@zhin.js/workroom 0.0.0 → 0.0.2

package/lib/workroom-runtime/workroom-preemption-runtime.js

@@ -0,0 +1,163 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { replayWorkroomPreemptions, } from '../workroom/workroom-preemption.js';
+export const workroomCheckpointDeliveryProviderToken = createToken('zhin.agent.workroom-checkpoint-delivery-provider', 'Generation-owned typed checkpoint request transport for current Assignment owners');
+export const workroomPreemptionRuntimeToken = createToken('zhin.agent.workroom-preemption-runtime', 'Generation-owned durable checkpoint request recovery worker');
+export class WorkroomCheckpointDeliveryUnavailableError extends Error {
+    preemption;
+    reason;
+    constructor(preemption, reason) {
+        super(`Workroom checkpoint delivery is unavailable: ${reason}`);
+        this.preemption = preemption;
+        this.reason = reason;
+        this.name = 'WorkroomCheckpointDeliveryUnavailableError';
+    }
+}
+/** Joins one durable preemption request to its exact persisted Local/Remote producer. */
+export class WorkroomAssignmentCheckpointDelivery {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async request(preemption, signal) {
+        signal.throwIfAborted();
+        const state = await this.options.kernel.read(preemption.projectId, preemption.runId);
+        const assignment = state.assignments[preemption.assignmentId];
+        const task = state.tasks[preemption.victimTaskKey];
+        if (!assignment || !task
+            || assignment.status !== 'running'
+            || task.status !== 'executing'
+            || task.currentAssignmentId !== assignment.id
+            || assignment.owner !== preemption.owner
+            || assignment.attempt !== preemption.assignmentAttempt
+            || assignment.fence !== preemption.assignmentFence
+            || assignment.envelopeDigest !== preemption.assignmentEnvelopeDigest) {
+            throw new WorkroomCheckpointDeliveryUnavailableError(preemption, 'assignment_stale');
+        }
+        if (preemption.deadline <= state.now) {
+            throw new WorkroomCheckpointDeliveryUnavailableError(preemption, 'deadline_expired');
+        }
+        if (assignment.leaseExpiresAt <= state.now) {
+            throw new WorkroomCheckpointDeliveryUnavailableError(preemption, 'lease_expired');
+        }
+        const [local, remote] = await Promise.all([
+            this.options.kernel.listLocalAssignmentIssuances(),
+            this.options.kernel.listRemoteAssignmentIssuances(),
+        ]);
+        const localIssuance = local.find(item => item.envelope.assignmentId === assignment.id);
+        const remoteIssuance = remote.find(item => item.envelope.assignmentId === assignment.id);
+        if ((!localIssuance && !remoteIssuance) || (localIssuance && remoteIssuance)) {
+            throw new WorkroomCheckpointDeliveryUnavailableError(preemption, 'issuance_unavailable');
+        }
+        const issuance = localIssuance ?? remoteIssuance;
+        if (issuance.envelope.digest !== assignment.envelopeDigest
+            || issuance.envelope.principalId !== assignment.owner
+            || issuance.envelope.attempt !== assignment.attempt
+            || issuance.envelope.fence !== assignment.fence) {
+            throw new WorkroomCheckpointDeliveryUnavailableError(preemption, 'issuance_unavailable');
+        }
+        const provider = this.options.resolveProvider();
+        if (!provider) {
+            throw new WorkroomCheckpointDeliveryUnavailableError(preemption, 'provider_unavailable');
+        }
+        await provider.request(Object.freeze({
+            version: 1,
+            transport: localIssuance ? 'local' : 'remote',
+            preemption,
+            envelope: issuance.envelope,
+            ...(remoteIssuance
+                ? { remoteEndpointId: remoteIssuance.dispatchItem.envelope.endpoint.id }
+                : {}),
+        }), signal);
+    }
+}
+/** At-least-once Journal recovery; transport success is deliberately not an ack. */
+export class WorkroomPreemptionRuntime {
+    options;
+    #intervalMs;
+    #controller = new AbortController();
+    #timer;
+    #running;
+    #stopped = false;
+    constructor(options) {
+        this.options = options;
+        this.#intervalMs = positive(options.intervalMs ?? 1_000, 'intervalMs');
+    }
+    start() {
+        if (this.#stopped)
+            throw new Error('Workroom Preemption Runtime is stopped');
+        if (!this.#timer)
+            this.#schedule(0);
+    }
+    async drain() {
+        if (this.#stopped)
+            throw new Error('Workroom Preemption Runtime is stopped');
+        if (this.#running)
+            return await this.#running;
+        const running = this.#drain();
+        this.#running = running;
+        try {
+            return await running;
+        }
+        finally {
+            if (this.#running === running)
+                this.#running = undefined;
+        }
+    }
+    async dispose() {
+        if (this.#stopped)
+            return;
+        this.#stopped = true;
+        if (this.#timer)
+            clearTimeout(this.#timer);
+        this.#timer = undefined;
+        this.#controller.abort(new DOMException('Workroom preemption generation retired', 'AbortError'));
+        await this.#running?.catch(error => {
+            if (!this.#controller.signal.aborted)
+                throw error;
+        });
+    }
+    async #drain() {
+        let delivered = 0;
+        let blocked = 0;
+        for (const runId of [...await this.options.journal.listRunIds()].sort()) {
+            this.#controller.signal.throwIfAborted();
+            const pending = replayWorkroomPreemptions(await this.options.journal.read(runId)).pending;
+            if (!pending)
+                continue;
+            try {
+                await this.options.delivery.request(pending, this.#controller.signal);
+            }
+            catch (error) {
+                if (!(error instanceof WorkroomCheckpointDeliveryUnavailableError))
+                    throw error;
+                await this.options.unavailableControl.block(pending, error.reason);
+                blocked += 1;
+                continue;
+            }
+            await this.options.unavailableControl.recover(pending);
+            delivered += 1;
+        }
+        return Object.freeze({ delivered, blocked });
+    }
+    #schedule(delay) {
+        this.#timer = setTimeout(() => {
+            this.#timer = undefined;
+            if (this.#stopped)
+                return;
+            void this.drain()
+                .catch(error => this.options.onError?.(error))
+                .finally(() => {
+                if (!this.#stopped)
+                    this.#schedule(this.#intervalMs);
+            });
+        }, delay);
+        this.#timer.unref?.();
+    }
+}
+function positive(value, label) {
+    if (!Number.isSafeInteger(value) || Number(value) < 1) {
+        throw new Error(`Workroom Preemption Runtime ${label} must be a positive safe integer`);
+    }
+    return Number(value);
+}
+//# sourceMappingURL=workroom-preemption-runtime.js.map

package/lib/workroom-runtime/workroom-preemption-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-preemption-runtime.js","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-preemption-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAGtD,OAAO,EACL,yBAAyB,GAE1B,MAAM,oCAAoC,CAAC;AAgB5C,MAAM,CAAC,MAAM,uCAAuC,GAClD,WAAW,CACT,kDAAkD,EAClD,mFAAmF,CACpF,CAAC;AAEJ,MAAM,CAAC,MAAM,8BAA8B,GAAG,WAAW,CACvD,wCAAwC,EACxC,6DAA6D,CAC9D,CAAC;AAEF,MAAM,OAAO,0CAA2C,SAAQ,KAAK;IAExD;IACA;IAFX,YACW,UAAmC,EACnC,MAAmH;QAE5H,KAAK,CAAC,gDAAgD,MAAM,EAAE,CAAC,CAAC;QAHvD,eAAU,GAAV,UAAU,CAAyB;QACnC,WAAM,GAAN,MAAM,CAA6G;QAG5H,IAAI,CAAC,IAAI,GAAG,4CAA4C,CAAC;IAC3D,CAAC;CACF;AAUD,yFAAyF;AACzF,MAAM,OAAO,oCAAoC;IAC1B;IAArB,YAAqB,OAAoD;QAApD,YAAO,GAAP,OAAO,CAA6C;IAAG,CAAC;IAE7E,KAAK,CAAC,OAAO,CAAC,UAAmC,EAAE,MAAmB;QACpE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QACrF,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI;eACnB,UAAU,CAAC,MAAM,KAAK,SAAS;eAC/B,IAAI,CAAC,MAAM,KAAK,WAAW;eAC3B,IAAI,CAAC,mBAAmB,KAAK,UAAU,CAAC,EAAE;eAC1C,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK;eACrC,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,iBAAiB;eACnD,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,eAAe;eAC/C,UAAU,CAAC,cAAc,KAAK,UAAU,CAAC,wBAAwB,EAAE,CAAC;YACvE,MAAM,IAAI,0CAA0C,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,0CAA0C,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,UAAU,CAAC,cAAc,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YAC3C,MAAM,IAAI,0CAA0C,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,4BAA4B,EAAE;YAClD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,6BAA6B,EAAE;SACpD,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,EAAE,CAAC,CAAC;QACvF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,IAAI,cAAc,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,0CAA0C,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,IAAI,cAAe,CAAC;QAClD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,cAAc;eACrD,QAAQ,CAAC,QAAQ,CAAC,WAAW,KAAK,UAAU,CAAC,KAAK;eAClD,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;eAChD,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC;YAClD,MAAM,IAAI,0CAA0C,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,0CAA0C,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACnC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;YAC7C,UAAU;YACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,GAAG,CAAC,cAAc;gBAChB,CAAC,CAAC,EAAE,gBAAgB,EAAE,cAAc,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACxE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,EAAE,MAAM,CAAC,CAAC;IACd,CAAC;CACF;AAoBD,oFAAoF;AACpF,MAAM,OAAO,yBAAyB;IAOf;IANZ,WAAW,CAAS;IACpB,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC7C,MAAM,CAAiC;IACvC,QAAQ,CAA0C;IAClD,QAAQ,GAAG,KAAK,CAAC;IAEjB,YAAqB,OAAyC;QAAzC,YAAO,GAAP,OAAO,CAAkC;QAC5D,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,KAAK,EAAE,YAAY,CAAC,CAAC;IACzE,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;gBAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,wCAAwC,EAAE,YAAY,CAAC,CAAC,CAAC;QACjG,MAAM,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;YACjC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,KAAK,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACxE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,yBAAyB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1F,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,0CAA0C,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAChF,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACvD,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,SAAS,CAAC,KAAa;QACrB,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,KAAK,IAAI,CAAC,KAAK,EAAE;iBACd,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;iBAC7C,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,CAAC,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;QACP,CAAC,EAAE,KAAK,CAAC,CAAC;QACV,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;IACxB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,kCAAkC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/lib/workroom-runtime/workroom-priority-authority.d.ts

@@ -0,0 +1,19 @@
+import type { WorkroomCatalog } from '../workroom/catalog.js';
+import type { WorkroomPriorityAuthorityPort, WorkroomPriorityAuthorizationDecision, WorkroomPriorityAuthorizationInput } from '../workroom/scheduler-priority-control.js';
+export declare const workroomPriorityAuthorityToken: import("@zhin.js/plugin-runtime").Token<WorkroomPriorityAuthorityPort>;
+/** Resolves on every call so a retired generation cannot retain priority authority. */
+export declare class GenerationWorkroomPriorityAuthority implements WorkroomPriorityAuthorityPort {
+    #private;
+    constructor(resolve: () => WorkroomPriorityAuthorityPort | undefined);
+    authorize(input: WorkroomPriorityAuthorizationInput): Promise<WorkroomPriorityAuthorizationDecision>;
+}
+/** Catalog membership and the admitted Plan pin are the only role authority. */
+export declare class CatalogWorkroomPriorityAuthority implements WorkroomPriorityAuthorityPort {
+    #private;
+    constructor(catalog: Pick<WorkroomCatalog, 'read'>);
+    authorize(input: WorkroomPriorityAuthorizationInput): Promise<WorkroomPriorityAuthorizationDecision>;
+}
+export declare function workroomPriorityAuthorityReference(input: Pick<WorkroomPriorityAuthorizationInput, 'projectAuthority'> & Readonly<{
+    proposal: Pick<WorkroomPriorityAuthorizationInput['proposal'], 'projectId' | 'authority' | 'principalId'>;
+}>): string;
+//# sourceMappingURL=workroom-priority-authority.d.ts.map

package/lib/workroom-runtime/workroom-priority-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-priority-authority.d.ts","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-priority-authority.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EACV,6BAA6B,EAC7B,qCAAqC,EACrC,kCAAkC,EACnC,MAAM,2CAA2C,CAAC;AAEnD,eAAO,MAAM,8BAA8B,wEAG1C,CAAC;AAEF,uFAAuF;AACvF,qBAAa,mCAAoC,YAAW,6BAA6B;;gBAG3E,OAAO,EAAE,MAAM,6BAA6B,GAAG,SAAS;IAI9D,SAAS,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,qCAAqC,CAAC;CAK3G;AAED,gFAAgF;AAChF,qBAAa,gCAAiC,YAAW,6BAA6B;;gBAGxE,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC;IAI5C,SAAS,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,qCAAqC,CAAC;CAsC3G;AAED,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,IAAI,CAAC,kCAAkC,EAAE,kBAAkB,CAAC,GAAG,QAAQ,CAAC;IAC7E,QAAQ,EAAE,IAAI,CAAC,kCAAkC,CAAC,UAAU,CAAC,EAC3D,WAAW,GAAG,WAAW,GAAG,aAAa,CAAC,CAAC;CAC9C,CAAC,GACD,MAAM,CAER"}

package/lib/workroom-runtime/workroom-priority-authority.js

@@ -0,0 +1,76 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { digestCanonicalWorkroomValue } from '../workroom/canonical-value.js';
+export const workroomPriorityAuthorityToken = createToken('zhin.agent.workroom-priority-authority', 'Generation-owned exact Catalog Sponsor/Orchestrator priority authority');
+/** Resolves on every call so a retired generation cannot retain priority authority. */
+export class GenerationWorkroomPriorityAuthority {
+    #resolve;
+    constructor(resolve) {
+        this.#resolve = resolve;
+    }
+    async authorize(input) {
+        const current = this.#resolve();
+        if (!current)
+            return Object.freeze({ authorized: false, reason: 'authority_not_installed' });
+        return await current.authorize(input);
+    }
+}
+/** Catalog membership and the admitted Plan pin are the only role authority. */
+export class CatalogWorkroomPriorityAuthority {
+    #catalog;
+    constructor(catalog) {
+        this.#catalog = catalog;
+    }
+    async authorize(input) {
+        const snapshot = await this.#catalog.read();
+        const proposal = input.proposal;
+        const definition = snapshot.definitions[proposal.projectId];
+        if (!definition || definition.enabled === false) {
+            return Object.freeze({ authorized: false, reason: 'project_not_active' });
+        }
+        if (snapshot.revision !== input.projectAuthority.catalogRevision
+            || digestCanonicalWorkroomValue(definition) !== input.projectAuthority.projectDigest) {
+            return Object.freeze({ authorized: false, reason: 'project_authority_stale' });
+        }
+        if (proposal.authority === 'sponsor') {
+            if (!definition.sponsors?.includes(proposal.principalId)) {
+                return Object.freeze({ authorized: false, reason: 'principal_is_not_project_sponsor' });
+            }
+        }
+        else {
+            if (proposal.requestedLane !== proposal.currentLane) {
+                return Object.freeze({ authorized: false, reason: 'orchestrator_cannot_change_lane' });
+            }
+            const exactOrchestrator = definition.members.some(member => member.role === 'orchestrator'
+                && member.agent === input.projectAuthority.orchestratorAgentDefinitionId
+                && member.agent === proposal.principalId);
+            if (!exactOrchestrator) {
+                return Object.freeze({ authorized: false, reason: 'principal_is_not_pinned_orchestrator' });
+            }
+        }
+        if (proposal.authorityRef !== authorityReference(input)) {
+            return Object.freeze({ authorized: false, reason: 'authority_reference_not_exact' });
+        }
+        return Object.freeze({
+            authorized: true,
+            authority: proposal.authority,
+            principalId: proposal.principalId,
+            authorizationRef: proposal.authorityRef,
+            proposalDigest: proposal.digest,
+        });
+    }
+}
+export function workroomPriorityAuthorityReference(input) {
+    return authorityReference(input);
+}
+function authorityReference(input) {
+    const { proposal, projectAuthority } = input;
+    return [
+        'workroom-catalog-priority:v1',
+        projectAuthority.catalogRevision,
+        proposal.projectId,
+        projectAuthority.projectDigest,
+        proposal.authority,
+        proposal.principalId,
+    ].map(encodeURIComponent).join(':');
+}
+//# sourceMappingURL=workroom-priority-authority.js.map

package/lib/workroom-runtime/workroom-priority-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-priority-authority.js","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-priority-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAQ9E,MAAM,CAAC,MAAM,8BAA8B,GAAG,WAAW,CACvD,wCAAwC,EACxC,wEAAwE,CACzE,CAAC;AAEF,uFAAuF;AACvF,MAAM,OAAO,mCAAmC;IACrC,QAAQ,CAAkD;IAEnE,YAAY,OAAwD;QAClE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAyC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC7F,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,gCAAgC;IAClC,QAAQ,CAAgC;IAEjD,YAAY,OAAsC;QAChD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAyC;QACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAChD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB,CAAC,eAAe;eAC3D,4BAA4B,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC;YACvF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACpD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACzD,MAAM,CAAC,IAAI,KAAK,cAAc;mBAC3B,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,gBAAgB,CAAC,6BAA6B;mBACrE,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,YAAY,KAAK,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,gBAAgB,EAAE,QAAQ,CAAC,YAAY;YACvC,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,kCAAkC,CAChD,KAGE;IAEF,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAI1B;IACA,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;IAC7C,OAAO;QACL,8BAA8B;QAC9B,gBAAgB,CAAC,eAAe;QAChC,QAAQ,CAAC,SAAS;QAClB,gBAAgB,CAAC,aAAa;QAC9B,QAAQ,CAAC,SAAS;QAClB,QAAQ,CAAC,WAAW;KACrB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC"}

package/lib/workroom-runtime/workroom-profile-authority-composition.d.ts

@@ -0,0 +1,61 @@
+import type { RuntimeSnapshot, Scope, SnapshotReader } from '@zhin.js/plugin-runtime';
+import type { WorkroomCatalog } from '../workroom/catalog.js';
+import { WorkroomProfileAuthorityRuntime, type WorkroomProfileGenerationView, type WorkroomProfileGenerationViewPort, type WorkroomProfilePublisherAuthorityPort, type WorkroomRunProfilePinAuthorityPort } from './workroom-profile-authority-runtime.js';
+export declare const WORKROOM_CONTROL_PLANE_ROOT_PRINCIPAL = "control-plane:root";
+export interface WorkroomProfileAuthorityResourceScope extends Pick<Scope, 'has' | 'provide'> {
+}
+export interface InstallWorkroomProfileAuthorityResourcesOptions {
+    readonly projectRoot: string;
+    readonly generation: number;
+    readonly signal: AbortSignal;
+    readonly snapshots: SnapshotReader;
+    readonly resources: WorkroomProfileAuthorityResourceScope;
+    readonly authority: WorkroomProfilePublisherAuthorityPort;
+    readonly resolveGenerationView: (snapshot: RuntimeSnapshot) => WorkroomProfileGenerationView;
+    readonly runPinAuthority?: WorkroomRunProfilePinAuthorityPort;
+}
+export interface InstalledWorkroomProfileAuthorityResources {
+    /** Private Root control surface. This is intentionally not a Resource token. */
+    readonly control: WorkroomProfileAuthorityRuntime['control'];
+    /** Private Kernel admission surface. This is intentionally not a Resource token. */
+    readonly runPins: WorkroomProfileAuthorityRuntime['runPins'];
+    readonly profiles: WorkroomProfileAuthorityRuntime['profiles'];
+    readonly planningPolicy: WorkroomProfileAuthorityRuntime['planningPolicy'];
+}
+/**
+ * Installs only governed readers into the generation Scope. Raw repositories,
+ * publisher authority and mutation ports stay private to the Root composition.
+ */
+export declare function installWorkroomProfileAuthorityResources(options: InstallWorkroomProfileAuthorityResourcesOptions): InstalledWorkroomProfileAuthorityResources;
+export declare function createWorkroomProfileGenerationView(input: Readonly<{
+    generation: number;
+    tools: readonly Readonly<{
+        id: string;
+        digest: string;
+    }>[];
+    skills: readonly Readonly<{
+        id: string;
+        digest: string;
+    }>[];
+    agents: readonly Readonly<{
+        id: string;
+        digest: string;
+    }>[];
+}>): WorkroomProfileGenerationView;
+export declare function digestWorkroomProfileCatalogProject(definition: unknown): string;
+export declare function createSnapshotWorkroomProfileGenerationView(options: Readonly<{
+    generation: number;
+    snapshots: SnapshotReader;
+    resolve: (snapshot: RuntimeSnapshot) => WorkroomProfileGenerationView;
+}>): WorkroomProfileGenerationViewPort;
+/**
+ * Root-local authority. Pack publishers come from a process-owned allowlist;
+ * Project mutations re-check the persistent Catalog Sponsor membership.
+ */
+export declare function createCatalogWorkroomProfilePublisherAuthority(options: Readonly<{
+    catalog: Pick<WorkroomCatalog, 'read'>;
+    trustedPackPublishers: readonly string[];
+    decisionDirectory: string;
+    now?: () => number;
+}>): WorkroomProfilePublisherAuthorityPort;
+//# sourceMappingURL=workroom-profile-authority-composition.d.ts.map

package/lib/workroom-runtime/workroom-profile-authority-composition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-profile-authority-composition.d.ts","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-profile-authority-composition.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAkB9D,OAAO,EAGL,+BAA+B,EAG/B,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACtC,KAAK,qCAAqC,EAC1C,KAAK,kCAAkC,EACxC,MAAM,yCAAyC,CAAC;AAEjD,eAAO,MAAM,qCAAqC,uBAAuB,CAAC;AAE1E,MAAM,WAAW,qCAAsC,SAAQ,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;CAAG;AAEhG,MAAM,WAAW,+CAA+C;IAC9D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,qCAAqC,CAAC;IAC1D,QAAQ,CAAC,SAAS,EAAE,qCAAqC,CAAC;IAC1D,QAAQ,CAAC,qBAAqB,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,6BAA6B,CAAC;IAC7F,QAAQ,CAAC,eAAe,CAAC,EAAE,kCAAkC,CAAC;CAC/D;AAED,MAAM,WAAW,0CAA0C;IACzD,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAC7D,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAC7D,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC,UAAU,CAAC,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,+BAA+B,CAAC,gBAAgB,CAAC,CAAC;CAC5E;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,+CAA+C,GACvD,0CAA0C,CAyC5C;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,QAAQ,CAAC;IAClE,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,SAAS,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAC3D,MAAM,EAAE,SAAS,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAC5D,MAAM,EAAE,SAAS,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;CAC7D,CAAC,GAAG,6BAA6B,CASjC;AAED,wBAAgB,mCAAmC,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,CAK/E;AAED,wBAAgB,2CAA2C,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,6BAA6B,CAAC;CACvE,CAAC,GAAG,iCAAiC,CAyBrC;AAED;;;GAGG;AACH,wBAAgB,8CAA8C,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC/E,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACvC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,CAAC,GAAG,qCAAqC,CA4GzC"}

package/lib/workroom-runtime/workroom-profile-authority-composition.js

@@ -0,0 +1,232 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { compareCanonicalWorkroomText, canonicalWorkroomJson, deepFreezeWorkroomValue as deepFreeze, digestCanonicalWorkroomValue as digest, } from '../workroom/canonical-value.js';
+import { digestWorkroomCatalogProjectBinding, } from '../workroom/catalog-definition.js';
+import { DurableFileStore } from '../workroom/durable-file-store.js';
+import { FileProjectProfileJournal } from '../workroom/file-profile-journal.js';
+import { workroomProjectProfileRegistryToken } from './workroom-assignment-authority-provider.js';
+import { createWorkroomDynamicPlanningGenerationSnapshot, workroomDynamicPlanningPolicyToken, } from './workroom-dynamic-planning-provider.js';
+import { FileWorkroomProfileAuthorityRepository, FileWorkroomRunProfilePinProofRepository, WorkroomProfileAuthorityRuntime, } from './workroom-profile-authority-runtime.js';
+export const WORKROOM_CONTROL_PLANE_ROOT_PRINCIPAL = 'control-plane:root';
+/**
+ * Installs only governed readers into the generation Scope. Raw repositories,
+ * publisher authority and mutation ports stay private to the Root composition.
+ */
+export function installWorkroomProfileAuthorityResources(options) {
+    options.signal.throwIfAborted();
+    positiveGeneration(options.generation);
+    const authorityDirectory = join(options.projectRoot, '.zhin', 'workroom-profile-authority');
+    const generationView = createSnapshotWorkroomProfileGenerationView({
+        generation: options.generation,
+        snapshots: options.snapshots,
+        resolve: options.resolveGenerationView,
+    });
+    const repository = new FileWorkroomProfileAuthorityRepository(authorityDirectory, options.authority);
+    const runtime = new WorkroomProfileAuthorityRuntime({
+        generation: createWorkroomDynamicPlanningGenerationSnapshot(options.generation),
+        repository,
+        profileJournal: new FileProjectProfileJournal(join(options.projectRoot, '.zhin', 'workroom-project-profiles')),
+        authority: options.authority,
+        generationView,
+        ...(options.runPinAuthority
+            ? {
+                runPinAuthority: options.runPinAuthority,
+                runPinProofs: new FileWorkroomRunProfilePinProofRepository(join(authorityDirectory, 'run-pin-proofs'), options.runPinAuthority),
+            }
+            : {}),
+    });
+    if (options.resources.has(workroomProjectProfileRegistryToken)) {
+        throw new Error('Workroom Project Profile governed reader is already installed');
+    }
+    options.resources.provide(workroomProjectProfileRegistryToken, runtime.profiles);
+    if (!options.resources.has(workroomDynamicPlanningPolicyToken)) {
+        options.resources.provide(workroomDynamicPlanningPolicyToken, runtime.planningPolicy);
+    }
+    return Object.freeze({
+        control: runtime.control,
+        runPins: runtime.runPins,
+        profiles: runtime.profiles,
+        planningPolicy: runtime.planningPolicy,
+    });
+}
+export function createWorkroomProfileGenerationView(input) {
+    positiveGeneration(input.generation);
+    const body = deepFreeze({
+        generation: input.generation,
+        tools: canonicalDefinitions(input.tools),
+        skills: canonicalDefinitions(input.skills),
+        agents: canonicalDefinitions(input.agents),
+    });
+    return deepFreeze({ ...body, digest: digest(body) });
+}
+export function digestWorkroomProfileCatalogProject(definition) {
+    if (!definition || typeof definition !== 'object' || Array.isArray(definition)) {
+        throw new Error('Workroom Profile Catalog Project definition is invalid');
+    }
+    return digestWorkroomCatalogProjectBinding(definition);
+}
+export function createSnapshotWorkroomProfileGenerationView(options) {
+    positiveGeneration(options.generation);
+    return Object.freeze({
+        async withCurrent(operation, use) {
+            operation.signal.throwIfAborted();
+            if (operation.generation !== options.generation) {
+                throw new Error('Profile authority operation targets another Root generation');
+            }
+            const lease = options.snapshots.acquire();
+            try {
+                if (!options.snapshots.owns(lease) || lease.value.generation !== options.generation) {
+                    throw new Error('Profile authority generation is no longer current');
+                }
+                const view = options.resolve(lease.value);
+                assertResolvedGenerationView(view, options.generation);
+                operation.signal.throwIfAborted();
+                return await use(view);
+            }
+            finally {
+                lease.release();
+            }
+        },
+    });
+}
+/**
+ * Root-local authority. Pack publishers come from a process-owned allowlist;
+ * Project mutations re-check the persistent Catalog Sponsor membership.
+ */
+export function createCatalogWorkroomProfilePublisherAuthority(options) {
+    const publishers = new Set(options.trustedPackPublishers.map(principal => requiredText(principal, 'publisher')));
+    const publisherPolicyDigest = digest({ trustedPackPublishers: [...publishers].sort() });
+    const decisions = new DurableFileStore(options.decisionDirectory);
+    const now = options.now ?? Date.now;
+    const resolveBasis = async (request) => {
+        if (request.action === 'publish_pack') {
+            return publishers.has(request.authenticatedPrincipalId)
+                ? Object.freeze({ kind: 'pack_publisher', publisherPolicyDigest })
+                : undefined;
+        }
+        if (!request.projectId)
+            return undefined;
+        const catalog = await options.catalog.read();
+        const definition = catalog.definitions[request.projectId];
+        return definition?.enabled !== false
+            && definition?.sponsors?.includes(request.authenticatedPrincipalId)
+            ? Object.freeze({
+                kind: 'catalog_sponsor',
+                catalogRevision: catalog.revision,
+                projectId: request.projectId,
+                projectDigest: digest(definition),
+            })
+            : undefined;
+    };
+    const targetFor = (request) => join(options.decisionDirectory, `${request.digest.slice('sha256:'.length)}.json`);
+    const readDecision = async (request) => {
+        let raw;
+        try {
+            raw = await readFile(targetFor(request), 'utf8');
+        }
+        catch (error) {
+            if (isNodeError(error, 'ENOENT'))
+                return undefined;
+            throw error;
+        }
+        const value = JSON.parse(raw);
+        if (value.version !== 1 || canonicalWorkroomJson(value.request) !== canonicalWorkroomJson(request)) {
+            throw new Error('Persisted Workroom Profile authority decision request drift');
+        }
+        const { digest: supplied, ...body } = value;
+        if (supplied !== digest(body))
+            throw new Error('Persisted Workroom Profile authority decision digest mismatch');
+        return Object.freeze(structuredClone(value));
+    };
+    return Object.freeze({
+        async authorize(request) {
+            const replay = await readDecision(request);
+            if (replay)
+                return replay.decision;
+            const basis = await resolveBasis(request);
+            if (!basis) {
+                return Object.freeze({
+                    approved: false,
+                    requestDigest: request.digest,
+                    reason: request.action === 'publish_pack'
+                        ? 'principal_is_not_trusted_pack_publisher'
+                        : 'principal_is_not_project_sponsor',
+                });
+            }
+            const role = basis.kind === 'pack_publisher' ? 'trusted_pack_publisher' : 'sponsor';
+            const decision = Object.freeze({
+                approved: true,
+                requestDigest: request.digest,
+                decisionId: `profile-authority:${digest({ requestDigest: request.digest, basis })}`,
+                decidedBy: request.authenticatedPrincipalId,
+                authorizedBy: role,
+                decidedAt: now(),
+            });
+            const body = Object.freeze({ version: 1, request: structuredClone(request), decision, basis });
+            const record = Object.freeze({ ...body, digest: digest(body) });
+            await decisions.ensureDurableLeaf('Workroom Profile publisher decision repository');
+            const publication = await decisions.publishCreateOnly({
+                target: targetFor(request),
+                content: canonicalWorkroomJson(record),
+                createdValue: record,
+                onConflict: async () => {
+                    const winner = await readDecision(request);
+                    if (!winner)
+                        throw new Error('Workroom Profile authority CAS winner disappeared');
+                    return winner;
+                },
+            });
+            await decisions.syncLeafAndParent();
+            return publication.value.decision;
+        },
+        async verify(request, decision) {
+            const persisted = await readDecision(request);
+            return persisted !== undefined
+                && canonicalWorkroomJson(persisted.decision) === canonicalWorkroomJson(decision);
+        },
+    });
+}
+function assertResolvedGenerationView(view, generation) {
+    if (view.generation !== generation)
+        throw new Error('Resolved Profile generation view is stale');
+    const canonical = {
+        generation: view.generation,
+        tools: view.tools,
+        skills: view.skills,
+        agents: view.agents,
+    };
+    if (!/^sha256:[a-f0-9]{64}$/u.test(view.digest)
+        || digest(canonical) !== view.digest
+        || canonicalWorkroomJson(canonical).length === 0) {
+        throw new Error('Resolved Profile generation view is malformed');
+    }
+}
+function positiveGeneration(value) {
+    if (!Number.isSafeInteger(value) || value < 1)
+        throw new Error('Profile authority generation is invalid');
+}
+function requiredText(value, name) {
+    if (typeof value !== 'string' || !value.trim() || value !== value.trim()) {
+        throw new Error(`Workroom Profile authority ${name} is invalid`);
+    }
+    return value;
+}
+function canonicalDefinitions(values) {
+    if (!Array.isArray(values))
+        throw new Error('Workroom Profile generation definitions are invalid');
+    const seen = new Set();
+    return deepFreeze(values.map(value => {
+        const id = requiredText(value.id, 'generation capability id');
+        if (seen.has(id))
+            throw new Error(`Duplicate Workroom Profile generation capability ${id}`);
+        seen.add(id);
+        if (!/^sha256:[a-f0-9]{64}$/u.test(value.digest)) {
+            throw new Error(`Workroom Profile generation capability ${id} digest is invalid`);
+        }
+        return { id, digest: value.digest };
+    }).sort((left, right) => compareCanonicalWorkroomText(left.id, right.id)));
+}
+function isNodeError(error, code) {
+    return error instanceof Error && 'code' in error && error.code === code;
+}
+//# sourceMappingURL=workroom-profile-authority-composition.js.map

package/lib/workroom-runtime/workroom-profile-authority-composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-profile-authority-composition.js","sourceRoot":"","sources":["../../src/workroom-runtime/workroom-profile-authority-composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,EACrB,uBAAuB,IAAI,UAAU,EACrC,4BAA4B,IAAI,MAAM,GACvC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,mCAAmC,GAEpC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,mCAAmC,EAAE,MAAM,6CAA6C,CAAC;AAClG,OAAO,EACL,+CAA+C,EAC/C,kCAAkC,GACnC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,sCAAsC,EACtC,wCAAwC,EACxC,+BAA+B,GAOhC,MAAM,yCAAyC,CAAC;AAEjD,MAAM,CAAC,MAAM,qCAAqC,GAAG,oBAAoB,CAAC;AAwB1E;;;GAGG;AACH,MAAM,UAAU,wCAAwC,CACtD,OAAwD;IAExD,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IAChC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,4BAA4B,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,2CAA2C,CAAC;QACjE,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,qBAAqB;KACvC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,sCAAsC,CAAC,kBAAkB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,IAAI,+BAA+B,CAAC;QAClD,UAAU,EAAE,+CAA+C,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/E,UAAU;QACV,cAAc,EAAE,IAAI,yBAAyB,CAC3C,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,2BAA2B,CAAC,CAChE;QACD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc;QACd,GAAG,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC;gBACE,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,YAAY,EAAE,IAAI,wCAAwC,CACxD,IAAI,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,EAC1C,OAAO,CAAC,eAAe,CACxB;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,mCAAmC,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,mCAAmC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,kCAAkC,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,kCAAkC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,KAKlD;IACA,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC;QACxC,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1C,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC;KAC3C,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,UAAmB;IACrE,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,mCAAmC,CAAC,UAAgC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,2CAA2C,CAAC,OAI1D;IACA,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,WAAW,CACf,SAAqF,EACrF,GAAwE;YAExE,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAClC,IAAI,SAAS,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;oBACpF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;gBACvE,CAAC;gBACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1C,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACvD,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAClC,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8CAA8C,CAAC,OAK7D;IACA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACjH,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAiBpC,MAAM,YAAY,GAAG,KAAK,EACxB,OAAwC,EACH,EAAE;QACvC,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACtC,OAAO,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC;gBACrD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAyB,EAAE,qBAAqB,EAAE,CAAC;gBAC3E,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1D,OAAO,UAAU,EAAE,OAAO,KAAK,KAAK;eAC/B,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC;YACnE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBACZ,IAAI,EAAE,iBAA0B;gBAChC,eAAe,EAAE,OAAO,CAAC,QAAQ;gBACjC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC;aAClC,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,OAAwC,EAAE,EAAE,CAC7D,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,KAAK,EAAE,OAAwC,EAA0C,EAAE;QAC9G,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAC;YACnD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QACnD,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YACnG,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAC5C,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAChH,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,SAAS,CAAC,OAAwC;YACtD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,QAAQ,EAAE,KAAc;oBACxB,aAAa,EAAE,OAAO,CAAC,MAAM;oBAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,cAAc;wBACvC,CAAC,CAAC,yCAAyC;wBAC3C,CAAC,CAAC,kCAAkC;iBACvC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,wBAAiC,CAAC,CAAC,CAAC,SAAkB,CAAC;YACtG,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7B,QAAQ,EAAE,IAAa;gBACvB,aAAa,EAAE,OAAO,CAAC,MAAM;gBAC7B,UAAU,EAAE,qBAAqB,MAAM,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE;gBACnF,SAAS,EAAE,OAAO,CAAC,wBAAwB;gBAC3C,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,GAAG,EAAE;aACjB,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAU,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACxG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChE,MAAM,SAAS,CAAC,iBAAiB,CAAC,gDAAgD,CAAC,CAAC;YACpF,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC;gBACpD,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;gBAC1B,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC;gBACtC,YAAY,EAAE,MAAM;gBACpB,UAAU,EAAE,KAAK,IAAI,EAAE;oBACrB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;oBAC3C,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;oBAClF,OAAO,MAAM,CAAC;gBAChB,CAAC;aACF,CAAC,CAAC;YACH,MAAM,SAAS,CAAC,iBAAiB,EAAE,CAAC;YACpC,OAAO,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,MAAM,CACV,OAAwC,EACxC,QAA0C;YAE1C,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO,SAAS,KAAK,SAAS;mBACzB,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACrF,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAmC,EAAE,UAAkB;IAC3F,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG;QAChB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;IACF,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;WAC1C,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,MAAM;WACjC,qBAAqB,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,IAAY;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,aAAa,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA2D;IAE3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACnG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACnC,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,0CAA0C,EAAE,oBAAoB,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAC1E,CAAC"}