@zhin.js/agent 1.1.13 → 1.1.14

package/lib/plugin-runtime/workroom-payload-processor-recall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-payload-processor-recall.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-payload-processor-recall.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,KAAK,EACV,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,EACnB,gCAAgC,EACjC,MAAM,yCAAyC,CAAC;AAOjD,MAAM,WAAW,6BAA8B,SAAQ,gCAAgC;IACrF,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;QACpB,QAAQ,EAAE,oBAAoB,CAAC;QAC/B,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACtC,UAAU,CAAC,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAC/C,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,kBAAkB,EAAE,MAAM,CAAC;QAC3B,qBAAqB,EAAE,MAAM,CAAC;QAC9B,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACxD;AAED,mFAAmF;AACnF,eAAO,MAAM,sCAAsC,wEAGlD,CAAC;AAEF,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,aAAa,EAAE,SAAS,QAAQ,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAC7E,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;QACzB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qCAAqC;IACpD,OAAO,CACL,QAAQ,EAAE,oBAAoB,EAC9B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,iCAAiC,GAAG,SAAS,CAAC,CAAC;CAC3D;AAED,0FAA0F;AAC1F,eAAO,MAAM,8CAA8C,gFAIxD,CAAC;AAEJ,MAAM,WAAW,kCAAmC,SAAQ,yBAAyB;IACnF,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7D;AAED,8EAA8E;AAC9E,eAAO,MAAM,2CAA2C,6EAIrD,CAAC;AAEJ,8EAA8E;AAC9E,qBAAa,kCAAmC,YAAW,yBAAyB;;IACtE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrC,QAAQ,EAAE,yBAAyB,CAAC;QACpC,gBAAgB,EAAE,MAAM,kCAAkC,GAAG,SAAS,CAAC;KACxE,CAAC;gBAHmB,OAAO,EAAE,QAAQ,CAAC;QACrC,QAAQ,EAAE,yBAAyB,CAAC;QACpC,gBAAgB,EAAE,MAAM,kCAAkC,GAAG,SAAS,CAAC;KACxE,CAAC;IAEI,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvE,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAO/F,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAkCxG;AAED;;;GAGG;AACH,qBAAa,mCAAoC,YAAW,2BAA2B;IACzE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrC,OAAO,EAAE,8BAA8B,CAAC;QACxC,KAAK,EAAE,qCAAqC,CAAC;QAC7C,QAAQ,EAAE,6BAA6B,CAAC;KACzC,CAAC;gBAJmB,OAAO,EAAE,QAAQ,CAAC;QACrC,OAAO,EAAE,8BAA8B,CAAC;QACxC,KAAK,EAAE,qCAAqC,CAAC;QAC7C,QAAQ,EAAE,6BAA6B,CAAC;KACzC,CAAC;IAEI,KAAK,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;CA+C/F"}

package/lib/plugin-runtime/workroom-payload-processor-recall.js

@@ -0,0 +1,189 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { createWorkroomEffectIntent, } from '../workroom/effect-ledger.js';
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from '../workroom/canonical-value.js';
+/** Root-only issuer. Ordinary plugins must never synthesize Lifecycle receipts. */
+export const workroomPayloadPurgeReceiptIssuerToken = createToken('zhin.agent.workroom-payload-purge-receipt-issuer', 'Root trusted exact Payload purge receipt issuer and persisted-proof verifier');
+/** Trusted P8 admission facts; message metadata and model output cannot provide these. */
+export const workroomPayloadProcessorRecallEffectFactsToken = createToken('zhin.agent.workroom-payload-processor-recall-effect-facts', 'Root trusted P8 authorization facts for one exact processor recall dispatch');
+/** Root-owned external processor capability; credentials remain inside it. */
+export const workroomPayloadProcessorRecallProviderToken = createToken('zhin.agent.workroom-payload-processor-recall-provider', 'Generation-owned authenticated external processor recall capability');
+/** Routes the new P8 operation without weakening the existing Git gateway. */
+export class WorkroomPayloadEffectGatewayRouter {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async prepare(state, signal) {
+        const { gateway } = this.#gateway(state);
+        await gateway.prepare?.(state, signal);
+    }
+    async execute(state, signal) {
+        const selected = this.#gateway(state);
+        return this.#assertReceipt(state, await selected.gateway.execute(state, signal), selected.processor);
+    }
+    async reconcile(state, signal) {
+        const selected = this.#gateway(state);
+        return this.#assertReceipt(state, await selected.gateway.reconcile(state, signal), selected.processor);
+    }
+    #gateway(state) {
+        if (state.intent.operation.kind !== 'processor_recall') {
+            return { gateway: this.options.fallback };
+        }
+        const provider = this.options.resolveProcessor();
+        if (!provider)
+            throw new Error('Generation-owned processor recall provider is unavailable');
+        if (!provider.provider.id.trim() || !isDigest(provider.provider.digest)) {
+            throw new Error('Processor recall provider identity is invalid');
+        }
+        return { gateway: provider, processor: provider };
+    }
+    #assertReceipt(state, receipt, provider) {
+        if (state.intent.operation.kind !== 'processor_recall')
+            return receipt;
+        if (!provider || receipt.intentId !== state.intent.id || receipt.intentDigest !== state.intent.digest
+            || canonicalWorkroomJson(receipt.provider) !== canonicalWorkroomJson(provider.provider)) {
+            throw new Error('Processor recall Effect gateway receipt binding drift');
+        }
+        return receipt;
+    }
+}
+/**
+ * Lifecycle deletion adapter backed by the durable P8 Effect ledger. A pending
+ * or unknown Effect can only produce outcome_unknown, never a deletion claim.
+ */
+export class PayloadProcessorRecallEffectAdapter {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async purge(dispatch, signal) {
+        signal.throwIfAborted();
+        if (dispatch.location.deletionMode !== 'processor_recall') {
+            throw new Error('Processor recall Effect adapter received a different deletion mode');
+        }
+        const facts = await this.options.facts.resolve(dispatch, signal);
+        assertFacts(facts, dispatch);
+        const intent = createWorkroomEffectIntent({
+            projectId: dispatch.governance.request.projectId,
+            runId: facts.runId,
+            taskKey: facts.taskKey,
+            taskRevision: facts.taskRevision,
+            candidateHash: dispatch.objectAuthorityDigest,
+            capability: facts.capability,
+            operation: {
+                kind: 'processor_recall',
+                parameters: {
+                    purgeId: dispatch.id,
+                    objectId: dispatch.governance.request.objectId,
+                    locationId: dispatch.location.id,
+                    locationAuthorityDigest: dispatch.location.authorityDigest,
+                    locationManifestDigest: dispatch.locationManifestDigest,
+                    attempt: dispatch.attempt,
+                    fence: dispatch.fence,
+                    requestDigest: dispatch.requestDigest,
+                },
+            },
+            target: facts.target,
+            preconditions: facts.preconditions,
+            risk: facts.risk,
+            reversibility: { kind: 'irreversible' },
+            idempotencyKey: `payload-processor-recall:${dispatch.id}:${dispatch.attempt}:${dispatch.fence}`,
+            createdAt: facts.createdAt,
+        });
+        const state = await this.options.effects.record(intent);
+        assertEffectState(state, intent.id, dispatch);
+        const observation = effectObservation(state);
+        const receipt = await this.options.receipts.issue({
+            dispatch,
+            ...observation,
+        }, signal);
+        assertReceiptBinding(receipt, dispatch);
+        if (!await this.options.receipts.verify(receipt, dispatch)) {
+            throw new Error('Payload processor recall receipt issuer rejected its persisted proof');
+        }
+        return receipt;
+    }
+}
+function assertFacts(facts, dispatch) {
+    if (!facts || facts.version !== 1 || facts.dispatchDigest !== dispatch.digest
+        || facts.digest !== digestWithout(facts) || !isDigest(facts.authorityDigest)
+        || facts.target.ref !== dispatch.location.id
+        || facts.target.digest !== dispatch.location.authorityDigest
+        || canonicalWorkroomJson(facts.preconditions) !== canonicalWorkroomJson([{
+                ref: 'location-manifest', digest: dispatch.locationManifestDigest,
+            }])
+        || !Number.isSafeInteger(facts.createdAt) || facts.createdAt < dispatch.requestedAt) {
+        throw new Error('Trusted processor recall Effect facts are unavailable or stale');
+    }
+}
+function assertEffectState(state, intentId, dispatch) {
+    if (state.projectId !== dispatch.governance.request.projectId
+        || state.intent.id !== intentId
+        || state.intent.operation.kind !== 'processor_recall'
+        || state.intent.operation.parameters.purgeId !== dispatch.id
+        || state.intent.operation.parameters.attempt !== dispatch.attempt
+        || state.intent.operation.parameters.fence !== dispatch.fence
+        || (state.status === 'committed'
+            && (!state.receipt || state.receipt.outcome !== 'committed'
+                || state.receipt.intentId !== state.intent.id
+                || state.receipt.intentDigest !== state.intent.digest))
+        || (state.status === 'failed'
+            && (!state.receipt || state.receipt.outcome !== 'failed'
+                || state.receipt.intentId !== state.intent.id
+                || state.receipt.intentDigest !== state.intent.digest))) {
+        throw new Error('P8 processor recall Effect state binding drift');
+    }
+}
+function effectObservation(state) {
+    if (state.status === 'committed' && state.receipt) {
+        return deepFreeze({
+            status: 'confirmed',
+            providerReceiptRef: state.receipt.remoteRef,
+            providerReceiptDigest: state.receipt.remoteDigest,
+            authenticatedBy: state.receipt.authenticatedBy,
+            observedAt: state.receipt.observedAt,
+        });
+    }
+    if (state.status === 'failed' && state.receipt) {
+        return deepFreeze({
+            status: 'failed',
+            reasonCode: 'provider_denied',
+            providerReceiptRef: state.receipt.remoteRef,
+            providerReceiptDigest: state.receipt.remoteDigest,
+            authenticatedBy: state.receipt.authenticatedBy,
+            observedAt: state.receipt.observedAt,
+        });
+    }
+    return deepFreeze({
+        status: 'outcome_unknown',
+        reasonCode: 'unknown_external_copy',
+        providerReceiptRef: state.receipt?.remoteRef ?? `effect-state:${state.intent.id}`,
+        providerReceiptDigest: state.receipt?.remoteDigest ?? digest({
+            effectId: state.intent.id, effectStatus: state.status, sequence: state.sequence,
+        }),
+        authenticatedBy: state.receipt?.authenticatedBy ?? 'p8-effect-ledger',
+        observedAt: state.receipt?.observedAt ?? state.intent.createdAt,
+    });
+}
+function assertReceiptBinding(receipt, dispatch) {
+    const { digest: supplied, ...body } = receipt;
+    if (receipt.version !== 1 || receipt.purgeId !== dispatch.id
+        || receipt.projectId !== dispatch.governance.request.projectId
+        || receipt.objectId !== dispatch.governance.request.objectId
+        || receipt.locationId !== dispatch.location.id
+        || receipt.locationAuthorityDigest !== dispatch.location.authorityDigest
+        || receipt.locationManifestDigest !== dispatch.locationManifestDigest
+        || receipt.attempt !== dispatch.attempt || receipt.fence !== dispatch.fence
+        || receipt.requestDigest !== dispatch.requestDigest
+        || !isDigest(receipt.authorityDigest) || supplied !== digest(body)) {
+        throw new Error('Payload processor recall receipt binding drift');
+    }
+}
+function digestWithout(value) {
+    const { digest: _digest, ...body } = value;
+    return digest(body);
+}
+function isDigest(value) {
+    return typeof value === 'string' && /^sha256:[a-f\d]{64}$/u.test(value);
+}
+//# sourceMappingURL=workroom-payload-processor-recall.js.map

package/lib/plugin-runtime/workroom-payload-processor-recall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-payload-processor-recall.js","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-payload-processor-recall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,0BAA0B,GAG3B,MAAM,8BAA8B,CAAC;AAStC,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,gCAAgC,CAAC;AAexC,mFAAmF;AACnF,MAAM,CAAC,MAAM,sCAAsC,GAAG,WAAW,CAC/D,kDAAkD,EAClD,8EAA8E,CAC/E,CAAC;AA4BF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,8CAA8C,GACzD,WAAW,CACT,2DAA2D,EAC3D,6EAA6E,CAC9E,CAAC;AAMJ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,2CAA2C,GACtD,WAAW,CACT,uDAAuD,EACvD,qEAAqE,CACtE,CAAC;AAEJ,8EAA8E;AAC9E,MAAM,OAAO,kCAAkC;IACxB;IAArB,YAAqB,OAGnB;QAHmB,YAAO,GAAP,OAAO,CAG1B;IAAG,CAAC;IAEN,KAAK,CAAC,OAAO,CAAC,KAA0B,EAAE,MAAmB;QAC3D,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA0B,EAAE,MAAmB;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,cAAc,CACxB,KAAK,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,SAAS,CACzE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAA0B,EAAE,MAAmB;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,cAAc,CACxB,KAAK,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,SAAS,CAC3E,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,KAA0B;QAIjC,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACjD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC5F,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACpD,CAAC;IAED,cAAc,CACZ,KAA0B,EAC1B,OAAqC,EACrC,QAA6C;QAE7C,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,OAAO,CAAC;QACvE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM;eAChG,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,mCAAmC;IACzB;IAArB,YAAqB,OAInB;QAJmB,YAAO,GAAP,OAAO,CAI1B;IAAG,CAAC;IAEN,KAAK,CAAC,KAAK,CAAC,QAA8B,EAAE,MAAmB;QAC7D,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,KAAK,kBAAkB,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjE,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,0BAA0B,CAAC;YACxC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS;YAChD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,aAAa,EAAE,QAAQ,CAAC,qBAAqB;YAC7C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE;gBACT,IAAI,EAAE,kBAAkB;gBACxB,UAAU,EAAE;oBACV,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ;oBAC9C,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBAChC,uBAAuB,EAAE,QAAQ,CAAC,QAAQ,CAAC,eAAe;oBAC1D,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;oBACvD,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,aAAa,EAAE,QAAQ,CAAC,aAAa;iBACtC;aACF;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;YACvC,cAAc,EAAE,4BAA4B,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE;YAC/F,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChD,QAAQ;YACR,GAAG,WAAW;SACf,EAAE,MAAM,CAAC,CAAC;QACX,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,SAAS,WAAW,CAClB,KAAoD,EACpD,QAA8B;IAE9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM;WACxE,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC;WACzE,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE;WACzC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ,CAAC,eAAe;WACzD,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,qBAAqB,CAAC,CAAC;gBACvE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,CAAC,sBAAsB;aAClE,CAAC,CAAC;WACA,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA0B,EAC1B,QAAgB,EAChB,QAA8B;IAE9B,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS;WACxD,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ;WAC5B,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,kBAAkB;WAClD,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE;WACzD,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;WAC9D,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;WAC1D,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW;eAC3B,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,WAAW;mBACtD,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE;mBAC1C,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;WACxD,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ;eACxB,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;mBACnD,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE;mBAC1C,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA0B;IAGnD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClD,OAAO,UAAU,CAAC;YAChB,MAAM,EAAE,WAAoB;YAC5B,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAC3C,qBAAqB,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;YACjD,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe;YAC9C,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;SACrC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/C,OAAO,UAAU,CAAC;YAChB,MAAM,EAAE,QAAiB;YACzB,UAAU,EAAE,iBAA0B;YACtC,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAC3C,qBAAqB,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;YACjD,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe;YAC9C,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;SACrC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;QAChB,MAAM,EAAE,iBAA0B;QAClC,UAAU,EAAE,uBAAgC;QAC5C,kBAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,IAAI,gBAAgB,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE;QACjF,qBAAqB,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,IAAI,MAAM,CAAC;YAC3D,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;SAChF,CAAC;QACF,eAAe,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,IAAI,kBAAkB;QACrE,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS;KAChE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA4B,EAAE,QAA8B;IACxF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC9C,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE;WACvD,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS;WAC3D,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ;WACzD,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE;WAC3C,OAAO,CAAC,uBAAuB,KAAK,QAAQ,CAAC,QAAQ,CAAC,eAAe;WACrE,OAAO,CAAC,sBAAsB,KAAK,QAAQ,CAAC,sBAAsB;WAClE,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;WACxE,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;WAChD,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAyC,KAAQ;IACrE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC"}

package/lib/plugin-runtime/workroom-plan-gate-authority.d.ts

@@ -0,0 +1,7 @@
+import type { WorkroomCatalog } from '../workroom/catalog.js';
+import type { WorkroomPlanGateAuthorityPort } from '../workroom/plan-approval-control.js';
+export declare const workroomPlanGateAuthorityToken: import("@zhin.js/plugin-runtime").Token<WorkroomPlanGateAuthorityPort>;
+export declare function createGenerationWorkroomPlanGateAuthority(resolve: () => WorkroomPlanGateAuthorityPort | undefined): WorkroomPlanGateAuthorityPort;
+/** Persistent Catalog membership is the authority; message metadata is never consulted. */
+export declare function createCatalogWorkroomPlanGateAuthority(catalog: WorkroomCatalog): WorkroomPlanGateAuthorityPort;
+//# sourceMappingURL=workroom-plan-gate-authority.d.ts.map

package/lib/plugin-runtime/workroom-plan-gate-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-plan-gate-authority.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-plan-gate-authority.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EACV,6BAA6B,EAG9B,MAAM,sCAAsC,CAAC;AAE9C,eAAO,MAAM,8BAA8B,wEAG1C,CAAC;AAEF,wBAAgB,yCAAyC,CACvD,OAAO,EAAE,MAAM,6BAA6B,GAAG,SAAS,GACvD,6BAA6B,CAQ/B;AAED,2FAA2F;AAC3F,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,eAAe,GACvB,6BAA6B,CAwB/B"}

package/lib/plugin-runtime/workroom-plan-gate-authority.js

@@ -0,0 +1,40 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { digestCanonicalWorkroomValue } from '../workroom/canonical-value.js';
+export const workroomPlanGateAuthorityToken = createToken('zhin.agent.workroom-plan-gate-authority', 'Generation-owned authenticated human Sponsor authority for pre-execution Plan Gates');
+export function createGenerationWorkroomPlanGateAuthority(resolve) {
+    return Object.freeze({
+        async authorize(input) {
+            const current = resolve();
+            if (!current)
+                return Object.freeze({ authorized: false, reason: 'authority_not_installed' });
+            return await current.authorize(input);
+        },
+    });
+}
+/** Persistent Catalog membership is the authority; message metadata is never consulted. */
+export function createCatalogWorkroomPlanGateAuthority(catalog) {
+    return Object.freeze({
+        async authorize(input) {
+            const snapshot = await catalog.read();
+            const definition = snapshot.definitions[input.projectId];
+            if (!definition || definition.enabled === false) {
+                return Object.freeze({ authorized: false, reason: 'project_not_active' });
+            }
+            if (digestCanonicalWorkroomValue(definition) !== input.projectDigest) {
+                return Object.freeze({ authorized: false, reason: 'project_authority_stale' });
+            }
+            if (!definition.sponsors?.includes(input.sponsorPrincipalId)) {
+                return Object.freeze({ authorized: false, reason: 'principal_is_not_project_sponsor' });
+            }
+            if (!/^human-ingress:sha256:[a-f0-9]{64}$/u.test(input.sponsorAuthorityRef)) {
+                return Object.freeze({ authorized: false, reason: 'principal_source_proof_invalid' });
+            }
+            return Object.freeze({
+                authorized: true,
+                principalId: input.sponsorPrincipalId,
+                authorizationRef: `workroom-catalog:${encodeURIComponent(input.projectRevision)}:${encodeURIComponent(input.projectId)}:sponsor:${encodeURIComponent(input.sponsorPrincipalId)}`,
+            });
+        },
+    });
+}
+//# sourceMappingURL=workroom-plan-gate-authority.js.map

package/lib/plugin-runtime/workroom-plan-gate-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-plan-gate-authority.js","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-plan-gate-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAQ9E,MAAM,CAAC,MAAM,8BAA8B,GAAG,WAAW,CACvD,yCAAyC,EACzC,qFAAqF,CACtF,CAAC;AAEF,MAAM,UAAU,yCAAyC,CACvD,OAAwD;IAExD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,SAAS,CAAC,KAAyC;YACvD,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC7F,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,sCAAsC,CACpD,OAAwB;IAExB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,SAAS,CAAC,KAAyC;YACvD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAChD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,4BAA4B,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;gBACrE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC5E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,kBAAkB;gBACrC,gBAAgB,EAAE,oBAAoB,kBAAkB,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,kBAAkB,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE;aACjL,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/lib/plugin-runtime/workroom-portfolio-capacity.d.ts

@@ -0,0 +1,132 @@
+import { type PortfolioCapacityGrant, type PortfolioCapacityRequest, type PortfolioClockAuthority, type PortfolioGovernanceProof, type PortfolioGrantAssignmentFailureReason, type PortfolioJournalRepository, type PortfolioKernelCommandAuthority, type PortfolioPolicySnapshot, type PortfolioUsageGatewayAuthority, type PortfolioValidatedBundleAuthority } from '../portfolio/portfolio-journal.js';
+import type { ValidatedAtomicResourceBundle } from '../portfolio/resource-bundle.js';
+export interface PortfolioPolicyAuthorityPort {
+    resolve(portfolioId: string): Promise<Readonly<{
+        policy: PortfolioPolicySnapshot;
+        governance: PortfolioGovernanceProof;
+    }> | undefined>;
+}
+export interface PortfolioAtomicBundleAuthorityPort {
+    validate(input: WorkroomSchedulerCapacityRequest): Promise<ValidatedAtomicResourceBundle | undefined>;
+}
+export interface PortfolioKernelCommandAuthorityPort {
+    authorize(input: Readonly<{
+        generation: number;
+        portfolioId: string;
+        action: 'consume' | 'assignment_failed' | 'reclaim_acknowledge' | 'renew';
+        grant: PortfolioCapacityGrant;
+        assignmentRef: string;
+        reclaimId?: string;
+        outcome?: 'checkpointed' | 'declined';
+        checkpointRef?: string;
+        checkpointDigest?: string;
+        heartbeatSequence?: number;
+        clockSequence?: number;
+        clockDigest?: string;
+        policyDigest?: string;
+        usageSettlementCursor?: number;
+        failureReason?: PortfolioGrantAssignmentFailureReason;
+        kernelSequence?: number;
+        kernelFactDigest?: string;
+    }>): Promise<PortfolioKernelCommandAuthority | undefined>;
+}
+export interface PortfolioUsageGatewayAuthorityPort {
+    authenticate(input: Readonly<{
+        generation: number;
+        portfolioId: string;
+        receiptId: string;
+        grant: PortfolioCapacityGrant;
+        actualCostMicros: number;
+        settlementRef: string;
+    }>): Promise<PortfolioUsageGatewayAuthority | undefined>;
+}
+export interface PortfolioClockAuthorityPort {
+    read(input: Readonly<{
+        generation: number;
+        portfolioId: string;
+    }>): Promise<PortfolioClockAuthority | undefined>;
+}
+export interface WorkroomSchedulerCapacityRequest {
+    readonly generation: number;
+    readonly portfolioId: string;
+    readonly tenantId: string;
+    readonly catalogRevision: number;
+    readonly catalogDigest: string;
+    readonly capacityRequest: PortfolioCapacityRequest;
+}
+/** Minimal Scheduler boundary. It carries identities and resource quantities, never Task/Run content. */
+export interface WorkroomSchedulerCapacityRequestPort {
+    request(input: WorkroomSchedulerCapacityRequest): Promise<PortfolioCapacityGrant | null>;
+}
+export declare const portfolioJournalRepositoryToken: import("@zhin.js/plugin-runtime").Token<PortfolioJournalRepository>;
+export declare const portfolioPolicyAuthorityToken: import("@zhin.js/plugin-runtime").Token<PortfolioPolicyAuthorityPort>;
+export declare const portfolioAtomicBundleAuthorityToken: import("@zhin.js/plugin-runtime").Token<PortfolioAtomicBundleAuthorityPort>;
+export declare const portfolioKernelCommandAuthorityToken: import("@zhin.js/plugin-runtime").Token<PortfolioKernelCommandAuthorityPort>;
+export declare const portfolioUsageGatewayAuthorityToken: import("@zhin.js/plugin-runtime").Token<PortfolioUsageGatewayAuthorityPort>;
+export declare const portfolioClockAuthorityToken: import("@zhin.js/plugin-runtime").Token<PortfolioClockAuthorityPort>;
+export declare const workroomSchedulerCapacityRequestToken: import("@zhin.js/plugin-runtime").Token<WorkroomSchedulerCapacityRequestPort>;
+export declare const portfolioCapacityRuntimeToken: import("@zhin.js/plugin-runtime").Token<GenerationOwnedPortfolioCapacityRuntime>;
+export interface GenerationOwnedPortfolioCapacityRuntimeOptions {
+    readonly generation: number;
+    readonly repository: PortfolioJournalRepository;
+    readonly policyAuthority: PortfolioPolicyAuthorityPort;
+    readonly bundleAuthority: PortfolioAtomicBundleAuthorityPort;
+    readonly kernelAuthority: PortfolioKernelCommandAuthorityPort;
+    readonly usageAuthority: PortfolioUsageGatewayAuthorityPort;
+    readonly clockAuthority: PortfolioClockAuthorityPort;
+}
+export declare class GenerationOwnedPortfolioCapacityRuntime implements WorkroomSchedulerCapacityRequestPort {
+    #private;
+    readonly options: GenerationOwnedPortfolioCapacityRuntimeOptions;
+    constructor(options: GenerationOwnedPortfolioCapacityRuntimeOptions);
+    request(input: WorkroomSchedulerCapacityRequest): Promise<PortfolioCapacityGrant | null>;
+    consume(input: Readonly<{
+        generation: number;
+        portfolioId: string;
+        grantId: string;
+        projectId: string;
+        fence: number;
+        assignmentRef: string;
+    }>): Promise<void>;
+    failAssignment(input: Readonly<{
+        generation: number;
+        portfolioId: string;
+        grantId: string;
+        projectId: string;
+        fence: number;
+        assignmentRef: string;
+        reason: PortfolioGrantAssignmentFailureReason;
+        kernelSequence: number;
+        kernelFactDigest: string;
+    }>): Promise<void>;
+    settleUsage(input: Readonly<{
+        generation: number;
+        portfolioId: string;
+        receiptId: string;
+        grantId: string;
+        actualCostMicros: number;
+        settlementRef: string;
+    }>): Promise<void>;
+    acknowledgeReclaim(input: Readonly<{
+        generation: number;
+        portfolioId: string;
+        reclaimId: string;
+        projectId: string;
+        fence: number;
+        outcome: 'checkpointed' | 'declined';
+        checkpointRef?: string;
+        checkpointDigest?: string;
+    }>): Promise<void>;
+    renewLease(input: Readonly<{
+        generation: number;
+        portfolioId: string;
+        grantId: string;
+        projectId: string;
+        fence: number;
+        assignmentRef: string;
+        heartbeatSequence: number;
+    }>): Promise<void>;
+    advanceClock(portfolioId: string): Promise<void>;
+}
+export declare function createPortfolioValidatedBundleAuthority(input: WorkroomSchedulerCapacityRequest, validated: ValidatedAtomicResourceBundle): PortfolioValidatedBundleAuthority;
+//# sourceMappingURL=workroom-portfolio-capacity.d.ts.map

package/lib/plugin-runtime/workroom-portfolio-capacity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-portfolio-capacity.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-portfolio-capacity.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,qCAAqC,EAC1C,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,iCAAiC,EACvC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAMrF,MAAM,WAAW,4BAA4B;IAC3C,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC7C,MAAM,EAAE,uBAAuB,CAAC;QAChC,UAAU,EAAE,wBAAwB,CAAC;KACtC,CAAC,GAAG,SAAS,CAAC,CAAC;CACjB;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;CACvG;AAED,MAAM,WAAW,mCAAmC;IAClD,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,SAAS,GAAG,mBAAmB,GAAG,qBAAqB,GAAG,OAAO,CAAC;QAC1E,KAAK,EAAE,sBAAsB,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC;QACtC,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,aAAa,CAAC,EAAE,qCAAqC,CAAC;QACtD,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC,GAAG,OAAO,CAAC,+BAA+B,GAAG,SAAS,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,kCAAkC;IACjD,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC3B,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,sBAAsB,CAAC;QAC9B,gBAAgB,EAAE,MAAM,CAAC;QACzB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC,GAAG,OAAO,CAAC,8BAA8B,GAAG,SAAS,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;CAClH;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,wBAAwB,CAAC;CACpD;AAED,yGAAyG;AACzG,MAAM,WAAW,oCAAoC;IACnD,OAAO,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;CAC1F;AAED,eAAO,MAAM,+BAA+B,qEAG3C,CAAC;AAEF,eAAO,MAAM,6BAA6B,uEAGzC,CAAC;AAEF,eAAO,MAAM,mCAAmC,6EAG/C,CAAC;AAEF,eAAO,MAAM,oCAAoC,8EAGhD,CAAC;AAEF,eAAO,MAAM,mCAAmC,6EAG/C,CAAC;AAEF,eAAO,MAAM,4BAA4B,sEAGxC,CAAC;AAEF,eAAO,MAAM,qCAAqC,+EAGjD,CAAC;AAEF,eAAO,MAAM,6BAA6B,kFAGzC,CAAC;AAEF,MAAM,WAAW,8CAA8C;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,4BAA4B,CAAC;IACvD,QAAQ,CAAC,eAAe,EAAE,kCAAkC,CAAC;IAC7D,QAAQ,CAAC,eAAe,EAAE,mCAAmC,CAAC;IAC9D,QAAQ,CAAC,cAAc,EAAE,kCAAkC,CAAC;IAC5D,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;CACtD;AAED,qBAAa,uCAAwC,YAAW,oCAAoC;;IAItF,QAAQ,CAAC,OAAO,EAAE,8CAA8C;gBAAvD,OAAO,EAAE,8CAA8C;IAOtE,OAAO,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAmBxF,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC5B,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAC5E,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;KACtC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAYZ,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAC5E,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,qCAAqC,CAAC;QACpF,cAAc,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;KAClD,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBZ,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;QAChC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAC5E,gBAAgB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;KACjD,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAaZ,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC;QACvC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAC9E,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,GAAG,UAAU,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;KACxG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBZ,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAC5E,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC;KACjE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBZ,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA6BvD;AAED,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,gCAAgC,EACvC,SAAS,EAAE,6BAA6B,GACvC,iCAAiC,CAsBnC"}

package/lib/plugin-runtime/workroom-portfolio-capacity.js

@@ -0,0 +1,189 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { PortfolioAdmissionApplication, portfolioCapacityRequestDigest, portfolioValidatedBundleDigest, } from '../portfolio/portfolio-admission.js';
+import { parsePortfolioResourceBundle, } from '../portfolio/portfolio-journal.js';
+import { canonicalWorkroomJson, digestCanonicalWorkroomValue as digest, } from '../workroom/canonical-value.js';
+export const portfolioJournalRepositoryToken = createToken('zhin.agent.portfolio-journal-repository', 'Durable content-free Portfolio policy/capacity/usage Journal');
+export const portfolioPolicyAuthorityToken = createToken('zhin.agent.portfolio-policy-authority', 'Persistent exact Portfolio Sponsor policy authority');
+export const portfolioAtomicBundleAuthorityToken = createToken('zhin.agent.portfolio-atomic-bundle-authority', 'Current generation Catalog/Profile validated Atomic Resource Bundle authority');
+export const portfolioKernelCommandAuthorityToken = createToken('zhin.agent.portfolio-kernel-command-authority', 'Owning Workroom Kernel Capacity consume/reclaim authority');
+export const portfolioUsageGatewayAuthorityToken = createToken('zhin.agent.portfolio-usage-gateway-authority', 'Authenticated provider usage receipt authority');
+export const portfolioClockAuthorityToken = createToken('zhin.agent.portfolio-clock-authority', 'Monotonic Portfolio Kernel clock authority');
+export const workroomSchedulerCapacityRequestToken = createToken('zhin.agent.workroom-scheduler-capacity-request', 'Generation-owned Workroom Scheduler Portfolio Capacity Request boundary');
+export const portfolioCapacityRuntimeToken = createToken('zhin.agent.portfolio-capacity-runtime', 'Generation-owned durable Portfolio admission/grant/reclaim runtime');
+export class GenerationOwnedPortfolioCapacityRuntime {
+    options;
+    #generation;
+    #applications = new Map();
+    constructor(options) {
+        this.options = options;
+        if (!Number.isSafeInteger(options.generation) || options.generation < 0) {
+            throw new Error('Portfolio runtime generation is invalid');
+        }
+        this.#generation = options.generation;
+    }
+    async request(input) {
+        this.#assertGeneration(input.generation);
+        const application = this.#application(input.portfolioId);
+        const policyAuthority = await this.options.policyAuthority.resolve(input.portfolioId);
+        if (!policyAuthority)
+            throw new Error('Portfolio Policy authority is unavailable');
+        const state = await application.read();
+        if (!state.policy) {
+            await application.pinPolicy(policyAuthority.policy, policyAuthority.governance);
+        }
+        else if (state.policy.revision !== policyAuthority.policy.revision
+            || state.policy.digest !== policyAuthority.policy.digest) {
+            throw new Error('Portfolio Policy authority drifted from the durable pinned revision');
+        }
+        const validated = await this.options.bundleAuthority.validate(input);
+        if (!validated)
+            throw new Error('Portfolio Catalog/Profile Atomic Bundle authority is unavailable');
+        const authority = createPortfolioValidatedBundleAuthority(input, validated);
+        await application.submit(input.capacityRequest, authority);
+        return await application.decideAdmission();
+    }
+    async consume(input) {
+        this.#assertGeneration(input.generation);
+        const application = this.#application(input.portfolioId);
+        const grant = this.#grant(await application.read(), input.grantId);
+        const authority = await this.options.kernelAuthority.authorize({
+            generation: this.#generation, portfolioId: input.portfolioId, action: 'consume',
+            grant, assignmentRef: input.assignmentRef,
+        });
+        if (!authority)
+            throw new Error('Owning Workroom Kernel consume authority is unavailable');
+        await application.consume(input, authority);
+    }
+    async failAssignment(input) {
+        this.#assertGeneration(input.generation);
+        const application = this.#application(input.portfolioId);
+        const grant = this.#grant(await application.read(), input.grantId);
+        const authority = await this.options.kernelAuthority.authorize({
+            generation: this.#generation, portfolioId: input.portfolioId, action: 'assignment_failed',
+            grant, assignmentRef: input.assignmentRef, failureReason: input.reason,
+            kernelSequence: input.kernelSequence, kernelFactDigest: input.kernelFactDigest,
+        });
+        if (!authority)
+            throw new Error('Owning Workroom Kernel Assignment failure authority is unavailable');
+        await application.failAssignment({
+            grantId: input.grantId, projectId: input.projectId, fence: input.fence,
+            assignmentRef: input.assignmentRef, reason: input.reason,
+            kernelSequence: input.kernelSequence, kernelFactDigest: input.kernelFactDigest,
+        }, authority);
+    }
+    async settleUsage(input) {
+        this.#assertGeneration(input.generation);
+        const application = this.#application(input.portfolioId);
+        const grant = this.#grant(await application.read(), input.grantId);
+        const authority = await this.options.usageAuthority.authenticate({
+            generation: this.#generation, portfolioId: input.portfolioId,
+            receiptId: input.receiptId, grant, actualCostMicros: input.actualCostMicros,
+            settlementRef: input.settlementRef,
+        });
+        if (!authority)
+            throw new Error('Usage Gateway receipt authority is unavailable');
+        await application.settleUsage(authority);
+    }
+    async acknowledgeReclaim(input) {
+        this.#assertGeneration(input.generation);
+        const application = this.#application(input.portfolioId);
+        const state = await application.read();
+        const reclaim = state.reclaims[input.reclaimId];
+        if (!reclaim)
+            throw new Error(`Unknown Portfolio Capacity Reclaim ${input.reclaimId}`);
+        const grant = this.#grant(state, reclaim.grantId);
+        if (!grant.assignmentRef)
+            throw new Error('Capacity Reclaim Grant has no owning Assignment');
+        const authority = await this.options.kernelAuthority.authorize({
+            generation: this.#generation, portfolioId: input.portfolioId,
+            action: 'reclaim_acknowledge', grant, assignmentRef: grant.assignmentRef,
+            reclaimId: input.reclaimId, outcome: input.outcome,
+            ...(input.checkpointRef === undefined ? {} : { checkpointRef: input.checkpointRef }),
+            ...(input.checkpointDigest === undefined ? {} : { checkpointDigest: input.checkpointDigest }),
+        });
+        if (!authority)
+            throw new Error('Owning Workroom Kernel reclaim authority is unavailable');
+        await application.acknowledgeReclaim(input, authority);
+    }
+    async renewLease(input) {
+        this.#assertGeneration(input.generation);
+        const application = this.#application(input.portfolioId);
+        const state = await application.read();
+        const grant = this.#grant(state, input.grantId);
+        if (!state.policy || state.clockSequence < 0 || !state.clockDigest) {
+            throw new Error('Portfolio Lease renewal policy/clock authority is unavailable');
+        }
+        const authority = await this.options.kernelAuthority.authorize({
+            generation: this.#generation,
+            portfolioId: input.portfolioId,
+            action: 'renew',
+            grant,
+            assignmentRef: input.assignmentRef,
+            heartbeatSequence: input.heartbeatSequence,
+            clockSequence: state.clockSequence,
+            clockDigest: state.clockDigest,
+            policyDigest: state.policy.digest,
+            usageSettlementCursor: state.usageSettlementCursor,
+        });
+        if (!authority)
+            throw new Error('Owning Workroom Kernel Lease renewal authority is unavailable');
+        await application.renewLease(input, authority);
+    }
+    async advanceClock(portfolioId) {
+        const authority = await this.options.clockAuthority.read({ generation: this.#generation, portfolioId });
+        if (!authority)
+            throw new Error('Portfolio Kernel clock authority is unavailable');
+        await this.#application(portfolioId).advanceClock(authority);
+    }
+    #application(portfolioId) {
+        if (!portfolioId.trim() || portfolioId !== portfolioId.trim())
+            throw new Error('Portfolio id is invalid');
+        let application = this.#applications.get(portfolioId);
+        if (!application) {
+            application = new PortfolioAdmissionApplication({
+                portfolioId,
+                repository: this.options.repository,
+                ids: { eventId: (type, identity) => `${type}:${encodeURIComponent(identity)}` },
+            });
+            this.#applications.set(portfolioId, application);
+        }
+        return application;
+    }
+    #grant(state, grantId) {
+        const grant = state.grants[grantId];
+        if (!grant)
+            throw new Error(`Unknown Portfolio Capacity Grant ${grantId}`);
+        return grant;
+    }
+    #assertGeneration(generation) {
+        if (generation !== this.#generation)
+            throw new Error('Portfolio Capacity operation escaped its Root generation');
+    }
+}
+export function createPortfolioValidatedBundleAuthority(input, validated) {
+    if (validated.requestId !== input.capacityRequest.requestId
+        || validated.projectId !== input.capacityRequest.projectId
+        || validated.catalogRef.revision !== input.catalogRevision
+        || validated.catalogRef.digest !== input.catalogDigest
+        || validated.profileAuthorityRef.profileRevisionId !== input.capacityRequest.workRef.profileRevisionId
+        || validated.profileAuthorityRef.profileDigest !== input.capacityRequest.workRef.profileDigest
+        || canonicalWorkroomJson(validated.workRef) !== canonicalWorkroomJson(input.capacityRequest.workRef)) {
+        throw new Error('Validated Atomic Resource Bundle escaped its exact request/Profile/Catalog authority');
+    }
+    const claims = {
+        requestDigest: portfolioCapacityRequestDigest(input.capacityRequest),
+        resourceBundleDigest: portfolioCapacityRequestResourceBundleDigest(input.capacityRequest),
+        catalogGenerationId: validated.catalogRef.generationId,
+        catalogRevision: validated.catalogRef.revision,
+        catalogDigest: validated.catalogRef.digest,
+        profileRevisionId: validated.profileAuthorityRef.profileRevisionId,
+        profileDigest: validated.profileAuthorityRef.profileDigest,
+        profileCeilingDigest: validated.profileAuthorityRef.resourceCeilingDigest,
+        reservedCostMicros: validated.totalWorstCaseCostMicros,
+    };
+    return Object.freeze({ ...claims, validatedBundleDigest: portfolioValidatedBundleDigest(claims) });
+}
+function portfolioCapacityRequestResourceBundleDigest(request) {
+    return digest(parsePortfolioResourceBundle(request.resourceBundle));
+}
+//# sourceMappingURL=workroom-portfolio-capacity.js.map

package/lib/plugin-runtime/workroom-portfolio-capacity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-portfolio-capacity.js","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-portfolio-capacity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,EAC9B,8BAA8B,GAE/B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,4BAA4B,GAW7B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EACL,qBAAqB,EACrB,4BAA4B,IAAI,MAAM,GACvC,MAAM,gCAAgC,CAAC;AAgExC,MAAM,CAAC,MAAM,+BAA+B,GAAG,WAAW,CACxD,yCAAyC,EACzC,8DAA8D,CAC/D,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CACtD,uCAAuC,EACvC,qDAAqD,CACtD,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,WAAW,CAC5D,8CAA8C,EAC9C,+EAA+E,CAChF,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG,WAAW,CAC7D,+CAA+C,EAC/C,2DAA2D,CAC5D,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,WAAW,CAC5D,8CAA8C,EAC9C,gDAAgD,CACjD,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CACrD,sCAAsC,EACtC,4CAA4C,CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAAG,WAAW,CAC9D,gDAAgD,EAChD,yEAAyE,CAC1E,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CACtD,uCAAuC,EACvC,oEAAoE,CACrE,CAAC;AAYF,MAAM,OAAO,uCAAuC;IAI7B;IAHZ,WAAW,CAAS;IACpB,aAAa,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE1E,YAAqB,OAAuD;QAAvD,YAAO,GAAP,OAAO,CAAgD;QAC1E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAuC;QACnD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtF,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,WAAW,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;QAClF,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,eAAe,CAAC,MAAM,CAAC,QAAQ;eAC/D,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACpG,MAAM,SAAS,GAAG,uCAAuC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5E,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QAC3D,OAAO,MAAM,WAAW,CAAC,eAAe,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAGZ;QACA,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC;YAC7D,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS;YAC/E,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;SAC1C,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC3F,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAInB;QACA,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC;YAC7D,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,mBAAmB;YACzF,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM;YACtE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SAC/E,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACtG,MAAM,WAAW,CAAC,cAAc,CAAC;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;YACtE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;YACxD,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SAC/E,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAGhB;QACA,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC;YAC/D,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5D,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YAC3E,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAClF,MAAM,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAGvB;QACA,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC;YAC7D,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5D,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;YACxE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAClD,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;YACpF,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;SAC9F,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC3F,MAAM,WAAW,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAGf;QACA,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC;YAC7D,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,OAAO;YACf,KAAK;YACL,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YACjC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACjG,MAAM,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACnF,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,WAAW,KAAK,WAAW,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC1G,IAAI,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,WAAW,GAAG,IAAI,6BAA6B,CAAC;gBAC9C,WAAW;gBACX,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBACnC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE;aAChF,CAAC,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,KAA8B,EAAE,OAAe;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iBAAiB,CAAC,UAAkB;QAClC,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACnH,CAAC;CACF;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAuC,EACvC,SAAwC;IAExC,IAAI,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,eAAe,CAAC,SAAS;WACtD,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,eAAe,CAAC,SAAS;WACvD,SAAS,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,eAAe;WACvD,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,aAAa;WACnD,SAAS,CAAC,mBAAmB,CAAC,iBAAiB,KAAK,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,iBAAiB;WACnG,SAAS,CAAC,mBAAmB,CAAC,aAAa,KAAK,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,aAAa;WAC3F,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,qBAAqB,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,MAAM,GAAG;QACb,aAAa,EAAE,8BAA8B,CAAC,KAAK,CAAC,eAAe,CAAC;QACpE,oBAAoB,EAAE,4CAA4C,CAAC,KAAK,CAAC,eAAe,CAAC;QACzF,mBAAmB,EAAE,SAAS,CAAC,UAAU,CAAC,YAAY;QACtD,eAAe,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ;QAC9C,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,MAAM;QAC1C,iBAAiB,EAAE,SAAS,CAAC,mBAAmB,CAAC,iBAAiB;QAClE,aAAa,EAAE,SAAS,CAAC,mBAAmB,CAAC,aAAa;QAC1D,oBAAoB,EAAE,SAAS,CAAC,mBAAmB,CAAC,qBAAqB;QACzE,kBAAkB,EAAE,SAAS,CAAC,wBAAwB;KACvD,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,qBAAqB,EAAE,8BAA8B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,4CAA4C,CAAC,OAAiC;IACrF,OAAO,MAAM,CAAC,4BAA4B,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;AACtE,CAAC"}