value) => createHash("sha256").update(operatorJson(value)).digest("hex");
+/** Protocol 1 deliberately excludes references, executable regex and extensions.
+ * UUID format already enforces the standard UUID constraint without a pattern. */
+export function operatorRequestSchema(value) {
+    operatorJson(value);
+    const vocabulary = new Set([
+        "$schema",
+        "type",
+        "properties",
+        "required",
+        "additionalProperties",
+        "items",
+        "minItems",
+        "maxItems",
+        "minLength",
+        "maxLength",
+        "minimum",
+        "maximum",
+        "exclusiveMinimum",
+        "exclusiveMaximum",
+        "multipleOf",
+        "format",
+        "const",
+        "enum",
+        "oneOf",
+        "anyOf",
+        "allOf",
+        "description",
+        "title",
+        "default",
+        "examples",
+        "pattern",
+    ]);
+    let count = 0;
+    function schema(input, depth = 0) {
+        if (++count > 256 || depth > 12 || !input || typeof input !== "object" || Array.isArray(input))
+            throw new OperatorApiError("operator_schema_budget");
+        const source = input;
+        for (const key of Object.keys(source))
+            if (!vocabulary.has(key))
+                throw new OperatorApiError("operator_schema_keyword");
+        const out = { ...source };
+        if ("pattern" in out) {
+            if (out["format"] !== "uuid")
+                throw new OperatorApiError("operator_schema_pattern");
+            delete out["pattern"];
+        }
+        if (out["format"] && !["uuid", "date-time", "date", "time", "email", "uri"].includes(String(out["format"])))
+            throw new OperatorApiError("operator_schema_format");
+        if (source["properties"]) {
+            if (source["additionalProperties"] !== false || typeof source["properties"] !== "object" || Array.isArray(source["properties"]))
+                throw new OperatorApiError("operator_schema_object_must_be_closed");
+            out["properties"] = Object.fromEntries(Object.entries(source["properties"]).map(([key, item]) => [key, schema(item, depth + 1)]));
+        }
+        if (source["type"] === "object" && source["additionalProperties"] !== false)
+            throw new OperatorApiError("operator_schema_object_must_be_closed");
+        if (source["additionalProperties"] !== undefined && source["additionalProperties"] !== false)
+            throw new OperatorApiError("operator_schema_object_must_be_closed");
+        if (source["items"])
+            out["items"] = schema(source["items"], depth + 1);
+        for (const key of ["oneOf", "anyOf", "allOf"])
+            if (source[key]) {
+                if (!Array.isArray(source[key]) || source[key].length > 16)
+                    throw new OperatorApiError("operator_schema_budget");
+                out[key] = source[key].map((item) => schema(item, depth + 1));
+            }
+        return out;
+    }
+    const normalized = schema(value);
+    try {
+        z.fromJSONSchema(normalized);
+    }
+    catch {
+        throw new OperatorApiError("operator_schema_unsupported");
+    }
+    return normalized;
+}
+const definitionSchema = z
+    .object({
+    protocol: z.literal(1),
+    id: identifier,
+    title: z.string().min(1).max(160),
+    kind: z.enum(["read", "command"]),
+    requestSchema: z.record(z.string(), z.unknown()),
+    writeDomain: identifier.optional(),
+    replay: z.literal("request-id-v1").optional(),
+    timeoutMs: z.number().int().min(500).max(10000).default(5000),
+    maxResponseBytes: z.number().int().min(256).max(262144).default(65536),
+})
+    .strict()
+    .superRefine((d, ctx) => {
+    if (d.kind === "command" && (!d.writeDomain || d.replay !== "request-id-v1"))
+        ctx.addIssue({ code: "custom", message: "Commands require a write domain and application request-id receipt support" });
+    if (d.kind === "read" && (d.writeDomain || d.replay))
+        ctx.addIssue({ code: "custom", message: "Reads cannot declare command authority" });
+});
+export function operatorOperation(definition, method, path) {
+    const parsed = definitionSchema.parse(definition);
+    const checkedMethod = z.enum(["GET", "POST"]).parse(method);
+    if (parsed.kind === "command" && checkedMethod !== "POST")
+        throw new OperatorApiError("operator_command_requires_post");
+    return { ...parsed, requestSchema: operatorRequestSchema(parsed.requestSchema), method: checkedMethod, path: localPath.parse(path) };
+}
+export function operatorOperationFromWire(input) {
+    if (!input || typeof input !== "object" || Array.isArray(input))
+        throw new OperatorApiError("operator_operation_invalid");
+    const { method, path, ...definition } = input;
+    return operatorOperation(definition, method, path);
+}
+export function assertOperatorPayload(operation, value) {
+    operatorJson(value);
+    let valid = false;
+    try {
+        valid = z.fromJSONSchema(operation.requestSchema).safeParse(value).success;
+    }
+    catch {
+        /* fail closed */
+    }
+    if (!valid)
+        throw new OperatorApiError("operator_request_invalid");
+    if (operation.kind === "command" && !z.uuid().safeParse(value?.["requestId"]).success)
+        throw new OperatorApiError("operator_request_id_required");
+}
+export const operatorDeploymentSchema = z
+    .object({
+    controllerName: resource,
+    rttNode: resource,
+    version: resource,
+    instanceId: resource,
+    launchId: z.uuid(),
+})
+    .strict();
+export const operatorDelegationSchema = z
+    .object({
+    protocol: z.literal(1),
+    operationId: identifier,
+    operationDigest: digest,
+    requestDigest: digest,
+    target: operatorDeploymentSchema,
+    tool: z.enum(["controller_read_runtime_operator_operation", "controller_execute_runtime_operator_command"]),
+})
+    .strict();
+/** Called only AFTER normal JWT cryptographic, expiry and route-grant checks. */
+export function assertOperatorDelegation(claims, operation, payload, deployment, nowSeconds = Math.floor(Date.now() / 1000)) {
+    const d = operatorDelegationSchema.parse(claims[OPERATOR_DELEGATION_CLAIM]);
+    if (claims["serviceToken"] !== true ||
+        claims["identityType"] !== "machine" ||
+        claims["workloadIdentityType"] !== "CONTROLLER_MCP" ||
+        claims["sub"] !== claims["machineIdentityId"] ||
+        !z.uuid().safeParse(claims["sub"]).success ||
+        !Number.isSafeInteger(claims["tokenVersion"]) ||
+        Number(claims["tokenVersion"]) < 1 ||
+        claims["role"] !== "operator" ||
+        !Number.isSafeInteger(claims["iat"]) ||
+        !Number.isSafeInteger(claims["exp"]) ||
+        Number(claims["exp"]) <= nowSeconds ||
+        Number(claims["iat"]) > nowSeconds + 2 ||
+        Number(claims["exp"]) - Number(claims["iat"]) > 30 ||
+        Number(claims["exp"]) <= Number(claims["iat"]) ||
+        !Array.isArray(claims["accessRules"]) ||
+        claims["accessRules"].length !== 1 ||
+        claims["accessRules"][0] !== operation.path) {
+        throw new OperatorApiError("operator_delegation_invalid", 403);
+    }
+    if (d.operationId !== operation.id ||
+        d.operationDigest !== operatorDigest(operation) ||
+        d.requestDigest !== operatorDigest(payload) ||
+        operatorDigest(d.target) !== operatorDigest(operatorDeploymentSchema.parse(deployment)) ||
+        d.tool !== (operation.kind === "command" ? "controller_execute_runtime_operator_command" : "controller_read_runtime_operator_operation")) {
+        throw new OperatorApiError("operator_delegation_binding_changed", 403);
+    }
+    assertOperatorPayload(operation, payload);
+    return d;
+}
+//# sourceMappingURL=operator-api.js.map

package/dist/runtime/operator-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-api.js","sourceRoot":"","sources":["../../src/runtime/operator-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yEAAyE;AACzE,MAAM,CAAC,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;AAClE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACxD,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAC7C,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACzC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5C,MAAM,SAAS,GAAG,CAAC;KAChB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,IAAI,CAAC;KACT,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EACzI,kCAAkC,CACnC,CAAC;AAEJ,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IACA;IAFlB,YACkB,IAAY,EACZ,SAAS,GAAG;QAE5B,KAAK,CAAC,IAAI,CAAC,CAAC;QAHI,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAM;IAG9B,CAAC;CACF;AAED;4EAC4E;AAC5E,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,KAAa,EAAW,EAAE;QACtD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrF,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7F,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC;QAClE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACvG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC,WAAW,CACvB,OAAO;iBACJ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBAChD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBACpB,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;gBACjI,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC,CAAC,CACL,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,uBAAuB;QAAE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;IAClH,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEzH;kFACkF;AAClF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,SAAS;QACT,MAAM;QACN,YAAY;QACZ,UAAU;QACV,sBAAsB;QACtB,OAAO;QACP,UAAU;QACV,UAAU;QACV,WAAW;QACX,WAAW;QACX,SAAS;QACT,SAAS;QACT,kBAAkB;QAClB,kBAAkB;QAClB,YAAY;QACZ,QAAQ;QACR,OAAO;QACP,MAAM;QACN,OAAO;QACP,OAAO;QACP,OAAO;QACP,aAAa;QACb,OAAO;QACP,SAAS;QACT,UAAU;QACV,SAAS;KACV,CAAC,CAAC;IACH,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,MAAM,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;QACvC,IAAI,EAAE,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAC5F,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;QACvH,MAAM,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC1B,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM;gBAAE,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;YACpF,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzG,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,sBAAsB,CAAC,KAAK,KAAK,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC7H,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,CAAC,CAAC;YACtE,GAAG,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,WAAW,CACpC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CACrH,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,sBAAsB,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,CAAC,CAAC;QACjJ,IAAI,MAAM,CAAC,sBAAsB,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,sBAAsB,CAAC,KAAK,KAAK;YAC1F,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACvE,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;YAC3C,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE;oBAAE,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;gBACjH,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,CAAC,CAAC,cAAc,CAAC,UAAmB,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtB,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAChD,WAAW,EAAE,UAAU,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CACvE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACtB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC;QAC1E,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,4EAA4E,EAAE,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;AAC5I,CAAC,CAAC,CAAC;AAGL,MAAM,UAAU,iBAAiB,CAAC,UAAmB,EAAE,MAAe,EAAE,IAAa;IACnF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,aAAa,KAAK,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,CAAC,CAAC;IACxH,OAAO,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AACvI,CAAC;AACD,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;IAC1H,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,KAAgC,CAAC;IACzE,OAAO,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,SAA4B,EAAE,KAAc;IAChF,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,aAAsB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;IACnE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAE,KAAiC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;QAChH,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;AAC/D,CAAC;AACD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,cAAc,EAAE,QAAQ;IACxB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,QAAQ;IACjB,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;CACnB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtB,WAAW,EAAE,UAAU;IACvB,eAAe,EAAE,MAAM;IACvB,aAAa,EAAE,MAAM;IACrB,MAAM,EAAE,wBAAwB;IAChC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,4CAA4C,EAAE,6CAA6C,CAAC,CAAC;CAC5G,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,iFAAiF;AACjF,MAAM,UAAU,wBAAwB,CACtC,MAA+B,EAC/B,SAA4B,EAC5B,OAAgB,EAChB,UAA8B,EAC9B,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAE1C,MAAM,CAAC,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC5E,IACE,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI;QAC/B,MAAM,CAAC,cAAc,CAAC,KAAK,SAAS;QACpC,MAAM,CAAC,sBAAsB,CAAC,KAAK,gBAAgB;QACnD,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,mBAAmB,CAAC;QAC7C,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO;QAC1C,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,UAAU;QAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE;QAClD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACrC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC;QAClC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,EAC3C,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,IACE,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE;QAC9B,CAAC,CAAC,eAAe,KAAK,cAAc,CAAC,SAAS,CAAC;QAC/C,CAAC,CAAC,aAAa,KAAK,cAAc,CAAC,OAAO,CAAC;QAC3C,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,cAAc,CAAC,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvF,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,4CAA4C,CAAC,EACxI,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC;AACX,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { z } from \"zod\";\n\n/** Explicit opt-in. OpenAPI paths alone are never operator authority. */\nexport const OPERATOR_API_EXTENSION = \"x-uns-operator-operations\";\nexport const OPERATOR_DELEGATION_CLAIM = \"unsOperatorDelegation\";\nexport const OPERATOR_OUTCOME_HEADER = \"x-uns-operator-outcome\";\nexport const OPERATOR_AUTH_SCHEME = \"UNS-Operator\";\nexport const OPERATOR_JWT_TYPE = \"uns-operator-api+jwt\";\nexport const OPERATOR_JWT_AUDIENCE = \"uns-operator-api\";\nexport const OPERATOR_JWT_ALGORITHM = \"PS256\";\nexport const OPERATOR_JSON_MAX_BYTES = 65536;\nconst identifier = z\n  .string()\n  .min(1)\n  .max(120)\n  .regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/);\nconst digest = z.string().regex(/^[a-f0-9]{64}$/);\nconst resource = z.string().min(1).max(256);\nconst localPath = z\n  .string()\n  .min(1)\n  .max(2048)\n  .refine(\n    (value) => /^\\/[a-zA-Z0-9_./-]+$/.test(value) && !value.includes(\"//\") && !value.split(\"/\").some((part) => part === \".\" || part === \"..\"),\n    \"Expected an exact local API path\",\n  );\n\nexport class OperatorApiError extends Error {\n  constructor(\n    public readonly code: string,\n    public readonly status = 400,\n  ) {\n    super(code);\n  }\n}\n\n/** Canonical bounded JSON is shared by reviews, wire claims and receipts.\n * Never hashes JSON with dropped undefined values or non-finite numbers. */\nexport function operatorJson(value: unknown): string {\n  let nodes = 0;\n  const visit = (item: unknown, depth: number): unknown => {\n    if (++nodes > 4096 || depth > 20) throw new OperatorApiError(\"operator_json_budget\");\n    if (item === null || typeof item === \"boolean\") return item;\n    if (typeof item === \"number\" && Number.isFinite(item)) return Object.is(item, -0) ? 0 : item;\n    if (typeof item === \"string\" && item.length <= 32768) return item;\n    if (Array.isArray(item) && item.length <= 1024) return item.map((entry) => visit(entry, depth + 1));\n    if (item && typeof item === \"object\" && [Object.prototype, null].includes(Object.getPrototypeOf(item))) {\n      const entries = Object.entries(item as Record<string, unknown>);\n      if (entries.length > 128) throw new OperatorApiError(\"operator_json_budget\");\n      return Object.fromEntries(\n        entries\n          .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))\n          .map(([key, entry]) => {\n            if (key.length > 256 || [\"__proto__\", \"prototype\", \"constructor\"].includes(key)) throw new OperatorApiError(\"operator_json_key\");\n            return [key, visit(entry, depth + 1)];\n          }),\n      );\n    }\n    throw new OperatorApiError(\"operator_json_value\");\n  };\n  const json = JSON.stringify(visit(value, 0));\n  if (Buffer.byteLength(json, \"utf8\") > OPERATOR_JSON_MAX_BYTES) throw new OperatorApiError(\"operator_json_budget\");\n  return json;\n}\nexport const operatorDigest = (value: unknown): string => createHash(\"sha256\").update(operatorJson(value)).digest(\"hex\");\n\n/** Protocol 1 deliberately excludes references, executable regex and extensions.\n * UUID format already enforces the standard UUID constraint without a pattern. */\nexport function operatorRequestSchema(value: unknown): Record<string, unknown> {\n  operatorJson(value);\n  const vocabulary = new Set([\n    \"$schema\",\n    \"type\",\n    \"properties\",\n    \"required\",\n    \"additionalProperties\",\n    \"items\",\n    \"minItems\",\n    \"maxItems\",\n    \"minLength\",\n    \"maxLength\",\n    \"minimum\",\n    \"maximum\",\n    \"exclusiveMinimum\",\n    \"exclusiveMaximum\",\n    \"multipleOf\",\n    \"format\",\n    \"const\",\n    \"enum\",\n    \"oneOf\",\n    \"anyOf\",\n    \"allOf\",\n    \"description\",\n    \"title\",\n    \"default\",\n    \"examples\",\n    \"pattern\",\n  ]);\n  let count = 0;\n  function schema(input: unknown, depth = 0): Record<string, unknown> {\n    if (++count > 256 || depth > 12 || !input || typeof input !== \"object\" || Array.isArray(input))\n      throw new OperatorApiError(\"operator_schema_budget\");\n    const source = input as Record<string, unknown>;\n    for (const key of Object.keys(source)) if (!vocabulary.has(key)) throw new OperatorApiError(\"operator_schema_keyword\");\n    const out = { ...source };\n    if (\"pattern\" in out) {\n      if (out[\"format\"] !== \"uuid\") throw new OperatorApiError(\"operator_schema_pattern\");\n      delete out[\"pattern\"];\n    }\n    if (out[\"format\"] && ![\"uuid\", \"date-time\", \"date\", \"time\", \"email\", \"uri\"].includes(String(out[\"format\"])))\n      throw new OperatorApiError(\"operator_schema_format\");\n    if (source[\"properties\"]) {\n      if (source[\"additionalProperties\"] !== false || typeof source[\"properties\"] !== \"object\" || Array.isArray(source[\"properties\"]))\n        throw new OperatorApiError(\"operator_schema_object_must_be_closed\");\n      out[\"properties\"] = Object.fromEntries(\n        Object.entries(source[\"properties\"] as Record<string, unknown>).map(([key, item]) => [key, schema(item, depth + 1)]),\n      );\n    }\n    if (source[\"type\"] === \"object\" && source[\"additionalProperties\"] !== false) throw new OperatorApiError(\"operator_schema_object_must_be_closed\");\n    if (source[\"additionalProperties\"] !== undefined && source[\"additionalProperties\"] !== false)\n      throw new OperatorApiError(\"operator_schema_object_must_be_closed\");\n    if (source[\"items\"]) out[\"items\"] = schema(source[\"items\"], depth + 1);\n    for (const key of [\"oneOf\", \"anyOf\", \"allOf\"])\n      if (source[key]) {\n        if (!Array.isArray(source[key]) || source[key].length > 16) throw new OperatorApiError(\"operator_schema_budget\");\n        out[key] = source[key].map((item) => schema(item, depth + 1));\n      }\n    return out;\n  }\n  const normalized = schema(value);\n  try {\n    z.fromJSONSchema(normalized as never);\n  } catch {\n    throw new OperatorApiError(\"operator_schema_unsupported\");\n  }\n  return normalized;\n}\nconst definitionSchema = z\n  .object({\n    protocol: z.literal(1),\n    id: identifier,\n    title: z.string().min(1).max(160),\n    kind: z.enum([\"read\", \"command\"]),\n    requestSchema: z.record(z.string(), z.unknown()),\n    writeDomain: identifier.optional(),\n    replay: z.literal(\"request-id-v1\").optional(),\n    timeoutMs: z.number().int().min(500).max(10000).default(5000),\n    maxResponseBytes: z.number().int().min(256).max(262144).default(65536),\n  })\n  .strict()\n  .superRefine((d, ctx) => {\n    if (d.kind === \"command\" && (!d.writeDomain || d.replay !== \"request-id-v1\"))\n      ctx.addIssue({ code: \"custom\", message: \"Commands require a write domain and application request-id receipt support\" });\n    if (d.kind === \"read\" && (d.writeDomain || d.replay)) ctx.addIssue({ code: \"custom\", message: \"Reads cannot declare command authority\" });\n  });\nexport type OperatorOperationDefinition = z.input<typeof definitionSchema>;\nexport type OperatorOperation = z.output<typeof definitionSchema> & { method: \"GET\" | \"POST\"; path: string };\nexport function operatorOperation(definition: unknown, method: unknown, path: unknown): OperatorOperation {\n  const parsed = definitionSchema.parse(definition);\n  const checkedMethod = z.enum([\"GET\", \"POST\"]).parse(method);\n  if (parsed.kind === \"command\" && checkedMethod !== \"POST\") throw new OperatorApiError(\"operator_command_requires_post\");\n  return { ...parsed, requestSchema: operatorRequestSchema(parsed.requestSchema), method: checkedMethod, path: localPath.parse(path) };\n}\nexport function operatorOperationFromWire(input: unknown): OperatorOperation {\n  if (!input || typeof input !== \"object\" || Array.isArray(input)) throw new OperatorApiError(\"operator_operation_invalid\");\n  const { method, path, ...definition } = input as Record<string, unknown>;\n  return operatorOperation(definition, method, path);\n}\nexport function assertOperatorPayload(operation: OperatorOperation, value: unknown): void {\n  operatorJson(value);\n  let valid = false;\n  try {\n    valid = z.fromJSONSchema(operation.requestSchema as never).safeParse(value).success;\n  } catch {\n    /* fail closed */\n  }\n  if (!valid) throw new OperatorApiError(\"operator_request_invalid\");\n  if (operation.kind === \"command\" && !z.uuid().safeParse((value as Record<string, unknown>)?.[\"requestId\"]).success)\n    throw new OperatorApiError(\"operator_request_id_required\");\n}\nexport const operatorDeploymentSchema = z\n  .object({\n    controllerName: resource,\n    rttNode: resource,\n    version: resource,\n    instanceId: resource,\n    launchId: z.uuid(),\n  })\n  .strict();\nexport type OperatorDeployment = z.infer<typeof operatorDeploymentSchema>;\nexport const operatorDelegationSchema = z\n  .object({\n    protocol: z.literal(1),\n    operationId: identifier,\n    operationDigest: digest,\n    requestDigest: digest,\n    target: operatorDeploymentSchema,\n    tool: z.enum([\"controller_read_runtime_operator_operation\", \"controller_execute_runtime_operator_command\"]),\n  })\n  .strict();\nexport type OperatorDelegation = z.infer<typeof operatorDelegationSchema>;\n\n/** Called only AFTER normal JWT cryptographic, expiry and route-grant checks. */\nexport function assertOperatorDelegation(\n  claims: Record<string, unknown>,\n  operation: OperatorOperation,\n  payload: unknown,\n  deployment: OperatorDeployment,\n  nowSeconds = Math.floor(Date.now() / 1000),\n): OperatorDelegation {\n  const d = operatorDelegationSchema.parse(claims[OPERATOR_DELEGATION_CLAIM]);\n  if (\n    claims[\"serviceToken\"] !== true ||\n    claims[\"identityType\"] !== \"machine\" ||\n    claims[\"workloadIdentityType\"] !== \"CONTROLLER_MCP\" ||\n    claims[\"sub\"] !== claims[\"machineIdentityId\"] ||\n    !z.uuid().safeParse(claims[\"sub\"]).success ||\n    !Number.isSafeInteger(claims[\"tokenVersion\"]) ||\n    Number(claims[\"tokenVersion\"]) < 1 ||\n    claims[\"role\"] !== \"operator\" ||\n    !Number.isSafeInteger(claims[\"iat\"]) ||\n    !Number.isSafeInteger(claims[\"exp\"]) ||\n    Number(claims[\"exp\"]) <= nowSeconds ||\n    Number(claims[\"iat\"]) > nowSeconds + 2 ||\n    Number(claims[\"exp\"]) - Number(claims[\"iat\"]) > 30 ||\n    Number(claims[\"exp\"]) <= Number(claims[\"iat\"]) ||\n    !Array.isArray(claims[\"accessRules\"]) ||\n    claims[\"accessRules\"].length !== 1 ||\n    claims[\"accessRules\"][0] !== operation.path\n  ) {\n    throw new OperatorApiError(\"operator_delegation_invalid\", 403);\n  }\n  if (\n    d.operationId !== operation.id ||\n    d.operationDigest !== operatorDigest(operation) ||\n    d.requestDigest !== operatorDigest(payload) ||\n    operatorDigest(d.target) !== operatorDigest(operatorDeploymentSchema.parse(deployment)) ||\n    d.tool !== (operation.kind === \"command\" ? \"controller_execute_runtime_operator_command\" : \"controller_read_runtime_operator_operation\")\n  ) {\n    throw new OperatorApiError(\"operator_delegation_binding_changed\", 403);\n  }\n  assertOperatorPayload(operation, payload);\n  return d;\n}\n"]}

package/dist/runtime/process-group-authorization.d.ts

@@ -22,8 +22,8 @@ export declare const processGroupAuthorizationSchema: z.ZodObject<{
         instanceId: z.ZodString;
         processName: z.ZodString;
         role: z.ZodEnum<{
-            source: "source";
             target: "target";
+            source: "source";
             receiver: "receiver";
         }>;
         configurationSha256: z.ZodString;
@@ -75,8 +75,8 @@ export declare const hvAuthorizationSchema: z.ZodObject<{
             [x: string]: string;
         }>;
         role: z.ZodEnum<{
-            source: "source";
             target: "target";
+            source: "source";
             receiver: "receiver";
         }>;
         configurationSha256: z.ZodString;

package/dist/runtime/process-group-control-contract.d.ts

@@ -46,8 +46,8 @@ export declare const groupMemberCommandSchema: z.ZodObject<{
     }, z.core.$strict>;
     operationId: z.ZodString;
     role: z.ZodEnum<{
-        source: "source";
         target: "target";
+        source: "source";
     }>;
     expectedConfigurationChecksum: z.ZodOptional<z.ZodString>;
     requestId: z.ZodOptional<z.ZodString>;

package/dist/uns/uns-interfaces.d.ts

@@ -505,6 +505,10 @@ export interface ApiChatDefaults {
     [key: string]: string | number | boolean | undefined;
 }
 export interface IApiProxyOptions {
+    /** Fresh principal-status endpoint for operator operations. Controller-managed
+     * runtimes default to their configured controller origin. No bearer is exposed. */
+    operatorAuthorizationStatusUrl?: string;
+    operatorJwksUrl?: string;
     jwtSecret?: string;
     /**
      * Public origin advertised for generated API endpoint metadata.
@@ -533,6 +537,7 @@ export interface IApiProxyOptions {
     disableDefaultApiMount?: boolean;
 }
 export interface IGetEndpointOptions {
+    operatorOperations?: import("../runtime/operator-api.js").OperatorOperationDefinition[];
     apiDescription?: string;
     tags?: string[];
     queryParams?: QueryParamDef[];
@@ -545,6 +550,7 @@ export interface IGetEndpointOptions {
     chatDefaults?: ApiChatDefaults;
 }
 export interface IPostEndpointOptions {
+    operatorOperations?: import("../runtime/operator-api.js").OperatorOperationDefinition[];
     apiDescription?: string;
     tags?: string[];
     routeOnly?: boolean;

package/dist/uns/uns-interfaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uns-interfaces.d.ts","sourceRoot":"","sources":["../../src/uns/uns-interfaces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnI,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAErF,MAAM,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,GAAG,CAAC;AAC/F,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,OAAO,CAG7D;AAED,MAAM,MAAM,YAAY,GAAG,qBAAqB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEjE,eAAO,MAAM,UAAU,+BAAgC,CAAC;AACxD,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;AAC9C,yFAAyF;AACzF,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,eAAe,EAAE,GAAG,IAAI,CAAC;AAEnE,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,eAAe,CASvF;AAED,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEnF,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,iBAAiB,GACjB,eAAe,GACf,uBAAuB,GACvB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,uBAAuB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,gCAAgC;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC,wFAAwF;IACxF,gBAAgB,CAAC,EAAE,aAAa,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACjD,gBAAgB,CAAC,EAAE,aAAa,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACjD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClD,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,OAAO,GAAG,iBAAiB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC;AAED,eAAO,MAAM,qBAAqB,0LAmBxB,CAAC;AAOX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG1E,MAAM,MAAM,WAAW,GACnB,oBAAoB,GACpB,WAAW,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,GAChC,WAAW,MAAM,IAAI,MAAM,GAAG,GAC9B,SAAS,MAAM,GAAG,CAAC;AAEvB,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAYlE;AAED,MAAM,WAAW,cAAc;IAC7B,gFAAgF;IAChF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sHAAsH;IACtH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yFAAyF;IACzF,mBAAmB,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,sFAAsF;IACtF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;CAC7C;AAED,MAAM,WAAW,qBAAqB;IACpC,wEAAwE;IACxE,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,yFAAyF;IACzF,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,eAAe,GAAG,eAAe,CAAC;IACrD,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IAExB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,GAAG,CAAA;KAAE,CAAC;IACvD,eAAe,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,eAAe,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAG7F,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAGzC,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAG1H,SAAS,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAGvD,WAAW,EAAE;QAAC,GAAG,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAC,CAAC;IAClC,YAAY,EAAE;QAAC,GAAG,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAC,CAAC;IACnC,WAAW,EAAE;QAAC,GAAG,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAC,CAAC;IAClC,aAAa,EAAE;QAAC,GAAG,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAC,CAAC;IACpC,cAAc,EAAE;QAAC,GAAG,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAC,CAAC;IAGrC,sBAAsB,EAAE;QAAE,cAAc,EAAE,YAAY,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAGhF,4BAA4B,EAAE;QAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAG1F,gCAAgC,EAAE;QAAE,wBAAwB,EAAE,UAAU,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAGlG,kCAAkC,EAAE;QAAE,0BAA0B,EAAE,UAAU,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAGtG,2BAA2B,EAAE;QAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAG9F,iCAAiC,EAAE;QAAE,yBAAyB,EAAE,OAAO,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAClG;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ;IAChD,SAAS,EAAE,eAAe,CAAC;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,iFAAiF;IACjF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IACjB,kFAAkF;IAClF,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,gGAAgG;IAChG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACxC,GAAG,CAAC,EAAE,eAAe,CAAC;CACvB;AAED,wEAAwE;AACxE,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE/D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,gGAAgG;IAChG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,YAAY,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,yBAAyB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3C,yGAAyG;IACzG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yFAAyF;IACzF,SAAS,CAAC,EAAE,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5C;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qGAAqG;IACrG,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,qFAAqF;IACrF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,yFAAyF;IACzF,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,uFAAuF;IACvF,oBAAoB,CAAC,EAAE,gCAAgC,CAAC;IACxD,qDAAqD;IACrD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,KAAK,gBAAgB,GACjB;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAA;CAAE,GAC3F;IAAE,OAAO,CAAC,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5F;IAAE,OAAO,CAAC,EAAE,KAAK,CAAC;IAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAElG,MAAM,MAAM,mBAAmB,GAAG,qBAAqB,GAAG,gBAAgB,CAAC;AAE3E,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GACzC;IACE,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,kBAAkB,CAAC,EAAE,KAAK,CAAC;IAC3B,qBAAqB,CAAC,EAAE,KAAK,CAAC;IAC9B,0BAA0B,CAAC,EAAE,KAAK,CAAC;CACpC,GACD;IACE,0FAA0F;IAC1F,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6FAA6F;IAC7F,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,KAAK,CAAC;IAC9B,0BAA0B,CAAC,EAAE,KAAK,CAAC;CACpC,GACD;IACE,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,kBAAkB,CAAC,EAAE,KAAK,CAAC;IAC3B,0FAA0F;IAC1F,qBAAqB,EAAE,sBAAsB,CAAC;IAC9C,qGAAqG;IACrG,0BAA0B,EAAE,MAAM,CAAC;CACpC,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,QAAQ,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,aAAa,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,WAAW,CAAC;IACtB,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,EAAE,CAAC;CACzD,GAAG,iCAAiC,CAAC;AAGtC,MAAM,WAAW,UAAU;IAEzB,OAAO,EAAE,mBAAmB,CAAC;IAG7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAGzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;CAEpC;AAED,MAAM,WAAW,WAAW;IACxB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAoB,SAAQ,WAAW;IACtD,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE/D,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAC,MAAM,CAAC;IACjB,aAAa,EAAE,gBAAgB,CAAC;IAChC,KAAK,EAAC,MAAM,CAAC;IACb,WAAW,EAAC,MAAM,CAAC;IACnB,yFAAyF;IACzF,SAAS,EAAC,MAAM,CAAC;IACjB,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IACrB,yBAAyB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1C,yFAAyF;IACzF,SAAS,CAAC,EAAE,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5C,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qGAAqG;IACrG,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,qFAAqF;IACrF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,yFAAyF;IACzF,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,uFAAuF;IACvF,oBAAoB,CAAC,EAAE,gCAAgC,CAAC;IACxD,qDAAqD;IACrD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,KAAK,EAAE,QAAQ,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kGAAkG;IAClG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,0FAA0F;IAC1F,qBAAqB,CAAC,EAAE,sBAAsB,CAAC;IAC/C,gGAAgG;IAChG,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,UAAU,EAAE,aAAa,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,WAAW,CAAC;IACtB,gGAAgG;IAChG,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,iGAAiG;IACjG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kGAAkG;IAClG,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAGD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAC,MAAM,CAAC;IACjB,KAAK,EAAC,MAAM,CAAC;IACb,aAAa,EAAE,gBAAgB,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,eAAe,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACvD,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,KAAK,EAAE,QAAQ,CAAC;IAChB,UAAU,EAAE,aAAa,CAAC;IAC1B,QAAQ,EAAE,WAAW,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE;QACL,gBAAgB,EAAE,MAAM,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,CAAC,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;KAC9C,CAAC;IACF;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,eAAe,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC;;OAEG;IACH,YAAY,CAAC,EAAE,eAAe,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,eAAe,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;CACH;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;CAAG;AACpE,MAAM,WAAW,qBAAsB,SAAQ,oBAAoB;CAAG;AACtE,MAAM,WAAW,sBAAuB,SAAQ,oBAAoB;CAAG"}
+{"version":3,"file":"uns-interfaces.d.ts","sourceRoot":"","sources":["../../src/uns/uns-interfaces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnI,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAErF,MAAM,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,GAAG,CAAC;AAC/F,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,OAAO,CAG7D;AAED,MAAM,MAAM,YAAY,GAAG,qBAAqB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEjE,eAAO,MAAM,UAAU,+BAAgC,CAAC;AACxD,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;AAC9C,yFAAyF;AACzF,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,eAAe,EAAE,GAAG,IAAI,CAAC;AAEnE,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,eAAe,CASvF;AAED,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEnF,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,iBAAiB,GACjB,eAAe,GACf,uBAAuB,GACvB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,uBAAuB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,gCAAgC;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC,wFAAwF;IACxF,gBAAgB,CAAC,EAAE,aAAa,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACjD,gBAAgB,CAAC,EAAE,aAAa,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACjD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClD,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,OAAO,GAAG,iBAAiB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC;AAED,eAAO,MAAM,qBAAqB,0LAmBxB,CAAC;AAOX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG1E,MAAM,MAAM,WAAW,GACnB,oBAAoB,GACpB,WAAW,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,GAChC,WAAW,MAAM,IAAI,MAAM,GAAG,GAC9B,SAAS,MAAM,GAAG,CAAC;AAEvB,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAYlE;AAED,MAAM,WAAW,cAAc;IAC7B,gFAAgF;IAChF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sHAAsH;IACtH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yFAAyF;IACzF,mBAAmB,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,sFAAsF;IACtF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;CAC7C;AAED,MAAM,WAAW,qBAAqB;IACpC,wEAAwE;IACxE,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,yFAAyF;IACzF,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,eAAe,GAAG,eAAe,CAAC;IACrD,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IAExB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,GAAG,CAAA;KAAE,CAAC;IACvD,eAAe,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,eAAe,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAG7F,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAGzC,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAG1H,SAAS,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAGvD,WAAW,EAAE;QAAC,GAAG,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAC,CAAC;IAClC,YAAY,EAAE;QAAC,GAAG,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAC,CAAC;IACnC,WAAW,EAAE;QAAC,GAAG,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAC,CAAC;IAClC,aAAa,EAAE;QAAC,GAAG,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAC,CAAC;IACpC,cAAc,EAAE;QAAC,GAAG,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAC,CAAC;IAGrC,sBAAsB,EAAE;QAAE,cAAc,EAAE,YAAY,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAGhF,4BAA4B,EAAE;QAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAG1F,gCAAgC,EAAE;QAAE,wBAAwB,EAAE,UAAU,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAGlG,kCAAkC,EAAE;QAAE,0BAA0B,EAAE,UAAU,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAGtG,2BAA2B,EAAE;QAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAG9F,iCAAiC,EAAE;QAAE,yBAAyB,EAAE,OAAO,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAClG;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ;IAChD,SAAS,EAAE,eAAe,CAAC;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,iFAAiF;IACjF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IACjB,kFAAkF;IAClF,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,gGAAgG;IAChG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACxC,GAAG,CAAC,EAAE,eAAe,CAAC;CACvB;AAED,wEAAwE;AACxE,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE/D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,gGAAgG;IAChG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,YAAY,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,yBAAyB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3C,yGAAyG;IACzG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yFAAyF;IACzF,SAAS,CAAC,EAAE,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5C;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qGAAqG;IACrG,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,qFAAqF;IACrF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,yFAAyF;IACzF,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,uFAAuF;IACvF,oBAAoB,CAAC,EAAE,gCAAgC,CAAC;IACxD,qDAAqD;IACrD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,KAAK,gBAAgB,GACjB;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAA;CAAE,GAC3F;IAAE,OAAO,CAAC,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5F;IAAE,OAAO,CAAC,EAAE,KAAK,CAAC;IAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAElG,MAAM,MAAM,mBAAmB,GAAG,qBAAqB,GAAG,gBAAgB,CAAC;AAE3E,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GACzC;IACE,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,kBAAkB,CAAC,EAAE,KAAK,CAAC;IAC3B,qBAAqB,CAAC,EAAE,KAAK,CAAC;IAC9B,0BAA0B,CAAC,EAAE,KAAK,CAAC;CACpC,GACD;IACE,0FAA0F;IAC1F,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6FAA6F;IAC7F,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,KAAK,CAAC;IAC9B,0BAA0B,CAAC,EAAE,KAAK,CAAC;CACpC,GACD;IACE,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,kBAAkB,CAAC,EAAE,KAAK,CAAC;IAC3B,0FAA0F;IAC1F,qBAAqB,EAAE,sBAAsB,CAAC;IAC9C,qGAAqG;IACrG,0BAA0B,EAAE,MAAM,CAAC;CACpC,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,QAAQ,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,aAAa,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,WAAW,CAAC;IACtB,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,EAAE,CAAC;CACzD,GAAG,iCAAiC,CAAC;AAGtC,MAAM,WAAW,UAAU;IAEzB,OAAO,EAAE,mBAAmB,CAAC;IAG7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAGzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;CAEpC;AAED,MAAM,WAAW,WAAW;IACxB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAoB,SAAQ,WAAW;IACtD,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE/D,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAC,MAAM,CAAC;IACjB,aAAa,EAAE,gBAAgB,CAAC;IAChC,KAAK,EAAC,MAAM,CAAC;IACb,WAAW,EAAC,MAAM,CAAC;IACnB,yFAAyF;IACzF,SAAS,EAAC,MAAM,CAAC;IACjB,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IACrB,yBAAyB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1C,yFAAyF;IACzF,SAAS,CAAC,EAAE,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5C,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qGAAqG;IACrG,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,qFAAqF;IACrF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,yFAAyF;IACzF,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,uFAAuF;IACvF,oBAAoB,CAAC,EAAE,gCAAgC,CAAC;IACxD,qDAAqD;IACrD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,KAAK,EAAE,QAAQ,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kGAAkG;IAClG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,0FAA0F;IAC1F,qBAAqB,CAAC,EAAE,sBAAsB,CAAC;IAC/C,gGAAgG;IAChG,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,UAAU,EAAE,aAAa,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,WAAW,CAAC;IACtB,gGAAgG;IAChG,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,iGAAiG;IACjG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kGAAkG;IAClG,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAGD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAC,MAAM,CAAC;IACjB,KAAK,EAAC,MAAM,CAAC;IACb,aAAa,EAAE,gBAAgB,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,eAAe,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACvD,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,KAAK,EAAE,QAAQ,CAAC;IAChB,UAAU,EAAE,aAAa,CAAC;IAC1B,QAAQ,EAAE,WAAW,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,WAAW,gBAAgB;IAC/B;uFACmF;IACnF,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE;QACL,gBAAgB,EAAE,MAAM,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,CAAC,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;KAC9C,CAAC;IACF;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,kBAAkB,CAAC,EAAE,OAAO,4BAA4B,EAAE,2BAA2B,EAAE,CAAC;IACxF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,eAAe,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC;;OAEG;IACH,YAAY,CAAC,EAAE,eAAe,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,kBAAkB,CAAC,EAAE,OAAO,4BAA4B,EAAE,2BAA2B,EAAE,CAAC;IACxF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,eAAe,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;CACH;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;CAAG;AACpE,MAAM,WAAW,qBAAsB,SAAQ,oBAAoB;CAAG;AACtE,MAAM,WAAW,sBAAuB,SAAQ,oBAAoB;CAAG"}

package/dist/uns/uns-interfaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"uns-interfaces.js","sourceRoot":"","sources":["../../src/uns/uns-interfaces.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,YAAY,GAAG,+CAA+C,CAAC;IACrE,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAID,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAMxD,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,QAAkB;IACpE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC;IAC9B,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ;QAChD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAyCD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;IACN,MAAM;IACN,WAAW;IACX,cAAc;IACd,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;CACD,CAAC;AAEX,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAS,qBAAqB,CAAC,CAAC;AACvE,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AACnD,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AACnD,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAW3C,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/B,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAC9B,CAAC;AACJ,CAAC","sourcesContent":["import type { MqttPublishQueueOptions } from \"../uns-mqtt/publish-queue-contract.js\";\nimport type { ApplicationHandoverState } from \"../runtime/application-handover-state.js\";\nimport type { HandoverShutdownHooks } from \"./handover-shutdown.js\";\nimport { UnsAttributeType } from \"../graphql/schema.js\";\nimport { MeasurementUnit } from \"./uns-measurements.js\";\nimport { UnsTags } from \"./uns-tags.js\";\nimport type { UnsObjectId, UnsObjectType } from \"./uns-object.js\";\nimport type { UnsAsset } from \"./uns-asset.js\";\nimport type { IMqttConnectProperties, IMqttPublishOptions, IMqttServerConfig, MqttProtocol } from \"../uns-mqtt/mqtt-interfaces.js\";\nimport { UnsTopics } from \"./uns-topics.js\";\nimport { knownUnsAttributes, type KnownUnsAttributeName } from \"./uns-attributes.js\";\n\nexport type ISO8601 = `${number}-${string}-${string}T${string}:${string}:${string}.${string}Z`;\nexport function isIOS8601Type(value: string): value is ISO8601 {\n  const iso8601Regex = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\n  return iso8601Regex.test(value);\n}\n// Known attribute names (with IntelliSense) while still allowing arbitrary strings.\nexport type UnsAttribute = KnownUnsAttributeName | (string & {});\n\nexport const valueTypes = [\"string\", \"number\"] as const;\nexport type ValueTypeString = (typeof valueTypes)[number];\nexport type ScalarValueType = string | number;\n/** Scalar telemetry or a scalar array used by metadata such as relationship evidence. */\nexport type ValueType = ScalarValueType | ScalarValueType[] | null;\n\n/** A null is an explicit typed clear, not a missing field or inferred object. */\nexport function scalarDataValueType(value: unknown, declared?: unknown): ValueTypeString {\n  if (value === null) {\n    if (declared === \"string\" || declared === \"number\") return declared;\n    throw new Error(\"Null data requires explicit valueType string or number\");\n  }\n  const inferred = typeof value;\n  if (inferred !== \"string\" && inferred !== \"number\")\n    throw new Error(\"Value in data object must be string or number\");\n  return inferred;\n}\n\nexport type CounterResetPolicy = \"new-value\" | \"null\" | \"rollover\" | (string & {});\n\nexport type UnsAttributeSystemRole =\n  | \"relationship-evidence\"\n  | \"lifecycle-start\"\n  | \"lifecycle-end\"\n  | \"lifecycle-time-source\"\n  | (string & {});\n\nexport type UnsRelationshipEndpoint = \"source\" | \"target\";\n\nexport interface IUnsRelationshipEvidenceMetadata {\n  relationshipKey: string;\n  ownerEndpoint?: UnsRelationshipEndpoint;\n  valueEndpoint?: UnsRelationshipEndpoint;\n  /** Scalar values produce one edge; array values produce one edge per ObjectId value. */\n  sourceObjectType?: UnsObjectType | (string & {});\n  targetObjectType?: UnsObjectType | (string & {});\n  sourceObjectIdFrom?: string;\n  targetObjectIdFrom?: string;\n  observedAtFrom?: string;\n  status?: \"suggested\" | \"accepted\" | (string & {});\n  defaultStatus?: \"suggested\" | \"accepted\" | (string & {});\n}\n\nexport interface IUnsLifecycleMetadata {\n  timestampFrom?: \"value\" | \"packetTimestamp\" | (string & {});\n  startValues?: string[];\n  endValues?: string[];\n}\n\nexport interface IUnsTableColumnMetadata {\n  name: string;\n  valueType?: ValueTypeString | (string & {});\n  presentationKind?: string;\n  defaultAggregation?: string;\n  counterResetPolicy?: CounterResetPolicy;\n}\n\nexport const questDbPrimitiveTypes = [\n  \"boolean\",\n  \"ipv4\",\n  \"byte\",\n  \"short\",\n  \"char\",\n  \"int\",\n  \"float\",\n  \"symbol\",\n  \"varchar\",\n  \"string\",\n  \"long\",\n  \"date\",\n  \"timestamp\",\n  \"timestamp_ns\",\n  \"double\",\n  \"uuid\",\n  \"binary\",\n  \"long256\",\n] as const;\n\nconst questDbPrimitiveTypeSet = new Set<string>(questDbPrimitiveTypes);\nconst questDbGeohashRegex = /^geohash\\(\\d+[bc]\\)$/;\nconst questDbDecimalRegex = /^decimal\\(\\d+,\\d+\\)$/;\nconst questDbArrayRegex = /^array<[^>]+>$/;\n\nexport type QuestDbPrimitiveType = (typeof questDbPrimitiveTypes)[number];\n\n// Supported QuestDB column types for UNS tables.\nexport type QuestDbType =\n  | QuestDbPrimitiveType\n  | `geohash(${number}${\"b\" | \"c\"})`\n  | `decimal(${number},${number})`\n  | `array<${string}>`;\n\nexport function isQuestDbType(value: unknown): value is QuestDbType {\n  if (typeof value !== \"string\") {\n    return false;\n  }\n  if (questDbPrimitiveTypeSet.has(value)) {\n    return true;\n  }\n  return (\n    questDbGeohashRegex.test(value) ||\n    questDbDecimalRegex.test(value) ||\n    questDbArrayRegex.test(value)\n  );\n}\n\nexport interface IUnsParameters {\n  /** Opt in to typed null/clear publications and a distinct handover contract. */\n  allowNullData?: boolean;\n  /** Stable semantic revision of calculation state; change when meaning/scaling changes. Required for correlated-v2. */\n  handoverStateContract?: string;\n  /** Optional MQTT output persistence; absence keeps issued queue behavior. */\n  publishQueue?: MqttPublishQueueOptions;\n  mqttSubToTopics?: string | string[];\n  username?: string;\n  password?: string;\n  mqttSSL?: boolean;\n  publishThrottlingDelay?: number; // Delay in milliseconds; default is 1ms\n  publishConcurrency?: number; // Maximum concurrent outgoing publishes; default is 1\n  maxPendingPublishes?: number; // Maximum pending publishes across the API boundary and worker; default is unlimited\n  /** Opt-in bounded waiting for RAM output admission instead of rejecting a full queue. */\n  publishBackpressure?: { maxWaiting?: number };\n  /** Keep one input owned by the worker until setInputHandler's async work finishes. */\n  managedInput?: boolean;\n  subscribeThrottlingDelay?: number; // Delay in milliseconds; default is 1ms\n  rejectUnauthorized?: boolean;\n  clientId?: string;\n  hosts?: string[];\n  servers?: IMqttServerConfig[];\n  port?: number;\n  protocol?: MqttProtocol;\n  keepalive?: number;\n  clean?: boolean;\n  connectTimeout?: number;\n  reconnectPeriod?: number;\n  reconnectOnConnackError?: boolean;\n  resubscribe?: boolean;\n  queueQoSZero?: boolean;\n  properties?: IMqttConnectProperties;\n  ca?: string;\n  cert?: string;\n  key?: string;\n  servername?: string;\n  /**\n   * Default MQTT publish options applied to all outgoing messages\n   * (e.g., qos, retain, messageExpiryInterval).\n   */\n  defaultPublishOptions?: IMqttPublishOptions;\n}\n\nexport interface IUnsProcessParameters {\n  /** Wait for explicit application readiness before initial ownership. */\n  deferHandoverUntilReady?: boolean;\n  /** Optional bounded application RAM state transferred with the reviewed SDK handover. */\n  handoverState?: ApplicationHandoverState;\n  /** Optional application drain after a cooperative handover. Register before creating proxies. */\n  handoverShutdown?: HandoverShutdownHooks;\n  processName: string;\n  /**\n   * Optional controller-supplied correlation id for one cooperative handover.\n   * Older peers ignore it, so it must never be required for normal startup.\n   */\n  handoverId?: string;\n  /** Opt-in state-preserving MQTT handover. Requires matching SDK peers. */\n  handoverProtocol?: \"correlated-v1\" | \"correlated-v2\";\n  mqttSubToTopics?: string | string[];\n  username?: string;\n  password?: string;\n  mqttSSL?: boolean;\n  clientId?: string;\n  hosts?: string[];\n  servers?: IMqttServerConfig[];\n  port?: number;\n  protocol?: MqttProtocol;\n  keepalive?: number;\n  clean?: boolean;\n  connectTimeout?: number;\n  reconnectPeriod?: number;\n  reconnectOnConnackError?: boolean;\n  resubscribe?: boolean;\n  queueQoSZero?: boolean;\n  rejectUnauthorized?: boolean;\n  properties?: IMqttConnectProperties;\n  ca?: string;\n  cert?: string;\n  key?: string;\n  servername?: string;\n}\n\nexport interface UnsEvents {\n  // Emitters in MqttProxy, UnsMqttProxy\n  input: { topic: string; message: string, packet: any };\n  mqttProxyStatus: { event: string, value: number, uom: MeasurementUnit, statusTopic: string };\n  \n  // Emitters in MqttProxy\n  error: { code: number; message: string };\n  \n  // Emitters in UnsMqttProxy\n  mqttWorker: { command: string, instanceName: string; batchSize: number, referenceHash: string; processedTail?: string[] };\n\n  // Emitter in UnsCronProxy\n  cronEvent: { event?: string; cronExpression?: string };\n\n  // Emitters in UnsApiProxy\n  apiGetEvent: {req: any, res: any};\n  apiPostEvent: {req: any, res: any};\n  apiPutEvent: {req: any, res: any};\n  apiPatchEvent: {req: any, res: any};\n  apiDeleteEvent: {req: any, res: any};\n\n  // Emitters in UnsProxy\n  unsProxyProducedTopics: { producedTopics: ITopicObject[], statusTopic: string };\n\n  // Emitters in UnsProxy\n  unsProxyProducedApiEndpoints: { producedApiEndpoints: IApiObject[], statusTopic: string };\n\n  // Emitters in UnsProxy\n  unsProxyProducedServiceEndpoints: { producedServiceEndpoints: IApiObject[], statusTopic: string };\n\n  // Emitters in UnsProxy\n  unsProxyProducedDataOfferEndpoints: { producedDataOfferEndpoints: IApiObject[], statusTopic: string };\n\n  // Emitters in UnsProxy\n  unsProxyProducedApiCatchAll: { producedCatchall: IApiCatchallMapping[], statusTopic: string };\n\n  // Emitters in UnsProxy / UnsApiProxy\n  unsProxyProducedDataCatalogOffers: { producedDataCatalogOffers: unknown[], statusTopic: string };\n}\n\nexport interface IUnsExtendedData extends IUnsData {\n  valueType: ValueTypeString;\n}\n\nexport interface IUnsData {\n  /** Domain-specific evidence/context fields may accompany the canonical value. */\n  [key: string]: unknown;\n  time: ISO8601;\n  value: ValueType;\n  /** Required for an explicit null/clear; ordinary scalar types remain inferred. */\n  valueType?: ValueTypeString;\n  /** Storage/routing group for consumers such as archivers; not part of the UNS identity path. */\n  dataGroup?: string;\n  uom?: MeasurementUnit;\n  foreignEventKey?: string;\n  intervalStart?: ISO8601 | number;\n  intervalEnd?: ISO8601 | number;\n  windowStart?: ISO8601 | number;\n  windowEnd?: ISO8601 | number;\n  eventId?: string;\n  deleted?: boolean;\n  deletedAt?: ISO8601 | number;\n  lastSeen?: ISO8601 | number;\n}\n\nexport interface IUnsTableColumn {\n  type: QuestDbType;\n  value: string | number | boolean | null;\n  uom?: MeasurementUnit;\n}\n\n/** MQTT table columns keyed by their stable UNS/QuestDB column name. */\nexport type IUnsTableColumns = Record<string, IUnsTableColumn>;\n\nexport interface IUnsTable {\n  time: ISO8601;\n  /** Storage/routing group for consumers such as archivers; not part of the UNS identity path. */\n  dataGroup?: string;\n  columns: IUnsTableColumns;\n  intervalStart?: ISO8601 | number;\n  intervalEnd?: ISO8601 | number;\n  windowStart?: ISO8601 | number;\n  windowEnd?: ISO8601 | number;\n  eventId?: string;\n  deleted?: boolean;\n  deletedAt?: ISO8601 | number;\n  lastSeen?: ISO8601 | number;\n}\n\nexport interface IMqttAttributeMessage {\n  attribute: UnsAttribute;\n  description?: string;\n  tags?: UnsTags[];\n  attributeNeedsPersistence?: boolean | null;\n  /** Optional controller/UI grouping hint for this ObjectId node; does not affect storage/table naming. */\n  virtualGroup?: string;\n  /** Scalar value shape for schema/catalog consumers, for example \"number\" or \"string\". */\n  valueType?: ValueTypeString | (string & {});\n  /**\n   * Operator-facing presentation hint. Use \"counter\" for cumulative counter\n   * state; delta/rate should be requested from Datahub history APIs.\n   */\n  presentationKind?: string;\n  /** Preferred aggregation for sampled history views, for example \"last\". */\n  defaultAggregation?: string;\n  /** Reset handling hint for cumulative counters. Interpreted by Datahub APIs, not by the producer. */\n  counterResetPolicy?: CounterResetPolicy;\n  /** Field-level metadata for table columns that should behave as chartable series. */\n  tableColumns?: IUnsTableColumnMetadata[];\n  /** Optional schema-system role published into Datahub's attribute_schema.schema_json. */\n  systemRole?: UnsAttributeSystemRole;\n  /** Relationship materialization metadata for `systemRole: \"relationship-evidence\"`. */\n  relationshipEvidence?: IUnsRelationshipEvidenceMetadata;\n  /** Lifecycle metadata for lifecycle system roles. */\n  lifecycle?: IUnsLifecycleMetadata;\n  /**\n   * How the controller determines if this attribute is live or stale.\n   * Defaults to `\"interval\"` with the controller's default interval (~120s) when omitted.\n   *\n   * @example\n   * // Sensor publishing every 2 seconds:\n   * { validityMode: \"interval\", expectedIntervalMs: 2000 }\n   *\n   * // Status attribute publishing every 2 seconds (string values like \"HEATING\"):\n   * { validityMode: \"interval\", expectedIntervalMs: 2000 }\n   *\n   * // Material location with ENTERED/EXITED lifecycle:\n   * { validityMode: \"lifecycle\", lifecycleEndValue: \"EXITED\" }\n   *\n   * // Static configuration value:\n   * { validityMode: \"static\" }\n   */\n  validityMode?: ValidityMode;\n  /**\n   * Expected publish interval in milliseconds. Only meaningful for `validityMode: \"interval\"`.\n   * The controller marks the attribute as stale after ~2× this value without a heartbeat update.\n   * Ignored for `\"lifecycle\"` and `\"static\"` modes.\n   */\n  expectedIntervalMs?: number;\n  /**\n   * The string value that marks a lifecycle as completed. Only meaningful for `validityMode: \"lifecycle\"`.\n   * When the attribute's current value matches this, the controller considers the lifecycle done.\n   * Example: `\"EXITED\"` for a location attribute with ENTERED/EXITED events.\n   */\n  lifecycleEndValue?: string;\n}\n\ntype AttributePayload =\n  | { message: IUnsMessage; data?: never; table?: never; createdAt?: never; expiresAt?: never }\n  | { message?: never; data: IUnsData; table?: never; createdAt?: ISO8601; expiresAt?: ISO8601 }\n  | { message?: never; data?: never; table: IUnsTable; createdAt?: ISO8601; expiresAt?: ISO8601 };\n\nexport type IMqttAttributeEntry = IMqttAttributeMessage & AttributePayload;\n\nexport type IAssetProviderIdentity = {\n  providerId: string;\n  externalSystem: string;\n  externalType: string;\n  externalId: string;\n};\n\nexport type IAssetIdentityPublicationMetadata =\n  | {\n      assetStableEntityId?: never;\n      assetDisplayName?: never;\n      assetIdentityProof?: never;\n      assetProviderIdentity?: never;\n      assetProviderIdentityProof?: never;\n    }\n  | {\n      /** Controller-issued stable Asset UUID. It identifies the Asset, not its current path. */\n      assetStableEntityId: string;\n      /** Optional operator-facing name; never used as an identity key. */\n      assetDisplayName?: string;\n      /** Short-lived controller-signed proof bound to this Asset UUID and exact candidate path. */\n      assetIdentityProof: string;\n      assetProviderIdentity?: never;\n      assetProviderIdentityProof?: never;\n    }\n  | {\n      assetStableEntityId?: never;\n      assetDisplayName?: never;\n      assetIdentityProof?: never;\n      /** Reviewed provider namespace plus external identifier for a provisional no-ID Asset. */\n      assetProviderIdentity: IAssetProviderIdentity;\n      /** Short-lived controller-signed proof bound to the provider identifier and exact candidate path. */\n      assetProviderIdentityProof: string;\n    };\n\nexport type IMqttPublishRequest = {\n  topic: UnsTopics;\n  asset: UnsAsset;\n  assetDescription?: string;\n  objectType: UnsObjectType;\n  objectTypeDescription?: string;\n  objectId: UnsObjectId;\n  /** Optional controller/UI grouping hint for ObjectId nodes; does not affect storage/table naming. */\n  virtualGroup?: string;\n  attributes: IMqttAttributeEntry | IMqttAttributeEntry[];\n} & IAssetIdentityPublicationMetadata;\n\n// This interface represents a packet for a UNS system\nexport interface IUnsPacket {\n  // The message object of the packet\n  message: IUnsExtendedMessage;\n  \n  // The HMAC signature of the message\n  messageSignature?: string;\n\n  // Automatically calculated interval between two packets in ms\n  interval?: number;\n\n  // Current library version\n  readonly version: string;\n\n  // Autogenerated sequence number\n  sequenceId?: number;\n}\n\nexport interface IUnsPackatParameters {\n\n}\n\nexport interface IUnsMessage {\n    data?: IUnsData;\n    table?: IUnsTable;\n    expiresAt?: ISO8601;\n    createdAt?: ISO8601;\n}\n\nexport interface IUnsExtendedMessage extends IUnsMessage {\n  data?: IUnsExtendedData;\n}\n\n/**\n * Controls how the controller determines whether an attribute is live or stale.\n *\n * - `\"interval\"` — Attribute publishes periodically. Stale if no heartbeat within ~2× the expected interval.\n *   Use with `expectedIntervalMs`. Works for both numeric sensors (temperature every 2s)\n *   and string status attributes (status every 2s). Example:\n *   `{ validityMode: \"interval\", expectedIntervalMs: 2000 }`\n *\n * - `\"lifecycle\"` — Attribute represents a lifecycle with a start and end event.\n *   Use with `lifecycleEndValue` to mark the end state. Example: material location with \"ENTERED\" / \"EXITED\".\n *\n * - `\"static\"` — Attribute is set once and never changes (configuration, metadata). Always live.\n *\n * When omitted, defaults to `\"interval\"` with the controller's default interval (~120s).\n */\nexport type ValidityMode = \"interval\" | \"lifecycle\" | \"static\";\n\nexport interface ITopicObject {\n  timestamp: string;\n  attribute:string;\n  attributeType: UnsAttributeType;\n  topic:string;\n  description:string;\n  /** Storage/routing group observed on the latest data/table payload for this identity. */\n  dataGroup:string;\n  /** Optional controller/UI grouping hint for ObjectId nodes; does not affect storage/table naming. */\n  virtualGroup?: string;\n  tags:string[] | null;\n  attributeNeedsPersistence: boolean | null;\n  /** Scalar value shape for schema/catalog consumers, for example \"number\" or \"string\". */\n  valueType?: ValueTypeString | (string & {});\n  /** Operator-facing presentation hint, for example \"counter\" for cumulative counter state. */\n  presentationKind?: string;\n  /** Preferred aggregation for sampled history views, for example \"last\". */\n  defaultAggregation?: string;\n  /** Reset handling hint for cumulative counters. Interpreted by Datahub APIs, not by the producer. */\n  counterResetPolicy?: CounterResetPolicy;\n  /** Field-level metadata for table columns that should behave as chartable series. */\n  tableColumns?: IUnsTableColumnMetadata[];\n  /** Optional schema-system role published into Datahub's attribute_schema.schema_json. */\n  systemRole?: UnsAttributeSystemRole;\n  /** Relationship materialization metadata for `systemRole: \"relationship-evidence\"`. */\n  relationshipEvidence?: IUnsRelationshipEvidenceMetadata;\n  /** Lifecycle metadata for lifecycle system roles. */\n  lifecycle?: IUnsLifecycleMetadata;\n  asset: UnsAsset;\n  assetDescription?: string;\n  /** Optional stable Asset UUID; accepted by the controller only with a valid publication proof. */\n  assetStableEntityId?: string;\n  /** Optional operator-facing name; never used as an identity key. */\n  assetDisplayName?: string;\n  /** Short-lived controller-signed evidence for this exact Asset path. */\n  assetIdentityProof?: string;\n  /** Reviewed provider namespace plus external identifier for a provisional no-ID Asset. */\n  assetProviderIdentity?: IAssetProviderIdentity;\n  /** Short-lived controller-signed evidence for this provider identifier and exact Asset path. */\n  assetProviderIdentityProof?: string;\n  objectType: UnsObjectType;\n  objectTypeDescription?: string;\n  objectId: UnsObjectId;\n  /** Liveliness validity mode — how the controller determines if this attribute is live/stale. */\n  validityMode?: ValidityMode;\n  /** For interval mode: expected publish interval in milliseconds (stale after ~2x this value). */\n  expectedIntervalMs?: number;\n  /** For lifecycle mode: the string value that marks the lifecycle as completed (e.g. \"EXITED\"). */\n  lifecycleEndValue?: string;\n}\n\n// API Interfaces below\nexport interface IApiObject {\n  timestamp: string;\n  attribute:string;\n  topic:string;\n  attributeType: UnsAttributeType;\n  routeOnly?: boolean;\n  registryTopic?: \"api-endpoints\" | \"service-endpoints\" | \"data-offer-endpoints\";\n  apiDescription?: string; // Optional description for the API endpoint\n  apiHost: string; // Hostname of the service\n  apiEndpoint: string; // API endpoint for virtual topics\n  apiSwaggerEndpoint: string; // Swagger endpoint for API documentation\n  apiMethod: \"GET\" | \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\"; // HTTP method for API endpoint\n  apiQueryParams: QueryParamDef[]; // query parameters for the API endpoint\n  serviceApi?: Record<string, unknown> | null;\n  asset: UnsAsset;\n  objectType: UnsObjectType;\n  objectId: UnsObjectId;\n  controllerName?: string;\n  controllerHost?: string;\n  controllerPort?: string;\n  controllerPublicBase?: string;\n}\n\nexport interface IApiCatchallMapping {\n  topic: string;\n  apiBase: string;\n  apiBasePath: string;\n  swaggerPath: string;\n}\n\nexport interface QueryParamDef {\n  name: string;\n  type: \"string\" | \"number\" | \"boolean\";\n  required?: boolean;\n  description?: string;\n  /**\n   * Optional canonical chat alias used by assistant tooling.\n   * Typical values: from, to, limit, topic, timezone, summaryOnly.\n   */\n  chatCanonical?: string;\n  /**\n   * Optional default query value. Included in generated OpenAPI metadata.\n   */\n  defaultValue?: string | number | boolean;\n}\n\nexport interface ApiChatDefaults {\n  from?: string;\n  to?: string;\n  limit?: number;\n  topic?: string;\n  timezone?: string;\n  summaryOnly?: boolean;\n  [key: string]: string | number | boolean | undefined;\n}\n\nexport interface IApiProxyOptions {\n  jwtSecret?: string;\n  /**\n   * Public origin advertised for generated API endpoint metadata.\n   *\n   * Use a hostname or origin without a port (for example `127.0.0.1` or\n   * `http://service-name`) to keep the API server's actual listening port.\n   * An explicitly supplied port is preserved. Defaults to the machine's\n   * external IPv4 address for backwards compatibility.\n   */\n  publishedApiHost?: string;\n  jwks?: {\n    wellKnownJwksUrl: string;\n    activeKidUrl?: string;\n    cacheTtlMs?: number;\n    algorithms?: (\"RS256\" | \"RS384\" | \"RS512\")[];\n  };\n  /**\n   * Optional base prefixes to mount the API and swagger JSON under (e.g. \"/archiver-3\").\n   * Defaults to \"/api\" when not provided.\n   */\n  apiBasePath?: string;\n  swaggerBasePath?: string;\n  /**\n   * Skip mounting the default \"/api\" route. Useful when rebasing entirely under a custom prefix.\n   */\n  disableDefaultApiMount?: boolean;\n}\n\nexport interface IGetEndpointOptions {\n  apiDescription?: string;\n  tags?: string[];\n  queryParams?: QueryParamDef[];\n  routeOnly?: boolean;\n  registryTopic?: \"api-endpoints\" | \"service-endpoints\" | \"data-offer-endpoints\";\n  serviceApi?: Record<string, unknown>;\n  /**\n   * Optional defaults consumed by chat tooling (published as OpenAPI vendor extension x-uns-chat.defaults).\n   */\n  chatDefaults?: ApiChatDefaults;\n}\n\nexport interface IPostEndpointOptions {\n  apiDescription?: string;\n  tags?: string[];\n  routeOnly?: boolean;\n  registryTopic?: \"api-endpoints\" | \"service-endpoints\" | \"data-offer-endpoints\";\n  serviceApi?: Record<string, unknown>;\n  requestBody?: {\n    description?: string;\n    required?: boolean;\n    schema?: Record<string, unknown>;\n  };\n}\n\nexport interface IPutEndpointOptions extends IPostEndpointOptions {}\nexport interface IPatchEndpointOptions extends IPostEndpointOptions {}\nexport interface IDeleteEndpointOptions extends IPostEndpointOptions {}\n"]}
+{"version":3,"file":"uns-interfaces.js","sourceRoot":"","sources":["../../src/uns/uns-interfaces.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,YAAY,GAAG,+CAA+C,CAAC;IACrE,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAID,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAMxD,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,QAAkB;IACpE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC;IAC9B,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ;QAChD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAyCD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;IACN,MAAM;IACN,WAAW;IACX,cAAc;IACd,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;CACD,CAAC;AAEX,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAS,qBAAqB,CAAC,CAAC;AACvE,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AACnD,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AACnD,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAW3C,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/B,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAC9B,CAAC;AACJ,CAAC","sourcesContent":["import type { MqttPublishQueueOptions } from \"../uns-mqtt/publish-queue-contract.js\";\nimport type { ApplicationHandoverState } from \"../runtime/application-handover-state.js\";\nimport type { HandoverShutdownHooks } from \"./handover-shutdown.js\";\nimport { UnsAttributeType } from \"../graphql/schema.js\";\nimport { MeasurementUnit } from \"./uns-measurements.js\";\nimport { UnsTags } from \"./uns-tags.js\";\nimport type { UnsObjectId, UnsObjectType } from \"./uns-object.js\";\nimport type { UnsAsset } from \"./uns-asset.js\";\nimport type { IMqttConnectProperties, IMqttPublishOptions, IMqttServerConfig, MqttProtocol } from \"../uns-mqtt/mqtt-interfaces.js\";\nimport { UnsTopics } from \"./uns-topics.js\";\nimport { knownUnsAttributes, type KnownUnsAttributeName } from \"./uns-attributes.js\";\n\nexport type ISO8601 = `${number}-${string}-${string}T${string}:${string}:${string}.${string}Z`;\nexport function isIOS8601Type(value: string): value is ISO8601 {\n  const iso8601Regex = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\n  return iso8601Regex.test(value);\n}\n// Known attribute names (with IntelliSense) while still allowing arbitrary strings.\nexport type UnsAttribute = KnownUnsAttributeName | (string & {});\n\nexport const valueTypes = [\"string\", \"number\"] as const;\nexport type ValueTypeString = (typeof valueTypes)[number];\nexport type ScalarValueType = string | number;\n/** Scalar telemetry or a scalar array used by metadata such as relationship evidence. */\nexport type ValueType = ScalarValueType | ScalarValueType[] | null;\n\n/** A null is an explicit typed clear, not a missing field or inferred object. */\nexport function scalarDataValueType(value: unknown, declared?: unknown): ValueTypeString {\n  if (value === null) {\n    if (declared === \"string\" || declared === \"number\") return declared;\n    throw new Error(\"Null data requires explicit valueType string or number\");\n  }\n  const inferred = typeof value;\n  if (inferred !== \"string\" && inferred !== \"number\")\n    throw new Error(\"Value in data object must be string or number\");\n  return inferred;\n}\n\nexport type CounterResetPolicy = \"new-value\" | \"null\" | \"rollover\" | (string & {});\n\nexport type UnsAttributeSystemRole =\n  | \"relationship-evidence\"\n  | \"lifecycle-start\"\n  | \"lifecycle-end\"\n  | \"lifecycle-time-source\"\n  | (string & {});\n\nexport type UnsRelationshipEndpoint = \"source\" | \"target\";\n\nexport interface IUnsRelationshipEvidenceMetadata {\n  relationshipKey: string;\n  ownerEndpoint?: UnsRelationshipEndpoint;\n  valueEndpoint?: UnsRelationshipEndpoint;\n  /** Scalar values produce one edge; array values produce one edge per ObjectId value. */\n  sourceObjectType?: UnsObjectType | (string & {});\n  targetObjectType?: UnsObjectType | (string & {});\n  sourceObjectIdFrom?: string;\n  targetObjectIdFrom?: string;\n  observedAtFrom?: string;\n  status?: \"suggested\" | \"accepted\" | (string & {});\n  defaultStatus?: \"suggested\" | \"accepted\" | (string & {});\n}\n\nexport interface IUnsLifecycleMetadata {\n  timestampFrom?: \"value\" | \"packetTimestamp\" | (string & {});\n  startValues?: string[];\n  endValues?: string[];\n}\n\nexport interface IUnsTableColumnMetadata {\n  name: string;\n  valueType?: ValueTypeString | (string & {});\n  presentationKind?: string;\n  defaultAggregation?: string;\n  counterResetPolicy?: CounterResetPolicy;\n}\n\nexport const questDbPrimitiveTypes = [\n  \"boolean\",\n  \"ipv4\",\n  \"byte\",\n  \"short\",\n  \"char\",\n  \"int\",\n  \"float\",\n  \"symbol\",\n  \"varchar\",\n  \"string\",\n  \"long\",\n  \"date\",\n  \"timestamp\",\n  \"timestamp_ns\",\n  \"double\",\n  \"uuid\",\n  \"binary\",\n  \"long256\",\n] as const;\n\nconst questDbPrimitiveTypeSet = new Set<string>(questDbPrimitiveTypes);\nconst questDbGeohashRegex = /^geohash\\(\\d+[bc]\\)$/;\nconst questDbDecimalRegex = /^decimal\\(\\d+,\\d+\\)$/;\nconst questDbArrayRegex = /^array<[^>]+>$/;\n\nexport type QuestDbPrimitiveType = (typeof questDbPrimitiveTypes)[number];\n\n// Supported QuestDB column types for UNS tables.\nexport type QuestDbType =\n  | QuestDbPrimitiveType\n  | `geohash(${number}${\"b\" | \"c\"})`\n  | `decimal(${number},${number})`\n  | `array<${string}>`;\n\nexport function isQuestDbType(value: unknown): value is QuestDbType {\n  if (typeof value !== \"string\") {\n    return false;\n  }\n  if (questDbPrimitiveTypeSet.has(value)) {\n    return true;\n  }\n  return (\n    questDbGeohashRegex.test(value) ||\n    questDbDecimalRegex.test(value) ||\n    questDbArrayRegex.test(value)\n  );\n}\n\nexport interface IUnsParameters {\n  /** Opt in to typed null/clear publications and a distinct handover contract. */\n  allowNullData?: boolean;\n  /** Stable semantic revision of calculation state; change when meaning/scaling changes. Required for correlated-v2. */\n  handoverStateContract?: string;\n  /** Optional MQTT output persistence; absence keeps issued queue behavior. */\n  publishQueue?: MqttPublishQueueOptions;\n  mqttSubToTopics?: string | string[];\n  username?: string;\n  password?: string;\n  mqttSSL?: boolean;\n  publishThrottlingDelay?: number; // Delay in milliseconds; default is 1ms\n  publishConcurrency?: number; // Maximum concurrent outgoing publishes; default is 1\n  maxPendingPublishes?: number; // Maximum pending publishes across the API boundary and worker; default is unlimited\n  /** Opt-in bounded waiting for RAM output admission instead of rejecting a full queue. */\n  publishBackpressure?: { maxWaiting?: number };\n  /** Keep one input owned by the worker until setInputHandler's async work finishes. */\n  managedInput?: boolean;\n  subscribeThrottlingDelay?: number; // Delay in milliseconds; default is 1ms\n  rejectUnauthorized?: boolean;\n  clientId?: string;\n  hosts?: string[];\n  servers?: IMqttServerConfig[];\n  port?: number;\n  protocol?: MqttProtocol;\n  keepalive?: number;\n  clean?: boolean;\n  connectTimeout?: number;\n  reconnectPeriod?: number;\n  reconnectOnConnackError?: boolean;\n  resubscribe?: boolean;\n  queueQoSZero?: boolean;\n  properties?: IMqttConnectProperties;\n  ca?: string;\n  cert?: string;\n  key?: string;\n  servername?: string;\n  /**\n   * Default MQTT publish options applied to all outgoing messages\n   * (e.g., qos, retain, messageExpiryInterval).\n   */\n  defaultPublishOptions?: IMqttPublishOptions;\n}\n\nexport interface IUnsProcessParameters {\n  /** Wait for explicit application readiness before initial ownership. */\n  deferHandoverUntilReady?: boolean;\n  /** Optional bounded application RAM state transferred with the reviewed SDK handover. */\n  handoverState?: ApplicationHandoverState;\n  /** Optional application drain after a cooperative handover. Register before creating proxies. */\n  handoverShutdown?: HandoverShutdownHooks;\n  processName: string;\n  /**\n   * Optional controller-supplied correlation id for one cooperative handover.\n   * Older peers ignore it, so it must never be required for normal startup.\n   */\n  handoverId?: string;\n  /** Opt-in state-preserving MQTT handover. Requires matching SDK peers. */\n  handoverProtocol?: \"correlated-v1\" | \"correlated-v2\";\n  mqttSubToTopics?: string | string[];\n  username?: string;\n  password?: string;\n  mqttSSL?: boolean;\n  clientId?: string;\n  hosts?: string[];\n  servers?: IMqttServerConfig[];\n  port?: number;\n  protocol?: MqttProtocol;\n  keepalive?: number;\n  clean?: boolean;\n  connectTimeout?: number;\n  reconnectPeriod?: number;\n  reconnectOnConnackError?: boolean;\n  resubscribe?: boolean;\n  queueQoSZero?: boolean;\n  rejectUnauthorized?: boolean;\n  properties?: IMqttConnectProperties;\n  ca?: string;\n  cert?: string;\n  key?: string;\n  servername?: string;\n}\n\nexport interface UnsEvents {\n  // Emitters in MqttProxy, UnsMqttProxy\n  input: { topic: string; message: string, packet: any };\n  mqttProxyStatus: { event: string, value: number, uom: MeasurementUnit, statusTopic: string };\n  \n  // Emitters in MqttProxy\n  error: { code: number; message: string };\n  \n  // Emitters in UnsMqttProxy\n  mqttWorker: { command: string, instanceName: string; batchSize: number, referenceHash: string; processedTail?: string[] };\n\n  // Emitter in UnsCronProxy\n  cronEvent: { event?: string; cronExpression?: string };\n\n  // Emitters in UnsApiProxy\n  apiGetEvent: {req: any, res: any};\n  apiPostEvent: {req: any, res: any};\n  apiPutEvent: {req: any, res: any};\n  apiPatchEvent: {req: any, res: any};\n  apiDeleteEvent: {req: any, res: any};\n\n  // Emitters in UnsProxy\n  unsProxyProducedTopics: { producedTopics: ITopicObject[], statusTopic: string };\n\n  // Emitters in UnsProxy\n  unsProxyProducedApiEndpoints: { producedApiEndpoints: IApiObject[], statusTopic: string };\n\n  // Emitters in UnsProxy\n  unsProxyProducedServiceEndpoints: { producedServiceEndpoints: IApiObject[], statusTopic: string };\n\n  // Emitters in UnsProxy\n  unsProxyProducedDataOfferEndpoints: { producedDataOfferEndpoints: IApiObject[], statusTopic: string };\n\n  // Emitters in UnsProxy\n  unsProxyProducedApiCatchAll: { producedCatchall: IApiCatchallMapping[], statusTopic: string };\n\n  // Emitters in UnsProxy / UnsApiProxy\n  unsProxyProducedDataCatalogOffers: { producedDataCatalogOffers: unknown[], statusTopic: string };\n}\n\nexport interface IUnsExtendedData extends IUnsData {\n  valueType: ValueTypeString;\n}\n\nexport interface IUnsData {\n  /** Domain-specific evidence/context fields may accompany the canonical value. */\n  [key: string]: unknown;\n  time: ISO8601;\n  value: ValueType;\n  /** Required for an explicit null/clear; ordinary scalar types remain inferred. */\n  valueType?: ValueTypeString;\n  /** Storage/routing group for consumers such as archivers; not part of the UNS identity path. */\n  dataGroup?: string;\n  uom?: MeasurementUnit;\n  foreignEventKey?: string;\n  intervalStart?: ISO8601 | number;\n  intervalEnd?: ISO8601 | number;\n  windowStart?: ISO8601 | number;\n  windowEnd?: ISO8601 | number;\n  eventId?: string;\n  deleted?: boolean;\n  deletedAt?: ISO8601 | number;\n  lastSeen?: ISO8601 | number;\n}\n\nexport interface IUnsTableColumn {\n  type: QuestDbType;\n  value: string | number | boolean | null;\n  uom?: MeasurementUnit;\n}\n\n/** MQTT table columns keyed by their stable UNS/QuestDB column name. */\nexport type IUnsTableColumns = Record<string, IUnsTableColumn>;\n\nexport interface IUnsTable {\n  time: ISO8601;\n  /** Storage/routing group for consumers such as archivers; not part of the UNS identity path. */\n  dataGroup?: string;\n  columns: IUnsTableColumns;\n  intervalStart?: ISO8601 | number;\n  intervalEnd?: ISO8601 | number;\n  windowStart?: ISO8601 | number;\n  windowEnd?: ISO8601 | number;\n  eventId?: string;\n  deleted?: boolean;\n  deletedAt?: ISO8601 | number;\n  lastSeen?: ISO8601 | number;\n}\n\nexport interface IMqttAttributeMessage {\n  attribute: UnsAttribute;\n  description?: string;\n  tags?: UnsTags[];\n  attributeNeedsPersistence?: boolean | null;\n  /** Optional controller/UI grouping hint for this ObjectId node; does not affect storage/table naming. */\n  virtualGroup?: string;\n  /** Scalar value shape for schema/catalog consumers, for example \"number\" or \"string\". */\n  valueType?: ValueTypeString | (string & {});\n  /**\n   * Operator-facing presentation hint. Use \"counter\" for cumulative counter\n   * state; delta/rate should be requested from Datahub history APIs.\n   */\n  presentationKind?: string;\n  /** Preferred aggregation for sampled history views, for example \"last\". */\n  defaultAggregation?: string;\n  /** Reset handling hint for cumulative counters. Interpreted by Datahub APIs, not by the producer. */\n  counterResetPolicy?: CounterResetPolicy;\n  /** Field-level metadata for table columns that should behave as chartable series. */\n  tableColumns?: IUnsTableColumnMetadata[];\n  /** Optional schema-system role published into Datahub's attribute_schema.schema_json. */\n  systemRole?: UnsAttributeSystemRole;\n  /** Relationship materialization metadata for `systemRole: \"relationship-evidence\"`. */\n  relationshipEvidence?: IUnsRelationshipEvidenceMetadata;\n  /** Lifecycle metadata for lifecycle system roles. */\n  lifecycle?: IUnsLifecycleMetadata;\n  /**\n   * How the controller determines if this attribute is live or stale.\n   * Defaults to `\"interval\"` with the controller's default interval (~120s) when omitted.\n   *\n   * @example\n   * // Sensor publishing every 2 seconds:\n   * { validityMode: \"interval\", expectedIntervalMs: 2000 }\n   *\n   * // Status attribute publishing every 2 seconds (string values like \"HEATING\"):\n   * { validityMode: \"interval\", expectedIntervalMs: 2000 }\n   *\n   * // Material location with ENTERED/EXITED lifecycle:\n   * { validityMode: \"lifecycle\", lifecycleEndValue: \"EXITED\" }\n   *\n   * // Static configuration value:\n   * { validityMode: \"static\" }\n   */\n  validityMode?: ValidityMode;\n  /**\n   * Expected publish interval in milliseconds. Only meaningful for `validityMode: \"interval\"`.\n   * The controller marks the attribute as stale after ~2× this value without a heartbeat update.\n   * Ignored for `\"lifecycle\"` and `\"static\"` modes.\n   */\n  expectedIntervalMs?: number;\n  /**\n   * The string value that marks a lifecycle as completed. Only meaningful for `validityMode: \"lifecycle\"`.\n   * When the attribute's current value matches this, the controller considers the lifecycle done.\n   * Example: `\"EXITED\"` for a location attribute with ENTERED/EXITED events.\n   */\n  lifecycleEndValue?: string;\n}\n\ntype AttributePayload =\n  | { message: IUnsMessage; data?: never; table?: never; createdAt?: never; expiresAt?: never }\n  | { message?: never; data: IUnsData; table?: never; createdAt?: ISO8601; expiresAt?: ISO8601 }\n  | { message?: never; data?: never; table: IUnsTable; createdAt?: ISO8601; expiresAt?: ISO8601 };\n\nexport type IMqttAttributeEntry = IMqttAttributeMessage & AttributePayload;\n\nexport type IAssetProviderIdentity = {\n  providerId: string;\n  externalSystem: string;\n  externalType: string;\n  externalId: string;\n};\n\nexport type IAssetIdentityPublicationMetadata =\n  | {\n      assetStableEntityId?: never;\n      assetDisplayName?: never;\n      assetIdentityProof?: never;\n      assetProviderIdentity?: never;\n      assetProviderIdentityProof?: never;\n    }\n  | {\n      /** Controller-issued stable Asset UUID. It identifies the Asset, not its current path. */\n      assetStableEntityId: string;\n      /** Optional operator-facing name; never used as an identity key. */\n      assetDisplayName?: string;\n      /** Short-lived controller-signed proof bound to this Asset UUID and exact candidate path. */\n      assetIdentityProof: string;\n      assetProviderIdentity?: never;\n      assetProviderIdentityProof?: never;\n    }\n  | {\n      assetStableEntityId?: never;\n      assetDisplayName?: never;\n      assetIdentityProof?: never;\n      /** Reviewed provider namespace plus external identifier for a provisional no-ID Asset. */\n      assetProviderIdentity: IAssetProviderIdentity;\n      /** Short-lived controller-signed proof bound to the provider identifier and exact candidate path. */\n      assetProviderIdentityProof: string;\n    };\n\nexport type IMqttPublishRequest = {\n  topic: UnsTopics;\n  asset: UnsAsset;\n  assetDescription?: string;\n  objectType: UnsObjectType;\n  objectTypeDescription?: string;\n  objectId: UnsObjectId;\n  /** Optional controller/UI grouping hint for ObjectId nodes; does not affect storage/table naming. */\n  virtualGroup?: string;\n  attributes: IMqttAttributeEntry | IMqttAttributeEntry[];\n} & IAssetIdentityPublicationMetadata;\n\n// This interface represents a packet for a UNS system\nexport interface IUnsPacket {\n  // The message object of the packet\n  message: IUnsExtendedMessage;\n  \n  // The HMAC signature of the message\n  messageSignature?: string;\n\n  // Automatically calculated interval between two packets in ms\n  interval?: number;\n\n  // Current library version\n  readonly version: string;\n\n  // Autogenerated sequence number\n  sequenceId?: number;\n}\n\nexport interface IUnsPackatParameters {\n\n}\n\nexport interface IUnsMessage {\n    data?: IUnsData;\n    table?: IUnsTable;\n    expiresAt?: ISO8601;\n    createdAt?: ISO8601;\n}\n\nexport interface IUnsExtendedMessage extends IUnsMessage {\n  data?: IUnsExtendedData;\n}\n\n/**\n * Controls how the controller determines whether an attribute is live or stale.\n *\n * - `\"interval\"` — Attribute publishes periodically. Stale if no heartbeat within ~2× the expected interval.\n *   Use with `expectedIntervalMs`. Works for both numeric sensors (temperature every 2s)\n *   and string status attributes (status every 2s). Example:\n *   `{ validityMode: \"interval\", expectedIntervalMs: 2000 }`\n *\n * - `\"lifecycle\"` — Attribute represents a lifecycle with a start and end event.\n *   Use with `lifecycleEndValue` to mark the end state. Example: material location with \"ENTERED\" / \"EXITED\".\n *\n * - `\"static\"` — Attribute is set once and never changes (configuration, metadata). Always live.\n *\n * When omitted, defaults to `\"interval\"` with the controller's default interval (~120s).\n */\nexport type ValidityMode = \"interval\" | \"lifecycle\" | \"static\";\n\nexport interface ITopicObject {\n  timestamp: string;\n  attribute:string;\n  attributeType: UnsAttributeType;\n  topic:string;\n  description:string;\n  /** Storage/routing group observed on the latest data/table payload for this identity. */\n  dataGroup:string;\n  /** Optional controller/UI grouping hint for ObjectId nodes; does not affect storage/table naming. */\n  virtualGroup?: string;\n  tags:string[] | null;\n  attributeNeedsPersistence: boolean | null;\n  /** Scalar value shape for schema/catalog consumers, for example \"number\" or \"string\". */\n  valueType?: ValueTypeString | (string & {});\n  /** Operator-facing presentation hint, for example \"counter\" for cumulative counter state. */\n  presentationKind?: string;\n  /** Preferred aggregation for sampled history views, for example \"last\". */\n  defaultAggregation?: string;\n  /** Reset handling hint for cumulative counters. Interpreted by Datahub APIs, not by the producer. */\n  counterResetPolicy?: CounterResetPolicy;\n  /** Field-level metadata for table columns that should behave as chartable series. */\n  tableColumns?: IUnsTableColumnMetadata[];\n  /** Optional schema-system role published into Datahub's attribute_schema.schema_json. */\n  systemRole?: UnsAttributeSystemRole;\n  /** Relationship materialization metadata for `systemRole: \"relationship-evidence\"`. */\n  relationshipEvidence?: IUnsRelationshipEvidenceMetadata;\n  /** Lifecycle metadata for lifecycle system roles. */\n  lifecycle?: IUnsLifecycleMetadata;\n  asset: UnsAsset;\n  assetDescription?: string;\n  /** Optional stable Asset UUID; accepted by the controller only with a valid publication proof. */\n  assetStableEntityId?: string;\n  /** Optional operator-facing name; never used as an identity key. */\n  assetDisplayName?: string;\n  /** Short-lived controller-signed evidence for this exact Asset path. */\n  assetIdentityProof?: string;\n  /** Reviewed provider namespace plus external identifier for a provisional no-ID Asset. */\n  assetProviderIdentity?: IAssetProviderIdentity;\n  /** Short-lived controller-signed evidence for this provider identifier and exact Asset path. */\n  assetProviderIdentityProof?: string;\n  objectType: UnsObjectType;\n  objectTypeDescription?: string;\n  objectId: UnsObjectId;\n  /** Liveliness validity mode — how the controller determines if this attribute is live/stale. */\n  validityMode?: ValidityMode;\n  /** For interval mode: expected publish interval in milliseconds (stale after ~2x this value). */\n  expectedIntervalMs?: number;\n  /** For lifecycle mode: the string value that marks the lifecycle as completed (e.g. \"EXITED\"). */\n  lifecycleEndValue?: string;\n}\n\n// API Interfaces below\nexport interface IApiObject {\n  timestamp: string;\n  attribute:string;\n  topic:string;\n  attributeType: UnsAttributeType;\n  routeOnly?: boolean;\n  registryTopic?: \"api-endpoints\" | \"service-endpoints\" | \"data-offer-endpoints\";\n  apiDescription?: string; // Optional description for the API endpoint\n  apiHost: string; // Hostname of the service\n  apiEndpoint: string; // API endpoint for virtual topics\n  apiSwaggerEndpoint: string; // Swagger endpoint for API documentation\n  apiMethod: \"GET\" | \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\"; // HTTP method for API endpoint\n  apiQueryParams: QueryParamDef[]; // query parameters for the API endpoint\n  serviceApi?: Record<string, unknown> | null;\n  asset: UnsAsset;\n  objectType: UnsObjectType;\n  objectId: UnsObjectId;\n  controllerName?: string;\n  controllerHost?: string;\n  controllerPort?: string;\n  controllerPublicBase?: string;\n}\n\nexport interface IApiCatchallMapping {\n  topic: string;\n  apiBase: string;\n  apiBasePath: string;\n  swaggerPath: string;\n}\n\nexport interface QueryParamDef {\n  name: string;\n  type: \"string\" | \"number\" | \"boolean\";\n  required?: boolean;\n  description?: string;\n  /**\n   * Optional canonical chat alias used by assistant tooling.\n   * Typical values: from, to, limit, topic, timezone, summaryOnly.\n   */\n  chatCanonical?: string;\n  /**\n   * Optional default query value. Included in generated OpenAPI metadata.\n   */\n  defaultValue?: string | number | boolean;\n}\n\nexport interface ApiChatDefaults {\n  from?: string;\n  to?: string;\n  limit?: number;\n  topic?: string;\n  timezone?: string;\n  summaryOnly?: boolean;\n  [key: string]: string | number | boolean | undefined;\n}\n\nexport interface IApiProxyOptions {\n  /** Fresh principal-status endpoint for operator operations. Controller-managed\n   * runtimes default to their configured controller origin. No bearer is exposed. */\n  operatorAuthorizationStatusUrl?: string;\n  operatorJwksUrl?: string;\n  jwtSecret?: string;\n  /**\n   * Public origin advertised for generated API endpoint metadata.\n   *\n   * Use a hostname or origin without a port (for example `127.0.0.1` or\n   * `http://service-name`) to keep the API server's actual listening port.\n   * An explicitly supplied port is preserved. Defaults to the machine's\n   * external IPv4 address for backwards compatibility.\n   */\n  publishedApiHost?: string;\n  jwks?: {\n    wellKnownJwksUrl: string;\n    activeKidUrl?: string;\n    cacheTtlMs?: number;\n    algorithms?: (\"RS256\" | \"RS384\" | \"RS512\")[];\n  };\n  /**\n   * Optional base prefixes to mount the API and swagger JSON under (e.g. \"/archiver-3\").\n   * Defaults to \"/api\" when not provided.\n   */\n  apiBasePath?: string;\n  swaggerBasePath?: string;\n  /**\n   * Skip mounting the default \"/api\" route. Useful when rebasing entirely under a custom prefix.\n   */\n  disableDefaultApiMount?: boolean;\n}\n\nexport interface IGetEndpointOptions {\n  operatorOperations?: import(\"../runtime/operator-api.js\").OperatorOperationDefinition[];\n  apiDescription?: string;\n  tags?: string[];\n  queryParams?: QueryParamDef[];\n  routeOnly?: boolean;\n  registryTopic?: \"api-endpoints\" | \"service-endpoints\" | \"data-offer-endpoints\";\n  serviceApi?: Record<string, unknown>;\n  /**\n   * Optional defaults consumed by chat tooling (published as OpenAPI vendor extension x-uns-chat.defaults).\n   */\n  chatDefaults?: ApiChatDefaults;\n}\n\nexport interface IPostEndpointOptions {\n  operatorOperations?: import(\"../runtime/operator-api.js\").OperatorOperationDefinition[];\n  apiDescription?: string;\n  tags?: string[];\n  routeOnly?: boolean;\n  registryTopic?: \"api-endpoints\" | \"service-endpoints\" | \"data-offer-endpoints\";\n  serviceApi?: Record<string, unknown>;\n  requestBody?: {\n    description?: string;\n    required?: boolean;\n    schema?: Record<string, unknown>;\n  };\n}\n\nexport interface IPutEndpointOptions extends IPostEndpointOptions {}\nexport interface IPatchEndpointOptions extends IPostEndpointOptions {}\nexport interface IDeleteEndpointOptions extends IPostEndpointOptions {}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uns-kit/core",
-  "version": "3.0.41",
+  "version": "3.0.42",
   "description": "Core utilities and runtime building blocks for UNS-based realtime transformers.",
   "type": "module",
   "license": "MIT",