@zhin.js/agent 1.1.13 → 1.1.14

package/lib/plugin-runtime/workroom-risk-acceptance-runtime.js

@@ -0,0 +1,376 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { freezeAcceptanceContract, } from '../workroom/acceptance-policy.js';
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from '../workroom/canonical-value.js';
+export const workroomAcceptancePolicyFactsToken = createToken('zhin.agent.workroom-acceptance-policy-facts', 'Generation/Profile-owned pinned Workroom Acceptance policy facts');
+export const workroomTrustedRiskFactsToken = createToken('zhin.agent.workroom-trusted-risk-facts', 'Trusted Plan/Capability/Artifact/Effect Workroom Risk Facts');
+export const workroomAcceptanceCheckRunnerToken = createToken('zhin.agent.workroom-acceptance-check-runner', 'Trusted deterministic Workroom Acceptance check runner');
+/** Pure routing policy over pinned facts. Model output never supplies risk, route, or authority. */
+export class PinnedWorkroomAcceptancePolicy {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async pinContract(input) {
+        const facts = validatePolicyFacts(await this.options.policies.resolve({
+            projectId: input.projectId,
+            runId: input.runId,
+            taskKey: input.task.key,
+            taskRevision: input.task.revision,
+        }));
+        const body = deepFreeze({
+            id: `acceptance-contract:${input.projectId}:${input.runId}:${input.task.key}:${input.task.revision}:${facts.policy.digest}`,
+            revision: 1,
+            taskKey: input.task.key,
+            taskRevision: input.task.revision,
+            kind: facts.kind,
+            policy: facts.policy,
+            criteria: facts.criteria,
+            requiredEvidence: facts.requiredEvidence,
+        });
+        return freezeAcceptanceContract({ ...body, digest: digest(body) });
+    }
+    async decide(input) {
+        const facts = validatePolicyFacts(await this.options.policies.resolve({
+            projectId: input.projectId,
+            runId: input.runId,
+            taskKey: input.task.key,
+            taskRevision: input.task.revision,
+        }));
+        assertPinnedFacts(input, facts);
+        const report = await this.options.reports.read({
+            projectId: input.projectId,
+            runId: input.runId,
+            taskKey: input.task.key,
+            reportRef: input.assignment.reportRef,
+            candidateHash: input.assignment.candidateHash,
+            purpose: 'acceptance-evaluation',
+        });
+        if (!report)
+            throw new Error('Governed Workroom Task Report is unavailable for Acceptance');
+        if (report.ref !== input.assignment.reportRef
+            || report.candidateHash !== input.assignment.candidateHash
+            || report.projectId !== input.projectId
+            || report.runId !== input.runId
+            || report.taskKey !== input.task.key
+            || report.taskRevision !== input.task.revision) {
+            throw new Error('Governed Workroom Task Report binding drift');
+        }
+        const claimIds = unique(report.claims.map(claim => claim.id), 'Report claim IDs');
+        const evidenceRefs = unique(report.claims.flatMap(claim => claim.evidenceRefs), 'Report evidence refs');
+        const artifactRefs = unique(report.claims.flatMap(claim => claim.artifactRefs), 'Report artifact refs');
+        const riskFacts = validateRiskFacts(await this.options.risk.assess({
+            projectId: input.projectId,
+            runId: input.runId,
+            taskKey: input.task.key,
+            taskRevision: input.task.revision,
+            candidateHash: input.assignment.candidateHash,
+            reportRef: input.assignment.reportRef,
+            reportDigest: input.assignment.reportDigest,
+            artifactRefs,
+            planRef: report.planRef,
+            planRevision: report.planRevision,
+            policy: input.contract.policy,
+        }), input.assignment.candidateHash, input.contract.policy.revision);
+        if (facts.kind === 'effect_intent'
+            && !riskFacts.sources.some(source => source.sourceType === 'effect-intent')) {
+            throw new Error('Effect Acceptance requires an exact trusted Effect Intent risk header');
+        }
+        const tier = assessRiskTier(riskFacts.facts);
+        const riskAssessment = deepFreeze({
+            id: `risk:${input.assignment.candidateHash}:${digest(riskFacts)}`,
+            candidateHash: input.assignment.candidateHash,
+            tier,
+            factsHash: digest(riskFacts),
+            assessor: 'kernel-risk-lattice:1',
+            sourceRefs: Object.freeze(riskFacts.sources.map(source => source.sourceRef).sort()),
+        });
+        const checkResults = await Promise.all(input.contract.criteria
+            .filter(criterion => criterion.kind === 'deterministic')
+            .map(async (criterion) => validateCheckResult(await this.options.checks.run({
+            projectId: input.projectId,
+            runId: input.runId,
+            taskKey: input.task.key,
+            criterion,
+            candidateHash: input.assignment.candidateHash,
+            reportRef: input.assignment.reportRef,
+            evidenceRefs,
+            policy: input.contract.policy,
+        }), criterion.id, input.assignment.candidateHash)));
+        const candidate = deepFreeze({
+            id: input.assignment.candidateRef,
+            taskKey: input.task.key,
+            taskRevision: input.task.revision,
+            producerAssignmentId: input.assignment.id,
+            producerPrincipalId: input.assignment.owner,
+            reportRef: input.assignment.reportRef,
+            hash: input.assignment.candidateHash,
+            claimIds,
+            evidenceRefs,
+        });
+        const base = {
+            version: 1,
+            candidate,
+            contract: input.contract,
+            riskAssessment,
+            checkResults: Object.freeze(checkResults),
+            acceptedClaimIds: Object.freeze([]),
+            rejectedClaimIds: Object.freeze([]),
+            decidedBy: `acceptance-policy:${input.contract.policy.id}`,
+        };
+        const failed = checkResults.find(result => result.status === 'failed');
+        if (failed)
+            return deepFreeze({
+                ...base, disposition: 'rework', route: 'rework',
+                reason: `Trusted Acceptance check failed: ${failed.id}`,
+            });
+        const unavailable = checkResults.find(result => result.status === 'error' || result.status === 'expired');
+        if (unavailable)
+            return deepFreeze({
+                ...base, disposition: 'policy_blocked', route: 'policy_blocked',
+                reason: `Trusted Acceptance check unavailable: ${unavailable.id}`,
+            });
+        if (facts.kind === 'effect_intent') {
+            if (!this.options.effects)
+                return deepFreeze({
+                    ...base, disposition: 'policy_blocked', route: 'policy_blocked',
+                    reason: 'Effect Ledger acceptance state is unavailable; Effect is not committed',
+                });
+            const effect = validateEffectState(await this.options.effects.resolve({
+                projectId: input.projectId,
+                runId: input.runId,
+                taskKey: input.task.key,
+                taskRevision: input.task.revision,
+                candidateHash: input.assignment.candidateHash,
+            }), input);
+            if (effect.state === 'failed')
+                return deepFreeze({
+                    ...base, disposition: 'rework', route: 'rework',
+                    reason: 'Trusted Effect Ledger recorded a failed outcome',
+                });
+            if (effect.state !== 'committed')
+                return deepFreeze({
+                    ...base, disposition: 'policy_blocked', route: 'policy_blocked',
+                    reason: effect.state === 'outcome_unknown'
+                        ? 'Effect outcome is unknown and requires reconciliation'
+                        : `Effect is ${effect.state}; only a trusted committed receipt can continue Acceptance`,
+                });
+        }
+        const route = acceptanceRoute(tier, input.contract.criteria, facts.minimumRoute);
+        if (route === 'auto_accept')
+            return deepFreeze({
+                ...base, disposition: 'accepted', route,
+                acceptedClaimIds: claimIds,
+                rejectedClaimIds: Object.freeze([]),
+            });
+        const reviewer = route === 'reviewer_required' || route === 'reviewer_then_sponsor';
+        const sponsor = route === 'sponsor_required' || route === 'reviewer_then_sponsor';
+        return deepFreeze({
+            ...base,
+            disposition: 'policy_blocked',
+            route,
+            reason: `Acceptance requires ${reviewer && sponsor ? 'Reviewer and Sponsor' : reviewer ? 'Reviewer' : 'Sponsor'}`,
+            wait: reviewer
+                ? reviewerWait(facts.reviewerOwner, input.now + facts.reviewerTimeoutMs)
+                : sponsorWait(facts.sponsorOwner, input.now + facts.sponsorTimeoutMs),
+            ...(reviewer && sponsor
+                ? { nextWait: sponsorWait(facts.sponsorOwner, input.now + facts.sponsorTimeoutMs) }
+                : {}),
+        });
+    }
+}
+function validateEffectState(value, input) {
+    if (!value)
+        throw new Error('Exact Effect Intent is unavailable from the trusted Ledger');
+    if (value.projectId !== input.projectId
+        || value.runId !== input.runId
+        || value.taskKey !== input.task.key
+        || value.taskRevision !== input.task.revision
+        || value.candidateHash !== input.assignment.candidateHash) {
+        throw new Error('Effect Ledger Acceptance binding is stale');
+    }
+    required(value.intentRef, 'Effect Intent ref');
+    requiredDigest(value.intentDigest, 'Effect Intent digest');
+    enumValue(value.state, [
+        'pending_authorization', 'authorized', 'committed', 'failed', 'outcome_unknown', 'cancelled',
+    ], 'Effect Ledger Acceptance state');
+    if (value.state === 'authorized' && !value.authorizationDigest) {
+        throw new Error('Authorized Effect state lacks trusted Authorization digest');
+    }
+    if (value.state === 'committed' && (!value.authorizationDigest || !value.receiptDigest)) {
+        throw new Error('Committed Effect state lacks trusted Authorization/receipt digest');
+    }
+    if (value.authorizationDigest)
+        requiredDigest(value.authorizationDigest, 'Effect Authorization digest');
+    if (value.receiptDigest)
+        requiredDigest(value.receiptDigest, 'Effect receipt digest');
+    return deepFreeze(value);
+}
+function reviewerWait(owner, deadline) {
+    return deepFreeze({
+        owner, deadline,
+        allowedActions: ['claim', 'submit_verdict', 'reassign', 'replan', 'cancel'],
+    });
+}
+function sponsorWait(owner, deadline) {
+    return deepFreeze({
+        owner, deadline,
+        allowedActions: ['approve', 'reject', 'request_changes', 'reopen', 'rebase', 'replan', 'cancel'],
+    });
+}
+function acceptanceRoute(tier, criteria, floor) {
+    let reviewer = tier === 'medium' || criteria.some(criterion => criterion.kind === 'judgment');
+    let sponsor = tier === 'high' || tier === 'critical';
+    reviewer ||= floor === 'reviewer_required' || floor === 'reviewer_then_sponsor';
+    sponsor ||= floor === 'sponsor_required' || floor === 'reviewer_then_sponsor';
+    return reviewer && sponsor ? 'reviewer_then_sponsor'
+        : reviewer ? 'reviewer_required'
+            : sponsor ? 'sponsor_required'
+                : 'auto_accept';
+}
+export function assessRiskTier(facts) {
+    enumValue(facts.sideEffect, ['none', 'local', 'external', 'unknown'], 'Risk side effect');
+    enumValue(facts.reversibility, ['discard_only', 'compensatable', 'irreversible', 'unknown'], 'Risk reversibility');
+    enumValue(facts.dataClass, ['public', 'internal', 'confidential', 'restricted', 'unknown'], 'Risk data class');
+    enumValue(facts.blastRadius, ['single_artifact', 'project', 'organization', 'external', 'unknown'], 'Risk blast radius');
+    enumValue(facts.uncertainty, ['known', 'unknown'], 'Risk uncertainty');
+    const tags = new Set(facts.capabilityTags);
+    if (facts.uncertainty === 'unknown'
+        || facts.sideEffect === 'unknown'
+        || facts.reversibility === 'unknown'
+        || facts.dataClass === 'unknown'
+        || facts.blastRadius === 'unknown'
+        || facts.reversibility === 'irreversible'
+        || facts.dataClass === 'restricted'
+        || tags.has('payment'))
+        return 'critical';
+    if (facts.sideEffect === 'external'
+        || facts.blastRadius === 'external'
+        || tags.has('deploy') || tags.has('send') || tags.has('publish'))
+        return 'high';
+    if (facts.sideEffect === 'local'
+        || facts.reversibility === 'compensatable'
+        || facts.dataClass === 'confidential'
+        || facts.blastRadius === 'project'
+        || facts.blastRadius === 'organization'
+        || tags.size > 0)
+        return 'medium';
+    return 'low';
+}
+function validatePolicyFacts(value) {
+    required(value.profileRef, 'Profile ref');
+    requiredDigest(value.profileDigest, 'Profile digest');
+    required(value.policy?.id, 'Policy id');
+    requiredDigest(value.policy?.digest, 'Policy digest');
+    positive(value.policy?.revision, 'Policy revision');
+    validateSource(value.binding, value.policy.revision);
+    if (value.binding.sourceType !== 'project-profile')
+        throw new Error('Acceptance Policy facts are not Profile-owned');
+    if (value.binding.sourceRef !== value.profileRef
+        || value.binding.sourceDigest !== value.profileDigest) {
+        throw new Error('Acceptance Policy facts are not bound to the exact Profile revision');
+    }
+    if (!['task_result', 'integration_candidate', 'effect_intent'].includes(value.kind))
+        throw new Error('Acceptance candidate kind is invalid');
+    if (!Array.isArray(value.criteria) || value.criteria.length === 0)
+        throw new Error('Acceptance Policy requires criteria');
+    unique(value.criteria.map(criterion => criterion.id), 'Acceptance criterion IDs');
+    for (const criterion of value.criteria) {
+        required(criterion.description, `Acceptance criterion ${criterion.id} description`);
+        enumValue(criterion.kind, ['deterministic', 'judgment'], `Acceptance criterion ${criterion.id} kind`);
+    }
+    unique(value.requiredEvidence, 'Acceptance required evidence');
+    required(value.reviewerOwner, 'Reviewer owner');
+    required(value.sponsorOwner, 'Sponsor owner');
+    positive(value.reviewerTimeoutMs, 'Reviewer timeout');
+    positive(value.sponsorTimeoutMs, 'Sponsor timeout');
+    enumValue(value.minimumRoute, [
+        'baseline', 'reviewer_required', 'sponsor_required', 'reviewer_then_sponsor',
+    ], 'Acceptance minimum route');
+    return deepFreeze(value);
+}
+function assertPinnedFacts(input, facts) {
+    const expected = {
+        kind: facts.kind,
+        policy: facts.policy,
+        criteria: facts.criteria,
+        requiredEvidence: facts.requiredEvidence,
+    };
+    const actual = {
+        kind: input.contract.kind,
+        policy: input.contract.policy,
+        criteria: input.contract.criteria,
+        requiredEvidence: input.contract.requiredEvidence,
+    };
+    if (canonicalWorkroomJson(actual) !== canonicalWorkroomJson(expected)) {
+        throw new Error('Current Profile Acceptance facts drifted from pinned Contract');
+    }
+}
+function validateRiskFacts(value, candidateHash, policyRevision) {
+    if (value.candidateHash !== candidateHash)
+        throw new Error('Risk Facts candidate binding is stale');
+    if (!value.facts || !Array.isArray(value.sources) || value.sources.length === 0) {
+        throw new Error('Risk Facts require trusted source lineage');
+    }
+    value.sources.forEach(source => validateSource(source, policyRevision));
+    if (value.sources.some(source => source.sourceType === 'project-profile'
+        || source.sourceType === 'report-header')) {
+        throw new Error('Risk Facts cannot be sourced from Profile or Report metadata');
+    }
+    unique(value.sources.map(source => source.sourceRef), 'Risk Fact source refs');
+    unique(value.facts.capabilityTags, 'Risk capability tags');
+    assessRiskTier(value.facts);
+    return deepFreeze(value);
+}
+function validateSource(source, policyRevision) {
+    enumValue(source?.sourceType, [
+        'project-profile', 'workflow-plan', 'capability-snapshot', 'artifact-header',
+        'effect-intent', 'report-header',
+    ], 'Trusted fact source type');
+    required(source?.sourceRef, 'Trusted fact source ref');
+    requiredDigest(source?.sourceDigest, 'Trusted fact source digest');
+    required(source?.issuer, 'Trusted fact source issuer');
+    if (source?.policyRevision !== policyRevision)
+        throw new Error('Trusted fact source Policy revision drift');
+}
+function enumValue(value, allowed, label) {
+    if (!allowed.includes(value))
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function validateCheckResult(result, criterionId, candidateHash) {
+    if (result.criterionId !== criterionId || result.candidateHash !== candidateHash) {
+        throw new Error('Trusted Check Result binding drift');
+    }
+    required(result.id, 'Check Result id');
+    required(result.runner, 'Check Result runner');
+    required(result.runnerVersion, 'Check Result runner version');
+    unique(result.evidenceRefs, 'Check Result evidence refs');
+    if (!['passed', 'failed', 'error', 'expired'].includes(result.status)) {
+        throw new Error('Trusted Check Result status is invalid');
+    }
+    return deepFreeze(result);
+}
+function unique(values, label) {
+    if (!Array.isArray(values))
+        throw new Error(`${label} must be an array`);
+    const result = values.map(value => required(value, label));
+    if (new Set(result).size !== result.length)
+        throw new Error(`${label} contains duplicates`);
+    return Object.freeze([...result].sort());
+}
+function required(value, label) {
+    if (typeof value !== 'string' || !value.trim() || value !== value.trim())
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function requiredDigest(value, label) {
+    if (typeof value !== 'string' || !/^sha256:[a-f0-9]{64}$/u.test(value))
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+function positive(value, label) {
+    if (!Number.isSafeInteger(value) || Number(value) < 1)
+        throw new Error(`${label} is invalid`);
+    return Number(value);
+}
+//# sourceMappingURL=workroom-risk-acceptance-runtime.js.map

package/lib/plugin-runtime/workroom-risk-acceptance-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-risk-acceptance-runtime.js","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-risk-acceptance-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,EACL,wBAAwB,GAUzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,gCAAgC,CAAC;AA6GxC,MAAM,CAAC,MAAM,kCAAkC,GAAG,WAAW,CAC3D,6CAA6C,EAC7C,kEAAkE,CACnE,CAAC;AACF,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CACtD,wCAAwC,EACxC,6DAA6D,CAC9D,CAAC;AACF,MAAM,CAAC,MAAM,kCAAkC,GAAG,WAAW,CAC3D,6CAA6C,EAC7C,wDAAwD,CACzD,CAAC;AAUF,oGAAoG;AACpG,MAAM,OAAO,8BAA8B;IACpB;IAArB,YAAqB,OAA8C;QAA9C,YAAO,GAAP,OAAO,CAAuC;IAAG,CAAC;IAEvE,KAAK,CAAC,WAAW,CAAC,KAAyC;QACzD,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YACpE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACvB,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;SAClC,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,GAAG,UAAU,CAAC;YACtB,EAAE,EAAE,uBAAuB,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;YAC3H,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACvB,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC,CAAC;QACH,OAAO,wBAAwB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAsC;QACjD,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YACpE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACvB,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;SAClC,CAAC,CAAC,CAAC;QACJ,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACvB,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;YACrC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa;YAC7C,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC5F,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS;eACxC,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,UAAU,CAAC,aAAa;eACvD,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;eACpC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;eAC5B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG;eACjC,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAClF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACxG,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACxG,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACjE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACvB,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YACjC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa;YAC7C,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;YACrC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY;YAC3C,YAAY;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;SAC9B,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;eAC7B,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,eAAe,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,UAAU,CAAC;YAChC,EAAE,EAAE,QAAQ,KAAK,CAAC,UAAU,CAAC,aAAa,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE;YACjE,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa;YAC7C,IAAI;YACJ,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;YAC5B,QAAQ,EAAE,uBAAuB;YACjC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;SACpF,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ;aAC3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,eAAe,CAAC;aACvD,GAAG,CAAC,KAAK,EAAC,SAAS,EAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;YACxE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACvB,SAAS;YACT,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa;YAC7C,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;YACrC,YAAY;YACZ,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;SAC9B,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,UAAU,CAAC;YAC3B,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY;YACjC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACvB,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YACjC,oBAAoB,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YACzC,mBAAmB,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK;YAC3C,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;YACrC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa;YACpC,QAAQ;YACR,YAAY;SACb,CAAC,CAAC;QACH,MAAM,IAAI,GAAG;YACX,OAAO,EAAE,CAAU;YACnB,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc;YACd,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;YACzC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,SAAS,EAAE,qBAAqB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;SAC3D,CAAC;QACF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QACvE,IAAI,MAAM;YAAE,OAAO,UAAU,CAAC;gBAC5B,GAAG,IAAI,EAAE,WAAW,EAAE,QAAiB,EAAE,KAAK,EAAE,QAAiB;gBACjE,MAAM,EAAE,oCAAoC,MAAM,CAAC,EAAE,EAAE;aACxD,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAC1G,IAAI,WAAW;YAAE,OAAO,UAAU,CAAC;gBACjC,GAAG,IAAI,EAAE,WAAW,EAAE,gBAAyB,EAAE,KAAK,EAAE,gBAAyB;gBACjF,MAAM,EAAE,yCAAyC,WAAW,CAAC,EAAE,EAAE;aAClE,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO,UAAU,CAAC;oBAC3C,GAAG,IAAI,EAAE,WAAW,EAAE,gBAAyB,EAAE,KAAK,EAAE,gBAAyB;oBACjF,MAAM,EAAE,wEAAwE;iBACjF,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;gBACpE,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;gBACvB,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;gBACjC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa;aAC9C,CAAC,EAAE,KAAK,CAAC,CAAC;YACX,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ;gBAAE,OAAO,UAAU,CAAC;oBAC/C,GAAG,IAAI,EAAE,WAAW,EAAE,QAAiB,EAAE,KAAK,EAAE,QAAiB;oBACjE,MAAM,EAAE,iDAAiD;iBAC1D,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW;gBAAE,OAAO,UAAU,CAAC;oBAClD,GAAG,IAAI,EAAE,WAAW,EAAE,gBAAyB,EAAE,KAAK,EAAE,gBAAyB;oBACjF,MAAM,EAAE,MAAM,CAAC,KAAK,KAAK,iBAAiB;wBACxC,CAAC,CAAC,uDAAuD;wBACzD,CAAC,CAAC,aAAa,MAAM,CAAC,KAAK,4DAA4D;iBAC1F,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACjF,IAAI,KAAK,KAAK,aAAa;YAAE,OAAO,UAAU,CAAC;gBAC7C,GAAG,IAAI,EAAE,WAAW,EAAE,UAAmB,EAAE,KAAK;gBAChD,gBAAgB,EAAE,QAAQ;gBAC1B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,KAAK,mBAAmB,IAAI,KAAK,KAAK,uBAAuB,CAAC;QACpF,MAAM,OAAO,GAAG,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,uBAAuB,CAAC;QAClF,OAAO,UAAU,CAAC;YAChB,GAAG,IAAI;YACP,WAAW,EAAE,gBAAyB;YACtC,KAAK;YACL,MAAM,EAAE,uBAAuB,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE;YACjH,IAAI,EAAE,QAAQ;gBACZ,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,iBAAiB,CAAC;gBACxE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,gBAAgB,CAAC;YACvE,GAAG,CAAC,QAAQ,IAAI,OAAO;gBACrB,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,gBAAgB,CAAC,EAAE;gBACnF,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,mBAAmB,CAC1B,KAAgD,EAChD,KAAsC;IAEtC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WAClC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;WAC3B,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG;WAChC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ;WAC1C,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC/C,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IAC3D,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE;QACrB,uBAAuB,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,WAAW;KAC7F,EAAE,gCAAgC,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB;QAAE,cAAc,CAAC,KAAK,CAAC,mBAAmB,EAAE,6BAA6B,CAAC,CAAC;IACxG,IAAI,KAAK,CAAC,aAAa;QAAE,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACtF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,QAAgB;IACnD,OAAO,UAAU,CAAC;QAChB,KAAK,EAAE,QAAQ;QACf,cAAc,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAU;KACrF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,QAAgB;IAClD,OAAO,UAAU,CAAC;QAChB,KAAK,EAAE,QAAQ;QACf,cAAc,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU;KAC1G,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,IAAsB,EACtB,QAAgD,EAChD,KAAoD;IAEpD,IAAI,QAAQ,GAAG,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAC9F,IAAI,OAAO,GAAG,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,CAAC;IACrD,QAAQ,KAAK,KAAK,KAAK,mBAAmB,IAAI,KAAK,KAAK,uBAAuB,CAAC;IAChF,OAAO,KAAK,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,uBAAuB,CAAC;IAC9E,OAAO,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,uBAAuB;QAClD,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB;YAC9B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;gBAC5B,CAAC,CAAC,aAAa,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAyC;IACtE,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC1F,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACnH,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC/G,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACzH,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;WAC9B,KAAK,CAAC,UAAU,KAAK,SAAS;WAC9B,KAAK,CAAC,aAAa,KAAK,SAAS;WACjC,KAAK,CAAC,SAAS,KAAK,SAAS;WAC7B,KAAK,CAAC,WAAW,KAAK,SAAS;WAC/B,KAAK,CAAC,aAAa,KAAK,cAAc;WACtC,KAAK,CAAC,SAAS,KAAK,YAAY;WAChC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5C,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU;WAC9B,KAAK,CAAC,WAAW,KAAK,UAAU;WAChC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC;IAClF,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO;WAC3B,KAAK,CAAC,aAAa,KAAK,eAAe;WACvC,KAAK,CAAC,SAAS,KAAK,cAAc;WAClC,KAAK,CAAC,WAAW,KAAK,SAAS;WAC/B,KAAK,CAAC,WAAW,KAAK,cAAc;WACpC,IAAI,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAoC;IAC/D,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC1C,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IACxC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACpD,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACrH,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU;WAC3C,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,CAAC,aAAa,EAAE,uBAAuB,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC7I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC1H,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAClF,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,wBAAwB,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;QACpF,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,wBAAwB,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;IAC/D,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC9C,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IACpD,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE;QAC5B,UAAU,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,uBAAuB;KAC7E,EAAE,0BAA0B,CAAC,CAAC;IAC/B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAsC,EAAE,KAAoC;IACrG,MAAM,QAAQ,GAAG;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC;IACF,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QACzB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;QACjC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;KAClD,CAAC;IACF,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA+B,EAC/B,aAAqB,EACrB,cAAsB;IAEtB,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACpG,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,iBAAiB;WACnE,MAAM,CAAC,UAAU,KAAK,eAAe,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;IAC3D,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,cAAc,CAAC,MAAiC,EAAE,cAAsB;IAC/E,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE;QAC5B,iBAAiB,EAAE,eAAe,EAAE,qBAAqB,EAAE,iBAAiB;QAC5E,eAAe,EAAE,eAAe;KACjC,EAAE,0BAA0B,CAAC,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACvD,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,4BAA4B,CAAC,CAAC;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC;IACvD,IAAI,MAAM,EAAE,cAAc,KAAK,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,SAAS,CAAmB,KAAc,EAAE,OAAqB,EAAE,KAAa;IACvF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC1E,OAAO,KAAU,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAqC,EACrC,WAAmB,EACnB,aAAqB;IAErB,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,IAAI,MAAM,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC;IAC9D,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,MAAM,CAAC,MAAyB,EAAE,KAAa;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3D,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACjH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/lib/plugin-runtime/workroom-run-profile-pin-authority.d.ts

@@ -0,0 +1,42 @@
+import type { WorkroomJournal } from '../workroom/journal.js';
+import type { WorkflowPlanProposal } from '../workroom/workflow-plan-builder.js';
+import type { WorkroomRunProfilePinAuthority, WorkroomRunProfilePinAuthorityPort, WorkroomRunProfilePinPort, WorkroomRunProfilePinRequest } from './workroom-profile-authority-runtime.js';
+import type { ProjectProfileRegistry } from '../workroom/profile-registry.js';
+import type { WorkroomPlanAdmissionReceipt } from '../workroom/workroom-kernel.js';
+export declare const WORKROOM_KERNEL_PLAN_ADMISSION_PRINCIPAL = "kernel:plan-admission";
+export interface WorkroomPlanAdmissionProfilePinInput {
+    readonly operationId: string;
+    readonly projectId: string;
+    readonly plan: WorkflowPlanProposal;
+    readonly receipt: WorkroomPlanAdmissionReceipt;
+}
+/** Exact immutable authority derived only from persisted Kernel admission facts. */
+export declare class JournalWorkroomRunProfilePinAuthority implements WorkroomRunProfilePinAuthorityPort {
+    #private;
+    readonly options: Readonly<{
+        generation: number;
+        journal: Pick<WorkroomJournal, 'read'>;
+    }>;
+    constructor(options: Readonly<{
+        generation: number;
+        journal: Pick<WorkroomJournal, 'read'>;
+    }>);
+    commandFor(input: WorkroomPlanAdmissionProfilePinInput, expectedRegistryRevision: number): Promise<Omit<WorkroomRunProfilePinRequest, 'generation' | 'digest'>>;
+    authorize(request: WorkroomRunProfilePinRequest): Promise<WorkroomRunProfilePinAuthority | undefined>;
+    verify(request: WorkroomRunProfilePinRequest, authority: WorkroomRunProfilePinAuthority): Promise<boolean>;
+}
+/** Post-admission writer. Retry replays the same Kernel facts and Profile pin CAS. */
+export declare class KernelPlanAdmissionRunProfilePinWriter {
+    readonly options: Readonly<{
+        authority: JournalWorkroomRunProfilePinAuthority;
+        profiles: Pick<ProjectProfileRegistry, 'read'>;
+        runPins: WorkroomRunProfilePinPort;
+    }>;
+    constructor(options: Readonly<{
+        authority: JournalWorkroomRunProfilePinAuthority;
+        profiles: Pick<ProjectProfileRegistry, 'read'>;
+        runPins: WorkroomRunProfilePinPort;
+    }>);
+    afterPlanAdmission(input: WorkroomPlanAdmissionProfilePinInput, signal: AbortSignal): Promise<void>;
+}
+//# sourceMappingURL=workroom-run-profile-pin-authority.d.ts.map

package/lib/plugin-runtime/workroom-run-profile-pin-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-run-profile-pin-authority.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-run-profile-pin-authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAM9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,KAAK,EACV,8BAA8B,EAC9B,kCAAkC,EAClC,yBAAyB,EACzB,4BAA4B,EAC7B,MAAM,yCAAyC,CAAC;AACjD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAEnF,eAAO,MAAM,wCAAwC,0BAA0B,CAAC;AAEhF,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;CAChD;AAED,oFAAoF;AACpF,qBAAa,qCAAsC,YAAW,kCAAkC;;IAClF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrC,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;KACxC,CAAC;gBAHmB,OAAO,EAAE,QAAQ,CAAC;QACrC,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;KACxC,CAAC;IAII,UAAU,CACd,KAAK,EAAE,oCAAoC,EAC3C,wBAAwB,EAAE,MAAM,GAC/B,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE,YAAY,GAAG,QAAQ,CAAC,CAAC;IAuBjE,SAAS,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,8BAA8B,GAAG,SAAS,CAAC;IAqBrG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAAC,OAAO,CAAC;CAoCpB;AAED,sFAAsF;AACtF,qBAAa,sCAAsC;IACrC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrC,SAAS,EAAE,qCAAqC,CAAC;QACjD,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,EAAE,yBAAyB,CAAC;KACpC,CAAC;gBAJmB,OAAO,EAAE,QAAQ,CAAC;QACrC,SAAS,EAAE,qCAAqC,CAAC;QACjD,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,EAAE,yBAAyB,CAAC;KACpC,CAAC;IAEI,kBAAkB,CACtB,KAAK,EAAE,oCAAoC,EAC3C,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC;CAWjB"}

package/lib/plugin-runtime/workroom-run-profile-pin-authority.js

@@ -0,0 +1,125 @@
+import { canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from '../workroom/canonical-value.js';
+export const WORKROOM_KERNEL_PLAN_ADMISSION_PRINCIPAL = 'kernel:plan-admission';
+/** Exact immutable authority derived only from persisted Kernel admission facts. */
+export class JournalWorkroomRunProfilePinAuthority {
+    options;
+    constructor(options) {
+        this.options = options;
+        positive(options.generation, 'Run pin authority generation');
+    }
+    async commandFor(input, expectedRegistryRevision) {
+        const facts = await this.#facts(input.receipt.runId);
+        if (facts.projectId !== input.projectId || facts.planRevisionId !== input.plan.proposalId
+            || facts.planDigest !== input.plan.digest
+            || facts.profileRevisionId !== input.plan.authority.profileRevisionId
+            || facts.profileDigest !== input.plan.authority.profileDigest) {
+            throw new Error('Kernel Plan admission fact does not match the requested Run Profile pin');
+        }
+        return deepFreeze({
+            version: 1,
+            operationId: required(input.operationId, 'Run pin operation id'),
+            principalId: WORKROOM_KERNEL_PLAN_ADMISSION_PRINCIPAL,
+            projectId: input.projectId,
+            runId: input.receipt.runId,
+            planRevisionId: facts.planRevisionId,
+            planDigest: facts.planDigest,
+            profileRevisionId: facts.profileRevisionId,
+            profileDigest: facts.profileDigest,
+            runFactDigest: facts.runFactDigest,
+            expectedRegistryRevision,
+        });
+    }
+    async authorize(request) {
+        if (request.generation !== this.options.generation
+            || request.principalId !== WORKROOM_KERNEL_PLAN_ADMISSION_PRINCIPAL)
+            return undefined;
+        const facts = await this.#facts(request.runId);
+        if (facts.projectId !== request.projectId || facts.planRevisionId !== request.planRevisionId
+            || facts.planDigest !== request.planDigest
+            || facts.profileRevisionId !== request.profileRevisionId
+            || facts.profileDigest !== request.profileDigest
+            || facts.runFactDigest !== request.runFactDigest)
+            return undefined;
+        return deepFreeze({
+            requestDigest: request.digest,
+            authorityDigest: digest({
+                version: 1,
+                generation: this.options.generation,
+                principalId: WORKROOM_KERNEL_PLAN_ADMISSION_PRINCIPAL,
+                requestDigest: request.digest,
+                facts,
+            }),
+        });
+    }
+    async verify(request, authority) {
+        const expected = await this.authorize(request);
+        return expected !== undefined && canonicalWorkroomJson(expected) === canonicalWorkroomJson(authority);
+    }
+    async #facts(runId) {
+        const events = await this.options.journal.read(required(runId, 'Run pin Run id'));
+        const created = events.filter(event => event.type === 'run.created');
+        const admitted = events.filter(event => event.type === 'plan.admitted');
+        if (created.length !== 1 || admitted.length !== 1) {
+            throw new Error('Run Profile pin requires one exact persisted Kernel Plan admission');
+        }
+        const run = created[0];
+        const planEvent = admitted[0];
+        const plan = planEvent.payload.plan;
+        if (!plan || planEvent.payload.operationId !== plan.proposalId) {
+            throw new Error('Persisted Kernel Plan admission payload is malformed');
+        }
+        const projectId = required(run.payload.projectId, 'Kernel Run fact Project id');
+        const planRevisionId = required(plan.proposalId, 'Kernel Plan revision id');
+        const planDigest = requiredDigest(plan.digest, 'Kernel Plan digest');
+        const profileRevisionId = required(plan.authority.profileRevisionId, 'Kernel Plan Profile revision id');
+        const profileDigest = requiredDigest(plan.authority.profileDigest, 'Kernel Plan Profile digest');
+        const factBody = deepFreeze({
+            version: 1,
+            runId,
+            projectId,
+            runCreated: { sequence: run.sequence, digest: digest(run) },
+            planAdmitted: { sequence: planEvent.sequence, digest: digest(planEvent) },
+            planRevisionId,
+            planDigest,
+            profileRevisionId,
+            profileDigest,
+        });
+        return deepFreeze({ ...factBody, runFactDigest: digest(factBody) });
+    }
+}
+/** Post-admission writer. Retry replays the same Kernel facts and Profile pin CAS. */
+export class KernelPlanAdmissionRunProfilePinWriter {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async afterPlanAdmission(input, signal) {
+        signal.throwIfAborted();
+        const profiles = await this.options.profiles.read(input.projectId);
+        if (!profiles.active
+            || profiles.active.revisionId !== input.plan.authority.profileRevisionId
+            || profiles.active.compiledDigest !== input.plan.authority.profileDigest) {
+            throw new Error('Kernel Plan admission Profile authority is no longer the active pin candidate');
+        }
+        const command = await this.options.authority.commandFor(input, profiles.registryRevision);
+        await this.options.runPins.pin(command, signal);
+    }
+}
+function required(value, label) {
+    if (typeof value !== 'string' || !value.trim() || value !== value.trim()) {
+        throw new Error(`${label} is invalid`);
+    }
+    return value;
+}
+function requiredDigest(value, label) {
+    const canonical = required(value, label);
+    if (!/^sha256:[a-f0-9]{64}$/.test(canonical))
+        throw new Error(`${label} is invalid`);
+    return canonical;
+}
+function positive(value, label) {
+    if (!Number.isSafeInteger(value) || value < 1)
+        throw new Error(`${label} is invalid`);
+    return value;
+}
+//# sourceMappingURL=workroom-run-profile-pin-authority.js.map

package/lib/plugin-runtime/workroom-run-profile-pin-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-run-profile-pin-authority.js","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-run-profile-pin-authority.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,gCAAgC,CAAC;AAWxC,MAAM,CAAC,MAAM,wCAAwC,GAAG,uBAAuB,CAAC;AAShF,oFAAoF;AACpF,MAAM,OAAO,qCAAqC;IAC3B;IAArB,YAAqB,OAGnB;QAHmB,YAAO,GAAP,OAAO,CAG1B;QACA,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAA2C,EAC3C,wBAAgC;QAEhC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU;eACpF,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM;eACtC,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB;eAClE,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,UAAU,CAAC;YAChB,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,sBAAsB,CAAC;YAChE,WAAW,EAAE,wCAAwC;YACrD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,wBAAwB;SACzB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAqC;QACnD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU;eAC7C,OAAO,CAAC,WAAW,KAAK,wCAAwC;YAAE,OAAO,SAAS,CAAC;QACxF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;eACvF,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;eACvC,KAAK,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB;eACrD,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;eAC7C,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;YAAE,OAAO,SAAS,CAAC;QACrE,OAAO,UAAU,CAAC;YAChB,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,eAAe,EAAE,MAAM,CAAC;gBACtB,OAAO,EAAE,CAAC;gBACV,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBACnC,WAAW,EAAE,wCAAwC;gBACrD,aAAa,EAAE,OAAO,CAAC,MAAM;gBAC7B,KAAK;aACN,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,SAAyC;QAEzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,QAAQ,KAAK,SAAS,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACxG,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;QACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACxB,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAwC,CAAC;QACxE,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;QAChF,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QACrE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QACxG,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,UAAU,CAAC;YAC1B,OAAO,EAAE,CAAU;YACnB,KAAK;YACL,SAAS;YACT,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;YAC3D,YAAY,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE;YACzE,cAAc;YACd,UAAU;YACV,iBAAiB;YACjB,aAAa;SACd,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,OAAO,sCAAsC;IAC5B;IAArB,YAAqB,OAInB;QAJmB,YAAO,GAAP,OAAO,CAI1B;IAAG,CAAC;IAEN,KAAK,CAAC,kBAAkB,CACtB,KAA2C,EAC3C,MAAmB;QAEnB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,MAAM;eACf,QAAQ,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB;eACrE,QAAQ,CAAC,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC1F,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACrF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAa;IAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/lib/plugin-runtime/workroom-scheduler-portfolio-composition.d.ts

@@ -0,0 +1,25 @@
+import type { Scope } from '@zhin.js/plugin-runtime';
+import type { WorkroomCatalog } from '../workroom/catalog.js';
+import type { WorkroomJournal } from '../workroom/journal.js';
+import type { ProjectProfileRegistry } from '../workroom/profile-registry.js';
+import { GenerationOwnedWorkroomSchedulerAssignmentRouteRegistry } from './workroom-scheduler-route-registry.js';
+import { PortfolioFirstWorkroomSchedulerDispatchSupply } from './workroom-scheduler-portfolio-supply.js';
+export interface InstallWorkroomSchedulerPortfolioDispatchResourcesOptions {
+    readonly generation: number;
+    readonly signal: AbortSignal;
+    readonly resources: Pick<Scope, 'has' | 'provide' | 'use'>;
+    readonly catalog: Pick<WorkroomCatalog, 'read'>;
+    readonly profiles: Pick<ProjectProfileRegistry, 'read'>;
+    readonly journal?: Pick<WorkroomJournal, 'read'>;
+}
+export interface WorkroomSchedulerPortfolioDispatchResources {
+    readonly routes: GenerationOwnedWorkroomSchedulerAssignmentRouteRegistry;
+    readonly supply: PortfolioFirstWorkroomSchedulerDispatchSupply;
+}
+/**
+ * Installs the Portfolio-first Scheduler boundary before any local/remote route
+ * producer. Missing request/capacity authorities remain runtime blockers and do
+ * not reject the candidate Root generation.
+ */
+export declare function installWorkroomSchedulerPortfolioDispatchResources(options: InstallWorkroomSchedulerPortfolioDispatchResourcesOptions): WorkroomSchedulerPortfolioDispatchResources;
+//# sourceMappingURL=workroom-scheduler-portfolio-composition.d.ts.map

package/lib/plugin-runtime/workroom-scheduler-portfolio-composition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-scheduler-portfolio-composition.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-scheduler-portfolio-composition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAc9E,OAAO,EACL,uDAAuD,EAExD,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,6CAA6C,EAG9C,MAAM,0CAA0C,CAAC;AAKlD,MAAM,WAAW,yDAAyD;IACxE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC,CAAC;IAC3D,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,MAAM,EAAE,uDAAuD,CAAC;IACzE,QAAQ,CAAC,MAAM,EAAE,6CAA6C,CAAC;CAChE;AAED;;;;GAIG;AACH,wBAAgB,kDAAkD,CAChE,OAAO,EAAE,yDAAyD,GACjE,2CAA2C,CA0E7C"}