@xemahq/contracts 0.77.0 → 0.78.0

package/README.md

@@ -64,7 +64,7 @@ endpoints, or Kubernetes topology. The generated JSON Schema is exported as
 inferred from the same Zod source.
 
 The `edition-protocol` entrypoint names the edition protocol an edition tool
-speaks: `EDITION_PROTOCOL` (`{ version, contentDigest }`) and the entry
+speaks: `EDITION_PROTOCOL` (`{ version, provisional, contentDigest }`; a tool refuses to pin a `provisional` identity) and the entry
 subpaths the tool loads. `contentDigest` is the kernel contract authority
 digest over the exact bytes of every source file those entry subpaths load at
 runtime, derived from the import graph; that file list is

package/dist/.source-stamp.json

@@ -1,5 +1,5 @@
 {
   "algorithm": "sha256/len-framed-v1",
-  "hash": "4f1cce8802a153154715090e69998cbadaced83a9a8722ccf1ec9ee9dc3cc163",
-  "fileCount": 613
+  "hash": "b35e862766c7a0d5113ec61abf3b65c208ba6aa0097bfc63d8f7aaae73c26ffe",
+  "fileCount": 621
 }

package/dist/authorization-module/index.d.ts

@@ -2,6 +2,8 @@ export * from './lib/authorization-namespace';
 export * from './lib/platform-authorization-modules';
 export * from './lib/authorization-interface-requirements';
 export * from './lib/authorization-module-envelope';
+export * from './lib/delegation-wildcard-ceiling';
+export * from './lib/delegation-origination';
 export * from './lib/authorization-module-contribution';
 export * from './lib/authorization-composition-error';
 //# sourceMappingURL=index.d.ts.map

package/dist/authorization-module/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authorization-module/index.ts"],"names":[],"mappings":"AAAA,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sCAAsC,CAAC;AACrD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,uCAAuC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authorization-module/index.ts"],"names":[],"mappings":"AAAA,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sCAAsC,CAAC;AACrD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yCAAyC,CAAC;AACxD,cAAc,uCAAuC,CAAC"}

package/dist/authorization-module/index.js

@@ -18,6 +18,8 @@ __exportStar(require("./lib/authorization-namespace"), exports);
 __exportStar(require("./lib/platform-authorization-modules"), exports);
 __exportStar(require("./lib/authorization-interface-requirements"), exports);
 __exportStar(require("./lib/authorization-module-envelope"), exports);
+__exportStar(require("./lib/delegation-wildcard-ceiling"), exports);
+__exportStar(require("./lib/delegation-origination"), exports);
 __exportStar(require("./lib/authorization-module-contribution"), exports);
 __exportStar(require("./lib/authorization-composition-error"), exports);
 //# sourceMappingURL=index.js.map

package/dist/authorization-module/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authorization-module/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gEAA8C;AAC9C,uEAAqD;AACrD,6EAA2D;AAC3D,sEAAoD;AACpD,0EAAwD;AACxD,wEAAsD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authorization-module/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gEAA8C;AAC9C,uEAAqD;AACrD,6EAA2D;AAC3D,sEAAoD;AACpD,oEAAkD;AAClD,+DAA6C;AAC7C,0EAAwD;AACxD,wEAAsD"}

package/dist/authorization-module/lib/authorization-composition-error.d.ts

@@ -24,6 +24,14 @@ export declare enum AuthorizationCompositionViolationCode {
     InterfaceRelationMistyped = "interface_relation_mistyped",
     InterfaceRelationNotWritable = "interface_relation_not_writable",
     ImplementsForeignType = "implements_foreign_type",
+    DelegationOriginationNotAnchor = "delegation_origination_not_anchor",
+    DelegationOriginationRedelegableNotSubset = "delegation_origination_redelegable_not_subset",
+    DelegationOriginationCapabilityUndeclared = "delegation_origination_capability_undeclared",
+    DelegationOriginationMissing = "delegation_origination_missing",
+    DelegationOriginationHolderNotService = "delegation_origination_holder_not_service",
+    DelegationOriginationStatedRedelegableFixed = "delegation_origination_stated_redelegable_fixed",
+    DelegationOriginationWildcardNotPermitted = "delegation_origination_wildcard_not_permitted",
+    DelegationOriginationWildcardNotFirstParty = "delegation_origination_wildcard_not_first_party",
     WritableRelationInvalid = "writable_relation_invalid",
     SearchableInvalid = "searchable_invalid",
     PlatformTemplateInvalid = "platform_template_invalid",
@@ -45,4 +53,7 @@ export declare class AuthorizationCompositionError extends Error {
     readonly violations: readonly AuthorizationCompositionViolation[];
     constructor(violations: readonly AuthorizationCompositionViolation[]);
 }
+export declare class AuthorizationCompositionInputError extends Error {
+    constructor(message: string);
+}
 //# sourceMappingURL=authorization-composition-error.d.ts.map

package/dist/authorization-module/lib/authorization-composition-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-composition-error.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-composition-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,oBAAY,qCAAqC;IAE/C,cAAc,qBAAqB;IACnC,iBAAiB,uBAAuB;IACxC,kBAAkB,wBAAwB;IAC1C,yBAAyB,gCAAgC;IACzD,kBAAkB,yBAAyB;IAC3C,kBAAkB,yBAAyB;IAE3C,oBAAoB,2BAA2B;IAC/C,yBAAyB,gCAAgC;IACzD,kBAAkB,yBAAyB;IAC3C,oBAAoB,2BAA2B;IAC/C,oBAAoB,2BAA2B;IAC/C,sBAAsB,8BAA8B;IACpD,qBAAqB,4BAA4B;IACjD,kBAAkB,wBAAwB;IAC1C,+BAA+B,uCAAuC;IAEtE,4BAA4B,qCAAqC;IACjE,iBAAiB,uBAAuB;IACxC,uBAAuB,+BAA+B;IACtD,uBAAuB,8BAA8B;IACrD,eAAe,qBAAqB;IAEpC,uBAAuB,8BAA8B;IAErD,yBAAyB,gCAAgC;IAEzD,4BAA4B,oCAAoC;IAChE,qBAAqB,4BAA4B;IACjD,uBAAuB,8BAA8B;IACrD,iBAAiB,uBAAuB;IAExC,uBAAuB,8BAA8B;IAErD,uBAAuB,+BAA+B;IAEtD,kBAAkB,wBAAwB;IAE1C,cAAc,oBAAoB;IAElC,sBAAsB,6BAA6B;IACnD,mBAAmB,0BAA0B;IAC7C,4BAA4B,mCAAmC;IAC/D,yBAAyB,iCAAiC;CAC3D;AAED,eAAO,MAAM,2CAA2C,yDAEvD,CAAC;AAEF,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,qCAAqC,CAAC;IAErD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAGD,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,UAAU,EAAE,SAAS,iCAAiC,EAAE,CAAC;gBAEtD,UAAU,EAAE,SAAS,iCAAiC,EAAE;CAUrE"}
+{"version":3,"file":"authorization-composition-error.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-composition-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,oBAAY,qCAAqC;IAE/C,cAAc,qBAAqB;IACnC,iBAAiB,uBAAuB;IACxC,kBAAkB,wBAAwB;IAC1C,yBAAyB,gCAAgC;IACzD,kBAAkB,yBAAyB;IAC3C,kBAAkB,yBAAyB;IAE3C,oBAAoB,2BAA2B;IAC/C,yBAAyB,gCAAgC;IACzD,kBAAkB,yBAAyB;IAC3C,oBAAoB,2BAA2B;IAC/C,oBAAoB,2BAA2B;IAC/C,sBAAsB,8BAA8B;IACpD,qBAAqB,4BAA4B;IACjD,kBAAkB,wBAAwB;IAC1C,+BAA+B,uCAAuC;IAEtE,4BAA4B,qCAAqC;IACjE,iBAAiB,uBAAuB;IACxC,uBAAuB,+BAA+B;IACtD,uBAAuB,8BAA8B;IACrD,eAAe,qBAAqB;IAEpC,uBAAuB,8BAA8B;IAErD,yBAAyB,gCAAgC;IAEzD,4BAA4B,oCAAoC;IAChE,qBAAqB,4BAA4B;IAGjD,8BAA8B,sCAAsC;IAEpE,yCAAyC,kDAAkD;IAE3F,yCAAyC,iDAAiD;IAE1F,4BAA4B,mCAAmC;IAE/D,qCAAqC,8CAA8C;IAEnF,2CAA2C,oDAAoD;IAE/F,yCAAyC,kDAAkD;IAE3F,0CAA0C,oDAAoD;IAC9F,uBAAuB,8BAA8B;IACrD,iBAAiB,uBAAuB;IAExC,uBAAuB,8BAA8B;IAErD,uBAAuB,+BAA+B;IAEtD,kBAAkB,wBAAwB;IAE1C,cAAc,oBAAoB;IAElC,sBAAsB,6BAA6B;IACnD,mBAAmB,0BAA0B;IAC7C,4BAA4B,mCAAmC;IAC/D,yBAAyB,iCAAiC;CAC3D;AAED,eAAO,MAAM,2CAA2C,yDAEvD,CAAC;AAEF,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,qCAAqC,CAAC;IAErD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAGD,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,UAAU,EAAE,SAAS,iCAAiC,EAAE,CAAC;gBAEtD,UAAU,EAAE,SAAS,iCAAiC,EAAE;CAUrE;AAOD,qBAAa,kCAAmC,SAAQ,KAAK;gBAC/C,OAAO,EAAE,MAAM;CAI5B"}

package/dist/authorization-module/lib/authorization-composition-error.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizationCompositionError = exports.AuthorizationCompositionViolationCodeSchema = exports.AuthorizationCompositionViolationCode = void 0;
+exports.AuthorizationCompositionInputError = exports.AuthorizationCompositionError = exports.AuthorizationCompositionViolationCodeSchema = exports.AuthorizationCompositionViolationCode = void 0;
 const zod_1 = require("zod");
 var AuthorizationCompositionViolationCode;
 (function (AuthorizationCompositionViolationCode) {
@@ -28,6 +28,14 @@ var AuthorizationCompositionViolationCode;
     AuthorizationCompositionViolationCode["InterfaceRelationMistyped"] = "interface_relation_mistyped";
     AuthorizationCompositionViolationCode["InterfaceRelationNotWritable"] = "interface_relation_not_writable";
     AuthorizationCompositionViolationCode["ImplementsForeignType"] = "implements_foreign_type";
+    AuthorizationCompositionViolationCode["DelegationOriginationNotAnchor"] = "delegation_origination_not_anchor";
+    AuthorizationCompositionViolationCode["DelegationOriginationRedelegableNotSubset"] = "delegation_origination_redelegable_not_subset";
+    AuthorizationCompositionViolationCode["DelegationOriginationCapabilityUndeclared"] = "delegation_origination_capability_undeclared";
+    AuthorizationCompositionViolationCode["DelegationOriginationMissing"] = "delegation_origination_missing";
+    AuthorizationCompositionViolationCode["DelegationOriginationHolderNotService"] = "delegation_origination_holder_not_service";
+    AuthorizationCompositionViolationCode["DelegationOriginationStatedRedelegableFixed"] = "delegation_origination_stated_redelegable_fixed";
+    AuthorizationCompositionViolationCode["DelegationOriginationWildcardNotPermitted"] = "delegation_origination_wildcard_not_permitted";
+    AuthorizationCompositionViolationCode["DelegationOriginationWildcardNotFirstParty"] = "delegation_origination_wildcard_not_first_party";
     AuthorizationCompositionViolationCode["WritableRelationInvalid"] = "writable_relation_invalid";
     AuthorizationCompositionViolationCode["SearchableInvalid"] = "searchable_invalid";
     AuthorizationCompositionViolationCode["PlatformTemplateInvalid"] = "platform_template_invalid";
@@ -52,4 +60,11 @@ class AuthorizationCompositionError extends Error {
     }
 }
 exports.AuthorizationCompositionError = AuthorizationCompositionError;
+class AuthorizationCompositionInputError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'AuthorizationCompositionInputError';
+    }
+}
+exports.AuthorizationCompositionInputError = AuthorizationCompositionInputError;
 //# sourceMappingURL=authorization-composition-error.js.map

package/dist/authorization-module/lib/authorization-composition-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-composition-error.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-composition-error.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAOxB,IAAY,qCA8CX;AA9CD,WAAY,qCAAqC;IAE/C,4EAAmC,CAAA;IACnC,iFAAwC,CAAA;IACxC,mFAA0C,CAAA;IAC1C,kGAAyD,CAAA;IACzD,oFAA2C,CAAA;IAC3C,oFAA2C,CAAA;IAE3C,wFAA+C,CAAA;IAC/C,kGAAyD,CAAA;IACzD,oFAA2C,CAAA;IAC3C,wFAA+C,CAAA;IAC/C,wFAA+C,CAAA;IAC/C,6FAAoD,CAAA;IACpD,0FAAiD,CAAA;IACjD,mFAA0C,CAAA;IAC1C,+GAAsE,CAAA;IAEtE,0GAAiE,CAAA;IACjE,iFAAwC,CAAA;IACxC,+FAAsD,CAAA;IACtD,8FAAqD,CAAA;IACrD,6EAAoC,CAAA;IAEpC,8FAAqD,CAAA;IAErD,kGAAyD,CAAA;IAEzD,yGAAgE,CAAA;IAChE,0FAAiD,CAAA;IACjD,8FAAqD,CAAA;IACrD,iFAAwC,CAAA;IAExC,8FAAqD,CAAA;IAErD,+FAAsD,CAAA;IAEtD,mFAA0C,CAAA;IAE1C,2EAAkC,CAAA;IAElC,4FAAmD,CAAA;IACnD,sFAA6C,CAAA;IAC7C,wGAA+D,CAAA;IAC/D,mGAA0D,CAAA;AAC5D,CAAC,EA9CW,qCAAqC,qDAArC,qCAAqC,QA8ChD;AAEY,QAAA,2CAA2C,GAAG,OAAC,CAAC,UAAU,CACrE,qCAAqC,CACtC,CAAC;AAUF,MAAa,6BAA8B,SAAQ,KAAK;IAC7C,UAAU,CAA+C;IAElE,YAAY,UAAwD;QAClE,KAAK,CACH,gDAAgD,UAAU,CAAC,MAAM,kBAAkB;YACjF,UAAU;iBACP,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBACtD,IAAI,CAAC,IAAI,CAAC,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAbD,sEAaC"}
+{"version":3,"file":"authorization-composition-error.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-composition-error.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAOxB,IAAY,qCA+DX;AA/DD,WAAY,qCAAqC;IAE/C,4EAAmC,CAAA;IACnC,iFAAwC,CAAA;IACxC,mFAA0C,CAAA;IAC1C,kGAAyD,CAAA;IACzD,oFAA2C,CAAA;IAC3C,oFAA2C,CAAA;IAE3C,wFAA+C,CAAA;IAC/C,kGAAyD,CAAA;IACzD,oFAA2C,CAAA;IAC3C,wFAA+C,CAAA;IAC/C,wFAA+C,CAAA;IAC/C,6FAAoD,CAAA;IACpD,0FAAiD,CAAA;IACjD,mFAA0C,CAAA;IAC1C,+GAAsE,CAAA;IAEtE,0GAAiE,CAAA;IACjE,iFAAwC,CAAA;IACxC,+FAAsD,CAAA;IACtD,8FAAqD,CAAA;IACrD,6EAAoC,CAAA;IAEpC,8FAAqD,CAAA;IAErD,kGAAyD,CAAA;IAEzD,yGAAgE,CAAA;IAChE,0FAAiD,CAAA;IAGjD,6GAAoE,CAAA;IAEpE,oIAA2F,CAAA;IAE3F,mIAA0F,CAAA;IAE1F,wGAA+D,CAAA;IAE/D,4HAAmF,CAAA;IAEnF,wIAA+F,CAAA;IAE/F,oIAA2F,CAAA;IAE3F,uIAA8F,CAAA;IAC9F,8FAAqD,CAAA;IACrD,iFAAwC,CAAA;IAExC,8FAAqD,CAAA;IAErD,+FAAsD,CAAA;IAEtD,mFAA0C,CAAA;IAE1C,2EAAkC,CAAA;IAElC,4FAAmD,CAAA;IACnD,sFAA6C,CAAA;IAC7C,wGAA+D,CAAA;IAC/D,mGAA0D,CAAA;AAC5D,CAAC,EA/DW,qCAAqC,qDAArC,qCAAqC,QA+DhD;AAEY,QAAA,2CAA2C,GAAG,OAAC,CAAC,UAAU,CACrE,qCAAqC,CACtC,CAAC;AAUF,MAAa,6BAA8B,SAAQ,KAAK;IAC7C,UAAU,CAA+C;IAElE,YAAY,UAAwD;QAClE,KAAK,CACH,gDAAgD,UAAU,CAAC,MAAM,kBAAkB;YACjF,UAAU;iBACP,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBACtD,IAAI,CAAC,IAAI,CAAC,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAbD,sEAaC;AAOD,MAAa,kCAAmC,SAAQ,KAAK;IAC3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IACnD,CAAC;CACF;AALD,gFAKC"}

package/dist/authorization-module/lib/authorization-interface-requirements.d.ts

@@ -1,7 +1,8 @@
 export declare enum XemaInterfaceRelationKind {
     Defined = "defined",
     Assignable = "assignable",
-    Computed = "computed"
+    Computed = "computed",
+    Checkable = "checkable"
 }
 export interface XemaInterfaceUsersetTerm {
     readonly relation: string;
@@ -15,6 +16,9 @@ export type XemaInterfaceRelationRequirement = {
 } | {
     readonly kind: XemaInterfaceRelationKind.Computed;
     readonly anyOf: readonly XemaInterfaceUsersetTerm[];
+} | {
+    readonly kind: XemaInterfaceRelationKind.Checkable;
+    readonly subjects: readonly string[];
 };
 export type XemaInterfaceRequirements = Readonly<Record<string, XemaInterfaceRelationRequirement>>;
 export declare function formatXemaInterfaceUsersetTerm(term: XemaInterfaceUsersetTerm): string;

package/dist/authorization-module/lib/authorization-interface-requirements.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-interface-requirements.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-interface-requirements.ts"],"names":[],"mappings":"AAeA,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,QAAQ,aAAa;CACtB;AAGD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,gCAAgC,GACxC;IAAE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,OAAO,CAAA;CAAE,GACpD;IACE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,UAAU,CAAC;IAEpD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,QAAQ,CAAC;IAElD,QAAQ,CAAC,KAAK,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACrD,CAAC;AAGN,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAC9C,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CACjD,CAAC;AAGF,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,CAErF"}
+{"version":3,"file":"authorization-interface-requirements.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-interface-requirements.ts"],"names":[],"mappings":"AAkBA,oBAAY,yBAAyB;IACnC,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,QAAQ,aAAa;IACrB,SAAS,cAAc;CACxB;AAGD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,gCAAgC,GACxC;IAAE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,OAAO,CAAA;CAAE,GACpD;IACE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,UAAU,CAAC;IAEpD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,QAAQ,CAAC;IAElD,QAAQ,CAAC,KAAK,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACrD,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,SAAS,CAAC;IAEnD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,CAAC;AAGN,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAC9C,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CACjD,CAAC;AAGF,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,CAErF"}

package/dist/authorization-module/lib/authorization-interface-requirements.js

@@ -7,6 +7,7 @@ var XemaInterfaceRelationKind;
     XemaInterfaceRelationKind["Defined"] = "defined";
     XemaInterfaceRelationKind["Assignable"] = "assignable";
     XemaInterfaceRelationKind["Computed"] = "computed";
+    XemaInterfaceRelationKind["Checkable"] = "checkable";
 })(XemaInterfaceRelationKind || (exports.XemaInterfaceRelationKind = XemaInterfaceRelationKind = {}));
 function formatXemaInterfaceUsersetTerm(term) {
     return term.from === undefined ? term.relation : `${term.relation} from ${term.from}`;

package/dist/authorization-module/lib/authorization-interface-requirements.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-interface-requirements.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-interface-requirements.ts"],"names":[],"mappings":";;;AA8CA,wEAEC;AAjCD,IAAY,yBAIX;AAJD,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,sDAAyB,CAAA;IACzB,kDAAqB,CAAA;AACvB,CAAC,EAJW,yBAAyB,yCAAzB,yBAAyB,QAIpC;AA2BD,SAAgB,8BAA8B,CAAC,IAA8B;IAC3E,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;AACxF,CAAC"}
+{"version":3,"file":"authorization-interface-requirements.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-interface-requirements.ts"],"names":[],"mappings":";;;AAuDA,wEAEC;AAvCD,IAAY,yBAKX;AALD,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,sDAAyB,CAAA;IACzB,kDAAqB,CAAA;IACrB,oDAAuB,CAAA;AACzB,CAAC,EALW,yBAAyB,yCAAzB,yBAAyB,QAKpC;AAgCD,SAAgB,8BAA8B,CAAC,IAA8B;IAC3E,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;AACxF,CAAC"}

package/dist/authorization-module/lib/authorization-module-contribution.d.ts

@@ -22,6 +22,17 @@ export declare const AuthorizationModuleSourceManifestSchema: z.ZodObject<{
             minModuleVersion: z.ZodNumber;
         }, z.core.$strict>>;
         implements: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodEnum<typeof import("./platform-authorization-modules").XemaAuthorizationInterface>>>;
+        delegationOrigination: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            holderWorkload: z.ZodString;
+            capabilities: z.ZodUnion<readonly [z.ZodArray<z.ZodType<import("../../capability").CapabilityRef, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityRef, unknown>>>, z.ZodObject<{
+                stated: z.ZodLiteral<true>;
+                ceiling: z.ZodOptional<z.ZodEnum<typeof import("./delegation-wildcard-ceiling").DelegationCeiling>>;
+            }, z.core.$strict>]>;
+            redelegable: z.ZodUnion<readonly [z.ZodArray<z.ZodType<import("../../capability").CapabilityRef, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityRef, unknown>>>, z.ZodObject<{
+                stated: z.ZodLiteral<true>;
+            }, z.core.$strict>]>;
+            expiresAfter: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
         resourceTypes: z.ZodArray<z.ZodString>;
         writableRelations: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>;
         searchable: z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -69,6 +80,7 @@ export declare const SignedBiomeAuthorizationFactsSchema: z.ZodObject<{
     tier: z.ZodEnum<typeof import("../../biome").BiomeTier>;
     declaredBiomeDependencies: z.ZodArray<z.ZodString>;
     serviceNames: z.ZodArray<z.ZodString>;
+    declaredCapabilities: z.ZodArray<z.ZodString>;
 }, z.core.$strict>;
 export type SignedBiomeAuthorizationFacts = z.infer<typeof SignedBiomeAuthorizationFactsSchema>;
 export declare const AuthorizationModuleContributionManifestSchema: z.ZodObject<{
@@ -84,6 +96,17 @@ export declare const AuthorizationModuleContributionManifestSchema: z.ZodObject<
             minModuleVersion: z.ZodNumber;
         }, z.core.$strict>>;
         implements: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodEnum<typeof import("./platform-authorization-modules").XemaAuthorizationInterface>>>;
+        delegationOrigination: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            holderWorkload: z.ZodString;
+            capabilities: z.ZodUnion<readonly [z.ZodArray<z.ZodType<import("../../capability").CapabilityRef, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityRef, unknown>>>, z.ZodObject<{
+                stated: z.ZodLiteral<true>;
+                ceiling: z.ZodOptional<z.ZodEnum<typeof import("./delegation-wildcard-ceiling").DelegationCeiling>>;
+            }, z.core.$strict>]>;
+            redelegable: z.ZodUnion<readonly [z.ZodArray<z.ZodType<import("../../capability").CapabilityRef, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityRef, unknown>>>, z.ZodObject<{
+                stated: z.ZodLiteral<true>;
+            }, z.core.$strict>]>;
+            expiresAfter: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
         resourceTypes: z.ZodArray<z.ZodString>;
         writableRelations: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>;
         searchable: z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -129,6 +152,7 @@ export declare const AuthorizationModuleContributionManifestSchema: z.ZodObject<
         tier: z.ZodEnum<typeof import("../../biome").BiomeTier>;
         declaredBiomeDependencies: z.ZodArray<z.ZodString>;
         serviceNames: z.ZodArray<z.ZodString>;
+        declaredCapabilities: z.ZodArray<z.ZodString>;
     }, z.core.$strict>;
 }, z.core.$strict>;
 export type AuthorizationModuleContributionManifest = z.infer<typeof AuthorizationModuleContributionManifestSchema>;

package/dist/authorization-module/lib/authorization-module-contribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-module-contribution.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-module-contribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2BxB,eAAO,MAAM,6BAA6B;;;kBAK/B,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF,eAAO,MAAM,iCAAiC;;;kBAKnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AAGF,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA2BhD,CAAC;AACL,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AAsBF,eAAO,MAAM,mCAAmC;;;;kBAQrC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAGF,eAAO,MAAM,6CAA6C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgBtD,CAAC;AACL,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAC3D,OAAO,6CAA6C,CACrD,CAAC;AAGF,qBAAa,oCAAqC,SAAQ,KAAK;gBACjD,OAAO,EAAE,MAAM;CAI5B;AAOD,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,6BAA6B,GACzC,uCAAuC,CAsBzC;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAYD,wBAAgB,uBAAuB,CACrC,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC,GACtC,MAAM,GAAG,IAAI,CAcf;AAGD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,aAAa,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,uCAAuC,CAAC;CAC5D,CAAC,GACD,gBAAgB,EAAE,CAKpB;AAQD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,uCAAuC,GAAG,SAAS,GAC5D,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,CAOpD"}
+{"version":3,"file":"authorization-module-contribution.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-module-contribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2BxB,eAAO,MAAM,6BAA6B;;;kBAK/B,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF,eAAO,MAAM,iCAAiC;;;kBAKnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AAGF,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA2BhD,CAAC;AACL,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AAsBF,eAAO,MAAM,mCAAmC;;;;;kBAarC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAGF,eAAO,MAAM,6CAA6C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgBtD,CAAC;AACL,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAC3D,OAAO,6CAA6C,CACrD,CAAC;AAGF,qBAAa,oCAAqC,SAAQ,KAAK;gBACjD,OAAO,EAAE,MAAM;CAI5B;AAOD,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,6BAA6B,GACzC,uCAAuC,CAsBzC;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAYD,wBAAgB,uBAAuB,CACrC,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC,GACtC,MAAM,GAAG,IAAI,CAcf;AAGD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,aAAa,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,uCAAuC,CAAC;CAC5D,CAAC,GACD,gBAAgB,EAAE,CAKpB;AAQD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,uCAAuC,GAAG,SAAS,GAC5D,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,CAOpD"}

package/dist/authorization-module/lib/authorization-module-contribution.js

@@ -59,6 +59,7 @@ exports.SignedBiomeAuthorizationFactsSchema = zod_1.z
     tier: biome_1.BiomeTierSchema,
     declaredBiomeDependencies: uniqueNonEmptyStrings('declaredBiomeDependencies'),
     serviceNames: uniqueNonEmptyStrings('serviceNames'),
+    declaredCapabilities: uniqueNonEmptyStrings('declaredCapabilities'),
 })
     .strict();
 exports.AuthorizationModuleContributionManifestSchema = zod_1.z

package/dist/authorization-module/lib/authorization-module-contribution.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-module-contribution.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-module-contribution.ts"],"names":[],"mappings":";;;AAoJA,oFAyBC;AAkBD,0DAiBC;AAGD,gEAUC;AAQD,wDAUC;AA/OD,6BAAwB;AAExB,uCAA8C;AAE9C,mFAIyC;AACzC,qFAA+E;AAkBlE,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iEAAiC,CAAC;IACzD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAKC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sEAAsC,CAAC;IAC9D,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,uCAAuC,GAAG,OAAC;KACrD,MAAM,CAAC;IACN,QAAQ,EAAE,iEAAiC;IAC3C,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,qCAA6B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,QAAQ,EAAE,yCAAiC;CAC5C,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,IACE,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAClC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,EAC/C,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2CAA2C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SAC3H,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;YAC1B,OAAO,EAAE,0BAA0B,QAAQ,CAAC,QAAQ,CAAC,IAAI,kCAAkC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI;SACvH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,OAAC;SACL,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE;QAC1D,OAAO,EAAE,GAAG,IAAI,4BAA4B;KAC7C,CAAC,CAAC;AACP,CAAC;AAcY,QAAA,mCAAmC,GAAG,OAAC;KACjD,MAAM,CAAC;IACN,IAAI,EAAE,uBAAe;IACrB,yBAAyB,EAAE,qBAAqB,CAC9C,2BAA2B,CAC5B;IACD,YAAY,EAAE,qBAAqB,CAAC,cAAc,CAAC;CACpD,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,6CAA6C,GAAG,OAAC;KAC3D,MAAM,CAAC;IACN,QAAQ,EAAE,iEAAiC;IAC3C,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,qCAA6B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,QAAQ,EAAE,yCAAiC;IAC3C,WAAW,EAAE,2CAAmC;CACjD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC;IAC1D,MAAM,MAAM,GAAG,+CAAuC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAML,MAAa,oCAAqC,SAAQ,KAAK;IAC7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sCAAsC,CAAC;IACrD,CAAC;CACF;AALD,oFAKC;AAOD,SAAgB,oCAAoC,CAClD,MAAe,EACf,WAA0C;IAE1C,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,oCAAoC,CAC5C,8IAA8I,CAC/I,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,+CAAuC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,oCAAoC,CAC5C,yDAAyD,MAAM,CAAC,KAAK,CAAC,MAAM;aACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,qDAA6C,CAAC,KAAK,CAAC;QACzD,GAAG,MAAM,CAAC,IAAI;QACd,WAAW,EAAE,2CAAmC,CAAC,KAAK,CAAC,WAAW,CAAC;KACpE,CAAC,CAAC;AACL,CAAC;AAkBD,SAAgB,uBAAuB,CACrC,iBAAyB,EACzB,MAAuC;IAEvC,MAAM,MAAM,GAAG;QACb,GAAG,IAAI,GAAG,CACR,MAAM;aACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;aACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CACzB;KACF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,oCAAoC,CAC5C,YAAY,iBAAiB,wCAAwC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC3B,CAAC;AAGD,SAAgB,0BAA0B,CACxC,OAGE;IAEF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY;KAClD,CAAC,CAAC,CAAC;AACN,CAAC;AAQD,SAAgB,sBAAsB,CACpC,OAAe,EACf,QAA6D;IAE7D,MAAM,QAAQ,GAAG,IAAA,4DAA2B,EAAC,OAAO,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;IACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"authorization-module-contribution.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-module-contribution.ts"],"names":[],"mappings":";;;AAyJA,oFAyBC;AAkBD,0DAiBC;AAGD,gEAUC;AAQD,wDAUC;AApPD,6BAAwB;AAExB,uCAA8C;AAE9C,mFAIyC;AACzC,qFAA+E;AAkBlE,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iEAAiC,CAAC;IACzD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAKC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sEAAsC,CAAC;IAC9D,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,uCAAuC,GAAG,OAAC;KACrD,MAAM,CAAC;IACN,QAAQ,EAAE,iEAAiC;IAC3C,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,qCAA6B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,QAAQ,EAAE,yCAAiC;CAC5C,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,IACE,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAClC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,EAC/C,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2CAA2C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SAC3H,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;YAC1B,OAAO,EAAE,0BAA0B,QAAQ,CAAC,QAAQ,CAAC,IAAI,kCAAkC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI;SACvH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,OAAC;SACL,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE;QAC1D,OAAO,EAAE,GAAG,IAAI,4BAA4B;KAC7C,CAAC,CAAC;AACP,CAAC;AAcY,QAAA,mCAAmC,GAAG,OAAC;KACjD,MAAM,CAAC;IACN,IAAI,EAAE,uBAAe;IACrB,yBAAyB,EAAE,qBAAqB,CAC9C,2BAA2B,CAC5B;IACD,YAAY,EAAE,qBAAqB,CAAC,cAAc,CAAC;IAKnD,oBAAoB,EAAE,qBAAqB,CAAC,sBAAsB,CAAC;CACpE,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,6CAA6C,GAAG,OAAC;KAC3D,MAAM,CAAC;IACN,QAAQ,EAAE,iEAAiC;IAC3C,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,qCAA6B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,QAAQ,EAAE,yCAAiC;IAC3C,WAAW,EAAE,2CAAmC;CACjD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC;IAC1D,MAAM,MAAM,GAAG,+CAAuC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAML,MAAa,oCAAqC,SAAQ,KAAK;IAC7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sCAAsC,CAAC;IACrD,CAAC;CACF;AALD,oFAKC;AAOD,SAAgB,oCAAoC,CAClD,MAAe,EACf,WAA0C;IAE1C,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,oCAAoC,CAC5C,8IAA8I,CAC/I,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,+CAAuC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,oCAAoC,CAC5C,yDAAyD,MAAM,CAAC,KAAK,CAAC,MAAM;aACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,qDAA6C,CAAC,KAAK,CAAC;QACzD,GAAG,MAAM,CAAC,IAAI;QACd,WAAW,EAAE,2CAAmC,CAAC,KAAK,CAAC,WAAW,CAAC;KACpE,CAAC,CAAC;AACL,CAAC;AAkBD,SAAgB,uBAAuB,CACrC,iBAAyB,EACzB,MAAuC;IAEvC,MAAM,MAAM,GAAG;QACb,GAAG,IAAI,GAAG,CACR,MAAM;aACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;aACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CACzB;KACF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,oCAAoC,CAC5C,YAAY,iBAAiB,wCAAwC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC3B,CAAC;AAGD,SAAgB,0BAA0B,CACxC,OAGE;IAEF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY;KAClD,CAAC,CAAC,CAAC;AACN,CAAC;AAQD,SAAgB,sBAAsB,CACpC,OAAe,EACf,QAA6D;IAE7D,MAAM,QAAQ,GAAG,IAAA,4DAA2B,EAAC,OAAO,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;IACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/dist/authorization-module/lib/authorization-module-envelope.d.ts

@@ -79,6 +79,17 @@ export declare const AuthorizationModuleEnvelopeSchema: z.ZodObject<{
         minModuleVersion: z.ZodNumber;
     }, z.core.$strict>>;
     implements: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodEnum<typeof import("./platform-authorization-modules").XemaAuthorizationInterface>>>;
+    delegationOrigination: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        holderWorkload: z.ZodString;
+        capabilities: z.ZodUnion<readonly [z.ZodArray<z.ZodType<import("../../capability").CapabilityRef, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityRef, unknown>>>, z.ZodObject<{
+            stated: z.ZodLiteral<true>;
+            ceiling: z.ZodOptional<z.ZodEnum<typeof import("./delegation-wildcard-ceiling").DelegationCeiling>>;
+        }, z.core.$strict>]>;
+        redelegable: z.ZodUnion<readonly [z.ZodArray<z.ZodType<import("../../capability").CapabilityRef, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityRef, unknown>>>, z.ZodObject<{
+            stated: z.ZodLiteral<true>;
+        }, z.core.$strict>]>;
+        expiresAfter: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
     resourceTypes: z.ZodArray<z.ZodString>;
     writableRelations: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>;
     searchable: z.ZodRecord<z.ZodString, z.ZodObject<{

package/dist/authorization-module/lib/authorization-module-envelope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-module-envelope.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-module-envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA+BxB,eAAO,MAAM,iCAAiC,QAAgC,CAAC;AAE/E,eAAO,MAAM,sCAAsC,QACd,CAAC;AAStC,eAAO,MAAM,mCAAmC;;;kBAKrC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAGF,eAAO,MAAM,6BAA6B;;;kBAiBtC,CAAC;AACL,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAOF,oBAAY,8BAA8B;IACxC,UAAU,gBAAgB;IAC1B,cAAc,oBAAoB;IAClC,QAAQ,cAAc;IACtB,YAAY,kBAAkB;IAC9B,iBAAiB,uBAAuB;CACzC;AAED,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;4BAsC3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AASF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;kBAKpC,CAAC;AACZ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AAEF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqDnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC"}
+{"version":3,"file":"authorization-module-envelope.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-module-envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgCxB,eAAO,MAAM,iCAAiC,QAAgC,CAAC;AAE/E,eAAO,MAAM,sCAAsC,QACd,CAAC;AAStC,eAAO,MAAM,mCAAmC;;;kBAKrC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAGF,eAAO,MAAM,6BAA6B;;;kBAiBtC,CAAC;AACL,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAOF,oBAAY,8BAA8B;IACxC,UAAU,gBAAgB;IAC1B,cAAc,oBAAoB;IAClC,QAAQ,cAAc;IACtB,YAAY,kBAAkB;IAC9B,iBAAiB,uBAAuB;CACzC;AAED,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;4BAsC3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AASF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;kBAKpC,CAAC;AACZ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AAEF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA4DnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC"}

package/dist/authorization-module/lib/authorization-module-envelope.js

@@ -5,6 +5,7 @@ const zod_1 = require("zod");
 const authorization_facts_1 = require("../../authorization-facts");
 const platform_generation_1 = require("../../platform-generation");
 const authorization_namespace_1 = require("./authorization-namespace");
+const delegation_origination_1 = require("./delegation-origination");
 const platform_authorization_modules_1 = require("./platform-authorization-modules");
 const TypeNameSchema = zod_1.z.string().regex(/^[^:#@*\s]{1,254}$/);
 const RelationNameSchema = zod_1.z.string().regex(/^[^:#@*\s]{1,50}$/);
@@ -94,6 +95,9 @@ exports.AuthorizationModuleEnvelopeSchema = zod_1.z
         .array(exports.AuthorizationModuleDependencySchema)
         .refine((deps) => new Set(deps.map((d) => d.biome)).size === deps.length, { message: 'dependsOn must not name a biome twice.' }),
     implements: zod_1.z.record(TypeNameSchema, uniqueArray(platform_authorization_modules_1.XemaAuthorizationInterfaceSchema, 'implements').min(1)),
+    delegationOrigination: zod_1.z
+        .record(TypeNameSchema, delegation_origination_1.DelegationOriginationSchema)
+        .optional(),
     resourceTypes: uniqueArray(TypeNameSchema, 'resourceTypes').min(1),
     writableRelations: authorization_facts_1.WritableRelationsSchema,
     searchable: zod_1.z.record(TypeNameSchema, exports.AuthorizationSearchableSchema),

package/dist/authorization-module/lib/authorization-module-envelope.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-module-envelope.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-module-envelope.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,mEAAoE;AACpE,mEAAqE;AAErE,uEAAuE;AACvE,qFAG0C;AAkB1C,MAAM,cAAc,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;AAC9D,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAGpD,QAAA,iCAAiC,GAAG,6BAA6B,CAAC;AAElE,QAAA,sCAAsC,GACjD,mCAAmC,CAAC;AAEtC,SAAS,WAAW,CAAyB,IAAO,EAAE,IAAY;IAChE,OAAO,OAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE;QAC9E,OAAO,EAAE,GAAG,IAAI,4BAA4B;KAC7C,CAAC,CAAC;AACL,CAAC;AAGY,QAAA,mCAAmC,GAAG,OAAC;KACjD,MAAM,CAAC;IACN,KAAK,EAAE,oDAA0B;IACjC,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IAKN,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;IAMjC,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE;CAC7B,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE;IAC3D,OAAO,EAAE,kEAAkE;CAC5E,CAAC,CAAC;AAUL,IAAY,8BAMX;AAND,WAAY,8BAA8B;IACxC,4DAA0B,CAAA;IAC1B,oEAAkC,CAAA;IAClC,wDAAsB,CAAA;IACtB,gEAA8B,CAAA;IAC9B,0EAAwC,CAAA;AAC1C,CAAC,EANW,8BAA8B,8CAA9B,8BAA8B,QAMzC;AAEY,QAAA,gCAAgC,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3E,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,UAAU,CAAC;QAC1D,IAAI,EAAE,cAAc;QACpB,EAAE,EAAE,cAAc;KACnB,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,cAAc,CAAC;QAC9D,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,kBAAkB;QACxB,EAAE,EAAE,kBAAkB;KACvB,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,QAAQ,CAAC;QACxD,IAAI,EAAE,cAAc;KACrB,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,YAAY,CAAC;QAC5D,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,kBAAkB;KAC7B,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,iBAAiB,CAAC;QACjE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,kBAAkB;QAE5B,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3C,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAYU,QAAA,kCAAkC,GAAG,OAAC;KAChD,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,wCAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACxD,CAAC;KACD,MAAM,EAAE,CAAC;AAKC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IAEN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEvC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAO1C,kBAAkB,EAAE,8CAAwB;IAE5C,KAAK,EAAE,WAAW,CAChB,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yCAAiC,CAAC,EACnD,OAAO,CACR,CAAC,GAAG,CAAC,CAAC,CAAC;IAER,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8CAAsC,CAAC;IAE/D,OAAO,EAAE,WAAW,CAAC,kEAAiC,EAAE,SAAS,CAAC;IAElE,SAAS,EAAE,OAAC;SACT,KAAK,CAAC,2CAAmC,CAAC;SAC1C,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,EAChE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CACtD;IAEH,UAAU,EAAE,OAAC,CAAC,MAAM,CAClB,cAAc,EACd,WAAW,CAAC,iEAAgC,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CACnE;IAED,aAAa,EAAE,WAAW,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAElE,iBAAiB,EAAE,6CAAuB;IAE1C,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,cAAc,EAAE,qCAA6B,CAAC;IAOnE,eAAe,EAAE,OAAC,CAAC,MAAM,CACvB,cAAc,EACd,WAAW,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAC1D;IAED,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,0CAAkC,CAAC;CACxD,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"authorization-module-envelope.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/authorization-module-envelope.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,mEAAoE;AACpE,mEAAqE;AAErE,uEAAuE;AACvE,qEAAuE;AACvE,qFAG0C;AAkB1C,MAAM,cAAc,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;AAC9D,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAGpD,QAAA,iCAAiC,GAAG,6BAA6B,CAAC;AAElE,QAAA,sCAAsC,GACjD,mCAAmC,CAAC;AAEtC,SAAS,WAAW,CAAyB,IAAO,EAAE,IAAY;IAChE,OAAO,OAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE;QAC9E,OAAO,EAAE,GAAG,IAAI,4BAA4B;KAC7C,CAAC,CAAC;AACL,CAAC;AAGY,QAAA,mCAAmC,GAAG,OAAC;KACjD,MAAM,CAAC;IACN,KAAK,EAAE,oDAA0B;IACjC,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IAKN,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;IAMjC,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE;CAC7B,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE;IAC3D,OAAO,EAAE,kEAAkE;CAC5E,CAAC,CAAC;AAUL,IAAY,8BAMX;AAND,WAAY,8BAA8B;IACxC,4DAA0B,CAAA;IAC1B,oEAAkC,CAAA;IAClC,wDAAsB,CAAA;IACtB,gEAA8B,CAAA;IAC9B,0EAAwC,CAAA;AAC1C,CAAC,EANW,8BAA8B,8CAA9B,8BAA8B,QAMzC;AAEY,QAAA,gCAAgC,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3E,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,UAAU,CAAC;QAC1D,IAAI,EAAE,cAAc;QACpB,EAAE,EAAE,cAAc;KACnB,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,cAAc,CAAC;QAC9D,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,kBAAkB;QACxB,EAAE,EAAE,kBAAkB;KACvB,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,QAAQ,CAAC;QACxD,IAAI,EAAE,cAAc;KACrB,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,YAAY,CAAC;QAC5D,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,kBAAkB;KAC7B,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,iBAAiB,CAAC;QACjE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,kBAAkB;QAE5B,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3C,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAYU,QAAA,kCAAkC,GAAG,OAAC;KAChD,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,wCAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACxD,CAAC;KACD,MAAM,EAAE,CAAC;AAKC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IAEN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEvC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAO1C,kBAAkB,EAAE,8CAAwB;IAE5C,KAAK,EAAE,WAAW,CAChB,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yCAAiC,CAAC,EACnD,OAAO,CACR,CAAC,GAAG,CAAC,CAAC,CAAC;IAER,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8CAAsC,CAAC;IAE/D,OAAO,EAAE,WAAW,CAAC,kEAAiC,EAAE,SAAS,CAAC;IAElE,SAAS,EAAE,OAAC;SACT,KAAK,CAAC,2CAAmC,CAAC;SAC1C,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,EAChE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CACtD;IAEH,UAAU,EAAE,OAAC,CAAC,MAAM,CAClB,cAAc,EACd,WAAW,CAAC,iEAAgC,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CACnE;IAKD,qBAAqB,EAAE,OAAC;SACrB,MAAM,CAAC,cAAc,EAAE,oDAA2B,CAAC;SACnD,QAAQ,EAAE;IAEb,aAAa,EAAE,WAAW,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAElE,iBAAiB,EAAE,6CAAuB;IAE1C,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,cAAc,EAAE,qCAA6B,CAAC;IAOnE,eAAe,EAAE,OAAC,CAAC,MAAM,CACvB,cAAc,EACd,WAAW,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAC1D;IAED,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,0CAAkC,CAAC;CACxD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/authorization-module/lib/delegation-origination.d.ts

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+import { DelegationCeiling } from './delegation-wildcard-ceiling';
+export declare const DELEGATION_ORIGINATION_DURATION_PATTERN: RegExp;
+declare const StatedCapabilitiesSchema: z.ZodObject<{
+    stated: z.ZodLiteral<true>;
+    ceiling: z.ZodOptional<z.ZodEnum<typeof DelegationCeiling>>;
+}, z.core.$strict>;
+export declare const DelegationOriginationSchema: z.ZodObject<{
+    holderWorkload: z.ZodString;
+    capabilities: z.ZodUnion<readonly [z.ZodArray<z.ZodType<import("../../capability").CapabilityRef, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityRef, unknown>>>, z.ZodObject<{
+        stated: z.ZodLiteral<true>;
+        ceiling: z.ZodOptional<z.ZodEnum<typeof DelegationCeiling>>;
+    }, z.core.$strict>]>;
+    redelegable: z.ZodUnion<readonly [z.ZodArray<z.ZodType<import("../../capability").CapabilityRef, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityRef, unknown>>>, z.ZodObject<{
+        stated: z.ZodLiteral<true>;
+    }, z.core.$strict>]>;
+    expiresAfter: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type DelegationOrigination = z.infer<typeof DelegationOriginationSchema>;
+export type StatedCapabilities = z.infer<typeof StatedCapabilitiesSchema>;
+export declare function hasStatedCapabilities(origination: Pick<DelegationOrigination, 'capabilities'>): origination is {
+    capabilities: StatedCapabilities;
+} & typeof origination;
+export declare function hasWildcardCeiling(origination: Pick<DelegationOrigination, 'capabilities'>): boolean;
+export {};
+//# sourceMappingURL=delegation-origination.d.ts.map

package/dist/authorization-module/lib/delegation-origination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-origination.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/delegation-origination.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAQlE,eAAO,MAAM,uCAAuC,QACiB,CAAC;AAWtE,QAAA,MAAM,wBAAwB;;;kBAKnB,CAAC;AAgCZ,eAAO,MAAM,2BAA2B;;;;;;;;;;kBAqB7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAG1E,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,IAAI,CAAC,qBAAqB,EAAE,cAAc,CAAC,GACvD,WAAW,IAAI;IAAE,YAAY,EAAE,kBAAkB,CAAA;CAAE,GAAG,OAAO,WAAW,CAE1E;AAQD,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,qBAAqB,EAAE,cAAc,CAAC,GAAG,OAAO,CAKpG"}

package/dist/authorization-module/lib/delegation-origination.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DelegationOriginationSchema = exports.DELEGATION_ORIGINATION_DURATION_PATTERN = void 0;
+exports.hasStatedCapabilities = hasStatedCapabilities;
+exports.hasWildcardCeiling = hasWildcardCeiling;
+const zod_1 = require("zod");
+const capability_1 = require("../../capability");
+const delegation_wildcard_ceiling_1 = require("./delegation-wildcard-ceiling");
+exports.DELEGATION_ORIGINATION_DURATION_PATTERN = /^P(?!$)(?:\d+W)?(?:\d+D)?(?:T(?=\d)(?:\d+H)?(?:\d+M)?(?:\d+S)?)?$/;
+const StatedMarkerSchema = zod_1.z.object({ stated: zod_1.z.literal(true) }).strict();
+const FixedCapabilitiesSchema = zod_1.z
+    .array(capability_1.CapabilityRefSchema)
+    .min(1)
+    .refine((values) => new Set(values).size === values.length, {
+    message: 'capabilities must not repeat an entry.',
+});
+const StatedCapabilitiesSchema = zod_1.z
+    .object({
+    stated: zod_1.z.literal(true),
+    ceiling: zod_1.z.nativeEnum(delegation_wildcard_ceiling_1.DelegationCeiling).optional(),
+})
+    .strict();
+const FixedRedelegableSchema = zod_1.z
+    .array(capability_1.CapabilityRefSchema)
+    .refine((values) => new Set(values).size === values.length, {
+    message: 'redelegable must not repeat an entry.',
+});
+exports.DelegationOriginationSchema = zod_1.z
+    .object({
+    holderWorkload: zod_1.z.string().min(1),
+    capabilities: zod_1.z.union([FixedCapabilitiesSchema, StatedCapabilitiesSchema]),
+    redelegable: zod_1.z.union([FixedRedelegableSchema, StatedMarkerSchema]),
+    expiresAfter: zod_1.z.string().regex(exports.DELEGATION_ORIGINATION_DURATION_PATTERN).optional(),
+})
+    .strict();
+function hasStatedCapabilities(origination) {
+    return !Array.isArray(origination.capabilities);
+}
+function hasWildcardCeiling(origination) {
+    return (hasStatedCapabilities(origination) &&
+        origination.capabilities.ceiling === delegation_wildcard_ceiling_1.DelegationCeiling.AnyDelegable);
+}
+//# sourceMappingURL=delegation-origination.js.map

package/dist/authorization-module/lib/delegation-origination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-origination.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/delegation-origination.ts"],"names":[],"mappings":";;;AAuFA,sDAIC;AAQD,gDAKC;AAxGD,6BAAwB;AAExB,iDAAuD;AACvD,+EAAkE;AAQrD,QAAA,uCAAuC,GAClD,mEAAmE,CAAC;AAEtE,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE1E,MAAM,uBAAuB,GAAG,OAAC;KAC9B,KAAK,CAAC,gCAAmB,CAAC;KAC1B,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE;IAC1D,OAAO,EAAE,wCAAwC;CAClD,CAAC,CAAC;AAEL,MAAM,wBAAwB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,MAAM,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACvB,OAAO,EAAE,OAAC,CAAC,UAAU,CAAC,+CAAiB,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,sBAAsB,GAAG,OAAC;KAC7B,KAAK,CAAC,gCAAmB,CAAC;KAC1B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE;IAC1D,OAAO,EAAE,uCAAuC;CACjD,CAAC,CAAC;AA0BQ,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IAEN,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAQjC,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;IAM1E,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;IAElE,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+CAAuC,CAAC,CAAC,QAAQ,EAAE;CACnF,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,SAAgB,qBAAqB,CACnC,WAAwD;IAExD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;AAClD,CAAC;AAQD,SAAgB,kBAAkB,CAAC,WAAwD;IACzF,OAAO,CACL,qBAAqB,CAAC,WAAW,CAAC;QAClC,WAAW,CAAC,YAAY,CAAC,OAAO,KAAK,+CAAiB,CAAC,YAAY,CACpE,CAAC;AACJ,CAAC"}

package/dist/authorization-module/lib/delegation-wildcard-ceiling.d.ts

@@ -0,0 +1,6 @@
+export declare enum DelegationCeiling {
+    AnyDelegable = "any-delegable"
+}
+export declare const WILDCARD_CEILING_WORKLOADS: readonly string[];
+export declare function isWildcardCeilingWorkload(workload: string): boolean;
+//# sourceMappingURL=delegation-wildcard-ceiling.d.ts.map

package/dist/authorization-module/lib/delegation-wildcard-ceiling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-wildcard-ceiling.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/delegation-wildcard-ceiling.ts"],"names":[],"mappings":"AAUA,oBAAY,iBAAiB;IAE3B,YAAY,kBAAkB;CAC/B;AAqBD,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAItD,CAAC;AAGH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnE"}

package/dist/authorization-module/lib/delegation-wildcard-ceiling.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WILDCARD_CEILING_WORKLOADS = exports.DelegationCeiling = void 0;
+exports.isWildcardCeilingWorkload = isWildcardCeilingWorkload;
+var DelegationCeiling;
+(function (DelegationCeiling) {
+    DelegationCeiling["AnyDelegable"] = "any-delegable";
+})(DelegationCeiling || (exports.DelegationCeiling = DelegationCeiling = {}));
+exports.WILDCARD_CEILING_WORKLOADS = Object.freeze([
+    'xema-capability-router',
+    'workflow-engine-api',
+    'agent-session-api',
+]);
+function isWildcardCeilingWorkload(workload) {
+    return exports.WILDCARD_CEILING_WORKLOADS.includes(workload);
+}
+//# sourceMappingURL=delegation-wildcard-ceiling.js.map

package/dist/authorization-module/lib/delegation-wildcard-ceiling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-wildcard-ceiling.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/delegation-wildcard-ceiling.ts"],"names":[],"mappings":";;;AAyCA,8DAEC;AAjCD,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IAE3B,mDAA8B,CAAA;AAChC,CAAC,EAHW,iBAAiB,iCAAjB,iBAAiB,QAG5B;AAqBY,QAAA,0BAA0B,GAAsB,MAAM,CAAC,MAAM,CAAC;IACzE,wBAAwB;IACxB,qBAAqB;IACrB,mBAAmB;CACpB,CAAC,CAAC;AAGH,SAAgB,yBAAyB,CAAC,QAAgB;IACxD,OAAO,kCAA0B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvD,CAAC"}

package/dist/authorization-module/lib/platform-authorization-modules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-authorization-modules.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/platform-authorization-modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,wCAAwC,CAAC;AAuBhD,oBAAY,2BAA2B;IACrC,IAAI,cAAc;IAClB,UAAU,oBAAoB;IAC9B,OAAO,iBAAiB;CACzB;AAED,eAAO,MAAM,iCAAiC,+CAE7C,CAAC;AAQF,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAS7D,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAG9C,eAAO,MAAM,yBAAyB,EAAE,SAAS,2BAA2B,EACtB,CAAC;AAGvD,eAAO,MAAM,8BAA8B,uDAIhC,CAAC;AAQZ,eAAO,MAAM,4BAA4B,2BAA2C,CAAC;AAGrF,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAmB7C,oBAAY,0BAA0B;IACpC,MAAM,gBAAgB;IACtB,gBAAgB,2BAA2B;CAC5C;AAED,eAAO,MAAM,gCAAgC,8CAE5C,CAAC;AAEF,eAAO,MAAM,+BAA+B,oDAIjC,CAAC;AAGZ,eAAO,MAAM,kCAAkC,EAAE,yBAQ9C,CAAC;AAOJ,eAAO,MAAM,6CAA6C,EAAE,yBA6BA,CAAC;AAG7D,eAAO,MAAM,sCAAsC,EAAE,QAAQ,CAC3D,MAAM,CAAC,0BAA0B,EAAE,yBAAyB,CAAC,CAK7D,CAAC;AAeH,eAAO,MAAM,8BAA8B,EAAE,QAAQ,CACnD,MAAM,CAAC,2BAA2B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC,CAkBhF,CAAC;AAGH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAsBD,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CA2D3E,CAAC;AAGL,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,GACd,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAQ7C"}
+{"version":3,"file":"platform-authorization-modules.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/platform-authorization-modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,wCAAwC,CAAC;AAuBhD,oBAAY,2BAA2B;IACrC,IAAI,cAAc;IAClB,UAAU,oBAAoB;IAC9B,OAAO,iBAAiB;CACzB;AAED,eAAO,MAAM,iCAAiC,+CAE7C,CAAC;AAQF,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAS7D,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAG9C,eAAO,MAAM,yBAAyB,EAAE,SAAS,2BAA2B,EACtB,CAAC;AAGvD,eAAO,MAAM,8BAA8B,uDAIhC,CAAC;AAQZ,eAAO,MAAM,4BAA4B,2BAA2C,CAAC;AAGrF,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAmB7C,oBAAY,0BAA0B;IACpC,MAAM,gBAAgB;IACtB,gBAAgB,2BAA2B;CAC5C;AAED,eAAO,MAAM,gCAAgC,8CAE5C,CAAC;AAEF,eAAO,MAAM,+BAA+B,oDAIjC,CAAC;AAGZ,eAAO,MAAM,kCAAkC,EAAE,yBAQ9C,CAAC;AAUJ,eAAO,MAAM,6CAA6C,EAAE,yBAqCA,CAAC;AAG7D,eAAO,MAAM,sCAAsC,EAAE,QAAQ,CAC3D,MAAM,CAAC,0BAA0B,EAAE,yBAAyB,CAAC,CAK7D,CAAC;AAeH,eAAO,MAAM,8BAA8B,EAAE,QAAQ,CACnD,MAAM,CAAC,2BAA2B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC,CAqBhF,CAAC;AAGH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAsBD,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CA0C3E,CAAC;AAGL,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,GACd,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAQ7C"}

package/dist/authorization-module/lib/platform-authorization-modules.js

@@ -65,6 +65,14 @@ exports.XEMA_DELEGATION_ANCHOR_INTERFACE_REQUIREMENTS = Object.freeze({
             Object.freeze({ relation: authzen_1.XEMA_ORG_ADMIN_RELATION, from: authzen_1.XemaDelegationAnchorRelation.Parent }),
         ]),
     }),
+    [authzen_1.XemaDelegationAnchorRelation.Owner]: Object.freeze({
+        kind: authorization_interface_requirements_1.XemaInterfaceRelationKind.Assignable,
+        subjects: Object.freeze([authzen_1.XEMA_ORG_OBJECT_TYPE, 'user']),
+    }),
+    [authzen_1.XemaDelegationAnchorRelation.Originate]: Object.freeze({
+        kind: authorization_interface_requirements_1.XemaInterfaceRelationKind.Checkable,
+        subjects: Object.freeze(['user']),
+    }),
 });
 exports.XEMA_AUTHORIZATION_INTERFACE_RELATIONS = Object.freeze({
     [XemaAuthorizationInterface.Parent]: exports.XEMA_PARENT_INTERFACE_REQUIREMENTS,
@@ -82,6 +90,7 @@ exports.PLATFORM_AUTHORIZATION_EXPORTS = Object.freeze({
         team: Object.freeze(['member']),
         role: Object.freeze(['assignee']),
         [authzen_1.XEMA_SCOPE_OBJECT_TYPE]: Object.freeze([]),
+        membership: Object.freeze(['holder']),
     }),
     [PlatformAuthorizationModule.Capability]: Object.freeze({}),
     [PlatformAuthorizationModule.Sharing]: Object.freeze({}),
@@ -93,22 +102,12 @@ exports.PLATFORM_FACT_WRITERS = Object.freeze({
     }),
     xema_session: Object.freeze({
         biome: 'agent-runtime',
-        relations: Object.freeze(['parent', 'anchor', 'owner', 'participant', 'editor']),
+        relations: Object.freeze(['parent', 'anchor', 'owner', 'owner_org', 'participant', 'editor']),
     }),
     xema_artifact: Object.freeze({
         biome: 'agent-runtime',
         relations: Object.freeze(['parent', 'owner']),
     }),
-    [authzen_1.XEMA_INTEGRATION_OBJECT_TYPE]: Object.freeze({
-        biome: 'connector-platform',
-        relations: Object.freeze([
-            authzen_1.XemaIntegrationRelation.Parent,
-            authzen_1.XemaIntegrationRelation.Active,
-            authzen_1.XemaIntegrationRelation.Holder,
-            authzen_1.XemaIntegrationRelation.BoundScope,
-            authzen_1.XemaIntegrationRelation.Configurer,
-        ]),
-    }),
     xema_portal: Object.freeze({
         biome: 'app-platform',
         relations: Object.freeze(['parent', 'owner', 'manager', 'editor', 'viewer', 'org_viewer']),

package/dist/authorization-module/lib/platform-authorization-modules.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform-authorization-modules.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/platform-authorization-modules.ts"],"names":[],"mappings":";;;AAwSA,kEAUC;AAlTD,6BAAwB;AAExB,2CAOuB;AAEvB,iGAGgD;AAuBhD,IAAY,2BAIX;AAJD,WAAY,2BAA2B;IACrC,iDAAkB,CAAA;IAClB,6DAA8B,CAAA;IAC9B,uDAAwB,CAAA;AAC1B,CAAC,EAJW,2BAA2B,2CAA3B,2BAA2B,QAItC;AAEY,QAAA,iCAAiC,GAAG,OAAC,CAAC,UAAU,CAC3D,2BAA2B,CAC5B,CAAC;AAQW,QAAA,sBAAsB,GAAG,sBAAsB,CAAC;AAShD,QAAA,kBAAkB,GAAG,WAAW,CAAC;AAGjC,QAAA,yBAAyB,GACpC,MAAM,CAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;AAG1C,QAAA,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1D,SAAS;IACT,eAAe;IACf,cAAc;CACN,CAAC,CAAC;AAQC,QAAA,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAU,CAAC,CAAC;AAGxE,QAAA,oBAAoB,GAAG,QAAQ,CAAC;AAmB7C,IAAY,0BAGX;AAHD,WAAY,0BAA0B;IACpC,oDAAsB,CAAA;IACtB,yEAA2C,CAAA;AAC7C,CAAC,EAHW,0BAA0B,0CAA1B,0BAA0B,QAGrC;AAEY,QAAA,gCAAgC,GAAG,OAAC,CAAC,UAAU,CAC1D,0BAA0B,CAC3B,CAAC;AAEW,QAAA,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,WAAW;IACX,YAAY;IACZ,YAAY;CACJ,CAAC,CAAC;AAGC,QAAA,kCAAkC,GAC7C,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,WAAW,CAChB,uCAA+B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChD,QAAQ;IACR,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gEAAyB,CAAC,OAAO,EAAE,CAAC;CAC3D,CAAC,CACH,CACF,CAAC;AAOS,QAAA,6CAA6C,GACxD,MAAM,CAAC,MAAM,CAAC;IACZ,CAAC,sCAA4B,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACnD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,8BAAoB,CAAC,CAAC;KAChD,CAAC;IACF,CAAC,sCAA4B,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACnD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,8BAAoB,CAAC,CAAC;KAChD,CAAC;IACF,CAAC,sCAA4B,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACnD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;KACrC,CAAC;IACF,CAAC,sCAA4B,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACvD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gCAAsB,CAAC,CAAC;KAClD,CAAC;IACF,CAAC,sCAA4B,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACvD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;KACjD,CAAC;IACF,CAAC,sCAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACtD,IAAI,EAAE,gEAAyB,CAAC,QAAQ;QACxC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,sCAA4B,CAAC,UAAU,EAAE,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,iCAAuB,EAAE,IAAI,EAAE,sCAA4B,CAAC,MAAM,EAAE,CAAC;SAChG,CAAC;KACH,CAAC;CACqD,CAAC,CAAC;AAGhD,QAAA,sCAAsC,GAE/C,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,0CAAkC;IACvE,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,EAC3C,qDAA6C;CAChD,CAAC,CAAC;AAeU,QAAA,8BAA8B,GAEvC,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QAChD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAGjC,CAAC,gCAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;KAC5C,CAAC;IACF,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3D,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;CACzD,CAAC,CAAC;AA4BU,QAAA,qBAAqB,GAChC,MAAM,CAAC,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,kBAAkB;QACzB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;KAC3E,CAAC;IACF,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1B,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;KACjF,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;KAC9C,CAAC;IAUF,CAAC,sCAA4B,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QAC5C,KAAK,EAAE,oBAAoB;QAC3B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,iCAAuB,CAAC,MAAM;YAC9B,iCAAuB,CAAC,MAAM;YAC9B,iCAAuB,CAAC,MAAM;YAC9B,iCAAuB,CAAC,UAAU;YAClC,iCAAuB,CAAC,UAAU;SACnC,CAAC;KACH,CAAC;IACF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;QACzB,KAAK,EAAE,cAAc;QACrB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;KAC3F,CAAC;IACF,GAAG,MAAM,CAAC,WAAW,CAEjB;QACE,CAAC,eAAe,EAAE,gBAAgB,CAAC;QACnC,CAAC,cAAc,EAAE,SAAS,CAAC;QAG3B,CAAC,0BAA0B,EAAE,gBAAgB,CAAC;QAC9C,CAAC,oBAAoB,EAAE,YAAY,CAAC;QACpC,CAAC,+BAA+B,EAAE,YAAY,CAAC;QAC/C,CAAC,aAAa,EAAE,QAAQ,CAAC;QACzB,CAAC,uBAAuB,EAAE,eAAe,CAAC;QAC1C,CAAC,mBAAmB,EAAE,eAAe,CAAC;KAEzC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACvB,IAAI;QACJ,MAAM,CAAC,MAAM,CAAC;YACZ,KAAK;YACL,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;SACjF,CAAC;KACH,CAAC,CACH;CACF,CAAC,CAAC;AAGL,SAAgB,2BAA2B,CACzC,OAAe;IAEf,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,6BAAqB,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CACrD,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"platform-authorization-modules.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/platform-authorization-modules.ts"],"names":[],"mappings":";;;AAmSA,kEAUC;AA7SD,6BAAwB;AAExB,2CAKuB;AAEvB,iGAGgD;AAuBhD,IAAY,2BAIX;AAJD,WAAY,2BAA2B;IACrC,iDAAkB,CAAA;IAClB,6DAA8B,CAAA;IAC9B,uDAAwB,CAAA;AAC1B,CAAC,EAJW,2BAA2B,2CAA3B,2BAA2B,QAItC;AAEY,QAAA,iCAAiC,GAAG,OAAC,CAAC,UAAU,CAC3D,2BAA2B,CAC5B,CAAC;AAQW,QAAA,sBAAsB,GAAG,sBAAsB,CAAC;AAShD,QAAA,kBAAkB,GAAG,WAAW,CAAC;AAGjC,QAAA,yBAAyB,GACpC,MAAM,CAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;AAG1C,QAAA,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1D,SAAS;IACT,eAAe;IACf,cAAc;CACN,CAAC,CAAC;AAQC,QAAA,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAU,CAAC,CAAC;AAGxE,QAAA,oBAAoB,GAAG,QAAQ,CAAC;AAmB7C,IAAY,0BAGX;AAHD,WAAY,0BAA0B;IACpC,oDAAsB,CAAA;IACtB,yEAA2C,CAAA;AAC7C,CAAC,EAHW,0BAA0B,0CAA1B,0BAA0B,QAGrC;AAEY,QAAA,gCAAgC,GAAG,OAAC,CAAC,UAAU,CAC1D,0BAA0B,CAC3B,CAAC;AAEW,QAAA,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,WAAW;IACX,YAAY;IACZ,YAAY;CACJ,CAAC,CAAC;AAGC,QAAA,kCAAkC,GAC7C,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,WAAW,CAChB,uCAA+B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChD,QAAQ;IACR,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gEAAyB,CAAC,OAAO,EAAE,CAAC;CAC3D,CAAC,CACH,CACF,CAAC;AAUS,QAAA,6CAA6C,GACxD,MAAM,CAAC,MAAM,CAAC;IACZ,CAAC,sCAA4B,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACnD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,8BAAoB,CAAC,CAAC;KAChD,CAAC;IACF,CAAC,sCAA4B,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACnD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,8BAAoB,CAAC,CAAC;KAChD,CAAC;IACF,CAAC,sCAA4B,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACnD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;KACrC,CAAC;IACF,CAAC,sCAA4B,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACvD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gCAAsB,CAAC,CAAC;KAClD,CAAC;IACF,CAAC,sCAA4B,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACvD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;KACjD,CAAC;IACF,CAAC,sCAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACtD,IAAI,EAAE,gEAAyB,CAAC,QAAQ;QACxC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,sCAA4B,CAAC,UAAU,EAAE,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,iCAAuB,EAAE,IAAI,EAAE,sCAA4B,CAAC,MAAM,EAAE,CAAC;SAChG,CAAC;KACH,CAAC;IACF,CAAC,sCAA4B,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QAClD,IAAI,EAAE,gEAAyB,CAAC,UAAU;QAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,8BAAoB,EAAE,MAAM,CAAC,CAAC;KACxD,CAAC;IACF,CAAC,sCAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QACtD,IAAI,EAAE,gEAAyB,CAAC,SAAS;QACzC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;KAClC,CAAC;CACqD,CAAC,CAAC;AAGhD,QAAA,sCAAsC,GAE/C,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,0CAAkC;IACvE,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,EAC3C,qDAA6C;CAChD,CAAC,CAAC;AAeU,QAAA,8BAA8B,GAEvC,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QAChD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAGjC,CAAC,gCAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAG3C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;KACtC,CAAC;IACF,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3D,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;CACzD,CAAC,CAAC;AA4BU,QAAA,qBAAqB,GAChC,MAAM,CAAC,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,kBAAkB;QACzB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;KAC3E,CAAC;IACF,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1B,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;KAC9F,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;KAC9C,CAAC;IAGF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;QACzB,KAAK,EAAE,cAAc;QACrB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;KAC3F,CAAC;IACF,GAAG,MAAM,CAAC,WAAW,CAEjB;QACE,CAAC,eAAe,EAAE,gBAAgB,CAAC;QACnC,CAAC,cAAc,EAAE,SAAS,CAAC;QAG3B,CAAC,0BAA0B,EAAE,gBAAgB,CAAC;QAC9C,CAAC,oBAAoB,EAAE,YAAY,CAAC;QACpC,CAAC,+BAA+B,EAAE,YAAY,CAAC;QAC/C,CAAC,aAAa,EAAE,QAAQ,CAAC;QACzB,CAAC,uBAAuB,EAAE,eAAe,CAAC;QAC1C,CAAC,mBAAmB,EAAE,eAAe,CAAC;KAEzC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACvB,IAAI;QACJ,MAAM,CAAC,MAAM,CAAC;YACZ,KAAK;YACL,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;SACjF,CAAC;KACH,CAAC,CACH;CACF,CAAC,CAAC;AAGL,SAAgB,2BAA2B,CACzC,OAAe;IAEf,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,6BAAqB,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CACrD,CACF,CAAC;AACJ,CAAC"}