@xemahq/contracts 0.79.0 → 0.81.0

package/dist/distribution/lib/resolve-unsplit-deployment.js

@@ -7,6 +7,9 @@ const process_topology_1 = require("../../process-topology");
 const authorization_lock_1 = require("./authorization-lock");
 const distribution_lock_1 = require("./distribution-lock");
 const image_lock_1 = require("./image-lock");
+const capability_domain_owner_duplicates_1 = require("./capability-domain-owner-duplicates");
+const operation_grant_admission_1 = require("./operation-grant-admission");
+const organization_sweep_admission_1 = require("./organization-sweep-admission");
 async function resolveUnsplitDeployment(input) {
     const lock = (0, distribution_lock_1.parseDistributionLockForReading)(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(input.lockBytes)));
     const imageLock = (0, image_lock_1.parseImageLock)(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(input.imagesLockBytes)));
@@ -19,6 +22,21 @@ async function resolveUnsplitDeployment(input) {
             throw new Error(`resolveUnsplitDeployment: the ${name} is for distribution "${distributionId}", but the lock is for "${lock.distributionId}".`);
         }
     }
+    const duplicateOwners = (0, capability_domain_owner_duplicates_1.duplicateCapabilityDomainOwners)(lock);
+    if (duplicateOwners.length > 0) {
+        throw new Error(`resolveUnsplitDeployment: the lock names more than one owner for a capability domain:\n` +
+            duplicateOwners.map((duplicate) => `  - [duplicate-capability-domain-owner] ${duplicate.message}`).join('\n'));
+    }
+    const admission = (0, operation_grant_admission_1.admitOperationGrants)(lock);
+    if (admission.refusals.length > 0) {
+        throw new Error(`resolveUnsplitDeployment: the lock declares operations that cannot be admitted:\n` +
+            admission.refusals.map((refusal) => `  - [${refusal.code}] ${refusal.message}`).join('\n'));
+    }
+    const sweepAdmission = (0, organization_sweep_admission_1.admitOrganizationSweeps)(lock);
+    if (sweepAdmission.refusals.length > 0) {
+        throw new Error(`resolveUnsplitDeployment: the lock declares organization sweeps that cannot be admitted:\n` +
+            sweepAdmission.refusals.map((refusal) => `  - [${refusal.code}] ${refusal.message}`).join('\n'));
+    }
     return deployment_1.ResolvedDeploymentSchema.parse({
         schemaVersion: deployment_1.RESOLVED_DEPLOYMENT_SCHEMA_VERSION,
         deployment: input.deployment,
@@ -39,6 +57,8 @@ async function resolveUnsplitDeployment(input) {
             return { id: biome.id, trustCeiling: ceiling, trustDomain: ceiling };
         }),
         serviceAccounts: [],
+        operationGrants: admission.grants,
+        organizationSweeps: sweepAdmission.grants,
         provenance: {
             kind: deployment_1.ResolvedDeploymentProvenanceKind.Unsplit,
             resolver: { package: deployment_1.RESOLVER_PACKAGE, version: input.resolverVersion },

package/dist/distribution/lib/resolve-unsplit-deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-unsplit-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/resolve-unsplit-deployment.ts"],"names":[],"mappings":";;AAyEA,4DAgDC;AAzHD,2DAAkD;AAClD,iDAM0B;AAC1B,6DAA4D;AAC5D,6DAAsE;AACtE,2DAAsE;AACtE,6CAA8C;AA8DvC,KAAK,UAAU,wBAAwB,CAC5C,KAA6B;IAE7B,MAAM,IAAI,GAAG,IAAA,mDAA+B,EAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAC9E,CAAC;IACF,MAAM,SAAS,GAAG,IAAA,2BAAc,EAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CACpF,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAA,mDAA8B,EACtD,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAC3F,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI;QACnC,CAAC,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC;QACzC,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,cAAc,CAAC;KAChD,EAAE,CAAC;QACX,IAAI,cAAc,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,yBAAyB,cAAc,2BAA2B,IAAI,CAAC,cAAc,IAAI,CAC/H,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,qCAAwB,CAAC,KAAK,CAAC;QACpC,aAAa,EAAE,+CAAkC;QACjD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,OAAO,EAAE;YACP,EAAE,EAAE,IAAI,CAAC,cAAc;YACvB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;YAC9B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;YAChC,UAAU,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,SAAS,CAAC;YAC5C,gBAAgB,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,eAAe,CAAC;YACxD,uBAAuB,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,sBAAsB,CAAC;YACtE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;SACvB;QACD,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;aACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAEb,MAAM,OAAO,GAAG,IAAA,qCAAkB,EAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QACvE,CAAC,CAAC;QACJ,eAAe,EAAE,EAAE;QACnB,UAAU,EAAE;YACV,IAAI,EAAE,6CAAgC,CAAC,OAAO;YAC9C,QAAQ,EAAE,EAAE,OAAO,EAAE,6BAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,eAAe,EAAE;SACxE;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"resolve-unsplit-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/resolve-unsplit-deployment.ts"],"names":[],"mappings":";;AA4EA,4DAuEC;AAnJD,2DAAkD;AAClD,iDAM0B;AAC1B,6DAA4D;AAC5D,6DAAsE;AACtE,2DAAsE;AACtE,6CAA8C;AAC9C,6FAAuF;AACvF,2EAAmE;AACnE,iFAAyE;AA8DlE,KAAK,UAAU,wBAAwB,CAC5C,KAA6B;IAE7B,MAAM,IAAI,GAAG,IAAA,mDAA+B,EAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAC9E,CAAC;IACF,MAAM,SAAS,GAAG,IAAA,2BAAc,EAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CACpF,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAA,mDAA8B,EACtD,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAC3F,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI;QACnC,CAAC,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC;QACzC,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,cAAc,CAAC;KAChD,EAAE,CAAC;QACX,IAAI,cAAc,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,yBAAyB,cAAc,2BAA2B,IAAI,CAAC,cAAc,IAAI,CAC/H,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,IAAA,oEAA+B,EAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,yFAAyF;YACvF,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,2CAA2C,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAChH,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAA,gDAAoB,EAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,mFAAmF;YACjF,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,IAAA,sDAAuB,EAAC,IAAI,CAAC,CAAC;IACrD,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,4FAA4F;YAC1F,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,qCAAwB,CAAC,KAAK,CAAC;QACpC,aAAa,EAAE,+CAAkC;QACjD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,OAAO,EAAE;YACP,EAAE,EAAE,IAAI,CAAC,cAAc;YACvB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;YAC9B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;YAChC,UAAU,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,SAAS,CAAC;YAC5C,gBAAgB,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,eAAe,CAAC;YACxD,uBAAuB,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,sBAAsB,CAAC;YACtE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;SACvB;QACD,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;aACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAEb,MAAM,OAAO,GAAG,IAAA,qCAAkB,EAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QACvE,CAAC,CAAC;QACJ,eAAe,EAAE,EAAE;QACnB,eAAe,EAAE,SAAS,CAAC,MAAM;QACjC,kBAAkB,EAAE,cAAc,CAAC,MAAM;QACzC,UAAU,EAAE;YACV,IAAI,EAAE,6CAAgC,CAAC,OAAO;YAC9C,QAAQ,EAAE,EAAE,OAAO,EAAE,6BAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,eAAe,EAAE;SACxE;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/distribution/lib/sorted-unique-non-empty.d.ts

@@ -0,0 +1,3 @@
+import { z } from 'zod';
+export declare function sortedUniqueNonEmpty<T extends string>(schema: z.ZodType<T>, what: string): z.ZodReadonly<z.ZodArray<z.ZodType<T, unknown, z.core.$ZodTypeInternals<T, unknown>>>>;
+//# sourceMappingURL=sorted-unique-non-empty.d.ts.map

package/dist/distribution/lib/sorted-unique-non-empty.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sorted-unique-non-empty.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/sorted-unique-non-empty.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,MAAM,EACnD,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,EAAE,MAAM,0FAuBb"}

package/dist/distribution/lib/sorted-unique-non-empty.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sortedUniqueNonEmpty = sortedUniqueNonEmpty;
+const zod_1 = require("zod");
+const code_unit_order_1 = require("./code-unit-order");
+function sortedUniqueNonEmpty(schema, what) {
+    return zod_1.z
+        .array(schema)
+        .superRefine((list, context) => {
+        if (list.length === 0) {
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                message: `${what} lists nothing — omit it`,
+            });
+        }
+        list.forEach((entry, index) => {
+            const previous = list[index - 1];
+            if (previous !== undefined && (0, code_unit_order_1.compareCodeUnits)(previous, entry) >= 0) {
+                context.addIssue({
+                    code: zod_1.z.ZodIssueCode.custom,
+                    path: [index],
+                    message: `${what} must be sorted and unique ("${entry}" follows "${previous}")`,
+                });
+            }
+        });
+    })
+        .readonly();
+}
+//# sourceMappingURL=sorted-unique-non-empty.js.map

package/dist/distribution/lib/sorted-unique-non-empty.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sorted-unique-non-empty.js","sourceRoot":"","sources":["../../../src/distribution/lib/sorted-unique-non-empty.ts"],"names":[],"mappings":";;AAIA,oDAyBC;AA7BD,6BAAwB;AACxB,uDAAqD;AAGrD,SAAgB,oBAAoB,CAClC,MAAoB,EACpB,IAAY;IAEZ,OAAO,OAAC;SACL,KAAK,CAAC,MAAM,CAAC;SACb,WAAW,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,GAAG,IAAI,0BAA0B;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAA,kCAAgB,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,OAAO,EAAE,GAAG,IAAI,gCAAgC,KAAK,cAAc,QAAQ,IAAI;iBAChF,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,QAAQ,EAAE,CAAC;AAChB,CAAC"}

package/dist/distribution/lib/verify-resolved-deployment.d.ts

@@ -16,7 +16,12 @@ export declare enum ResolvedDeploymentRefusalCode {
     BiomeMissing = "biome-missing",
     BiomeNotInLock = "biome-not-in-lock",
     TrustCeilingMismatch = "trust-ceiling-mismatch",
-    UnknownComponent = "unknown-component"
+    UnknownComponent = "unknown-component",
+    OperationGrantRefused = "operation-grant-refused",
+    OperationGrantsMismatch = "operation-grants-mismatch",
+    OrganizationSweepRefused = "organization-sweep-refused",
+    OrganizationSweepsMismatch = "organization-sweeps-mismatch",
+    DuplicateCapabilityDomainOwner = "duplicate-capability-domain-owner"
 }
 export interface ResolvedDeploymentRefusal {
     readonly code: ResolvedDeploymentRefusalCode;

package/dist/distribution/lib/verify-resolved-deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,yBAAyB,EAEzB,gCAAgC,EAEjC,MAAM,gCAAgC,CAAC;AAsCxC,oBAAY,4BAA4B;IAEtC,MAAM,WAAW;IAEjB,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,+BAA+B,CAC9C,CAAC,SAAS,4BAA4B,GAAG,4BAA4B;IAGrE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACrB;AAGD,oBAAY,6BAA6B;IAEvC,iBAAiB,uBAAuB;IAExC,kBAAkB,yBAAyB;IAE3C,iBAAiB,wBAAwB;IAEzC,kBAAkB,yBAAyB;IAE3C,aAAa,mBAAmB;IAKhC,iBAAiB,wBAAwB;IAEzC,YAAY,kBAAkB;IAE9B,cAAc,sBAAsB;IAEpC,oBAAoB,2BAA2B;IAE/C,gBAAgB,sBAAsB;CACvC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAE7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACzD;AAED,MAAM,MAAM,8BAA8B,GACtC,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,yBAAyB,CAAC,GACnD,yBAAyB,CAAC;AAE9B,MAAM,MAAM,qCAAqC,GAC7C,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,gCAAgC,CAAC,GAC1D,yBAAyB,CAAC;AA6C9B,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAC7E,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC3C,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;IACP,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;CACvD,GACA,OAAO,CAAC,qCAAqC,CAAC,CAAC;AA2IlD,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAC7E,OAAO,CAAC,yBAAyB,CAAC,CAAC;AACtC,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;IACP,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;CACvD,GACA,OAAO,CAAC,gCAAgC,CAAC,CAAC"}
+{"version":3,"file":"verify-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,yBAAyB,EAEzB,gCAAgC,EAEjC,MAAM,gCAAgC,CAAC;AAsCxC,oBAAY,4BAA4B;IAEtC,MAAM,WAAW;IAEjB,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,+BAA+B,CAC9C,CAAC,SAAS,4BAA4B,GAAG,4BAA4B;IAGrE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACrB;AAGD,oBAAY,6BAA6B;IAEvC,iBAAiB,uBAAuB;IAExC,kBAAkB,yBAAyB;IAE3C,iBAAiB,wBAAwB;IAEzC,kBAAkB,yBAAyB;IAE3C,aAAa,mBAAmB;IAKhC,iBAAiB,wBAAwB;IAEzC,YAAY,kBAAkB;IAE9B,cAAc,sBAAsB;IAEpC,oBAAoB,2BAA2B;IAE/C,gBAAgB,sBAAsB;IAEtC,qBAAqB,4BAA4B;IAEjD,uBAAuB,8BAA8B;IAErD,wBAAwB,+BAA+B;IAEvD,0BAA0B,iCAAiC;IAE3D,8BAA8B,sCAAsC;CACrE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAE7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACzD;AAED,MAAM,MAAM,8BAA8B,GACtC,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,yBAAyB,CAAC,GACnD,yBAAyB,CAAC;AAE9B,MAAM,MAAM,qCAAqC,GAC7C,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,gCAAgC,CAAC,GAC1D,yBAAyB,CAAC;AA6C9B,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAC7E,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC3C,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;IACP,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;CACvD,GACA,OAAO,CAAC,qCAAqC,CAAC,CAAC;AAkLlD,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAC7E,OAAO,CAAC,yBAAyB,CAAC,CAAC;AACtC,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;IACP,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;CACvD,GACA,OAAO,CAAC,gCAAgC,CAAC,CAAC"}

package/dist/distribution/lib/verify-resolved-deployment.js

@@ -4,6 +4,10 @@ exports.ResolvedDeploymentRefusalCode = exports.ResolvedDeploymentAcceptance = v
 exports.verifyResolvedDeployment = verifyResolvedDeployment;
 exports.assertResolvedDeployment = assertResolvedDeployment;
 const content_address_1 = require("../../content-address");
+const code_unit_order_1 = require("./code-unit-order");
+const capability_domain_owner_duplicates_1 = require("./capability-domain-owner-duplicates");
+const operation_grant_admission_1 = require("./operation-grant-admission");
+const organization_sweep_admission_1 = require("./organization-sweep-admission");
 const deployment_1 = require("../../deployment");
 const process_topology_1 = require("../../process-topology");
 const distribution_lock_1 = require("./distribution-lock");
@@ -24,6 +28,11 @@ var ResolvedDeploymentRefusalCode;
     ResolvedDeploymentRefusalCode["BiomeNotInLock"] = "biome-not-in-lock";
     ResolvedDeploymentRefusalCode["TrustCeilingMismatch"] = "trust-ceiling-mismatch";
     ResolvedDeploymentRefusalCode["UnknownComponent"] = "unknown-component";
+    ResolvedDeploymentRefusalCode["OperationGrantRefused"] = "operation-grant-refused";
+    ResolvedDeploymentRefusalCode["OperationGrantsMismatch"] = "operation-grants-mismatch";
+    ResolvedDeploymentRefusalCode["OrganizationSweepRefused"] = "organization-sweep-refused";
+    ResolvedDeploymentRefusalCode["OrganizationSweepsMismatch"] = "organization-sweeps-mismatch";
+    ResolvedDeploymentRefusalCode["DuplicateCapabilityDomainOwner"] = "duplicate-capability-domain-owner";
 })(ResolvedDeploymentRefusalCode || (exports.ResolvedDeploymentRefusalCode = ResolvedDeploymentRefusalCode = {}));
 function acceptanceOf(options) {
     if (options === undefined)
@@ -100,7 +109,7 @@ async function verifyResolvedDeployment(resolved, lockBytes, options) {
     const refusals = [];
     const lockBiomes = new Map(lock.biomes.map((biome) => [biome.id, biome]));
     const placed = new Set(artifact.biomes.map((biome) => biome.id));
-    for (const id of [...lockBiomes.keys()].sort(codeUnit)) {
+    for (const id of [...lockBiomes.keys()].sort(code_unit_order_1.compareCodeUnits)) {
         if (!placed.has(id)) {
             refusals.push({
                 code: ResolvedDeploymentRefusalCode.BiomeMissing,
@@ -144,6 +153,43 @@ async function verifyResolvedDeployment(resolved, lockBytes, options) {
             });
         }
     }
+    const duplicateOwners = (0, capability_domain_owner_duplicates_1.duplicateCapabilityDomainOwners)(lock);
+    for (const duplicate of duplicateOwners) {
+        refusals.push({
+            code: ResolvedDeploymentRefusalCode.DuplicateCapabilityDomainOwner,
+            message: duplicate.message,
+        });
+    }
+    if (duplicateOwners.length === 0) {
+        const admission = (0, operation_grant_admission_1.admitOperationGrants)(lock);
+        for (const refusal of admission.refusals) {
+            refusals.push({
+                code: ResolvedDeploymentRefusalCode.OperationGrantRefused,
+                biome: refusal.biome,
+                message: `[${refusal.code}] ${refusal.message}`,
+            });
+        }
+        if (admission.refusals.length === 0) {
+            const mismatch = describeGrantMismatch(artifact.operationGrants, admission.grants);
+            if (mismatch !== undefined) {
+                refusals.push({ code: ResolvedDeploymentRefusalCode.OperationGrantsMismatch, message: mismatch });
+            }
+        }
+        const sweepAdmission = (0, organization_sweep_admission_1.admitOrganizationSweeps)(lock);
+        for (const refusal of sweepAdmission.refusals) {
+            refusals.push({
+                code: ResolvedDeploymentRefusalCode.OrganizationSweepRefused,
+                biome: refusal.biome,
+                message: `[${refusal.code}] ${refusal.message}`,
+            });
+        }
+        if (sweepAdmission.refusals.length === 0) {
+            const mismatch = describeSweepMismatch(artifact.organizationSweeps, sweepAdmission.grants);
+            if (mismatch !== undefined) {
+                refusals.push({ code: ResolvedDeploymentRefusalCode.OrganizationSweepsMismatch, message: mismatch });
+            }
+        }
+    }
     if (refusals.length > 0)
         return { ok: false, refusals };
     if (unsplit) {
@@ -172,7 +218,45 @@ async function assertResolvedDeployment(resolved, lockBytes, options) {
 function refuse(refusal) {
     return { ok: false, refusals: [refusal] };
 }
-function codeUnit(a, b) {
-    return a < b ? -1 : a > b ? 1 : 0;
+function grantText(grant) {
+    const receiver = grant.receiver.kind === deployment_1.OperationGrantReceiverKind.Biome ? `biome "${grant.receiver.biome}"` : `platform service "${grant.receiver.service}"`;
+    return `${grant.caller.biome}/${grant.caller.component} -> ${grant.operation} on ${receiver}`;
+}
+function describeGrantMismatch(stated, admitted) {
+    const shared = Math.min(stated.length, admitted.length);
+    for (let index = 0; index < shared; index++) {
+        const have = stated[index];
+        const want = admitted[index];
+        if (have === undefined || want === undefined)
+            continue;
+        if ((0, deployment_1.compareOperationGrants)(have, want) !== 0 || grantText(have) !== grantText(want)) {
+            return (`the resolved deployment's operationGrants differ from the lock's admitted grants at row ${index}: ` +
+                `it states "${grantText(have)}", but the lock admits "${grantText(want)}".`);
+        }
+    }
+    if (stated.length !== admitted.length) {
+        return (`the resolved deployment states ${stated.length} operationGrants, but the lock admits ${admitted.length}.`);
+    }
+    return undefined;
+}
+function sweepText(row) {
+    return `${row.caller.biome}/${row.caller.component} -> sweep ${row.sweep}`;
+}
+function describeSweepMismatch(stated, admitted) {
+    const shared = Math.min(stated.length, admitted.length);
+    for (let index = 0; index < shared; index++) {
+        const have = stated[index];
+        const want = admitted[index];
+        if (have === undefined || want === undefined)
+            continue;
+        if ((0, deployment_1.compareOrganizationSweepGrants)(have, want) !== 0) {
+            return (`the resolved deployment's organizationSweeps differ from the lock's admitted sweeps at row ${index}: ` +
+                `it states "${sweepText(have)}", but the lock admits "${sweepText(want)}".`);
+        }
+    }
+    if (stated.length !== admitted.length) {
+        return `the resolved deployment states ${stated.length} organizationSweeps, but the lock admits ${admitted.length}.`;
+    }
+    return undefined;
 }
 //# sourceMappingURL=verify-resolved-deployment.js.map

package/dist/distribution/lib/verify-resolved-deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-resolved-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":";;;AA4KA,4DAuIC;AAeD,4DAwBC;AA1VD,2DAAkD;AAClD,iDAG0B;AAC1B,6DAA4D;AAC5D,2DAG6B;AA4C7B,IAAY,4BAKX;AALD,WAAY,4BAA4B;IAEtC,iDAAiB,CAAA;IAEjB,mDAAmB,CAAA;AACrB,CAAC,EALW,4BAA4B,4CAA5B,4BAA4B,QAKvC;AAUD,IAAY,6BAwBX;AAxBD,WAAY,6BAA6B;IAEvC,yEAAwC,CAAA;IAExC,4EAA2C,CAAA;IAE3C,0EAAyC,CAAA;IAEzC,4EAA2C,CAAA;IAE3C,iEAAgC,CAAA;IAKhC,0EAAyC,CAAA;IAEzC,+DAA8B,CAAA;IAE9B,qEAAoC,CAAA;IAEpC,gFAA+C,CAAA;IAE/C,uEAAsC,CAAA;AACxC,CAAC,EAxBW,6BAA6B,6CAA7B,6BAA6B,QAwBxC;AA+BD,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACtE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CACjB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;IAC3E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,+CAA+C,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAC/H,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAI,OAAyC,CAAC,MAAM,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACrE,IACE,MAAM,KAAK,4BAA4B,CAAC,MAAM;QAC9C,MAAM,KAAK,4BAA4B,CAAC,OAAO,EAC/C,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,6CAA6C,4BAA4B,CAAC,MAAM,OAAO;YACrF,IAAI,4BAA4B,CAAC,OAAO,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAwBM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB,EACrB,OAAyC;IAEzC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,qCAAwB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C;gBAC1C,MAAM,CAAC,KAAK,CAAC,MAAM;qBAChB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CACnE;qBACA,IAAI,CAAC,IAAI,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAA,wCAA2B,EAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO,IAAI,MAAM,KAAK,4BAA4B,CAAC,OAAO,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,2FAA2F;gBAC3F,oDAAoD;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,4BAA4B,CAAC,MAAM,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,oGAAoG;SACvG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAS,EAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,0BAA0B,MAAM,kDAAkD;gBAClF,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,qCAAqC;SACtE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,mDAA+B,EACpC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,aAAa;YACjD,OAAO,EAAE,wDAAyD,KAAe,CAAC,OAAO,EAAE;SAC5F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB;gBACjF,sBAAsB,IAAI,CAAC,cAAc,kDAAkD;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,YAAY;gBAChD,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,2BAA2B,EAAE,mDAAmD;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,cAAc;gBAClD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EAAE,yCAAyC,KAAK,CAAC,EAAE,mCAAmC;aAC9F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,IAAA,qCAAkB,EAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,oBAAoB;gBACxD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EACL,yCAAyC,KAAK,CAAC,EAAE,uBAAuB;oBACxE,IAAI,KAAK,CAAC,YAAY,yBAAyB,OAAO,IAAI;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC/C,KAAK,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,gBAAgB;gBACpD,KAAK;gBACL,cAAc,EAAE,OAAO,CAAC,IAAI;gBAC5B,OAAO,EACL,mBAAmB,OAAO,CAAC,IAAI,cAAc,KAAK,IAAI,SAAS,mBAAmB;oBAClF,UAAU,KAAK,yBAAyB,SAAS,IAAI;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAKxD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,QAA6C;YACvD,IAAI;SACuD,CAAC;IAChE,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,QAAsC;QAChD,IAAI;KACgD,CAAC;AACzD,CAAC;AAeM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB,EACrB,OAAyC;IAGzC,MAAM,YAAY,GAAG,MACnB,wBAOD,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,mCAAmC;YACjC,YAAY,CAAC,QAAQ;iBAClB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;iBAC5D,IAAI,CAAC,IAAI,CAAC,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CACb,OAAkC;IAElC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"verify-resolved-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":";;;AA+LA,4DA8KC;AAeD,4DAwBC;AApZD,2DAAkD;AAClD,uDAAqD;AACrD,6FAAuF;AACvF,2EAAmE;AACnE,iFAAyE;AACzE,iDAQ0B;AAC1B,6DAA4D;AAC5D,2DAG6B;AA4C7B,IAAY,4BAKX;AALD,WAAY,4BAA4B;IAEtC,iDAAiB,CAAA;IAEjB,mDAAmB,CAAA;AACrB,CAAC,EALW,4BAA4B,4CAA5B,4BAA4B,QAKvC;AAUD,IAAY,6BAkCX;AAlCD,WAAY,6BAA6B;IAEvC,yEAAwC,CAAA;IAExC,4EAA2C,CAAA;IAE3C,0EAAyC,CAAA;IAEzC,4EAA2C,CAAA;IAE3C,iEAAgC,CAAA;IAKhC,0EAAyC,CAAA;IAEzC,+DAA8B,CAAA;IAE9B,qEAAoC,CAAA;IAEpC,gFAA+C,CAAA;IAE/C,uEAAsC,CAAA;IAEtC,kFAAiD,CAAA;IAEjD,sFAAqD,CAAA;IAErD,wFAAuD,CAAA;IAEvD,4FAA2D,CAAA;IAE3D,qGAAoE,CAAA;AACtE,CAAC,EAlCW,6BAA6B,6CAA7B,6BAA6B,QAkCxC;AA+BD,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACtE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CACjB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;IAC3E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,+CAA+C,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAC/H,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAI,OAAyC,CAAC,MAAM,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACrE,IACE,MAAM,KAAK,4BAA4B,CAAC,MAAM;QAC9C,MAAM,KAAK,4BAA4B,CAAC,OAAO,EAC/C,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,6CAA6C,4BAA4B,CAAC,MAAM,OAAO;YACrF,IAAI,4BAA4B,CAAC,OAAO,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAwBM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB,EACrB,OAAyC;IAEzC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,qCAAwB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C;gBAC1C,MAAM,CAAC,KAAK,CAAC,MAAM;qBAChB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CACnE;qBACA,IAAI,CAAC,IAAI,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAA,wCAA2B,EAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO,IAAI,MAAM,KAAK,4BAA4B,CAAC,OAAO,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,2FAA2F;gBAC3F,oDAAoD;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,4BAA4B,CAAC,MAAM,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,oGAAoG;SACvG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAS,EAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,0BAA0B,MAAM,kDAAkD;gBAClF,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,qCAAqC;SACtE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,mDAA+B,EACpC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,aAAa;YACjD,OAAO,EAAE,wDAAyD,KAAe,CAAC,OAAO,EAAE;SAC5F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB;gBACjF,sBAAsB,IAAI,CAAC,cAAc,kDAAkD;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,kCAAgB,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,YAAY;gBAChD,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,2BAA2B,EAAE,mDAAmD;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,cAAc;gBAClD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EAAE,yCAAyC,KAAK,CAAC,EAAE,mCAAmC;aAC9F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,IAAA,qCAAkB,EAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,oBAAoB;gBACxD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EACL,yCAAyC,KAAK,CAAC,EAAE,uBAAuB;oBACxE,IAAI,KAAK,CAAC,YAAY,yBAAyB,OAAO,IAAI;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC/C,KAAK,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,gBAAgB;gBACpD,KAAK;gBACL,cAAc,EAAE,OAAO,CAAC,IAAI;gBAC5B,OAAO,EACL,mBAAmB,OAAO,CAAC,IAAI,cAAc,KAAK,IAAI,SAAS,mBAAmB;oBAClF,UAAU,KAAK,yBAAyB,SAAS,IAAI;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,IAAA,oEAA+B,EAAC,IAAI,CAAC,CAAC;IAC9D,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,8BAA8B;YAClE,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CAAC;IACL,CAAC;IAGD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,IAAA,gDAAoB,EAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,qBAAqB;gBACzD,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YACnF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,CAAC,uBAAuB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,sDAAuB,EAAC,IAAI,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,wBAAwB;gBAC5D,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAC3F,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,CAAC,0BAA0B,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAKxD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,QAA6C;YACvD,IAAI;SACuD,CAAC;IAChE,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,QAAsC;QAChD,IAAI;KACgD,CAAC;AACzD,CAAC;AAeM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB,EACrB,OAAyC;IAGzC,MAAM,YAAY,GAAG,MACnB,wBAOD,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,mCAAmC;YACjC,YAAY,CAAC,QAAQ;iBAClB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;iBAC5D,IAAI,CAAC,IAAI,CAAC,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CACb,OAAkC;IAElC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5C,CAAC;AAID,SAAS,SAAS,CAAC,KAAe;IAChC,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,uCAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,qBAAqB,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC;IAChJ,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,OAAO,KAAK,CAAC,SAAS,OAAO,QAAQ,EAAE,CAAC;AAChG,CAAC;AAOD,SAAS,qBAAqB,CAC5B,MAA2B,EAC3B,QAA6B;IAE7B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACvD,IAAI,IAAA,mCAAsB,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACpF,OAAO,CACL,2FAA2F,KAAK,IAAI;gBACpG,cAAc,SAAS,CAAC,IAAI,CAAC,2BAA2B,SAAS,CAAC,IAAI,CAAC,IAAI,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,CACL,kCAAkC,MAAM,CAAC,MAAM,yCAAyC,QAAQ,CAAC,MAAM,GAAG,CAC3G,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,GAA2B;IAC5C,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,aAAa,GAAG,CAAC,KAAK,EAAE,CAAC;AAC7E,CAAC;AAMD,SAAS,qBAAqB,CAC5B,MAAyC,EACzC,QAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACvD,IAAI,IAAA,2CAA8B,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,CACL,8FAA8F,KAAK,IAAI;gBACvG,cAAc,SAAS,CAAC,IAAI,CAAC,2BAA2B,SAAS,CAAC,IAAI,CAAC,IAAI,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,kCAAkC,MAAM,CAAC,MAAM,4CAA4C,QAAQ,CAAC,MAAM,GAAG,CAAC;IACvH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/edition-protocol/edition-contract.schema.json

@@ -1 +1 @@
-{"contentDigest":"2c4bcce2be8638c87d5ace750fef112b3d6e212bab13335037def41695f1f3bc","contentHashAlgorithm":"xema-kernel-contract-authority-length-framed-git-path-mode-blob-sha256-v1","digestDomain":"xema.kernel-contract-authority.digest","digestVersion":1,"entryModules":["authorization-module","authorization-module/server","biome","distribution","distribution/server","platform-generation","process-topology","resource-requirement"],"provisional":false,"sourceMode":"100644","sourcePaths":["packages/kernel/kernel-contracts/src/address/index.ts","packages/kernel/kernel-contracts/src/address/lib/resource-instance-address.ts","packages/kernel/kernel-contracts/src/address/lib/xema-address.ts","packages/kernel/kernel-contracts/src/agent-composition/index.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/agent-limits-schema.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/agent-ref-resolution.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/agent-workspace-config.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/agent.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/capability-layer.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/delegate-aperture.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/intrinsic-floor.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/launch-definition.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/model-resolution-matrix.ts","packages/kernel/kernel-contracts/src/agent-execution-mode/index.ts","packages/kernel/kernel-contracts/src/agent-execution-mode/lib/agent-execution-mode.ts","packages/kernel/kernel-contracts/src/agent-permission/index.ts","packages/kernel/kernel-contracts/src/agent-permission/lib/output-surface-tool-id.ts","packages/kernel/kernel-contracts/src/agent-permission/lib/permission-map.ts","packages/kernel/kernel-contracts/src/agent-session/index.ts","packages/kernel/kernel-contracts/src/agent-session/lib/lifecycle.ts","packages/kernel/kernel-contracts/src/agent-session/lib/participant.ts","packages/kernel/kernel-contracts/src/agent-session/lib/resolved-session-composition.ts","packages/kernel/kernel-contracts/src/agent-session/lib/sealed-delegate-aperture.ts","packages/kernel/kernel-contracts/src/agent-session/lib/workspace.ts","packages/kernel/kernel-contracts/src/agent-workspace/index.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/agent-run-context.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/agent-tool-defaults.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/awp.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/context-json.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/deliverable-spec-ref.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/endpoint-fetch-spec.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/logical-workspace-slot.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/mount-apply.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/working-file.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/workspace-layout.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/workspace-spec.ts","packages/kernel/kernel-contracts/src/audit/index.ts","packages/kernel/kernel-contracts/src/audit/lib/authority.ts","packages/kernel/kernel-contracts/src/audit/lib/hash-chain.ts","packages/kernel/kernel-contracts/src/authored-resource/index.ts","packages/kernel/kernel-contracts/src/authored-resource/lib/authored-content-kind.ts","packages/kernel/kernel-contracts/src/authored-resource/lib/authored-resource.ts","packages/kernel/kernel-contracts/src/authored-resource/lib/contributed-authored-resource.ts","packages/kernel/kernel-contracts/src/authored-resource/lib/release-intent.ts","packages/kernel/kernel-contracts/src/authorization-facts/index.ts","packages/kernel/kernel-contracts/src/authorization-facts/lib/fact-tuple.ts","packages/kernel/kernel-contracts/src/authorization-facts/lib/facts-apply.ts","packages/kernel/kernel-contracts/src/authorization-facts/lib/facts-snapshot.ts","packages/kernel/kernel-contracts/src/authorization-facts/lib/facts-writer-authority.ts","packages/kernel/kernel-contracts/src/authorization-facts/lib/revoke-intent.ts","packages/kernel/kernel-contracts/src/authorization-module/index.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/authorization-composition-error.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/authorization-interface-requirements.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/authorization-module-contribution.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/authorization-module-envelope.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/authorization-namespace.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/delegation-origination.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/delegation-wildcard-ceiling.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/platform-authorization-modules.ts","packages/kernel/kernel-contracts/src/authorization-module/server/authorization-compatibility.ts","packages/kernel/kernel-contracts/src/authorization-module/server/authorization-interface-conformance.ts","packages/kernel/kernel-contracts/src/authorization-module/server/authorization-model-json.ts","packages/kernel/kernel-contracts/src/authorization-module/server/compose-authorization-base.ts","packages/kernel/kernel-contracts/src/authorization-module/server/delegation-origination-conformance.ts","packages/kernel/kernel-contracts/src/authorization-module/server/index.ts","packages/kernel/kernel-contracts/src/authorization-module/server/platform-module-files.ts","packages/kernel/kernel-contracts/src/authorization-module/server/userset-subject-types.ts","packages/kernel/kernel-contracts/src/authzen/index.ts","packages/kernel/kernel-contracts/src/authzen/lib/authzen-entities.ts","packages/kernel/kernel-contracts/src/authzen/lib/authzen-evaluation.ts","packages/kernel/kernel-contracts/src/authzen/lib/authzen-metadata.ts","packages/kernel/kernel-contracts/src/authzen/lib/authzen-search.ts","packages/kernel/kernel-contracts/src/authzen/lib/authzen-snapshot.ts","packages/kernel/kernel-contracts/src/authzen/lib/durable-delegation-model.ts","packages/kernel/kernel-contracts/src/authzen/lib/org-authority-contextual-tuple.ts","packages/kernel/kernel-contracts/src/authzen/lib/xema-authzen-profile.ts","packages/kernel/kernel-contracts/src/authzen/lib/xema-capability-resource.ts","packages/kernel/kernel-contracts/src/authzen/lib/xema-membership.ts","packages/kernel/kernel-contracts/src/biome-dependency/index.ts","packages/kernel/kernel-contracts/src/biome-dependency/lib/biome-dependency-contract.ts","packages/kernel/kernel-contracts/src/biome-dependency/lib/peer-seam-table.ts","packages/kernel/kernel-contracts/src/biome-dependency/lib/service-peer-contract.ts","packages/kernel/kernel-contracts/src/biome/index.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-audience.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-availability-grant.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-capability-refs.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-category.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-component-process-facts.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-component-requirements.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-component-schema-helpers.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-component-vocabulary.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-component.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-generated-index.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-kind.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-lifecycle.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-manifest.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-origin.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-scope.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-target.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-tier-rank.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-tier.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-trust-tier.ts","packages/kernel/kernel-contracts/src/biome/lib/grown-biome-reach.ts","packages/kernel/kernel-contracts/src/biome/lib/trust-tier-policies.ts","packages/kernel/kernel-contracts/src/biome/lib/web-exposed-module-key.ts","packages/kernel/kernel-contracts/src/canonical-object/index.ts","packages/kernel/kernel-contracts/src/canonical-object/lib/canonical-object-schema-fields.ts","packages/kernel/kernel-contracts/src/canonical-object/lib/canonical-object-type-contribution.ts","packages/kernel/kernel-contracts/src/canonical-object/lib/canonical-object-type-owner.ts","packages/kernel/kernel-contracts/src/canonical-object/lib/canonical-object-type.ts","packages/kernel/kernel-contracts/src/capability-projection/index.ts","packages/kernel/kernel-contracts/src/capability-projection/lib/capability-invocation-binding.ts","packages/kernel/kernel-contracts/src/capability-projection/lib/capability-sync-manifest.ts","packages/kernel/kernel-contracts/src/capability-projection/lib/projected-capability.ts","packages/kernel/kernel-contracts/src/capability/index.ts","packages/kernel/kernel-contracts/src/capability/lib/authority-effect.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-agent-exposure.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-aperture.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-contribution.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-delegable.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-domain.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-effect-class.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-grant.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-human-baseline.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-invocation-descriptor.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-policy.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-reach.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-ref-pattern.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-ref.ts","packages/kernel/kernel-contracts/src/capability/lib/connector-capability-ref.ts","packages/kernel/kernel-contracts/src/capability/lib/effective-capability-set.ts","packages/kernel/kernel-contracts/src/capability/lib/errors.ts","packages/kernel/kernel-contracts/src/capability/lib/long-running-invocation.ts","packages/kernel/kernel-contracts/src/capability/lib/meta-tool.ts","packages/kernel/kernel-contracts/src/capability/lib/permission-profile.ts","packages/kernel/kernel-contracts/src/capability/lib/required-resource-role-binding.ts","packages/kernel/kernel-contracts/src/capability/lib/shell-command-descriptor.ts","packages/kernel/kernel-contracts/src/capability/lib/trusted-context-projection.ts","packages/kernel/kernel-contracts/src/connector/index.ts","packages/kernel/kernel-contracts/src/connector/lib/adapter-kind.ts","packages/kernel/kernel-contracts/src/connector/lib/canonical-operation-binding.ts","packages/kernel/kernel-contracts/src/connector/lib/capability.ts","packages/kernel/kernel-contracts/src/connector/lib/connector-adapter-contribution.ts","packages/kernel/kernel-contracts/src/connector/lib/connector-adapter-kind.ts","packages/kernel/kernel-contracts/src/connector/lib/connector-descriptor.ts","packages/kernel/kernel-contracts/src/connector/lib/connector-http-request.ts","packages/kernel/kernel-contracts/src/connector/lib/connector-operation-exposure.ts","packages/kernel/kernel-contracts/src/connector/lib/credential-auth-type.ts","packages/kernel/kernel-contracts/src/connector/lib/credential-kind-fields.ts","packages/kernel/kernel-contracts/src/connector/lib/credential-kind.ts","packages/kernel/kernel-contracts/src/connector/lib/credential-owner-scope.ts","packages/kernel/kernel-contracts/src/connector/lib/credential-strategy-contribution.ts","packages/kernel/kernel-contracts/src/connector/lib/envelope-schema.ts","packages/kernel/kernel-contracts/src/connector/lib/filter-expr-schema.ts","packages/kernel/kernel-contracts/src/connector/lib/filter-expr-validate.ts","packages/kernel/kernel-contracts/src/connector/lib/filter-expr.ts","packages/kernel/kernel-contracts/src/connector/lib/inbound-endpoint-contribution.ts","packages/kernel/kernel-contracts/src/connector/lib/oauth-endpoints.ts","packages/kernel/kernel-contracts/src/connector/lib/onboarding-manifest.ts","packages/kernel/kernel-contracts/src/connector/lib/provider-descriptor.ts","packages/kernel/kernel-contracts/src/connector/lib/provider-token-revocation.ts","packages/kernel/kernel-contracts/src/connector/lib/runtime-materialization-audience.ts","packages/kernel/kernel-contracts/src/connector/lib/sealed-connection-credential.ts","packages/kernel/kernel-contracts/src/content-address/index.ts","packages/kernel/kernel-contracts/src/content-address/lib/content-address.ts","packages/kernel/kernel-contracts/src/content-address/server/index.ts","packages/kernel/kernel-contracts/src/contribution/index.ts","packages/kernel/kernel-contracts/src/contribution/lib/contributed-contribution-kind.ts","packages/kernel/kernel-contracts/src/contribution/lib/contribution-kind-descriptor.ts","packages/kernel/kernel-contracts/src/contribution/lib/contribution-kind.ts","packages/kernel/kernel-contracts/src/contribution/lib/contribution-provenance-rank.ts","packages/kernel/kernel-contracts/src/contribution/lib/contribution-source.ts","packages/kernel/kernel-contracts/src/contribution/lib/contribution.ts","packages/kernel/kernel-contracts/src/contribution/lib/registry.ts","packages/kernel/kernel-contracts/src/contribution/lib/sync.ts","packages/kernel/kernel-contracts/src/decision-gate/index.ts","packages/kernel/kernel-contracts/src/decision-gate/lib/decision-gate.ts","packages/kernel/kernel-contracts/src/decision-gate/lib/pinned-subject-artifact.ts","packages/kernel/kernel-contracts/src/declared-parameter/index.ts","packages/kernel/kernel-contracts/src/declared-parameter/lib/declared-parameter.ts","packages/kernel/kernel-contracts/src/deployment/index.ts","packages/kernel/kernel-contracts/src/deployment/lib/artifact-signer-trust.ts","packages/kernel/kernel-contracts/src/deployment/lib/deployment-id.ts","packages/kernel/kernel-contracts/src/deployment/lib/resolved-deployment.ts","packages/kernel/kernel-contracts/src/deployment/lib/trust-domain.ts","packages/kernel/kernel-contracts/src/deployment/lib/trust-partition.ts","packages/kernel/kernel-contracts/src/distribution/index.ts","packages/kernel/kernel-contracts/src/distribution/lib/authorization-lock.ts","packages/kernel/kernel-contracts/src/distribution/lib/biome-closure.ts","packages/kernel/kernel-contracts/src/distribution/lib/biome-source.ts","packages/kernel/kernel-contracts/src/distribution/lib/customer-edition-definition.ts","packages/kernel/kernel-contracts/src/distribution/lib/delivered-biome.ts","packages/kernel/kernel-contracts/src/distribution/lib/distribution-lock.ts","packages/kernel/kernel-contracts/src/distribution/lib/distribution-ownership.ts","packages/kernel/kernel-contracts/src/distribution/lib/distribution-roots.ts","packages/kernel/kernel-contracts/src/distribution/lib/distribution-selector.ts","packages/kernel/kernel-contracts/src/distribution/lib/distribution.ts","packages/kernel/kernel-contracts/src/distribution/lib/first-party-capability-domains.ts","packages/kernel/kernel-contracts/src/distribution/lib/image-lock.ts","packages/kernel/kernel-contracts/src/distribution/lib/image-producer-evidence.ts","packages/kernel/kernel-contracts/src/distribution/lib/install-policy.ts","packages/kernel/kernel-contracts/src/distribution/lib/kernel-contract-authority.ts","packages/kernel/kernel-contracts/src/distribution/lib/kernel-contract-source-paths.ts","packages/kernel/kernel-contracts/src/distribution/lib/lock-consumers.ts","packages/kernel/kernel-contracts/src/distribution/lib/nexus-binding.ts","packages/kernel/kernel-contracts/src/distribution/lib/nexus-endpoint-specs.ts","packages/kernel/kernel-contracts/src/distribution/lib/platform-service-source-index.ts","packages/kernel/kernel-contracts/src/distribution/lib/resolve-nexus-bindings.ts","packages/kernel/kernel-contracts/src/distribution/lib/resolve-unsplit-deployment.ts","packages/kernel/kernel-contracts/src/distribution/lib/runtime-image-platform.ts","packages/kernel/kernel-contracts/src/distribution/lib/runtime-image-source-index.ts","packages/kernel/kernel-contracts/src/distribution/lib/verify-delivered-locks.ts","packages/kernel/kernel-contracts/src/distribution/lib/verify-resolved-deployment.ts","packages/kernel/kernel-contracts/src/distribution/server/index.ts","packages/kernel/kernel-contracts/src/execution-context/index.ts","packages/kernel/kernel-contracts/src/execution-context/lib/caller.ts","packages/kernel/kernel-contracts/src/execution-context/lib/execution-context.ts","packages/kernel/kernel-contracts/src/execution-context/lib/subject.ts","packages/kernel/kernel-contracts/src/execution-environment-kind/index.ts","packages/kernel/kernel-contracts/src/execution-environment-kind/lib/execution-environment-kind.ts","packages/kernel/kernel-contracts/src/execution-environment/index.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/approval-rule.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/built-in-environments.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/environment-data-ceiling.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/environment-reach-ceiling.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/execution-environment-header.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/execution-environment.ts","packages/kernel/kernel-contracts/src/execution-target/index.ts","packages/kernel/kernel-contracts/src/execution-target/lib/execution-target-queue.ts","packages/kernel/kernel-contracts/src/execution-target/lib/execution-target.ts","packages/kernel/kernel-contracts/src/execution-target/lib/worker-task-queue.ts","packages/kernel/kernel-contracts/src/http/index.ts","packages/kernel/kernel-contracts/src/http/lib/http-method.ts","packages/kernel/kernel-contracts/src/http/lib/problem-declared-params.ts","packages/kernel/kernel-contracts/src/http/lib/problem-definition.ts","packages/kernel/kernel-contracts/src/http/lib/problem-details.ts","packages/kernel/kernel-contracts/src/http/lib/problem-disposition.ts","packages/kernel/kernel-contracts/src/http/lib/xema-error.ts","packages/kernel/kernel-contracts/src/model/index.ts","packages/kernel/kernel-contracts/src/model/lib/model-lane.ts","packages/kernel/kernel-contracts/src/model/lib/model-purpose.ts","packages/kernel/kernel-contracts/src/model/lib/model-ref.ts","packages/kernel/kernel-contracts/src/model/lib/model-vocabulary-contribution.ts","packages/kernel/kernel-contracts/src/model/lib/model-vocabulary-owner.ts","packages/kernel/kernel-contracts/src/object/index.ts","packages/kernel/kernel-contracts/src/object/lib/object-lifecycle.ts","packages/kernel/kernel-contracts/src/object/lib/object-ref-scope.ts","packages/kernel/kernel-contracts/src/object/lib/xema-object-kind.ts","packages/kernel/kernel-contracts/src/object/lib/xema-object-ref.ts","packages/kernel/kernel-contracts/src/object/lib/xema-object.ts","packages/kernel/kernel-contracts/src/output-route/index.ts","packages/kernel/kernel-contracts/src/output-route/lib/output-route.ts","packages/kernel/kernel-contracts/src/platform-generation/index.ts","packages/kernel/kernel-contracts/src/platform-generation/lib/platform-generation.ts","packages/kernel/kernel-contracts/src/policy-decision/index.ts","packages/kernel/kernel-contracts/src/policy-decision/lib/policy-decision-kind.ts","packages/kernel/kernel-contracts/src/policy/index.ts","packages/kernel/kernel-contracts/src/policy/lib/egress-allowlist.ts","packages/kernel/kernel-contracts/src/policy/lib/obligations.ts","packages/kernel/kernel-contracts/src/policy/lib/policy-decision-record.ts","packages/kernel/kernel-contracts/src/policy/lib/policy.ts","packages/kernel/kernel-contracts/src/policy/lib/route-hints.ts","packages/kernel/kernel-contracts/src/policy/lib/space-classification-parameter.ts","packages/kernel/kernel-contracts/src/process-topology/index.ts","packages/kernel/kernel-contracts/src/process-topology/lib/composed-process-contract.ts","packages/kernel/kernel-contracts/src/process-topology/lib/process-topology.ts","packages/kernel/kernel-contracts/src/process-topology/lib/resolve-process-topology.ts","packages/kernel/kernel-contracts/src/provisioning/index.ts","packages/kernel/kernel-contracts/src/provisioning/lib/provisioning.ts","packages/kernel/kernel-contracts/src/resource-requirement/index.ts","packages/kernel/kernel-contracts/src/resource-requirement/lib/resource-requirement.ts","packages/kernel/kernel-contracts/src/resource-role/index.ts","packages/kernel/kernel-contracts/src/resource-role/lib/resource-role-binding.ts","packages/kernel/kernel-contracts/src/resource-role/lib/resource-role-contribution.ts","packages/kernel/kernel-contracts/src/resource-role/lib/resource-role-default-binding.ts","packages/kernel/kernel-contracts/src/resource-role/lib/resource-role-resolution.ts","packages/kernel/kernel-contracts/src/resource/index.ts","packages/kernel/kernel-contracts/src/resource/lib/plan.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-declaration.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-kind-descriptor.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-kind-registry.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-kind.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-managed-by.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-ownership-contribution.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-ref.ts","packages/kernel/kernel-contracts/src/resource/lib/stack.ts","packages/kernel/kernel-contracts/src/resource/lib/xema-manifest.ts","packages/kernel/kernel-contracts/src/revision-target/index.ts","packages/kernel/kernel-contracts/src/revision-target/lib/revision-target.ts","packages/kernel/kernel-contracts/src/runner/index.ts","packages/kernel/kernel-contracts/src/runner/lib/dispatch.ts","packages/kernel/kernel-contracts/src/runner/lib/job-token.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-attestation.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-authority.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-job.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-kind.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-lease-store.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-mode.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-plane.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-registration.ts","packages/kernel/kernel-contracts/src/runner/lib/runner.ts","packages/kernel/kernel-contracts/src/runner/lib/runtime-identity.ts","packages/kernel/kernel-contracts/src/runner/lib/runtime-isolation.ts","packages/kernel/kernel-contracts/src/service-registry/index.ts","packages/kernel/kernel-contracts/src/service-registry/lib/inject-service.ts","packages/kernel/kernel-contracts/src/service-registry/lib/on-behalf-descriptor.ts","packages/kernel/kernel-contracts/src/service-registry/lib/service-descriptor.ts","packages/kernel/kernel-contracts/src/service-registry/lib/service-names.generated.ts","packages/kernel/kernel-contracts/src/service-registry/lib/service-registry-client.ts","packages/kernel/kernel-contracts/src/session-launch/index.ts","packages/kernel/kernel-contracts/src/session-launch/lib/agent-reach-tier.ts","packages/kernel/kernel-contracts/src/session-launch/lib/agent-session-lifecycle.ts","packages/kernel/kernel-contracts/src/session-launch/lib/agent-workspace-sharing.ts","packages/kernel/kernel-contracts/src/session-launch/lib/invocation-overlay.ts","packages/kernel/kernel-contracts/src/session-launch/lib/standing-session.ts","packages/kernel/kernel-contracts/src/session-launch/lib/worker-internet-egress.ts","packages/kernel/kernel-contracts/src/session-launch/lib/workspace-action.ts","packages/kernel/kernel-contracts/src/session-launch/lib/workspace-backing.ts","packages/kernel/kernel-contracts/src/skill/index.ts","packages/kernel/kernel-contracts/src/skill/lib/skill-enums.ts","packages/kernel/kernel-contracts/src/skill/lib/skill-governance.ts","packages/kernel/kernel-contracts/src/skill/lib/skill-source.ts","packages/kernel/kernel-contracts/src/skill/lib/skill.ts","packages/kernel/kernel-contracts/src/skill/lib/system-skill-baseline.ts","packages/kernel/kernel-contracts/src/space/index.ts","packages/kernel/kernel-contracts/src/space/lib/exact-resolution-owner.ts","packages/kernel/kernel-contracts/src/space/lib/owner-space-projection.ts","packages/kernel/kernel-contracts/src/space/lib/owner-space-ref.ts","packages/kernel/kernel-contracts/src/space/lib/scoped-resolution.ts","packages/kernel/kernel-contracts/src/space/lib/space-classification.ts","packages/kernel/kernel-contracts/src/space/lib/space-kind-rank.ts","packages/kernel/kernel-contracts/src/space/lib/space-promotion.ts","packages/kernel/kernel-contracts/src/space/lib/space-ref-parser.ts","packages/kernel/kernel-contracts/src/space/lib/space-traversal.ts","packages/kernel/kernel-contracts/src/space/lib/space.ts","packages/kernel/kernel-contracts/src/subject/index.ts","packages/kernel/kernel-contracts/src/subject/lib/delegated-authority.ts","packages/kernel/kernel-contracts/src/subject/lib/subject.ts","packages/kernel/kernel-contracts/src/subject/lib/token-class.ts","packages/kernel/kernel-contracts/src/surface/index.ts","packages/kernel/kernel-contracts/src/surface/lib/surface-contribution.ts","packages/kernel/kernel-contracts/src/surface/lib/surface-kind.ts","packages/kernel/kernel-contracts/src/surface/lib/vista-surface.ts","packages/kernel/kernel-contracts/src/tenant/index.ts","packages/kernel/kernel-contracts/src/tenant/lib/caller-org-scope.ts","packages/kernel/kernel-contracts/src/tenant/lib/org-id.ts","packages/kernel/kernel-contracts/src/tenant/lib/org-role.ts","packages/kernel/kernel-contracts/src/tenant/lib/platform-org.ts","packages/kernel/kernel-contracts/src/worker-runtime/index.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/capabilities.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/enums.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/runtime-layout-adapter.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/runtime-layout-profile.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/runtime-profile-diagnostics.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/runtime-profile.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/runtime.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/schemas.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/workspace-sandbox.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/workspace-slot-paths.ts","packages/kernel/kernel-contracts/src/workflow/index.ts","packages/kernel/kernel-contracts/src/workflow/lib/action-ref.ts","packages/kernel/kernel-contracts/src/workflow/lib/activity-outputs.ts","packages/kernel/kernel-contracts/src/workflow/lib/agent-role.ts","packages/kernel/kernel-contracts/src/workflow/lib/artifact-ref.ts","packages/kernel/kernel-contracts/src/workflow/lib/biome-task-queue.ts","packages/kernel/kernel-contracts/src/workflow/lib/briefcase.ts","packages/kernel/kernel-contracts/src/workflow/lib/catalog-taxonomies.ts","packages/kernel/kernel-contracts/src/workflow/lib/compiled-run.ts","packages/kernel/kernel-contracts/src/workflow/lib/compiled-workspace-manifest.ts","packages/kernel/kernel-contracts/src/workflow/lib/concurrency-group.ts","packages/kernel/kernel-contracts/src/workflow/lib/domain-tag.ts","packages/kernel/kernel-contracts/src/workflow/lib/enums.ts","packages/kernel/kernel-contracts/src/workflow/lib/errors.ts","packages/kernel/kernel-contracts/src/workflow/lib/job-run.ts","packages/kernel/kernel-contracts/src/workflow/lib/model-ref.ts","packages/kernel/kernel-contracts/src/workflow/lib/mount-plan.ts","packages/kernel/kernel-contracts/src/workflow/lib/nexus-endpoint.ts","packages/kernel/kernel-contracts/src/workflow/lib/phase-report.ts","packages/kernel/kernel-contracts/src/workflow/lib/platform-task-queue.ts","packages/kernel/kernel-contracts/src/workflow/lib/review-subject/index.ts","packages/kernel/kernel-contracts/src/workflow/lib/review-subject/kinds.ts","packages/kernel/kernel-contracts/src/workflow/lib/review-subject/narrow.ts","packages/kernel/kernel-contracts/src/workflow/lib/review-subject/producers/artifact-ref.ts","packages/kernel/kernel-contracts/src/workflow/lib/review-subject/producers/string.ts","packages/kernel/kernel-contracts/src/workflow/lib/role-capability.ts","packages/kernel/kernel-contracts/src/workflow/lib/run-progress.ts","packages/kernel/kernel-contracts/src/workflow/lib/snapshot-ref.ts","packages/kernel/kernel-contracts/src/workflow/lib/trigger-payload.ts","packages/kernel/kernel-contracts/src/workflow/lib/trust-domain-namespace.ts","packages/kernel/kernel-contracts/src/workflow/lib/variable-requirement.ts","packages/kernel/kernel-contracts/src/workflow/lib/work-item-payloads.ts","packages/kernel/kernel-contracts/src/workflow/lib/workflow-control.ts","packages/kernel/kernel-contracts/src/workflow/lib/workspace-manifest-enums.ts"],"version":4}
+{"contentDigest":"9cb62daff35705a5e1878503b2974a44e780526329ed59ad94e03042be20cffa","contentHashAlgorithm":"xema-kernel-contract-authority-length-framed-git-path-mode-blob-sha256-v1","digestDomain":"xema.kernel-contract-authority.digest","digestVersion":1,"entryModules":["authorization-module","authorization-module/server","biome","distribution","distribution/server","platform-generation","process-topology","resource-requirement"],"provisional":false,"sourceMode":"100644","sourcePaths":["packages/kernel/kernel-contracts/src/address/index.ts","packages/kernel/kernel-contracts/src/address/lib/resource-instance-address.ts","packages/kernel/kernel-contracts/src/address/lib/xema-address.ts","packages/kernel/kernel-contracts/src/agent-composition/index.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/agent-limits-schema.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/agent-ref-resolution.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/agent-workspace-config.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/agent.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/capability-layer.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/delegate-aperture.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/intrinsic-floor.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/launch-definition.ts","packages/kernel/kernel-contracts/src/agent-composition/lib/model-resolution-matrix.ts","packages/kernel/kernel-contracts/src/agent-execution-mode/index.ts","packages/kernel/kernel-contracts/src/agent-execution-mode/lib/agent-execution-mode.ts","packages/kernel/kernel-contracts/src/agent-permission/index.ts","packages/kernel/kernel-contracts/src/agent-permission/lib/output-surface-tool-id.ts","packages/kernel/kernel-contracts/src/agent-permission/lib/permission-map.ts","packages/kernel/kernel-contracts/src/agent-session/index.ts","packages/kernel/kernel-contracts/src/agent-session/lib/lifecycle.ts","packages/kernel/kernel-contracts/src/agent-session/lib/participant.ts","packages/kernel/kernel-contracts/src/agent-session/lib/resolved-session-composition.ts","packages/kernel/kernel-contracts/src/agent-session/lib/sealed-delegate-aperture.ts","packages/kernel/kernel-contracts/src/agent-session/lib/workspace.ts","packages/kernel/kernel-contracts/src/agent-workspace/index.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/agent-run-context.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/agent-tool-defaults.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/awp.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/context-json.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/deliverable-spec-ref.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/endpoint-fetch-spec.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/logical-workspace-slot.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/mount-apply.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/working-file.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/workspace-layout.ts","packages/kernel/kernel-contracts/src/agent-workspace/lib/workspace-spec.ts","packages/kernel/kernel-contracts/src/audit/index.ts","packages/kernel/kernel-contracts/src/audit/lib/authority.ts","packages/kernel/kernel-contracts/src/audit/lib/hash-chain.ts","packages/kernel/kernel-contracts/src/authored-resource/index.ts","packages/kernel/kernel-contracts/src/authored-resource/lib/authored-content-kind.ts","packages/kernel/kernel-contracts/src/authored-resource/lib/authored-resource.ts","packages/kernel/kernel-contracts/src/authored-resource/lib/contributed-authored-resource.ts","packages/kernel/kernel-contracts/src/authored-resource/lib/release-intent.ts","packages/kernel/kernel-contracts/src/authorization-facts/index.ts","packages/kernel/kernel-contracts/src/authorization-facts/lib/fact-tuple.ts","packages/kernel/kernel-contracts/src/authorization-facts/lib/facts-apply.ts","packages/kernel/kernel-contracts/src/authorization-facts/lib/facts-snapshot.ts","packages/kernel/kernel-contracts/src/authorization-facts/lib/facts-writer-authority.ts","packages/kernel/kernel-contracts/src/authorization-facts/lib/revoke-intent.ts","packages/kernel/kernel-contracts/src/authorization-module/index.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/authorization-composition-error.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/authorization-interface-requirements.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/authorization-module-contribution.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/authorization-module-envelope.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/authorization-namespace.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/delegation-origination.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/delegation-wildcard-ceiling.ts","packages/kernel/kernel-contracts/src/authorization-module/lib/platform-authorization-modules.ts","packages/kernel/kernel-contracts/src/authorization-module/server/authorization-compatibility.ts","packages/kernel/kernel-contracts/src/authorization-module/server/authorization-interface-conformance.ts","packages/kernel/kernel-contracts/src/authorization-module/server/authorization-model-json.ts","packages/kernel/kernel-contracts/src/authorization-module/server/compose-authorization-base.ts","packages/kernel/kernel-contracts/src/authorization-module/server/delegation-origination-conformance.ts","packages/kernel/kernel-contracts/src/authorization-module/server/index.ts","packages/kernel/kernel-contracts/src/authorization-module/server/platform-module-files.ts","packages/kernel/kernel-contracts/src/authorization-module/server/userset-subject-types.ts","packages/kernel/kernel-contracts/src/authzen/index.ts","packages/kernel/kernel-contracts/src/authzen/lib/authzen-entities.ts","packages/kernel/kernel-contracts/src/authzen/lib/authzen-evaluation.ts","packages/kernel/kernel-contracts/src/authzen/lib/authzen-metadata.ts","packages/kernel/kernel-contracts/src/authzen/lib/authzen-search.ts","packages/kernel/kernel-contracts/src/authzen/lib/authzen-snapshot.ts","packages/kernel/kernel-contracts/src/authzen/lib/durable-delegation-model.ts","packages/kernel/kernel-contracts/src/authzen/lib/org-authority-contextual-tuple.ts","packages/kernel/kernel-contracts/src/authzen/lib/xema-authzen-profile.ts","packages/kernel/kernel-contracts/src/authzen/lib/xema-capability-resource.ts","packages/kernel/kernel-contracts/src/authzen/lib/xema-membership.ts","packages/kernel/kernel-contracts/src/biome-dependency/index.ts","packages/kernel/kernel-contracts/src/biome-dependency/lib/biome-dependency-contract.ts","packages/kernel/kernel-contracts/src/biome-dependency/lib/peer-seam-table.ts","packages/kernel/kernel-contracts/src/biome-dependency/lib/service-peer-contract.ts","packages/kernel/kernel-contracts/src/biome/index.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-audience.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-availability-grant.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-capability-refs.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-category.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-component-process-facts.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-component-requirements.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-component-schema-helpers.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-component-vocabulary.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-component.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-generated-index.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-kind.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-lifecycle.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-manifest.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-origin.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-scope.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-target.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-tier-rank.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-tier.ts","packages/kernel/kernel-contracts/src/biome/lib/biome-trust-tier.ts","packages/kernel/kernel-contracts/src/biome/lib/grown-biome-reach.ts","packages/kernel/kernel-contracts/src/biome/lib/trust-tier-policies.ts","packages/kernel/kernel-contracts/src/biome/lib/web-exposed-module-key.ts","packages/kernel/kernel-contracts/src/canonical-object/index.ts","packages/kernel/kernel-contracts/src/canonical-object/lib/canonical-object-schema-fields.ts","packages/kernel/kernel-contracts/src/canonical-object/lib/canonical-object-type-contribution.ts","packages/kernel/kernel-contracts/src/canonical-object/lib/canonical-object-type-owner.ts","packages/kernel/kernel-contracts/src/canonical-object/lib/canonical-object-type.ts","packages/kernel/kernel-contracts/src/capability-projection/index.ts","packages/kernel/kernel-contracts/src/capability-projection/lib/capability-descriptor-kind-binding.ts","packages/kernel/kernel-contracts/src/capability-projection/lib/capability-invocation-binding.ts","packages/kernel/kernel-contracts/src/capability-projection/lib/capability-sync-manifest.ts","packages/kernel/kernel-contracts/src/capability-projection/lib/projected-capability.ts","packages/kernel/kernel-contracts/src/capability/index.ts","packages/kernel/kernel-contracts/src/capability/lib/authority-effect.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-agent-exposure.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-aperture.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-contribution.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-delegable.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-descriptor-kind.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-domain.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-effect-class.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-grant.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-human-baseline.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-invocation-descriptor.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-policy.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-reach.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-ref-pattern.ts","packages/kernel/kernel-contracts/src/capability/lib/capability-ref.ts","packages/kernel/kernel-contracts/src/capability/lib/connector-capability-ref.ts","packages/kernel/kernel-contracts/src/capability/lib/effective-capability-set.ts","packages/kernel/kernel-contracts/src/capability/lib/errors.ts","packages/kernel/kernel-contracts/src/capability/lib/long-running-invocation.ts","packages/kernel/kernel-contracts/src/capability/lib/meta-tool.ts","packages/kernel/kernel-contracts/src/capability/lib/permission-profile.ts","packages/kernel/kernel-contracts/src/capability/lib/required-resource-role-binding.ts","packages/kernel/kernel-contracts/src/capability/lib/shell-command-descriptor.ts","packages/kernel/kernel-contracts/src/capability/lib/trusted-context-projection.ts","packages/kernel/kernel-contracts/src/connector/index.ts","packages/kernel/kernel-contracts/src/connector/lib/adapter-kind.ts","packages/kernel/kernel-contracts/src/connector/lib/canonical-operation-binding.ts","packages/kernel/kernel-contracts/src/connector/lib/capability.ts","packages/kernel/kernel-contracts/src/connector/lib/connector-adapter-contribution.ts","packages/kernel/kernel-contracts/src/connector/lib/connector-adapter-kind.ts","packages/kernel/kernel-contracts/src/connector/lib/connector-descriptor.ts","packages/kernel/kernel-contracts/src/connector/lib/connector-http-request.ts","packages/kernel/kernel-contracts/src/connector/lib/connector-operation-exposure.ts","packages/kernel/kernel-contracts/src/connector/lib/credential-auth-type.ts","packages/kernel/kernel-contracts/src/connector/lib/credential-kind-fields.ts","packages/kernel/kernel-contracts/src/connector/lib/credential-kind.ts","packages/kernel/kernel-contracts/src/connector/lib/credential-owner-scope.ts","packages/kernel/kernel-contracts/src/connector/lib/credential-strategy-contribution.ts","packages/kernel/kernel-contracts/src/connector/lib/envelope-schema.ts","packages/kernel/kernel-contracts/src/connector/lib/filter-expr-schema.ts","packages/kernel/kernel-contracts/src/connector/lib/filter-expr-validate.ts","packages/kernel/kernel-contracts/src/connector/lib/filter-expr.ts","packages/kernel/kernel-contracts/src/connector/lib/inbound-endpoint-contribution.ts","packages/kernel/kernel-contracts/src/connector/lib/oauth-endpoints.ts","packages/kernel/kernel-contracts/src/connector/lib/onboarding-manifest.ts","packages/kernel/kernel-contracts/src/connector/lib/provider-descriptor.ts","packages/kernel/kernel-contracts/src/connector/lib/provider-token-revocation.ts","packages/kernel/kernel-contracts/src/connector/lib/runtime-materialization-audience.ts","packages/kernel/kernel-contracts/src/connector/lib/sealed-connection-credential.ts","packages/kernel/kernel-contracts/src/content-address/index.ts","packages/kernel/kernel-contracts/src/content-address/lib/content-address.ts","packages/kernel/kernel-contracts/src/content-address/server/index.ts","packages/kernel/kernel-contracts/src/contribution/index.ts","packages/kernel/kernel-contracts/src/contribution/lib/contributed-contribution-kind.ts","packages/kernel/kernel-contracts/src/contribution/lib/contribution-kind-descriptor.ts","packages/kernel/kernel-contracts/src/contribution/lib/contribution-kind.ts","packages/kernel/kernel-contracts/src/contribution/lib/contribution-provenance-rank.ts","packages/kernel/kernel-contracts/src/contribution/lib/contribution-source.ts","packages/kernel/kernel-contracts/src/contribution/lib/contribution.ts","packages/kernel/kernel-contracts/src/contribution/lib/registry.ts","packages/kernel/kernel-contracts/src/contribution/lib/sync.ts","packages/kernel/kernel-contracts/src/decision-gate/index.ts","packages/kernel/kernel-contracts/src/decision-gate/lib/decision-gate.ts","packages/kernel/kernel-contracts/src/decision-gate/lib/pinned-subject-artifact.ts","packages/kernel/kernel-contracts/src/declared-parameter/index.ts","packages/kernel/kernel-contracts/src/declared-parameter/lib/declared-parameter.ts","packages/kernel/kernel-contracts/src/deployment/index.ts","packages/kernel/kernel-contracts/src/deployment/lib/artifact-signer-trust.ts","packages/kernel/kernel-contracts/src/deployment/lib/deployment-id.ts","packages/kernel/kernel-contracts/src/deployment/lib/operation-grant.ts","packages/kernel/kernel-contracts/src/deployment/lib/operation-id.ts","packages/kernel/kernel-contracts/src/deployment/lib/organization-sweep-grant.ts","packages/kernel/kernel-contracts/src/deployment/lib/platform-sweep.ts","packages/kernel/kernel-contracts/src/deployment/lib/resolved-deployment.ts","packages/kernel/kernel-contracts/src/deployment/lib/trust-domain.ts","packages/kernel/kernel-contracts/src/deployment/lib/trust-partition.ts","packages/kernel/kernel-contracts/src/distribution/index.ts","packages/kernel/kernel-contracts/src/distribution/lib/authorization-lock.ts","packages/kernel/kernel-contracts/src/distribution/lib/biome-closure.ts","packages/kernel/kernel-contracts/src/distribution/lib/biome-source.ts","packages/kernel/kernel-contracts/src/distribution/lib/capability-domain-owner-duplicates.ts","packages/kernel/kernel-contracts/src/distribution/lib/code-unit-order.ts","packages/kernel/kernel-contracts/src/distribution/lib/customer-edition-definition.ts","packages/kernel/kernel-contracts/src/distribution/lib/delivered-biome.ts","packages/kernel/kernel-contracts/src/distribution/lib/distribution-lock.ts","packages/kernel/kernel-contracts/src/distribution/lib/distribution-ownership.ts","packages/kernel/kernel-contracts/src/distribution/lib/distribution-roots.ts","packages/kernel/kernel-contracts/src/distribution/lib/distribution-selector.ts","packages/kernel/kernel-contracts/src/distribution/lib/distribution.ts","packages/kernel/kernel-contracts/src/distribution/lib/first-party-capability-domains.ts","packages/kernel/kernel-contracts/src/distribution/lib/image-lock.ts","packages/kernel/kernel-contracts/src/distribution/lib/image-producer-evidence.ts","packages/kernel/kernel-contracts/src/distribution/lib/install-policy.ts","packages/kernel/kernel-contracts/src/distribution/lib/kernel-contract-authority.ts","packages/kernel/kernel-contracts/src/distribution/lib/kernel-contract-source-paths.ts","packages/kernel/kernel-contracts/src/distribution/lib/lock-consumers.ts","packages/kernel/kernel-contracts/src/distribution/lib/nexus-binding.ts","packages/kernel/kernel-contracts/src/distribution/lib/nexus-endpoint-specs.ts","packages/kernel/kernel-contracts/src/distribution/lib/operation-grant-admission.ts","packages/kernel/kernel-contracts/src/distribution/lib/organization-sweep-admission.ts","packages/kernel/kernel-contracts/src/distribution/lib/platform-service-source-index.ts","packages/kernel/kernel-contracts/src/distribution/lib/resolve-nexus-bindings.ts","packages/kernel/kernel-contracts/src/distribution/lib/resolve-unsplit-deployment.ts","packages/kernel/kernel-contracts/src/distribution/lib/runtime-image-platform.ts","packages/kernel/kernel-contracts/src/distribution/lib/runtime-image-source-index.ts","packages/kernel/kernel-contracts/src/distribution/lib/sorted-unique-non-empty.ts","packages/kernel/kernel-contracts/src/distribution/lib/verify-delivered-locks.ts","packages/kernel/kernel-contracts/src/distribution/lib/verify-resolved-deployment.ts","packages/kernel/kernel-contracts/src/distribution/server/index.ts","packages/kernel/kernel-contracts/src/execution-context/index.ts","packages/kernel/kernel-contracts/src/execution-context/lib/caller.ts","packages/kernel/kernel-contracts/src/execution-context/lib/execution-context.ts","packages/kernel/kernel-contracts/src/execution-context/lib/subject.ts","packages/kernel/kernel-contracts/src/execution-environment-kind/index.ts","packages/kernel/kernel-contracts/src/execution-environment-kind/lib/execution-environment-kind.ts","packages/kernel/kernel-contracts/src/execution-environment/index.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/approval-rule.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/built-in-environments.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/environment-data-ceiling.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/environment-reach-ceiling.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/execution-environment-header.ts","packages/kernel/kernel-contracts/src/execution-environment/lib/execution-environment.ts","packages/kernel/kernel-contracts/src/execution-target/index.ts","packages/kernel/kernel-contracts/src/execution-target/lib/execution-target-queue.ts","packages/kernel/kernel-contracts/src/execution-target/lib/execution-target.ts","packages/kernel/kernel-contracts/src/execution-target/lib/worker-task-queue.ts","packages/kernel/kernel-contracts/src/http/index.ts","packages/kernel/kernel-contracts/src/http/lib/http-method.ts","packages/kernel/kernel-contracts/src/http/lib/problem-declared-params.ts","packages/kernel/kernel-contracts/src/http/lib/problem-definition.ts","packages/kernel/kernel-contracts/src/http/lib/problem-details.ts","packages/kernel/kernel-contracts/src/http/lib/problem-disposition.ts","packages/kernel/kernel-contracts/src/http/lib/xema-error.ts","packages/kernel/kernel-contracts/src/model/index.ts","packages/kernel/kernel-contracts/src/model/lib/model-lane.ts","packages/kernel/kernel-contracts/src/model/lib/model-purpose.ts","packages/kernel/kernel-contracts/src/model/lib/model-ref.ts","packages/kernel/kernel-contracts/src/model/lib/model-vocabulary-contribution.ts","packages/kernel/kernel-contracts/src/model/lib/model-vocabulary-owner.ts","packages/kernel/kernel-contracts/src/object/index.ts","packages/kernel/kernel-contracts/src/object/lib/object-lifecycle.ts","packages/kernel/kernel-contracts/src/object/lib/object-ref-scope.ts","packages/kernel/kernel-contracts/src/object/lib/xema-object-kind.ts","packages/kernel/kernel-contracts/src/object/lib/xema-object-ref.ts","packages/kernel/kernel-contracts/src/object/lib/xema-object.ts","packages/kernel/kernel-contracts/src/output-route/index.ts","packages/kernel/kernel-contracts/src/output-route/lib/output-route.ts","packages/kernel/kernel-contracts/src/platform-generation/index.ts","packages/kernel/kernel-contracts/src/platform-generation/lib/platform-generation.ts","packages/kernel/kernel-contracts/src/policy-decision/index.ts","packages/kernel/kernel-contracts/src/policy-decision/lib/policy-decision-kind.ts","packages/kernel/kernel-contracts/src/policy/index.ts","packages/kernel/kernel-contracts/src/policy/lib/egress-allowlist.ts","packages/kernel/kernel-contracts/src/policy/lib/obligations.ts","packages/kernel/kernel-contracts/src/policy/lib/policy-decision-record.ts","packages/kernel/kernel-contracts/src/policy/lib/policy.ts","packages/kernel/kernel-contracts/src/policy/lib/route-hints.ts","packages/kernel/kernel-contracts/src/policy/lib/space-classification-parameter.ts","packages/kernel/kernel-contracts/src/process-topology/index.ts","packages/kernel/kernel-contracts/src/process-topology/lib/composed-process-contract.ts","packages/kernel/kernel-contracts/src/process-topology/lib/process-topology.ts","packages/kernel/kernel-contracts/src/process-topology/lib/resolve-process-topology.ts","packages/kernel/kernel-contracts/src/provisioning/index.ts","packages/kernel/kernel-contracts/src/provisioning/lib/provisioning.ts","packages/kernel/kernel-contracts/src/resource-requirement/index.ts","packages/kernel/kernel-contracts/src/resource-requirement/lib/resource-requirement.ts","packages/kernel/kernel-contracts/src/resource-role/index.ts","packages/kernel/kernel-contracts/src/resource-role/lib/resource-role-binding.ts","packages/kernel/kernel-contracts/src/resource-role/lib/resource-role-contribution.ts","packages/kernel/kernel-contracts/src/resource-role/lib/resource-role-default-binding.ts","packages/kernel/kernel-contracts/src/resource-role/lib/resource-role-resolution.ts","packages/kernel/kernel-contracts/src/resource/index.ts","packages/kernel/kernel-contracts/src/resource/lib/plan.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-declaration.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-kind-descriptor.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-kind-registry.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-kind.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-managed-by.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-ownership-contribution.ts","packages/kernel/kernel-contracts/src/resource/lib/resource-ref.ts","packages/kernel/kernel-contracts/src/resource/lib/stack.ts","packages/kernel/kernel-contracts/src/resource/lib/xema-manifest.ts","packages/kernel/kernel-contracts/src/revision-target/index.ts","packages/kernel/kernel-contracts/src/revision-target/lib/revision-target.ts","packages/kernel/kernel-contracts/src/runner/index.ts","packages/kernel/kernel-contracts/src/runner/lib/dispatch.ts","packages/kernel/kernel-contracts/src/runner/lib/job-token.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-attestation.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-authority.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-job.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-kind.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-lease-store.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-mode.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-plane.ts","packages/kernel/kernel-contracts/src/runner/lib/runner-registration.ts","packages/kernel/kernel-contracts/src/runner/lib/runner.ts","packages/kernel/kernel-contracts/src/runner/lib/runtime-identity.ts","packages/kernel/kernel-contracts/src/runner/lib/runtime-isolation.ts","packages/kernel/kernel-contracts/src/service-registry/index.ts","packages/kernel/kernel-contracts/src/service-registry/lib/inject-service.ts","packages/kernel/kernel-contracts/src/service-registry/lib/on-behalf-descriptor.ts","packages/kernel/kernel-contracts/src/service-registry/lib/service-descriptor.ts","packages/kernel/kernel-contracts/src/service-registry/lib/service-names.generated.ts","packages/kernel/kernel-contracts/src/service-registry/lib/service-registry-client.ts","packages/kernel/kernel-contracts/src/session-launch/index.ts","packages/kernel/kernel-contracts/src/session-launch/lib/agent-reach-tier.ts","packages/kernel/kernel-contracts/src/session-launch/lib/agent-session-lifecycle.ts","packages/kernel/kernel-contracts/src/session-launch/lib/agent-workspace-sharing.ts","packages/kernel/kernel-contracts/src/session-launch/lib/invocation-overlay.ts","packages/kernel/kernel-contracts/src/session-launch/lib/standing-session.ts","packages/kernel/kernel-contracts/src/session-launch/lib/worker-internet-egress.ts","packages/kernel/kernel-contracts/src/session-launch/lib/workspace-action.ts","packages/kernel/kernel-contracts/src/session-launch/lib/workspace-backing.ts","packages/kernel/kernel-contracts/src/skill/index.ts","packages/kernel/kernel-contracts/src/skill/lib/skill-enums.ts","packages/kernel/kernel-contracts/src/skill/lib/skill-governance.ts","packages/kernel/kernel-contracts/src/skill/lib/skill-source.ts","packages/kernel/kernel-contracts/src/skill/lib/skill.ts","packages/kernel/kernel-contracts/src/skill/lib/system-skill-baseline.ts","packages/kernel/kernel-contracts/src/space/index.ts","packages/kernel/kernel-contracts/src/space/lib/exact-resolution-owner.ts","packages/kernel/kernel-contracts/src/space/lib/owner-space-projection.ts","packages/kernel/kernel-contracts/src/space/lib/owner-space-ref.ts","packages/kernel/kernel-contracts/src/space/lib/scoped-resolution.ts","packages/kernel/kernel-contracts/src/space/lib/space-classification.ts","packages/kernel/kernel-contracts/src/space/lib/space-kind-rank.ts","packages/kernel/kernel-contracts/src/space/lib/space-promotion.ts","packages/kernel/kernel-contracts/src/space/lib/space-ref-parser.ts","packages/kernel/kernel-contracts/src/space/lib/space-traversal.ts","packages/kernel/kernel-contracts/src/space/lib/space.ts","packages/kernel/kernel-contracts/src/subject/index.ts","packages/kernel/kernel-contracts/src/subject/lib/delegated-authority.ts","packages/kernel/kernel-contracts/src/subject/lib/subject.ts","packages/kernel/kernel-contracts/src/subject/lib/token-class.ts","packages/kernel/kernel-contracts/src/surface/index.ts","packages/kernel/kernel-contracts/src/surface/lib/surface-contribution.ts","packages/kernel/kernel-contracts/src/surface/lib/surface-kind.ts","packages/kernel/kernel-contracts/src/surface/lib/vista-surface.ts","packages/kernel/kernel-contracts/src/tenant/index.ts","packages/kernel/kernel-contracts/src/tenant/lib/caller-org-scope.ts","packages/kernel/kernel-contracts/src/tenant/lib/org-id.ts","packages/kernel/kernel-contracts/src/tenant/lib/org-role.ts","packages/kernel/kernel-contracts/src/tenant/lib/platform-org.ts","packages/kernel/kernel-contracts/src/worker-runtime/index.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/capabilities.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/enums.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/runtime-layout-adapter.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/runtime-layout-profile.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/runtime-profile-diagnostics.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/runtime-profile.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/runtime.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/schemas.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/workspace-sandbox.ts","packages/kernel/kernel-contracts/src/worker-runtime/lib/workspace-slot-paths.ts","packages/kernel/kernel-contracts/src/workflow/index.ts","packages/kernel/kernel-contracts/src/workflow/lib/action-ref.ts","packages/kernel/kernel-contracts/src/workflow/lib/activity-outputs.ts","packages/kernel/kernel-contracts/src/workflow/lib/agent-role.ts","packages/kernel/kernel-contracts/src/workflow/lib/artifact-ref.ts","packages/kernel/kernel-contracts/src/workflow/lib/biome-task-queue.ts","packages/kernel/kernel-contracts/src/workflow/lib/briefcase.ts","packages/kernel/kernel-contracts/src/workflow/lib/catalog-taxonomies.ts","packages/kernel/kernel-contracts/src/workflow/lib/compiled-run.ts","packages/kernel/kernel-contracts/src/workflow/lib/compiled-workspace-manifest.ts","packages/kernel/kernel-contracts/src/workflow/lib/concurrency-group.ts","packages/kernel/kernel-contracts/src/workflow/lib/domain-tag.ts","packages/kernel/kernel-contracts/src/workflow/lib/enums.ts","packages/kernel/kernel-contracts/src/workflow/lib/errors.ts","packages/kernel/kernel-contracts/src/workflow/lib/job-run.ts","packages/kernel/kernel-contracts/src/workflow/lib/model-ref.ts","packages/kernel/kernel-contracts/src/workflow/lib/mount-plan.ts","packages/kernel/kernel-contracts/src/workflow/lib/nexus-endpoint.ts","packages/kernel/kernel-contracts/src/workflow/lib/phase-report.ts","packages/kernel/kernel-contracts/src/workflow/lib/platform-task-queue.ts","packages/kernel/kernel-contracts/src/workflow/lib/review-subject/index.ts","packages/kernel/kernel-contracts/src/workflow/lib/review-subject/kinds.ts","packages/kernel/kernel-contracts/src/workflow/lib/review-subject/narrow.ts","packages/kernel/kernel-contracts/src/workflow/lib/review-subject/producers/artifact-ref.ts","packages/kernel/kernel-contracts/src/workflow/lib/review-subject/producers/string.ts","packages/kernel/kernel-contracts/src/workflow/lib/role-capability.ts","packages/kernel/kernel-contracts/src/workflow/lib/run-progress.ts","packages/kernel/kernel-contracts/src/workflow/lib/snapshot-ref.ts","packages/kernel/kernel-contracts/src/workflow/lib/trigger-payload.ts","packages/kernel/kernel-contracts/src/workflow/lib/trust-domain-namespace.ts","packages/kernel/kernel-contracts/src/workflow/lib/variable-requirement.ts","packages/kernel/kernel-contracts/src/workflow/lib/work-item-payloads.ts","packages/kernel/kernel-contracts/src/workflow/lib/workflow-control.ts","packages/kernel/kernel-contracts/src/workflow/lib/workspace-manifest-enums.ts"],"version":6}

package/dist/edition-protocol/edition-protocol.json

@@ -1 +1 @@
-{"contentDigest":"2c4bcce2be8638c87d5ace750fef112b3d6e212bab13335037def41695f1f3bc","provisional":false,"version":4}
+{"contentDigest":"9cb62daff35705a5e1878503b2974a44e780526329ed59ad94e03042be20cffa","provisional":false,"version":6}

package/dist/edition-protocol/lib/edition-protocol.js

@@ -2,9 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EDITION_CONTRACT_SCHEMA_FILE = exports.EDITION_PROTOCOL_IDENTITY_FILE = exports.EDITION_PROTOCOL_ENTRY_MODULES = exports.EDITION_PROTOCOL = void 0;
 exports.EDITION_PROTOCOL = Object.freeze({
-    version: 4,
+    version: 6,
     provisional: false,
-    contentDigest: '2c4bcce2be8638c87d5ace750fef112b3d6e212bab13335037def41695f1f3bc',
+    contentDigest: '9cb62daff35705a5e1878503b2974a44e780526329ed59ad94e03042be20cffa',
 });
 exports.EDITION_PROTOCOL_ENTRY_MODULES = Object.freeze([
     'authorization-module',

package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.d.ts

@@ -8,8 +8,13 @@ export interface ResolvedDeploymentFixture {
 }
 type TrustDomain = ResolvedDeployment['biomes'][number]['trustDomain'];
 export declare const FIXTURE_BIOME_ID = "example-biome";
+export declare const FIXTURE_OPERATION_DOMAIN = "example";
+export declare const FIXTURE_OPERATION = "example:thing.read@1";
+export declare const FIXTURE_SWEEP = "index-maintenance";
 export declare function canonicalResolvedDeploymentFixture(): Promise<ResolvedDeploymentFixture>;
 export declare function withBiome(fixture: ResolvedDeploymentFixture, biomeId: string, trustDomain?: TrustDomain): Promise<ResolvedDeploymentFixture>;
+export declare function withOperationRequirements(fixture: ResolvedDeploymentFixture, biomeId: string, component: string, operations: readonly string[]): Promise<ResolvedDeploymentFixture>;
+export declare function withOrganizationSweepRequirements(fixture: ResolvedDeploymentFixture, biomeId: string, component: string, sweeps: readonly string[]): Promise<ResolvedDeploymentFixture>;
 export declare function withTrustDomain(fixture: ResolvedDeploymentFixture, biomeId: string, trustDomain: TrustDomain): ResolvedDeploymentFixture;
 export declare function verifiedFixture(fixture: ResolvedDeploymentFixture): Promise<VerifiedEditionResolution>;
 export declare function verifiedUnsplitFixture(fixture: ResolvedDeploymentFixture): Promise<VerifiedUnsplitEditionResolution>;

package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-deployment-fixture.d.ts","sourceRoot":"","sources":["../../../src/resolved-deployment-fixture/lib/resolved-deployment-fixture.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAWL,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACtC,MAAM,oBAAoB,CAAC;AAQ5B,MAAM,WAAW,yBAAyB;IAExC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAEtC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAE/B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IAErC,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC;CAC7C;AAED,KAAK,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;AAevE,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AA0KhD,wBAAgB,kCAAkC,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAEvF;AAMD,wBAAsB,SAAS,CAC7B,OAAO,EAAE,yBAAyB,EAClC,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,WAA2B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAMpC;AAOD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,yBAAyB,EAClC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,WAAW,GACvB,yBAAyB,CAY3B;AAGD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,yBAAyB,CAAC,CAEpC;AAQD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,gCAAgC,CAAC,CAc3C"}
+{"version":3,"file":"resolved-deployment-fixture.d.ts","sourceRoot":"","sources":["../../../src/resolved-deployment-fixture/lib/resolved-deployment-fixture.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAcL,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACtC,MAAM,oBAAoB,CAAC;AAQ5B,MAAM,WAAW,yBAAyB;IAExC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAEtC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAE/B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IAErC,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC;CAC7C;AAED,KAAK,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;AAevE,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAGhD,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAGlD,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AAGxD,eAAO,MAAM,aAAa,sBAAsB,CAAC;AA0LjD,wBAAgB,kCAAkC,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAEvF;AAMD,wBAAsB,SAAS,CAC7B,OAAO,EAAE,yBAAyB,EAClC,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,WAA2B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAMpC;AAQD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,yBAAyB,EAClC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,yBAAyB,CAAC,CAapC;AAQD,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,yBAAyB,EAClC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,SAAS,MAAM,EAAE,GACxB,OAAO,CAAC,yBAAyB,CAAC,CAapC;AAOD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,yBAAyB,EAClC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,WAAW,GACvB,yBAAyB,CAY3B;AAGD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,yBAAyB,CAAC,CAEpC;AAQD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,gCAAgC,CAAC,CAc3C"}