aimeat 2.1.0 → 2.2.0

package/dist/src/services/extension-files.d.ts

@@ -0,0 +1,64 @@
+/**
+ * @file src/services/extension-files.ts
+ * @description The file half of the extension sandbox: ctx.files.read / ctx.files.write. An
+ *   extension could hold memory records and make outbound text requests, and had no way to touch a
+ *   stored FILE — so every capability that works on bytes (an image, a PDF, an audio clip) had to
+ *   take base64 in its arguments and hand base64 back in its result. ctx.fetch cannot stand in for
+ *   it either: it answers with `text`, so binary read through it is corrupt by construction.
+ *
+ *   Two rules make this safe to hand to sandboxed code:
+ *     READ  — authorized as the CALLER, through the same authorizeRead() the /v1/pub route uses. An
+ *             extension can read exactly what the person invoking it could read, never more.
+ *     WRITE — lands in the caller's own storage under a reserved `ext/{name}/` prefix. The result
+ *             belongs to the person who paid for it and shows up in their files, and no extension
+ *             can overwrite something they wrote themselves.
+ *   Both are size-capped before any base64 crosses the QuickJS bridge, and a write goes through the
+ *   ordinary per-file limit and storage quota.
+ * @structure MAX_FILE_BYTES · parseRef · makeExtensionFiles (the ctx.files factory)
+ * @usage const files = makeExtensionFiles({ config, storage, callerGaii, extName });
+ *   const ctx: ExtensionCtx = { …, files };
+ * @version-history
+ *   v1.0.0 — 2026-07-26 — Initial: ctx.files.read/write so a capability can take a file REFERENCE
+ *     instead of its bytes (image pipelines, MCP-safe handoff).
+ *   v1.1.0 — 2026-07-26 — parseRef delegates to services/file-refs.ts: the same reference form now
+ *     serves MCP tools, DM attachments and task attachments, and there is one implementation of it.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+import { parseFileRef } from './file-refs.js';
+/** What may cross the sandbox bridge in one call, in decoded bytes. */
+export declare const MAX_EXT_FILE_BYTES: number;
+export interface ExtensionFileRef {
+    /** "<gaii>/<key>", or a bare key meaning the caller's own storage. */
+    ref: string;
+}
+/**
+ * Split "<gaii>/<key>" into its parts. A GAII always carries an @node, so the first path segment
+ * is an owner only when it looks like one; anything else is a plain key belonging to the caller.
+ * Kept as a named export here (the sandbox's vocabulary) over the shared implementation.
+ */
+export declare const parseRef: typeof parseFileRef;
+export declare function makeExtensionFiles(deps: {
+    config: AimeatConfig;
+    storage: Storage;
+    callerGaii: string;
+    callerOwner?: string;
+    extName: string;
+}): {
+    read(ref: string): Promise<{
+        base64: string;
+        mime: string;
+        size: number;
+        key: string;
+    } | null>;
+    write(key: string, base64: string, opts?: {
+        mime?: string;
+        visibility?: string;
+    }): Promise<{
+        key: string;
+        gaii: string;
+        url: string;
+        size: number;
+    }>;
+};
+//# sourceMappingURL=extension-files.d.ts.map

package/dist/src/services/extension-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-files.d.ts","sourceRoot":"","sources":["../../../src/services/extension-files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,uEAAuE;AACvE,eAAO,MAAM,kBAAkB,QAAkB,CAAC;AAElD,MAAM,WAAW,gBAAgB;IAC7B,sEAAsE;IACtE,GAAG,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,QAAQ,qBAAe,CAAC;AAErC,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACrC,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACnB,GAAG;IACA,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC/F,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5E,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzE,CA2EA"}

package/dist/src/services/extension-files.js

@@ -0,0 +1,88 @@
+import { authorizeRead } from './access-guard.js';
+import { parseFileRef } from './file-refs.js';
+import { checkStorageQuota } from './quota.js';
+/** What may cross the sandbox bridge in one call, in decoded bytes. */
+export const MAX_EXT_FILE_BYTES = 8 * 1024 * 1024;
+/**
+ * Split "<gaii>/<key>" into its parts. A GAII always carries an @node, so the first path segment
+ * is an owner only when it looks like one; anything else is a plain key belonging to the caller.
+ * Kept as a named export here (the sandbox's vocabulary) over the shared implementation.
+ */
+export const parseRef = parseFileRef;
+export function makeExtensionFiles(deps) {
+    const { config, storage, callerGaii, callerOwner, extName } = deps;
+    return {
+        async read(ref) {
+            const { gaii, key } = parseRef(String(ref || ''), callerGaii);
+            if (!key)
+                return null;
+            const file = await storage.getStorageFile(gaii, key);
+            if (!file)
+                return null;
+            // The extension reads AS the caller. A capability must never become a way to see a file
+            // the person invoking it could not open themselves.
+            const decision = await authorizeRead(storage, config, {
+                ownerGaii: gaii,
+                accessorGaii: callerGaii,
+                resourceKey: `storage:${key}`,
+                visibility: file.visibility,
+                groupId: file.groupId,
+                workspaceRef: file.workspaceRef,
+                accessorSub: callerGaii,
+                accessorOwner: callerOwner,
+                action: 'read',
+            });
+            if (!decision.allowed) {
+                throw new Error(`Access denied for ${gaii}/${key}: ${decision.reason ?? 'not permitted'}`);
+            }
+            if (file.size > MAX_EXT_FILE_BYTES) {
+                throw new Error(`File ${key} is ${Math.round(file.size / 1024)} kB, over the ${MAX_EXT_FILE_BYTES / 1024 / 1024} MB sandbox limit`);
+            }
+            return {
+                base64: Buffer.from(file.data).toString('base64'),
+                mime: file.mimeType,
+                size: file.size,
+                key: `${gaii}/${key}`,
+            };
+        },
+        async write(key, base64, opts) {
+            const clean = String(key || '').replace(/^\/+/, '').trim();
+            if (!clean)
+                throw new Error('write() needs a key');
+            // Reserved prefix: the result is attributable to the extension that made it, and no
+            // extension can land on top of a file the owner wrote by hand.
+            const full = clean.startsWith(`ext/${extName}/`) ? clean : `ext/${extName}/${clean}`;
+            const data = Buffer.from(String(base64 || '').replace(/^data:[^;]+;base64,/, ''), 'base64');
+            if (!data.length)
+                throw new Error('write() got no bytes');
+            if (data.length > MAX_EXT_FILE_BYTES) {
+                throw new Error(`Refusing ${Math.round(data.length / 1024)} kB: over the ${MAX_EXT_FILE_BYTES / 1024 / 1024} MB sandbox limit`);
+            }
+            if (data.length > config.storageMaxFileSizeMb * 1024 * 1024) {
+                throw new Error(`File size exceeds the node's ${config.storageMaxFileSizeMb}MB limit`);
+            }
+            const quota = await checkStorageQuota(config, storage, callerGaii, data.length);
+            if (!quota.allowed)
+                throw new Error(quota.reason ?? 'storage quota exceeded');
+            const visibility = opts?.visibility === 'public' ? 'public' : 'private';
+            await storage.createStorageFile({
+                key: full,
+                ownerGaii: callerGaii,
+                visibility,
+                mimeType: opts?.mime || 'application/octet-stream',
+                size: data.length,
+                data,
+                tags: [`ext:${extName}`],
+                createdAt: new Date().toISOString(),
+            });
+            return {
+                key: full,
+                gaii: callerGaii,
+                // Only meaningful for a public file; a private one is fetched with the owner's token.
+                url: `${config.baseUrl}/v1/pub/${encodeURIComponent(callerGaii)}/${full.split('/').map(encodeURIComponent).join('/')}`,
+                size: data.length,
+            };
+        },
+    };
+}
+//# sourceMappingURL=extension-files.js.map

package/dist/src/services/extension-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-files.js","sourceRoot":"","sources":["../../../src/services/extension-files.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,uEAAuE;AACvE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAOlD;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC,MAAM,UAAU,kBAAkB,CAAC,IAMlC;IAKG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEnE,OAAO;QACH,KAAK,CAAC,IAAI,CAAC,GAAG;YACV,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;YAC9D,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAEvB,wFAAwF;YACxF,oDAAoD;YACpD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE;gBAClD,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,UAAU;gBACxB,WAAW,EAAE,WAAW,GAAG,EAAE;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,WAAW,EAAE,UAAU;gBACvB,aAAa,EAAE,WAAW;gBAC1B,MAAM,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,IAAI,GAAG,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,iBAAiB,kBAAkB,GAAG,IAAI,GAAG,IAAI,mBAAmB,CAAC,CAAC;YACxI,CAAC;YACD,OAAO;gBACH,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACjD,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE;aACxB,CAAC;QACN,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI;YACzB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACnD,oFAAoF;YACpF,+DAA+D;YAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,IAAI,KAAK,EAAE,CAAC;YAErF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC5F,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1D,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,kBAAkB,GAAG,IAAI,GAAG,IAAI,mBAAmB,CAAC,CAAC;YACpI,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,oBAAoB,UAAU,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChF,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,wBAAwB,CAAC,CAAC;YAE9E,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,OAAO,CAAC,iBAAiB,CAAC;gBAC5B,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,UAAU;gBACrB,UAAU;gBACV,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,0BAA0B;gBAClD,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,IAAI;gBACJ,IAAI,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YACH,OAAO;gBACH,GAAG,EAAE,IAAI;gBACT,IAAI,EAAE,UAAU;gBAChB,sFAAsF;gBACtF,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,WAAW,kBAAkB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACtH,IAAI,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/src/services/extension-runtime.d.ts

@@ -33,6 +33,25 @@ export interface ExtensionCtx {
         text: string;
         headers: Record<string, string>;
     }>;
+    /** Stored FILES, by reference. Optional the way notify/email are: a context that cannot offer
+     *  it (a scheduled run with no caller) simply does not, and the guest sees undefined. */
+    files?: {
+        read(ref: string): Promise<{
+            base64: string;
+            mime: string;
+            size: number;
+            key: string;
+        } | null>;
+        write(key: string, base64: string, opts?: {
+            mime?: string;
+            visibility?: string;
+        }): Promise<{
+            key: string;
+            gaii: string;
+            url: string;
+            size: number;
+        }>;
+    };
     caller: {
         gaii: string;
         owner: string;
@@ -55,6 +74,20 @@ export interface ExtensionCtx {
     }): Promise<boolean>;
     email?(to: string, subject: string, body: string): Promise<boolean>;
 }
+/**
+ * The EXACT source of `ctx.hash`, exported so an app that must agree with an extension on a
+ * derived value can run the identical function in the browser.
+ *
+ * Why this exists: the sandbox has no `crypto.subtle`, so an extension author reaches for a
+ * hand-rolled hash while the browser side reaches for SHA-256, and the two silently disagree. That
+ * is not hypothetical — it shipped: an app and its extension hashed the same spreadsheet inputs
+ * differently, so every value the app computed looked stale to the server and would have been
+ * recomputed and re-charged forever. One published function, usable verbatim on both sides.
+ *
+ * FNV-1a style, 64 bits as two 32-bit lanes. Not cryptographic: use it for cache keys, change
+ * detection and content identity, never for signatures or secrets.
+ */
+export declare const EXT_HASH_REFERENCE_JS = "function aimeatHash(s) {\n  s = String(s);\n  var h1 = 0x811c9dc5, h2 = 0x01000193;\n  for (var i = 0; i < s.length; i++) {\n    var ch = s.charCodeAt(i);\n    h1 = (h1 ^ ch) >>> 0; h1 = Math.imul(h1, 0x01000193) >>> 0;\n    h2 = (h2 ^ (ch + i)) >>> 0; h2 = Math.imul(h2, 0x85ebca6b) >>> 0;\n  }\n  return ('00000000' + h1.toString(16)).slice(-8) + ('00000000' + h2.toString(16)).slice(-8);\n}";
 export interface ExtensionLimits {
     memoryMb: number;
     timeoutMs: number;

package/dist/src/services/extension-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extension-runtime.d.ts","sourceRoot":"","sources":["../../../src/services/extension-runtime.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,YAAY;IACzB,MAAM,EAAE;QACJ,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QAC1C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC,CAAC;QACxG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;KACtE,CAAC;IACF,MAAM,EAAE;QACJ,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACxF,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;KAClC,CAAC;IACF,OAAO,EAAE;QACL,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACxD,CAAC;IACF,KAAK,EAAE;QACH,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KAC5C,CAAC;IACF,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;IACzL,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACzD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,CAAC;IACF,GAAG,EAAE;QACD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACxD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC5D,CAAC;IACF,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3G,KAAK,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,eAAe;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACvB;AA4JD,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG;IAAE,GAAG,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,eAAe,CAAA;CAAE,CA+BtG;AAUD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGnD;AAYD,wBAAsB,sBAAsB,CACxC,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,YAAY,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,EAAE,eAAe,GACxB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAwMlC"}
+{"version":3,"file":"extension-runtime.d.ts","sourceRoot":"","sources":["../../../src/services/extension-runtime.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,YAAY;IACzB,MAAM,EAAE;QACJ,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QAC1C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC,CAAC;QACxG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;KACtE,CAAC;IACF,MAAM,EAAE;QACJ,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACxF,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;KAClC,CAAC;IACF,OAAO,EAAE;QACL,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACxD,CAAC;IACF,KAAK,EAAE;QACH,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KAC5C,CAAC;IACF,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;IACzL;6FACyF;IACzF,KAAK,CAAC,EAAE;QACJ,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC;QAC/F,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,GAC5E,OAAO,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACzE,CAAC;IACF,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACzD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,CAAC;IACF,GAAG,EAAE;QACD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACxD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC5D,CAAC;IACF,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3G,KAAK,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAKvE;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB,8YAShC,CAAC;AAEH,MAAM,WAAW,eAAe;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACvB;AA0KD,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG;IAAE,GAAG,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,eAAe,CAAA;CAAE,CA+BtG;AAUD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGnD;AAYD,wBAAsB,sBAAsB,CACxC,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,YAAY,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,EAAE,eAAe,GACxB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAuNlC"}

package/dist/src/services/extension-runtime.js

@@ -11,10 +11,39 @@
  *   v2.0.0 -- 2026-04-29 -- Replace isolated-vm with quickjs-emscripten (pure WASM, no C++ build tools)
  *   v2.1.0 -- 2026-07-07 -- Await/abort in-flight host calls before disposing the runtime; fixes JS_FreeRuntime gc assertion abort when a script rejects with sibling async calls still pending (e.g. multi-feed fetch, one feed fails)
  *   v2.2.0 -- 2026-07-08 -- Self-heal a poisoned WASM engine: detect an emscripten abort and rebuild the module singleton so one abort no longer fails every later run until a process restart
+ *   v2.4.0 -- 2026-07-26 -- Give the sandbox the two primitives every author was otherwise forced to
+ *     hand-roll: `ctx.hash(s)` (FNV-1a 64-bit, published as EXT_HASH_REFERENCE_JS so a browser app
+ *     can compute the SAME value -- there is no crypto.subtle in QuickJS, and an app/extension pair
+ *     that hashes differently silently recomputes and re-charges everything) and `ctx.now()` (the
+ *     run's start timestamp, fixed for the whole action so multi-record writes stay consistent).
+ *     Both are pure guest-side helpers: no host call, no API-budget cost.
  *   v2.3.0 -- 2026-07-18 -- transformScript preserves top-level helpers/consts declared ABOVE `export default` (rewrites the export in place instead of wrapping the whole script) -- fixes QuickJS "unexpected token 'const'" for actions that define a helper above the export, which the extension prompt explicitly permits
  */
 import { getQuickJS, newQuickJSWASMModule, shouldInterruptAfterDeadline } from 'quickjs-emscripten';
 import { safeFetch } from '../utils/url-validator.js';
+/**
+ * The EXACT source of `ctx.hash`, exported so an app that must agree with an extension on a
+ * derived value can run the identical function in the browser.
+ *
+ * Why this exists: the sandbox has no `crypto.subtle`, so an extension author reaches for a
+ * hand-rolled hash while the browser side reaches for SHA-256, and the two silently disagree. That
+ * is not hypothetical — it shipped: an app and its extension hashed the same spreadsheet inputs
+ * differently, so every value the app computed looked stale to the server and would have been
+ * recomputed and re-charged forever. One published function, usable verbatim on both sides.
+ *
+ * FNV-1a style, 64 bits as two 32-bit lanes. Not cryptographic: use it for cache keys, change
+ * detection and content identity, never for signatures or secrets.
+ */
+export const EXT_HASH_REFERENCE_JS = `function aimeatHash(s) {
+  s = String(s);
+  var h1 = 0x811c9dc5, h2 = 0x01000193;
+  for (var i = 0; i < s.length; i++) {
+    var ch = s.charCodeAt(i);
+    h1 = (h1 ^ ch) >>> 0; h1 = Math.imul(h1, 0x01000193) >>> 0;
+    h2 = (h2 ^ (ch + i)) >>> 0; h2 = Math.imul(h2, 0x85ebca6b) >>> 0;
+  }
+  return ('00000000' + h1.toString(16)).slice(-8) + ('00000000' + h2.toString(16)).slice(-8);
+}`;
 // ── Internal helpers ─────────────────────────────────────────
 function setStringGlobal(vm, name, value) {
     if (value === null) {
@@ -106,7 +135,17 @@ ${userFnDecl}
         return JSON.parse(raw);
     }
 
+    // Pure helpers: no host round trip, so they cost no API-call budget and add no latency.
+    // ctx.hash is the node's PUBLISHED hash (EXT_HASH_REFERENCE_JS) so a browser app can compute
+    // the identical value; the sandbox has no crypto.subtle, and letting each author invent one is
+    // how an app and its extension end up disagreeing about what is up to date.
+    ${EXT_HASH_REFERENCE_JS.replace(/^function aimeatHash/, 'function __hash')}
+
     const ctx = {
+        // One timestamp for the whole action run: two calls cannot disagree, so an action that
+        // stamps several records stays internally consistent and replayable.
+        now: () => __runStartedAt,
+        hash: (s) => __hash(s),
         memory: {
             get:       async (key)            => __call(__memory_get, [key]),
             set:       async (key, value)     => __call(__memory_set, [key, JSON.stringify(value)]),
@@ -115,6 +154,10 @@ ${userFnDecl}
             getPublic: async (namespace, key) => __call(__memory_getPublic, [namespace, key]),
         },
         fetch: async (url, opts) => __call(__fetch, [url, opts ? JSON.stringify(opts) : '{}']),
+        files: __files_read ? {
+            read:  async (ref)              => __call(__files_read, [ref]),
+            write: async (key, b64, opts)   => __call(__files_write, [key, b64, opts ? JSON.stringify(opts) : '{}']),
+        } : undefined,
         wallet: {
             consume:    __wallet_consume    ? (async (amount, reason) => __call(__wallet_consume, [String(amount), reason]))  : undefined,
             getBalance: __wallet_balance    ? (async ()               => __call(__wallet_balance, []))                         : undefined,
@@ -220,6 +263,8 @@ export async function executeExtensionAction(scriptContent, ctx, input, limits)
         const counter = { count: 0 };
         // ── Serialized data ──────────────────────────────────
         setStringGlobal(vm, '__inputJson', JSON.stringify(input));
+        // Captured ONCE here, so ctx.now() is stable across the whole action.
+        setStringGlobal(vm, '__runStartedAt', new Date().toISOString());
         setStringGlobal(vm, '__callerJson', JSON.stringify(ctx.caller));
         setStringGlobal(vm, '__configJson', JSON.stringify(ctx.config));
         setStringGlobal(vm, '__instanceJson', ctx.instance ? JSON.stringify(ctx.instance) : null);
@@ -277,6 +322,13 @@ export async function executeExtensionAction(scriptContent, ctx, input, limits)
             resp.headers.forEach((v, k) => { headers[k] = v; });
             return { status: resp.status, ok: resp.ok, text, headers };
         }, counter, limits.maxApiCalls, inflight);
+        // ── Files API ─────────────────────────────────────────
+        // A capability that works on bytes takes a REFERENCE and answers with one. Both sides are
+        // size-capped in the factory before any base64 crosses this bridge.
+        registerAsyncHostFn(vm, '__files_read', ctx.files ? async (ref) => ctx.files.read(ref) : null, counter, limits.maxApiCalls, inflight);
+        registerAsyncHostFn(vm, '__files_write', ctx.files
+            ? async (key, b64, optsJson) => ctx.files.write(key, b64, JSON.parse(optsJson || '{}'))
+            : null, counter, limits.maxApiCalls, inflight);
         // ── Wallet API ────────────────────────────────────────
         registerAsyncHostFn(vm, '__wallet_consume', ctx.wallet.consume
             ? async (amountStr, reason) => ctx.wallet.consume(Number(amountStr), reason)

package/dist/src/services/extension-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-runtime.js","sourceRoot":"","sources":["../../../src/services/extension-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAEpG,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AA6CtD,gEAAgE;AAEhE,SAAS,eAAe,CAAC,EAAkB,EAAE,IAAY,EAAE,KAAoB;IAC3E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO;IACX,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,EAAkB;IACjC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK;QAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,mBAAmB,CACxB,EAAkB,EAClB,IAAY,EACZ,EAAoD,EACpD,OAA0B,EAC1B,WAAmB,EACnB,QAA+B;IAE/B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QACd,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,UAA2B,EAAE,EAAE;QACrE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC;QAEhC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,CAAC,KAAK,GAAG,WAAW,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;QAED,MAAM,QAAQ,GAAkB,EAAE,CAAC,GAAG,IAAI,CAAC;aACtC,IAAI,CAAC,MAAM,CAAC,EAAE;YACX,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;gBAC/C,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,CAAC;QACL,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACpB,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;QACL,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACV,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,IAAI,EAAE,CAAC,KAAK;gBAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEP,qEAAqE;QACrE,yEAAyE;QACzE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC,MAAM,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,aAAa,CAClB,EAAkB,EAClB,IAAY,EACZ,EAAyD;IAEzD,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,UAA2B,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,IAAyC,CAAC;QAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACrE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;YAC3D,CAAC;QACL,CAAC;QACD,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,aAAqB;IAC1C,wFAAwF;IACxF,wFAAwF;IACxF,uFAAuF;IACvF,4FAA4F;IAC5F,6FAA6F;IAC7F,kGAAkG;IAClG,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7F,OAAO,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC;AACvE,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC1C,OAAO;EACT,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CX,CAAC;AACF,CAAC;AASD,MAAM,UAAU,iBAAiB,CAAC,GAAiB;IAC/C,MAAM,SAAS,GAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;IAE9B,MAAM,aAAa,GAA2B;QAC1C,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACf,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACtB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC3B,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;YACnC,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAClB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;YACjC,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;YAChC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC;YAC5C,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;KACJ,CAAC;IAEF,OAAO;QACH,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE;QACtC,SAAS;KACZ,CAAC;AACN,CAAC;AAED,gEAAgE;AAEhE,IAAI,cAAc,GAAsC,IAAI,CAAC;AAC7D,SAAS,mBAAmB;IACxB,IAAI,CAAC,cAAc;QAAE,cAAc,GAAG,UAAU,EAAE,CAAC;IACnD,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACtC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AACrG,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB;IAC1B,cAAc,GAAG,oBAAoB,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,aAAqB,EACrB,GAAiB,EACjB,KAA8B,EAC9B,MAAuB;IAEvB,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAE5C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IACrC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IACtD,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAEzF,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAEhC,2EAA2E;IAC3E,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,4EAA4E;IAC5E,qEAAqE;IACrE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE7C,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAE7B,wDAAwD;QACxD,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,eAAe,CAAC,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAE1F,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAClC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAClC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAClC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EACpG,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EACrC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAA4B,CAAC;YACrE,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC,EACD,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EACrC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EACrC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,oBAAoB,EACxC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,EAC9D,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAC7B,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAEvC,CAAC;YACF,uFAAuF;YACvF,kFAAkF;YAClF,6FAA6F;YAC7F,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;gBAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;aACtG,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAEpE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzD,MAAM,SAAS,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACzE,CAAC;YAED,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACvD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,YAAY,GAAG,KAAK,CAAC;gBACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBACxC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;wBACzE,YAAY,GAAG,IAAI,CAAC;wBAAC,MAAM;oBAC/B,CAAC;oBACD,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;wBAC5D,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;wBACnE,YAAY,GAAG,IAAI,CAAC;wBAAC,MAAM;oBAC/B,CAAC;gBACL,CAAC;gBACD,IAAI,YAAY;oBAAE,OAAO,GAAG,OAAO,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/D,CAAC,EACD,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,kBAAkB,EACtC,GAAG,CAAC,MAAM,CAAC,OAAO;YACd,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,OAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAC7E,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,kBAAkB,EACtC,GAAG,CAAC,MAAM,CAAC,UAAU;YACjB,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,UAAW,EAAE;YACtC,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EACrC,GAAG,CAAC,OAAO,CAAC,KAAK;YACb,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAM,CAAC,IAAI,EAAE,KAAK,CAAC;YACxD,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,mBAAmB,EACvC,GAAG,CAAC,OAAO,CAAC,OAAO;YACf,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;YAC1D,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,kBAAkB,EACtC,GAAG,CAAC,KAAK,CAAC,QAAQ;YACd,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAS,CAAC,IAAI,CAAC;YAC3C,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,aAAa,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhD,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,UAAU,EAC9B,GAAG,CAAC,MAAM;YACN,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,MAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1H,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAC7B,GAAG,CAAC,KAAK;YACL,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC;YAC5D,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAElD,0DAA0D;QAC1D,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAClD,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAE7B,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC;QACtC,aAAa,CAAC,OAAO,EAAE,CAAC;QAExB,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC9C,YAAY,CAAC,OAAO,EAAE,CAAC;QAEvB,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAA4B,CAAC;IAC7D,CAAC;YAAS,CAAC;QACP,yEAAyE;QACzE,mEAAmE;QACnE,qEAAqE;QACrE,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC;YACD,OAAO,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;gBACxC,kEAAkE;gBAClE,+DAA+D;gBAC/D,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBACxB,IAAI,OAAO,CAAC,KAAK;oBAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACpD,CAAC;YACD,IAAI,EAAE,CAAC,KAAK;gBAAE,EAAE,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,KAAK;gBAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACnB,qEAAqE;YACrE,qEAAqE;YACrE,sEAAsE;YACtE,iEAAiE;YACjE,mEAAmE;YACnE,IAAI,aAAa,CAAC,WAAW,CAAC;gBAAE,qBAAqB,EAAE,CAAC;QAC5D,CAAC;IACL,CAAC;AACL,CAAC"}
+{"version":3,"file":"extension-runtime.js","sourceRoot":"","sources":["../../../src/services/extension-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAEpG,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAkDtD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;EASnC,CAAC;AAQH,gEAAgE;AAEhE,SAAS,eAAe,CAAC,EAAkB,EAAE,IAAY,EAAE,KAAoB;IAC3E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO;IACX,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,EAAkB;IACjC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK;QAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,mBAAmB,CACxB,EAAkB,EAClB,IAAY,EACZ,EAAoD,EACpD,OAA0B,EAC1B,WAAmB,EACnB,QAA+B;IAE/B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QACd,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,UAA2B,EAAE,EAAE;QACrE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC;QAEhC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,CAAC,KAAK,GAAG,WAAW,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;QAED,MAAM,QAAQ,GAAkB,EAAE,CAAC,GAAG,IAAI,CAAC;aACtC,IAAI,CAAC,MAAM,CAAC,EAAE;YACX,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;gBAC/C,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,CAAC;QACL,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACpB,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;QACL,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACV,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,IAAI,EAAE,CAAC,KAAK;gBAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEP,qEAAqE;QACrE,yEAAyE;QACzE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC,MAAM,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,aAAa,CAClB,EAAkB,EAClB,IAAY,EACZ,EAAyD;IAEzD,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,UAA2B,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,IAAyC,CAAC;QAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACrE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;YAC3D,CAAC;QACL,CAAC;QACD,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,aAAqB;IAC1C,wFAAwF;IACxF,wFAAwF;IACxF,uFAAuF;IACvF,4FAA4F;IAC5F,6FAA6F;IAC7F,kGAAkG;IAClG,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7F,OAAO,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC;AACvE,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC1C,OAAO;EACT,UAAU;;;;;;;;;;;;MAYN,qBAAqB,CAAC,OAAO,CAAC,sBAAsB,EAAE,iBAAiB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiD7E,CAAC;AACF,CAAC;AASD,MAAM,UAAU,iBAAiB,CAAC,GAAiB;IAC/C,MAAM,SAAS,GAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;IAE9B,MAAM,aAAa,GAA2B;QAC1C,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACf,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACtB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC3B,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;YACnC,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAClB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;YACjC,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;YAChC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC;YAC5C,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;KACJ,CAAC;IAEF,OAAO;QACH,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE;QACtC,SAAS;KACZ,CAAC;AACN,CAAC;AAED,gEAAgE;AAEhE,IAAI,cAAc,GAAsC,IAAI,CAAC;AAC7D,SAAS,mBAAmB;IACxB,IAAI,CAAC,cAAc;QAAE,cAAc,GAAG,UAAU,EAAE,CAAC;IACnD,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACtC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AACrG,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB;IAC1B,cAAc,GAAG,oBAAoB,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,aAAqB,EACrB,GAAiB,EACjB,KAA8B,EAC9B,MAAuB;IAEvB,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAE5C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IACrC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IACtD,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAEzF,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAEhC,2EAA2E;IAC3E,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,4EAA4E;IAC5E,qEAAqE;IACrE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE7C,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAE7B,wDAAwD;QACxD,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,sEAAsE;QACtE,eAAe,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAChE,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,eAAe,CAAC,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAE1F,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAClC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAClC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAClC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EACpG,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EACrC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAA4B,CAAC;YACrE,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC,EACD,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EACrC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EACrC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,oBAAoB,EACxC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,EAC9D,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAC7B,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAEvC,CAAC;YACF,uFAAuF;YACvF,kFAAkF;YAClF,6FAA6F;YAC7F,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;gBAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;aACtG,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAEpE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzD,MAAM,SAAS,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACzE,CAAC;YAED,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACvD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,YAAY,GAAG,KAAK,CAAC;gBACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBACxC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;wBACzE,YAAY,GAAG,IAAI,CAAC;wBAAC,MAAM;oBAC/B,CAAC;oBACD,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;wBAC5D,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;wBACnE,YAAY,GAAG,IAAI,CAAC;wBAAC,MAAM;oBAC/B,CAAC;gBACL,CAAC;gBACD,IAAI,YAAY;oBAAE,OAAO,GAAG,OAAO,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/D,CAAC,EACD,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,0FAA0F;QAC1F,oEAAoE;QACpE,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAClC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EACtD,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,eAAe,EACnC,GAAG,CAAC,KAAK;YACL,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,KAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAA2C,CAAC;YAClI,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,kBAAkB,EACtC,GAAG,CAAC,MAAM,CAAC,OAAO;YACd,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,OAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAC7E,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,kBAAkB,EACtC,GAAG,CAAC,MAAM,CAAC,UAAU;YACjB,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,UAAW,EAAE;YACtC,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EACrC,GAAG,CAAC,OAAO,CAAC,KAAK;YACb,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAM,CAAC,IAAI,EAAE,KAAK,CAAC;YACxD,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,mBAAmB,EACvC,GAAG,CAAC,OAAO,CAAC,OAAO;YACf,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;YAC1D,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,kBAAkB,EACtC,GAAG,CAAC,KAAK,CAAC,QAAQ;YACd,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAS,CAAC,IAAI,CAAC;YAC3C,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,aAAa,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhD,yDAAyD;QACzD,mBAAmB,CAAC,EAAE,EAAE,UAAU,EAC9B,GAAG,CAAC,MAAM;YACN,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,MAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1H,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAC7B,GAAG,CAAC,KAAK;YACL,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC;YAC5D,CAAC,CAAC,IAAI,EACV,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE3C,yDAAyD;QACzD,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAElD,0DAA0D;QAC1D,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAClD,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAE7B,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC;QACtC,aAAa,CAAC,OAAO,EAAE,CAAC;QAExB,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC9C,YAAY,CAAC,OAAO,EAAE,CAAC;QAEvB,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAA4B,CAAC;IAC7D,CAAC;YAAS,CAAC;QACP,yEAAyE;QACzE,mEAAmE;QACnE,qEAAqE;QACrE,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC;YACD,OAAO,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;gBACxC,kEAAkE;gBAClE,+DAA+D;gBAC/D,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBACxB,IAAI,OAAO,CAAC,KAAK;oBAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACpD,CAAC;YACD,IAAI,EAAE,CAAC,KAAK;gBAAE,EAAE,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,KAAK;gBAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACnB,qEAAqE;YACrE,qEAAqE;YACrE,sEAAsE;YACtE,iEAAiE;YACjE,mEAAmE;YACnE,IAAI,aAAa,CAAC,WAAW,CAAC;gBAAE,qBAAqB,EAAE,CAAC;QAC5D,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/src/services/file-refs.d.ts

@@ -0,0 +1,105 @@
+/**
+ * @file src/services/file-refs.ts
+ * @description One place that turns a FILE REFERENCE into either an authorized handle or a legible
+ *   refusal. A reference is `"<gaii>/<key>"` (a bare key means the caller's own storage) — the same
+ *   form `ctx.files.read` already takes, so an extension, an MCP tool, a task attachment and a DM
+ *   attachment all name a file the same way.
+ *
+ *   Why this exists: storage is keyed by (ownerGaii, key), and every agent-facing read path used to
+ *   look up ONLY the caller's own namespace. A file the owner uploaded answered "not found" to that
+ *   owner's own agent, so a PDF could be handed to an agent as a reference it could never open. The
+ *   authorization was never the problem — `visibility:'owner'` and consent grants already cover it;
+ *   the lookup was. Reads here go through the same authorizeRead() the /v1/pub route uses, as the
+ *   CALLER, so an agent sees exactly what the principal invoking it could see and nothing more.
+ *
+ *   Bytes never travel through this module: it answers with a presigned, TTL-limited download_url.
+ *   A FOREIGN file gets a deliberately shorter TTL than the caller's own — the handle outlives a
+ *   revoked grant until it expires, so the window for someone else's data is kept small.
+ * @structure
+ *   - parseFileRef(ref, callerGaii) — split "<gaii>/<key>" (bare key → caller's namespace)
+ *   - resolveFileRef(...) — locate + authorize, never throws, returns a typed access verdict
+ *   - fileHandleFor(...) — resolveFileRef + mint the presigned download handle
+ *   - OWN_HANDLE_TTL_SECONDS / FOREIGN_HANDLE_TTL_SECONDS
+ * @usage
+ *   import { fileHandleFor } from '../services/file-refs.js';
+ *   const h = await fileHandleFor(storage, config, `${ownerGhii}/${key}`, { gaii: agentGaii });
+ *   if (h.access !== 'granted') return refuse(h.reason);
+ * @version-history
+ *   v1.0.0 — 2026-07-26 — Initial: shared file-reference resolution so an agent can read a file it
+ *     does not own (owner-uploaded PDFs, DM attachments, task attachments) through one guard.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage, StorageFileRecord } from '../storage/interface.js';
+/** A handle for one of the caller's OWN files may live an hour (parity with GET /v1/storage?mode=handle). */
+export declare const OWN_HANDLE_TTL_SECONDS = 3600;
+/** Someone else's file: short enough that a revoked grant stops mattering quickly. */
+export declare const FOREIGN_HANDLE_TTL_SECONDS = 900;
+export interface FileRefAccessor {
+    /** The resolved identity of the caller (GHII / GAII / GEAI) — never a client-supplied id. */
+    gaii: string;
+    /** `req.auth.sub` when there is one (threaded into the workspace read gate). */
+    sub?: string;
+    /** The caller's bare owner name (threaded into the workspace read gate). */
+    owner?: string;
+}
+export type FileRefAccess = 'granted' | 'denied' | 'missing';
+export interface ResolvedFileRef {
+    access: FileRefAccess;
+    /** Canonical "<gaii>/<key>" form of what was asked for. */
+    ref: string;
+    ownerGaii: string;
+    key: string;
+    /** Present only when access === 'granted'. */
+    file?: StorageFileRecord;
+    /** Machine-readable cause on a non-granted verdict. */
+    reason?: string;
+}
+export interface FileHandle {
+    access: FileRefAccess;
+    ref: string;
+    owner_gaii: string;
+    key: string;
+    mime_type?: string;
+    size?: number;
+    name?: string;
+    /** Presigned, no-auth GET. Absent unless access === 'granted'. */
+    download_url?: string;
+    expires_in_seconds?: number;
+    reason?: string;
+}
+/**
+ * Split `"<gaii>/<key>"` into its parts. A GAII always carries an `@node` (and an extension namespace
+ * starts with `ext:`), so the first path segment is an owner ONLY when it looks like one — a plain
+ * `dm-out/invoice.pdf` stays a key in the caller's own namespace.
+ */
+export declare function parseFileRef(ref: string, callerGaii: string): {
+    gaii: string;
+    key: string;
+};
+/** Build the canonical reference string for a stored file. */
+export declare function fileRefFor(ownerGaii: string, key: string): string;
+/**
+ * Locate the file a reference names and decide whether `accessor` may read it. Never throws: a
+ * missing file, an unreadable one and a malformed reference all come back as a verdict, because
+ * every caller here is a tool or a route that owes the agent a legible answer rather than a stack
+ * trace. Existence is NOT disclosed to a caller who may not read the file — a denied read reports
+ * 'denied' whether or not the bytes exist, matching GET /v1/pub.
+ */
+export declare function resolveFileRef(storage: Storage, config: AimeatConfig, ref: string, accessor: FileRefAccessor): Promise<ResolvedFileRef>;
+/**
+ * Turn an already-resolved reference into a handle. Split out from fileHandleFor so a caller that
+ * needs the record for something else (an inline text read, a byte stream) pays for ONE lookup —
+ * getStorageFile loads the data, and resolving twice would read a large file twice.
+ */
+export declare function handleFromResolved(config: AimeatConfig, resolved: ResolvedFileRef, accessorGaii: string, opts?: {
+    name?: string;
+}): Promise<FileHandle>;
+/**
+ * Resolve a reference and, when the read is allowed, mint the presigned download handle. This is what
+ * every agent-facing surface returns: the agent gets a URL it can hand to a fetch, a document parser
+ * or a human, and the bytes never enter a model context.
+ */
+export declare function fileHandleFor(storage: Storage, config: AimeatConfig, ref: string, accessor: FileRefAccessor, opts?: {
+    name?: string;
+}): Promise<FileHandle>;
+//# sourceMappingURL=file-refs.d.ts.map

package/dist/src/services/file-refs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-refs.d.ts","sourceRoot":"","sources":["../../../src/services/file-refs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAI1E,6GAA6G;AAC7G,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,sFAAsF;AACtF,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC5B,6FAA6F;IAC7F,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7D,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,2DAA2D;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,8CAA8C;IAC9C,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAS3F;AAED,8DAA8D;AAC9D,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAChC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,eAAe,GAC1B,OAAO,CAAC,eAAe,CAAC,CAsC1B;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACzB,OAAO,CAAC,UAAU,CAAC,CAyBrB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAC/B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,eAAe,EACzB,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACzB,OAAO,CAAC,UAAU,CAAC,CAGrB"}

package/dist/src/services/file-refs.js

@@ -0,0 +1,106 @@
+import { authorizeRead } from './access-guard.js';
+import { generateDownloadToken } from './download-token.js';
+/** A handle for one of the caller's OWN files may live an hour (parity with GET /v1/storage?mode=handle). */
+export const OWN_HANDLE_TTL_SECONDS = 3600;
+/** Someone else's file: short enough that a revoked grant stops mattering quickly. */
+export const FOREIGN_HANDLE_TTL_SECONDS = 900;
+/**
+ * Split `"<gaii>/<key>"` into its parts. A GAII always carries an `@node` (and an extension namespace
+ * starts with `ext:`), so the first path segment is an owner ONLY when it looks like one — a plain
+ * `dm-out/invoice.pdf` stays a key in the caller's own namespace.
+ */
+export function parseFileRef(ref, callerGaii) {
+    const slash = String(ref ?? '').indexOf('/');
+    if (slash > 0) {
+        const head = ref.slice(0, slash);
+        if (head.includes('@') || head.startsWith('ext:')) {
+            return { gaii: head, key: ref.slice(slash + 1) };
+        }
+    }
+    return { gaii: callerGaii, key: String(ref ?? '') };
+}
+/** Build the canonical reference string for a stored file. */
+export function fileRefFor(ownerGaii, key) {
+    return `${ownerGaii}/${key}`;
+}
+/**
+ * Locate the file a reference names and decide whether `accessor` may read it. Never throws: a
+ * missing file, an unreadable one and a malformed reference all come back as a verdict, because
+ * every caller here is a tool or a route that owes the agent a legible answer rather than a stack
+ * trace. Existence is NOT disclosed to a caller who may not read the file — a denied read reports
+ * 'denied' whether or not the bytes exist, matching GET /v1/pub.
+ */
+export async function resolveFileRef(storage, config, ref, accessor) {
+    const { gaii, key } = parseFileRef(ref, accessor.gaii);
+    const canonical = fileRefFor(gaii, key);
+    if (!key) {
+        return { access: 'missing', ref: canonical, ownerGaii: gaii, key, reason: 'empty_key' };
+    }
+    const file = await storage.getStorageFile(gaii, key);
+    const own = gaii === accessor.gaii;
+    if (!file) {
+        return {
+            access: 'missing',
+            ref: canonical,
+            ownerGaii: gaii,
+            key,
+            // The single most common mistake: naming a bare key for a file that belongs to the OWNER.
+            reason: own
+                ? 'not_found_in_your_namespace'
+                : 'not_found',
+        };
+    }
+    const decision = await authorizeRead(storage, config, {
+        ownerGaii: gaii,
+        accessorGaii: accessor.gaii,
+        resourceKey: `storage:${key}`,
+        visibility: file.visibility,
+        groupId: file.groupId,
+        workspaceRef: file.workspaceRef,
+        accessorSub: accessor.sub,
+        accessorOwner: accessor.owner,
+        action: 'read',
+    });
+    if (!decision.allowed) {
+        return { access: 'denied', ref: canonical, ownerGaii: gaii, key, reason: decision.reason ?? 'not_permitted' };
+    }
+    return { access: 'granted', ref: canonical, ownerGaii: gaii, key, file };
+}
+/**
+ * Turn an already-resolved reference into a handle. Split out from fileHandleFor so a caller that
+ * needs the record for something else (an inline text read, a byte stream) pays for ONE lookup —
+ * getStorageFile loads the data, and resolving twice would read a large file twice.
+ */
+export async function handleFromResolved(config, resolved, accessorGaii, opts) {
+    const base = {
+        access: resolved.access,
+        ref: resolved.ref,
+        owner_gaii: resolved.ownerGaii,
+        key: resolved.key,
+    };
+    if (opts?.name)
+        base.name = opts.name;
+    if (resolved.access !== 'granted' || !resolved.file) {
+        return { ...base, reason: resolved.reason };
+    }
+    const file = resolved.file;
+    const ttl = resolved.ownerGaii === accessorGaii ? OWN_HANDLE_TTL_SECONDS : FOREIGN_HANDLE_TTL_SECONDS;
+    const token = await generateDownloadToken({ sub: file.ownerGaii, key: file.key, mimeType: file.mimeType, size: file.size }, ttl);
+    return {
+        ...base,
+        mime_type: file.mimeType,
+        size: file.size,
+        download_url: `${config.baseUrl}/v1/download/${token}`,
+        expires_in_seconds: ttl,
+    };
+}
+/**
+ * Resolve a reference and, when the read is allowed, mint the presigned download handle. This is what
+ * every agent-facing surface returns: the agent gets a URL it can hand to a fetch, a document parser
+ * or a human, and the bytes never enter a model context.
+ */
+export async function fileHandleFor(storage, config, ref, accessor, opts) {
+    const resolved = await resolveFileRef(storage, config, ref, accessor);
+    return handleFromResolved(config, resolved, accessor.gaii, opts);
+}
+//# sourceMappingURL=file-refs.js.map

package/dist/src/services/file-refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-refs.js","sourceRoot":"","sources":["../../../src/services/file-refs.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,6GAA6G;AAC7G,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,sFAAsF;AACtF,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAuC9C;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,UAAkB;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QACrD,CAAC;IACL,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,GAAW;IACrD,OAAO,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAChC,OAAgB,EAChB,MAAoB,EACpB,GAAW,EACX,QAAyB;IAEzB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO;YACH,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,SAAS,EAAE,IAAI;YACf,GAAG;YACH,0FAA0F;YAC1F,MAAM,EAAE,GAAG;gBACP,CAAC,CAAC,6BAA6B;gBAC/B,CAAC,CAAC,WAAW;SACpB,CAAC;IACN,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE;QAClD,SAAS,EAAE,IAAI;QACf,YAAY,EAAE,QAAQ,CAAC,IAAI;QAC3B,WAAW,EAAE,WAAW,GAAG,EAAE;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,QAAQ,CAAC,GAAG;QACzB,aAAa,EAAE,QAAQ,CAAC,KAAK;QAC7B,MAAM,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;IAClH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAAoB,EACpB,QAAyB,EACzB,YAAoB,EACpB,IAAwB;IAExB,MAAM,IAAI,GAAe;QACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,GAAG,EAAE,QAAQ,CAAC,GAAG;KACpB,CAAC;IACF,IAAI,IAAI,EAAE,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACtG,MAAM,KAAK,GAAG,MAAM,qBAAqB,CACrC,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAChF,GAAG,CACN,CAAC;IACF,OAAO;QACH,GAAG,IAAI;QACP,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,GAAG,MAAM,CAAC,OAAO,gBAAgB,KAAK,EAAE;QACtD,kBAAkB,EAAE,GAAG;KAC1B,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,OAAgB,EAChB,MAAoB,EACpB,GAAW,EACX,QAAyB,EACzB,IAAwB;IAExB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtE,OAAO,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrE,CAAC"}

package/dist/src/services/metered-entitlements.d.ts

@@ -95,6 +95,12 @@ export interface MeteredEntitlement {
     budget: EntitlementBudget;
     /** Platform cut override (0–100). `null` = use the node's configured marketplace fee. */
     rakePercent: number | null;
+    /**
+     * Morsels burned per call to PACE this contract, pinned at accept time like the price is. Null
+     * means the capability declared none and the node's default applies. A burn, never revenue: it
+     * bounds the call RATE, which is the one thing a money budget cannot do.
+     */
+    tollMorsels?: number | null;
     /** The sellable surface when this contract is for an app-tool (Gap 1) or agent-work (Gap 2); absent for a
      *  raw ext-action. App-tool calls route to the pinned interface binding; agent-work settles on delivery. */
     surface?: SellableSurface | null;
@@ -137,6 +143,7 @@ export declare function createEntitlement(storage: Storage, input: {
     rakePercent?: number | null;
     contractRef: string;
     surface?: SellableSurface | null;
+    tollMorsels?: number | null;
     escrowParty?: 'consumer' | 'provider' | null;
     createdBy: string;
     carrySpend?: MeteredEntitlement | null;